MEISEI INDUSTRIAL partnership spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Oct 2025 13:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDSSo-000000002P4-33PY

for dave@doctor.nl2k.ab.ca;

Mon, 27 Oct 2025 13:01:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Oct 2025 13:01:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f66.google.com ([209.85.210.66]:49572)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDQTA-00000000B4W-0jp1

for root@nk.ca;

Mon, 27 Oct 2025 10:53:31 -0600

Received: by mail-ot1-f66.google.com with SMTP id 46e09a7af769-7c52fa75cd3so2054697a34.3

for ; Mon, 27 Oct 2025 09:52:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1761583948; x=1762188748; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=k663dELxiMvs7WepX9oCbNhUsQ4IM1Eeq02vVRHlj8c=;

b=RplvgIuyXO7oIkmwoT64OUrctZ808BxxukgiSHgaX7eVGcUVrsT+/4pYmlZhZ57k4F

j/nK/96mj1/HjEaunaBoDS5OniEJ2Kh5oJMqt6ZVzEQps7EVCKI7Ms8x3J1FBI2XbMzM

twp2XutUcHhsO93XjPGDxci33qQv242pV4u/CTXYok4N+5TZBHaKqZXEhexKaFb7W1g7

hblMLjkfZwRr2+SlGXZv2FRo4u9lPxYxpKmVXvRj5E8vQxzEwn+QHn3xetOmYktNVil/

7yP0dPu+GUNtRHbixb3tEkT6ggdGhrPgZUjc9idhIJtAjgZKnGB5MNRRWJeRwJJaEXxU

+RKg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761583948; x=1762188748;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=k663dELxiMvs7WepX9oCbNhUsQ4IM1Eeq02vVRHlj8c=;

b=kc6hGeomjIkdxZWEC4ISgsO7x110XO8d9W84i8Y7617DfAHkskAfuw1R9RoptQ4dNo

tXRNu/A794llpCdAU46/3QewpaYQx8/mGj8r9PFDvvQP6cRXBbmqP+v8q5CSG5mS1CY1

oZmQeV0dsaTLGYPcWpyzkD7pi5T4rd3ecvEZ3ZKxqumYNKYfr1CtgHDvRZMiuw+aphO9

xl+jRRWuOQcBaEu4bkeUgYVDVzZJRHhzNgb5tylWvFK5RX+rzyrf8igJq1TKkWgXeSJg

oX9RohVtOaLmSjSQkqV1/yLZyIAjywA0j84ImMyeQ2qAQ/I+JihfQXWIpNujqu+vmz/o

AtXg==

X-Gm-Message-State: AOJu0YzGZayrdp51LrlARMGt7I3qvNwM+uwVG+dBZZF4IhXWSu+deEDp

Vsk2kvNKYyMcf4ZaphCqfSCVnmIA5D8uvSklYpRTczcwzF8B8foJ+1w/US9aOcOYDh9553K6wYA

1KqAGZ0G93R4lJERNSs9fRPKTIyqg8JGGFhBD/YFXNA2dOOVROw==

X-Gm-Gg: ASbGncvKCM2QGxfhQEBbKVlSSlXPqLW1Mxy2Cqt7NZKcrz9U18pr4wr90XBsGJiFBqM

UvUov7mi4JVv9tY19vTsZHc6rgmtJgrtCkqJJXqiu4pNenUMk0dnd2IHNtgwI1+Drkky5F50EH2

cONV7LQ3D/TiCMJOEvMCVE/H5ZlrT/k3BGysdnPp78+7sTfi1wroZAxAjsX7kzmPEwdPIjHLpDb

OaZWs25KLjAJ3/gSjeaMGXNEHJb7v53B6gygQ/cat6W0UQCdufNl1Zh0Jc5l1jx229AGVY=

X-Google-Smtp-Source: AGHT+IFI6D+zzAMIOTJ7ODZFMcS3DtXte8/AlCZ15ddhurx9wkmYjDDvzMfoopdoe66RrynB3p/no1YZ1ck1KVjreSQ=

X-Received: by 2002:a05:6808:228a:b0:44d:b213:175 with SMTP id

5614622812f47-44f6bae905bmr173074b6e.66.1761583948054; Mon, 27 Oct 2025

09:52:28 -0700 (PDT)

MIME-Version: 1.0

From: "Ms, Emma De Jong"

Date: Mon, 27 Oct 2025 10:52:16 -0600

X-Gm-Features: AWmQ_bliuatXWw9fSpIKOOn1Gh0ypib5o5NNhEC8oKCFajZbxboFJpt3KCeBhec

Message-ID:

Subject: Explore a Distinguished Role at MEISEI

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000774772064226b955"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Your profile came to my attention during a recruitment

search for a part-time Corporate Partner/Representative role with MEISEI

INDUSTRIAL CO., LTD. The position is structured to accommodate your [...]





Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.66 listed in will-spam-for-food.eu.org]

[209.85.210.66 listed in will-spam-for-food.eu.org]

[209.85.210.66 listed in will-spam-for-food.eu.org]

[209.85.210.66 listed in will-spam-for-food.eu.org]

[209.85.210.66 listed in will-spam-for-food.eu.org]

[209.85.210.66 listed in will-spam-for-food.eu.org]

[209.85.210.66 listed in will-spam-for-food.eu.org]

[209.85.210.66 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.66 listed in dnsbl.ahbl.org]

[209.85.210.66 listed in dnsbl.ahbl.org]

[209.85.210.66 listed in dnsbl.ahbl.org]

[209.85.210.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.66 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[msemmadejong10(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[msemmadejong10(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.66 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.66 listed in list.dnswl.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Explore a Distinguished Role at MEISEI



--000000000000774772064226b955

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



Your profile came to my attention during a recruitment search

for a part-time

Corporate Partner/Representative role with MEISEI INDUSTRIAL CO., LTD. T=

he

position is structured to accommodate your present professional schedule

while offering a rewarding engagement.



If this opportunity interests you, please let me know, and I=E2=80=99ll gla=

dly

share more information.



Warm regards,

Ms, Emma

Independent Recruiter



--000000000000774772064226b955

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

=C2=A0 =C2=A0 =C2=A0 =C2=

=A0 Your profile came to my attention during a recruitment search for a=C2=

=A0part-time Corporate Partner/Representative=C2=A0role wi=

th=C2=A0MEISEI INDUSTRIAL CO., LTD.=C2=A0The position is s=

tructured to accommodate your present professional schedule while offering =

a rewarding engagement.

If this opportunity interests you, please let=

me know, and I=E2=80=99ll gladly share more information.

Warm regard=

s,
Ms, Emma
Independent Recruiter







--000000000000774772064226b955--

Chinese Products spam from Alibaba

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Oct 2025 22:02:00 -0600

Received: from out0-60.static.mail.aliyun.com ([59.82.0.60]:20136)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDEQF-00000000KIu-3wLa

for dave@doctor.nl2k.ab.ca;

Sun, 26 Oct 2025 22:01:41 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.5330188|-1;BR=01201311R361S43rulernew999_84748_2000303;CH=yellow;DM=|CONTINUE|false|;DS=CONTINUE|ham_alarm|0.601543-0.0588434-0.339613;FP=10007248497634739345|2|2|144|0|-1|-1|-1;HT=maildocker-contentspam033023018039;MF=adair@vmrmarket.com;NM=1;PH=DW;RN=251;RT=1;SR=0;TI=W4_0.2.3_v5ForWebDing_212518BD_1761537570125_o7001c112p;

Received: from WS-web (adair@vmrmarket.com[W4_0.2.3_v5ForWebDing_212518BD_1761537570125_o7001c112p] cluster:ay29) at Mon, 27 Oct 2025 11:59:30 +0800

Date: Mon, 27 Oct 2025 11:59:30 +0800

From: "Adair"

Cc: "13542868304" <13542868304@163.com>

Reply-To: "Adair"

Message-ID: <38d52199-5bdc-4741-a79c-3db35843b4a1.adair@vmrmarket.com>

Subject: =?UTF-8?B?QmFja3BhY2sgQ29uY3JldGUgVmlicmF0b3I=?=

X-Mailer: [Alimail-Mailagent][W4_0.2.3][v5ForWebDing][Chrome]

MIME-Version: 1.0

x-aliyun-im-through: {"version":"v1.0"}

x-aliyun-mail-creator: W4_0.2.3_v5ForWebDing_M3LTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzE0MS4wLjAuMCBTYWZhcmkvNTM3LjM2vN

Content-Type: multipart/alternative;

boundary="----=ALIBOUNDARY_1970_7f67c10d3700_68feee22_11f9cf"



------=ALIBOUNDARY_1970_7f67c10d3700_68feee22_11f9cf

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: base64



RGVhci4KV2UgaGF2ZSByZWxlYXNlZCBhIHJlcG9ydCBvbiB0aGUgbGF0ZXN0IEJhY2twYWNrIENv

bmNyZXRlIFZpYnJhdG9yIG1hcmtldCByZXNlYXJjaC4KUGxzIGZlZWwgZnJlZSB0byBjb250YWN0

IHNldmVuQHZpY21hcmtldHJlc2VhcmNoLmNvbSBpZiB5b3UgYXJlIGludGVyZXN0ZWQgaW4gaXQu

IEEgc2FtcGxlIHJlcG9ydCB3aWxsIGJlIHNlbnQgdG8geW91LiAKVGhlIGZvbGxvd2luZyBtYW51

ZmFjdHVyZXJzIGFyZSBjb3ZlcmVkIGluIHRoaXMgcmVwb3J0OgpIaWx0aQpXYWNrZXIgTmV1c29u

Ck1ha2l0YQpEZXdhbHQKTWlsd2F1a2VlIFRvb2wKTXVsdGlxdWlwClRvbWFoYXdrIFBvd2VyCkJh

ZGdlciBNZXRlcgpOb3J0aHJvY2sgSW5kdXN0cmllcwpFTkFSCkR5bmFtaQpNaW5uaWNoIE1hbnVm

YWN0dXJpbmcsIEluYwpEZW52ZXIgQ29uY3JldGUgVmlicmF0b3IKTmluZ2JvIEFjZSBNYWNoaW5l

cnkgQ28uLCBMdGQuCk1hc2FsdGEK4oCm4oCmCkJlc3QgcmVnYXJkcyAvIE1pdCBmcmV1bmRsaWNo

ZW4gR3LDvMOfZW4gLyDmraToh7TmlazmhI8sCnNldmVuCg==

------=ALIBOUNDARY_1970_7f67c10d3700_68feee22_11f9cf

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PGRpdiBjbGFzcz0iX19hbGl5dW5fZW1haWxfYm9keV9ibG9jayI+PGRpdiAgc3R5bGU9ImZvbnQt

ZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBTVEhlaXRpU0MtTGlnaHQsIFNpbVN1biI+PGRpdiAgc3R5

bGU9ImNsZWFyOiBib3RoOyBmb250LWZhbWlseTogVGFob21hLCBBcmlhbCwgU1RIZWl0aVNDLUxp

Z2h0LCBTaW1TdW47Ij48c3BhbiAgc3R5bGU9ImZvbnQtZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBT

VEhlaXRpU0MtTGlnaHQsIFNpbVN1bjsiPjxzcGFuID5EZWFyLjxiciA+PC9zcGFuPjwvc3Bhbj48

ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjog

Ym90aDsiPldlIGhhdmUgcmVsZWFzZWQgYSByZXBvcnQgb24gdGhlIGxhdGVzdCBCYWNrcGFjayBD

b25jcmV0ZSBWaWJyYXRvciBtYXJrZXQgcmVzZWFyY2guPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0i

Y2xlYXI6IGJvdGg7Ij5QbHMgZmVlbCBmcmVlIHRvIGNvbnRhY3Qgc2V2ZW5AdmljbWFya2V0cmVz

ZWFyY2guY29tIGlmIHlvdSBhcmUgaW50ZXJlc3RlZCBpbiBpdC4gQSBzYW1wbGUgcmVwb3J0IHdp

bGwgYmUgc2VudCB0byB5b3UuIDxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+

PGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5UaGUgZm9sbG93aW5nIG1hbnVm

YWN0dXJlcnMgYXJlIGNvdmVyZWQgaW4gdGhpcyByZXBvcnQ6PGJyID48L2Rpdj48ZGl2ICBzdHls

ZT0iY2xlYXI6IGJvdGg7Ij5IaWx0aTxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3Ro

OyI+V2Fja2VyIE5ldXNvbjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+TWFr

aXRhPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5EZXdhbHQ8YnIgPjwvZGl2

PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPk1pbHdhdWtlZSBUb29sPGJyID48L2Rpdj48ZGl2

ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5NdWx0aXF1aXA8YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJj

bGVhcjogYm90aDsiPlRvbWFoYXdrIFBvd2VyPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6

IGJvdGg7Ij5CYWRnZXIgTWV0ZXI8YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsi

Pk5vcnRocm9jayBJbmR1c3RyaWVzPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7

Ij5FTkFSPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5EeW5hbWk8YnIgPjwv

ZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPk1pbm5pY2ggTWFudWZhY3R1cmluZywgSW5j

PGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5EZW52ZXIgQ29uY3JldGUgVmli

cmF0b3I8YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPk5pbmdibyBBY2UgTWFj

aGluZXJ5IENvLiwgTHRkLjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+TWFz

YWx0YTxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+4oCm4oCmPGJyID48L2Rp

dj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVh

cjogYm90aDsiPkJlc3QgcmVnYXJkcyAvIE1pdCBmcmV1bmRsaWNoZW4gR3LDvMOfZW4gLyDmraTo

h7TmlazmhI8sPGJyID48L2Rpdj48ZGl2ID48c3BhbiA+c2V2ZW48YnIgPjwvc3Bhbj48L2Rpdj48

c3BhbiAgc3R5bGU9ImZvbnQtZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBTVEhlaXRpU0MtTGlnaHQs

IFNpbVN1bjsiPjxiciA+PC9zcGFuPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsgZm9u

dC1mYW1pbHk6IFRhaG9tYSwgQXJpYWwsIFNUSGVpdGlTQy1MaWdodCwgU2ltU3VuOyI+PHNwYW4g

IHN0eWxlPSJmb250LWZhbWlseTogVGFob21hLCBBcmlhbCwgU1RIZWl0aVNDLUxpZ2h0LCBTaW1T

dW47Ij48YnIgPjwvc3Bhbj48L2Rpdj48ZGl2ICBjbGFzcz0iYWxpbWFpbC1zaWduYXR1cmUiPjwv

ZGl2PjwvZGl2PjwvZGl2Pg==

------=ALIBOUNDARY_1970_7f67c10d3700_68feee22_11f9cf--

CRA Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sun, 26 Oct 2025 17:34:00 -0600

Received: from smtp.tele.fi ([192.89.123.25]:57268)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDAEi-00000000ByL-0Pnq

for dave@nk.ca;

Sun, 26 Oct 2025 17:33:29 -0600

X-Originating-Ip: [88.193.36.74]

Received: from [127.0.0.1] (iptv-hkibng31-58c124-74.dhcp.inet.fi [88.193.36.74])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)

(No client certificate requested)

by smtp.tele.fi (Postfix) with ESMTPS id 4cvtGD4Mh7z1DSg8

for ; Mon, 27 Oct 2025 01:32:20 +0200 (EET)

Content-Type: text/html

From: Canada Agency Revenue

To: dave@nk.ca

Subject: New mail from the Canada Revenue Agency

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Sun, 26 Oct 2025 23:32:19 +0000

MIME-Version: 1.0

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Notice of Assessment Available Your latest Notice of Assessment

is now available through your CRA Secure Portal. Please sign in to view your

assessment details and keep your records up to date to get your refund



Content analysis details: (6.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.89.123.25 listed in dnsbl.ahbl.org]

[192.89.123.25 listed in dnsbl.ahbl.org]

[192.89.123.25 listed in dnsbl.ahbl.org]

[192.89.123.25 listed in dnsbl.ahbl.org]

[88.193.36.74 listed in dnsbl.ahbl.org]

[88.193.36.74 listed in dnsbl.ahbl.org]

[88.193.36.74 listed in dnsbl.ahbl.org]

[88.193.36.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.89.123.25 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.89.123.25 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.89.123.25 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.89.123.25 listed in dnsbl.ahbl.org]

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[192.89.123.25 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[192.89.123.25 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.89.123.25 listed in will-spam-for-food.eu.org]

[192.89.123.25 listed in will-spam-for-food.eu.org]

[192.89.123.25 listed in will-spam-for-food.eu.org]

[192.89.123.25 listed in will-spam-for-food.eu.org]

[192.89.123.25 listed in will-spam-for-food.eu.org]

[192.89.123.25 listed in will-spam-for-food.eu.org]

[192.89.123.25 listed in will-spam-for-food.eu.org]

[192.89.123.25 listed in will-spam-for-food.eu.org]

[88.193.36.74 listed in will-spam-for-food.eu.org]

[88.193.36.74 listed in will-spam-for-food.eu.org]

[88.193.36.74 listed in will-spam-for-food.eu.org]

[88.193.36.74 listed in will-spam-for-food.eu.org]

[88.193.36.74 listed in will-spam-for-food.eu.org]

[88.193.36.74 listed in will-spam-for-food.eu.org]

[88.193.36.74 listed in will-spam-for-food.eu.org]

[88.193.36.74 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[192.89.123.25 listed in sa-accredit.habeas.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[192.89.123.25 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[192.89.123.25 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[192.89.123.25 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} New mail from the Canada Revenue Agency




FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =

MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 700; COLOR: rgb(44,54,=

58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; =

LINE-HEIGHT: 1.2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial" =

align=3Dcenter>3D""
MIRANDE\Desktop\canada.png" align=3Dbaseline>




style=3D"BOX-SIZING: border-box; FONT-SIZE: 1.5em; FONT-FAMILY: Roboto, =

sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; =

TEXT-TRANSFORM: none; FONT-WEIGHT: 700; COLOR: rgb(44,54,58); FONT-STYLE: =

normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: 1.2; =

BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial" =

align=3Dcenter> 




border-box; FONT-SIZE: 1.5em; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE:=

normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 700; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: 1.2; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial" align=3Dcenter>Notice of Assessment =

Available




FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; =

WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400;=

COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =

0px; font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial" =

align=3Dcenter>Your latest 
border-box; FONT-WEIGHT: bolder">Notice of Assessment <=

/SPAN>is now available through your CRA Secure Portal.




FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =

MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,=

58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; =

BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial" =

align=3Dcenter>Please sign in to view your assessment details and keep your=

records up to date to get your refund




style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, =

sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: =

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial;=

text-decoration-style: initial; text-decoration-color: initial" =

align=3Dcenter>
TEXT-DECORATION: none; COLOR: rgb(0,172,255); BACKGROUND-COLOR: =

transparent" href=3D"https://wordpress-1539763-5948490.cloudwaysapps.=

com/xo/" rel=3Dnoreferrer target=3D_blank>Access CRA Portal



FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =

TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =

normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial" align=3Dcenter> 



FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =

TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =

normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial; text-decoration-style: initial; =

text-decoration-color: initial" align=3Dcenter>----------------------------=

----------------------------------------------

Chinese products spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Oct 2025 08:58:31 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDOfx-00000000Hi0-3nkN

for dave@doctor.nl2k.ab.ca;

Mon, 27 Oct 2025 08:58:25 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Oct 2025 08:58:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta43-136.mmglsmd.net ([103.37.43.136]:47169)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDNVt-00000000Gl1-1CWJ

for root@nk.ca;

Mon, 27 Oct 2025 07:44:15 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.srtsteelpipe.com; i=@hn.srtsteelpipe.com; q=dns/txt;

s=umail; t=1761572586; h=content-type : mime-version :

message-id : reply-to : subject : from : to : date :

subject : from : date;

bh=A6U5pydy4Dr9FawSH1cz5LTLRHbwKQKH0ZJc3juqh4s=;

b=CNIKs0GL4YrBk+nU9wo6KpIxqk2GtI3aMJTKkKg5Nm4RtOa4ZOKzPOSM

8DPJl1E5x05h/kI5rA6zJASGPXdDCKfqqcc1xaQCasFYVW3a1SlEphvDfU

Z7TI8xg1c/W3M6VqFGvgQqVp2w/iAmiWAEjzxFlYCWvyR8RE1ZTiTNuIk=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.srtsteelpipe.com (Postfix) with ESMTP id LDeaqwtiNcGB

for ; Mon, 27 Oct 2025 21:43:05 +0800

Content-Type: multipart/mixed; boundary="===============3699687470548491117=="

MIME-Version: 1.0

Message-Id: <20251027214305.60098-{13477:20251027173418-13477-65}-0023096@hn.srtsteelpipe.com>

Reply-to: stephen@threewaysteel.com

Subject: =?utf-8?q?LSAW_and_SMLS_supplier_in_China?=

From: Stephen Zhou

To: root

Date: Mon, 27 Oct 2025 21:43:05 +0800

Mail-ID: 68ff3cb3e1382350580d037e

X-Spam_score: 17.3

X-Spam_score_int: 173

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear root, Greetings from Stephen from THREEWAY STEEL CO,.LTD

in China. We can supply your market with pipes and casings as well as seamless

carbon steel pipes as follows:↓↓↓↓↓↓↓↓↓↓ ☆LSAW Pipe:

API 5L GR.A/GR.B/X42/X46/X52/X56/X60/X65/X70 ASTM A572 G [...]



Content analysis details: (17.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.37.43.136 listed in will-spam-for-food.eu.org]

[103.37.43.136 listed in will-spam-for-food.eu.org]

[103.37.43.136 listed in will-spam-for-food.eu.org]

[103.37.43.136 listed in will-spam-for-food.eu.org]

[103.37.43.136 listed in will-spam-for-food.eu.org]

[103.37.43.136 listed in will-spam-for-food.eu.org]

[103.37.43.136 listed in will-spam-for-food.eu.org]

[103.37.43.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.37.43.136 listed in dnsbl.ahbl.org]

[103.37.43.136 listed in dnsbl.ahbl.org]

[103.37.43.136 listed in dnsbl.ahbl.org]

[103.37.43.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.37.43.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.37.43.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.37.43.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.37.43.136 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.37.43.136 listed in bb.barracudacentral.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: count.threeway-pipe.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: threeway-pipe.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} =?utf-8?q?LSAW_and_SMLS_supplier_in_China?=



--===============3699687470548491117==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PGh0bWw+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxNHB4OyI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt

aWx5OkFyaWFsLEhlbHZldGljYSxzYW5zLXNlcmlmOyI+PHN0cm9uZz5EZWFyJm5ic3A7cm9vdCw8

L3N0cm9uZz48L3NwYW4+PC9zcGFuPjxiciAvPgo8YnIgLz4KPGI+R3JlZXRpbmdzIGZyb20gU3Rl

cGhlbiBmcm9tIFRIUkVFV0FZIFNURUVMIENPLC5MVEQgaW4gQ2hpbmEuPGJyIC8+CjxiciAvPgpX

ZSBjYW4gc3VwcGx5IHlvdXIgbWFya2V0IHdpdGggcGlwZXMgYW5kIGNhc2luZ3MgYXMgd2VsbCBh

cyBzZWFtbGVzcyBjYXJib24gc3RlZWwgcGlwZXMgYXMgZm9sbG93czomZGFycjsmZGFycjsmZGFy

cjsmZGFycjsmZGFycjsmZGFycjsmZGFycjsmZGFycjsmZGFycjsmZGFycjs8YnIgLz4K4piGTFNB

VyBQaXBlOjxiciAvPgpBUEkgNUwgR1IuQS9HUi5CL1g0Mi9YNDYvWDUyL1g1Ni9YNjAvWDY1L1g3

MCZuYnNwOzxiciAvPgpBU1RNIEE1NzIgR1IuNDIvR1IuNTAvR1IuNTUvR1IuNjAvR1IuNjU8YnIg

Lz4KRU4xMDIxOSBTMjM1SlJIL1MyNzVKMEgvUzI3NUoySC9TMzU1SjBIL1MzNTVKMkg8YnIgLz4K

QVNUTSBBNjcxL0E2NzIgQ0wxMC1DTDEzIENhNTUvQjY1L0I3MC9DNzA8YnIgLz4KW091dHNpZGUg

ZGlhbWV0ZXIgMTY4bW0tMTgyMG1tIHggVGhpY2tuZXNzIDVtbS01MG1tXTwvYj48YnIgLz4KPGlt

ZyBhbHQ9IiIgc3JjPSJodHRwczovL2NvdW50LnRocmVld2F5LXBpcGUuY29tL3RlbXBsYXRlL2Fq

YXhfZ2V0X25ldHdvcmtfYXR0YWNoLz9pZD0xMjM3MTg1JmFtcDt1ZmlsZV9uYW1lPWM2NTdiZDZh

LTliZWItMTFlZi04MTRmLTAwNTA1Njk2N2MzMS05MjUzNC5qcGcmYW1wO2FpZD0xIiBzdHlsZT0i

d2lkdGg6IDExNjNweDsgaGVpZ2h0OiAzMTVweDsiIC8+PGJyIC8+CjxiPuKYhkNhcmJvbiBTdGVl

bCBTZWFtbGVzcyBQaXBlOjxiciAvPgpBUEk1TCBHUi5BL0dSLkIvWDQyL1g0Ni9YNTIvWDU2L1g2

MC9YNzA8YnIgLz4KQVNUTSBBNTMgR1IuQS9HUi5CPGJyIC8+CkVOMTAyMTkgUzIzNUpSIC8gUzI3

NUpSPGJyIC8+CkVOMTAyMTcgUzM1NUpSPGJyIC8+CkpJUyBHMzQ0NCBTMzU1SjBIL1MzNTVKMkg8

YnIgLz4KW08uRC4gMjEuM21tLTY2MG1tIHggVy5ULiAyLjFtbSAtMjJtbV08L2I+PGJyIC8+Cjxp

bWcgaWQ9Il94MDAwMF9pMTAyNyIgc3JjPSJodHRwczovL2NvdW50LnRocmVld2F5LXBpcGUuY29t

L3RlbXBsYXRlL2FqYXhfZ2V0X25ldHdvcmtfYXR0YWNoLz9pZD0xMjM1MjYyJmFtcDt1ZmlsZV9u

YW1lPTYzZTU3MTM0LTk2NjYtMTFlZi1iMGVjLTAwNTA1Njk2N2MzMS0zMDIwNy5qcGcmYW1wO2Fp

ZD0xIiAvPjxiciAvPgo8Yj5JbiBjYXNlIG9mIGFueSBpbnRlcmVzdCwgcGxlYXNlIGNvbnRhY3Qg

dXMuIFdlIGFyZSB3YWl0aW5nIGZvciB5b3VyIGlucXVpcnkuPC9iPgo8aHIgYWxpZ249ImxlZnQi

IG5vc2hhZGU9Im5vc2hhZGUiIHNpemU9IjEiIHdpZHRoPSIyMTAiIC8+PGJyIC8+CjxiPkJlc3Qg

UmVnYXJkczwvYj48YnIgLz4KPGI+U3RlcGhlbiBaaG91PC9iPjxiciAvPgo8Yj5UaHJlZXdheSBT

dGVlbCBDby4sIEx0ZDwvYj48YnIgLz4KPGI+KDwvYj5PZmZpY2U6KDAwODYpNzMxLTg4Njc4NTM0

PGJyIC8+CjxiPig8L2I+RmF4OigwMDg2KTczMS04ODY3ODU3OCZuYnNwO3wmbmJzcDtNb2JpbGUv

V2hhdHNhcHAgOiZuYnNwOys4Ni0xNTYxNjI1MDgxNDxiciAvPgpFbWFpbDpzdGVwaGVuQHRocmVl

d2F5c3RlZWwuY29tPGJyIC8+CjxhIGhyZWY9Imh0dHBzOi8vY291bnQudGhyZWV3YXktcGlwZS5j

b20vbmV3X3RyYWNrL3Q0L056RTBPVFkzTm54OE1qQXlOVEV3TWpjeE56TTBNVGd0TVRNME56Y3RO

alY4ZkhKdmIzUkFibXN1WTJGOGZHMWhhV3gwYnpvdmMzUmxjR2hsYmtCemNuUnpkR1ZsYkhCcGNH

VXVZMjl0Ij4vc3RlcGhlbkBzcnRzdGVlbHBpcGUuY29tPC9hPjxiciAvPgo8Yj48aT5TdGVlbCBN

YWtlcyBhIGJldHRlciBsaWZlIGZvciB0aGUgd29ybGQgITwvaT48L2I+PGJyIC8+CjxiPlA8L2I+

PGI+UGxlYXNlIGNvbnNpZGVyIHRoZSBlbnZpcm9ubWVudCBiZWZvcmUgcHJpbnRpbmcgdGhpcyBl

LW1haWw8L2I+PGltZyBzcmM9Imh0dHBzOi8vY291bnQudGhyZWV3YXktcGlwZS5jb20vbmV3X3Ry

YWNrL3Q0L056RTBPVFkzTm54OE1qQXlOVEV3TWpjeE56TTBNVGd0TVRNME56Y3ROalY4ZkhKdmIz

UkFibXN1WTJFPS5naWYiIGJvcmRlcj0iMCIgd2lkdGg9IjEiIGhlaWdodD0iMSIgc3R5bGU9ImRp

c3BsYXk6bm9uZSIgLz48L2h0bWw+



--===============3699687470548491117==--

Urgency spam from google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Oct 2025 07:32:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDNJi-000000002YD-35nY

for dave@doctor.nl2k.ab.ca;

Mon, 27 Oct 2025 07:31:22 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Oct 2025 07:31:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yx1-f65.google.com ([74.125.224.65]:61556)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDMv9-00000000KcR-1Wu0

for root@doctor.nl2k.ab.ca;

Mon, 27 Oct 2025 07:06:09 -0600

Received: by mail-yx1-f65.google.com with SMTP id 956f58d0204a3-63e393c4a8aso5472750d50.2

for ; Mon, 27 Oct 2025 06:05:12 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1761570306; x=1762175106; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=GI+cn2Q/H/1E5BSbID3bnhAv/zF4UXG3fX/9I4zhefM=;

b=KbwEgtd2hKjyGBCKBKZ+XLZac2DLgasi8ViFWFMBPXyQjEwdEHxYHh6p4zSXG/76wE

hi6RdV4RehILhnflLBceJAAVVq59qQDcf2tznydnCPl3TclD0ubuG8SujpswYKnsyKaT

+1DtSLuWTdujGZazfFZCKBp5LBuVgHHIEbci9594ibnTMRP/s/VmMV0hGbBky34r0CQR

xZv9bzGPqgRUrgweX5h7e8BYSXMJNsvQ/fdZs4pKA81lA2Fywdu5b7GbOPe3ufGOjjbs

sZzeEoOcq7PpXSZj4gFo1mpIXIQN9ANhQX/LI8cY43pZsGn7F7LphI2ZGtOdLcwvnQss

yVHw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761570306; x=1762175106;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=GI+cn2Q/H/1E5BSbID3bnhAv/zF4UXG3fX/9I4zhefM=;

b=jMJOAxK2QZwWwGt0bb1ve1diBIXryNoCoYrCWDOchQqha+gh0CYkM2HL9EvwYmsIFa

YjpXNK8LyrdE2VoOzFFNL8LPAJFg0hv5vuh8Bi5EqqdUKzkdZ888XKtZQ91Bue5GLRx7

V1hBt/nBJHoIov7I0ufxa2qCwwDqTH2u+XTn2reqxAgoE+pnh5Wp4YK9nHLnOL2rPzlf

90wswm21iEsxg50EbmAPhzqIWBO7zM4XqBFpmM88iUiJPuTFBKKICcNTdNnW7LQvhhFB

Yz2kB+rERgrQxfqdm+UM9gj7ZcQyg5iAeDeSWC3fTpV6C8AS7e6UDZ3t/QUSi+M7CRqq

PDzA==

X-Forwarded-Encrypted: i=1; AJvYcCVuiibBtueYHwp4EUPUGAh2NVaVvqAQUeyI6b4xE0Sez+LVra3PkwIA67NgCyS3kaVSR8CZ@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxB0X7RvQ++oQNdm1HqFnQvPuQFvIGkUnuNvkZmk8YLETll/Tvi

ECIqDKEzjEqP58SMaq/LKkwduIj4bfydAz9edBCFHOvK8D6UPG4gFLUumECHaMPWQ4MKP7eWoOg

bLbxb3LJKl6DbW/e0EAOym9gC31KC08o=

X-Gm-Gg: ASbGncv9aHs7CIfG5/gdxC6F2rmayWbDpEdcNL8QYCrxhoqs7wH34jAnrKDbXqwy4/j

lq1tx0LSrODozYP43jkZr4JK/gw3fMibaldYtHlxLY9U+pSIGWNk9xVCriDQQ0UXnKPEtvcNICy

O2IGuSZIxLkt/R9IwFDrJIRSw3Xmi/WZx/wrZFGg/DmQrucnljaI/B73rf/1EtM0s6ZKcWFP9j5

Mgj6GM5Hs9ZjLhKI/o0J5YPhg/2Ugw907EmjNYLSX0qFgNlAlG9+sq9br8batPDpoj8ThlPGzkD

jdCKwR/xU0dwk2Nu2iDbFrEVNCreGCbKh/O6GTUjBe4=

X-Google-Smtp-Source: AGHT+IEosmC3ak+t2Zp4wOsmZWnXrotMGx7OF60MD9Rxt4BSUgq/qacQ8qtbTX3dMWsOH6cWbGyKeSykFiWyQGm7qkg=

X-Received: by 2002:a53:ec4b:0:b0:63e:acf:cd57 with SMTP id

956f58d0204a3-63e16202e00mr22005144d50.60.1761570305784; Mon, 27 Oct 2025

06:05:05 -0700 (PDT)

MIME-Version: 1.0

From: Patricia Ann HOFFMAN

Date: Mon, 27 Oct 2025 13:04:59 +0000

X-Gm-Features: AWmQ_bldDrysfn--d2Xv8VkGgh92jZiXPoGrPIDesjXtOaac1dVmg2o7yvkCznM

Message-ID:

Subject: need to talk with you

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000052be0a0642238c66"

Bcc: root@doctor.nl2k.ab.ca

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Please, I need to talk with you. It's urgent and important.

Regards Patricia A.H Hello, Please, I need to talk with you. It's urgent

and important. Regards Patricia A.H



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.224.65 listed in will-spam-for-food.eu.org]

[74.125.224.65 listed in will-spam-for-food.eu.org]

[74.125.224.65 listed in will-spam-for-food.eu.org]

[74.125.224.65 listed in will-spam-for-food.eu.org]

[74.125.224.65 listed in will-spam-for-food.eu.org]

[74.125.224.65 listed in will-spam-for-food.eu.org]

[74.125.224.65 listed in will-spam-for-food.eu.org]

[74.125.224.65 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.65 listed in dnsbl.ahbl.org]

[74.125.224.65 listed in dnsbl.ahbl.org]

[74.125.224.65 listed in dnsbl.ahbl.org]

[74.125.224.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.65 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.65 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.65 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[irenebougiee(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.65 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?} need to talk with you



--00000000000052be0a0642238c66

Content-Type: text/plain; charset="UTF-8"



Hello,

Please, I need to talk with you.

It's urgent and important.

Regards

Patricia A.H



--00000000000052be0a0642238c66

Content-Type: text/html; charset="UTF-8"



Hello,
Please, I need to talk with you.
It's urgent and important.
Regards
Patricia A.H




--00000000000052be0a0642238c66--

MEISEI INDUSTRIAL partnership spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Oct 2025 07:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDNIf-000000002Q9-2L1o

for dave@doctor.nl2k.ab.ca;

Mon, 27 Oct 2025 07:30:17 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Oct 2025 07:30:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f178.google.com ([209.85.208.178]:42099)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDKL1-000000005el-2T1y

for root@nk.ca;

Mon, 27 Oct 2025 04:20:41 -0600

Received: by mail-lj1-f178.google.com with SMTP id 38308e7fff4ca-378e622e9e3so37500841fa.0

for ; Mon, 27 Oct 2025 03:19:44 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1761560377; x=1762165177; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=pft25vfSAKVqEKmiV8boYJ3vnH8WTDnLzj/AgUgr7+0=;

b=HE8gG5rZ2THjO+I7/bjP1AwjpREOnxXLHwfSMhQfZmJWScpSrFiD6mK1YkLQy/9D8Q

0f0YhGIedNuv7JbUCB2eTv+OYXnPY1Zc+dseRsuGmohfM3UiFO/pQlRAlk8XzJDGj0fh

TAHawVedCEE1oivljOWuST2e7xGrOTEaU/RTVW8GHvEh9gbdxbHDtZVG3ySrAq04o2di

2uB/jHplFjEu2WuM0SNEEmuY+vHoSL+npPfDxmfeaITcjSMZjohH8r2VM45Hk105cGHb

nqt9gwXC9Wg1EExCb7GP2DOejGfHQ0CsfZQM6DHTKU1CqFIOvj1g05NaZTUhPZ0HCWQh

OecA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761560377; x=1762165177;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=pft25vfSAKVqEKmiV8boYJ3vnH8WTDnLzj/AgUgr7+0=;

b=rhdM4WeeURXI6Gxn3FkY68xFjebEsicMpXZNBkP7mvC1FBFip5XP0Kl7rctDenhFBc

P0fkmIMM0X2CbwhgMc0rWPjZktjHe8hoBNZY4ixLbVT1ebNcZbM1eez7KUuCZa5RfDYX

ha+eQaQKH50dHpiXrEO0MpcHTI1zN+HFw5kPUIR89Ntzm4M3ow9o3wRM4MJFGzE6Cr/h

w5E8LARzCDmS0PwZRknRgdAskzEaTi/YD6NpG4ny5Mw/UCYxEYLEh1d9K5ZnLMDoV1jq

BlSbegxQZbLqEpSSKROWomtEGl12SYy3R5GpmmY9ZeSpYi9JSyXEnsoOZOd6qIVROywR

s4Qw==

X-Gm-Message-State: AOJu0YxngccWIsS2DxfWuZHDc6Ac7Bd0IEDxQUf/zKhC/RyGYmJGYj2n

J/ysiO4sOWPI0l5XMGnRorUFrbSF+NEnEo07mLuSuSLMDiB/tp9ZysEHpdS2aUsoSlUmWSDAVGT

rO1BQtWt0sBrRFnMcu3Me/8AH12hJ5yioJnibtTSIew==

X-Gm-Gg: ASbGncun+bEhEPn42/JnfG/gyf7brLH+xkPSm9jUL9UryhpMibRqqYKROVcCWbWjxw3

PaTHhPkDxST7YA6a8MA8EELXJ792CrP8GSQa57k7ciz0sRYFctqoRImrHr/E7glNT0uKJbdA+9P

XKHHscln7R8h+dIw41X38iMBn7hrt+0IN6kk7lbBh6KgMUAFraVwQ9168K10MDmxue9WNziqmrh

4b1RFmJtyXAZPrLnF8eAiEeVy0QiN3uDFi82faL+QyU6+GKPguyenoziaUSmGB9LyXZ/tWpI4+3

X-Google-Smtp-Source: AGHT+IEC2URMl8k8Lxkw5cuOztGlVP4r9tcfNnISbqHAm9yc8VbT6crHQ9lmuulDjJ6/y+0GTwmhqFNTw/yJmtLAAlo=

X-Received: by 2002:a2e:a541:0:b0:378:cddd:ca69 with SMTP id

38308e7fff4ca-378e3e89e42mr31755361fa.18.1761560376666; Mon, 27 Oct 2025

03:19:36 -0700 (PDT)

MIME-Version: 1.0

From: Frank Hato

Date: Mon, 27 Oct 2025 11:19:06 +0100

X-Gm-Features: AWmQ_bkwhg0hNxF0jxx_mp72Tgw75veLmbX9wtI_lRnsMYsb27qjfKeB6dgmmRU

Message-ID:

Subject: Corporate Partnership Offer from MEISEI INDUSTRIAL

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000806eb70642213c30"



--000000000000806eb70642213c30

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



While sourcing qualified professionals, I reviewed your profile

and believe you may be a strong candidate for a part-time Corporate

Partner/Representative position at MEISEI INDUSTRIAL CO., LTD. The

arrangement is flexible and can accommodate your existing work schedule.



