--E3B487F912E34CAA91D87280AA0DB81F

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable



=0D=0A
quiv=3DContent-type>=0D=0A=0D=0A=0D=0A
=3D"MSHTML=2011.00.10570.1001">=0D=0A
=3D"FONT-SIZE:=20small;=20FONT-FAMILY:=20Arial,=20Helvetica,=20sans-serif;=20=

WHITE-SPACE:=20normal;=20WORD-SPACING:=200px;=20TEXT-TRANSFORM:=20none;=20F=

ONT-WEIGHT:=20400;=20COLOR:=20rgb(34,34,34);=20FONT-STYLE:=20normal;=20ORPH=

ANS:=202;=20WIDOWS:=202;=20LETTER-SPACING:=20normal;=20BACKGROUND-COLOR:=20=

rgb(255,255,255);=20TEXT-INDENT:=200px;=20font-variant-ligatures:=20normal;=

=20font-variant-caps:=20normal;=20-webkit-text-stroke-width:=200px;=20text-=

decoration-thickness:=20initial;=20text-decoration-style:=20initial;=20text=

-decoration-color:=20initial">=0D=0A
PADDING-TOP:=202px;=20PADDING-LEFT:=202px;=20MARGIN:=200px=20auto;=20PADDIN=

G-RIGHT:=202px"=20dir=3Dltr=20align=3Dleft>Dear=20S=

ir/Madam,

rial>=0D=0A
DING-LEFT:=202px;=20MARGIN:=200px=20auto;=20PADDING-RIGHT:=202px"=20dir=3Dl=

tr=20align=3Dleft>=E3=80=80

ace=3DArial>=0D=0A
ING-BOTTOM:=202px;=20PADDING-TOP:=202px;=20PADDING-LEFT:=202px;=20MARGIN:=20=

0px=20auto;=20PADDING-RIGHT:=202px"=20dir=3Dltr=20align=3Dleft>I=20hope=20y=

ou=20are=20doing=20well.

=20color=3D#000000=20face=3DArial>=0D=0A
;=20PADDING-TOP:=202px;=20PADDING-LEFT:=202px;=20MARGIN:=200px=20auto;=20PA=

DDING-RIGHT:=202px"=20dir=3Dltr=20align=3Dleft>=E3=80=80

<=

FONT=20face=3DArial>
rial>=0D=0A
DING-LEFT:=202px;=20MARGIN:=200px=20auto;=20PADDING-RIGHT:=202px"=20dir=3Dl=

tr=20align=3Dleft>If=20you=20need=20capital=20to=20grow=20your=20business,=20=

we=20offer=20fast=20loans=20with=20no=20collateral=20and=20no=20credit=20ch=

ecks.=20Approval=20can=20be=20done=20today,=20with=20funding=20as=20early=20=

as=20tomorrow.

#000000=20face=3DArial>=0D=0A
-TOP:=202px;=20PADDING-LEFT:=202px;=20MARGIN:=200px=20auto;=20PADDING-RIGHT=

:=202px"=20dir=3Dltr=20align=3Dleft>=E3=80=80

=3DArial>=0D=0A=


2px;=20MARGIN:=200px=20auto;=20PADDING-RIGHT:=202px"=20dir=3Dltr=20align=3D=

left>Reply=20if=20interested=20for=20more=20details.

T>=0D=0A
TOM:=202px;=20PADDING-TOP:=202px;=20PADDING-LEFT:=202px;=20MARGIN:=200px=20=

auto;=20PADDING-RIGHT:=202px"=20dir=3Dltr=20align=3Dleft>
00000>=E3=80=80

=0D=0A
ING-TOP:=202px;=20PADDING-LEFT:=202px;=20MARGIN:=200px=20auto;=20PADDING-RI=

GHT:=202px"=20dir=3Dltr=20align=3Dleft>=E3=80=80
ONT>

e=3DArial>=0D=0A
PADDING-LEFT:=202px;=20MARGIN:=200px=20auto;=20PADDING-RIGHT:=202px"=20dir=3D=

ltr=20align=3Dleft>Regards,

=0D=0A
yle=3D"PADDING-BOTTOM:=202px;=20PADDING-TOP:=202px;=20PADDING-LEFT:=202px;=20=

MARGIN:=200px=20auto;=20PADDING-RIGHT:=202px"=20dir=3Dltr=20align=3Dleft>
ONT=20color=3D#000000>Swiss=20Capital=20Loans=20Limited

