Quicksearch: Your search for test returned 0 results:

Chinese Products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Sep 2026 14:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x7IKg-00000000PmF-1PRK

for dave@doctor.nl2k.ab.ca;

Thu, 17 Sep 2026 14:03:46 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Sep 2026 14:03:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m93195.xmail.ntesmail.com ([103.126.93.195]:33978)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x7Ghw-00000000Cvz-1kYn

for sales@nk.ca;

Thu, 17 Sep 2026 12:19:53 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_3019656_603043158.1789669125420"

To: sales

Subject: =?UTF-8?B?UmU6VHJ5IGEgTmV3IFByb2R1Y3Qgd2l0aCBMb3cgUmlzayAmIEhpZ2ggUG90ZW50aWFs?=

X-Priority: 3

MIME-Version: 1.0

Received: from jack@dingfengsocks.com( [10.139.5.81] ) by ajax-webmail ( [127.0.0.1] ) ; Fri, 18 Sep 2026 02:18:45 +0800 (GMT+08:00)

From: jack

Date: Fri, 18 Sep 2026 02:18:45 +0800 (GMT+08:00)

X-WM-Tid: 0aa0b097acd9d095kusy51f577813cd8f6

DKIM-Signature: a=rsa-sha256;

b=CX6k+IgCjRPd1Cymt2YD7UynK5bxOPBK2sLQhXmbsNVXP5iKFdAqs267tCzDf9vz+YrXaEp/0tOXyE1+e14pyoZteH+CkJBZZaPzcz4QZDBH1cigm3AkLVJ7I28ik/bRCAFslvScz7YcbdDDdq6m0Y8PXQgZVHR1vtZ0+f9AcX/1fjmyeN5GaqqfNi8iixoUf5zy+HYpX2N5P7QFJZYhrur+83zWhiJADCsDfmn51Xdnwug/z9P+1Jr5IZC9isiTB/JLgeidjk6nvznF7v/nL1UYNXBfgeCW9tYPLaT/qLSzqHm3yiWA0Q/t9KtgxiTeWGSbfc+pwWAYVpQ98r4CFA==; c=relaxed/relaxed; s=default; d=dingfengsocks.com; v=1;

bh=4LSYKL22r/HSq3/Htk75gQApwPUA39TEXmssDQuBop8=;

h=date:mime-version:subject:message-id:from;

Message-ID:



Hi sales,

I hope this email finds you well.

Thank you for subscribing to our newsletter. We're thrilled to have you on board!

I am excited to inform you that we are currently offering a special promotion on our products.If you have any needs, please let me know as soon as possible so I can secure a discounted spot for you.

Thank you for your attention, and I look forward to hearing from you soon.

Best regards,







Maintain your product-savvy edge with . Stay Updated on News



If you prefer to exit, choose Review Communication Options.













On Tue, Sep 15, 2026, jack wrote:



-----Original Message-----

From: jack

Sent Time: Tue, Sep 15, 2026

To: [sales ]

Subject: Try a New Product with Low Risk & High Potential









Unlock continuous updates and new feature announcements at . Enable Alerts



Prefer an empty inbox? Adjust settings at Email Preferences.



Have you considered trying a new product to boost your deals?



Our belief is to provide the best service and the most cost-effective products for small and average-sized retailers. With our low MOQ and flexible support, you can test new designs with extremely low risk. Sometimes, a small attempt can lead to unexpectedly strong deals.



We would be glad to support you with costlessdesign service and help you explore new opportunities.



Looking forward to your reply.





在2026-09-11，jack 写道:



-----原始邮件-----

发件人： jack

发件时间: 2026年09月11日 周五

收件人： [sales ]

主题： Custom Socks – Low MOQ & Free Design Service









Continue receiving fresh tips and features by hitting . Go With Future News



To eliminate this communication, just hit Manage Inbox Flow.



Hi Sales,

I’m Jack, representing a specialized sock factory with 15 years of production history.

We Provide

1.Low minimum Command quantity of Just 50 pairs per design, which is ideal for testing new styles or small businesses.

2.Costless design services to help bring your ideas to existence.

Looking forward your reply.

Best regards,

Jack

What's app: +86-13122045126 Website: CustomizeSocks

Chinese prodcuts spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 16 Sep 2026 14:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6wAO-000000008Cf-47RO

for dave@doctor.nl2k.ab.ca;

Wed, 16 Sep 2026 14:23:40 -0600

Resent-From: The Doctor

Resent-Date: Wed, 16 Sep 2026 14:23:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yx2-f1.google.com ([74.125.224.129]:58392)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6qvo-00000000PkD-3chL

for doctor@doctor.nl2k.ab.ca;

Wed, 16 Sep 2026 08:48:28 -0600

Received: by mail-yx2-f1.google.com with SMTP id 00721157ae682-857cb570f53so22178097b3.1

for ; Wed, 16 Sep 2026 07:47:29 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1789570042; x=1790174842; darn=doctor.nl2k.ab.ca;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=Mit+zluXayZ8hvDxxcBQ1V1d1y9uzsSQsXZga5/oYE8BK2Fmg8JDZTn9iRUUYLP3pP

5kJTgj+95Xq1kfdlvXH2D93LPrNR8J8cTu4DQcSEYC0RmfSbs0wl1gUg8ySWbozaAZsH

+qkUWVML0VZ4D87jSRkUClsBrfPUiid/Bv+c4=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1789570042; x=1790174842;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=LjFxfbX8zBAPM1J22vX9mPtfuRfKwvbfIUzXIYFvMi+IDQy2qGf+g3bR16WnbJ+jNe

uEcUjcLL64sth8OedusA0qOHddK6MlDQVCyrR/MVteRD/llQwA0GGJnZPG72hmW9HwA3

YEwlg8RUxa00wXfp/ExQX8E/QkgrfONFmAv04pQg5aI6u8bqIXtDJ3rFxzkKCCJzj44E

RsZoKsLBH2AWgXRgoxSsvXzMghv2oziysO6DwXOmaZDhZlh4UY2DgWAoy45rRTfOk46w

XZptK6smyrucIf+0sUtiz0uBFOmbNcjM79lP5J14kss0bZEnGba008pCvx/cn789uqlw

hnZw==

X-Gm-Message-State: AFuF++kp/2eL2AICE+BXc8jXO80Y1bS+3jZs40OoYvh49RyIW1lGP176

Qwx95wLxlvOd5rpe4uf0TimilsEbF3O5yEZhNdZw22k1Bl8fs1YcS3qHUvGWbdAd/7WFYc8lKOH

QUFkjNL8=

X-Gm-Gg: AYBFou0VPsrZX4jmDA0TQjSOJGJ4sgTIGcFBgB1y79JnuB+OUP2rLvpIcwrZXLraIzO

5/uV3wfF2A6n8k0A1hpAFSjz6ad1WIzuseko6lT+BIrGo2J0XoxNwpvW3204xOyZTu5uLeL7PE3

R1M4E6Lcgbr7b5a+ki4C6lb+FntgFiWynn5pOF4tQAZX1aWMFEf2Lx9zWLPNixoX36tLA0Yxr1U

JbA0a/ZJZWDo5ar1pL8/8S5Jca2R69EMWXx0OkJKNeyUk/+/oFXOI3AGLLExT6yEO3mLC6spBl1

gb9BW3JSwhaLrTaabLO+p6WFjD2xNVZQrfBfZkMhD13wRBm4EIDyKw6wboCsX355oN4UnFsn9Z6

IPsUSJ8eltzT3Enix7BN+h225ZUBWxznNXM+Sxlv0GXpoiD+59LronLP3Xv+v0DWghs+lLVTJ4R

3F2ZIDD+LVCAhlNCebgxursjMyGfB1YLhSJRGv91IJHCu0tSxdCg6MrJzLTOGsgkmK2kj1N0GzV

+gY7DyGH54a

X-Received: by 2002:a05:690c:4002:b0:873:5c7b:c10c with SMTP id 00721157ae682-89226db16e4mr6551767b3.68.1789568541552;

Wed, 16 Sep 2026 07:22:21 -0700 (PDT)

Received: from myjvajray ([203.88.114.137])

by smtp.gmail.com with ESMTPSA id 00721157ae682-891ee4a5441sm8113427b3.11.2026.09.16.07.22.19

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Wed, 16 Sep 2026 07:22:21 -0700 (PDT)

From: "bella@sanmeng-mould.com"

X-Google-Original-From: "bella@sanmeng-mould.com"

Reply-To:

Message-ID: <45CD2DF6CCB697949A46B1287954B7A2@myjvajray>

To:

Subject: Re: plastic injection and die casting molds and moldings

Date: Wed, 16 Sep 2026 22:21:57 +0800

MIME-Version: 1.0

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: bella@sanmeng-mould.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear , We provide:



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[74.125.224.129 listed in will-spam-for-food.eu.org]

[74.125.224.129 listed in will-spam-for-food.eu.org]

[74.125.224.129 listed in will-spam-for-food.eu.org]

[74.125.224.129 listed in will-spam-for-food.eu.org]

[74.125.224.129 listed in will-spam-for-food.eu.org]

[74.125.224.129 listed in will-spam-for-food.eu.org]

[74.125.224.129 listed in will-spam-for-food.eu.org]

[74.125.224.129 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.129 listed in dnsbl.ahbl.org]

[74.125.224.129 listed in dnsbl.ahbl.org]

[74.125.224.129 listed in dnsbl.ahbl.org]

[74.125.224.129 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.129 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.129 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.129 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.129 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sanmeng-mould.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.129 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.224.129 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.0 FAKE_REPLY_C No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: lxu.idcease.net/96.44.182.133]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: lxu.idcease.net/96.44.182.133]

Subject: {SPAM?} Re: plastic injection and die casting molds and moldings



Dear ,



We provide:



plastic injection and die casting molds and moldings.



 thermoplastic injection molding, overmolding, 2K molding, aluminum & zinc die casting etc.



Competitive prices for exported mold and mass production of production mold.



 Excellent services involving mould design to mould fabrication, from parts to part assembly.



Professional engineering analysis.



 Excellent quality maintained through top-ranking testing machines.



Careful packaging.



 ISO certificate





We value every customer and will respond to any question quickly.



For details information pls check our website: www.sanmeng-mould.com



Looking forward to your soon reply.



Welcome to visit our factory anytime!



Thank you!



--------------------------------------------------------------------------------

Best regards,



Bella

SanMeng Mould Co.,Ltd



Wechat/ WhatsApp: +86-13242975530

Email: bella@sanmeng-mould.com

Website: www.sanmeng-mould.com

Add: NO.45, Jinghai East Rd, Shatou Community, Changan town, Dongguan City, Guangdong Province, 523863, China

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 07:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6T0j-00000000IHz-2wZI

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 07:15:45 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 07:15:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta43-120.mmglsmd.net ([103.37.43.120]:38193)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6Pu2-00000000FN6-16dC

for root@nk.ca;

Tue, 15 Sep 2026 03:56:47 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.shinestarsteel.com; i=@hn.shinestarsteel.com;

q=dns/txt; s=umail; t=1789466149; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=AlDhIAheGcBIaHKeVaL6uYX7NJpDHZcYbyrmd+LV+BI=;

b=uVvlCHMPPtHmBaSaGO8jYnzweqeSHgdfzBbLK2W3YXQzUhRbdz/SxdC9

ieu0uQ4Se+E/0a0sH6IlLCtEct9LBPUuKJqqjE0dyc2Co3bm4HEosJNTch

ZQSi105qBNFOkOxzPyeXP0AHbkJYZ3JzgEfUwyOhSrlNjzGTAYywTaxQA=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.shinestarsteel.com (Postfix) with ESMTP id aexVYOkdFZJw

for ; Tue, 15 Sep 2026 17:52:26 +0800

Content-Type: multipart/mixed; boundary="===============6982747134185555784=="

MIME-Version: 1.0

Message-Id: <20260915175226.38438-{13453:20260915173936-13453-83}-0057849@hn.shinestarsteel.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3A_Threewaysteel_-Boiler_tube_of_power_plant/_Refinery_furna?=

=?utf-8?q?ce_tube=2E?=

From: Sophia-Threewaysteel

To: "www.nk.ca"

Date: Tue, 15 Sep 2026 17:52:26 +0800

Mail-ID: 6aa912d0e1382308d0634afe

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Good day !



