NetKnow Corporate Blog

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Dec 2025 16:24:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vaj3n-00000000AHo-4A6M

for dave@doctor.nl2k.ab.ca;

Tue, 30 Dec 2025 16:23:27 -0700

Resent-From: The Doctor

Resent-Date: Tue, 30 Dec 2025 16:23:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from email.cpim.org ([138.201.210.237]:47879)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vahgy-0000000046Q-35NC

for doctor@nl2k.ab.ca;

Tue, 30 Dec 2025 14:55:57 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=cpim.org;

s=default; h=Reply-To:Date:From:To:Subject:Content-Description:

Content-Transfer-Encoding:MIME-Version:Content-Type:Sender:Message-ID:Cc:

Content-ID:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:

Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=LGm0Rr28lqzYDgqYDST2swzYqSO8R7H00iC7fQUUVtw=; b=lANhTFaOrsEMsK6hE0tXk9Wo1q

TmkQilrf2KCl79K6Ed9egUVXCMjEw5IxeXPL/WNmO2htqdl3KUHJvxPmZStV+hquK4P6zC0n3RsQZ

losxgioVhBALeDz5aFwlubv/ATZVJG4R/T9SVuLdXuGCyU8080Cdo4lFMMBRK2d0hQOFz7PumqZBu

NWFlg9NLDOtQW07s7d5IqpMPvbga9FNG4MmubrnCJMdSsElvVwG2YUQGyMzFu7GIkzX3nxiJ1neIY

dqig9wkhHlzg5C5ucafwpz/j6HbuzsglDbcraqPsEmNFLepFXmjXQnWVyY2aRRcPnOj9D8Dz3hqFG

i+7KBeHA==;

Received: from [103.141.235.183] (port=59412 helo=HY-23676.374593)

by komagata.komagata.in with esmtpsa (TLS1) tls TLS_DHE_RSA_WITH_AES_256_CBC_SHA

(Exim 4.98.1)

(envelope-from )

id 1vahgC-00000005dUc-25hA

for doctor@nl2k.ab.ca;

Wed, 31 Dec 2025 03:24:59 +0530

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: doctor@nl2k.ab.ca

To: doctor@nl2k.ab.ca

From: "Mrs. Rafaela"

Date: Wed, 31 Dec 2025 05:54:56 +0800

Reply-To: rafaellaapponte@gmail.com

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - komagata.komagata.in

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - cpim.org

X-Get-Message-Sender-Via: komagata.komagata.in: authenticated_id: ptl@cpim.org

X-Authenticated-Sender: komagata.komagata.in: ptl@cpim.org

X-Source:

X-Source-Args:

X-Source-Dir:

X-From-Rewrite: unmodified, already matched

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm that this email address is still active and

that you can receive notifications about your donation of 2.7 million euros.





Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[138.201.210.237 listed in dnsbl.ahbl.org]

[138.201.210.237 listed in dnsbl.ahbl.org]

[138.201.210.237 listed in dnsbl.ahbl.org]

[138.201.210.237 listed in dnsbl.ahbl.org]

[103.141.235.183 listed in dnsbl.ahbl.org]

[103.141.235.183 listed in dnsbl.ahbl.org]

[103.141.235.183 listed in dnsbl.ahbl.org]

[103.141.235.183 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[138.201.210.237 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[138.201.210.237 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[138.201.210.237 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[138.201.210.237 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[103.141.235.183 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

[138.201.210.237 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[138.201.210.237 listed in list.dnswl.org]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 MILLION_EUR BODY: Talks about millions of euros

0.0 T_HK_NAME_MR_MRS No description available.

0.0 HK_NAME_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.1 MONEY_NOHTML Lots of money in plain text

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} doctor@nl2k.ab.ca



Please confirm that this email address is still active and that you can rec=

eive notifications about your donation of 2.7 million euros.

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Dec 2025 12:45:03.8958

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB6150

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, doctor@nl2k.ab.ca I was just wondering if you had a chance

to review the previous email I send to you. I understand the value of your

time so I'd like to know what's the best way to reach you and when can we

discuss this in more detail?



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[52.103.66.61 listed in dnsbl.ahbl.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.66.61 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:820:f4:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:f4:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

[52.103.66.61 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.66.61 listed in wl.mailspike.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[liliana.join(at)outlook.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Re-last mail update please.



--_000_KL1PR04MB7306A88F3CF829A15148B5829EBCAKL1PR04MB7306apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi, doctor@nl2k.ab.ca







I was just wondering if you had a chance to review the previous email I sen=

d to you.







I understand the value of your time so I'd like to know what's the best way=

to reach you and when can we discuss this in more detail?







Waiting,



...........................................................................=

...........................................................................=

.........



From: Liliana [mailto: liliana.join@outlook.com]



Sent: Thursday, 23 November 2025, 3:30 PM



To: doctor@nl2k.ab.ca







Hi,

Thank you for your response.







Friday at 10:00 AM works perfectly for me. I look forward to discussing you=

r website redesign and mobile app requirements in detail.







Please let me know if you prefer a Zoom/Google Meet call, and feel free to =

share the meeting link at your convenience.







Speak to you on Friday.







Best regards,



--_000_KL1PR04MB7306A88F3CF829A15148B5829EBCAKL1PR04MB7306apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>

















--_000_KL1PR04MB7306A88F3CF829A15148B5829EBCAKL1PR04MB7306apcp_--