Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyV3g-00000000GTi-0G28

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:49:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 07:49:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f51.google.com ([209.85.208.51]:54621)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyUKa-000000009TL-1TJ8

for doctor@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:03:25 -0600

Received: by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-6a18e24ad25so4707990a12.1

for ; Mon, 24 Aug 2026 06:02:29 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787576543; cv=none;

d=google.com; s=arc-20260327;

b=NIInqdtoEvVFMK0fNTgIW3jYgm7MPQLWlaHZdtSB+x/Ey524XwnFMhB1/kH9sSd2yp

S7XbKW7VG6yllgSzuSsB9v9xslhi0iL1ZkjsGOu3grb2sZlh4GCIS3K6bGSFSR3mD/WM

dFqQf3oVHm3yBmdtfyl4KkmEEC28cWF32FBDxWdBehrMw6Y2VAvQh4PtQ+RE/VP/vrim

gCcmCKdqf+gneNM1PmKLc1OYZCO0hcmCW21utvOuEaVho+ffLTPQ40ONhk4zy9uEw3Ok

Q5uQSuEIAIYCSY7S/KqM5uzkQSuno50l7sF5B1Fyyr08XqUh7gI7mR+b5ZwJWQrZ95Hl

KwoQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=z3WTTFMqTPUV5hi4q4WB/MzInwjpIC5h9fnIcuFGo1M=;

fh=FImovTVC5mOOooDSiAK90e6ZiR6RghNwDLK/nfGIQbo=;

b=ZHshqw1E6pq8k2ARuXxLIItoBKc6RkFbNnVz6l+WDT1cDRKasguKksgCA23tFtXdvB

s51JSwNrXQX3o7e3e5LLUivc/NWw49JRhqJpj7wyZfL9XmHbHCxzOSNDPZZj6mqRPSNl

iDNLx+ojt9m6Pp9W7ZfR1ohIFP2KFFqF7EkclFvfy/WyNIP2vVb/e9c7J7taXJVCxsKF

qq0hCmFK0d/6frLTdyIgl1O5mCLGvV2X1tQd7qUawx2nOnwIOkQUTVLcEvoXRAQHqagN

TmutGQe2JFrV7fmYVD14DI4LK/0JwzJ9d03Q+pbyl0KprjWzPPoHgzS36zH+yG2XDHoB

fGAQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787576543; x=1788181343; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=z3WTTFMqTPUV5hi4q4WB/MzInwjpIC5h9fnIcuFGo1M=;

b=SmOQ4emb3v6RRM/NbNaKstMzNF+5NBMCIxjFMbPSTTHBRqnYtjvrjnd4Q88ndTLD/d

5v3rVq6fZmEZCDVH0NLBtQjv5bgVGfg9uq25kZ/CySx6xj/hkfq/0O4QU3AqwRPHeX3w

fM2IIj7AESqgSsQCW3z1EnTsPz/4jCrOR5Rvs6g8Nh+hD1ewqvJbx3eHeoNsnHhB34HE

Zv2QcMbOF2DrW5U1s/cy5SMfRF658doWCBlODIxMvj/EincaDHK8LDdlA+D/8Qxxwk+d

2m8GUjH0w/4XaHzgEf1snND7y2oI8ClZkWqNhJm+RZ3iro3Kr3x512lL2gMzFwXiel6n

ik0A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787576543; x=1788181343;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=z3WTTFMqTPUV5hi4q4WB/MzInwjpIC5h9fnIcuFGo1M=;

b=FvDe99xmeLXGtcZoEGPEDUQjuISS7G+Ataub8bLpum0cmKJHEV6SwFVKJIi7konlfX

IZAKEug8X9xDBv0q7yXafm0b2KadlgPPxM6Ip5eLjnQ1zr08/KF3uh71hx9Z5I1YJo6m

4vYk2humdghq5PDKYX7Nag0zAwRZqaxd/6adpQ4EeQufovJh/dQgSsNQkfkX49vEn+AS

NE5MIW+Ug0YW7xcUO1CTP20B8LrSIXqq+1r7XEXO2/jC1PaTEy7eOWKLcMyFnVdVrFsU

p12K8mveRyRLHH9AIU1FbcKXE54jFO6bhnGSMsJ0qnjhtWbBOl4ITQ1lHYhF0bA/PwRD

baVQ==

X-Forwarded-Encrypted: i=1; AHgh+Rpeg4YS1EtkeqSwOv4V3el6M4XNtbD2PqDDfX4cyHlCXmq227oLK2Lk+Yaj5OUUcRAt6+9Z0tg=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++lmaR0F9LaQTzN6CA5+9uG3JxVO31jOK6eJ91nTkfiVaMatSkFm

Uq1QweERfUWeFeprF+kL4+cUHFbdRnwCZKT0KbGIK0lUtI6yi9Tt1LQcw6sEKla0PuH+NRCZJ/2

LnuXpKZCr40QiQCcbURbLWzrExVsJmOg=

X-Gm-Gg: AR+sD12UNs3m3/iQRFXth8sboLyOesvcRJm7exceV1vihCuQd+wHyy+Gl7Fumn1PCfa

CtijHTrUYL0g9C+33Ic+dckD686C14ITQGUrgHGOpf/6JoCBIIE2fOvRsIGzAmoVU95cI5MQTGa

uyW2pxbiQC1F7luidTAHuEMMA60/+M9M720sviznxijxInfKNoiv7/RHkoSoddEuCb++77sN0g0

LfoVb4LrZMS6Ah6sCrOSsoj7lbO6AKithumlMPz0Zpj5UFiK6TmyuesjyFSYH8AlQPoArOLDDOf

2+T4N8GME85o1ECDYqBbEe61D5wygClbT2NZ6SZzasEOj5oR3izbIXY2PN03HMInQtiAvI7lISZ

BCWO/4P6zuRHGguCQ10VrZjKe6ca4dfPy9Q5xD2FV

X-Received: by 2002:a05:6402:24a1:b0:69c:76c6:9bef with SMTP id

4fb4d7f45d1cf-6a582b6278emr20255453a12.10.1787576541913; Mon, 24 Aug 2026

06:02:21 -0700 (PDT)

MIME-Version: 1.0

Reply-To: rossi01martina1@gmail.com

From: Mrs Rossi Martina

Date: Mon, 24 Aug 2026 13:02:23 +0000

X-Gm-Features: AcwNN1XRs1_xnwHla1zo-sc1JSRjFH_jVE3gdAJH-Ga0oyixChFrUiYgNAt9OHs

Message-ID:

Subject: Dear Cherished Friend,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000ca2c790659ca9899"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Dear Cherished Friend, I hope this message finds you well.

My name is Mrs. Rossi Martina, and I am reaching out to share something very

close to my heart. Following the passing of my beloved husband, I have been

blessed wit [...]



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.51 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[rossi01martina1(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[carolineduke2(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[carolineduke2(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.51 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.51 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Dear Cherished Friend,



--000000000000ca2c790659ca9899

Content-Type: text/plain; charset="UTF-8"



--

Dear Cherished Friend,



I hope this message finds you well. My name is Mrs. Rossi Martina, and I am

reaching out to share something very close to my heart. Following the

passing of my beloved husband, I have been blessed with an inheritance of

2,900,000.00 Euros, and I feel a profound calling to use these funds for a

purpose that truly matters.



I would like to offer this money to you, with a heartfelt request that you

utilize 70% of it to establish an orphanage and create charitable

organizations to uplift those in need. It is my fervent hope that these

contributions can give hope and support to the most vulnerable among us.

The remaining 30% can be your just reward for your efforts in making this

dream a reality.



Once I hear from you, I would be grateful to share more details on how we

can bring this humanitarian project to life and facilitate the transfer of

these funds to your bank account.



Thank you for considering this opportunity. I am eager to hear from you

soon and to embark on this meaningful journey together.



Wishing you a beautiful day!

Please reply me on this my email address ( rossi01martina1@gmail.com ).



With warmth and hope,



Your Sister

Rossi Martina



--000000000000ca2c790659ca9899

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ature_prefix">--

-smartmail=3D"gmail_signature">
Dear Cherished Friend,
<=

br>I hope this message finds you well. My name is Mrs. Rossi Martina, and I=

am reaching out to share something very close to my heart. Following the p=

assing of my beloved husband, I have been blessed with an inheritance of 2,=

900,000.00 Euros, and I feel a profound calling to use these funds for a pu=

rpose that truly matters.

I would like to offer this money to you, w=

ith a heartfelt request that you utilize 70% of it to establish an orphanag=

e and create charitable organizations to uplift those in need. It is my fer=

vent hope that these contributions can give hope and support to the most vu=

lnerable among us. The remaining 30% can be your just reward for your effor=

ts in making this dream a reality.

Once I hear from you, I would be =

grateful to share more details on how we can bring this humanitarian projec=

t to life and facilitate the transfer of these funds to your bank account.<=

br>
Thank you for considering this opportunity. I am eager to hear from =

you soon and to embark on this meaningful journey together.

Wishing=

you a beautiful day!
Please reply me on this my email address (
=3D"mailto:rossi01martina1@gmail.com" target=3D"_blank">rossi01martina1@gma=

il.com =C2=A0).

With warmth and hope,

Your Sister
Ross=

i Martina




--000000000000ca2c790659ca9899--

Funding Opportunities spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 07:01:01 -0600

Received: from mail-yw1-f173.google.com ([209.85.128.173]:48174)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyUI8-0000000091W-0mdZ

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:00:53 -0600

Received: by mail-yw1-f173.google.com with SMTP id 00721157ae682-836c5b01e82so45782657b3.0

for ; Mon, 24 Aug 2026 05:59:56 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787576390; cv=none;

d=google.com; s=arc-20260327;

b=Rwj99taXnljunIATKdXnVPUZBldFkr54pF5Yo13OeobldRq0w0z7tNWYQMJzooV8mr

Y/omTvxYPc+fGKuFYBmwKuwYZkRUkFPVI28Fscnt/SJfJJ793dWiJaZs6wRkxzo/8p86

1Tbxuom+kBIx1SwO/IFYCZhn9R7+LXqVqKy2wl94Utbm7ATaC22507YwWvAWJtN8kKle

TmFtqmaK+kGK+BOpOkMKrNJUiW0JEfIbzkTEyw+t6qgYvvFUMSPLAhplkUo+V+f22amf

Pr52guO04qeGLAwILMGPR2FYRPlJk4byrwzWVPWWGx09p3WYG5AHvK2Ss6oeAYHW1EaK

IKyg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=djQH6HF3dvY0zDlRFx0quElIqP1wXx9eLyHJqOUxchs=;

fh=NMW7hXxACmUUcXSiMHj9d9Jo5anNUUpokzWbdmGUphE=;

b=AndIpqoQXe7xNrxKdfjGm1RWGTPiit8+YXaTsfMnj1xkWtlUu3KP8jzyA6YkuP9yFb

SzNMPBqSQq1gSFnt1nC21OFu8RE29eSxMi85sdBhs91tQIk4kZdO646MM3i1Gk9U6ejD

wZFRW1mCEEK8jgbfZAz8EyzJLyWwqWz7sg/+W7s774FwMcBE5NEd4w80vUMLZeCHwmNT

sqD3pwG7mHo54TjT32czNUWQvcAzLWTr5T2kPFuRi2KLrwVROeTTeBEi3v2aIlNs9Bu4

/3J5l9M37eN4ihLoQzZ/pZLJXuC81TQ3qFG9XVIGwLhSNt8SUpw47O9AfJFS56cczh1u

RoZg==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787576390; x=1788181190; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=djQH6HF3dvY0zDlRFx0quElIqP1wXx9eLyHJqOUxchs=;

b=XyncaIyXEq9DusjWaVJhL6G/uml3wrvIYJRIgVDODbzw9yojpk4XhaGsrqVu5CiiHu

nLAL3xYO60OgXBr52taFSDQGCJWCyH/L86VqXhbD+wrbRJLKYST1oLngYg/9sOBncjo0

G9F+Vb2m/iYTEXRIYaaVr3jBzSqXbOuerQ5hkPHkch32digxoROZLE3LGIs+9YNu3Yxf

2tecMh5OtXf6ULxMhllVGfW445bXenzVyqMz9Om9WTSQ7FkjIN52HMLceNzO3psPozeg

ESDwG4ox82Gn31C5zXD1NKJWKgJwhp2Z0lRqHS8x8z65Dj2iBPRAsAIU4XCEB/mwGe5a

Gcdw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787576390; x=1788181190;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=djQH6HF3dvY0zDlRFx0quElIqP1wXx9eLyHJqOUxchs=;

b=tXe5IjpAQ51WJbcWDsGpQWle4YltVeioxaD6NHeugGi4BHMRBXvMpxMUl3Z8CujKWE

61D6hUGjcefOPi6ujA36bPSfjutiK4bzB/LithEyYzAJ6R8cU8tdGXYDqydfpwEfDjrv

Qg6uHNNbZ2iDHt9IqYjAPELGEjjSY+vTpkMTjJNQjPy0EOdDBah5pDuTmWM2/ImNF7jX

iaOZpStDGWve8kQ2eydZLPWHdVamFuYjeK1gnmGI//QtQDycLQsSKNNCxZ5hqMERP1To

n1qTtxb6Ki7n+bFXvt6dGGXsqJTm5SeJ7Ibwt9kQ0u2sMRMxXuUz3ZkeKCKCARHleMcn

zAeg==

X-Forwarded-Encrypted: i=1; AHgh+RptRHfW7QD5TBVoqUHiQG+W+IYK7WhszxpoNkc0Kn1EfdLG2FT/B0Ik9C17ZEIKhHCGbGnS@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++nVEToWsDDkpIpb5kr0TolJcpi2dOzyC6o+VRCkaa3yXy8tPbMO

wDMD/a80+nAWxXrYVyp2kby/d/cOBLBICEFIBYXTiFF5/0rCRBze9S++DmICnv1NElXTdixUxmg

eL6NMc9zbxtTdIk/4sRmp46JGw6BHGvc=

X-Gm-Gg: AR+sD11qkzXIfhMB3XK8uZe0EWjvkVy8lQ1XwLfefBn7Ud2x+iadHHDHfHt6uS4Bfkr

eL50Z/g8UGdOcWEYI8ih0Q2czwEnfE47qq/Nq7IzGzPx2CM689lyiRtdEk/fF5EIVqM/OAvMhj/

NlBVyH3JmtLlCc4zXvEadInd5S3kToArlENHhKgezNcVfmn9gmiwhrlS2Iad3+2wcImuwkNSk7g

1Uz2N1i8yba4EYHi8EJakLt8dClke0igVPH5QBnwMjLIIhAFnbKBRPwfghaKEFG866LQ92iKCaz

645h28m9dmFqAUHRENEbs8xKgo5d8TLlO5Ve6Xo+wgN8mlnMa4BIZUzvlgtb3itKPAbMzPj8V5S

+BpAh

X-Received: by 2002:a05:690c:a94:b0:820:de0:6264 with SMTP id

00721157ae682-849e9e27aabmr122091777b3.0.1787576390361; Mon, 24 Aug 2026

05:59:50 -0700 (PDT)

MIME-Version: 1.0

From: "Dr. Mohammed Abba Bin Khalid"

Date: Mon, 24 Aug 2026 05:59:45 -0700

X-Gm-Features: AcwNN1WFZBJoMnY33SVQd4U_CNRkRgfpnCDdjRm8t_J-bDfkBwBiCCQoXckMefU

Message-ID:

Subject: Subject: Funding Opportunities We are reaching out to establish

connections with individuals, entrepreneurs, corporations, and investors,

including start-up owners, who are in search of financing for their projects.

Our company is ready to invest in viable projects and would be happy to

provide our terms and conditions after reviewing your project plan and

executive summary. If you are genuinely interested in this opportunity,

please contact us with your project plan and executive summary for our

evaluation. Best regards, Dr. Mohammed Abba Bin Khalid.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000c1a5680659ca8f80"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

[209.85.128.173 listed in dnsbl.ahbl.org]

[209.85.128.173 listed in dnsbl.ahbl.org]

[209.85.128.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.173 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[khalidmohammedabba(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.173 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.173 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_HK_NAME_FM_DR No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Subject: Funding Opportunities We are reaching out to establish

connections with individuals, entrepreneurs, corporations, and investors,

including start-up owners, who are in search of financing for their projects.