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.37.43.120 listed in will-spam-for-food.eu.org]

[103.37.43.120 listed in will-spam-for-food.eu.org]

[103.37.43.120 listed in will-spam-for-food.eu.org]

[103.37.43.120 listed in will-spam-for-food.eu.org]

[103.37.43.120 listed in will-spam-for-food.eu.org]

[103.37.43.120 listed in will-spam-for-food.eu.org]

[103.37.43.120 listed in will-spam-for-food.eu.org]

[103.37.43.120 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.37.43.120 listed in dnsbl.ahbl.org]

[103.37.43.120 listed in dnsbl.ahbl.org]

[103.37.43.120 listed in dnsbl.ahbl.org]

[103.37.43.120 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.37.43.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.37.43.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.37.43.120 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.37.43.120 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: hn.shinestarsteel.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shinestarsteel.com]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns17.xincache.com/112.80.181.45]

[URI: ns18.xincache.com/112.80.181.111]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Re=3A_Threewaysteel_-Boiler_tube_of_power_plant/_Refinery_furna?=

=?utf-8?q?ce_tube=2E?=







Dear Purchasing Manager,



Good day !



This is Sophia from Threeway steel . With 33 years of dedicated experience in the steel pipe industry, Threeway Steel has grown into a comprehensive supplier offering a full product portfolio—from seamless/carbon/alloy pipes to elbows, tees, and flanges—all under one roof.

Our company specializes in seamless tubes made of various high alloy materials.

In response to the needs of the boiler heat exchanger industry, the company has developed ultra-long straight tubes and U-shaped tubes of various materials, with straight tubes up to 30 meters long, as well as boiler tubes such as T91 and 1.4922/X20CrMoV12-1 for power plants. And seamless steel pipes made of ultra-ferritic UNS S44660 stainless steel suitable for condensers in coastal power plants.



PRODUCT CERTIFICATION:

GB / ASTM/ASME / EN / JIS GOST;



APPLICATION:

Boiler tube of power plant/ Refinery furnace tube.



Available standard:

ASTM/ASME ASA213/213M

ASTM/ASME A/SA335/335M

EN10216-2



PRODUCT PICTURES:









PRODUCTION AREA:



Awaiting for your inquiry and only for you to provide perfect products and services. We are committed to become a reliable partner on the road to customer success.





Yours sincerely,



Sophia Zeng

Sales Manager | Industrial Pipe Division



Threeway Steel Co.,Ltd

Tel:+86-731-88736283 Fax:+86-731-88896236

Mobile : +86-13544036536

Email: sophia@threewaysteel.com

Website: www.threewaysteel.com

Skype: zeng.sophia1 Wechat:meiping77



Hunan Steel Industrial Zone, Tianxin Special District,

Changsha City,China



Dutch spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 07:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6Szi-00000000FNW-09wD

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 07:14:42 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 07:14:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f197.google.com ([209.85.221.197]:48555)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <2201405@scarsdale.edu.pk>)

id 1x6MmA-00000000Lj3-1jIX

for doctor@nk.ca;

Tue, 15 Sep 2026 00:36:26 -0600

Received: by mail-vk1-f197.google.com with SMTP id 71dfb90a1353d-5c7c0d2b0aaso1757616e0c.1

for ; Mon, 14 Sep 2026 23:34:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=scarsdale-edu-pk.20251104.gappssmtp.com; s=20251104; t=1789454067; x=1790058867; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=eyYTYTcdn6LSm6y2XjIFbNx1hI56PuSDMxHYBPR5oZg=;

b=oB1dRFs0sRBLsiqEt427bRRy9UYR1iIpYJx/VfixFDb4KaEyPE0Y3n4CW4fJUCJakd

+misRGHGTpmLYByFbZAMDx3WQ4Cu0rHqN1GfIz6XVh3yQ2BA6C7gMz7g/tdyGWK1tvhd

sHxitgJJz7AHUdXoJ5qN/5BMrJZWMpArk1ZJJkkwMGvsYaQ8WVTXcGuobGKsiytm0Y+u

zLjDSvS3BVW8kn8w14iH50HB9oLpK0zNoSdMtnYX6JD1qOaIi6LY+ASnz6lRJz+zFvWq

0mXC3vUrnatBuJQZxFzG3Dr2v8WM+DzQV5ZL6fWuMT30O/+JFtQcEih2BcrGlXpDmpdO

vDOQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1789454067; x=1790058867;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=eyYTYTcdn6LSm6y2XjIFbNx1hI56PuSDMxHYBPR5oZg=;

b=r+XkKS4qWo9nqAWP9XbKitGULslFncAJR48k6CeRZyFvii3OCHl9hRScKV6mm0lbAO

SwA+6iaLMZEqYrautoUm7wSB2w1aI+UrlUsKiQpJK7zBMpyGrye84tYgK03R6SasaflY

ROcLHoERRRHQNheQ1LaoPyN2Q7yk2Wt7DXbKpVlQ4trSJPQ3eSxJ+gU1OpG3tQqnQZ0q

QooOuoEYrXKTlxjvaRSBKbJ7AWBUK2fow3SUxrzpCWQrKQZRJx85XkE70gbRosPxMJs8

M59yICLSfYdgKHgXiP3kBfdWr8I0BOBvCXhGKZTiNzzxgcAqqm5sJ1rRPdrL9vSuY08V

pjNQ==

X-Gm-Message-State: AFuF++n9p65lnsUzyJpG3Zy0ElBlKBlh5wt+VHD+NGeRDtI5A3R177KQ

f2NBQga8NrnrZvM7n9e/72wnwiatEmvjusCUpFP9cZxFKnVOQf+1U/ve10L2szH4N7VCX+7v0Ij

xnrwON7aAaefURzNJk/VrZTFr

MIME-Version: 1.0

X-Received: by 2002:a05:6122:32d0:b0:5c9:72ea:141b with SMTP id

71dfb90a1353d-5c981d701dbmr7449696e0c.6.1789454067181; Mon, 14 Sep 2026

23:34:27 -0700 (PDT)

Message-ID:

Date: Tue, 15 Sep 2026 06:34:27 +0000

Subject: Nog een Autokoelbox voor u apart gehouden

From: Eva Willems <2201405@scarsdale.edu.pk>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000043db1065b7fbed1"

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Beste, Ik hou nog een Autokoelbox voor u apart — we hebben

er een paar liggen die nog niet zijn opgehaald na onze korte klantenenquête.

Het kost u 2 minuutjes: een paar vragen beantwoorden, en de Autokoelbox (koelt

drankjes en boodschappen urenlang, ook zonder stroom) wordt gratis naar u

verstuurd.



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

[209.85.221.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

[209.85.221.197 listed in dnsbl.ahbl.org]

[209.85.221.197 listed in dnsbl.ahbl.org]

[209.85.221.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.197 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: mrsivan.info]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.197 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.197 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Nog een Autokoelbox voor u apart gehouden



--000000000000043db1065b7fbed1

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



QmVzdGUsDQoNCklrIGhvdSBub2cgZWVuIEF1dG9rb2VsYm94IHZvb3IgdSBhcGFydCDigJQgd2Ug

aGViYmVuIGVyIGVlbiBwYWFyIGxpZ2dlbiBkaWUgIA0Kbm9nIG5pZXQgemlqbiBvcGdlaGFhbGQg

bmEgb256ZSBrb3J0ZSBrbGFudGVuZW5xdcOqdGUuDQoNCkhldCBrb3N0IHUgMiBtaW51dXRqZXM6

IGVlbiBwYWFyIHZyYWdlbiBiZWFudHdvb3JkZW4sIGVuIGRlIEF1dG9rb2VsYm94ICANCihrb2Vs

dCBkcmFua2plcyBlbiBib29kc2NoYXBwZW4gdXJlbmxhbmcsIG9vayB6b25kZXIgc3Ryb29tKSB3

b3JkdCBncmF0aXMgIA0KbmFhciB1IHZlcnN0dXVyZC4NCg0KR2VlbiB2ZXJwbGljaHRpbmdlbiwg

Z2VlbiBrb3N0ZW4g4oCUIGdld29vbiBlZW4gYmVkYW5ramUgdm9vciBvbnplIGxlZGVuLg0KDQrC

uyBWdWwgZGUga29ydGUgZW5xdcOqdGUgaW4NCg0KTWV0IHZyaWVuZGVsaWprZSBncm9ldCwNCkV2

YSBXaWxsZW1zDQoNClBTOiB3ZSBob3VkZW4gaGVtIG5vZyBlZW4gcGFhciBkYWdlbiBhcGFydCwg

ZGFhcm5hIGdhYXQgaGlqIG5hYXIgaWVtYW5kICANCmFuZGVycy4NCg0KVSBvbnR2YW5ndCBkaXQg

YmVyaWNodCBvbWRhdCB1dyBhZHJlcyBpbiBvbnMgYmVzdGFuZCBzdGFhdC4NClVpdHNjaHJpanZl

biDCtyBHZWVuIGFhbmJpZWRpbmdlbiBtZWVyIG9udHZhbmdlbg0K

--000000000000043db1065b7fbed1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable










serif;font-size:15px;line-height:1.6;color:#2b2b2b;background:#ffffff;">

Beste,



Ik hou nog een Autokoelbox voor u apart =E2=80=94 we hebben er een paar =

liggen die nog niet zijn opgehaald na onze korte klantenenqu=C3=AAte.



Het kost u 2 minuutjes: een paar vragen beantwoorden, en de Autokoelbox =

(koelt drankjes en boodschappen urenlang, ook zonder stroom) wordt gratis n=

aar u verstuurd.



Geen verplichtingen, geen kosten =E2=80=94 gewoon een bedankje voor onze=

leden.




:#0a5ca8;font-weight:bold;">» Vul de korte enqu=C3=AAte in



Met vriendelijke groet,
Eva Willems



PS: we houden hem nog een paar d=

agen apart, daarna gaat hij naar iemand anders.



U ontvangt dit b=

ericht omdat uw adres in ons bestand staat.



a9a9a;">Uitschrijven ·
7f77dd5e3686fdc" style=3D"color:#9a9a9a;">Geen aanbiedingen meer ontvangen<=

/a>







--000000000000043db1065b7fbed1--

chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 14:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6Cpe-00000000F68-3gqE

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 13:59:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 13:59:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m602.netease.com ([210.79.60.2]:25626)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6BLs-00000000MlT-2KUH

for sales@nk.ca;

Mon, 14 Sep 2026 12:24:37 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_2241221_51701542.1789410205630"

To: sales

Subject: =?UTF-8?B?VHJ5IGEgTmV3IFByb2R1Y3Qgd2l0aCBMb3cgUmlzayAmIEhpZ2ggUG90ZW50aWFs?=

X-Priority: 3

MIME-Version: 1.0

Received: from jack@dingfengsocks.com( [10.139.0.42] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 15 Sep 2026 02:23:25 +0800 (GMT+08:00)

From: jack

Date: Tue, 15 Sep 2026 02:23:25 +0800 (GMT+08:00)

X-WM-Tid: 0aa0a128df8809b2kunma72b7b992d39a7

DKIM-Signature: a=rsa-sha256;

b=OE9ij1PcyYK/ryj/0N5I5/Ru+O3cQ0gdUCJQEGUmUR3vDw9NJdaUyc9uUsuX0VtJ8bwHmxkxr3zfD27144S8tSw0FksNef7de7mOophyCxaTdLU7a3kgLGSnVxmsw7D8o+VHdAYn9GkBDNXDRBvl3HXBoG2ziLGttD25rdNDcGskL1cbW0jMOxZH01naj1m/Yd7Vl+u+3WZ1mk6RKkiTw3JLzp1M8/W/9gx1a62ubgF7K1sx9zdkltoB1ET61xrZwXFu49vH5WKMNXzx+muSVOnX7bIFxDYIKcFryctQaR9UicVQmUIFLx3Wr7C1KXmQdVa7EgsmcQdfbL/X8t5M6Q==; s=default; c=relaxed/relaxed; d=dingfengsocks.com; v=1;

bh=oqLjNMO0+iCl4xUt6Y7LDJEnkl/imbJiHujThgkmDhU=;

h=date:mime-version:subject:message-id:from;

Message-ID:







Unlock continuous updates and new feature announcements at . Enable Alerts



Prefer an empty inbox? Adjust settings at Email Preferences.