=0D=0A
style=3D"PADDING-BOTTOM:=202px;=20PADDING-TOP:=202px;=20PADDING-LEFT:=202px=

;=20MARGIN:=200px=20auto;=20PADDING-RIGHT:=202px"=20dir=3Dltr=20align=3Dlef=

t> 

=0D=0A
OM:=202px;=20PADDING-TOP:=202px;=20PADDING-LEFT:=202px;=20MARGIN:=200px=20a=

uto;=20PADDING-RIGHT:=202px"=20dir=3Dltr=20align=3Dleft>
0000>3=20Floors,=20Ebisquare=20Str.=201=206030=20Ebikon=20Switzerland
>

=0D=0A
DING-LEFT:=202px;=20MARGIN:=200px=20auto;=20PADDING-RIGHT:=202px"=20dir=3Dl=

tr=20align=3Dleft>
ww.swissloanlimited.user-oulu.com/"=20target=3D_blank=20data-saferedirectur=

l=3D"https://www.google.com/url?q=3Dhttp://www.swissloanlimited.user-oulu.c=

om&source=3Dgmail&ust=3D1783691763400000&usg=3DAOvVaw37DriYrK4k=

KaQCo-LvBdMt">
ri>www.swissloanlimited.user-oulu.com<=

/FONT>

ll;=20WHITE-SPACE:=20normal;=20WORD-SPACING:=200px;=20TEXT-TRANSFORM:=20non=

e;=20FONT-WEIGHT:=20400;=20COLOR:=20rgb(34,34,34);=20FONT-STYLE:=20normal;=20=

ORPHANS:=202;=20WIDOWS:=202;=20LETTER-SPACING:=20normal;=20BACKGROUND-COLOR=

:=20rgb(255,255,255);=20TEXT-INDENT:=200px;=20font-variant-ligatures:=20nor=

mal;=20font-variant-caps:=20normal;=20-webkit-text-stroke-width:=200px;=20t=

ext-decoration-thickness:=20initial;=20text-decoration-style:=20initial;=20=

text-decoration-color:=20initial"=20face=3DCalibri><=

SPAN=20lang=3DEN>=0D=0A
2px;=20PADDING-LEFT:=202px;=20MARGIN:=200px=20auto;=20PADDING-RIGHT:=202px"=

=20dir=3Dltr=20align=3Dleft>

=0D=0A

PAN>
=20Helvetica,=20sans-serif;=20WHITE-SPACE:=20normal;=20WORD-SPACING:=200px;=

=20TEXT-TRANSFORM:=20none;=20FONT-WEIGHT:=20400;=20COLOR:=20rgb(17,85,204);=

=20FONT-STYLE:=20normal;=20ORPHANS:=202;=20WIDOWS:=202;=20LETTER-SPACING:=20=

normal;=20BACKGROUND-COLOR:=20rgb(255,255,255);=20TEXT-INDENT:=200px;=20fon=

t-variant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-webkit-tex=

t-stroke-width:=200px"=20href=3D"mailto:icontact@swissloanlimited.user-oulu=

.com"=20target=3D_blank>
=3DArial>contact@swissloanlimited.user-oulu.com
N>

--E3B487F912E34CAA91D87280AA0DB81F--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 12 Jul 2026 12:29:34 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiyvI-00000000Pao-3dJN

for dave@doctor.nl2k.ab.ca;

Sun, 12 Jul 2026 12:29:04 -0600

Resent-From: The Doctor

Resent-Date: Sun, 12 Jul 2026 12:29:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from d6-229.my-control-panel.com ([198.251.89.229]:38707 helo=d6.my-control-panel.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiuUR-000000009ND-3uSA

for sales@nk.ca;

Sun, 12 Jul 2026 07:45:14 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=cao-liqun.shop; s=x; h=Content-Type:Mime-Version:Message-ID:

List-Unsubscribe:Date:Subject:To:Reply-To:From:Sender:Cc:

Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:

Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:

References:List-Id:List-Help:List-Subscribe:List-Post:List-Owner:List-Archive

; bh=WgAYwHyyI6GCjpADDQ7PUw8nzzMgesWsgFF8u8A1cUM=; b=iGkN9eMXBgjmBsLPhYx4Cp7X

nHX5kH4EVVByYQi/CwWtNNrOJyZLt1LR53/6fC4ZhdmS3lnjupw09d1tZgnGOQuH2fFXuA9ML8+MP

kHbnnvtGBJ7ijL+2Xg9K6grNzx7xbiUckf6lDeu0FFkADlMkPTzm8dE5u3FlYxL/WFEqoypIPrJbo

rS0eIazwTFb+A20sMGtP/X8q53eBhVeje/9nbk6gQx/Zbm5PODqibVH2v3R54FmGcq4ys1aJ9YB2q

ZxDp0IsCZczDuYV8NFXKBTqpRN3emh6LEzMXhGp2RckbdO9KiZq+iuCcrwphSzaCILcBNzmc8LpdN

lOK2ZxJGaw==;