Please indicate your interest, and I=E2=80=99ll gladly share further inform=

ation.



Best regards,

Frank Hato

Independent Recruiter



--000000000000806eb70642213c30

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

=C2=A0 =C2=A0 =C2=A0 =C2=

=A0 =C2=A0While sourcing qualified professionals, I reviewed your profile a=

nd believe you may be a strong candidate for a=C2=A0part-time Corpo=

rate Partner/Representative=C2=A0position at=C2=A0MEISEI I=

NDUSTRIAL CO., LTD.=C2=A0The arrangement is flexible and can accom=

modate your existing work schedule.

Please indicate your interest, an=

d I=E2=80=99ll gladly share further information.

Best regards,
Fra=

nk Hato
Independent Recruiter







--000000000000806eb70642213c30--

Instagram promotion spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Oct 2025 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vDNE9-000000000wK-0ofp

for dave@doctor.nl2k.ab.ca;

Mon, 27 Oct 2025 07:25:37 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Oct 2025 07:25:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f197.google.com ([209.85.167.197]:59601)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <32Az_aA8JBT0iZmjnvhZjgnkkhrflZhk.bnlrZkdrmj.bZ@maestro.bounces.google.com>)

id 1vDGRx-000000007Fo-15U3

for sales@nk.ca;

Mon, 27 Oct 2025 00:11:36 -0600

Received: by mail-oi1-f197.google.com with SMTP id 5614622812f47-44e905f7fd4so51000b6e.2

for ; Sun, 26 Oct 2025 23:10:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1761545432; x=1762150232; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=HSIwrsEpm4DCleR7NSQhb+zp7o/p5yxJkUbGksX/cq4=;

b=gC+GBZFmVec1kWnpzET7gjzxHZeQX+wqkV/j2W1qWf0xPjgWGxPRktsT/aES/C8suq

+prIkDcJ7Ob/Y7KLe6Xkz/FPP0onnoQ26tIxQc4YWK9O2Yos75eq6BiLHYox5YqMoHYn

ZUzAVqTsHwQ9rjh7t4LyJyK3jCVuNbj/hEiLoAK8EsdgDDhy5jeCdL69uue//2Z6jFSx

U0Tsr8anDO7iw7sv8aIKRuxL9tzYmjcxru67SxXuQO3UB8PC4cheY45dJZXcO8tjLUx4

nTUbDt6AEgB9OAGFnOEcjqBrSxGbpmFC3k/kf3HvgIxMDSte5gNIfxqM7mZ2q5AaVCE/

ZUEw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761545432; x=1762150232;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=HSIwrsEpm4DCleR7NSQhb+zp7o/p5yxJkUbGksX/cq4=;

b=LA9tOyPPqXDyVLpJTbgl6lJqude01/aIxUDbJk2Q7XQOIVeMDuxVsePuihQD+eRUKY

Tea4U+yu8BDrUEuuPMYvSC1qfoeiqX9cfC5KyLNf/etDrJE5LWGf4GSKv0+J4K6oZ++3

AeMy5CiHWgTS8myIGSqeU3WL0GtOmRlQfVGDj9FgH1vtaaxlCg1T9N7IdjuXlr5hVJuc

wbyzB1n/CquTT2ijBRGtoSIfiDTMI41102A7+aS+u7TSpGe2rUSJPByNG4KRNwQLhqDo

V66FDNtM5WgogikhTFkRCFXaLTVTi95bobsQNTaTRtX9+qIFcH1zORUmBC1aYIkWSP7z

cLKw==

X-Gm-Message-State: AOJu0YzITgJ9QiBGm078uQCOOoTFeupHbsjPuRJSKWEPi618PprB4SIW

ujYDFe1664tUMPzOucX1eEIVtr77jGGEocnrmVpZkwzb1q6pYv0UVzAtxl/th1wgaQrxzQ68L19

NlY4=

X-Google-Smtp-Source: AGHT+IGoGUpPNwAnzP81r56tg2fhwZK55RKTYTPsLJSfgE0UYNoUOH4e/loA0A3ZxttpnMKbsI7bT+t5CA==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:192a:b0:439:b4fb:1d4f with SMTP id

5614622812f47-443a2dd4933mr16101613b6e.10.1761545432237; Sun, 26 Oct 2025

23:10:32 -0700 (PDT)

Message-ID:

Date: Mon, 27 Oct 2025 06:10:32 +0000

Subject: netknowyeg, Get More 2,000 Instagram Followers and 1,000 Tiktok Views here

From: jankowiakhollis@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi Netknow Internet Service,



We are from Instasocial. We found your Email address on your Instagram page

@netknowyeg.



We Offers Instagram Followers, Likes and Views services.



The price is:



-$29 USD for 1,000 Instagram Followers and

- $9 USD For Instagram Post Likes.

- $7 USD For Instagram Video Views



Now you have Limited Followers, maybe you are Interested?



A higher follower count can contribute to increased attendance at events,

whether they are hosted by individuals, businesses, or organizations.

More followers mean more potential attendees..



You can See all packages here :



https://influencenow.shop/



If you have any questions, feel free to ask them here.

I apologize if this message bothers you,





Also, We have Youtube, Tiktok and Twitter services too, Please check it now.

Thank you,

Regards,

E-bike phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Oct 2025 05:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCynj-0000000081m-0on7

for dave@doctor.nl2k.ab.ca;

Sun, 26 Oct 2025 05:20:43 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Oct 2025 05:20:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f200.google.com ([209.85.221.200]:50463)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCyYm-000000006M3-3XhK

for doctor@nk.ca;

Sun, 26 Oct 2025 05:05:24 -0600

Received: by mail-vk1-f200.google.com with SMTP id 71dfb90a1353d-557d1d2751cso5702543e0c.1

for ; Sun, 26 Oct 2025 04:04:30 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1761476664; x=1762081464; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=lIqWZ84XPIPz15hohDCKBCPSj6vYDz8fELdw4eqKxD8=;

b=WnI5d9lAzVgrSG4aZxOEBKQwZVQWk5qf1c6Ppwsn8s1jvpJWEthoQqUv6do6pEzSMu

Jmzru1x4+iqyW8c8Wc1VBvVj+IzPPxvB9l5dWACNqMyVKnhuiPtT2d+oNhlC31oTqhaJ

LSLIouRzt6zxgaqQMq1+Rd85PHa2Xo4TzbeEDHnJsYqGI1G/xGGH+ieR2xuqvhbPV5SG

964RF6TYvPQmsGsKBmC/gjrYyS+iRdUICNSfonf7+f7YaZWisY2FLQ8x6dmxvRTlyA0p

hJT849O+PYac8JBI0dq+ekXtxNsREGYlC3Qgn+x4Kvmcy1ARKIviMlz7A/DhQFY2h633

XbCQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761476664; x=1762081464;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=lIqWZ84XPIPz15hohDCKBCPSj6vYDz8fELdw4eqKxD8=;

b=mNpQ7OT1F+hbR87ShzspdzzMy9UfH8pH2Q1ZSJzgpacB341Fff9oFfGdhmtk2V3EjI

QANEFMcnsH3HmeDgmzQLKR0Ckl1wdQuSV39GDEMs5NvS2CEsI/hjHU2ma8ajOfoWd1Cl

sKhTC85P2NLwquMO26V2AcwK+pB2iis5o8Fz8mF7fIxwXxfGocIFCvOTXGVL5kukpvFx

lcHxu2JI0ZTDaKY5XO41y1xC8/avjny1wAeOjcHJ8/wGRO1SlM299UKkh59Ynlx4aJN2

OhAQUcFsVjQLtTWFgdie8p9OsQwZowbpSHK/a9ZlCtq7/+MdyOuU8ew115smM1JI4nm9

5CzA==

X-Gm-Message-State: AOJu0YxRLA7laJ2ohbGU56K5P5f0sGp3AM2GDundeNAGmjSIDeXvjFFE

+ginaz32AsENi01qyAqWFzq6AD2F4y5uXdwYvEYg6IKCxT4oWBod0hjpjlqmDxQIOzDIohpH7FM

6Nrswes9EUg==

X-Google-Smtp-Source: AGHT+IE5N3rTBBVkLzryxZ1nz7/CAySFzwtNorGk/hTnWvOskncCmxthOXpkea5hYjNZkVi9Q5VBFlyxhQ/wa3U=

MIME-Version: 1.0

X-Received: by 2002:a05:6122:4695:b0:542:d782:2522 with SMTP id

71dfb90a1353d-5564ef1b76dmr11742534e0c.14.1761476664305; Sun, 26 Oct 2025

04:04:24 -0700 (PDT)

Message-ID: <000000000000db28e406420dbefd@google.com>

Date: Sun, 26 Oct 2025 11:04:24 +0000

Subject: =?UTF-8?B?8J+atOKAjeKZgu+4jyBDb25ncmF0dWxhdGlvbnMsIHlvdXIgSmFzaW9uIEVCNSBSb2FtZQ==?=

=?UTF-8?B?ciBFYmlrZSBpcyB3YWl0aW5nIGZvciB5b3UhIPCfjoE=?=

From: =?UTF-8?Q?Exclusive_Offer_=E2=80=93_Temu?=

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000db28d706420dbefa"

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: It will take you only a minute to receive this fantastic prize!

TAKE A SURVEY AND WIN A REWARD! Jasion EB5 Roamer Ebike



Content analysis details: (10.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.200 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

[209.85.221.200 listed in dnsbl.ahbl.org]

[209.85.221.200 listed in dnsbl.ahbl.org]

[209.85.221.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eblink4.com]

1.8 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: omniwatchsmartwatch26.eblink4.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.200 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} =?UTF-8?B?8J+atOKAjeKZgu+4jyBDb25ncmF0dWxhdGlvbnMsIHlvdXIgSmFzaW9uIEVCNSBSb2FtZQ==?=

=?UTF-8?B?ciBFYmlrZSBpcyB3YWl0aW5nIGZvciB5b3UhIPCfjoE=?=



--000000000000db28d706420dbefa

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



It will take you only a minute to receive this fantastic prize!





TAKE A SURVEY AND WIN A REWARD!



Jasion EB5 Roamer Ebike







Congratulations!



Share your valuable insights and win big! You've been chosen for a quick

survey about store promotions at Temu. By participating, you could win a

Jasion EB5 Roamer Ebike



To claim, simply take this short survey about your experience with Temu.