Have you considered trying a new product to boost your deals?



Our belief is to provide the best service and the most cost-effective products for small and average-sized retailers. With our low MOQ and flexible support, you can test new designs with extremely low risk. Sometimes, a small attempt can lead to unexpectedly strong deals.



We would be glad to support you with costlessdesign service and help you explore new opportunities.



Looking forward to your reply.





在2026-09-11，jack 写道:



-----原始邮件-----

发件人： jack

发件时间: 2026年09月11日 周五

收件人： [sales ]

主题： Custom Socks – Low MOQ & Free Design Service









Continue receiving fresh tips and features by hitting . Go With Future News



To eliminate this communication, just hit Manage Inbox Flow.



Hi Sales,

I’m Jack, representing a specialized sock factory with 15 years of production history.

We Provide

1.Low minimum Command quantity of Just 50 pairs per design, which is ideal for testing new styles or small businesses.

2.Costless design services to help bring your ideas to existence.

Looking forward your reply.

Best regards,

Jack

What's app: +86-13122045126 Website: CustomizeSocks



Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 13:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6CoI-00000000Cr0-2idz

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 13:57:50 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 13:57:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m82232.xmail.ntesmail.com ([156.224.82.232]:44920)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x68RR-00000000741-13b4

for sales@nk.ca;

Mon, 14 Sep 2026 09:18:24 -0600

Content-Type: multipart/mixed; BOUNDARY="=_Part_2485662_2029197343.1789399015907"

To: sales

Subject: =?UTF-8?B?UmU6IExpbWl0ZWQgTmV3IERpc3RyaWJ1dG9yIFRyaWFsIE9mZmVyLU9VUkVMQSBHUFMgT3V0ZG9vciBzbWFydHdhdGNo?=

X-Priority: 3

MIME-Version: 1.0

Received: from lilian@ourela.com( [10.139.4.149] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 14 Sep 2026 23:16:55 +0800 (GMT+08:00)

From: Lilian

Date: Mon, 14 Sep 2026 23:16:55 +0800 (GMT+08:00)

X-WM-Tid: 0aa0a07e20c200f6kunm4a899ba6320e70

DKIM-Signature: a=rsa-sha256;

b=rOfEn+6oRrArVbjpN5ElkOGjQ/OHHnxAi8SUvNNee4+wgjgPjixgYc92511eA4rhnjaGCYoOWhhuYX/k889QyFMZX2guYU+xDPSWz5xMGi2b09Cwo5ereiNBYJPorcI/VfFRAaroaQPAkEgbwZVu8uFrlm/Zu6UE7iMd0tJSOUA=; s=default; c=relaxed/relaxed; d=ourela.com; v=1;

bh=QYJhZIDyhMps8egnQv/wW2LEWsCbdi/sVgUG7MITklg=;

h=date:mime-version:subject:message-id:from;

Message-ID:





Hi Sales，



This will be my last follow-up regarding OURELA’s UK-designed outdoor GPS smartwatch series, I truly appreciate your time reading this.



To encourage more partners to test our hot-selling outdoor watch line, we’re launching a limited-time trial policy for new distributors this month:

👉 Small trial order flexible MOQ support

👉 Free sample testing for TOP 3 clients who applied

👉 15-month full warranty to eliminate your after-sales risk



Our core product highlights again for your quick reference:

• Multi-satellite dual-band GPS with offline navigation, suitable for hiking, climbing, trail running

• 500mAh super large battery, weeks of daily use without frequent charging

• 5ATM waterproof, titanium/aluminum rugged body, 170+ professional sport modes

• 4 styles covering extreme outdoor & urban daily wear, French Design Award-winning DM76 model

pls check more details enclosed.



I totally understand you receive tons of brand cooperation emails every day, so I keep this message concise.

You only need to reply with one simple word to move forward:

1. “Sample” → I send full specs & sample application form

2. “Call” → I schedule a 10-min quick video demo to show watch GPS function

3. “Not now” → I archive your contact and won’t send further messages temporarily

If you have any questions about product, price or cooperation terms, feel free to list them out,

I will reply with detailed answers immediately.



Look forwards to hearing from you soon!







Lilian



lilian@ourela.com

www.ourela.com

Whatsapp: +8615914183886





在2026-07-22，Lilian 写道:



-----原始邮件-----

发件人： Lilian

发件时间: 2026年07月22日 周三

收件人： [sales ]

主题： New UK-inspired Outdoor GPS Smartwatch brand OURELA Distribution Oppotunity



Dear Sales ,



Hope this email finds you well.

I’m Lilian from OURELA, a UK-rooted outdoor smartwatch brand, writing to introduce our brand-new full series of professional Outdoor GPS Sports Watches, and explore exclusive distributor partnership with your company.



About OURELA

Founded by British designers & outdoor enthusiasts, we fill the market gap: premium rugged outdoor watch performance at mid-range accessible prices. Our core values are high durability, multi-satellite precise positioning, and timeless dual-scenario design (wild adventure + daily urban wear).



We own ISO9001 automated manufacturing factory and independent R&D labs in Shenzhen, and a complete supply chain to guarantee stable quality & healthy profit margins for global partners.



Distributor Exclusive Support

- Ready stock with 3-5 days fast global shipment

- 15-month industry-leading product warranty

- flexible MOQ



The global outdoor wearable market is booming, while mid-range professional GPS watches remain underserved.

OURELA’s “accessible premium” positioning will help you capture adventure enthusiasts segment users easily.

I’ve attached our brand catalog & product spec sheet for your reference. if you are interested for sample testing, pls fell free to let me know.



Best regards,





Lilian



lilian@ourela.com

www.ourela.com

Whatsapp: +8615914183886



Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 07:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x66WC-00000000APL-2Bd3

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 07:14:44 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 07:14:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out196-34.us.a.dm.aliyun.com ([47.90.196.34]:50511)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5zny-00000000C1J-1ov1

for root@nk.ca;

Mon, 14 Sep 2026 00:04:47 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.roofandkeel.ltd:alibabak_WebBatch:526528

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.roofandkeel.ltd; s=aliyun-cn-hangzhou;

t=1789365703; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=Pfz0nG38GhXFsNrwxV/8r3CmUqIwn8DHbeneW9HyEcg=;

b=kqF3HvqyTj8MaK514Vhf2ljHVIyGHfLypc1I9eeXmExFZ1wwJ3VBpoQTDb/jVkz/BkVwaBz439gV1Viz9crNbfpMClN1z1iCWv4GJ9NM+Xw49bIFQ8nNQE804bXoXxQBeaef4JRTVLogscgaueHkQBMcTvkufexL7bJNlTDZjRw=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1789365703; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=Pfz0nG38GhXFsNrwxV/8r3CmUqIwn8DHbeneW9HyEcg=;

b=0b8q7PMtto3gilXCFTxLaJ5t2KKgmiGvkqmcKGMnix9ThRQVsJ4PmaBejb9mJSZjGoEObw/DYXFMK1qwV+gqior/FiHJxSJSx/FJ17kXBoOBnwE69Ol9xwWRy2XSIiwVo3/Sa3w21kP3W68PHaxmP+7bYJmrKq0+R8f0GRMiL+E=

Received: from chitu-hsf(mailfrom:vip@vip.roofandkeel.ltd fp:ma_600000353207050990 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Mon, 14 Sep 2026 13:59:58 +0800

Date: Mon, 14 Sep 2026 13:59:58 +0800

From: "HAIXING Machinery"

To:

Reply-To:

Message-ID: <97647ba5-0cda-4798-8e79-b2e76d8cc8a8@alibaba.com>

Subject: =?UTF-8?B?TWV0YWwgc3RlZWwgY29pbCAtIEhBSVhJTkc=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000353207050991

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madm, While reviewing manufacturers in the metal

pipe sector, I noticed your company work in production metal tube business.

We are a mill based in China, supplying cold-rolled, hot-rolled, and galvanized

s [...]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.196.34 listed in dnsbl.ahbl.org]

[47.90.196.34 listed in dnsbl.ahbl.org]

[47.90.196.34 listed in dnsbl.ahbl.org]

[47.90.196.34 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.196.34 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.196.34 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.196.34 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.196.34 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[47.90.196.34 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[47.90.196.34 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?TWV0YWwgc3RlZWwgY29pbCAtIEhBSVhJTkc=?=



Dear Sir/Madm,


tyle=3D"text-wrap-mode: nowrap;">


ode: nowrap;">While reviewing manufacturers in the metal pipe sector, I notice=

d your company work in production metal tube business. We are a mill based in =

China, supplying cold-rolled, hot-rolled, and galvanized steel coils to fabric=

ators across the world, and I believe we could be a dependable material partne=

r for your team.



pan>

Three things our partners m=

ention most often:


<=

/span>

1=E3=80=81Consistent qual=

ity =E2=80=94 every coil meets [JIS / ASTM / EN] specifications, with mill cer=

tificates and test reports issued before loading. Third-party inspection (SGS,=

BV) can be arranged.

2=E3=

=80=81Reliable supply =E2=80=94 our annual capacity of 150000 tons and long-te=

rm mill allocations keep production slots open year-round, including peak seas=

ons.

3=E3=80=81Responsive=

service =E2=80=94 your dedicated account engineer responds within one busines=

s day, and shipping documentation is prepared ahead of each vessel.

=

If you are planning next quarter's =

material, I can send our specification sheets, a sample packing list, and reco=

rds of recent shipments to [region]. Or, if you prefer, we can arrange a short=

call to walk through your requirements.


-mode: nowrap;">

Whi=

ch would serve you better =E2=80=94 the documentation first, or a quick conver=

sation?