Received: from [108.181.201.9] (helo=vps-jquw)

by d6.my-control-panel.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.2)

(envelope-from )

id 1wiuTW-000000052eJ-45l7

for sales@nk.ca;

Sun, 12 Jul 2026 15:44:07 +0200

From: =?utf-8?B?U1dJU1MgQ0FQSVRBTCBMT0FOUw==?=

Reply-To: contact@swissloanlimited.user-oulu.com

To: sales@nk.ca

Subject: =?utf-8?B?RkFTVCBCVVNJTkVTUyBGVU5ESU5HIC0gU1dJU1MgQ0FQSVRBTCBMT0FOUw==?=

Date: Sun, 12 Jul 2026 08:44:05 -500

List-Unsubscribe:

X-Priority: 3

Message-ID: <9AA6B319014640128B4E1671F651FF28@cao-liqun.shop>

Mime-Version: 1.0

Content-Type: multipart/alternative; boundary="E3B487F912E34CAA91D87280AA0DB81F"

X-Authenticated-Id: swisscapitalloansltd@cao-liqun.shop

X-Spam_score: 20.5

X-Spam_score_int: 205

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, I hope you are doing well.



Content analysis details: (20.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[198.251.89.229 listed in dnsbl.ahbl.org]

[198.251.89.229 listed in dnsbl.ahbl.org]

[198.251.89.229 listed in dnsbl.ahbl.org]

[198.251.89.229 listed in dnsbl.ahbl.org]

[108.181.201.9 listed in dnsbl.ahbl.org]

[108.181.201.9 listed in dnsbl.ahbl.org]

[108.181.201.9 listed in dnsbl.ahbl.org]

[108.181.201.9 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[198.251.89.229 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[198.251.89.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[198.251.89.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[198.251.89.229 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[108.181.201.9 listed in will-spam-for-food.eu.org]

[108.181.201.9 listed in will-spam-for-food.eu.org]

[108.181.201.9 listed in will-spam-for-food.eu.org]

[108.181.201.9 listed in will-spam-for-food.eu.org]

[108.181.201.9 listed in will-spam-for-food.eu.org]

[108.181.201.9 listed in will-spam-for-food.eu.org]

[108.181.201.9 listed in will-spam-for-food.eu.org]

[108.181.201.9 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

[198.251.89.229 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: user-oulu.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: www.swissloanlimited.user-oulu.com/163.61.188.2]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[198.251.89.229 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.1 GOOG_REDIR_NOTRDNS Google redirect to obscure spamvertised website +

HELO is not rDNS

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 IMPRO_URI_2 No description available.

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.5 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} =?utf-8?B?RkFTVCBCVVNJTkVTUyBGVU5ESU5HIC0gU1dJU1MgQ0FQSVRBTCBMT0FOUw==?=

This message is in MIME format. Since your mail reader does not understand

this format, some or all of this message may not be legible.



----=BOUNDARY_712117_LPYW_RKUK_TYVB_DXML

Content-Type: text/plain; charset=utf-8; format=flowed

Content-Transfer-Encoding: quoted-printable



Dear sir/madam

To whom it may concern



This is an official offer of readily available petroleum products for sale =

from a non-sanctioned origin in the United States of America=2E

These products include, but are not limited to: LIQUEFIED NATURAL GAS,

DIESEL FUEL EN590, BITUMEN OF ALL SPECIFICATIONS, JET A1, AGO,

LIGHT CRUDE OIL, GASOLINE 95 OCTANES, DIESEL D6 VIRGIN LOW POUR FUEL OIL, P=

ETCOKE=2E We provide flexible delivery terms in both CIF and FOB arrangemen=

ts in major ports=2E Documents (POPP and Full POP) will be provided to buye=

rs who show capacity and direct interest in our procedure and products=

=2E



Why Choose Us:

At 2Wood Oil and Gas LLC, we are committed to providing exceptional service=

and competitive prices to our customers=2E

We have a clean and fully compliant supply chain structure=2E

All necessary documentation will be provided upon successful completion of =

due diligence and verification=2E

Our transaction process is clear, structured, and transparent for efficienc=

y and security=2E

We provide professional and consistent communication throughout the entire =

process=2E



NOTE: To meet our ethical and corporate responsibilities, the refinery requ=

ires that certain criteria be met before the buyer can receive POPP documen=

tation=2E

At 2WOOD OIL & GAS LLC, integrity, transparency, and operational excellence=

define every transaction=2E We are dedicated to building long-term, mutual=

ly beneficial partnerships throughout the global energy sector=2E

Let's Connect



Warm regards

Jason Grampp

Sourcing Manager

WhatsApp or Call +1 4198465329

2Wood Oil and Gas LLC



----=BOUNDARY_712117_LPYW_RKUK_TYVB_DXML

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

a, Verdana; font-size: 18px; color: #000000;">Dear sir/madam<= /div> a, Verdana; font-size: 18px; color: #000000;">To whom it may concern= a, Verdana; font-size: 18px; color: #000000;">This is an official offer = of readily available petroleum products for sale from a non-sanctioned orig= in in the United States of America=2E a, Verdana; font-size: 18px; color: #000000;">These products include, bu= t are not limited to: LIQUEFIED NATURAL GAS, a, Verdana; font-size: 18px; color: #000000;">DIESEL FUEL EN590, BITUMEN= OF ALL SPECIFICATIONS, JET A1, AGO, a, Verdana; font-size: 18px; color: #000000;">LIGHT CRUDE OIL, GASOLINE = 95 OCTANES, DIESEL D6 VIRGIN LOW POUR FUEL OIL, PETCOKE=2E We provide flexi= ble delivery terms in both CIF and FOB arrangements in major ports=2E Docum= ents (POPP and Full POP) will be provided to buyers who show capacity and d= irect interest in our procedure and products=2E a, Verdana; font-size: 18px; color: #000000;">Why Choose Us:<= /div> a, Verdana; font-size: 18px; color: #000000;">At 2Wood Oil and Gas LLC, = we are committed to providing exceptional service and competitive prices to= our customers=2E a, Verdana; font-size: 18px; color: #000000;">We have a clean and fully = compliant supply chain structure=2E a, Verdana; font-size: 18px; color: #000000;">All necessary documentatio= n will be provided upon successful completion of due diligence and verifica= tion=2E a, Verdana; font-size: 18px; color: #000000;">Our transaction process is= clear, structured, and transparent for efficiency and security=2E n>

a, Verdana; font-size: 18px; color: #000000;">Warm regards a, Verdana; font-size: 18px; color: #000000;">Jason Grampp a, Verdana; font-size: 18px; color: #000000;">Sourcing Manager = a, Verdana; font-size: 18px; color: #000000;">WhatsApp or Call +1 419846532= 9 a, Verdana; font-size: 18px; color: #000000;">2Wood Oil and Gas LLC<= /div>

----=BOUNDARY_712117_LPYW_RKUK_TYVB_DXML--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 12 Jul 2026 05:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wisIQ-000000008za-0ahy

for dave@doctor.nl2k.ab.ca;

Sun, 12 Jul 2026 05:24:30 -0600

Resent-From: The Doctor

Resent-Date: Sun, 12 Jul 2026 05:24:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.vmlproductions.com ([194.61.121.147]:54442)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wimc2-000000007BW-3JW0

for sales@nk.ca;

Sat, 11 Jul 2026 23:20:31 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=vmlproductions.com;

s=202606; t=1783833507;

bh=rLDseV112uxc7+hN2o79rY6wkOheLF7I913mrC8OEMU=;

h=From:To:Reply-To:Subject:Date:From;

b=PSRRpLzg7mQLJnL3pII7ir7qOmgDPVhdSVDICYIuczjR2SmC8MT+ADcBU9TI49ShV

/27zO3yh3I4W5kNjSqlVEyHStU+aQUpT1bsM9A2jsQfswa8qTLGF4PCTUFEtJPxyhW

sBGI1EL1U3j4yGNxvB/7e81u0mV1AKIEnt7won28lLfUwbvEPh3W8oegisWM3WkOOl

YCNi7PlVimNG0XpEinV0F7/MOXu8IZhC7hoTAxiW2EWQP5bekmHZ7G2/gmjiQ2Exmb

f4dshX6cI6GpX2wyUGyXjB+G4npetuP4QstuMDDxTY3hrKRR5RUv7wLTz95Pj7j8je

qiD9W3vqcL9Zw==

Received: from [10.165.1.228] (unknown [151.240.51.103])

by server.vmlproductions.com (Postfix) with ESMTPSA id E55504CA56

for ; Sun, 12 Jul 2026 05:18:25 +0000 (UTC)