GET STARTED NOW







If you no longer wish to receive these emails, you may unsubscribe by

clicking here







--000000000000db28d706420dbefa

Content-Type: text/html; charset="UTF-8"

















03































--000000000000db28d706420dbefa--

E-bike phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Oct 2025 05:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCynq-0000000082N-2Gzu

for dave@doctor.nl2k.ab.ca;

Sun, 26 Oct 2025 05:20:50 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Oct 2025 05:20:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f200.google.com ([209.85.221.200]:47507)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCyZN-000000006Qb-3XlE

for sales@nk.ca;

Sun, 26 Oct 2025 05:06:00 -0600

Received: by mail-vk1-f200.google.com with SMTP id 71dfb90a1353d-54a7e0cbb98so8456952e0c.3

for ; Sun, 26 Oct 2025 04:05:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1761476702; x=1762081502; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=D0FXshFxOKpot8/6qjfgVlHAnOYm2LV1hwYnvBCrLm4=;

b=JarvJAeW8W+htlMDuLaMaGoowIBaQFj3sKIpPZB7QdxhY19MwfSjMo65uzZCm8ZMsr

keeZuQJU7hFV+7ri765DLs94m6x+XtqMEcNZofKKusY49Rnz+gUEkQOidQYIK3EfleO1

sn0srG1Dy+pQT2wdShQmg8dzmkMBUg1shU/BrDmpLdP1Q392aiHUppyrjx36PRsJE/qB

4kcJUatcadAl62W4HI6id9xjD3BEsPyTQmBcEZBQvQQUqm8WUVA8oX/XY+WDYQwKH5hs

3u5o0N2L4xSTgnC72i6xPGtU2RQpCkOU6eT8BPqXFbzEEYppfoAqykK22c+eFGWvJLj+

JTvg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761476702; x=1762081502;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=D0FXshFxOKpot8/6qjfgVlHAnOYm2LV1hwYnvBCrLm4=;

b=qRKcCDQCiNZnUFHSHb1b5P/85JYSrrnB/6hRjLz53WyrAZRts6M/QTXIMI7Cza1U3C

ARQD5OhmzR/1tqdvcBEcKlqLssk1sMMnbiu9Yzlv5wK69ueDxV/sNFOHoYDnMUNIQKq+

ImUDTCRNVB0A2zUzsiDlSvM7Xs5nJRt/wiM/UgN30MVsg7DNmfiA2eeeyyPrvZ+lWLWy

DQmk7rdmiO0khEXgTTjTcIbZBDRsEJt4MrZkKYJ6F0GdgSIzsd7ABLlZchHj/hjrZsox

CeAV85kBMyNXGKVSjUzeJusF9TK1uEsYb90QEkvKCLMYu3ZG0RtU+MG0wMjn4PMV4oXE

qwFg==

X-Gm-Message-State: AOJu0YyBOnBvclcRSN9PkAbrzo8imYqYQ5LwL9/NPqL65RHZo5pMcW2i

ecQwXYQzuOLSuUWYn9Y7eGUfX8qqnxDm0idmRRO5vUm8q2BRgwKhfaF4adv3rxAdOTwSCZwXUJ4

aDqzm/uOnag==

X-Google-Smtp-Source: AGHT+IFp7bC3ar3KQEUrYvmFPaa1R1FMUkIov+hnK4tFIH9un9Isw4pcelhwzx7+81L2+UbeIcPN2R80mf8jfm0=

MIME-Version: 1.0

X-Received: by 2002:a05:6122:1807:b0:556:9cb9:65cd with SMTP id

71dfb90a1353d-557cef9363emr2165834e0c.6.1761476702321; Sun, 26 Oct 2025

04:05:02 -0700 (PDT)

Message-ID: <0000000000001f3b2f06420dc171@google.com>

Date: Sun, 26 Oct 2025 11:05:02 +0000

Subject: =?UTF-8?B?8J+atOKAjeKZgu+4jyBDb25ncmF0dWxhdGlvbnMsIHlvdXIgSmFzaW9uIEVCNSBSb2FtZQ==?=

=?UTF-8?B?ciBFYmlrZSBpcyB3YWl0aW5nIGZvciB5b3UhIPCfjoE=?=

From: =?UTF-8?Q?Exclusive_Offer_=E2=80=93_Temu?=

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000001f3b0d06420dc16e"

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: It will take you only a minute to receive this fantastic prize!

TAKE A SURVEY AND WIN A REWARD! Jasion EB5 Roamer Ebike



Content analysis details: (10.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.200 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

[209.85.221.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

[209.85.221.200 listed in dnsbl.ahbl.org]

[209.85.221.200 listed in dnsbl.ahbl.org]

[209.85.221.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.200 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.200 listed in wl.mailspike.net]

1.8 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: omniwatchsmartwatch26.eblink4.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eblink4.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} =?UTF-8?B?8J+atOKAjeKZgu+4jyBDb25ncmF0dWxhdGlvbnMsIHlvdXIgSmFzaW9uIEVCNSBSb2FtZQ==?=

=?UTF-8?B?ciBFYmlrZSBpcyB3YWl0aW5nIGZvciB5b3UhIPCfjoE=?=



--0000000000001f3b0d06420dc16e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



It will take you only a minute to receive this fantastic prize!





TAKE A SURVEY AND WIN A REWARD!



Jasion EB5 Roamer Ebike







Congratulations!



Share your valuable insights and win big! You've been chosen for a quick

survey about store promotions at Temu. By participating, you could win a

Jasion EB5 Roamer Ebike



To claim, simply take this short survey about your experience with Temu.



GET STARTED NOW







If you no longer wish to receive these emails, you may unsubscribe by

clicking here







--0000000000001f3b0d06420dc16e

Content-Type: text/html; charset="UTF-8"

















03































--0000000000001f3b0d06420dc16e--

E-bike phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Oct 2025 05:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCyny-0000000082x-3QtT

for dave@doctor.nl2k.ab.ca;

Sun, 26 Oct 2025 05:20:58 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Oct 2025 05:20:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f199.google.com ([209.85.221.199]:48209)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCyjq-000000007XU-34wt

for doctor@nl2k.ab.ca;

Sun, 26 Oct 2025 05:16:48 -0600

Received: by mail-vk1-f199.google.com with SMTP id 71dfb90a1353d-54a7c3c3157so1863485e0c.0

for ; Sun, 26 Oct 2025 04:15:56 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1761477350; x=1762082150; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=WIJGpk8jWAWn6XQcoIyOQbiLgYdfBSiNwkgNHQOHss4=;

b=HAGaJriMPUSMITWhJ9J/VOgcwMFHV3IB29b6rSeC7wcA+cD7yfVZveGwJvbhCMhVwK

TB3hFZHNlDM7Jg+M4uCinJhQGTxHW34FX6k8uDczW5IDUnK0qwUI7rSL1MMTeh4Q1tRC

jy4VGv4GbEbo4OpRfwJrphSCJyAIpvK1LN2UXgkRgAcvmWbXatO78LTjrkqj0ug3qFNO

aHh+PHEK76KnmvthGs7tAy4HG+awEOg4AXOJoGddAtk55DtKiK1LOIQqD5OMbJrRRkXj

H7hxZSufzjoDKeRvUiZV1JfioemxLZ0mqTuz3Q6e1fVyNT5x0FjUcDWstI4BwsfWZKoj

da2g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761477350; x=1762082150;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=WIJGpk8jWAWn6XQcoIyOQbiLgYdfBSiNwkgNHQOHss4=;

b=Pj0JcCMVGIaEJr1y/g+aUXBg1YssRuk2D8UEPe9XKRmTNlVG7EDVu8xDntWBSPssJn

fLQXHSlbeIFM+mqVo0J4xdXvG6KI032SyYqJ0QJP9UcCtSCmSkj7OmW5fblIDxKaq/3b

qXfQ0EpmDbN+PcZUaQn4cqPPflaaTHjp2+L8nqAXN+/2bogwk81xJgoj3RzcvOngemCv

0iWHmg4gKUjf/+bdK+hDfT7KYB5SoNbCXj+naDhfi+8z4f92dsW8Ey0zFgRZHwphd8bK

1mKV6KVrKUHWfVSen36o5rIvcAnO25Onn4Y4QJeMhaz8dJUxhW6ZEV/oWZsAhz0Rhkwc

uAIA==

X-Gm-Message-State: AOJu0Yzs/1WQ8xrFYHGMlgIF/LxxDm0r6hNKXJVenjXVzkRy2FW/zywk

HhbsltG3Ae9o5LEmXRgRnxvsHEAyr79oRQR4UIlx0bfVFqXe/B8AehX+aNbOO9VpP/3o62xCrDY

a5t34LN6IGw==

X-Google-Smtp-Source: AGHT+IH5IoOq342j3oFxkTd+dXUhjXsds2femU8X/DFpSGsatf4DJoSa47S/K7USr5GVHiJCeuFVSxVY0udgkLo=

MIME-Version: 1.0

X-Received: by 2002:a05:6122:4782:b0:557:a2b1:e2ca with SMTP id

71dfb90a1353d-557ceb1705bmr2250357e0c.15.1761477350151; Sun, 26 Oct 2025

04:15:50 -0700 (PDT)

Message-ID: <000000000000bc57ad06420de7cb@google.com>

Date: Sun, 26 Oct 2025 11:15:50 +0000

Subject: =?UTF-8?B?8J+atOKAjeKZgu+4jyBDb25ncmF0dWxhdGlvbnMsIHlvdXIgSmFzaW9uIEVCNSBSb2FtZQ==?=

=?UTF-8?B?ciBFYmlrZSBpcyB3YWl0aW5nIGZvciB5b3UhIPCfjoE=?=

From: =?UTF-8?Q?Exclusive_Offer_=E2=80=93_Temu?=

To: doctor@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000bc57a006420de7c8"

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: It will take you only a minute to receive this fantastic prize!

TAKE A SURVEY AND WIN A REWARD! Jasion EB5 Roamer Ebike



Content analysis details: (10.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eblink4.com]

1.8 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: omniwatchsmartwatch26.eblink4.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} =?UTF-8?B?8J+atOKAjeKZgu+4jyBDb25ncmF0dWxhdGlvbnMsIHlvdXIgSmFzaW9uIEVCNSBSb2FtZQ==?=

=?UTF-8?B?ciBFYmlrZSBpcyB3YWl0aW5nIGZvciB5b3UhIPCfjoE=?=



--000000000000bc57a006420de7c8

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



It will take you only a minute to receive this fantastic prize!





TAKE A SURVEY AND WIN A REWARD!



Jasion EB5 Roamer Ebike







Congratulations!



Share your valuable insights and win big! You've been chosen for a quick

survey about store promotions at Temu. By participating, you could win a

Jasion EB5 Roamer Ebike



To claim, simply take this short survey about your experience with Temu.



GET STARTED NOW







If you no longer wish to receive these emails, you may unsubscribe by

clicking here







--000000000000bc57a006420de7c8

Content-Type: text/html; charset="UTF-8"

















03































--000000000000bc57a006420de7c8--

DustaClean Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Oct 2025 05:19:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCylZ-000000007oO-3bFG

for dave@doctor.nl2k.ab.ca;

Sun, 26 Oct 2025 05:18:29 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Oct 2025 05:18:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f197.google.com ([209.85.221.197]:49334)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCqVx-000000003Lp-44j7

for doctor@nk.ca;

Sat, 25 Oct 2025 20:29:57 -0600

Received: by mail-vk1-f197.google.com with SMTP id 71dfb90a1353d-5569a2b4244so2000026e0c.2

for ; Sat, 25 Oct 2025 19:29:03 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1761445737; x=1762050537; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=5skPh5tXn8Ee7rIAyhFZoCQnx6dFynLUgmuC9ST5zZk=;

b=eDOPFeJF2m+XRW1ri1iAXnqN7QnEt++WbM03SWzU1A8zOFqsOV/gN2ifmfDrAyKTCO

M74gmCqEpPsWYVGnpo6OoEnCpzPbagNboycQ95P5JGqDyZDqhSG5NxJ5HPgrgm/g0gwx

2RZ1uLclepO2qT82BTctJIGqlJTkF600tPIAbH3fkJfGNn34NIbQBCJWzvBObujJIjbH

uaL2giKJylbm/O+YjcNdVbe/IAKpz4Sau5Ph7YS8T1eJJnVYFHmVN59Kd1BUTPzxOIN5

AD8ZvMvauw6Dz0LoMIcRAewVkbC66lkHQKGOtv6Yki8MvLgm4s4kp2MwhCtW7PKZHSHP

zV5A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761445737; x=1762050537;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=5skPh5tXn8Ee7rIAyhFZoCQnx6dFynLUgmuC9ST5zZk=;

b=xFcLVytRopPayKvcb3+JEmKZvDT8tCO7O80Va2WPZPHTqOwK0Vv824PmyuhLFgnV4T

Jy1GwZyjz+i8TE9aRyp9gTtVDXjw3JRVzk/kPPm+56NYSPXJf6NZVCtiQmKhzx5eMoxm

arl5AIWHVFLb9mavbBWUoC2jLhZspGRajQAV8bk+tBxYFYAGkjb1ktrGBA/hVod0C9DX

WT1Ob9xASN3JSGGjwKuiIWdA+YtCd6Gw/BOnUAki7AyZCPtD11tamhmpBe6B9omtPvZt

gsAFK70c7FDwPqR9syNd+SqTmBRF3q0mrIhVN/eGr4BXjsRvgQKNZ2V4Ob3+MD1WjUzI

WB0A==

X-Gm-Message-State: AOJu0YwdJjq8qKGpRvofDEMYi7qvxTApzvW5UF+oqBBJgn5RMPf94m7L

uYWSBNvdJMcuyYDa46fQdyxSC6HCkkPnPjl9Ra/X7DeJD1UxKJ1yNGBR1kMR1/PdJPujfhJR5zY

W2FQDi/jyEA==

X-Google-Smtp-Source: AGHT+IGt1biTlbrGl4a1jBmXPBd/O+r/PHmkos0QUxx0zVbBrfSqkvZc9maUdczbAkgpH4MSjsN0urL3UKreZek=

MIME-Version: 1.0

X-Received: by 2002:a05:6122:2a45:b0:557:c3b1:a28a with SMTP id

71dfb90a1353d-557ce91c16dmr2054101e0c.5.1761445737675; Sat, 25 Oct 2025

19:28:57 -0700 (PDT)

Message-ID: <0000000000007c3ae00642068bd0@google.com>

Date: Sun, 26 Oct 2025 02:28:57 +0000

Subject: =?UTF-8?Q?=F0=9F=8C=AC=EF=B8=8F_Breathe_Easier_with_DustaClean_=2D_Make_Every_?=

=?UTF-8?Q?Breath_Cleaner?=

From: PureAir Solutions

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000007c3ad80642068bcd"