Our company is ready to invest in viable projects and would be happy to

provide our terms and conditions after reviewing your project plan and

executive summary. If you are genuinely interested in this opportunity,

please contact us with your project plan and executive summary for our

evaluation. Best regards, Dr. Mohammed Abba Bin Khalid.



--000000000000c1a5680659ca8f80

Content-Type: text/plain; charset="UTF-8"







--000000000000c1a5680659ca8f80

Content-Type: text/html; charset="UTF-8"








--000000000000c1a5680659ca8f80--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyV3Z-00000000GRf-2OWy

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:49:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 07:49:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.74.119] (port=50083 helo=smtp74-119.mmglsmd.net)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyUHA-000000008rH-2Nyz

for root@nk.ca;

Mon, 24 Aug 2026 06:59:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.shinestarsteel.com; i=@hn.shinestarsteel.com;

q=dns/txt; s=umail; t=1787576331; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=6fo5KluLkxOCQrP0CoTv4dYIpTzNi7msXmY+3uCROys=;

b=iRtbuhVtyBg8RENEVA1bT/IhwZkTCWuNNrOLP6EPs0q1kylDGo9NlQ0y

xesCJnC+m9CK/8+PjMK8VRvyBWYap+x08f5FVN/C5F6Bw/qmqEOEqQge8h

NCmKqc7owsetbxWnAPDmpUf6wM4hbSAoQHTfTWi8mrSeSnIopvVMvPXPo=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.shinestarsteel.com (Postfix) with ESMTP id pDYXHzoSVLAx

for ; Mon, 24 Aug 2026 20:58:51 +0800

Content-Type: multipart/mixed; boundary="===============0273579675216256839=="

MIME-Version: 1.0

Message-Id: <20260824205851.38086-{13453:20260824205659-13453-81}-0085253@hn.shinestarsteel.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3ASpecialty_Alloy_Steel_Pipes_=E2=80=93_Alternative_Source_f?=

=?utf-8?q?or_Canadian_EPCs?=

From: Sophia-Threeway steel

To: "www.nk.ca"

Date: Mon, 24 Aug 2026 20:58:51 +0800

Mail-ID: 6a8c3ff7e1382308ac1c5b03

X-Spam_score: 12.7

X-Spam_score_int: 127

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Good day !



Content analysis details: (12.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

[160.124.74.119 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.74.119 listed in dnsbl.ahbl.org]

[160.124.74.119 listed in dnsbl.ahbl.org]

[160.124.74.119 listed in dnsbl.ahbl.org]

[160.124.74.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.74.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.74.119 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.74.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.74.119 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shinestarsteel.com]

[URI: threeway-pipe.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: count.shinestarsteel.com]

[URI: count.threeway-pipe.com]

[URI: hn.shinestarsteel.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns18.xincache.com/112.80.181.111]

[URI: ns17.xincache.com/112.80.181.45]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.74.119 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?q?Re=3ASpecialty_Alloy_Steel_Pipes_=E2=80=93_Alternative_Source_f?=

=?utf-8?q?or_Canadian_EPCs?=









Dear Purchasing Manager,



Good day !



This is Sophia from Threeway steel .



We understand Canadian buyers are facing steel import quota restrictions (only 20%-50% of 2024 levels).



To help you navigate this, we offer specialty steel pipes that are less commonly produced in North America:



High-strength alloy: P620 / P690 / 10CrMo9-10



Sour service: API 5L X65/X70 with NACE/HIC/SSC



Marine grade pipes (ABS/DNV/Lloyd's certified)



Our products are not subject to standard TRQ competition. We can provide EN 10204 3.2 and work with your EPC requirements.



Do you have any upcoming projects requiring non-standard grades? A brief call might be valuable.



Best regards,





















If you have any inquiry, pls keep me posted. Thank you.



Wish you have a nice day.



Best regards,



Sophia Zeng

Sales Manager | Industrial Pipe Division



Threeway Steel Co.,Ltd

Tel:+86-731-88736283 Fax:+86-731-88896236

Mobile : +86-13544036536

Email: sophia@threewaysteel.com

Website: www.threewaysteel.com

Skype: zeng.sophia1 Wechat:meiping77



Hunan Steel Industrial Zone, Tianxin Special District,

Changsha City,China

Virtual assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyV3D-00000000GCI-0a6O

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:49:23 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 07:49:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f174.google.com ([209.85.214.174]:53745)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wySJv-00000000C1M-2dja

for root@nk.ca;

Mon, 24 Aug 2026 04:54:37 -0600

Received: by mail-pl1-f174.google.com with SMTP id d9443c01a7336-2cee9b74ee1so26111075ad.3

for ; Mon, 24 Aug 2026 03:53:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787568814; x=1788173614; darn=nk.ca;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=yai13WCIESXRbd5Emg3y52vH/RYsVlvurxqq0G4X1TY=;

b=kmkFfiYmJHaHq5LCH7BfuEa176bfb/NK0lTwW3eDnamqp++syOrOK3GXYntnoTnQ9Q

CAYH0oECFWo8eP/HI8RDalYN10YXokP1q0R6DWTV773tH5bGLXS/lhEdy9YlgddXtSdM

jASwbSkOJYq5Aa0buO+NLF7Sb3D6nNm43B6Q0r5wvgj7YxcLDW/PX8Sx7y+r191k0zfk

6w7xeVA4YjlSFU6kMT/3iFi8y11W+6LxNVsKViU857mswgiiUOLNLo+k/RMxsRj4Nw6q

t1g4pfgq3nfr8BVPyBETUk1wyW/382lPnxarqlH2w15BwJ7ykirc4Km6lg99/1Ufsvos

UzAg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787568814; x=1788173614;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=yai13WCIESXRbd5Emg3y52vH/RYsVlvurxqq0G4X1TY=;

b=rjCxwgSdyF+xsTJhs9Vn8jPzYeAzeesh0wEcTnK4saT334pQuWf/p2ySzZqxXQDuMJ

+mP+lCE27OwXJCjUCv29trDIa6Wy57kj6fD6JGaeYFA+Xmg1NF4Bu6VCAh5xMrBZx3x/

NV8joLzSuz8LplUOsW3PaMtRuTLuuKLz3EcVvAO8fZuIhy46YVSeI4vsRfDGUojxEen0

UKPdG3CqmC8DmOv8eV/Ygn0q9hjMzJg9PGBRK9Jh/ciotHupCrL5f7SmE82skhZU/4Gx

f5etX9CfEBe8Tgg82SgAY7ZchzEZ/gebv2ORsNIQhdKTJ8+gGWGIwi405TCciyUmvUYJ

XLBw==

X-Gm-Message-State: AFuF++m8LiTTLi0CZPj+pvRNLq7sv/LzbN1NPtSCrlMhHI7fnXEsx55d

rXWZSODy+ytCMHIVq6vYG42lYYcXQian/c0R1eccEjsrFhWK8EIpb9Zl0Zy59Q==

X-Gm-Gg: AR+sD12ZZokEXwN9VZFPsRK4sH6fjTKlz4SozP0hr+kWdKSOn6UUac9RouFUDlvdzK5

6w9Xf7pkivb3BjQyT2mg4L8QWGN+G7Ym0sEewjB6rNQ9l1pJLwWTpgqfjFWPAHi0tKaqpSDQZcM

3mWCbdqHhYMZ3rOijOxD6rnoD18Ijop8FaeOOrfEAOpIH8BoJ9UNczAff3/aFFA7io3T1i1n5lT

LjNz4wLEZgoE+IdgtPf14OB+naSnuOeKeJdufo2IYcBLW/kJIGh8MKZcQf1NQvstf0tT9INWrBW

kkWzNTsxGfGXabjQbkH8UQVwJxMJ5vlaLk42TKcfn2V+fVfHfXOoJFevgwx/gJzdAgS1WFE2Ai4

4LUFFbGjMOn+1sBkpjYGJ8YtzKL0lFPN43W/BiNw+nns4SjxoA/6+Ov5sJQm5AgMNkDReMM8aSv

j66xNwGJcW5HYu9v02L8BnHQMXNMttPNYwlKjndjBKo74y5i/RRqtuE/GXdDzsawwMeJ8XoEWm9

JnBcQ==

X-Received: by 2002:a17:902:cec7:b0:2d6:702e:b1ba with SMTP id d9443c01a7336-2d670b7f140mr299832355ad.3.1787568814177;

Mon, 24 Aug 2026 03:53:34 -0700 (PDT)

Received: from gmail.com ([122.160.196.13])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-327f923f2c0sm38421535eec.30.2026.08.24.03.53.31

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 24 Aug 2026 03:53:32 -0700 (PDT)

Message-ID: <6a8c22ac.5ba28bc9.1064e9.ec30@mx.google.com>

From: "Alvarez"

Subject: Hi Good Morning, Reminder ## root@nk.ca My Name is Alvarez

To: "root"

Content-Type: multipart/alternative; boundary="qR7k4ZV3Fa5hXoCU=_DVpt38rOuK6sI2q5"

MIME-Version: 1.0

Organization: Headfield Solutions Pvt Ltd

Date: Mon, 24 Aug 2026 16:23:32 +0530



This is a multi-part message in MIME format



--qR7k4ZV3Fa5hXoCU=_DVpt38rOuK6sI2q5

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hi Good Morning, =20



Any Update.?



Let me know if you=E2=80=99d like quick support or more details.



I would love to know if you are interested (like Cold Callers, Appoint=

ment setters, Marketing associates, social media managers, administrat=

ive executives, digital marketing, lead generation, data entry, etc...=

) work at a reasonable cost?



Thank you!



Alvarez



VA Team!



=20



On Fri, Jun 19, 2026, at 10:45=E2=80=AFAM Alvarez < alvarezdkuhn7@gmai=

l.com> wrote:



=20



Hi, root@nk.ca



Please, could you let me know whether you are interested in hiring a r=

emote Virtual Assistant at a reasonable cost?



We specialize:- Admin Support, Data Entry, Social Media, Email Managem=

ent, Cold Calling, Lead Generation, Customer Support, Online Research,=

CRM Management, Bookkeeping, Appointment Setting, Document Preparatio=

n, Real Estate Support, 3D Rendering, SEO & Digital Marketing, Web & A=

pp Development, LPO/RPO, and Video Editing.



We provide reliable, affordable, and results-driven remote support tai=

lored to your business needs.



Would you be open to a quick call this week?



Sincerely,



Alvarez



VA Team



Note: If this isn=E2=80=99t relevant, feel free to reply =E2=80=9COpt-=

out=E2=80=9D





--qR7k4ZV3Fa5hXoCU=_DVpt38rOuK6sI2q5

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline







Hi Good Morni=

ng, 





An=

y Update.?


alibri" size=3D"4">Let me know if you=E2=80=99d like quick support or =

more details.


"Calibri" size=3D"4">I would love to know if you are interested (
color=3D"#ff0000">like Cold Callers, Appointment setters, Marketin=

g associates, social media managers, administrative executives, digita=

l marketing, lead generation, data entry, etc...) work at a=

reasonable cost?


ce=3D"Calibri" size=3D"4">



Thank you!





Alvarez
>





VA Team!
t>





 =





On Fri, Jun 1=

9, 2026, at 10:45=E2=80=AFAM Alvarez < alvarezdkuhn7@gmail.com> =

wrote:





 =





Hi, root@nk.c=

a






"Calibri">Please, could you let me know whether you are interested in

hiring a remote Virtual Assistant at a reasonable cost?<=

/p>




"Calibri">We specialize:- Admin Support, Data E=

ntry, Social Media, Email Management,

Cold Calling, Lead Generation, Customer Support, Online Research, CRM

Management, Bookkeeping, Appointment Setting, Document Preparation, Re=

al Estate

Support, 3D Rendering, SEO & Digital Marketing, Web & App Deve=

lopment,

LPO/RPO, and Video Editing.





We provide re=

liable, affordable, and results-driven remote

support tailored to your business needs.






"background: aqua; mso-highlight: aqua;">Would =

you

be open to a quick call this week?





Sincerely,
ont>


face=3D"Calibri">Alvarez





VA Team
>






"Calibri">Note: If this isn=E2=80=99t relevant, feel free to reply =E2=

=80=9COpt-out=E2=80=9D











--qR7k4ZV3Fa5hXoCU=_DVpt38rOuK6sI2q5--



Dating phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <3ELOLagoRBAEgbhvjmbsmpvdwwjsuvbm.fev.qfebwfom3l.bc.db@maestro.bounces.google.com>

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Sun, 23 Aug 2026 21:05:00 -0600

Received: from mail-yw1-f197.google.com ([209.85.128.197]:49640)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <3ELOLagoRBAEgbhvjmbsmpvdwwjsuvbm.fev.qfebwfom3l.bc.db@maestro.bounces.google.com>)

id 1wyKyZ-000000000dI-2on6

for dave@nl2k.ab.ca;

Sun, 23 Aug 2026 21:04:04 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-81ea59b5979so124765357b3.3

for ; Sun, 23 Aug 2026 20:03:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ucvvirtual-edu-pe.20251104.gappssmtp.com; s=20251104; t=1787540583; x=1788145383; darn=nl2k.ab.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=omvyw1RzvDJ2wbJNgGLbbrVMayroBxN+YR5ovQY1Z+s=;

b=T48yXpNPIhSnIc2lO0UV9pqOTQhwPikKVntWTSr3YnX/zUY6yVGhvT099fL8WvImIO

CMNSqY74SHxkojh5V/3FhiJ4sTOgSTOis1IKjBJKdgL4XQ+lhIBAXu8GYQYC+vbxr4oI

afaFaFwDxgJMTEbVx1ptDw+mML7EiopD8b91WqY/im9UZr9aK/LOP8O44bBKpFiZI81v

uZgR3r/59QmeBMhUQ7OEnxmVW3P7qtM4VDLU1OcLicbSCSmEpumSKfGETpsDXIUPBsDY

oCebu6ePEoJQQICcfMfT5gVGF8j1FQDiMIZeaFqJZ5UeZ+sO9qqzzoHKebAPVB+BJXxe

ps9g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787540583; x=1788145383;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=omvyw1RzvDJ2wbJNgGLbbrVMayroBxN+YR5ovQY1Z+s=;

b=FJ2QbXqLW9ckCBlqB90f5GW7mu6WN1E7MnL9f5HbW+d/p8ixuAd+bwahyOYvazJ3Zm

kO6Dclv/eXZGN+oB2liwLc2WTywTGjya8ND+nCffSY/JBP4ONuPe8QP6pPmxXnFrV8UO

Ee/3xoa6w5zDa07m0wm4CR3ZRNYaNpHcpORFlG6uXGz2Ia1WpPIoL0QPmMr+/y2k47tS

XB1wf9xdtMeRT3v1tRghU3ylTugQLY1dmvtfxEB+JbTi+Gb3a6xhDWO7AmYMPTZRIR+w

hsi/1U5EW31ppNsrOpz+CzBCXCE3U4kRuCoindkLTvT5YDPSzHqjDfkvgC68M01Sicjv

gG9A==

X-Gm-Message-State: AFuF++kLakDzktVyMCX13z3WPj19xsigCOcqI6sQnOz56pNOExH3rUkU

RuyauhYTywoGnhxcaw4eio5cHGlKuYjoPvDe7KELWndK/tKz5bBo1ou4ZCIZTtuX+2hJ0fKyBbh

lWX4ksDZQi1NB9tOOAHXEqg==

MIME-Version: 1.0

X-Received: by 2002:a05:690e:4106:b0:66d:830:8131 with SMTP id

956f58d0204a3-66d08308170mr1236670d50.29.1787540240711; Sun, 23 Aug 2026

19:57:20 -0700 (PDT)

Message-ID:

Date: Mon, 24 Aug 2026 02:57:20 +0000

Subject: did you

From: Anna

To: dave@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="00000000000011d33c0659c22513"

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 1,200+ single Ukrainian women online. They make the first

move — you just have to show up. Dating, but backwards Here, she writes

first.



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.197 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.0 OPT_OUT BODY: No description available.