<=

p>Best regards,


le=3D"text-wrap-mode: nowrap;">Jodie 



Fedex phish from sendgrid

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 12 Sep 2026 19:37:26 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5Z9m-00000000AwC-0Lxe

for dave@doctor.nl2k.ab.ca;

Sat, 12 Sep 2026 19:37:22 -0600

Resent-From: The Doctor

Resent-Date: Sat, 12 Sep 2026 19:37:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsv.outbound-mail.sendgrid.net ([159.183.224.104]:13226)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5XO1-000000000J0-26Qr

for root@nk.ca;

Sat, 12 Sep 2026 17:44:11 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sanadoc.ai;

h=content-type:date:from:mime-version:subject:to:cc:content-type:date:

from:subject:to;

s=s1; t=1789256582;

bh=YiXkGXZwutFdxlae/ApxOQO6bPFBXi8szQqAls3dnQI=;

b=YAeYpkMC1fZPAW/09f9KtTzcE7kp4pr7tQdLBihPV0+FImkzOdoOJ9E6DxdSjN3TyunS

POlCVCu2cMDTKxFxVIonNphr2TyfdvQQur2qClT+kG9K065glHRP3purcUzu0qCTjnAHbt

wVPuYAQqv00M4fIdsO9eOdR75GwXhbrWwFUv/ydI+udD+TtVO/iBHCqSCcGJP0GkaQlddx

bPUVEGAB08DwGZh7EBuCX/UACPUYne+4Mdb11BfJjgrVmOq7jSs/AYJv3rycKoBPRBQyym

KvwKGm5zImnlEMYb042oLwjAr+TeF4sJ9vsUbEqB09Rkm4YQj8wt6gSfuNi8Rx7A==

Received: by recvd-canary-78c6b8b795-kqqxx with SMTP id recvd-canary-78c6b8b795-kqqxx-1-6AA5E386-6

2026-09-12 23:43:02.013968544 +0000 UTC m=+3991966.529815867

Received: from NTg3MTE0Njk (unknown)

by geopod-ismtpd-91 (SG) with HTTP

id Q8zZy1YkSEi0jwoAMiM7XA

Sat, 12 Sep 2026 23:43:01.990 +0000 (UTC)

Content-Type: multipart/mixed; boundary=f0dc8a96e36ae1e9f559f2cef4e9835c06daa83dbfd16dc43cfcd1d5d796

Date: Sat, 12 Sep 2026 23:43:02 +0000 (UTC)

From: FedEx Tracking

Mime-Version: 1.0

Message-ID:

Subject: =?UTF-8?B?V2XigJl2ZQ==?= updated your estimated delivery

X-SG-EID:

=?us-ascii?Q?u001=2EQqNlE5al1bvBBtqp7HdPgxedUqGYuBWmx7JGl4mIJfkONCbzFav5kBNU7?=

=?us-ascii?Q?NfhcMVZhJekASQ6H+yOdOD71RFs3DLVBGD8QXJz?=

=?us-ascii?Q?4Lrpkk1C2luZmJ83OnMaFeyRIdJfh3=2Fy7StXtQG?=

=?us-ascii?Q?lv8ap4fw3SOJo6wEHNtWyYQ4kLHhm4vPt8nCeBz?=

=?us-ascii?Q?20Fm+Z4DZosMBkokO92d1fZKkFbz6EoXoYEJ5Ir?=

=?us-ascii?Q?P0opJ8ZLIaRce5NHxdkjlo=3D?=

To: root@nk.ca

X-Entity-ID: u001.xaEaRzI20D/jRB4Z2jjAgA==

X-Spam_score: 18.2

X-Spam_score_int: 182

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FedEx Package Notification FedEx PACKAGE NOTIFICATION A package

has been received at the FedEx facility. Shipping cost: $12.47 USD Tracking

7894 3210 5678 9012 Weight 2.5 kg Service International Priority Reference

INV-2026-00 [...]



Content analysis details: (18.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

[159.183.224.104 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

[159.183.224.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.104 listed in dnsbl.ahbl.org]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.224.104 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?B?V2XigJl2ZQ==?= updated your estimated delivery



--f0dc8a96e36ae1e9f559f2cef4e9835c06daa83dbfd16dc43cfcd1d5d796

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Mime-Version: 1.0












0">

FedEx Package Notification




etica,sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;">




e=3D"background:#f4f6f9;padding:20px 10px;margin:0;">














e=3D"max-width:520px;width:100%;background:#ffffff;border-radius:16px;box-s=

hadow:0 8px 32px rgba(0,0,0,0.10);border:1px solid #e0e3e9;margin:0 auto;">


































0;">












5px;">FedEx
ackground:rgba(255,255,255,0.20);padding:4px 14px;border-radius:20px;letter=

-spacing:0.5px;">PACKAGE NOTIFICATION























px;">

A package has been received at the FedEx facility.

x;">

Shipping cost:
t-size:24px;color:#660099;font-weight:700;">$12.47
lor:#777777;font-size:13px;">USD










<=

/td>







e=3D"margin-top:14px;">


















">


spacing:0.5px;display:block;">Tracking

7894 3210 5678 9012
>
ding-bottom:8px;">


spacing:0.5px;display:block;">Weight

2.5 kg



spacing:0.5px;display:block;">Service

International Priority
ong>


spacing:0.5px;display:block;">Reference

INV-2026-0042










<=

/td>







e=3D"margin-top:6px;">














x;">

Step 1: Pay the shipping fee



#ffffff;padding:12px 32px;border-radius:8px;text-decoration:none;font-size:=

16px;font-weight:600;">Pay Now










<=

/td>







e=3D"margin-top:6px;">




















x;">

Step 2: Sign and return

px;">

After payment, download the attached PDF, sign it, and send it back.

;padding-bottom:6px;">

=E2=80=A2 Download the attached PDF


=E2=80=A2 Sign your name


=E2=80=A2 Reply with the signed PDF










<=

/td>







e=3D"margin-top:6px;">










ize:13px;font-weight:600;">View shipment details





px;border-top:1px solid #e6e9ef;">










;">

Note: Shipping cost of
yle=3D"color:#1a1a1a;">$12.47 USD applies.


Pay, sign, and return the document.











e=3D"max-width:520px;margin-top:12px;">








ine-height:1.6;">

This is a system notification.


© 2026 FedEx. All rights reserved.









h8zctcYLl02ePDFDYybCZHV0JkL1cybi2mg1wCc7b8vdPpN7MmXdjCDOYLZiy9bO2ezd-2B-2Fl=

psxaOEwSYwYez0aMcHZvGQRaTqmaUnRjyhaku75qP9hdBZEIKRaFEeTfFdj2G2LI5xiNBYiTa-2=

FMIUV9M4aRpampLQiRqAdiA0FiXYHyYXhHnXHlV8MX47vZzzI-2FOw-3D-3D" alt=3D"" widt=

h=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;width:1px =

!important;border-width:0 !important;margin-top:0 !important;margin-bottom:=

0 !important;margin-right:0 !important;margin-left:0 !important;padding-top=

:0 !important;padding-bottom:0 !important;padding-right:0 !important;paddin=

g-left:0 !important;"/>



--f0dc8a96e36ae1e9f559f2cef4e9835c06daa83dbfd16dc43cfcd1d5d796

Content-Disposition: attachment; filename="Signature Required for FedEx Shipment.pdf"

Content-Transfer-Encoding: base64

Content-Type: application/pdf; name="Signature Required for FedEx Shipment.pdf"



...

--f0dc8a96e36ae1e9f559f2cef4e9835c06daa83dbfd16dc43cfcd1d5d796--

Lottery spam from Mexico

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 12 Sep 2026 13:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5TPv-00000000PD7-08PF

for dave@doctor.nl2k.ab.ca;

Sat, 12 Sep 2026 13:29:39 -0600

Resent-From: The Doctor

Resent-Date: Sat, 12 Sep 2026 13:29:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [187.217.45.214] (port=58998 helo=titan.profeco.gob.mx)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5RKD-000000006UR-3CmX

for doctor@doctor.nl2k.ab.ca;

Sat, 12 Sep 2026 11:16:08 -0600

Received: from localhost (localhost [127.0.0.1])

by titan.profeco.gob.mx (Postfix) with ESMTP id 4EFCA819F4F;

Sat, 12 Sep 2026 11:14:16 -0600 (CST)

X-Virus-Scanned: by SpamTitan at profeco.gob.mx

Received: from titan.profeco.gob.mx (localhost [127.0.0.1])

by titan.profeco.gob.mx (Postfix) with ESMTP id DE03F819F0D;

Sat, 12 Sep 2026 11:13:35 -0600 (CST)

Authentication-Results: titan.profeco.gob.mx;

dkim=invalid (public key: not available, 0-bit key sha256)

header.d=profeco.gob.mx header.i=@profeco.gob.mx header.b=hi7KOy+F

header.a=-sha256 header.s=correopfco x-bits=0;

x-trusted-ip=pass

Received: from correo.profeco.gob.mx (smtp.profeco.gob.mx [10.4.60.46])

by titan.profeco.gob.mx (Postfix) with ESMTPS id 85489819F35;

Sat, 12 Sep 2026 11:13:33 -0600 (CST)

Content-Language: en-US

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

DKIM-Signature: v=1; a=rsa-sha256; d=profeco.gob.mx; s=correopfco;

c=simple/simple; t=1789233212; h=from:subject:to:date:message-id;

bh=sCi9EWOu6VAVCVgYNSLHLV4WLbRtKCk5+EwPqX9Wcbw=;

b=hi7KOy+FCxVqxXExxy0urLkezCfCo9f+LuMPvMd8Qp8UyKgm5LpMdUtNqQY0PJfhK5e5XdnM6xO

oK3od6BEFM1Wef6Q0bPCkhQQKBSung6v7hYrwVv6bV3zH4vY2WCUHAJ2DHeTYOCjNpWxH0JVghpXy

AjPuoUIPpdchTXTPsq4=

Received: from EXCHANGE01.profeco.gob.mx (10.4.60.46) by

EXCHANGE01.profeco.gob.mx (10.4.60.46) with Microsoft SMTP Server (TLS) id

15.0.1497.48; Sat, 12 Sep 2026 11:13:32 -0600

Received: from EXCHANGE01.profeco.gob.mx ([::1]) by EXCHANGE01.profeco.gob.mx

([::1]) with mapi id 15.00.1497.048; Sat, 12 Sep 2026 11:13:32 -0600

From: Coordinacion General de Educacion y Divulgacion



Subject: RE: Congratulation from Deutsche Postcode Lotterie

Thread-Topic: Congratulation from Deutsche Postcode Lotterie

Thread-Index: AQHdQtoJow+FhTeTmkO5Mc20ByKQGw==

Date: Sat, 12 Sep 2026 17:13:32 +0000

Message-ID: <4c6ea9119fdb49ab837e291e5ed74842@EXCHANGE01.profeco.gob.mx>

Accept-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-exchange-transport-fromentityheader: Hosted

MIME-Version: 1.0

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have won 100,000 euros - claim your prize now via: Postcode2026.de@gmail.com

"Ley General de Protección de Datos Personales en Posesión de Sujetos Obligados.

Artículo 25. Con independencia del tipo de sistema en el que se encuentren

los datos personales o el tipo de tratami [...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[187.217.45.214 listed in will-spam-for-food.eu.org]

[187.217.45.214 listed in will-spam-for-food.eu.org]

[187.217.45.214 listed in will-spam-for-food.eu.org]

[187.217.45.214 listed in will-spam-for-food.eu.org]

[187.217.45.214 listed in will-spam-for-food.eu.org]

[187.217.45.214 listed in will-spam-for-food.eu.org]

[187.217.45.214 listed in will-spam-for-food.eu.org]

[187.217.45.214 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[187.217.45.214 listed in dnsbl.ahbl.org]

[187.217.45.214 listed in dnsbl.ahbl.org]

[187.217.45.214 listed in dnsbl.ahbl.org]

[187.217.45.214 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[187.217.45.214 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[187.217.45.214 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[187.217.45.214 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[187.217.45.214 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[187.217.45.214 listed in bl.score.senderscore.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 LOTS_OF_MONEY Huge... sums of money

1.4 MONEY_NOHTML Lots of money in plain text

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} RE: Congratulation from Deutsche Postcode Lotterie











You have won 100,000 euros - claim your prize now via: Postcode2026.de@gmai=

l.com













"Ley General de Protecci=F3n de Datos Personales en Posesi=F3n de Sujetos O=

bligados. Art=EDculo 25. Con independencia del tipo de sistema en el que se=

encuentren los datos personales o el tipo de tratamiento que se efect=FAe,=

el responsable deber=E1 establecer y mantener las medidas de seguridad de =

car=E1cter administrativo, f=EDsico y t=E9cnico para la protecci=F3n de los=

datos personales contra da=F1o, p=E9rdida, alteraci=F3n, destrucci=F3n o s=

u uso, acceso o tratamiento no autorizado, as=ED como garantizar su confide=

ncialidad, integridad y disponibilidad."