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: View in browser View in browser



Content analysis details: (8.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.197 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

[209.85.221.197 listed in dnsbl.ahbl.org]

[209.85.221.197 listed in dnsbl.ahbl.org]

[209.85.221.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eblink4.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.197 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=8C=AC=EF=B8=8F_Breathe_Easier_with_DustaClean_=2D_Make_Every_?=

=?UTF-8?Q?Breath_Cleaner?=



--0000000000007c3ad80642068bcd

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



View in browser









--0000000000007c3ad80642068bcd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office" lang=3D"en"=

>

=20

=20

=20

=20

=20


/>=20


1" />=20

=20

=20

=20

=20


0,700" rel=3D"stylesheet" type=3D"text/css" />=20

=20

=20

=20

=20

=20

=20

=20

=20


rmal; background-color: #FFFFFF;" class=3D"body eb-drag-and-drop-builder">=

=20

=20


role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20

=20

=20

=20


=3D"0" role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20


;text-align:center;">=20

=20


last-section mjml-section-eb_bda5cd93-a797-4b86-94b7-0277627795c0" style=3D=

"background:#ffffff;background-color:#ffffff;margin:0px auto;max-width:700p=

x;">=20


cing=3D"0" role=3D"presentation" style=3D"background:#ffffff;background-col=

or:#ffffff;width:100%;">=20

=20

=20

=20

=20

=20


10px 10px;text-align:center;">=20

=20


column-b09accf2-56a0-2305-7be0-c87706a08162" style=3D"font-size:0px;text-al=

ign:left;direction:ltr;display:inline-block;vertical-align:middle;width:100=

%;">=20


ole=3D"presentation" width=3D"100%">=20

=20

=20

=20

=20

=20


0px ;">=20


0" role=3D"presentation" style=3D"" width=3D"100%">=20

=20

=20

=20

=20

=20


56-e86b-4cd5-a4b3-5568baf1712e" style=3D"font-size:0px;padding:0;word-break=

:break-word;">=20


l, sans-serif;font-size:13px;font-weight:normal;line-height:1.6;text-align:=

left;color:#000000;">=20

=20


t/html; charset=3Dutf-8" />=20


e-width, initial-scale=3D1.0" />=20

=20

=20

=20

=20

=20


der=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=

=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #FFFFFF=

;">=20

=20

=20

=20

=20

=20

=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pre=

sentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20

=20


=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presen=

tation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; color: #0000=

00; width: 680px; margin: 0 auto;" width=3D"680">=20

=20

=20

=20

=20

=20


=3D"100%" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-weigh=

t: 400; text-align: left; padding-bottom: 5px; padding-top: 5px; vertical-a=

lign: top;">=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


:center;">
35504115712&nid=3D5003018272768000&" style=3D"text-decoration:none; color: =

#000000; ">View in browser




.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
naws.com/68e6b2e66b470e1b310d5bda/68fd64c13f1457b51603daf4/9c4c23bc28ffb338=

c3151bb9539325cb.original.png" style=3D"display: block; height: auto; borde=

r: 0; width: 100%;max-width:100%;box-sizing: border-box;" width=3D"680" alt=

=3D"" title=3D"" height=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
naws.com/68e6b2e66b470e1b310d5bda/68fd766ba0aca03ba403ed58/9357b50a605ae132=

89410560330a7fe9.original.png" style=3D"display: block; height: auto; borde=

r: 0; width: 100%;max-width:100%;box-sizing: border-box;" width=3D"680" alt=

=3D"" title=3D"" height=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
naws.com/68e6b2e66b470e1b310d5bda/68fd64c110ad88052a0705ca/8b014b7dee0b42ba=

0f438ef96788e22d.original.png" style=3D"display: block; height: auto; borde=

r: 0; width: 100%;max-width:100%;box-sizing: border-box;" width=3D"680" alt=

=3D"" title=3D"" height=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D4839194078478336&nid=3D5003018272768000&" style=

=3D"color: #0000EE; text-decoration: underline;" data-eblinkid=3D"483919407=

8478336">
6b470e1b310d5bda/68fd64c1e549ff3440017e96/5561c154b858d612dc128d117e6cb09c.=

original.png" style=3D"display: block; height: auto; border: 0; width: 100%=

;max-width:100%;box-sizing: border-box;" width=3D"680" alt=3D"" title=3D"" =

height=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pre=

sentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; backgroun=

d-color: #ffffff;">=20

=20

=20

=20

=20

=20

=20


=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presen=

tation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; color: #0000=

00; background-color: #ffffff; width: 680px; margin: 0 auto;" width=3D"680"=

>=20

=20

=20

=20

=20

=20


=3D"100%" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-weigh=

t: 400; text-align: left; padding-bottom: 5px; padding-top: 5px; vertical-a=

lign: top;">=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; text-ali=

gn: center; line-height: 0;">=20

=20

=20

=20

=20

=20


al-align: middle; color: #1e0e4b; font-family: 'Inter', sans-serif; font-si=

ze: 15px; padding-bottom: 5px; padding-top: 5px; text-align: center;">=20

=20
=20
=20

=20
=20

=20
=20

=20
=20

=20





--0000000000007c3ad80642068bcd--

DustaClean Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Oct 2025 05:19:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCylT-000000007nx-0HX2

for dave@doctor.nl2k.ab.ca;

Sun, 26 Oct 2025 05:18:23 -0600

Resent-From: The Doctor

Resent-Date: Sun, 26 Oct 2025 05:18:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f199.google.com ([209.85.221.199]:60551)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCqQ0-000000002bv-20Dk

for doctor@nl2k.ab.ca;

Sat, 25 Oct 2025 20:23:47 -0600

Received: by mail-vk1-f199.google.com with SMTP id 71dfb90a1353d-54a887b39b2so7117305e0c.0

for ; Sat, 25 Oct 2025 19:22:53 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1761445368; x=1762050168; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=yW+lul6+cPx5dQhQoA6HZq0IaSezgLpWQike4nIVb1o=;

b=RzhcU0luyebV2RS7sf4tSAQSi0dsSLh6iNAURF6dpQIpfNK1qDeQBdxlIavni4PQPN

BttY+osTYqboD6UY2KY6GfcxUGitbfaQVtxHPGLiZIqyXNV344q/JGxPaCJ8HGCZGPDp

HSR0YMCq3CMQG6SbElQvK20HtzhEVpgoTC2ur8mXCPaQU3KkKQGny4GDv+xyV9Y9ctgG

Fgyav03dVKNEmb6W8W3pq7wC/gzCPbcedT2LMCxR3sRr+I/lVWdXgHtpGeIX4wHYVl7P

Oky2cO1qVV9lYDL1CzJQBRyMSiEMt+c3dpBtVih8vSdbtSYgwrC27kDikfB1G7hvm8Xt

gm2g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761445368; x=1762050168;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=yW+lul6+cPx5dQhQoA6HZq0IaSezgLpWQike4nIVb1o=;

b=lfrZb8YGN428Eda0GeIINPpnIQJZKERC8KG+A3LlUSvJLC1gXHqc2OxD+lOvasVctp

V3jzg3mbW3E5ayrBGz3R1r/QcMCUwf7D/SQzjKbl9W9PoKA7faoqYxtuOiiKD4O66OXV

1J6gfgdXa00yZ5UuxJA8xbRbvgMqNN9mvMjGYAm7+F8yL9LF5YAeo2L7CaD/Kyk4CLFd

OcK0KPw4PGlXa46Hr9T4Col1Edlf0Y/ki+lj0xmdjgKNFlTfAvtPYdNIjjqKJp6+xV/7

CoBP9WRtkanZJXNhzLkZCvkeY3lsEe8HJ2Eo3vYSh0kCczwH0BMulfHGBwbtr1VAGfVG

SgwA==

X-Gm-Message-State: AOJu0Ywue+xBC7H1DjttFlgwNpfTC8Nzd/376++WmRdUc6f0JPKr4C8y

6xt+b5F5h/4VHEyfM3MrDrpa2c4dwDhBNsPyVHni/LQLb5W7a7I/dcNGxq6IPXLcxs77wRA+BbW

80wWKopsaqg==

X-Google-Smtp-Source: AGHT+IH+N0Hw0KlR0XsSXwkpHPaPQW/9krjI0DJfulwQfHju5xQNtATMCr8cbWoGIGmVYQhRufc5YrPpr9InaHU=

MIME-Version: 1.0

X-Received: by 2002:a05:6122:658b:b0:556:9cb9:65cb with SMTP id

71dfb90a1353d-5569cb9736amr4481896e0c.1.1761445368064; Sat, 25 Oct 2025

19:22:48 -0700 (PDT)

Message-ID: <000000000000746a5c0642067514@google.com>

Date: Sun, 26 Oct 2025 02:22:48 +0000

Subject: =?UTF-8?Q?=F0=9F=8C=AC=EF=B8=8F_Breathe_Easier_with_DustaClean_=2D_Make_Every_?=

=?UTF-8?Q?Breath_Cleaner?=

From: PureAir Solutions

To: doctor@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000746a500642067511"

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: View in browser View in browser



Content analysis details: (8.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eblink4.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.199 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=8C=AC=EF=B8=8F_Breathe_Easier_with_DustaClean_=2D_Make_Every_?=

=?UTF-8?Q?Breath_Cleaner?=



--000000000000746a500642067511

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



View in browser









--000000000000746a500642067511

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office" lang=3D"en"=

>

=20

=20

=20

=20

=20


/>=20


1" />=20

=20

=20

=20

=20


0,700" rel=3D"stylesheet" type=3D"text/css" />=20

=20

=20

=20

=20

=20

=20

=20

=20


rmal; background-color: #FFFFFF;" class=3D"body eb-drag-and-drop-builder">=

=20

=20


role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20

=20

=20

=20


=3D"0" role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20


;text-align:center;">=20

=20


last-section mjml-section-eb_bda5cd93-a797-4b86-94b7-0277627795c0" style=3D=

"background:#ffffff;background-color:#ffffff;margin:0px auto;max-width:700p=

x;">=20


cing=3D"0" role=3D"presentation" style=3D"background:#ffffff;background-col=

or:#ffffff;width:100%;">=20

=20

=20

=20

=20

=20


10px 10px;text-align:center;">=20

=20


column-b09accf2-56a0-2305-7be0-c87706a08162" style=3D"font-size:0px;text-al=

ign:left;direction:ltr;display:inline-block;vertical-align:middle;width:100=

%;">=20


ole=3D"presentation" width=3D"100%">=20

=20

=20

=20

=20

=20


0px ;">=20


0" role=3D"presentation" style=3D"" width=3D"100%">=20

=20

=20

=20

=20

=20


56-e86b-4cd5-a4b3-5568baf1712e" style=3D"font-size:0px;padding:0;word-break=

:break-word;">=20


l, sans-serif;font-size:13px;font-weight:normal;line-height:1.6;text-align:=

left;color:#000000;">=20

=20


t/html; charset=3Dutf-8" />=20


e-width, initial-scale=3D1.0" />=20

=20

=20

=20

=20

=20


der=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=

=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #FFFFFF=

;">=20

=20

=20

=20

=20

=20

=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pre=

sentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20

=20


=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presen=

tation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; color: #0000=

00; width: 680px; margin: 0 auto;" width=3D"680">=20

=20

=20

=20

=20

=20


=3D"100%" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-weigh=

t: 400; text-align: left; padding-bottom: 5px; padding-top: 5px; vertical-a=

lign: top;">=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


:center;">
35504115712&nid=3D5003018272768000&" style=3D"text-decoration:none; color: =

#000000; ">View in browser




.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
naws.com/68e6b2e66b470e1b310d5bda/68fd64c13f1457b51603daf4/9c4c23bc28ffb338=

c3151bb9539325cb.original.png" style=3D"display: block; height: auto; borde=

r: 0; width: 100%;max-width:100%;box-sizing: border-box;" width=3D"680" alt=

=3D"" title=3D"" height=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
naws.com/68e6b2e66b470e1b310d5bda/68fd766ba0aca03ba403ed58/9357b50a605ae132=

89410560330a7fe9.original.png" style=3D"display: block; height: auto; borde=

r: 0; width: 100%;max-width:100%;box-sizing: border-box;" width=3D"680" alt=

=3D"" title=3D"" height=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
naws.com/68e6b2e66b470e1b310d5bda/68fd64c110ad88052a0705ca/8b014b7dee0b42ba=

0f438ef96788e22d.original.png" style=3D"display: block; height: auto; borde=

r: 0; width: 100%;max-width:100%;box-sizing: border-box;" width=3D"680" alt=

=3D"" title=3D"" height=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D4839194078478336&nid=3D5003018272768000&" style=