0.2 MARKETING_PARTNERS BODY: Claims you registered with a partner

0.3 OFFER BODY: Offers you Something

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.197 listed in bl.score.senderscore.com]

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} did you



--00000000000011d33c0659c22513

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



MSwyMDArIHNpbmdsZSBVa3JhaW5pYW4gd29tZW4gb25saW5lLiBUaGV5IG1ha2UgdGhlIGZpcnN0

IG1vdmUg4oCUIHlvdSBqdXN0ICANCmhhdmUgdG8gc2hvdyB1cC4NCg0KDQoNCg0KRGF0aW5nLCBi

dXQgYmFja3dhcmRzDQoNCkhlcmUsIHNoZSB3cml0ZXMgZmlyc3QuDQoNCjEsMjAwKyBzaW5nbGUg

VWtyYWluaWFuIHdvbWVuIGFyZSBvbmxpbmUgdG9uaWdodCDigJQgd2l0dHksIGRpcmVjdCwgYW5k

IHRpcmVkICANCm9mIHdhaXRpbmcgYXJvdW5kLg0KDQpNYWtlIGEgcHJvZmlsZSwgYW5kIHRoZSBm

cmllbmQgcmVxdWVzdHMgY29tZSB0byB5b3UuDQoNCg0KDQoNClNlZSB3aG8ncyBvbmxpbmUg4oaS

DQoNCg0KDQpGcmVlIHJlZ2lzdHJhdGlvbiDCtyBObyBjcmVkaXQgY2FyZCDCtyBObyBmYWtlIHBy

b2ZpbGVzDQoNCg0KDQpZb3UgYXJlIHJlY2VpdmluZyB0aGlzIG1lc3NhZ2UgYmVjYXVzZSB5b3Ug

b3B0ZWQgaW4gdG8gcmVjZWl2ZSBvZmZlcnMgZnJvbSAgDQpvbmUgb2Ygb3VyIG1hcmtldGluZyBw

YXJ0bmVycy4gU2VudCBieSBhbiBpbmRlcGVuZGVudCB0aGlyZC1wYXJ0eSBtYXJrZXRpbmcgIA0K

Y29tcGFueSwgbm90IHRoZSBhZHZlcnRpc2VyLiBNdXN0IGJlIDE4Ky4NClVuc3Vic2NyaWJlIMK3

IE9wdCBvdXQgb2YgYWxsIG1haWxpbmdzDQoNCg0KDQo=

--00000000000011d33c0659c22513

Content-Type: text/html; charset="UTF-8"







Someone new



1,200+ single Ukrainian women online. They make the first move — you just have to show up.


















Dating, but backwards



Here, she writes first.



1,200+ single Ukrainian women are online tonight — witty, direct, and tired of waiting around.



Make a profile, and the friend requests come to you.











See who’s online →




Free registration  ·  No credit card  ·  No fake profiles









You are receiving this message because you opted in to receive offers from one of our marketing partners. Sent by an independent third-party marketing company, not the advertiser. Must be 18+.


Unsubscribe  ·  Opt out of all mailings













--00000000000011d33c0659c22513--

Dating phish from google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 23 Aug 2026 22:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyMIx-00000000H0V-48Hg

for dave@doctor.nl2k.ab.ca;

Sun, 23 Aug 2026 22:29:03 -0600

Resent-From: The Doctor

Resent-Date: Sun, 23 Aug 2026 22:29:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f198.google.com ([209.85.221.198]:57650)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyL0u-0000000015O-1lJa

for root@nk.ca;

Sun, 23 Aug 2026 21:06:29 -0600

Received: by mail-vk1-f198.google.com with SMTP id 71dfb90a1353d-5c0fc9b4f43so3542759e0c.3

for ; Sun, 23 Aug 2026 20:05:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=colegiosba-cl.20251104.gappssmtp.com; s=20251104; t=1787540727; x=1788145527; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Sp7zUbn7glq7akKCB224tE9fdAcHLGGWaFk+3CNxJPc=;

b=cYkJ0XIzkHrHjD9JmLd38eXLRJ+akhD9vRB7NY/d2I710BXpuqBWccjRyHOT4L42fm

n55vVhjN8aWnHDyhV/glxcfH7A5EaEFY7T7RFW0TMi9CoTCBsntiFaAzmqDpW838Sc0P

NNeBKw84pDO9mP7n3bqQCrrwO6yDoOQmllMvq/YW/sheMmxNkwwjIHs8ItvTDEHmKPUR

lwnLDAV2Xy2HCzK98dm0QwDNYEA+Jqh2a4VCacHU3sbYtUmshR5iZ7H0KDV1e+/zGTm9

EO6oTHNyvpNW3uD3TKXIcIP2i52yLwbpsLlupZfc/J05oSpaiQiF4PehFlpDaV81hASu

qMRQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787540727; x=1788145527;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Sp7zUbn7glq7akKCB224tE9fdAcHLGGWaFk+3CNxJPc=;

b=BC+NRBc4dMgBLo5pISeqAzr5e9WoYgo+GxLiSHtR673jFwma6nvH3Kx99Z/31Fs5CN

Z9AndJRq/pRG2VMe4bP/kd15tqGncsfIdW5tJk3/BV+iSg3RJ+LK11j0wpjgtOR8a1ZD

5aaiJorIxGYZwTNgEPf5zs+pwZZA5KFDOTSK0kom/G/qStKoOwT7+XSr9Kb7S/5tpO0G

dB5jBghijICjuFhwHyRL8ljd7HnvNcEStyNzcRZfC+msuZBhT9aJFz3j5DegiELhBuIp

NJLXv+T7/HaOhzAaiRoXpHlXHphdJ6ZcAWSGTi6SasVD44HW0Bb0xIRjPxnlxSfo7ju0

3cRA==

X-Gm-Message-State: AFuF++nCc5SEguPU+k5vnKHanXfaPGxOwHvjY2NZWovAFC7/Wv6NIhvR

yHbEntNvBrpk+0m2CY8Lv+eG1JpR+3DhvJfn0sAeU7q+eX/z0aJP1nq7XJl57Eskhr59akO2HUz

8WlWYPT49zRPBEaPQOPsurA==

MIME-Version: 1.0

X-Received: by 2002:a05:690e:138c:b0:66d:c2c:c959 with SMTP id

956f58d0204a3-66d0c2cd563mr35555d50.25.1787540204135; Sun, 23 Aug 2026

19:56:44 -0700 (PDT)

Message-ID:

Date: Mon, 24 Aug 2026 02:56:44 +0000

Subject: did you

From: Anna

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000e3b6b10659c2221c"

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 1,200+ single Ukrainian women online. They make the first

move — you just have to show up. Dating, but backwards Here, she writes

first.



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

[209.85.221.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.198 listed in dnsbl.ahbl.org]

[209.85.221.198 listed in dnsbl.ahbl.org]

[209.85.221.198 listed in dnsbl.ahbl.org]

[209.85.221.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.198 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.198 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.198 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.198 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.0 OPT_OUT BODY: No description available.

0.2 MARKETING_PARTNERS BODY: Claims you registered with a partner

0.3 OFFER BODY: Offers you Something

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} did you



--000000000000e3b6b10659c2221c

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



MSwyMDArIHNpbmdsZSBVa3JhaW5pYW4gd29tZW4gb25saW5lLiBUaGV5IG1ha2UgdGhlIGZpcnN0

IG1vdmUg4oCUIHlvdSBqdXN0ICANCmhhdmUgdG8gc2hvdyB1cC4NCg0KDQoNCg0KRGF0aW5nLCBi

dXQgYmFja3dhcmRzDQoNCkhlcmUsIHNoZSB3cml0ZXMgZmlyc3QuDQoNCjEsMjAwKyBzaW5nbGUg

VWtyYWluaWFuIHdvbWVuIGFyZSBvbmxpbmUgdG9uaWdodCDigJQgd2l0dHksIGRpcmVjdCwgYW5k

IHRpcmVkICANCm9mIHdhaXRpbmcgYXJvdW5kLg0KDQpNYWtlIGEgcHJvZmlsZSwgYW5kIHRoZSBm

cmllbmQgcmVxdWVzdHMgY29tZSB0byB5b3UuDQoNCg0KDQoNClNlZSB3aG8ncyBvbmxpbmUg4oaS

DQoNCg0KDQpGcmVlIHJlZ2lzdHJhdGlvbiDCtyBObyBjcmVkaXQgY2FyZCDCtyBObyBmYWtlIHBy

b2ZpbGVzDQoNCg0KDQpZb3UgYXJlIHJlY2VpdmluZyB0aGlzIG1lc3NhZ2UgYmVjYXVzZSB5b3Ug

b3B0ZWQgaW4gdG8gcmVjZWl2ZSBvZmZlcnMgZnJvbSAgDQpvbmUgb2Ygb3VyIG1hcmtldGluZyBw

YXJ0bmVycy4gU2VudCBieSBhbiBpbmRlcGVuZGVudCB0aGlyZC1wYXJ0eSBtYXJrZXRpbmcgIA0K

Y29tcGFueSwgbm90IHRoZSBhZHZlcnRpc2VyLiBNdXN0IGJlIDE4Ky4NClVuc3Vic2NyaWJlIMK3

IE9wdCBvdXQgb2YgYWxsIG1haWxpbmdzDQoNCg0KDQo=

--000000000000e3b6b10659c2221c

Content-Type: text/html; charset="UTF-8"







Someone new



1,200+ single Ukrainian women online. They make the first move — you just have to show up.


















Dating, but backwards



Here, she writes first.



1,200+ single Ukrainian women are online tonight — witty, direct, and tired of waiting around.



Make a profile, and the friend requests come to you.











See who’s online →




Free registration  ·  No credit card  ·  No fake profiles









You are receiving this message because you opted in to receive offers from one of our marketing partners. Sent by an independent third-party marketing company, not the advertiser. Must be 18+.


Unsubscribe  ·  Opt out of all mailings













--000000000000e3b6b10659c2221c--

chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 24 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyV17-00000000ES4-36ap

for dave@doctor.nl2k.ab.ca;

Mon, 24 Aug 2026 07:47:13 -0600

Resent-From: The Doctor

Resent-Date: Mon, 24 Aug 2026 07:47:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-proxy49142.mail.163.com ([45.254.49.142]:6602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyQfK-00000000Jbj-0HXa

for doctor@nl2k.ab.ca;

Mon, 24 Aug 2026 03:08:35 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com;

s=s110527; h=Date:From:To:Subject:Content-Type:MIME-Version:

Message-ID; bh=ZWi6BjVwpaom8APC1UP/ypVzbpxskOHToZO0wEWeGhw=; b=N

4yhVctjjm1RWdZotakqWIhae5QSaJxXL8MZfdcW6exyao5lZ1iPlrluWicozuV3+

RIBjA9hfi1Wl//1H8wd00HKr8qezUS45c2/D8JX66q4cvtKIBwKhxeAgzOh1IR++

1fWQLvpnpfiYLuZVJ3np/ZLsdQzjJ1Zm3smIZcq0ZI=

Received: from custommadeclothing$163.com (

[240e:388:9939:4301:71bc:49a8:ae2:5b04] ) by ajax-webmail-wmsvr-40-129

(Coremail) ; Mon, 24 Aug 2026 10:26:39 +0800 (CST)

X-Originating-IP: [240e:388:9939:4301:71bc:49a8:ae2:5b04]

Date: Mon, 24 Aug 2026 10:26:39 +0800 (CST)

From: Hi

To: doctor@nl2k.ab.ca

Subject: Custom Garment Co-Develop

X-Priority: 3

X-Mailer: Coremail Webmail Server Version 2023.4-cmXT build

20260511(2e539873) Copyright (c) 2002-2026 www.mailtech.cn 163com

Disposition-Notification-To: custommadeclothing@163.com

X-CM-CTRLMSGS: y7NpUHBsdXM9MTc4NzUzODM5OTM0OV85ZjlkNWQwMTIzYWNhNTk1ZjA5NjM1O

GE4MzhkNjMzMiZtYWlsVHJhY2tpbmc9MSZ0cmFjZUtleT00NmUyZDVmYTNiYzQ2MDk0ZmE4OTNk

NjQ4OTg3YTBkNA==

X-NTES-MT-INF: 46e2d5fa3bc46094fa893d648987a0d4

X-NTES-SC: AL_Qu2TBfmYt0si7yCRYOkdm0oVhO0+Wsa3s/0h34VUc8EEqA3v5zIqRVtDPFfN8+K3ISeGjz62VgFkyspRe5NB5AAi4X+Cfyj3COmuv49OFg==

Content-Type: multipart/alternative;

boundary="----=_Part_31294_110514078.1787538399105"

MIME-Version: 1.0

Message-ID: <34365dd2.2079.1a031975f81.Coremail.custommadeclothing@163.com>

X-Coremail-Locale: zh_CN

X-CM-TRANSID:gSgvCgDnry_fq4tq2so2AA--.1320W

X-CM-SenderInfo: xfxv30xppdvvhfor3xxlqjqiywtou0bp/xtbC2x+f9GqLq9+Z0AAA

3z

X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU==

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, We are a Chinese garment Manufacturer and trader integrated

company. We supply one-stop service from fabric sourcing to shipment. We

handle everything for you here. We focus more on high-quality custom made

garments production and can meet all your personalized require [...]



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

[45.254.49.142 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.254.49.142 listed in dnsbl.ahbl.org]

[45.254.49.142 listed in dnsbl.ahbl.org]

[45.254.49.142 listed in dnsbl.ahbl.org]

[45.254.49.142 listed in dnsbl.ahbl.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.254.49.142 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.254.49.142 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.254.49.142 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.254.49.142 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[240e:388:9939:4301:71bc:49a8:ae2:5b04 listed in]

[zen.spamhaus.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[45.254.49.142 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.254.49.142 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[custommadeclothing(at)163.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

Subject: {SPAM?} Custom Garment Co-Develop





Hello,



We are a Chinese garment Manufacturer and trader integrated company.



We supply one-stop service from fabric sourcing to shipment. We handle everything for you here.

We focus more on high-quality custom made garments production and can meet all your personalized

requirements perfectly. We guarantee stable quality and super low defect rate.



Please feel free to reach out to us if this is the service you are looking for.



Thank you very much for reading,



Lee



WealthSimple T5 Phish from Google

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 23 Aug 2026 17:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyHqt-00000000G2K-3sV8

for dave@doctor.nl2k.ab.ca;

Sun, 23 Aug 2026 17:43:47 -0600

Resent-From: The Doctor

Resent-Date: Sun, 23 Aug 2026 17:43:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from email14.hzhssc.com ([35.214.26.233]:49573)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyDbi-00000000JFO-3aLc

for doctor@nl2k.ab.ca;

Sun, 23 Aug 2026 13:11:58 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=email14.hzhssc.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;

i=info@email14.hzhssc.com;

bh=yS4Z2CrwwT3yQHzEfF9sT006uPMkoAdqAXsu2vzm8tk=;

b=Nb1aKLfe9UbE762JzMSO2oLN1V7RsiCCX2j/N0P0OPM3YP2U8TC5k0GWyqIVlI4zO0HdnlauynVa

5UTcm5RqeL1mJbB7ud9ucbFH+71BbQgyEEHmzfrTpMmtvdowhNpGS24A0bgz9fka5qL5b0y4lcR5

AqQT29sHajqatZA8JJ2CKI1rxf6FiibJ4KUi7fSphnbC42D+vkhE2kMKaF/8dZoWGG/csT7cGJyI

QkLkmwx0pAhuvJLqv9sUs8ICKZus7IxTn4ixSDVhG8rbSkEsaI24xknC+kmd1/c4Uxs3SEnjD54P

zp2/hOl8dr+sNSxmVbMRnPgvIC68DtNHzJm1pA==

Content-Type: multipart/alternative;

boundary="===============3649354081281856333=="

MIME-Version: 1.0

From: Wealthsimple Notify

To: doctor@nl2k.ab.ca

Subject: Your T5 is almost ready - we just need a quick update

Date: Sun, 23 Aug 2026 15:11:01 -0400

Message-ID: <178751226134.4018.13851216408756025903@email14.hzhssc.com>

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Reply-To: info@email14.hzhssc.com

X-Spam_score: 10.8

X-Spam_score_int: 108

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi doctor, We're getting your T5 tax slip ready, but a few

details in your profile are missing or don't quite match our records. A quick

review on your end will get everything back on track. Please complete this

within 24 hours of receiving this email so we can keep your tax slip on schedule.