Message-Id:

Mime-Version: 1.0

From: 2WOOD OIL AND GAS LLC <2wood@vmlproductions.com>

To: sales

Reply-To: info@2woodoilandgasllc.com

Subject: SOFT CORPORATE OFFER

Date: Sun, 12 Jul 2026 01:17:54 -0400

Content-Type: multipart/alternative; Boundary="--=BOUNDARY_712117_LPYW_RKUK_TYVB_DXML"

X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear sir/madam To whom it may concern This is an official

offer of readily available petroleum products for sale from a non-sanctioned

origin in the United States of America. These products include, but are not

limited to: LIQUEFIED NATUR [...]



Content analysis details: (11.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[194.61.121.147 listed in dnsbl.ahbl.org]

[194.61.121.147 listed in dnsbl.ahbl.org]

[194.61.121.147 listed in dnsbl.ahbl.org]

[194.61.121.147 listed in dnsbl.ahbl.org]

[151.240.51.103 listed in dnsbl.ahbl.org]

[151.240.51.103 listed in dnsbl.ahbl.org]

[151.240.51.103 listed in dnsbl.ahbl.org]

[151.240.51.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[194.61.121.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[194.61.121.147 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[194.61.121.147 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[194.61.121.147 listed in dnsbl.ahbl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[194.61.121.147 listed in wl.mailspike.net]

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[194.61.121.147 listed in bb.barracudacentral.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[194.61.121.147 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[151.240.51.103 listed in will-spam-for-food.eu.org]

[151.240.51.103 listed in will-spam-for-food.eu.org]

[151.240.51.103 listed in will-spam-for-food.eu.org]

[151.240.51.103 listed in will-spam-for-food.eu.org]

[151.240.51.103 listed in will-spam-for-food.eu.org]

[151.240.51.103 listed in will-spam-for-food.eu.org]

[151.240.51.103 listed in will-spam-for-food.eu.org]

[151.240.51.103 listed in will-spam-for-food.eu.org]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ron.wallcarft(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.7 SPOOFED_FREEMAIL No description available.

Subject: {SPAM?} SOFT CORPORATE OFFER

Content preview: Y​‌o‌u​‍ h⁣⁡a⁢‌v⁠e‍ a⁠⁠n⁢⁡e⁢wâ

m​⁣e⁤‍s⁢⁠s⁣⁣a⁢​g⁡⁤e -⁢ P‍​​a​‍‌y‌⁤‌P⁠​a⁠​l⁣⁤

Y‌​o⁠u⁣⁡ h⁠a​v⁣⁡e⁡​ a⁣ n‌​e​​w​ m‍‍e⁡⁠s‌s⁤a⁤‍g⁠⁡e​

i⁣n‌ y⁠o⁤u⁠r⁡⁢ P⁢​a⁠‌y⁠‍‌P‍‍‌a‌‍l⁡

M⁠e [...]

Content analysis details: (19.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[162.221.192.45 listed in dnsbl.ahbl.org]

[162.221.192.45 listed in dnsbl.ahbl.org]

[162.221.192.45 listed in dnsbl.ahbl.org]

[162.221.192.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[162.221.192.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[162.221.192.45 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[162.221.192.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[162.221.192.45 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[162.221.192.45 listed in will-spam-for-food.eu.org]

[162.221.192.45 listed in will-spam-for-food.eu.org]

[162.221.192.45 listed in will-spam-for-food.eu.org]

[162.221.192.45 listed in will-spam-for-food.eu.org]

[162.221.192.45 listed in will-spam-for-food.eu.org]

[162.221.192.45 listed in will-spam-for-food.eu.org]

[162.221.192.45 listed in will-spam-for-food.eu.org]

[162.221.192.45 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[162.221.192.45 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_EMARKE3 Header from spammer tool signature (emarke)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_FULL BODY: mangled full

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.0 UNICODE_OBFU_ZW_MANY Heavily obfuscating text with hidden characters

Subject: {SPAM?} Reminder: =?utf-8?b?WeKBoG/igIvigaF177u/IGjigaTigaFh77u/duKBomU=?=