=3D"color: #0000EE; text-decoration: underline;" data-eblinkid=3D"483919407=

8478336">
6b470e1b310d5bda/68fd64c1e549ff3440017e96/5561c154b858d612dc128d117e6cb09c.=

original.png" style=3D"display: block; height: auto; border: 0; width: 100%=

;max-width:100%;box-sizing: border-box;" width=3D"680" alt=3D"" title=3D"" =

height=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pre=

sentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; backgroun=

d-color: #ffffff;">=20

=20

=20

=20

=20

=20

=20


=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presen=

tation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; color: #0000=

00; background-color: #ffffff; width: 680px; margin: 0 auto;" width=3D"680"=

>=20

=20

=20

=20

=20

=20


=3D"100%" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-weigh=

t: 400; text-align: left; padding-bottom: 5px; padding-top: 5px; vertical-a=

lign: top;">=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; text-ali=

gn: center; line-height: 0;">=20

=20

=20

=20

=20

=20


al-align: middle; color: #1e0e4b; font-family: 'Inter', sans-serif; font-si=

ze: 15px; padding-bottom: 5px; padding-top: 5px; text-align: center;">=20

=20
=20
=20

=20
=20

=20
=20

=20
=20

=20





--000000000000746a500642067511--

DustaClean Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Oct 2025 19:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCpXH-00000000Hik-38SK

for dave@doctor.nl2k.ab.ca;

Sat, 25 Oct 2025 19:27:07 -0600

Resent-From: The Doctor

Resent-Date: Sat, 25 Oct 2025 19:27:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f72.google.com ([209.85.217.72]:53747)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCpHq-00000000G3O-3m2K

for doctor@netknow.ca;

Sat, 25 Oct 2025 19:11:17 -0600

Received: by mail-vs1-f72.google.com with SMTP id ada2fe7eead31-5db1ec1daa9so1910781137.3

for ; Sat, 25 Oct 2025 18:10:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1761441017; x=1762045817; darn=netknow.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=Kud3gH+pnE2nuSxypcuLr3W3vq1pyY/j7Vo0/NvipVA=;

b=RCWZhY1bYeNjglDkJm1igppOTlyBjvN4/x7sW/4uhjfIIxG66p42Z7LWUApthaNqzR

CBJ/wZmIpIQzd4uszwl4zW2dLluurzs4qBUMfmpRm5D+DFmviA3nKgXjDsYj4QZ0gLsj

C4FpjYxFWCuB9RsJTWmyYJp3jn0rN8W5+jl3+6qEQTbe+a6c/X1rf9y9ABVS+ucjlhGD

cDnu98vPPx9sOZtBGREEYeeHquBW1f/YAk6l+0mM/dEi9ngMNMRqe2d6C8L81lb01UGa

ZemnbXVRNpqbGqk6AOF7/66kAty2uwo7piVgBH1d7Mrn5YrHbGFuwvWZ3j15JigqSxfB

+Ljg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761441017; x=1762045817;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Kud3gH+pnE2nuSxypcuLr3W3vq1pyY/j7Vo0/NvipVA=;

b=O0+W1WfVoQKRv/n0GJXpXwTyQGfVCcB1qxxh4r4DYVx6xlETfWN2HedHW+GFb8vnuN

pTXfjhGgQRmS59dkOVkchuFnJ0t8/gWt1PyWxIIYWgIbU17vMVAZRMiM2WRwApJoy/Ox

CzCOhoBnspFXOF0XEYhmr+6WonhUu6NFKNkFmO7On/evP46n+mYdEfXlXRZgdf8E3CER

XaB+30lSThWg09rAtBwnKcGOd+rLiA4OvZ6ft3usfzFFQdZb1lcyfYfUknlvO9e/8dHH

ADgvvm9Jnm9Au6C8H+hVIX0hwBDiZR6aVBDVBA4OXk/biTqw2eQPhUvYMuKEHS7Nu1Nt

rS/w==

X-Gm-Message-State: AOJu0Yz4pvcTJ2UjIRopu4vhfH4trUOsXmVad2mivxzLf3eTmolspz51

xibWkLhfzcV4qnA8LFGVelP2uI+idoraSfgENWAHgWYMcfORjhHdV1+BkvoDPY/O0g2X6Edczj4

Ac+/Njs+PDQ==

X-Google-Smtp-Source: AGHT+IGCyoPVq+OJ8jphh5MLZSxJTYdePBeAkakkcu2ml47suKEz7ngykUVgvvZq1A7OHfolEh59LAvsXHkpQ60=

MIME-Version: 1.0

X-Received: by 2002:a05:6102:5a8c:b0:5db:2fb7:9014 with SMTP id

ada2fe7eead31-5db2fb79210mr3530691137.3.1761441017674; Sat, 25 Oct 2025

18:10:17 -0700 (PDT)

Message-ID: <00000000000026bb7d0642057200@google.com>

Date: Sun, 26 Oct 2025 01:10:17 +0000

Subject: =?UTF-8?Q?=F0=9F=8C=AC=EF=B8=8F_Breathe_Easier_with_DustaClean_=2D_Make_Every_?=

=?UTF-8?Q?Breath_Cleaner?=

From: PureAir Solutions

To: doctor@netknow.ca

Content-Type: multipart/alternative; boundary="00000000000026bb6f06420572fd"

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.72 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

[209.85.217.72 listed in dnsbl.ahbl.org]

[209.85.217.72 listed in dnsbl.ahbl.org]

[209.85.217.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eblink4.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.72 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=8C=AC=EF=B8=8F_Breathe_Easier_with_DustaClean_=2D_Make_Every_?=

=?UTF-8?Q?Breath_Cleaner?=



--00000000000026bb6f06420572fd

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



--00000000000026bb6f06420572fd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office" lang=3D"en"=

>

=20

=20

=20

=20

=20


/>=20


1" />=20

=20

=20

=20

=20


0,700" rel=3D"stylesheet" type=3D"text/css" />=20

=20

=20

=20

=20

=20

=20

=20

=20


rmal; background-color: #FFFFFF;" class=3D"body eb-drag-and-drop-builder">=

=20

=20


role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20

=20

=20

=20


=3D"0" role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20


;text-align:center;">=20

=20


last-section mjml-section-eb_bda5cd93-a797-4b86-94b7-0277627795c0" style=3D=

"background:#ffffff;background-color:#ffffff;margin:0px auto;max-width:700p=

x;">=20


cing=3D"0" role=3D"presentation" style=3D"background:#ffffff;background-col=

or:#ffffff;width:100%;">=20

=20

=20

=20

=20

=20


10px 10px;text-align:center;">=20

=20


column-b09accf2-56a0-2305-7be0-c87706a08162" style=3D"font-size:0px;text-al=

ign:left;direction:ltr;display:inline-block;vertical-align:middle;width:100=

%;">=20


ole=3D"presentation" width=3D"100%">=20

=20

=20

=20

=20

=20


0px ;">=20


0" role=3D"presentation" style=3D"" width=3D"100%">=20

=20

=20

=20

=20

=20


56-e86b-4cd5-a4b3-5568baf1712e" style=3D"font-size:0px;padding:0;word-break=

:break-word;">=20


l, sans-serif;font-size:13px;font-weight:normal;line-height:1.6;text-align:=

left;color:#000000;">=20

=20


t/html; charset=3Dutf-8" />=20


e-width, initial-scale=3D1.0" />=20

=20

=20

=20

=20

=20


der=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=

=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #FFFFFF=

;">=20

=20

=20

=20

=20

=20

=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pre=

sentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20

=20


=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presen=

tation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; color: #0000=

00; width: 680px; margin: 0 auto;" width=3D"680">=20

=20

=20

=20

=20

=20


=3D"100%" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-weigh=

t: 400; text-align: left; padding-bottom: 5px; padding-top: 5px; vertical-a=

lign: top;">=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
/users/BeeFree/beefree-927d761a-8ef1-4e46-8b23-44d0e4d06fd6/Screenshot%2020=

25-10-26%20at%2001-55-22%20DustAClean%20%E2%80%93%20Breathe%20Fresh%20Live%=

20Clean.png" style=3D"display: block; height: auto; border: 0; width: 100%;=

max-width:100%;box-sizing: border-box;" width=3D"680" alt=3D"" title=3D"" h=

eight=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
/users/BeeFree/beefree-927d761a-8ef1-4e46-8b23-44d0e4d06fd6/Wiwiwwiiw.png" =

style=3D"display: block; height: auto; border: 0; width: 100%;max-width:100=

%;box-sizing: border-box;" width=3D"680" alt=3D"" title=3D"" height=3D"auto=

" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
/users/BeeFree/beefree-927d761a-8ef1-4e46-8b23-44d0e4d06fd6/Screenshot%2020=

25-10-26%20at%2001-55-49%20DustAClean%20%E2%80%93%20Breathe%20Fresh%20Live%=

20Clean.png" style=3D"display: block; height: auto; border: 0; width: 100%;=

max-width:100%;box-sizing: border-box;" width=3D"680" alt=3D"" title=3D"" h=

eight=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D4839194078478336&nid=3D5003018272768000&" style=

=3D"color: #0000EE; text-decoration: underline;" data-eblinkid=3D"483919407=

8478336">
efree-927d761a-8ef1-4e46-8b23-44d0e4d06fd6/Screenshot%202025-10-26%20at%200=

1-55-56%20DustAClean%20%E2%80%93%20Breathe%20Fresh%20Live%20Clean.png" styl=

e=3D"display: block; height: auto; border: 0; width: 100%;max-width:100%;bo=

x-sizing: border-box;" width=3D"680" alt=3D"" title=3D"" height=3D"auto" />=

=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pre=

sentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; backgroun=

d-color: #ffffff;">=20

=20

=20

=20

=20

=20

=20


=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presen=

tation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; color: #0000=

00; background-color: #ffffff; width: 680px; margin: 0 auto;" width=3D"680"=

>=20

=20

=20

=20

=20

=20


=3D"100%" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-weigh=

t: 400; text-align: left; padding-bottom: 5px; padding-top: 5px; vertical-a=

lign: top;">=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; text-ali=

gn: center; line-height: 0;">=20

=20

=20

=20

=20

=20


al-align: middle; color: #1e0e4b; font-family: 'Inter', sans-serif; font-si=

ze: 15px; padding-bottom: 5px; padding-top: 5px; text-align: center;">=20

=20
=20
=20

=20
=20

=20
=20

=20
=20

=20





--00000000000026bb6f06420572fd--

DustaClean Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Oct 2025 19:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCpH1-00000000G3X-1eJl

for dave@doctor.nl2k.ab.ca;

Sat, 25 Oct 2025 19:10:19 -0600

Resent-From: The Doctor

Resent-Date: Sat, 25 Oct 2025 19:10:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f72.google.com ([209.85.217.72]:45296)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCpF4-00000000BgV-1etK

for support@nk.ca;

Sat, 25 Oct 2025 19:08:25 -0600

Received: by mail-vs1-f72.google.com with SMTP id ada2fe7eead31-5db22e9a4baso1797673137.2

for ; Sat, 25 Oct 2025 18:07:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1761440846; x=1762045646; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=KsEwf5Vt5N9UUYg/qXbSy2M29mnE8aWIT/JRAaQ9JRo=;

b=ilZ+Rltj1MAxxuxUpMFmVkJ77hpVHDbIyGs9SBz5xA8+68cKKGlq5zJVj0JPo+Lvc6

Q8+CTNFC+hdx2Dvxlt4W2i7r8S8SFJvfwQXLb60MGkrsZz3hyLBMhaVsFWtDT83Uv1dR

Dz2VyCRwVndE4/pwfZQW5Fm2OGnOQn49bVJ91ZihxX8NjXwnCtCWPXfrlemNDH5Ir37X

mFwHI5VGLojGQZInCF47DXeLbaaZWq+tYl57IMdhZxlfjcZPvcNgjXa3q84N9dUxQCwN

kRCD111CG0MTjO2wCleFdon84+OB74Kb/JpqZZnY+Q5wWp4pihw7MFAUzlRzguiS84JI

zt+Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761440846; x=1762045646;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=KsEwf5Vt5N9UUYg/qXbSy2M29mnE8aWIT/JRAaQ9JRo=;

b=uRcY0L/8swL8xPg+T3WVVx/E1ON2H5Uf8O83j9WlGK5eY+32aKVZWpM/CUf2iAlYFV

89stSd4St84JGYMlOXhsh0FVzZ2eaMMadYbRv8P7Z41Omf0B3RjEfzfZK6WIC3Mog771

W1Y4Jqc7tf8iphFhxnOfIk5ljV1OawHv/GExNf8lGh0GTyVWKKIcXBKhNY2FPukCxVOd

y2+QCgd8+QSsUJCh6XzoL/f9PAO3qRFDV/K1MYvxGcPbiUZtcNlYEDdb0WwTUtI6N7Mj

/Sdj8v96dr8RJJOI0L3aq5i8LFbKeDWN9yxZX1symW3oWxn3fYMsTv4FOco/63uktCgF

J8Zg==

X-Gm-Message-State: AOJu0YxWBe4GoSx631PyIbzDQmyTt6VZx+dda+C7sdTJc8UkAJlMdVir

ka0aZQezzIjOjyGpM0zVgWFMeyVcRFIouB+KOK4MQxdr1b/+cgHbfr2j2e7uG+Gl5Eo8pNlzcQF

GAqYJf+BSIg==

X-Google-Smtp-Source: AGHT+IEoH+j7QiO9YdaZKsayNQok82n15t5Yhyp+LHfVk7Akp6frLY5cE41ghkoJDbAzyN3r+j9RkEu5wzF17YM=

MIME-Version: 1.0

X-Received: by 2002:a05:6102:cce:b0:5db:2217:3b63 with SMTP id

ada2fe7eead31-5db2e5b437bmr3265989137.39.1761440846080; Sat, 25 Oct 2025

18:07:26 -0700 (PDT)