Content analysis details: (10.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.214.26.233 listed in will-spam-for-food.eu.org]

[35.214.26.233 listed in will-spam-for-food.eu.org]

[35.214.26.233 listed in will-spam-for-food.eu.org]

[35.214.26.233 listed in will-spam-for-food.eu.org]

[35.214.26.233 listed in will-spam-for-food.eu.org]

[35.214.26.233 listed in will-spam-for-food.eu.org]

[35.214.26.233 listed in will-spam-for-food.eu.org]

[35.214.26.233 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.214.26.233 listed in dnsbl.ahbl.org]

[35.214.26.233 listed in dnsbl.ahbl.org]

[35.214.26.233 listed in dnsbl.ahbl.org]

[35.214.26.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.214.26.233 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.214.26.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.214.26.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.214.26.233 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: www.grnysm.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: grnysm.com]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: grnysm.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.214.26.233 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.9 URI_PHISH Phishing using web form

1.0 ACCT_PHISHING Possible phishing for account information

Subject: {SPAM?} Your T5 is almost ready - we just need a quick update



--===============3649354081281856333==

Content-Type: text/plain; charset="iso-2022-jp"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Hi doctor,



We're getting your T5 tax slip ready, but a few details in your profile are missing or don't quite match our records. A quick review on your end will get everything back on track.



Please complete this within 24 hours of receiving this email so we can keep your tax slip on schedule.



Update your information:

https://www.grnysm.com/?uid=wqKxEw578gAUvrRrM5Ob8dZX



How it works:

1. Log in to your Wealthsimple account.

2. Review and update your personal information.

3. Save your changes - we'll take care of the rest.



It only takes a couple of minutes, and we'll never ask for your password by email.



Thanks for taking care of this,

Team Wealthsimple



---

This email was sent to doctor@nl2k.ab.ca.

This is an automated message from Wealthsimple. Please do not reply directly to this email.



--===============3649354081281856333==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PCEtLSBzdWJqZWN0OiBZb3VyIFQ1IGlzIGFsbW9zdCByZWFkeSAtIHdlIGp1c3QgbmVlZCBhIHF1

aWNrIHVwZGF0ZSAtLT4KCjwhRE9DVFlQRSBodG1sPgo8aHRtbCBsYW5nPSJlbiI+CjxoZWFkPgog

IDxtZXRhIGNoYXJzZXQ9IlVURi04Ij4KICA8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0i

d2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEuMCI+CiAgPHRpdGxlPllvdXIgVDUg

aXMgYWxtb3N0IHJlYWR5IC0gd2UganVzdCBuZWVkIGEgcXVpY2sgdXBkYXRlPC90aXRsZT4KPC9o

ZWFkPgo8Ym9keSBzdHlsZT0ibWFyZ2luOjA7IHBhZGRpbmc6MDsgYmFja2dyb3VuZC1jb2xvcjoj

RkFGOEY1OyBmb250LWZhbWlseTpBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyAtd2Via2l0

LXRleHQtc2l6ZS1hZGp1c3Q6MTAwJTsgLW1zLXRleHQtc2l6ZS1hZGp1c3Q6MTAwJTsiPgoKICA8

IS0tIE91dGVyIGJhY2tncm91bmQgLS0+CiAgPHRhYmxlIHJvbGU9InByZXNlbnRhdGlvbiIgd2lk

dGg9IjEwMCUiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgYm9yZGVyPSIwIiBzdHls

ZT0iYmFja2dyb3VuZC1jb2xvcjojRkFGOEY1OyBwYWRkaW5nOjQwcHggMTZweDsiPgogICAgPHRy

PgogICAgICA8dGQgYWxpZ249ImNlbnRlciI+CgogICAgICAgIDwhLS0gQ29udGVudCBjb250YWlu

ZXIgLS0+CiAgICAgICAgPHRhYmxlIHJvbGU9InByZXNlbnRhdGlvbiIgd2lkdGg9IjEwMCUiIGNl

bGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgYm9yZGVyPSIwIiBzdHlsZT0ibWF4LXdpZHRo

OjYwMHB4OyB3aWR0aDoxMDAlOyBiYWNrZ3JvdW5kLWNvbG9yOiNGQ0ZDRkM7IGJvcmRlcjoxcHgg

c29saWQgI0U0RTJFMTsiPgoKICAgICAgICAgIDwhLS0gRm9yZXN0IGdyZWVuIGJyYW5kIGhlYWRl

ciAtLT4KICAgICAgICAgIDx0cj4KICAgICAgICAgICAgPHRkIGFsaWduPSJjZW50ZXIiIHN0eWxl

PSJiYWNrZ3JvdW5kLWNvbG9yOiMwQzNFMzM7IHBhZGRpbmc6MjhweCA0MHB4OyI+CiAgICAgICAg

ICAgICAgPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6R2VvcmdpYSwgJ1RpbWVzIE5ldyBSb21hbics

IHNlcmlmOyBmb250LXNpemU6MjRweDsgY29sb3I6I0ZDRkNGQzsgbGV0dGVyLXNwYWNpbmc6LTAu

MDFlbTsiPldlYWx0aHNpbXBsZTxzcGFuIHN0eWxlPSJjb2xvcjojQzlBMjI3OyI+Kjwvc3Bhbj48

L2Rpdj4KICAgICAgICAgICAgPC90ZD4KICAgICAgICAgIDwvdHI+CgogICAgICAgICAgPCEtLSBF

eWVicm93ICsgSGVhZGxpbmUgLS0+CiAgICAgICAgICA8dHI+CiAgICAgICAgICAgIDx0ZCBzdHls

ZT0icGFkZGluZzo0OHB4IDQwcHggMCA0MHB4OyI+CiAgICAgICAgICAgICAgPGRpdiBzdHlsZT0i

Zm9udC1mYW1pbHk6QXJpYWwsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOjExcHg7

IGxldHRlci1zcGFjaW5nOjAuMTJlbTsgY29sb3I6IzY4NjY2NDsgdGV4dC10cmFuc2Zvcm06dXBw

ZXJjYXNlOyBtYXJnaW46MCAwIDIwcHggMDsiPlQ1IHRheCBzbGlwPC9kaXY+CiAgICAgICAgICAg

ICAgPGgxIHN0eWxlPSJmb250LWZhbWlseTpHZW9yZ2lhLCAnVGltZXMgTmV3IFJvbWFuJywgc2Vy

aWY7IGZvbnQtc2l6ZTozNHB4OyBsaW5lLWhlaWdodDoxLjE1OyBmb250LXdlaWdodDo0MDA7IGNv

bG9yOiMzMjMwMkY7IGxldHRlci1zcGFjaW5nOi0wLjAxZW07IG1hcmdpbjowOyI+QSBxdWljayB1

cGRhdGUsIGFuZCB5b3VyIFQ1IGlzIDxlbSBzdHlsZT0iZm9udC1zdHlsZTppdGFsaWM7Ij5vbiBp

dHMgd2F5PC9lbT4uPC9oMT4KICAgICAgICAgICAgPC90ZD4KICAgICAgICAgIDwvdHI+CgogICAg

ICAgICAgPCEtLSBCb2R5IGNvcHkgLS0+CiAgICAgICAgICA8dHI+CiAgICAgICAgICAgIDx0ZCBz

dHlsZT0icGFkZGluZzoyNHB4IDQwcHggMCA0MHB4OyI+CiAgICAgICAgICAgICAgPHAgc3R5bGU9

ImZvbnQtZmFtaWx5OkFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZToxNnB4

OyBsaW5lLWhlaWdodDoxLjU1OyBjb2xvcjojMzIzMDJGOyBtYXJnaW46MCAwIDE2cHggMDsiPkhp

IGRvY3Rvciw8L3A+CiAgICAgICAgICAgICAgPHAgc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLCBI

ZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZToxNnB4OyBsaW5lLWhlaWdodDoxLjU1OyBj

b2xvcjojMzIzMDJGOyBtYXJnaW46MDsiPldlJ3JlIGdldHRpbmcgeW91ciBUNSB0YXggc2xpcCBy

ZWFkeSwgYnV0IGEgZmV3IGRldGFpbHMgaW4geW91ciBwcm9maWxlIGFyZSBtaXNzaW5nIG9yIGRv

bid0IHF1aXRlIG1hdGNoIG91ciByZWNvcmRzLiBBIHF1aWNrIHJldmlldyBvbiB5b3VyIGVuZCB3

aWxsIGdldCBldmVyeXRoaW5nIGJhY2sgb24gdHJhY2suPC9wPgogICAgICAgICAgICA8L3RkPgog

ICAgICAgICAgPC90cj4KCiAgICAgICAgICA8IS0tIERlYWRsaW5lIG5vdGUgd2l0aCBncmVlbiBs

ZWZ0IHJ1bGUgLS0+CiAgICAgICAgICA8dHI+CiAgICAgICAgICAgIDx0ZCBzdHlsZT0icGFkZGlu

ZzoyOHB4IDQwcHggMCA0MHB4OyI+CiAgICAgICAgICAgICAgPHRhYmxlIHJvbGU9InByZXNlbnRh

dGlvbiIgd2lkdGg9IjEwMCUiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgYm9yZGVy

PSIwIiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojRUVGM0YxOyBib3JkZXI6MXB4IHNvbGlkICNF

NEUyRTE7IGJvcmRlci1sZWZ0OjNweCBzb2xpZCAjMEMzRTMzOyI+CiAgICAgICAgICAgICAgICA8

dHI+CiAgICAgICAgICAgICAgICAgIDx0ZCBzdHlsZT0icGFkZGluZzoxNnB4IDI0cHg7Ij4KICAg

ICAgICAgICAgICAgICAgICA8ZGl2IHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCwgSGVsdmV0aWNh

LCBzYW5zLXNlcmlmOyBmb250LXNpemU6MTNweDsgbGluZS1oZWlnaHQ6MS42OyBjb2xvcjojNjg2

NjY0OyI+UGxlYXNlIGNvbXBsZXRlIHRoaXMgd2l0aGluIDxzdHJvbmcgc3R5bGU9ImNvbG9yOiMw

QzNFMzM7Ij4yNCBob3Vyczwvc3Ryb25nPiBvZiByZWNlaXZpbmcgdGhpcyBlbWFpbCBzbyB3ZSBj

YW4ga2VlcCB5b3VyIHRheCBzbGlwIG9uIHNjaGVkdWxlLjwvZGl2PgogICAgICAgICAgICAgICAg

ICA8L3RkPgogICAgICAgICAgICAgICAgPC90cj4KICAgICAgICAgICAgICA8L3RhYmxlPgogICAg

ICAgICAgICA8L3RkPgogICAgICAgICAgPC90cj4KCiAgICAgICAgICA8IS0tIENUQSAtLT4KICAg

ICAgICAgIDx0cj4KICAgICAgICAgICAgPHRkIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJwYWRkaW5n

OjQwcHggNDBweCAwIDQwcHg7Ij4KICAgICAgICAgICAgICA8YSBocmVmPSJodHRwczovL3d3dy5n

cm55c20uY29tLz91aWQ9VlY5a0ZsY2JmOFFNVWc5TmdTc3F2ZWhjIiBzdHlsZT0iZGlzcGxheTpp

bmxpbmUtYmxvY2s7IGJhY2tncm91bmQtY29sb3I6IzBDM0UzMzsgY29sb3I6I0ZDRkNGQzsgZm9u

dC1mYW1pbHk6QXJpYWwsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOjE1cHg7IGZv

bnQtd2VpZ2h0OmJvbGQ7IHRleHQtZGVjb3JhdGlvbjpub25lOyBib3JkZXItcmFkaXVzOjk5OTlw

eDsgcGFkZGluZzoxNnB4IDMycHg7Ij5VcGRhdGUgeW91ciBpbmZvcm1hdGlvbjwvYT4KICAgICAg

ICAgICAgICA8cCBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsIEhlbHZldGljYSwgc2Fucy1zZXJp

ZjsgZm9udC1zaXplOjEzcHg7IGxpbmUtaGVpZ2h0OjEuNTsgY29sb3I6IzY4NjY2NDsgbWFyZ2lu

OjE2cHggMCAwIDA7Ij5JdCBvbmx5IHRha2VzIGEgY291cGxlIG9mIG1pbnV0ZXMuPC9wPgogICAg

ICAgICAgICA8L3RkPgogICAgICAgICAgPC90cj4KCiAgICAgICAgICA8IS0tIEhvdyBpdCB3b3Jr

cyAtLT4KICAgICAgICAgIDx0cj4KICAgICAgICAgICAgPHRkIHN0eWxlPSJwYWRkaW5nOjQwcHgg

NDBweCAwIDQwcHg7Ij4KICAgICAgICAgICAgICA8ZGl2IHN0eWxlPSJmb250LWZhbWlseTpBcmlh

bCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6MTRweDsgbGluZS1oZWlnaHQ6MS43

OyBjb2xvcjojNjg2NjY0OyI+CiAgICAgICAgICAgICAgICAxLiBMb2cgaW4gdG8geW91ciBXZWFs

dGhzaW1wbGUgYWNjb3VudC48YnI+CiAgICAgICAgICAgICAgICAyLiBSZXZpZXcgYW5kIHVwZGF0

ZSB5b3VyIHBlcnNvbmFsIGluZm9ybWF0aW9uLjxicj4KICAgICAgICAgICAgICAgIDMuIFNhdmUg

eW91ciBjaGFuZ2VzIC0gd2UnbGwgdGFrZSBjYXJlIG9mIHRoZSByZXN0LgogICAgICAgICAgICAg

IDwvZGl2PgogICAgICAgICAgICAgIDxwIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCwgSGVsdmV0

aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6MTNweDsgbGluZS1oZWlnaHQ6MS41NTsgY29sb3I6

IzY4NjY2NDsgbWFyZ2luOjIwcHggMCAwIDA7Ij5XZSdsbCBuZXZlciBhc2sgZm9yIHlvdXIgcGFz

c3dvcmQgYnkgZW1haWwuPC9wPgogICAgICAgICAgICAgIDxwIHN0eWxlPSJmb250LWZhbWlseTpH

ZW9yZ2lhLCAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IGZvbnQtc2l6ZToxNnB4OyBmb250LXN0

eWxlOml0YWxpYzsgbGluZS1oZWlnaHQ6MS41OyBjb2xvcjojMzIzMDJGOyBtYXJnaW46MzJweCAw

IDAgMDsiPlRoYW5rcyBmb3IgdGFraW5nIGNhcmUgb2YgdGhpcyw8YnI+VGVhbSBXZWFsdGhzaW1w

bGU8L3A+CiAgICAgICAgICAgIDwvdGQ+CiAgICAgICAgICA8L3RyPgoKICAgICAgICAgIDwhLS0g

Rm9vdGVyIC0tPgogICAgICAgICAgPHRyPgogICAgICAgICAgICA8dGQgYWxpZ249ImNlbnRlciIg

c3R5bGU9ImJhY2tncm91bmQtY29sb3I6I0ZBRjhGNTsgYm9yZGVyLXRvcDoxcHggc29saWQgI0U0

RTJFMTsgcGFkZGluZzozMnB4IDQwcHg7Ij4KICAgICAgICAgICAgICA8ZGl2IHN0eWxlPSJmb250

LWZhbWlseTpHZW9yZ2lhLCAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7IGZvbnQtc2l6ZToxOHB4

OyBjb2xvcjojMEMzRTMzOyBsZXR0ZXItc3BhY2luZzotMC4wMWVtOyBtYXJnaW46MCAwIDE2cHgg

MDsiPldlYWx0aHNpbXBsZTxzcGFuIHN0eWxlPSJjb2xvcjojQzlBMjI3OyI+Kjwvc3Bhbj48L2Rp

dj4KICAgICAgICAgICAgICA8cCBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsIEhlbHZldGljYSwg

c2Fucy1zZXJpZjsgZm9udC1zaXplOjEycHg7IGxpbmUtaGVpZ2h0OjEuNjsgY29sb3I6IzY4NjY2

NDsgbWFyZ2luOjAgMCA4cHggMDsiPlRoaXMgZW1haWwgd2FzIHNlbnQgdG8gZG9jdG9yQG5sMmsu

YWIuY2EuPC9wPgogICAgICAgICAgICAgIDxwIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCwgSGVs

dmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6MTJweDsgbGluZS1oZWlnaHQ6MS42OyBjb2xv

cjojNjg2NjY0OyBtYXJnaW46MDsiPlRoaXMgaXMgYW4gYXV0b21hdGVkIG1lc3NhZ2UgZnJvbSBX

ZWFsdGhzaW1wbGUuIFBsZWFzZSBkbyBub3QgcmVwbHkgZGlyZWN0bHkgdG8gdGhpcyBlbWFpbC48

L3A+CiAgICAgICAgICAgIDwvdGQ+CiAgICAgICAgICA8L3RyPgoKICAgICAgICA8L3RhYmxlPgoK

ICAgICAgPC90ZD4KICAgIDwvdHI+CiAgPC90YWJsZT4KCjwvYm9keT4KPC9odG1sPgo=



--===============3649354081281856333==--

Wealthsimple T5 phish from Google

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 23 Aug 2026 17:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyHqo-00000000FyZ-3sao

for dave@doctor.nl2k.ab.ca;