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 12 Sep 2026 08:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5OMI-00000000BT5-1jMc

for dave@doctor.nl2k.ab.ca;

Sat, 12 Sep 2026 08:05:34 -0600

Resent-From: The Doctor

Resent-Date: Sat, 12 Sep 2026 08:05:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f232.google.com ([209.85.214.232]:50232)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5K1C-00000000JAK-34MC

for doctor@doctor.nl2k.ab.ca;

Sat, 12 Sep 2026 03:27:39 -0600

Received: by mail-pl1-f232.google.com with SMTP id d9443c01a7336-2cace91f112so12910585ad.0

for ; Sat, 12 Sep 2026 02:26:41 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=iadmexico.mx; s=google; t=1789205195; x=1789809995; darn=doctor.nl2k.ab.ca;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:reply-to:from:to:date:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=TBc3sZi+5SGQrc6+zlUofWSox6n90oIDQ2mwDPDl7ig=;

b=GFlgx3iHPBfSLM4C5eLKvJ21av0wHmz2mNv5ToKP8IjiNVzjLv8QIlUSdkeG3hB8IZ

d6sDnXiaXbSr1Xjdxx+PKSWmwlat2iVJi39bW7Jn6yEmBLg88oArwzUSeCn9osiUvi5x

GBj5kIvZa7N494sZ++ZoHprzEOnEg2rIjc+RvXDq1Zpu0FO/Wo7EUsaEmNyNJeD72V9p

nIL1YCP2snLeTL7XYgjtkoi3eR8NfbmsTcBsdZ0cfO+sIKJYJfqRUr8IveJeNxr+OPjU

XZzwkUfz87RrpmJCuclhIXPutzFJn65uh2h+srsOj5kAS6L0gCd5B59ejFyNIpIjJuyn

8wGA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1789205195; x=1789809995;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:reply-to:from:to:date:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=TBc3sZi+5SGQrc6+zlUofWSox6n90oIDQ2mwDPDl7ig=;

b=QD2XO8lEKWYWYeo3B0uYqCCGKuLbdNjLMzcxrVTaTG1FOnCIqQ+F//uk0Q130zq6iz

EzhPXE04L3hICWY+e0vHhNX3JoyWyoo27m8hsdQG8SZKKFzdirU+hcknrXCyEX0oQ52B

Y/IuyiIqLEVfdfpy+uNp3UcNglyL8y1nDjs1GxPAZW5U7/v51jD+CYYIoYSVKPCyYIZC

aNYnrvJR1UiLVjcsUYTjqRWXOYR0nhVI2N5BJuj7mhXbiX7e/2iKx7vuFrSgrqZHGoOw

4MsysGPVPqIQGJXVkOB6i5vM9rF46Vla1W/YnvjYfAMDTbNWxCj7/ce3In9HEbA1XECl

6NKg==

X-Forwarded-Encrypted: i=1; AKwUvBxVlDsc7+NRpbGdkcz2fE4fjiu5ZtMcNKfbTwcfqCWXZeVJfr2oYLO+ye2dX7r4prbdTXt2pjo=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++nSSao8+zjIeFbYgycnrpcfzMH1dzDsLenxCH3BloPtqQuWO80K

ZqWY5m5b/KVjdmPPzwzKwZgqOHOnVCJnodS/G8ucVxCWE53+YsIDANw2R4SnJSoToxb3VNHiLlW

WSQzIyQMgoy79C2F6APHZx/FeDwo1ANs0s3pB

X-Gm-Gg: AYBFou15hcKllsJe+7hvX+hb5NJSPZS9UNraUb8wkAcS+VZzvRWrQIXqGZCF7zL0Wiz

LG8m2TDVZ7zGCzjzvQBvvNtHR5E1D0FWqTw3cL6IOuTOAUahBNMDl5ocnSUyT+RCGBVoqzqDgOh

MtfNzv/2K8qaYgYDF9U9hTSAxZIg6tdSSPNPQy8oSSdwTN+NeVvdgoAHJkYYJdSaN+0eJrAlYXw

CL8esgQe0kXHyMW7QgJgCQuydZPkjz3vrqho5VXQcBbyAlajw3l3dhp/w2v14LxF3RQFlQ8nOyF

6JDK1jidswUP/Emf3+0KTkAqu3vdhFN19D8RObBQGmF2CgZnuE9bg28tA2JJQhzSniiM57CpIWP

Jd185q8Tn5eL8PjMyYY18

X-Received: by 2002:a17:90b:4fc3:b0:398:9c0c:7c72 with SMTP id 98e67ed59e1d1-39dbc730ccamr3373108a91.25.1789205195689;

Sat, 12 Sep 2026 02:26:35 -0700 (PDT)

Received: from mail.iadmexico.mx (mail.iadmexico.mx. [34.231.63.135])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39daa7a9f85sm1810992a91.8.2026.09.12.02.26.35

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Sat, 12 Sep 2026 02:26:35 -0700 (PDT)

X-Relaying-Domain: iadmexico.mx

Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id D18A5140DD7;

Sat, 12 Sep 2026 03:26:32 -0600 (CST)

Date: Sat, 12 Sep 2026 11:25:44 +0200

To: undisclosed-recipients:;

From: Peggy Chan

Reply-To: peggychan147@outlook.com

Subject: Confidentiality ...

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1cfb7c4e0c19ab077940b8fe4687a3ae8"

Content-Transfer-Encoding: 8bit

X-Last-TLS-Session-Version: TLSv1.2

X-Spam_score: 12.5

X-Spam_score_int: 125

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, I hope this message finds you well, I am reaching

out to present an exciting business proposal totaling $27.6 million that

I believe holds significant potential collaboration between us. My [...]



Content analysis details: (12.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.232 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.232 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.232 listed in bl.score.senderscore.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[peggychan147(at)outlook.com]

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 US_8BIT US-ASCII isn't an eight bit charset

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Confidentiality ...



This is a multi-part message in MIME format.



--1cfb7c4e0c19ab077940b8fe4687a3ae8

Content-Type: text/plain; charset=us-ascii



Good day,

I hope this message finds you well, I am reaching out to present an exciting business proposal totaling $27.6 million that I believe holds significant potential collaboration between us.

My proposal is centered around trust and confidentiality, I would appreciate the opportunity to discuss this proposal further and explain how we can align our goals for mutual benefit.

Thank you for considering this opportunity. I look forward to your reply.

Best regards,Peggy.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

190ca





--1cfb7c4e0c19ab077940b8fe4687a3ae8

Content-Type: text/html; charset=us-ascii



Good day,



I hope this message finds you well, I am reaching out to present an exciting business proposal totaling $27.6 million that I believe holds significant potential collaboration between us.



My proposal is centered around trust and confidentiality, I would appreciate the opportunity to discuss this proposal further and explain how we can align our goals for mutual benefit.



Thank you for considering this opportunity. I look forward to your reply.



Best regards,
Peggy.





 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



 



190ca








--1cfb7c4e0c19ab077940b8fe4687a3ae8--



DHL Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 18:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4pFf-00000000Fme-2SyF

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 18:36:23 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 18:36:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f103.google.com ([209.85.216.103]:58800)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4owY-000000008Oa-0Zxv

for root@nl2k.ab.ca;

Thu, 10 Sep 2026 18:16:48 -0600

Received: by mail-pj1-f103.google.com with SMTP id 98e67ed59e1d1-3964e480f76so464507a91.1

for ; Thu, 10 Sep 2026 17:15:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=leesportmarket-com.20251104.gappssmtp.com; s=20251104; t=1789085745; x=1789690545; darn=nl2k.ab.ca;

h=content-type:mime-version:message-id:date:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=jYkjLzbRaJ6iYHt0wAgp/g6O9ySIeey2TXLxtIg5Mrs=;

b=jTdVuNmxG1YdKq6i+wwHURnwm75CIai7FhZxU1h+DDW0QQ88+tLxKk0rGt/PiTr7+d

AhYzHBzwrkRxphysixzi9jG5w30Db57T6dJH2NC7/YiOSHm13UAkwGb8nsPyq3+UZKpW

Sa0F4xAtp0AJjgYgYR1uDESGSxXKlb5oh48WwomJSvn0aJ/y0ci/0o82Jq7PvYSPS279

IpXfA7aMb/wL3Oe9zieZNwppX1MTS4KmZ4k1OyfnpVG3WpUfmM1CDxB0rymNXtteRjZz

AjUp4jQ+cbyVDWpuj+BZq7iwCQYY7LqMMdLKBBjf5wQxpPl8mhSQR1J+6IoZrGz8n0Yl

2Ypg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1789085745; x=1789690545;

h=content-type:mime-version:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=jYkjLzbRaJ6iYHt0wAgp/g6O9ySIeey2TXLxtIg5Mrs=;

b=OwK80QjonfQLCrSWEUREKsuoJPOS785ud9oAv7tifI9ojKoeRPePF9qwf6fck0HHFi

FwhuEpARcW9SJzaYwBpD8MLgwWcZxAwXDsJZyz9Xciwr6e0I2LIM3Le1HOC+2AAZ/XXZ

8yye6HGqCI9iozn2kW/vzaaV7LEbHZ+5HrPMLfEi3m5dOEdSV2yALiyJBtWUsAd39RPA

sz/sTRavFatXfPwcdmQ3SzPVtzEBvQAc5pQuuiVy9UteYaoiE//X7kU8/c6GT9fvyxOM

TkY/XcWy4bzWsTL//yJNcwCoDIoOkyM3obmo2LH+4Jk9nlpbBPezStFGBWiODT+vVy9l

+nJA==

X-Gm-Message-State: AFuF++mSKsx9yaEx/8F60jd8aBSK4kt/yHuVMiEiDKJRjiD1h6NkYQBY

6VeZ7YudjdIFJyX2dAikDyaZtoGyCqb/xAwOT6LUCn9ekQ43yp6PytJ2EZ9cRn+7Fas3lOo4cwR

BfAQOP4Auv+47T21mElDaOyT96ZDlhtEhd4gYqrPGn5d0t3U=

X-Gm-Gg: AYBFou0AZKjr/vyEc25tv7mw7+6my9D2Lu1sGRCvxfCvJU+lB+4bRqbwvTjsx/RnCGw

PCmxdKiwAwmbNbTRLSiuk0YPt44HBanNZYylHUdioqOV650fg+vjIdzp3M/Owaa4T02r1F+3O6c

6klyfGxEQwQ7k/Z7gSGEiSZMZ06k0DJj8SsWEDMNQwXRmjxn8oAWuAthP9Wg5km2uQcYSNxlmAQ

9J9YqiejSxBRefKKp44annd+IJzRMY5NpRaeEkKQP0tLf5CKxk9sQ/8pc9DTaDtCQPMbBgv+2PL

gH0ehQM5QbUipPPqbYrpPUT2RYDr2fSiFVl3prfVB6wU1/j9LCV8eo0OfyLFxwKjZnctTJulD76

DCedPqZ4JR0tyUu1OdrtoiAM=

X-Received: by 2002:a17:90b:5823:b0:398:bdb0:adb7 with SMTP id 98e67ed59e1d1-39d9c0aad8dmr2441840a91.16.1789085744650;

Thu, 10 Sep 2026 17:15:44 -0700 (PDT)

Received: from leesportmarket.com ([45.59.104.23])

by smtp-relay.gmail.com with ESMTP id 98e67ed59e1d1-39d987e6907sm518000a91.0.2026.09.10.17.15.44

for ;

Thu, 10 Sep 2026 17:15:44 -0700 (PDT)

X-Relaying-Domain: leesportmarket.com

From: DHL Group

To: root@nl2k.ab.ca

Subject: Important: Your Shipment Requires Attention

Date: 10 Sep 2026 17:15:44 -0700

Message-ID: <20260910171544.602541EB29893908@leesportmarket.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_3D478CD3.952F76D6"

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear root@nl2k.ab.ca, We would like to inform you that your

shipment is currently on hold.



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[45.59.104.23 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.59.104.23 listed in dnsbl.ahbl.org]

[45.59.104.23 listed in dnsbl.ahbl.org]

[45.59.104.23 listed in dnsbl.ahbl.org]

[45.59.104.23 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.59.104.23 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.59.104.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.59.104.23 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.59.104.23 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.103 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

1.5 DEAR_EMAIL BODY: Message contains Dear email address

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.103 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.103 listed in bl.score.senderscore.com]

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Important: Your Shipment Requires Attention





------=_NextPart_000_0012_3D478CD3.952F76D6

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








0">






d-color: rgb(244, 244, 244);" cellspacing=3D"0" cellpadding=3D"0">














255, 255); margin: 40px auto; border-radius: 8px; overflow: hidden;" cells=

pacing=3D"0" cellpadding=3D"0">











































































   3D"DHL
=3D"cid:photo2026-09-0707-53-52.jpg" border=3D"0" hspace=3D"0">


 


Dear root@nl2k.ab.ca,
>

1); line-height: 1.6; font-size: 15px;">

We would like to inform you that your shipm=

ent is currently on hold.