Message-ID: <000000000000ec6ba7064205672c@google.com>

Date: Sun, 26 Oct 2025 01:07:26 +0000

Subject: =?UTF-8?Q?=F0=9F=8C=AC=EF=B8=8F_Breathe_Easier_with_DustaClean_=2D_Make_Every_?=

=?UTF-8?Q?Breath_Cleaner?=

From: PureAir Solutions

To: support@nk.ca

Content-Type: multipart/alternative; boundary="000000000000ec6b950642056729"

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.72 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

[209.85.217.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

[209.85.217.72 listed in dnsbl.ahbl.org]

[209.85.217.72 listed in dnsbl.ahbl.org]

[209.85.217.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.72 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eblink4.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.72 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=8C=AC=EF=B8=8F_Breathe_Easier_with_DustaClean_=2D_Make_Every_?=

=?UTF-8?Q?Breath_Cleaner?=



--000000000000ec6b950642056729

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



--000000000000ec6b950642056729

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office" lang=3D"en"=

>

=20

=20

=20

=20

=20


/>=20


1" />=20

=20

=20

=20

=20


0,700" rel=3D"stylesheet" type=3D"text/css" />=20

=20

=20

=20

=20

=20

=20

=20

=20


rmal; background-color: #FFFFFF;" class=3D"body eb-drag-and-drop-builder">=

=20

=20


role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20

=20

=20

=20


=3D"0" role=3D"presentation" style=3D"width:100%;">=20

=20

=20

=20

=20

=20


;text-align:center;">=20

=20


last-section mjml-section-eb_bda5cd93-a797-4b86-94b7-0277627795c0" style=3D=

"background:#ffffff;background-color:#ffffff;margin:0px auto;max-width:700p=

x;">=20


cing=3D"0" role=3D"presentation" style=3D"background:#ffffff;background-col=

or:#ffffff;width:100%;">=20

=20

=20

=20

=20

=20


10px 10px;text-align:center;">=20

=20


column-b09accf2-56a0-2305-7be0-c87706a08162" style=3D"font-size:0px;text-al=

ign:left;direction:ltr;display:inline-block;vertical-align:middle;width:100=

%;">=20


ole=3D"presentation" width=3D"100%">=20

=20

=20

=20

=20

=20


0px ;">=20


0" role=3D"presentation" style=3D"" width=3D"100%">=20

=20

=20

=20

=20

=20


56-e86b-4cd5-a4b3-5568baf1712e" style=3D"font-size:0px;padding:0;word-break=

:break-word;">=20


l, sans-serif;font-size:13px;font-weight:normal;line-height:1.6;text-align:=

left;color:#000000;">=20

=20


t/html; charset=3Dutf-8" />=20


e-width, initial-scale=3D1.0" />=20

=20

=20

=20

=20

=20


der=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=

=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #FFFFFF=

;">=20

=20

=20

=20

=20

=20

=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pre=

sentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20

=20


=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presen=

tation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; color: #0000=

00; width: 680px; margin: 0 auto;" width=3D"680">=20

=20

=20

=20

=20

=20


=3D"100%" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-weigh=

t: 400; text-align: left; padding-bottom: 5px; padding-top: 5px; vertical-a=

lign: top;">=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
/users/BeeFree/beefree-927d761a-8ef1-4e46-8b23-44d0e4d06fd6/Screenshot%2020=

25-10-26%20at%2001-55-22%20DustAClean%20%E2%80%93%20Breathe%20Fresh%20Live%=

20Clean.png" style=3D"display: block; height: auto; border: 0; width: 100%;=

max-width:100%;box-sizing: border-box;" width=3D"680" alt=3D"" title=3D"" h=

eight=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
/users/BeeFree/beefree-927d761a-8ef1-4e46-8b23-44d0e4d06fd6/Wiwiwwiiw.png" =

style=3D"display: block; height: auto; border: 0; width: 100%;max-width:100=

%;box-sizing: border-box;" width=3D"680" alt=3D"" title=3D"" height=3D"auto=

" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D5388635504115712&nid=3D5003018272768000&" target=

=3D"_blank" style=3D"color: #0000EE; text-decoration: underline;" data-ebli=

nkid=3D"5388635504115712">
/users/BeeFree/beefree-927d761a-8ef1-4e46-8b23-44d0e4d06fd6/Screenshot%2020=

25-10-26%20at%2001-55-49%20DustAClean%20%E2%80%93%20Breathe%20Fresh%20Live%=

20Clean.png" style=3D"display: block; height: auto; border: 0; width: 100%;=

max-width:100%;box-sizing: border-box;" width=3D"680" alt=3D"" title=3D"" h=

eight=3D"auto" />=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;">=20

=20

=20

=20

=20

=20


100%;padding-right:0px;padding-left:0px;">=20


=3D"center">=20


=3D"max-width: 680px;">=20


.eblink4.com/openurl?lid=3D4839194078478336&nid=3D5003018272768000&" style=

=3D"color: #0000EE; text-decoration: underline;" data-eblinkid=3D"483919407=

8478336">
efree-927d761a-8ef1-4e46-8b23-44d0e4d06fd6/Screenshot%202025-10-26%20at%200=

1-55-56%20DustAClean%20%E2%80%93%20Breathe%20Fresh%20Live%20Clean.png" styl=

e=3D"display: block; height: auto; border: 0; width: 100%;max-width:100%;bo=

x-sizing: border-box;" width=3D"680" alt=3D"" title=3D"" height=3D"auto" />=

=20

=20
=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pre=

sentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; backgroun=

d-color: #ffffff;">=20

=20

=20

=20

=20

=20

=20


=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presen=

tation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; color: #0000=

00; background-color: #ffffff; width: 680px; margin: 0 auto;" width=3D"680"=

>=20

=20

=20

=20

=20

=20


=3D"100%" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-weigh=

t: 400; text-align: left; padding-bottom: 5px; padding-top: 5px; vertical-a=

lign: top;">=20


width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; text-ali=

gn: center; line-height: 0;">=20

=20

=20

=20

=20

=20


al-align: middle; color: #1e0e4b; font-family: 'Inter', sans-serif; font-si=

ze: 15px; padding-bottom: 5px; padding-top: 5px; text-align: center;">=20

=20
=20
=20

=20
=20

=20
=20

=20
=20

=20





--000000000000ec6b950642056729--

Free Oral-B Dental Kit phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Oct 2025 19:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCpGv-00000000G2r-1Y7U

for dave@doctor.nl2k.ab.ca;

Sat, 25 Oct 2025 19:10:13 -0600

Resent-From: The Doctor

Resent-Date: Sat, 25 Oct 2025 19:10:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f199.google.com ([209.85.221.199]:57615)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vCoyc-000000007PJ-1IpI

for doctor@nk.ca;

Sat, 25 Oct 2025 18:51:25 -0600

Received: by mail-vk1-f199.google.com with SMTP id 71dfb90a1353d-556a28eb409so8026429e0c.3

for ; Sat, 25 Oct 2025 17:50:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1761439825; x=1762044625; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=SOhlVQ2YAeBKLQ3JOBOgte+MfakYGOT/jiUyMHrXLlU=;

b=YNWIyFtvE6aP4/JcAzIFOtqBH0wX2OhdCPcpIPcoPpqGRYSSxxid4WchkLXXoJyLIP

43OkKxw/1lDihXAYONKwpTgRq/jKxxjYZR/aI+p33j9rhTEouu9VJiFSALI+dxdLCfHb

VKn7KT0jZsr2M+hwsQGNgTm8CMyE0YTZdEszBL3TVAi+AglUKvIVbu3s5WLVbM/N7LjK

8s9fspwsG6lz3FhnrlzSyTn3dCv19I4FSeusuuoSOPZ/GRUBfPWI+oa66XXlqhf7dwhR

8N9Ar4hqQW/swu7SGzgll3KQAuXIiBf4oK+6DItdr7vnbklyw8Yv3EIwToKrDEAIVw3/

k25g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1761439825; x=1762044625;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=SOhlVQ2YAeBKLQ3JOBOgte+MfakYGOT/jiUyMHrXLlU=;

b=QHU1c55IGYXWoxk477hBbUybWwjrCimAc7eQ10xEZz3//Q/QZ/n9Ljr9BwlC1q+Mu/

Qlg90uSkohTN81gdBtuh5ValuhCScVHhiADdMd3mW1NDdaghN63Bq9K2KYFtiEuSTBIR

FVeRo4HZMtcPqOA+8Kbfv7CGUaTr0pu3CWKy8TsOuC/JwYC8YMAagsdYqbQ+VjfY5j8D

LucWJv5bWD6KGm1j0gXddmydOyGQ7ytvqH3rFOT2X6YrYhyMhaYIYGLbPuNBYV6m9FYo

+UQ5jukoCVADpFx5N5BVQLYdN8PPdOEYeMiJwvfp5BkfMYXZ/69wEBv51oLv3lNwWuo1

hu6g==

X-Gm-Message-State: AOJu0YykElFMC7cpQfDImWWajIya0PpTsped7wu8oQ0vIjKh+8hmZof/

2R0rQXz4p13wuosjWECyQ6p3FL+TQ5vCmZRbBm5YfWnWbOvvFAYNt9+//r7Tkd3S0v/40JUE3Qh

OwbXUTU/6PA==

X-Google-Smtp-Source: AGHT+IHoTCu8TqAmmUOIRMEhJf7kMeE/BvrEMBnjKubjcNRzA/MmLnMgN3pw2XUcjWhwBG4kVSE/AtUI5L8gu78=

MIME-Version: 1.0

X-Received: by 2002:a05:6122:549:b0:557:d542:6132 with SMTP id

71dfb90a1353d-557d5426638mr1889422e0c.0.1761439825358; Sat, 25 Oct 2025

17:50:25 -0700 (PDT)

Message-ID: <000000000000156e620642052bf3@google.com>

Date: Sun, 26 Oct 2025 00:50:25 +0000

Subject: =?UTF-8?Q?=F0=9F=8E=81_Claim_Your_Free_Oral=2DB_Dental_Kit_=E2=80=93_Exclusive?=

=?UTF-8?Q?_for_You?=

From: Costco Rewards Team

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000156e570642052bf0"

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: View in browser View in browser



Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eblink4.com]

1.8 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: unitedstatecustomerservice25.eblink4.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.199 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?Q?=F0=9F=8E=81_Claim_Your_Free_Oral=2DB_Dental_Kit_=E2=80=93_Exclusive?=

=?UTF-8?Q?_for_You?=



--000000000000156e570642052bf0

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



View in browser











--000000000000156e570642052bf0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






osoft-com:office:office" lang=3D"en">










.0">








: 0; -webkit-text-size-adjust: none; text-size-adjust: none;">


" cellspacing=3D"0" role=3D"presentation" style=3D"mso-table-lspace: 0pt; m=

so-table-rspace: 0pt; background-color: #ffffff;">














" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"mso-ta=

ble-lspace: 0pt; mso-table-rspace: 0pt;">














ellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"mso-table=

-lspace: 0pt; mso-table-rspace: 0pt; color: #000000; width: 735px; margin: =

0 auto;" width=3D"735">












-lspace: 0pt; mso-table-rspace: 0pt; font-weight: 400; text-align: left; pa=

dding-bottom: 5px; padding-top: 5px; vertical-align: top;">


=3D"0" cellpadding=3D"10" cellspacing=3D"0" role=3D"presentation" style=3D"=

mso-table-lspace: 0pt; mso-table-rspace: 0pt;">










t-family: Arial, Helvetica, sans-serif; font-size: 17px; font-weight: 700; =

letter-spacing: normal; line-height: 1.2; text-align: center; margin-top: 0=

; margin-bottom: 0; mso-line-height-alt: 20px;">
eholder" style=3D"word-break: break-word;">
stomerservice25.eblink4.com/openurl?lid=3D4570013361766400&nid=3D5145726481=

596416&" target=3D"_blank" style=3D"text-decoration: none; color: #0b4092;"=

rel=3D"noopener">
word-break: break-word; position: relative;" id=3D"6301d4ce-76a3-43b3-8e97-=

5cb653c2fe5e" data-position=3D"10-0-0" data-qa=3D"tinyeditor-root-element">=

View =

in browser



0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"mso-t=

able-lspace: 0pt; mso-table-rspace: 0pt;">








dding-right:0px;padding-left:0px;">




ef=3D"https://unitedstatecustomerservice25.eblink4.com/openurl?lid=3D457001=

3361766400&nid=3D5145726481596416&" target=3D"_blank">
uffer-media-uploads.s3.amazonaws.com/68f9352b8874449c8403a5f2/68fd3225b15ad=

aaef60ca4f2/97f6fa0f9ded2047c0e9466b94b9995c.original.png" style=3D"display=

: block; height: auto; border: 0; width: 100%;" width=3D"735" alt title hei=

ght=3D"auto">



0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"mso-t=

able-lspace: 0pt; mso-table-rspace: 0pt;">







" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"mso-ta=

ble-lspace: 0pt; mso-table-rspace: 0pt; background-color: #ffffff;">













=09










--000000000000156e570642052bf0--