Sun, 23 Aug 2026 17:43:42 -0600

Resent-From: The Doctor

Resent-Date: Sun, 23 Aug 2026 17:43:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from email12.zgrfg.com ([35.214.89.119]:57821)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyDW4-00000000ICy-2BDK

for support@nk.ca;

Sun, 23 Aug 2026 13:06:07 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=email12.zgrfg.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;

i=info@email12.zgrfg.com;

bh=tiZTO4dB7WgUk8s34Vqp9aIIQQj19DoooZo9QMTSqdM=;

b=SVEJsIfmeiJRlxXH8C6e1guvfb6TcxsI4EmOVI7TP/W0RYw9252RzAk8w8kbDFrKO9deObBqzwXD

RBIvDLXXu+dKO/4AcrfdG/KSyTzvHMS4WpBQ7XYhVooPLyI8P0JZEXwVcq8iB0i4XGrpemdOmxrI

d85W8CUkSdfCKJYbgfPICdfNvagpFvaevF2p7BdJbsSJ7yA6ZZOrLlOfnxeWCPu7hxWjRs/WLFOH

N1Iike6F4uifE9gkSA5SYXUvkwtBKb8rgA+O0UH9YB+xmA6uCrTkoLF9IEujrCJMlQRQZcAjvm4N

MAX6DOl9oYJ5sIn+isjQwIhxHyZ4UeuPxuIbdg==

Content-Type: multipart/alternative;

boundary="===============8457216272197448085=="

MIME-Version: 1.0

From: Wealthsimple Notify

To: support@nk.ca

Subject: We need a quick update for your T5 tax slip

Date: Sun, 23 Aug 2026 15:05:11 -0400

Message-ID: <178751191181.3928.3958782445714519467@email12.zgrfg.com>

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Reply-To: info@email12.zgrfg.com

X-Spam_score: 11.8

X-Spam_score_int: 118

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi support, We're putting together your T5 tax slip, but a

few of the personal details we have on file are missing or don't quite match

our records. To make sure everything lands right, we need you to log in and

[...]



Content analysis details: (11.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.214.89.119 listed in will-spam-for-food.eu.org]

[35.214.89.119 listed in will-spam-for-food.eu.org]

[35.214.89.119 listed in will-spam-for-food.eu.org]

[35.214.89.119 listed in will-spam-for-food.eu.org]

[35.214.89.119 listed in will-spam-for-food.eu.org]

[35.214.89.119 listed in will-spam-for-food.eu.org]

[35.214.89.119 listed in will-spam-for-food.eu.org]

[35.214.89.119 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.214.89.119 listed in dnsbl.ahbl.org]

[35.214.89.119 listed in dnsbl.ahbl.org]

[35.214.89.119 listed in dnsbl.ahbl.org]

[35.214.89.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.214.89.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.214.89.119 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.214.89.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.214.89.119 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: qcbxlw.com]

[URI: grnysm.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: login.qcbxlw.com]

[URI: login.grnysm.com]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: qcbxlw.com]

[URI: grnysm.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[35.214.89.119 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.9 URI_PHISH Phishing using web form

1.0 ACCT_PHISHING Possible phishing for account information

Subject: {SPAM?} We need a quick update for your T5 tax slip



--===============8457216272197448085==

Content-Type: text/plain; charset="iso-2022-jp"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Hi support,



We're putting together your T5 tax slip, but a few of the personal details we have on file are missing or don't quite match our records. To make sure everything lands right, we need you to log in and update them.



Please complete this within 24 hours of receiving this email to keep your tax slip on schedule.



Update your information:

https://login.qcbxlw.com/?uid=1FSHfFZEtOumx2lQ7br9SyyC



How it works:

1. Log in to your Wealthsimple account.

2. Review and update your personal information.

3. Save your changes - we'll take care of the rest.



It only takes a couple of minutes, and we'll never ask for your password by email.



Thanks for taking care of this,

Team Wealthsimple



---

This email was sent to support@nk.ca.

This is an automated message from Wealthsimple. Please do not reply directly to this email.



--===============8457216272197448085==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PCEtLSBzdWJqZWN0OiBXZSBuZWVkIGEgcXVpY2sgdXBkYXRlIGZvciB5b3VyIFQ1IHRheCBzbGlw

IC0tPgoKPCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KPGhlYWQ+CiAgPG1ldGEgY2hh

cnNldD0iVVRGLTgiPgogIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZp

Y2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4KICA8dGl0bGU+V2UgbmVlZCBhIHF1aWNrIHVw

ZGF0ZSBmb3IgeW91ciBUNSB0YXggc2xpcDwvdGl0bGU+CjwvaGVhZD4KPGJvZHkgc3R5bGU9Im1h

cmdpbjowOyBwYWRkaW5nOjA7IGJhY2tncm91bmQtY29sb3I6I0ZBRjhGNTsgZm9udC1mYW1pbHk6

QXJpYWwsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OjEw

MCU7IC1tcy10ZXh0LXNpemUtYWRqdXN0OjEwMCU7Ij4KCiAgPCEtLSBPdXRlciBiYWNrZ3JvdW5k

IC0tPgogIDx0YWJsZSByb2xlPSJwcmVzZW50YXRpb24iIHdpZHRoPSIxMDAlIiBjZWxscGFkZGlu

Zz0iMCIgY2VsbHNwYWNpbmc9IjAiIGJvcmRlcj0iMCIgc3R5bGU9ImJhY2tncm91bmQtY29sb3I6

I0ZBRjhGNTsgcGFkZGluZzo0MHB4IDE2cHg7Ij4KICAgIDx0cj4KICAgICAgPHRkIGFsaWduPSJj

ZW50ZXIiPgoKICAgICAgICA8IS0tIENvbnRlbnQgY29udGFpbmVyIC0tPgogICAgICAgIDx0YWJs

ZSByb2xlPSJwcmVzZW50YXRpb24iIHdpZHRoPSIxMDAlIiBjZWxscGFkZGluZz0iMCIgY2VsbHNw

YWNpbmc9IjAiIGJvcmRlcj0iMCIgc3R5bGU9Im1heC13aWR0aDo2MDBweDsgd2lkdGg6MTAwJTsg

YmFja2dyb3VuZC1jb2xvcjojRkNGQ0ZDOyBib3JkZXI6MXB4IHNvbGlkICNFNEUyRTE7Ij4KCiAg

ICAgICAgICA8IS0tIEJyYW5kIGhlYWRlciAtLT4KICAgICAgICAgIDx0cj4KICAgICAgICAgICAg

PHRkIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJwYWRkaW5nOjM2cHggNDBweCAwIDQwcHg7Ij4KICAg

ICAgICAgICAgICA8ZGl2IHN0eWxlPSJmb250LWZhbWlseTpHZW9yZ2lhLCAnVGltZXMgTmV3IFJv

bWFuJywgc2VyaWY7IGZvbnQtc2l6ZToyNHB4OyBjb2xvcjojMzIzMDJGOyBsZXR0ZXItc3BhY2lu

ZzotMC4wMWVtOyI+V2VhbHRoc2ltcGxlPHNwYW4gc3R5bGU9ImNvbG9yOiNDOUEyMjc7Ij4qPC9z

cGFuPjwvZGl2PgogICAgICAgICAgICA8L3RkPgogICAgICAgICAgPC90cj4KCiAgICAgICAgICA8

IS0tIEV5ZWJyb3cgKyBIZWFkbGluZSAtLT4KICAgICAgICAgIDx0cj4KICAgICAgICAgICAgPHRk

IHN0eWxlPSJwYWRkaW5nOjQ4cHggNDBweCAwIDQwcHg7Ij4KICAgICAgICAgICAgICA8ZGl2IHN0

eWxlPSJmb250LWZhbWlseTpBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6

MTFweDsgbGV0dGVyLXNwYWNpbmc6MC4xMmVtOyBjb2xvcjojNjg2NjY0OyB0ZXh0LXRyYW5zZm9y

bTp1cHBlcmNhc2U7IG1hcmdpbjowIDAgMjBweCAwOyI+VDUgdGF4IHNsaXA8L2Rpdj4KICAgICAg

ICAgICAgICA8aDEgc3R5bGU9ImZvbnQtZmFtaWx5Okdlb3JnaWEsICdUaW1lcyBOZXcgUm9tYW4n

LCBzZXJpZjsgZm9udC1zaXplOjM0cHg7IGxpbmUtaGVpZ2h0OjEuMTU7IGZvbnQtd2VpZ2h0OjQw

MDsgY29sb3I6IzMyMzAyRjsgbGV0dGVyLXNwYWNpbmc6LTAuMDFlbTsgbWFyZ2luOjA7Ij5MZXQn

cyBnZXQgeW91ciBUNSA8ZW0gc3R5bGU9ImZvbnQtc3R5bGU6aXRhbGljOyI+ZmluaXNoZWQ8L2Vt

Pi48L2gxPgogICAgICAgICAgICA8L3RkPgogICAgICAgICAgPC90cj4KCiAgICAgICAgICA8IS0t

IEJvZHkgY29weSAtLT4KICAgICAgICAgIDx0cj4KICAgICAgICAgICAgPHRkIHN0eWxlPSJwYWRk

aW5nOjI0cHggNDBweCAwIDQwcHg7Ij4KICAgICAgICAgICAgICA8cCBzdHlsZT0iZm9udC1mYW1p

bHk6QXJpYWwsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOjE2cHg7IGxpbmUtaGVp

Z2h0OjEuNTU7IGNvbG9yOiMzMjMwMkY7IG1hcmdpbjowIDAgMTZweCAwOyI+SGkgc3VwcG9ydCw8

L3A+CiAgICAgICAgICAgICAgPHAgc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLCBIZWx2ZXRpY2Es

IHNhbnMtc2VyaWY7IGZvbnQtc2l6ZToxNnB4OyBsaW5lLWhlaWdodDoxLjU1OyBjb2xvcjojMzIz

MDJGOyBtYXJnaW46MDsiPldlJ3JlIHB1dHRpbmcgdG9nZXRoZXIgeW91ciBUNSB0YXggc2xpcCwg

YnV0IGEgZmV3IG9mIHRoZSBwZXJzb25hbCBkZXRhaWxzIHdlIGhhdmUgb24gZmlsZSBhcmUgbWlz

c2luZyBvciBkb24ndCBxdWl0ZSBtYXRjaCBvdXIgcmVjb3Jkcy4gVG8gbWFrZSBzdXJlIGV2ZXJ5

dGhpbmcgbGFuZHMgcmlnaHQsIHdlIG5lZWQgeW91IHRvIGxvZyBpbiBhbmQgdXBkYXRlIHRoZW0u

PC9wPgogICAgICAgICAgICA8L3RkPgogICAgICAgICAgPC90cj4KCiAgICAgICAgICA8IS0tIERl

YWRsaW5lIG5vdGUgLS0+CiAgICAgICAgICA8dHI+CiAgICAgICAgICAgIDx0ZCBzdHlsZT0icGFk

ZGluZzoyOHB4IDQwcHggMCA0MHB4OyI+CiAgICAgICAgICAgICAgPHRhYmxlIHJvbGU9InByZXNl

bnRhdGlvbiIgd2lkdGg9IjEwMCUiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgYm9y

ZGVyPSIwIiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojRjFGMEYwOyBib3JkZXI6MXB4IHNvbGlk

ICNFNEUyRTE7Ij4KICAgICAgICAgICAgICAgIDx0cj4KICAgICAgICAgICAgICAgICAgPHRkIHN0

eWxlPSJwYWRkaW5nOjE2cHggMjRweDsiPgogICAgICAgICAgICAgICAgICAgIDxkaXYgc3R5bGU9

ImZvbnQtZmFtaWx5OkFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZToxM3B4

OyBsaW5lLWhlaWdodDoxLjY7IGNvbG9yOiM2ODY2NjQ7Ij5QbGVhc2UgY29tcGxldGUgdGhpcyB3

aXRoaW4gPHN0cm9uZyBzdHlsZT0iY29sb3I6IzMyMzAyRjsiPjI0IGhvdXJzPC9zdHJvbmc+IG9m

IHJlY2VpdmluZyB0aGlzIGVtYWlsIHRvIGtlZXAgeW91ciB0YXggc2xpcCBvbiBzY2hlZHVsZS48

L2Rpdj4KICAgICAgICAgICAgICAgICAgPC90ZD4KICAgICAgICAgICAgICAgIDwvdHI+CiAgICAg

ICAgICAgICAgPC90YWJsZT4KICAgICAgICAgICAgPC90ZD4KICAgICAgICAgIDwvdHI+CgogICAg

ICAgICAgPCEtLSBDVEEgLS0+CiAgICAgICAgICA8dHI+CiAgICAgICAgICAgIDx0ZCBhbGlnbj0i

Y2VudGVyIiBzdHlsZT0icGFkZGluZzo0MHB4IDQwcHggMCA0MHB4OyI+CiAgICAgICAgICAgICAg

PGEgaHJlZj0iaHR0cHM6Ly9sb2dpbi5ncm55c20uY29tLz91aWQ9VVRSNG4xS3phbjAyTzhjMVFV

OUEwanE0IiBzdHlsZT0iZGlzcGxheTppbmxpbmUtYmxvY2s7IGJhY2tncm91bmQtY29sb3I6IzA5

MDkwQTsgY29sb3I6I0ZDRkNGQzsgZm9udC1mYW1pbHk6QXJpYWwsIEhlbHZldGljYSwgc2Fucy1z

ZXJpZjsgZm9udC1zaXplOjE1cHg7IGZvbnQtd2VpZ2h0OmJvbGQ7IHRleHQtZGVjb3JhdGlvbjpu

b25lOyBib3JkZXItcmFkaXVzOjk5OTlweDsgcGFkZGluZzoxNnB4IDMycHg7Ij5VcGRhdGUgeW91

ciBpbmZvcm1hdGlvbjwvYT4KICAgICAgICAgICAgICA8cCBzdHlsZT0iZm9udC1mYW1pbHk6QXJp

YWwsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOjEzcHg7IGxpbmUtaGVpZ2h0OjEu

NTsgY29sb3I6IzY4NjY2NDsgbWFyZ2luOjE2cHggMCAwIDA7Ij5JdCBvbmx5IHRha2VzIGEgY291

cGxlIG9mIG1pbnV0ZXMuPC9wPgogICAgICAgICAgICA8L3RkPgogICAgICAgICAgPC90cj4KCiAg

ICAgICAgICA8IS0tIEhvdyBpdCB3b3JrcyAtLT4KICAgICAgICAgIDx0cj4KICAgICAgICAgICAg

PHRkIHN0eWxlPSJwYWRkaW5nOjQwcHggNDBweCAwIDQwcHg7Ij4KICAgICAgICAgICAgICA8ZGl2

IHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNp

emU6MTRweDsgbGluZS1oZWlnaHQ6MS43OyBjb2xvcjojNjg2NjY0OyI+CiAgICAgICAgICAgICAg

ICAxLiBMb2cgaW4gdG8geW91ciBXZWFsdGhzaW1wbGUgYWNjb3VudC48YnI+CiAgICAgICAgICAg

ICAgICAyLiBSZXZpZXcgYW5kIHVwZGF0ZSB5b3VyIHBlcnNvbmFsIGluZm9ybWF0aW9uLjxicj4K

ICAgICAgICAgICAgICAgIDMuIFNhdmUgeW91ciBjaGFuZ2VzIC0gd2UnbGwgdGFrZSBjYXJlIG9m

IHRoZSByZXN0LgogICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICAgIDxwIHN0eWxlPSJm

b250LWZhbWlseTpBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6MTNweDsg

bGluZS1oZWlnaHQ6MS41NTsgY29sb3I6IzY4NjY2NDsgbWFyZ2luOjIwcHggMCAwIDA7Ij5XZSds

bCBuZXZlciBhc2sgZm9yIHlvdXIgcGFzc3dvcmQgYnkgZW1haWwuPC9wPgogICAgICAgICAgICAg

IDxwIHN0eWxlPSJmb250LWZhbWlseTpHZW9yZ2lhLCAnVGltZXMgTmV3IFJvbWFuJywgc2VyaWY7

IGZvbnQtc2l6ZToxNnB4OyBmb250LXN0eWxlOml0YWxpYzsgbGluZS1oZWlnaHQ6MS41OyBjb2xv

cjojMzIzMDJGOyBtYXJnaW46MzJweCAwIDAgMDsiPlRoYW5rcyBmb3IgdGFraW5nIGNhcmUgb2Yg

dGhpcyw8YnI+VGVhbSBXZWFsdGhzaW1wbGU8L3A+CiAgICAgICAgICAgIDwvdGQ+CiAgICAgICAg

ICA8L3RyPgoKICAgICAgICAgIDwhLS0gRm9vdGVyIC0tPgogICAgICAgICAgPHRyPgogICAgICAg

ICAgICA8dGQgYWxpZ249ImNlbnRlciIgc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I0ZBRjhGNTsg