Kindly update your delivery information below and track your shipm=

ent.

px 25px; border-radius: 5px; color: rgb(0, 0, 0); font-weight: bold; text-d=

ecoration: none; display: inline-block; background-color: rgb(241, 196, 15)=

;" href=3D"https://cmv-tr.cam/zmade/nip/DHL.HTML#root@nl2k.ab.ca" target=3D=

"_blank">Update Your Information

5); font-size: 13px;">

Important Notice: If the d=

elivery attempt is unsuccessful, the shipment may be returned to the sender=

=2E

font-size: 14px; font-weight: bold;">

Sincerely,


DHL Express Team






------=_NextPart_000_0012_3D478CD3.952F76D6

Content-Type: image/jpeg; name="photo2026-09-0707-53-52.jpg"

Content-Transfer-Encoding: base64

Content-ID:



/9j/4AAQSkZJRgABAQEAkACQAAD/4gHbSUNDX1BST0ZJTEUAAQEAAAHLAAAAAAJAAABtbnRy

UkdCIFhZWiAAAAAAAAAAAAAAAABhY3NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAA

9tYAAQAAAADTLVF0BQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAlyWFlaAAAA8AAAABRnWFlaAAABBAAAABRiWFlaAAABGAAAABR3dHB0AAABLAAA

ABRjcHJ0AAABQAAAAAxyVFJDAAABTAAAACBnVFJDAAABTAAAACBiVFJDAAABTAAAACBkZXNj

AAABbAAAAF9YWVogAAAAAAAAb58AADj0AAADkVhZWiAAAAAAAABilgAAt4cAABjcWFlaIAAA

AAAAACShAAAPhQAAttNYWVogAAAAAAAA808AAQAAAAEWwnRleHQAAAAATi9BAHBhcmEAAAAA

AAMAAAACZmYAAPKnAAANWQAAE9AAAApbZGVzYwAAAAAAAAAFc1JHQgAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAD/2wBDAAQDAwQDAwQEAwQFBAQFBgoHBgYGBg0JCggKDw0QEA8NDw4RExgU

ERIXEg4PFRwVFxkZGxsbEBQdHx0aHxgaGxr/2wBDAQQFBQYFBgwHBwwaEQ8RGhoaGhoaGhoa

GhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhoaGhr/wgARCABPAY8DASIA

AhEBAxEB/8QAGwABAAIDAQEAAAAAAAAAAAAAAAEFBAYHAwL/xAAbAQEAAgMBAQAAAAAAAAAA

AAAAAwUBAgQGB//aAAwDAQACEAMQAAAB6IPiHqgAAAAAAAAAAAAAAAAAAAAAAAAAADAruiXY

Gvtttga+NgVlnBEKLbN61/Ik3uHnR6a7A1/P2zYqrEznYGv3emvqIYwAAAAAAAAAAAAHh7su

K1vceY+09PrjYNx6JuW/HTuY9E09k5J1Wr4MHl3r5WfdPXeR5Wmm16QdE+V1Pw5/TVld5LK+

t7nqvh7+A8eHBygAAAAAAAAAAK6xqJ5KpXrq1sMyksI4tO1vZHpLzW9q8fnGPf4yt1reH10e

+0+CLIvtb6jtmv0SzpJJMjb9U6jy8+jUdjTWHZke2CnmtFXdwQ7RgeOLU19gr0km7e2PkUNO

GmAAAAAAAACBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKBKB/8QAJRAAAgIC

AgEEAgMAAAAAAAAAAwQAAgEFFBUSEBETQAYWMWBw/9oACAEBAAEFAv8AHGXAqY7tGd2jO7Rn

dozu0YDYLM59LbhKlu7RgNmqyS98Dr3aM7tGLOgbjGyVVv3aM7tGUvglPulLUI3mCvH8LTwt

PC08LemM+2dUzZpLd7LjDmMe+dTr+EHe7L5LRcF2TXsLSoEJYxJpdbyiffZYoqG2+czbvXZp

2G2sbzYfAOLguyYpBaZApbGJMZzXPLP6fzNYlXWrbB6zx4inZ04RUAL7ThCiHzH5zH5zH4ud

0l9vseab0Hv2BDvvSkzXbEvZeuFwH32S37maw+dgR3iJA7mdzNVnlU2W7+M3czuZTfEFP2Ri

fsjEoyfh8x+cx+cx+Czaw/qbAVih4RpwjTCJfd9Q2FuidnROzonZnRvQP46zeJasKM3InWp0

j0ro3c2VWooHZp7B8/SPRXRM2PWuKVe0Jsm6R6dI9OkenSPTW6UtDHE0xfhGnCNOEaAx4h/u

/wD/xAAxEQACAQMBBQUGBwAAAAAAAAABAgMABBESITEyYZETFEBBoQUiI1LS4TBQUXGB0fD/

2gAIAQMBAT8B8YsMjjKqa7vN8h6V3eb5D0plZThhSo78IzRglAyVPSkjeThGaaGVRkqaEMrD

IU9KeN4+IY8Ba3Ekq4jTYOf2qaeWBNbKOv2q2madNZGK9pYcLGOKra3FvHpq6ge4XSpwKhiW

BNC0xN/LpHAvrRKxrk7hVzcG4k1eX4seNYzWmHl6fVTCIkKMbf8AfrUcttEoVWFSPay7HYH+

alms4h7oyatI4CO0mYZPOruS3jTEe0nnVslusfxXBP71eyQKNMW+oRZdmNo60Vsj5jrTrYIu

dnWkSMb8en91ph5en1Ud/wCR/wD/xAAyEQABAwIBCAkEAwAAAAAAAAABAgMEABESBRMhMUFh

kaEUMDJRU2KB0uEiIzNAUHGi/9oACAECAQE/Af3Ex3nBdKCfSuiSfDPA10ST4Z4GloU2bKFq

bacd7AvRivpFyg8KQy672Ek0qM8gXUggf1QjPqF0oPClsOt9tJHXjXpqFLdfRZpsADf8U/Kf

jt41pHH4qI+uS3nFJtWV8LgQ0nSs1DipiNYRr21OjOSkYEqsKjsIjNhtNLJym/gH4086UpLS

LnQBU2UqW7i2bOtYtnBesMfy8vdSksEhAwi+3u/0aZfhsICELFhvp12C/ocUD60/IyewmyBc

7qgtRSM6+oXO/VU9yI03ZnSo76htRUtfeWCT5vmsouxkJwMa++9R05OzQ+ocbUUZOOsjj804

jJbaCrQfWkNsjSrDy91YY/l5e6l6/wCD/8QAOBAAAQIDBAcGBQIHAAAAAAAAAQACAwQREiEy

MxATIzFRkqIiNDVBYZMFFEBCoVJiUGBwcYKR0f/aAAgBAQAGPwL+jgMw+xXdcs/ocs/ocs/o

cs/ocs/ocqQYzXHhu0lro94uwlZ/Q5CHAiW3nyslFzzRovJWf0OWf0OR+Xfbs7+yVYjxbLuF

CVn9Dln9DkHN3G8fXOiPwtvKMR7TT7RwCwlYSsJW46KhQ3xMQuJ4rUQTtX7zwGigVXjbPxen

ovloJ7DcZ4nQ2FCHacgG3u8v3FOfENXOvJ0a2KNiz8n+AOixTQN/KJa4NHkLIuWYOQJ0WZcN

Vub2d6+XhZjx2vQaGwoQ7TkGi8gUaP1FOiRDVzrydALbiFnxec6Lk6NMXRCKu9BwRebmC5o4

aBDZu+48Amw4Yo1u76sGXEO1X7zRYZT3FhlPcWGU9xbZsuIQxFrqqzDOxZh9fXS1jIcENaKC

4/8AVWJLyz/7sQayTlS47hqlrZhkKE+lXWG0ou7QXsGG2KructyI1lJdsJuJ1hGI+BD/AGiw

Lyu5y3Iu5y3ItdFloENv2WWJ0GFDZFY3FbHmu5y3Iu5y3Ijq5aAyvALKh/lZUP8AKESK2E2O

7CwmiwynuLDKe4sMp7iYX0tEX03fStDIDJg2sLjReGS/OvDJfnXhkuP80Jb4dBa1jsZBossc

4WWOcLLHOFk9QW1cyGP9qrBaifrKEGWhbLe42hesjragDCsjjaCbCh7h58VXUbNtzBbCyOtq

b8yzVwvM2gg1go0XAJ75aj2uNaE3hZHWFkdbVkdbVkdbVrJyHQMvDai8q1F+Hwn8KxF4ZL86

8Ml+deGS/OoYLQwho7I8v54//8QAKxAAAQIFAwIFBQEAAAAAAAAAAQARITFR0fAQQZFhgUBx

obHxIFBgcMHh/9oACAEBAAE/If04D2BtEL8LNaWa0s1pZrSzWlS+JRcHUegEcx/YLNaRQOwf

3CBcFcbBZrSzWlFd0B7hMONvZAs1pZrSNuSOICId/HGBYCBnMjKPjV8avjUQRIvMaEERiJF0

Ygl4yjdSAigZOdCCA5MgyDXgSHOMIHB20fUE46pvDYb10/H2gnfJI8X2BgQuVAjqaZhoUNoU

gOqn027Zz0fQE46ps33IKch7QHSMkQZaIeaAJNEUx29pU4uw19HvhMkZVZg8WWoNphmWFusL

dYW6EaiKHqiTh9zULfQCj2UK5/qMAxgT+qZb71uFEcxAZk2jbVenpCcemXZDVmI1UYmCTVAh

rkQD/jVm64g+Fg3LBuR4CrtNurrC3WFusLdBLEUvu5tvCiagTBBAxWFusLdEgCAdysaEojsj

9CiigEgOdUQ5k70QpxvTe1E6kdo39zssVxCxkMSh8FDZqVKlEIkIwk1nusVxBWOTjtAoegVh

sEUM0gjixXViuLFcWK4q52RxJxfEKNYW6wt1hboo9SMiGQ8vzj//2gAMAwEAAgADAAAAEAAA

AAAAAAAAAAAAAAAAAAAAAAAAACAwygBiBQBgAAAAAAAAAAAAAE6AyDCQbR5oQAAAAAAAAAAA

FMqQEUeiYggAA88oAAAAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDP/xAAoEQEAAQMDAwMEAwAA