Ym9yZGVyLXRvcDoxcHggc29saWQgI0U0RTJFMTsgcGFkZGluZzozMnB4IDQwcHg7Ij4KICAgICAg

ICAgICAgICA8ZGl2IHN0eWxlPSJmb250LWZhbWlseTpHZW9yZ2lhLCAnVGltZXMgTmV3IFJvbWFu

Jywgc2VyaWY7IGZvbnQtc2l6ZToxOHB4OyBjb2xvcjojMzIzMDJGOyBsZXR0ZXItc3BhY2luZzot

MC4wMWVtOyBtYXJnaW46MCAwIDE2cHggMDsiPldlYWx0aHNpbXBsZTxzcGFuIHN0eWxlPSJjb2xv

cjojQzlBMjI3OyI+Kjwvc3Bhbj48L2Rpdj4KICAgICAgICAgICAgICA8cCBzdHlsZT0iZm9udC1m

YW1pbHk6QXJpYWwsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOjEycHg7IGxpbmUt

aGVpZ2h0OjEuNjsgY29sb3I6IzY4NjY2NDsgbWFyZ2luOjAgMCA4cHggMDsiPlRoaXMgZW1haWwg

d2FzIHNlbnQgdG8gc3VwcG9ydEBuay5jYS48L3A+CiAgICAgICAgICAgICAgPHAgc3R5bGU9ImZv

bnQtZmFtaWx5OkFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZToxMnB4OyBs

aW5lLWhlaWdodDoxLjY7IGNvbG9yOiM2ODY2NjQ7IG1hcmdpbjowOyI+VGhpcyBpcyBhbiBhdXRv

bWF0ZWQgbWVzc2FnZSBmcm9tIFdlYWx0aHNpbXBsZS4gUGxlYXNlIGRvIG5vdCByZXBseSBkaXJl

Y3RseSB0byB0aGlzIGVtYWlsLjwvcD4KICAgICAgICAgICAgPC90ZD4KICAgICAgICAgIDwvdHI+

CgogICAgICAgIDwvdGFibGU+CgogICAgICA8L3RkPgogICAgPC90cj4KICA8L3RhYmxlPgoKPC9i

b2R5Pgo8L2h0bWw+Cg==



--===============8457216272197448085==--

Spotify phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 23 Aug 2026 12:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyD7l-00000000Dvo-3Dqr

for dave@doctor.nl2k.ab.ca;

Sun, 23 Aug 2026 12:40:53 -0600

Resent-From: The Doctor

Resent-Date: Sun, 23 Aug 2026 12:40:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from relay02.th.seeweb.it ([5.144.164.163]:43439)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyCE5-000000003UL-3am7

for doctor@nl2k.ab.ca;

Sun, 23 Aug 2026 11:43:30 -0600

Received: from cp.tophost.it (vm5849.seewebcloud.it [217.64.195.235])

by m-r1.th.seeweb.it (Postfix) with ESMTPA id 0B3B1201AD;

Sun, 23 Aug 2026 19:42:29 +0200 (CEST)

MIME-Version: 1.0

Date: Sun, 23 Aug 2026 19:42:28 +0200

From: "Service.de"

To: officina@andreaferraiuolo.it

Subject: =?UTF-8?Q?Sicherheitshinweis=3A_Ihr_PayPal-Konto_wurde_vor=C3=BC?=

=?UTF-8?Q?bergehend_eingeschr=C3=A4nkt?=

Message-ID:

X-Sender: officina@andreaferraiuolo.it

Content-Type: multipart/alternative;

boundary="=_034d524e0c7691770f4230dc75680be1"

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Spotify ACTION REQUIRED ON YOUR ACCOUNT



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[217.64.195.235 listed in will-spam-for-food.eu.org]

[217.64.195.235 listed in will-spam-for-food.eu.org]

[217.64.195.235 listed in will-spam-for-food.eu.org]

[217.64.195.235 listed in will-spam-for-food.eu.org]

[217.64.195.235 listed in will-spam-for-food.eu.org]

[217.64.195.235 listed in will-spam-for-food.eu.org]

[217.64.195.235 listed in will-spam-for-food.eu.org]

[217.64.195.235 listed in will-spam-for-food.eu.org]

[5.144.164.163 listed in will-spam-for-food.eu.org]

[5.144.164.163 listed in will-spam-for-food.eu.org]

[5.144.164.163 listed in will-spam-for-food.eu.org]

[5.144.164.163 listed in will-spam-for-food.eu.org]

[5.144.164.163 listed in will-spam-for-food.eu.org]

[5.144.164.163 listed in will-spam-for-food.eu.org]

[5.144.164.163 listed in will-spam-for-food.eu.org]

[5.144.164.163 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[5.144.164.163 listed in dnsbl.ahbl.org]

[5.144.164.163 listed in dnsbl.ahbl.org]

[5.144.164.163 listed in dnsbl.ahbl.org]

[5.144.164.163 listed in dnsbl.ahbl.org]

[217.64.195.235 listed in dnsbl.ahbl.org]

[217.64.195.235 listed in dnsbl.ahbl.org]

[217.64.195.235 listed in dnsbl.ahbl.org]

[217.64.195.235 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[5.144.164.163 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[5.144.164.163 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[5.144.164.163 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[5.144.164.163 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: qrcodedynamic.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[5.144.164.163 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[5.144.164.163 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 ACCT_PHISHING Possible phishing for account information

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?} =?UTF-8?Q?Sicherheitshinweis=3A_Ihr_PayPal-Konto_wurde_vor=C3=BC?=

=?UTF-8?Q?bergehend_eingeschr=C3=A4nkt?=



--=_034d524e0c7691770f4230dc75680be1

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=US-ASCII;

format=flowed







Spotify



ACTION REQUIRED ON YOUR ACCOUNT



Hello,



We encountered an issue while trying to process the latest payment for

your Premium subscription.



Your bank may have declined the charge, or the card on file might be

expired. To keep enjoying ad-free music, please update your billing

information securely.



Update Details [1]



Thank you,

The Spotify Team



(c) 2026 Spotify AB. Regeringsgatan 19, 111 53 Stockholm, Sweden.







Links:

------

[1] https://qrcodedynamic.com/hsgaljahana

--=_034d524e0c7691770f4230dc75680be1

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8




=3DUTF-8" />
eva,sans-serif'>










0">

Account Update




y: 'Helvetica Neue', Arial, sans-serif;">


nd-color: #f6f6f6; padding: 50px 0;">










x-width: 500px; background-color: #ffffff; border-radius: 12px; box-shadow:=

0 8px 24px rgba(0,0,0,0.05); overflow: hidden;">


























x solid #f1f1f1;">


954; letter-spacing: -1px;">Spotify

33;">


700; color: #121212;">Action required on your account



=20


=2E5; color: #555555; text-align: left;">Hello,



=20


=2E5; color: #555555; text-align: left;">

We encountered an issue while trying to process the latest pa=

yment for your Premium subscription.



=20


=2E5; color: #555555; text-align: left;">

Your bank may have declined the charge, or the card on file m=

ight be expired. To keep enjoying ad-free music, please update your billing=

information securely.



=20












=3D"display: inline-block; background-color: #1ed760; color: #121212; paddi=

ng: 15px 40px; font-size: 16px; font-weight: bold; text-decoration: none; b=

order-radius: 50px;">Update Details


=20


=2E5; color: #555555; text-align: left;">

Thank you,
The Spotify Team

align: center; border-top: 1px solid #f1f1f1;">



© 2026 Spotify AB. Regeringsgatan 19, 111 53 Stockholm, =

Sweden.












--=_034d524e0c7691770f4230dc75680be1--

Web/SEo/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 23 Aug 2026 12:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyD7B-00000000Dp8-18z5

for dave@doctor.nl2k.ab.ca;

Sun, 23 Aug 2026 12:40:17 -0600

Resent-From: The Doctor

Resent-Date: Sun, 23 Aug 2026 12:40:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013075.outbound.protection.outlook.com ([52.103.43.75]:35496 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wy9eg-00000000NNn-0zu6

for sales@nk.ca;

Sun, 23 Aug 2026 08:58:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ckFGe/bT/VDTJ5suRNoGnnyWYWOsM6a7UYOjLPiuYCfAlKTjt/2Ij0lJiozYfRTO/iGBdJqwwQR3Z5UXdAg/ZUJ5miBTaRXSyrlUQzboO1Xk73TkdcetrV4LwSgAniu4BlgrciBSJUGlDZQqKB8fU1GA3+3K5NGWoKmkWFZmOjPXL1E8TdjWSS7x/UnBKmjH82G2Kni6Je6WquxUqs408Za58ydiHIbVkRBu1BP4nMx0EI8+RriYwVyHm9GpdAi5POZoonw1t7zCyBF6dOFD8qxBya28ZVsVeJu3TR7bl2ArCOAaXRj0paVCdvp/fkGTaliOHXNY7d75B4D7RCk51g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=jIZZN1iBhPtx/CLqpIKz0tYJdmgjPFBTJGNU45LilzY=;

b=OuaDizUR7wb+zwGdwvzQiLeDMgHMx7VSjwMMBWwKdxalYnK15DShIkMLyT5VI97HuneCFiR6Ut7uW6NMgnHAIZ4TrwEHj6IOWPu0fqO3PNF7OfVuHQI5xVh9CHh7T42m9wU1U1wpFwH0aBZECX+gpO+71l4IgtNp0jPJ3VFKETN2wBMA8+AKJO3V29C9N/3vcrjcLDpoH1DLMnz7vJmbYIvZbQN9SechO4YZJqOVv0ydxmwbjq5pE/VVTv6IIb5uyCveXOyxdHm+fsAPMOFYl938uTDDozN8YqvoCCUZRnr/3AYMeQHpp0BFeUJ2pPt68NLOPu6xf4k8KJBSTJb0IQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=jIZZN1iBhPtx/CLqpIKz0tYJdmgjPFBTJGNU45LilzY=;

b=hPp0NfQYuwsvWuN9C8DSLGVbCUAGRttrLK/feFVeb+GXDdPYsgILQzK76BQ3ewTMDQMbE3zn0meax86mkSO96gP7x+YWltFkjJqOYrULANhWTxSIWKWrkku5fHIBzE/c8c/ZezCh+4kDj6EQfLT+/Hk0R8+6AaCEY0C3aItSUsQ+/cnWCu9M3q1A6SCyoNFYfgCoeYvrOU6VJaoyleCOY9fTqULjGAQ9tFYSVT5wQVLnc2pid1VI78UKkuj2kFYRh6bf7fz9jKsSaYkLn0JAKDH7YT2Aih5c5sFbRmFzRAHouWPHoRCYPhHoiWsmmNuKzMRoSVOqqhknhurFyzJoZg==

Received: from TYPPR03MB9723.apcprd03.prod.outlook.com (2603:1096:405:397::22)

by KL1PR03MB7224.apcprd03.prod.outlook.com (2603:1096:820:d2::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.339.12; Sun, 23 Aug

2026 14:57:31 +0000

Received: from TYPPR03MB9723.apcprd03.prod.outlook.com

([fe80::a0c4:bd2e:7615:ffbd]) by TYPPR03MB9723.apcprd03.prod.outlook.com

([fe80::a0c4:bd2e:7615:ffbd%4]) with mapi id 15.21.0339.012; Sun, 23 Aug 2026

14:57:31 +0000

From: Tony Hooper

To: Tony Hooper

Subject: pricing?

Thread-Topic: pricing?

Thread-Index: AQHdMw+QSWBTdBOym0eB/AIOmi+XFg==

Date: Sun, 23 Aug 2026 14:57:31 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYPPR03MB9723:EE_|KL1PR03MB7224:EE_

x-ms-office365-filtering-correlation-id: 4bdf8992-f0d2-4966-cf65-08df0126dba9

x-microsoft-antispam:

BCL:0;ARA:14566002|9112599006|24121999003|25010399006|4140399003|2604031031799003|16051099003|55001999006|24071999003|2604032031799003|20031999006|31061999003|8060799015|19110799012|15030799006|22091999003|8062599012|39105399006|15080799012|440099028|3412199025|3420499032|102099032|40105399003|51015399003|11120399003|2607281247196008|26121999007|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?rZmuwihM6HWTQHZK0Ww/CWxU3vFNv5JyupHqjc2Zo4hxs2POC2cPp6xI?=

=?Windows-1252?Q?PEtkxRB1r+4LzoUyGyKAbIv5pWcgFK1d7qAjCb93dEjW6yFF/XNbo1Va?=

=?Windows-1252?Q?8U7I4mwV3srnRwHUsJJm0pCmenH2nPyb7SBl86X0RxyfhHd1wxSkve3o?=

=?Windows-1252?Q?zYepIXPRIhSlAWflzFga6MzoTOtBoPh+e0LctCRRQ2Lryq+/pFZsi0EK?=

=?Windows-1252?Q?MYJ0W47bePdlMIUD0vZ7BEMTwBP8b6dLAA9anOscj884gZfPYKcY7BIA?=

=?Windows-1252?Q?vTMbJS3S8Rv5P9f0s8iKaKWM8LX0hn9Wu8Mrvjb87IYddJSpyhlxoVgd?=

=?Windows-1252?Q?4ScnpKANi6a/of40CgthXCusvJXfa9ml/sGLDcrMCoFG7occdrUjGQ3U?=

=?Windows-1252?Q?Y+m3i/V96YCr8AK86BvqX4HgfABHKBcnoxcWP36+1fA8lTeRLCY6J/SC?=

=?Windows-1252?Q?3zpHISDPgQwy2ZVBQ3XM6n8G/yIHVFFVOrVMn0wB9lerhv0eknDXdJ0o?=

=?Windows-1252?Q?FXUYZAKuxoN6pVh0VwQ/6qnC8iW2++DJrCNdMgr+sRuON9TCMmXM+BNd?=

=?Windows-1252?Q?cC6dpe+Pe9u/LvaEMw5DqUNRsOn+R8+6bGRPsApTCxPfg8UwauHbv0e4?=

=?Windows-1252?Q?NuNjOrT6Dc0E/TA1AncPNe21yzPTgRibDosgOYgUHK2+UoPWHvz/YdOv?=

=?Windows-1252?Q?gm2N4r5LcCdabBhfTCWXYm7xaHxCL2Ho6gwUzt0fO3MEMcXX7m/8uOn4?=

=?Windows-1252?Q?tNnE0JeKPulwXzOumbY8p8b10wyduTJCMyvegii8ux/YAaHDCNSL1aza?=

=?Windows-1252?Q?0d28KXUJIVCkocMBJrYZZpL6BqzmXN2K3VMWYrHDzMZoywBkpKcr2Ix/?=

=?Windows-1252?Q?IdG2FwsQ96IpR3kzgEyGiflYaF+cBXO5Sji14pBJM8OEp2mAXGy3wjl2?=

=?Windows-1252?Q?cURRIBhk4ywD5yZ6IpKKFBh/1v7ynUkGfjMP0z9yUlGLEu2E1w3hwnGC?=

=?Windows-1252?Q?DBM9I8fVg4Bf9Hk7YIS1R1wnOlWQ8r3wKLdAa7rEjN9U9hLMTwX1qjv1?=

=?Windows-1252?Q?wutoNB9u5Mpz/F/VPQF/ltpkPx9E9II26z857d9NWaPXgiyP2BSxgKuE?=

=?Windows-1252?Q?+Zgq2bgevxES7L0lSMqxTO0mY9Za6L+wPRB6dfZZfKQK/x5g7k4ub9+b?=

=?Windows-1252?Q?pfDQ07pLv9JX3vgZiav54AmNEMkHjtFOXz+8/vke1v23Y84S+ZvszNkL?=

=?Windows-1252?Q?+foup/wVcPRX1Kk/l2w8Kw3qVfaRGJR7ZEI392etiaywRDF61jXnYtiB?=

=?Windows-1252?Q?UB4TvY8VdoyZg8HJidgRh/Psj2iQuHGJq2IyVCq3Ww3onO3VQxL4tpq9?=

=?Windows-1252?Q?23tjaTdVG8aITsQuC9zzyTEOgi1tkADL7iNLQ5W3M00y7zGkwVcP6u5o?=

=?Windows-1252?Q?7lBXuP93Pmm1brZEFlL72Q=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?SRKquIBAPFRLxESDznqsBXWPwH/bibmlc9Nnv0yy4euu98dm+fJN/bMY?=

=?Windows-1252?Q?JuNXeFE6pFWpvkTGTwSxhxY/Yah+lrkUhbnxgpFQVxfRkmMUcUIWZaBP?=

=?Windows-1252?Q?XP2ZCSiRjlsjf/g9I3hmOzc3oOqWzPH+l465pMAYgeusxc3sanX8vyCL?=

=?Windows-1252?Q?jldiFEmU/SBOqPEpwzfH27GtV4E6uEJcB34m6ptEoyEtOnX/mbtekfu3?=

=?Windows-1252?Q?G/QyYxbK7vY0xxeAlO05hIvLYlXcW927xfZB4zIgXG3nA1KaYhPzmsHg?=

=?Windows-1252?Q?Q6hzzJVGo2q49Ur/LeZOkwZ0sS/f68TdN9nksrBx3elfi6onMKzKsngO?=

=?Windows-1252?Q?JjXtw6w3UTt+l2lmb/YGu738udWr6NgH4IiTc6iqrO0jxkVt44AsjR0A?=

=?Windows-1252?Q?RSKlt8rt2dgVvnwc8kWwIq//1OW1wEAt3TnIJ4Prbn9kaCP4jJ2Zxs/p?=

=?Windows-1252?Q?YHnGtIGmY+m8GT0P+zOSo650uDE0xWEbli+XR8B4HUjzHYCX4ri7yJ5j?=

=?Windows-1252?Q?evJ7Yn0Lu/zbHLzl8KpxTBC/wwgJk7JShgFwFszAvVKpizOfiWGgIbCX?=

=?Windows-1252?Q?qHUtADRxYeXfVQkXdtH7UvH5xPKKRtQmGtbWlyeH+qdDVRQLJbi0/alr?=

=?Windows-1252?Q?vvXpPQpafgX4J1oSqlPxp7EoE+cbA9zFMwZixw2SRwdLZWftmkvN+Ecu?=

=?Windows-1252?Q?SdsNTYLjyIy47ERP4ED6QQgQvJcUNc5VHsUDBMnV3iUJmrAOAPWfsf1/?=

=?Windows-1252?Q?BvVDBSV0fB/OH/xwNDX75/bXCg7Eu9L7jtyLC8m18R3jATkTkvkyVFak?=

=?Windows-1252?Q?XbyZ0GLZ4GLPMyChGSXfHz6ksLu5YszNIs7XtMI8rZ3r31W9QX/DkzrP?=

=?Windows-1252?Q?yC/DDpZYl9l5ljAk02pzdDI0rn7qG72UROtq8iDL3du0K9Cm7FhOkloA?=

=?Windows-1252?Q?Vt41FteglKn3ISvIVWH059NEkI+umvDIrSPEY18s3aQTflE/6QPB+avo?=

=?Windows-1252?Q?g2oeqKd8kevS5wDxTYMyoFUghju7VCEnyXez7LizmBocszP2WywwxJfT?=

=?Windows-1252?Q?nDpYGFWsaJ2stmsA/SfAmZqQdhYBVRlRku7nZ/Uqp4J0daeSxskRqRqo?=

=?Windows-1252?Q?v06wybEQRGV+5xIEMW07k+OhDdLK7zORVZXDysQe/CFovQis9LdiYTEq?=

=?Windows-1252?Q?4Wr96mFWwkPF1vtReg4ndRGBX0mBipSBvtraMkq2pp4HoaIBCAzySis/?=

=?Windows-1252?Q?C8BKGj8YwxxmXPDVNas9OXnntJhusStHGvsQEwZsYzn3fg2Ppp1VUys4?=

=?Windows-1252?Q?R0Mn+W2LI5NblkkI3iyes0611KQyHIdr23yFbx55oUSiy4gbWm5i69d1?=

=?Windows-1252?Q?41ZfKp8Aho9Vb+GJVlIf5nRzNJxIrgl0U5DpOxCfTYR0CbJEdG5CwA2a?=

=?Windows-1252?Q?OViRD5kyUNkiohRcmywQ3tm5tFluJRqsdSTS8Ww6dfRC26nb9rjSbtG3?=

=?Windows-1252?Q?YHGkIdKwyKe6a6F0eukm4CXzcLir9Ct+wDvn6HfeE/2WsnHa5orFhLT2?=

=?Windows-1252?Q?dprighUeemvyfNSe?=

Content-Type: multipart/alternative;

boundary="_000_TYPPR03MB9723FC43C33EB2279E476C17D2A12TYPPR03MB9723apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYPPR03MB9723.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 4bdf8992-f0d2-4966-cf65-08df0126dba9

X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Aug 2026 14:57:31.5010

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR03MB7224



--_000_TYPPR03MB9723FC43C33EB2279E476C17D2A12TYPPR03MB9723apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable







Hi,



Your site looks good, but it=92s not ranking.



I can improve this and place it on Google=92s 1st page.



Can I send proposal and pricing?



Best,

Tony



--_000_TYPPR03MB9723FC43C33EB2279E476C17D2A12TYPPR03MB9723apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">









Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Your site looks good, but it=92s not ranking.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I can improve this and place it on Google=92s 1st page.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Can I send proposal and pricing?



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Best,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Tony 










--_000_TYPPR03MB9723FC43C33EB2279E476C17D2A12TYPPR03MB9723apcp_--

Partnership spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Aug 2026 19:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wxwb1-00000000BDV-2KMO

for dave@doctor.nl2k.ab.ca;

Sat, 22 Aug 2026 19:01:59 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Aug 2026 19:01:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f231.google.com ([209.85.214.231]:50384)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wxwHv-000000003KE-0pkG

for root@nk.ca;

Sat, 22 Aug 2026 18:42:25 -0600

Received: by mail-pl1-f231.google.com with SMTP id d9443c01a7336-2cace91f112so25149975ad.0

for ; Sat, 22 Aug 2026 17:41:27 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sabeng.it; s=google; t=1787445682; x=1788050482; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:reply-to

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=35Ssk1DIWUO0BRRTNQthcH8yHQ1PdsDYieeyjgU00Jk=;

b=XWDtrANYGqkO3Qq52LPMNTCwyXVVfvN9k90wmFNMM8lCHvXXC6QCD9Ql63JoYSp0LZ

5E5wTL6aD72Cf0JfSZJN7S2afTxuSIfMgC7+GmRpXVLKsx1ND4ViLdjO8ymoZ1w2DDpI

I8sAHIX3t3tfUxOkw7AU2sD7nCE7eBy0+J93c=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787445682; x=1788050482;

h=content-type:mime-version:date:message-id:subject:to:from:reply-to

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=35Ssk1DIWUO0BRRTNQthcH8yHQ1PdsDYieeyjgU00Jk=;

b=dXUMibOHksFZoHzvtBfMd2VPo+EgXqB7ycASGpLyT/dnzQhZ+7VYB7ainL5FovtNYR

d1LP9K0/GdpnLCxOHoL5XWdyT2AUge3I/Z5AL4gk8zx1uT1nygEOCyX2I4LlgnToZ61q

TfWkTPDMP0nevGd1y8Wv33LY/eCu9YQUuSCYxCinRJ+D3EOx1/5nt8RTxM2t5scGcEWG

SNWkOVEdsTt4HGHia6zFiwdBw2Gg8heIsk7oazVOYHUjbfhf/qxHDam5ZdzVk41jB3ZE

MPKr9dByfYl5ueTxhPMHtITjbhNfUfWduqSMgyDabTe9MkDt9wasQVFWNNPNxYFw8uLE

HowQ==

X-Gm-Message-State: AFuF++llmDwkLlFiJfByWlCCwQVdH2vMTOhzt3y+XVkhmsBeBYdypV1u

Tk5vOTfGQgOJAUOei5jOO0TXY3/i20HgPaOzLFaG/eBaqtiW37O9kuz0hwnbrKFhphE1IIfFfni

x5OetbNJnHEumZY+2oGOj9OXyiUDPDSuY/gF/EM/1LPC8k8E=

X-Gm-Gg: AR+sD11xMXviE14hNJzJqp+toJlEXHjXTK1ZQe1rk9MDkzke1894mO428pfXigf/GNg

4P755tWdapUZbT+J/vEcm3QXQVOvYS8uLsUzhFyqcxc6tKiKhT00vlaBZrmWoy01AFnZ3OfJWZB

3xXY7RWwzCtifa7xfjbHRhG4nzi+LMgtQ9gGtn28sKbdb9i1VErxjrPuThsh3/AYVgJcauJSR8q

Fa339h/ItEMjJ+6TdbNpAVIB5yNAbkL1aEDa3ihdIY4IuWZO5ccGNJCuXf04HtnPwaWGZk2GBaP

CE0S2TCx8QddP0zbqHjzn5WoxjXwVvmhG+keYhmr6fJLVz/jFLHGDMqbJeirGQ==

X-Received: by 2002:a17:90b:2808:b0:37d:f983:7b5 with SMTP id 98e67ed59e1d1-395df289c4bmr15374692a91.9.1787445681953;

Sat, 22 Aug 2026 17:41:21 -0700 (PDT)

Received: from sabeng.it ([172.245.27.164])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-395e4b0d991sm1719226a91.8.2026.08.22.17.41.21

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Sat, 22 Aug 2026 17:41:21 -0700 (PDT)

X-Relaying-Domain: sabeng.it

Reply-To: muhammadomer@onionmail.org

From: Continental Management Group

To: root@nk.ca

Subject: Strategic Partnership and Funding Opportunity

Message-ID:

Date: Sun, 23 Aug 2026 00:41:21 +0000

MIME-Version: 1.0

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-e0933fc74c1679e3-Part_1"



----_NmP-e0933fc74c1679e3-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable



=EF=BB=BF

Attention: root@nk.ca,





Greetings,





We, Continental Management Group(CMG) LLC, Brunei/Bahrain, invite you to=

partner with us and benefit from our new Investment/Loan and Partnership =

Project funding program. We offer Investments/loans and funding for various=

good projects.





Do you have any Investment projects that need funding? We are =

ready/eager to partner with you and also give you any substantial sum and a=

big loan of just 2% per annum for a period of 15 years.





We are interested in projects that require funding. Our Company is =

willing and ready to fund your viable projects. If you are serious and =

interested, do contact us with your project plan and executive summary of =

your project. If you're interested in any of our proposals, send me =

your Email ID and Mobile phone number so that I can write to you and give =

you more details on our Investment Loan Funding Plan. Reply us with this =

email address below:  muhammadomer@onionmail.org  








Regards,


Mr Muhammad Omer.



----_NmP-e0933fc74c1679e3-Part_1

Content-Type: image/png; name=nk.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=nk.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-e0933fc74c1679e3-Part_1--

Dating phishing from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Aug 2026 19:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wxwar-00000000BBn-0HUp

for dave@doctor.nl2k.ab.ca;

Sat, 22 Aug 2026 19:01:49 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Aug 2026 19:01:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f72.google.com ([209.85.216.72]:56527)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wxvFy-00000000C94-3a83

for sales@nk.ca;

Sat, 22 Aug 2026 17:36:18 -0600

Received: by mail-pj1-f72.google.com with SMTP id 98e67ed59e1d1-381250979d5so2339250a91.0

for ; Sat, 22 Aug 2026 16:35:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sau-ac-th.20251104.gappssmtp.com; s=20251104; t=1787441718; x=1788046518; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=LBygA+NSqVVEibaAnNljtIxJaA2WxfAn7b0iB2i1mcE=;

b=gAo4Dzqk6tyHwTeG5yhEJKXNTk7UYebH9yaA6NiAE0ilApcZX7M7oTp9aJhFdNota1

mMit9VSPjfsDZZbKjQrq1i+Ezbn7Lr2lh8EboBjbE+SEQ+mE0OysskrrxuwAcOC4XbzG

pE9GiMJEvKvvJDrOGzyEfCLD57E0PMYuJem9ax37CXfgKdM7ZXKoQEH/S2d5oGkWt33t

2FrkuNLUZryHvRXhMYaHTEwObDAofsNiK0kmQtak1tt51cpS7auk4+Nb8+WTEch+wqNg

La3WmYWiF9EPHFtl7r/s2qWG/N7UyQtiynaLXwTPLtNypYVigwvY2niwoOV0N3bdWih2

Wt8A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787441718; x=1788046518;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=LBygA+NSqVVEibaAnNljtIxJaA2WxfAn7b0iB2i1mcE=;

b=Ci4F6J2EY4hDAv1VJcXqqlnjB5ROwn+Nc8COWd8ZsMOpAa0QT3lOKDGRGrWau6ZnLc

vhxamGjQrEVlmLyozxRqlYj58x0wwUd6h0008MFnxy89Ab/VGbKwFxv2yWzTuBYHt0hx

juhWLw8h+GohP+di3k+FKCYz68j49pSrcMCepQTZjMNqvd+FAg23ivgdJMbCGm2IfHBO

yuwqUaD0whuQH3P0Z/OUS4sfltXcheaPLD6QWdwWViywpcXr2KIYfJ4f4fRQYgKBvu82

/JLRnczNreokvySZGmAm/+uq0iB3NJvtkEfbrIXuOmY0gytPB28B/WCP3oH8vZdwuMND

iohw==

X-Gm-Message-State: AFuF++lJyveuxlkyfgINRWiNlNHk9JVOxSrC+rGb1z1oNYYX8nT4Nazs

QwPy2nyGXJJ1KOVY+rlJuQYGICcngRM6Hd71jo3N2I2/HY56E7EF/Jpp/5CGLnW5Yf+B/7+9QSb

WBXoN9P0UZAqwgOkhCEd8Aw==

MIME-Version: 1.0

X-Received: by 2002:a17:90b:224f:b0:381:1f51:1ff0 with SMTP id

98e67ed59e1d1-395c354d445mr26505898a91.2.1787441717763; Sat, 22 Aug 2026

16:35:17 -0700 (PDT)

Message-ID:

Date: Sat, 22 Aug 2026 23:35:17 +0000

Subject: did you get my message?

From: Anna

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000a4f31e0659ab3460"

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 1,200+ single Ukrainian women online. They make the first

move — you just have to show up. Dating, but backwards Here, she writes

first.



Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.72 listed in will-spam-for-food.eu.org]

[209.85.216.72 listed in will-spam-for-food.eu.org]

[209.85.216.72 listed in will-spam-for-food.eu.org]

[209.85.216.72 listed in will-spam-for-food.eu.org]

[209.85.216.72 listed in will-spam-for-food.eu.org]

[209.85.216.72 listed in will-spam-for-food.eu.org]

[209.85.216.72 listed in will-spam-for-food.eu.org]

[209.85.216.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.72 listed in dnsbl.ahbl.org]

[209.85.216.72 listed in dnsbl.ahbl.org]

[209.85.216.72 listed in dnsbl.ahbl.org]

[209.85.216.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.72 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: 26cwiu.cfd]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: 26cwiu.cfd]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.72 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.72 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.72 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 OPT_OUT BODY: No description available.