AAAAAAABEQAhUTFBYZGx0aHB8DBxgfFAUOH/2gAIAQMBAT8Q/mSQDIL7V+8eK/ePFSoDyRTq

PDAvamwQcvFDK8MC9qRHBuie1HFhwvFDC8sid/rkSTpULJYuo+xdSyEOU/ilis6XmTOhUYZT

b7f77UWGrq5fGKK5pzj8UZ0DfLmtwxfl89L7lObAdCmysLBg8v1SgjHOnqncrgqRhcrQG7I7

4zRNQclDkCyPNR8toFjrpSTYAgQdfhVqu6JRzr0owob8eNetE41aozB11e1GAmi8wZ5JKChf

55pjFRsSX1oJb7fVBwW1wVITj+j/AP/EACURAQACAAUDBQEBAAAAAAAAAAEAESExQVFhcZGx

MIHB0fChQP/aAAgBAgEBPxD/AGV3G4k7hP03xP03xLZlslP9iiPTYXxGh4aqrxDFJNhfBG5h

qoO6Q+yOSJPEJEl3E8+uwCLJk5niw6GL3jKrOdvBJmhcsbs3yJVKxhuH0/F6QxjLFbv0aQMb

Wwz2Omsy2TN3dVljcXF3bftLdSJnodgjh4DAbH26+qGdavG8ve0P6Ti7p3EHBQ1bMTY1YBXw

O/VgIGMrH3HAtITXu5dsYj0eKlO93xoc3MF2oE0b557d9IWccsRhx8uYSqVmEgbZpb46wo4l

F3ZetlkDpZIgFWhZeMGAIWW6thwYMDpOLunQdZW+lUqVKlSpUqVKlSpUqVKlSpUqVKlSpU//

xAAoEAEAAgEEAQMEAgMAAAAAAAABABEhEDFBYVEgwfBAcYHxUGBwkbH/2gAIAQEAAT8Q/wAO

M8NlKOgvqRRRRR7xCn+wC6tWPQNnaDoiXGFAsG6oBEr/ANhItdUUXzjl6ZfYQhTGpgPmytUU

THXR1WzQE+uT06gW0cBys5beVC2J+6z91n7rAEcbq6LCeIUROSMUblh0Redwa+g8J4BZV4JX

kmeF4E/FFYX/ADow4sPA5XRBSEU2EmVHCMo5XTwKPaPb7Dn+Ay9krng7GNz2iAcFpPnPtK8I

os35CcEPNC7T30YdGdDldEyKu2Fcq6vLE4Io5XR6ODXKORJ8a94qqwZJRoDKrGg8YuyCXGXF

/G27p4f0rC3YYcP3D27v1Z2sjnYrTZn0aaaOdnLxQ6i86wD8SvbXhSzTDqQwCoXz/cgtUyVv

AE2WTHbtlatTAIJuOmxs+5O3a7mIWTYjxDGt2vC2vE3K7BMkONCXIHjVd8YJv2vNOtlmKMLM

tlu+0PRppoBgOoGFtyXt9K2JDRANWzOvXTYsBuh3hl8Iri3xFeeZ859585958594sHZkgZ5H

l+Mi/YlZP2DYQQ110TlA1o9HVoXBeURmC822779zLpj4b5Lz0e1pSxPQ4CNsArkGgCgIOObZ

itM4T0/+++1lDLd4rslErqq4lOJv6OuulpA5aAFuTYf0a5cuXLly5cuXLly5cuXLly5cuXLl

y5cuXLly5cuXLly5cuXLly5cuXLly5c//9k=



------=_NextPart_000_0012_3D478CD3.952F76D6--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Sep 2026 12:05:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4j9r-00000000Nf8-0bGr

for dave@doctor.nl2k.ab.ca;

Thu, 10 Sep 2026 12:05:59 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Sep 2026 12:05:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m103131191108.xmail.ntesmail.com ([103.131.191.108]:47058)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4iZz-000000001Rh-0ZGJ

for sales@nk.ca;

Thu, 10 Sep 2026 11:29:08 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1579180_191164390.1789061275560"

To: sales

Subject: =?UTF-8?B?Q3VzdG9tIFNvY2tzIOKAkyBMb3cgTU9RICYgRnJlZSBEZXNpZ24gU2VydmljZQ==?=

X-Priority: 3

MIME-Version: 1.0

Received: from jack@dingfengsocks.com( [10.139.5.81] ) by ajax-webmail ( [127.0.0.1] ) ; Fri, 11 Sep 2026 01:27:55 +0800 (GMT+08:00)

From: jack

Date: Fri, 11 Sep 2026 01:27:55 +0800 (GMT+08:00)

X-WM-Tid: 0aa08c5c9f9c069ckunme41307031fce7e

DKIM-Signature: a=rsa-sha256;

b=ZpfuPLXAv4Fbb6ojszTk4dP/ZfSNcC65s3W1oCxt0SgR11aQcfBe/Wp8aRGOZWdjLd9IwZJQ+YP4HlzcxCPZKlLKB45Bqo8OF/BGfPXbwkAcf7nTy54oCe1zcSajWNGBj/YrgRv3mD4vskTd7ksuA0FHCZveE+udPj+z6JcwoXqDYOugnHqm08KfcuX9pYowgYVqwczJ2jqA3bJ6gUKRxSKESRPSXk4Gl1PB2ByQl4QumN1dQ60x93fSgPD+LKJxVaa4/8B1e6gOgAooRF70r83HKiSNbvEZMHjYTT6S+l6wFo9yK3LYRxUO4IXHTBMvynHrkyMpHAFrn0NXybPP1Q==; c=relaxed/relaxed; s=default; d=dingfengsocks.com; v=1;

bh=cTZvzxJ3G8NF4xyErN3Y5S/XMZo9cpV4PRwsvzsFxhY=;

h=date:mime-version:subject:message-id:from;

Message-ID:







Continue receiving fresh tips and features by hitting . Go With Future News



To eliminate this communication, just hit Manage Inbox Flow.



Hi Sales,

I’m Jack, representing a specialized sock factory with 15 years of production history.

We Provide

1.Low minimum Command quantity of Just 50 pairs per design, which is ideal for testing new styles or small businesses.

2.Costless design services to help bring your ideas to existence.

Looking forward your reply.

Best regards,

Jack

What's app: +86-13122045126 Website: CustomizeSocks

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Sep 2026 05:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4Gmp-0000000095F-1Wh2

for dave@doctor.nl2k.ab.ca;

Wed, 09 Sep 2026 05:48:19 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Sep 2026 05:48:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.75.176] (port=38360 helo=mta75-176.mmglsmd.net)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x4EY1-000000003pR-44ON

for root@nk.ca;

Wed, 09 Sep 2026 03:25:01 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1788945838; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=8PiykNjGv9aKzpyw34wF+aaRW2EQW7qPwq69iWIjbZE=;

b=QgyX2GhwsRhaHV32u2OsOX1+Njq1hLC1hFMis6AdFMxw4iU2Cq1MfBJJ

nPQbRXMUxOSGRry47FErukirKrMB8ZYW2GtS7908UGTv8bNsjBFM9SKbRd

1gWOUcU88I3T0cgiJhihKvDX7ZFcIepYq8JHMOWHJKy9tlz7bGgSfrvzE=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id aOHgyDEQANRf

for ; Wed, 09 Sep 2026 17:18:08 +0800

Content-Type: multipart/mixed; boundary="===============0131511188156182955=="

MIME-Version: 1.0

Message-Id: <20260909171808.98916-{13453:20260909171623-13453-21}-0006212@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3A_Threewaysteel_-Boiler_tube_of_power_plant/_Refinery_furna?=

=?utf-8?q?ce_tube=2E?=

From: Sophia-Threewaysteel

To: "www.nk.ca"

Date: Wed, 09 Sep 2026 17:18:08 +0800

Mail-ID: 6aa1240ae1382308ad88b913

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Good day !



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.75.176 listed in will-spam-for-food.eu.org]

[160.124.75.176 listed in will-spam-for-food.eu.org]

[160.124.75.176 listed in will-spam-for-food.eu.org]

[160.124.75.176 listed in will-spam-for-food.eu.org]

[160.124.75.176 listed in will-spam-for-food.eu.org]

[160.124.75.176 listed in will-spam-for-food.eu.org]

[160.124.75.176 listed in will-spam-for-food.eu.org]

[160.124.75.176 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.75.176 listed in dnsbl.ahbl.org]

[160.124.75.176 listed in dnsbl.ahbl.org]

[160.124.75.176 listed in dnsbl.ahbl.org]

[160.124.75.176 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.75.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.75.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.75.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.75.176 listed in dnsbl.ahbl.org]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns18.xincache.com/112.80.181.111]

[URI: ns17.xincache.com/112.80.181.45]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.75.176 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Re=3A_Threewaysteel_-Boiler_tube_of_power_plant/_Refinery_furna?=

=?utf-8?q?ce_tube=2E?=







Dear Purchasing Manager,



Good day !



This is Sophia from Threeway steel . With 33 years of dedicated experience in the steel pipe industry, Threeway Steel has grown into a comprehensive supplier offering a full product portfolio—from seamless/carbon/alloy pipes to elbows, tees, and flanges—all under one roof.

Our company specializes in seamless tubes made of various high alloy materials.

In response to the needs of the boiler heat exchanger industry, the company has developed ultra-long straight tubes and U-shaped tubes of various materials, with straight tubes up to 30 meters long, as well as boiler tubes such as T91 and 1.4922/X20CrMoV12-1 for power plants. And seamless steel pipes made of ultra-ferritic UNS S44660 stainless steel suitable for condensers in coastal power plants.



PRODUCT CERTIFICATION:

GB / ASTM/ASME / EN / JIS GOST;



APPLICATION:

Boiler tube of power plant/ Refinery furnace tube.



Available standard:

ASTM/ASME ASA213/213M

ASTM/ASME A/SA335/335M

EN10216-2



PRODUCT PICTURES:









PRODUCTION AREA:



Awaiting for your inquiry and only for you to provide perfect products and services. We are committed to become a reliable partner on the road to customer success.





Yours sincerely,



Sophia Zeng

Sales Manager | Industrial Pipe Division



Threeway Steel Co.,Ltd

Tel:+86-731-88736283 Fax:+86-731-88896236

Mobile : +86-13544036536

Email: sophia@threewaysteel.com

Website: www.threewaysteel.com

Skype: zeng.sophia1 Wechat:meiping77



Hunan Steel Industrial Zone, Tianxin Special District,

Changsha City,China



Dragonfly phish from GoDaddy

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3cEQ-00000000MSe-1dW6

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 10:30:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 10:30:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cynergynetworks.org ([70.32.96.105]:48340)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3al1-000000001UF-0yyP

for sales@nk.ca;

Mon, 07 Sep 2026 08:55:45 -0600

Received: by cynergynetworks.org (Postfix, from userid 10008)

id 5F7188AB0E; Mon, 7 Sep 2026 09:18:13 -0500 (EST)

To: sales@nk.ca

Subject: =?UTF-8?Q?Your_shipment_is_currently_being_held_as_part_of_the_customs_cl?= =?UTF-8?Q?earance_process._/_Votre_envoi_est_actuellement_retenu_dans_le_?= =?UTF-8?Q?cadre_des_proc=C3=A9dures_de_d=C3=A9douanement.?=

Date: Mon, 7 Sep 2026 14:18:13 +0000

From: Dragonfly Shipping

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_b1d868148bee179f7c28f94657c2e1ec"

Content-Transfer-Encoding: 8bit

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: French version follows Intelcom is now Dragonfly!



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

[70.32.96.105 listed in dnsbl.ahbl.org]

[70.32.96.105 listed in dnsbl.ahbl.org]

[70.32.96.105 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: scanned.page]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?} =?UTF-8?Q?Your_shipment_is_currently_being_held_as_part_of_the_customs_cl?= =?UTF-8?Q?earance_process._/_Votre_envoi_est_actuellement_retenu_dans_le_?= =?UTF-8?Q?cadre_des_proc=C3=A9dures_de_d=C3=A9douanement.?=



This is a multi-part message in MIME format.



--b1_b1d868148bee179f7c28f94657c2e1ec

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit





















French version follows





Intelcom is now Dragonfly!







Valued customer,



Your shipment is currently being held pending payment of the applicable customs duties, in accordance with the requirements of the Canada Border Services Agency (CBSA). To avoid any delay in your delivery, please complete your customs duty payment using our secure payment portal below:



Access secure form



Thank you for your prompt attention to this matter.Â



Important: Failure to comply with this notice will result in your package being returned to the sender.









This is an automated email. Please do not reply.







Â





Intelcom est maintenant Dragonfly!







Cher(e) client(e),



Votre envoi est actuellement retenu en attente du paiement des droits et taxes de douane applicables, conformément aux exigences de l’Agence des Services Frontaliers du Canada (ASFC). Afin d’éviter tout retard dans la livraison, nous vous invitons à effectuer le paiement de ces droits et taxes au moyen de notre portail de paiement sécurisé ci-dessous:



Accéder au formulaire sécurisé



Nous vous remercions de votre collaboration et de votre diligence.