0.2 MARKETING_PARTNERS BODY: Claims you registered with a partner

0.3 OFFER BODY: Offers you Something

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} did you get my message?



--000000000000a4f31e0659ab3460

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



MSwyMDArIHNpbmdsZSBVa3JhaW5pYW4gd29tZW4gb25saW5lLiBUaGV5IG1ha2UgdGhlIGZpcnN0

IG1vdmUg4oCUIHlvdSBqdXN0ICANCmhhdmUgdG8gc2hvdyB1cC4NCg0KDQoNCg0KRGF0aW5nLCBi

dXQgYmFja3dhcmRzDQoNCkhlcmUsIHNoZSB3cml0ZXMgZmlyc3QuDQoNCjEsMjAwKyBzaW5nbGUg

VWtyYWluaWFuIHdvbWVuIGFyZSBvbmxpbmUgdG9uaWdodCDigJQgd2l0dHksIGRpcmVjdCwgYW5k

IHRpcmVkICANCm9mIHdhaXRpbmcgYXJvdW5kLg0KDQpNYWtlIGEgcHJvZmlsZSwgYW5kIHRoZSBm

cmllbmQgcmVxdWVzdHMgY29tZSB0byB5b3UuDQoNCg0KDQoNClNlZSB3aG8ncyBvbmxpbmUg4oaS

DQoNCg0KDQpGcmVlIHJlZ2lzdHJhdGlvbiDCtyBObyBjcmVkaXQgY2FyZCDCtyBObyBmYWtlIHBy

b2ZpbGVzDQoNCg0KDQpZb3UgYXJlIHJlY2VpdmluZyB0aGlzIG1lc3NhZ2UgYmVjYXVzZSB5b3Ug

b3B0ZWQgaW4gdG8gcmVjZWl2ZSBvZmZlcnMgZnJvbSAgDQpvbmUgb2Ygb3VyIG1hcmtldGluZyBw

YXJ0bmVycy4gU2VudCBieSBhbiBpbmRlcGVuZGVudCB0aGlyZC1wYXJ0eSBtYXJrZXRpbmcgIA0K

Y29tcGFueSwgbm90IHRoZSBhZHZlcnRpc2VyLiBNdXN0IGJlIDE4Ky4NClVuc3Vic2NyaWJlIMK3

IE9wdCBvdXQgb2YgYWxsIG1haWxpbmdzDQoNCg0KDQo=

--000000000000a4f31e0659ab3460

Content-Type: text/html; charset="UTF-8"







Someone new



1,200+ single Ukrainian women online. They make the first move — you just have to show up.


















Dating, but backwards



Here, she writes first.



1,200+ single Ukrainian women are online tonight — witty, direct, and tired of waiting around.



Make a profile, and the friend requests come to you.











See who’s online →




Free registration  ·  No credit card  ·  No fake profiles









You are receiving this message because you opted in to receive offers from one of our marketing partners. Sent by an independent third-party marketing company, not the advertiser. Must be 18+.


Unsubscribe  ·  Opt out of all mailings













--000000000000a4f31e0659ab3460--

Dating phishing from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Aug 2026 19:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wxwan-00000000BB6-3gpT

for dave@doctor.nl2k.ab.ca;

Sat, 22 Aug 2026 19:01:45 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Aug 2026 19:01:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:42191)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wxvFi-00000000C6W-09F0

for usenet@nl2k.ab.ca;

Sat, 22 Aug 2026 17:36:06 -0600

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-52827090cc5so28191701cf.0

for ; Sat, 22 Aug 2026 16:35:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ousl.lk; s=google; t=1787441701; x=1788046501; darn=nl2k.ab.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=npdLiaD8VADZCVlghtyEQZeEbVXLx+4vNI/u0SJDIU4=;

b=IEE5SBq78nHBT9pKp1o7bOTGHy4esK/nXV+PkdrMqG2gNl32lHbOgW9lj1v1OGUrAD

xdFQd1395oxnauKwh8DQfEvmu4NfcXEgalNyt6h6545JFE66q0FKrMR4Mlalg+1yxKiK

NKl9ypoCSArp0i3nC/rh5yUtUZeO7muhKDSJI=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787441701; x=1788046501;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=npdLiaD8VADZCVlghtyEQZeEbVXLx+4vNI/u0SJDIU4=;

b=RykccmW8tqpDJOTrHX0jf+5vH3UP8cRbd6NhpEG8HpSblrcT7FI44o5QxwrE3qpYpP

chw52OW8kg0acoB1RCrV6gOfRhbVmF1+b0Hu7Gb2xipZE0cKwLwu34zIpcRz/CPtRlRw

y93v6j8q1XZl+hXSgeUvgU02W5cwURCsJY2bM6XV7FGieaOJPK738CLPOMN7gpHHbz0U

foQmunhwMq28ZCrmG0bBeyJf2X/go0AZzuYjjfMc7nULNdSaL4KuZTYJLXsERHqFR2fh

IksodqLQGw0SwW8LidydYngkupt8RhJrjq4A1k5MrOJsYJp5/CKFGjPNxuUvug+wyImz

UVaQ==

X-Gm-Message-State: AFuF++lboZS6BFUeIvpPNNQWtTtJfOD/ZmCg2aWpqkkuS6vKJmHwN6lJ

faBtml8KQ+Hr1YNp+7i+BL4Q3g0/Y/YLvpZwDpFzR2DK3wdYuKro6XPJsdVpIRutpuYEv1GZQNC

uc+jPkRQiuvj44EeZFg3kug==

MIME-Version: 1.0

X-Received: by 2002:a05:622a:4115:b0:51c:d1c:10e2 with SMTP id

d75a77b69052e-52de307caffmr243760961cf.12.1787441700785; Sat, 22 Aug 2026

16:35:00 -0700 (PDT)

Message-ID:

Date: Sat, 22 Aug 2026 23:35:00 +0000

Subject: did you get my message?

From: Anna

To: usenet@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000a1e2740659ab33d5"

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 1,200+ single Ukrainian women online. They make the first

move — you just have to show up. Dating, but backwards Here, she writes

first.



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: 26cwiu.cfd]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: 26cwiu.cfd]

2.5 URIBL_DBL_BOTNETCC Contains a botned C&C URL listed in the DBL

blocklist

[URI: ousl.lk]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.198 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 OPT_OUT BODY: No description available.

0.2 MARKETING_PARTNERS BODY: Claims you registered with a partner

0.3 OFFER BODY: Offers you Something

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.198 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.198 listed in wl.mailspike.net]

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} did you get my message?



--000000000000a1e2740659ab33d5

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



MSwyMDArIHNpbmdsZSBVa3JhaW5pYW4gd29tZW4gb25saW5lLiBUaGV5IG1ha2UgdGhlIGZpcnN0

IG1vdmUg4oCUIHlvdSBqdXN0ICANCmhhdmUgdG8gc2hvdyB1cC4NCg0KDQoNCg0KRGF0aW5nLCBi

dXQgYmFja3dhcmRzDQoNCkhlcmUsIHNoZSB3cml0ZXMgZmlyc3QuDQoNCjEsMjAwKyBzaW5nbGUg

VWtyYWluaWFuIHdvbWVuIGFyZSBvbmxpbmUgdG9uaWdodCDigJQgd2l0dHksIGRpcmVjdCwgYW5k

IHRpcmVkICANCm9mIHdhaXRpbmcgYXJvdW5kLg0KDQpNYWtlIGEgcHJvZmlsZSwgYW5kIHRoZSBm

cmllbmQgcmVxdWVzdHMgY29tZSB0byB5b3UuDQoNCg0KDQoNClNlZSB3aG8ncyBvbmxpbmUg4oaS

DQoNCg0KDQpGcmVlIHJlZ2lzdHJhdGlvbiDCtyBObyBjcmVkaXQgY2FyZCDCtyBObyBmYWtlIHBy

b2ZpbGVzDQoNCg0KDQpZb3UgYXJlIHJlY2VpdmluZyB0aGlzIG1lc3NhZ2UgYmVjYXVzZSB5b3Ug

b3B0ZWQgaW4gdG8gcmVjZWl2ZSBvZmZlcnMgZnJvbSAgDQpvbmUgb2Ygb3VyIG1hcmtldGluZyBw

YXJ0bmVycy4gU2VudCBieSBhbiBpbmRlcGVuZGVudCB0aGlyZC1wYXJ0eSBtYXJrZXRpbmcgIA0K

Y29tcGFueSwgbm90IHRoZSBhZHZlcnRpc2VyLiBNdXN0IGJlIDE4Ky4NClVuc3Vic2NyaWJlIMK3

IE9wdCBvdXQgb2YgYWxsIG1haWxpbmdzDQoNCg0KDQo=

--000000000000a1e2740659ab33d5

Content-Type: text/html; charset="UTF-8"







Someone new



1,200+ single Ukrainian women online. They make the first move — you just have to show up.


















Dating, but backwards



Here, she writes first.



1,200+ single Ukrainian women are online tonight — witty, direct, and tired of waiting around.



Make a profile, and the friend requests come to you.











See who’s online →




Free registration  ·  No credit card  ·  No fake profiles









You are receiving this message because you opted in to receive offers from one of our marketing partners. Sent by an independent third-party marketing company, not the advertiser. Must be 18+.


Unsubscribe  ·  Opt out of all mailings













--000000000000a1e2740659ab33d5--

Dating phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Aug 2026 19:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wxwag-00000000B9b-2aM2

for dave@doctor.nl2k.ab.ca;

Sat, 22 Aug 2026 19:01:38 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Aug 2026 19:01:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f198.google.com ([209.85.128.198]:51301)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <3GzKKagYIAwQw65BA5et.eg.xl000rp6o.ef.ge@maestro.bounces.google.com>)

id 1wxvFZ-00000000C4b-0yIy

for www@nl2k.ab.ca;

Sat, 22 Aug 2026 17:35:54 -0600

Received: by mail-yw1-f198.google.com with SMTP id 00721157ae682-81e6bb29581so38015037b3.2

for ; Sat, 22 Aug 2026 16:34:57 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ap-ac-th.20251104.gappssmtp.com; s=20251104; t=1787441691; x=1788046491; darn=nl2k.ab.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Ed+wkKq1+FNj2cf7rWegAA7CE9EXauT6HrhMt2EXSs8=;

b=lKfHVwsf+MrKfIZ8J2mPubiNUe2nin5JddX2IVoEgWW2x3nNdDdrc4Q96Y9m7nenvZ

QyPjy4hkAR425xv5XcshomWx9KZVp+YVMAt88Mnr9t4mKHXL2PPbr1lxMiv1yjynYWCZ

0pccu2ADtCzmre9jswuN+WUcSLoCKrZtgDgM8u+nH8Bl6qYtdokdkJO2gV8q1h0HxyGZ

89thMA1m0x9j97XL3Y35FS1slC1FXpVqQFhvw0spa/h7SLL72N8Skfzu7B/rQOhoBatg

zKL1XNVZrvZ719P7eKzWSxBNgJ3iQbQQxRz0cYPCv0g+A+XO56PQfn0WKYtAonLFyMK6

yGyw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787441691; x=1788046491;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Ed+wkKq1+FNj2cf7rWegAA7CE9EXauT6HrhMt2EXSs8=;

b=c77ZwaRzS/3MO5mEgouRxiucCo4g/qOeYeBRwD074j72+fVq+SmlRX5htUglbmWWWj

n2DLb6ZH3qYw8meJ6cd6UWVJFivvVx7LBGYJ1SNBFQvYZzQZFUx1iYc5MpapYc9JDAKC

F2k7hxbsYF/CHAfyPWNjF7LMeqOSMU74TPFt9WWvmK5BsmZ48iFciWeP5gWguuhkE8zo

KEIyKBJ1AO/R+lE7PzLoi/WrbGU+sTBguUfOQ283SLwgSSrbUMOOcQ2CcYJBIP4DDAl9

2kXv7LJ7Al4LhjwdyuryaZqsaBH8GsJvdJhWdFmjZqD+w0EM7+/SETmI0OdrBjkOdzM5

JqvQ==

X-Gm-Message-State: AFuF++m4vBJc6ESmi7xRd+JOD5OG6reZX1XXOg0yNPyHbN4nfyNDg464

1sleONXZXXWcA1VngUXufC5ooBV5UanZ46EcyV73WaB1q5PNGhp7E917VVhWf8b0BVNfaoZ/vqL

oVwY+Lmlw/OM5npRUMMS+aV8B

MIME-Version: 1.0

X-Received: by 2002:a05:690e:1385:b0:66c:f25a:e6be with SMTP id

956f58d0204a3-66cf25aebe3mr2110254d50.14.1787441691301; Sat, 22 Aug 2026

16:34:51 -0700 (PDT)

Message-ID:

Date: Sat, 22 Aug 2026 23:34:51 +0000

Subject: did you get my message?

From: Anna

To: www@nl2k.ab.ca

Content-Type: multipart/alternative; boundary="0000000000001130e30659ab338c"

X-Spam_score: 10.5

X-Spam_score_int: 105

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 1,200+ single Ukrainian women online. They make the first

move — you just have to show up. Dating, but backwards Here, she writes

first.



Content analysis details: (10.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.198 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: 26cwiu.cfd]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.0 OPT_OUT BODY: No description available.

0.2 MARKETING_PARTNERS BODY: Claims you registered with a partner

0.3 OFFER BODY: Offers you Something

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: 26cwiu.cfd]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.198 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.198 listed in wl.mailspike.net]

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} did you get my message?



--0000000000001130e30659ab338c

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



MSwyMDArIHNpbmdsZSBVa3JhaW5pYW4gd29tZW4gb25saW5lLiBUaGV5IG1ha2UgdGhlIGZpcnN0

IG1vdmUg4oCUIHlvdSBqdXN0ICANCmhhdmUgdG8gc2hvdyB1cC4NCg0KDQoNCg0KRGF0aW5nLCBi

dXQgYmFja3dhcmRzDQoNCkhlcmUsIHNoZSB3cml0ZXMgZmlyc3QuDQoNCjEsMjAwKyBzaW5nbGUg

VWtyYWluaWFuIHdvbWVuIGFyZSBvbmxpbmUgdG9uaWdodCDigJQgd2l0dHksIGRpcmVjdCwgYW5k

IHRpcmVkICANCm9mIHdhaXRpbmcgYXJvdW5kLg0KDQpNYWtlIGEgcHJvZmlsZSwgYW5kIHRoZSBm

cmllbmQgcmVxdWVzdHMgY29tZSB0byB5b3UuDQoNCg0KDQoNClNlZSB3aG8ncyBvbmxpbmUg4oaS

DQoNCg0KDQpGcmVlIHJlZ2lzdHJhdGlvbiDCtyBObyBjcmVkaXQgY2FyZCDCtyBObyBmYWtlIHBy

b2ZpbGVzDQoNCg0KDQpZb3UgYXJlIHJlY2VpdmluZyB0aGlzIG1lc3NhZ2UgYmVjYXVzZSB5b3Ug

b3B0ZWQgaW4gdG8gcmVjZWl2ZSBvZmZlcnMgZnJvbSAgDQpvbmUgb2Ygb3VyIG1hcmtldGluZyBw

YXJ0bmVycy4gU2VudCBieSBhbiBpbmRlcGVuZGVudCB0aGlyZC1wYXJ0eSBtYXJrZXRpbmcgIA0K

Y29tcGFueSwgbm90IHRoZSBhZHZlcnRpc2VyLiBNdXN0IGJlIDE4Ky4NClVuc3Vic2NyaWJlIMK3

IE9wdCBvdXQgb2YgYWxsIG1haWxpbmdzDQoNCg0KDQo=

--0000000000001130e30659ab338c

Content-Type: text/html; charset="UTF-8"







Someone new



1,200+ single Ukrainian women online. They make the first move — you just have to show up.


















Dating, but backwards



Here, she writes first.



1,200+ single Ukrainian women are online tonight — witty, direct, and tired of waiting around.



Make a profile, and the friend requests come to you.











See who’s online →




Free registration  ·  No credit card  ·  No fake profiles









You are receiving this message because you opted in to receive offers from one of our marketing partners. Sent by an independent third-party marketing company, not the advertiser. Must be 18+.


Unsubscribe  ·  Opt out of all mailings













--0000000000001130e30659ab338c--