Important: Le non-respect de cet avis entrainera la réexpédition de votre colis à son expéditeur.









Ceci est un message automatisé. Veuillez ne pas répondre à ce courriel.

















--b1_b1d868148bee179f7c28f94657c2e1ec

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable







=09






sans-serif; font-size: small; background-color: rgb(255, 255, 255); margin=

: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-lef=

t: 1ex;" type=3D"cite">


se; font-size: 14px; width: 420px; max-width: 100%; margin: 0px auto;" widt=

h=3D"100%">

=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09


padding: 0px 16px 10px; font-size: 12px; color: rgb(51, 51, 51);">
yle=3D"font-size: 11px;">
-serif;">French version follows

0, 166, 143); border-radius: 0px; padding: 18px 24px; color: rgb(255, 255, =

255); font-weight: bold;">
s-serif;">Intelcom is now Dragonfly!

: none; background-position: 0% 0%; background-size: auto; background-repea=

t: repeat; background-origin: padding-box; background-clip: border-box; pad=

ding: 20px 16px !important;">

=09=09=09


ight: 1.5; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Valued customer,





=09=09=09


ght: 1.55; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Your shipment is currently being held pending payment of the applicab=

le customs duties, in accordance with the requirements of the Canada Border=

Services Agency (CBSA). To avoid any delay in your delivery, please comple=

te your customs duty payment using our secure payment portal below:<=

/span>





=09=09=09


ght: 1.55; text-align: center; font-size: 15px !important;">
tyle=3D"font-size: 14px;">
s-serif;">
: border-box; border-style: solid; border-color: rgb(44, 181, 67); backgrou=

nd: rgb(0, 166, 143); border-width: 0px; display: inline-block; border-radi=

us: 30px; width: auto;">
rl?q=3Dhttps://scanned.page/oLm3iE&source=3Dgmail&ust=3D1788871812186000&us=

g=3DAOvVaw0Dn4qZd1G-3rOm3OczcX3C" href=3D"https://www.shorturl.asia/jeyqth"=

rel=3D"noreferrer" style=3D"color: rgb(17, 85, 204); box-sizing: border-bo=

x; background-image: initial; background-position: initial; background-size=

: initial; background-repeat: initial; background-attachment: initial; back=

ground-origin: initial; background-clip: initial; padding: 16px 20px; displ=

ay: inline-block; border-radius: 30px;" target=3D"_blank">
lor: rgb(255, 255, 255);">Access secure form
>





=09=09=09

g: 16px; background: rgb(247, 247, 247); border-radius: 12px; font-size: 15=

px; line-height: 1.5; text-align: center;">
>
#000000">Thank you for your prompt attention to this matter.=C2=A0
span>




=09=09=09

g: 14px 16px; background: rgb(244, 251, 250); border-left: 4px solid rgb(0,=

166, 143); font-size: 15px; line-height: 1.5; text-align: center;">
tyle=3D"font-size: 12px;">
s-serif;">
-box;">Important: Failure to comply with this notice will r=

esult in your package being returned to the sender.
iv>

=09=09=09

0, 0, 0); border-radius: 0px; color: rgb(255, 255, 255); padding: 24px; fon=

t-size: 12px; line-height: 1.5;">3D"Dragonfly"
ta-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NaXLdBJQ=

7S5hp3JAJs6w5qs95CLfIXWFz1zfOKpsOhCbGi8VtJWlHHfe_zRplYoslCag6hoZAAq9ZfSzJBk=

KRJH74HSG4WPA3N8Hvdm7HrEvwB8iSu1FJ8=3Ds0-d-e1-ft#https://dragonflyshipping.=

ca/uploads/Mail/dragonfly_email_logo.png" style=3D"box-sizing: border-box; =

vertical-align: middle; border: 0px; display: block; height: auto; max-widt=

h: 175px; outline: medium; width: 150px !important;" width=3D"175" />

=09=09=09


yle=3D"font-size: 10px;">
-serif;">This is an automated email. Please do not reply.



=09=09=09

ne-height: 18px; font-size: 18px;">=C2=A0

0, 166, 143); border-radius: 0px; padding: 18px 24px; color: rgb(255, 255, =

255); font-weight: bold;">
ica, sans-serif;">Intelcom est maintenant Dragonfly!

: none; background-position: 0% 0%; background-size: auto; background-repea=

t: repeat; background-origin: padding-box; background-clip: border-box; pad=

ding: 20px 16px !important;">

=09=09=09


ight: 1.5; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Cher(e) client(e),





=09=09=09


ght: 1.55; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Votre envoi est actuellement retenu en attente du paiement des droits=

et taxes de douane applicables, conform=C3=A9ment aux exigences de l=

=E2=80=99Agence des Services Frontaliers du Canada (ASFC). Afin d=E2=80=

=99=C3=A9viter tout retard dans la livraison, nous vous invitons =C3=A0 eff=

ectuer le paiement de ces droits et taxes au moyen de notre portail de paie=

ment s=C3=A9curis=C3=A9 ci-dessous:





=09=09=09


ght: 1.55; text-align: center; font-size: 15px !important;">
font-size: 14px;">
">
: border-box; border-style: solid; border-color: rgb(44, 181, 67); backgrou=

nd: rgb(0, 166, 143); border-width: 0px; display: inline-block; border-radi=

us: 30px; width: auto;">
rl?q=3Dhttps://scanned.page/oLm3iE&source=3Dgmail&ust=3D1788871812186000&us=

g=3DAOvVaw0Dn4qZd1G-3rOm3OczcX3C" href=3D"https://www.shorturl.asia/jeyqth"=

rel=3D"noreferrer" style=3D"color: rgb(17, 85, 204); box-sizing: border-bo=

x; background-image: initial; background-position: initial; background-size=

: initial; background-repeat: initial; background-attachment: initial; back=

ground-origin: initial; background-clip: initial; padding: 16px 20px; displ=

ay: inline-block; border-radius: 30px;" target=3D"_blank">
lor: rgb(255, 255, 255);">Acc=C3=A9der au formulaire s=C3=A9curis=C3=A9
an>





=09=09=09

g: 16px; background: rgb(247, 247, 247); border-radius: 12px; font-size: 15=

px; line-height: 1.5; text-align: center;">
>
#000000">Nous vous remercions de votre collaboration et de votre diligence.=





=09=09=09

18px 0px 0px; padding: 14px 16px; background: rgb(244, 251, 250); border-le=

ft: 4px solid rgb(0, 166, 143); font-size: 15px; line-height: 1.5;">
tyle=3D"font-size: 12px;">
s-serif;"><=

strong>Important: Le non-respect de cet avis entrain=

era la r=C3=A9exp=C3=A9dition de votre colis =C3=A0 son exp=C3=A9diteur.
pan>


=09=09=09

0, 0, 0); border-radius: 0px; color: rgb(255, 255, 255); padding: 24px; fon=

t-size: 12px; line-height: 1.5;">3D"Dragonfly"
ta-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NaXLdBJQ=

7S5hp3JAJs6w5qs95CLfIXWFz1zfOKpsOhCbGi8VtJWlHHfe_zRplYoslCag6hoZAAq9ZfSzJBk=

KRJH74HSG4WPA3N8Hvdm7HrEvwB8iSu1FJ8=3Ds0-d-e1-ft#https://dragonflyshipping.=

ca/uploads/Mail/dragonfly_email_logo.png" style=3D"box-sizing: border-box; =

vertical-align: middle; border: 0px; display: block; height: auto; max-widt=

h: 175px; outline: medium; width: 150px !important;" width=3D"175" />

=09=09=09


yle=3D"font-size: 10px;">
-serif;">Ceci est un message automatis=C3=A9. Veuillez ne pas r=C3=A9pondre=

=C3=A0 ce courriel.



=09=09=09












--b1_b1d868148bee179f7c28f94657c2e1ec--



Business proposal spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dve@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Sep 2026 07:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2qnj-00000000FrJ-09vg

for dve@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 07:51:23 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Sep 2026 07:51:22 -0600

Resent-Message-ID:

Resent-To: dve@doctor.nl2k.ab.ca

Received: from mail.electryconsulting.eu ([217.160.39.209]:39671)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2mWm-00000000IgP-26IV

for doctor@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 03:17:45 -0600

Received: from mail.electryconsulting.eu (localhost.localdomain [127.0.0.1])

by mail.electryconsulting.eu (Postfix) with ESMTP id AC33493AF303;

Sat, 5 Sep 2026 07:49:25 +0200 (CEST)

X-Spam-Flag: NO

X-Spam-Score: 4.241

X-Spam-Level: ****

X-Spam-Status: No, score=4.241 tagged_above=-9999 required=5

tests=[ALL_TRUSTED=-1, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,

DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_REPLYTO=2.095,

FREEMAIL_REPLYTO_END_DIGIT=0.25, MISSING_MID=0.497, SPF_PASS=-0.001,

URIBL_DBL_ABUSE_SPAM=2, URIBL_DBL_SPAM=2.5] autolearn=no autolearn_force=no

Authentication-Results: mail.electryconsulting.eu (amavis) (amavis);

dkim=pass (2048-bit key) header.d=electryconsulting.eu

Received: from mail.electryconsulting.eu ([127.0.0.1])

by mail.electryconsulting.eu (mail.electryconsulting.eu [127.0.0.1]) (amavis, port 10024)

with ESMTP id P7HijiYDbMVj; Sat, 5 Sep 2026 07:49:24 +0200 (CEST)

Received: from [103.168.66.231] (unknown [103.168.66.231])

by mail.electryconsulting.eu (Postfix) with ESMTPA id 046A593AF29E;

Sat, 5 Sep 2026 07:49:07 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=electryconsulting.eu; s=default; t=1788587357;

bh=m8mkmZ0H8Xe3v8mCb2yTzxioWz8enPZGkQowVW+4nBA=; h=Subject:To:From;

b=eNYsi/V9e1NDmwLGS7GJZhhziN5Hu1C3VA5HjX4FRaiOWVfT/GIdeO8HuDuBw4QHj

8Fll6wODaIsE1stCpjPiHe/o+43nb2DkWaTqnBF9vsKQbflzhFFPWlLJosVL//IHnN

olRnFXzuiAgT6MEXYlOSoB5kuAKWAVJlgHVS5Zm1K8evwmDuYDc8Xu8E2rYPcq0g+p

Jg+4sQC+vs4DFA6qfFQ/uM5xCztxQT62yUSd4Pk4xvjOtNnBWfwW7fblXJjUY33AGG

s60UORMPQZaLw98/tkC2F2V0+51TgfmU4x+mV96pEAbkNcK2K0PnpSdDjr28aTOBxv

zjMKra46d2FlQ==

Authentication-Results: mail.electryconsulting.eu;

spf=pass (sender IP is 103.168.66.231) smtp.mailfrom=madridnorte@electryconsulting.eu smtp.helo=[103.168.66.231]

Received-SPF: pass (mail.electryconsulting.eu: connection is authenticated)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Proposal

To: Recipients

From: "Sun Yu"

Date: Fri, 04 Sep 2026 22:48:55 -0700

Reply-To: yus413288@gmail.com

X-PPP-Message-ID:

<178858735478.1467185.12297057947186714579@mail.electryconsulting.eu>

X-PPP-Vhost: electryconsulting.eu

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greeting, I have a business proposal to share with you. Please

get back for more details. Thank you, Sun Yu



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

[217.160.39.209 listed in dnsbl.ahbl.org]

[217.160.39.209 listed in dnsbl.ahbl.org]

[217.160.39.209 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.168.66.231 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.168.66.231 listed in sbl-xbl.spamhaus.org]

[103.168.66.231 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: electryconsulting.eu]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[yus413288(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[217.160.39.209 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[217.160.39.209 listed in bl.score.senderscore.com]

Subject: {SPAM?} Proposal



Greeting,

=



I have a business proposal to share with you. Please get back for =



more details.

=



Thank you,

Sun Yu