=?utf-8?b?4oGgIGHvu7/igaAgbuKAjOKBoWXigaJ34oCN4oGjIG3igaLigItl4oGi4oCLcw==?=

=?utf-8?b?4oGj4oCMc+KAjWHigIvigIxn4oCNZeKBoCE=?=





P⁣‍a⁤⁤y‍⁡P‌a​l



Y⁠o​⁡u h⁤⁡av⁢e⁠ a⁠ n‌⁡e⁢w‍⁣ m⁢​e⁢​s⁣‌s‍a​‌g‍e⁠



H​el‍⁡l‍⁢o‌⁤,⁣⁢



Y⁤o⁢u⁡‍ h‍⁢a⁡‍v⁣⁡e‍⁡ a​ n⁡‍e‍⁢w m⁢e⁣s⁠s⁤a​g​e⁠ i‌n⁤ y​⁢ou⁡‌r‌⁣ P⁠‌a​⁠‍y⁡‌P‍a⁡⁤​l⁡‍ M‌e‍s⁤⁢s‌a⁡g​e⁣⁠ C⁡⁠e​n​t⁡e⁡​r‍ w‌i⁠t⁢h​⁣ i⁤m​p⁣o‍r⁢t⁤⁣a⁣n⁠⁣t⁢ i‌‍n‌f⁡⁣o⁣r⁤‍m⁠a⁠⁡t⁡i⁠​o⁣​n‌⁠ a⁠‌b⁣‌o‌u⁢‌t‌ y‌​o‍u⁣‍r⁤ a⁠​c⁤‍c⁢​​o​u‍⁣​n⁢‍t.‍⁤



F⁢o⁣r‌ s​e⁡‌c​⁣​u⁠​r‍‍i⁤⁤‍t⁡‍y‌⁠ r‍e⁤⁣a⁠s‍o⁤n⁡s‌‍,⁤⁡ me⁢s⁣‌s⁡a⁡⁣g⁡e⁠ c‍⁣o⁤nt⁣⁡e⁢n⁤t⁠ i⁡s​ n‍​o​t⁣​ s‌⁢e‍⁤n⁤t⁡ b⁠y‍⁢ e⁣⁠m​a​i⁡⁢l⁠.⁣⁠ P‌⁤l⁢⁡e⁤⁤a⁣‌s‌⁣e⁣ l⁠‍o⁤⁠g⁡ i‍‌n t‍​o‍⁠ y⁣o‍‌u​​r⁢⁣ P​‌a‌​y⁢‌P⁤‍⁠a⁡⁣‍l​ a‌‍c⁤‌c‍⁠‍o‌‍u⁠‌n⁢⁠‌t‌ t‌o⁣⁢ r⁠e⁤a⁣d‌⁤ i⁡‍t⁢⁢.​

L⁢⁠o⁡‍‌g⁠‌i⁡‍‍n⁠ t​‌o⁠​ P‌⁠a‌⁤‌y‌‌⁠P‌‌​a‍⁡‌l​



H⁢​e​l⁣‍p‍⁠ &⁡ C‍o‍n⁢t​a⁣⁡c‍t‌⁣ | S⁤⁠e‍⁠c⁤⁠u‍​r‌⁠‍i‌⁤​t⁡⁠⁠y |⁡ A‌‍p⁡p⁠s⁤



P⁤l‍e⁣a⁤‍s‌⁤e‌ d⁡o⁢‌ n⁠o⁢t⁠‌ r⁢‍e⁢‌pl‌​y⁠ t‌⁠o⁡​ t⁡‍h​is⁤⁢ e⁠⁠m‌⁢a⁣i‌l⁡.⁣ W⁠e​ a⁣r‌e⁤⁡ u⁠n​⁡a​b⁤⁡l⁣⁤e‌ t⁢o r‍⁢e⁢sp⁣⁡o⁠nd⁣ t⁡⁤o i⁠⁠n​q⁠u⁣​i​⁣ri⁠‌e⁤⁤s⁤ s‍​e⁣n⁣​t⁣⁢ t‍o⁠⁤ t‌⁤h⁢i‌⁢s⁤ a⁠⁣d‍d⁢r⁠e‌⁣s‍s⁠‍.⁡



P⁤⁠a‌‍y⁡​P​⁢‌a⁠‍l⁢ i⁡⁢s​⁣ c​o⁡m⁤​m‍⁠i‌t⁤t‌e⁡d⁡⁤ t‌⁡o⁢ p⁣⁡r‍​e⁢v⁤⁠e⁤⁢n⁡t‌‍i⁠n⁢g⁡ f⁠r⁢a⁣⁡ud⁡u⁣⁠l‍e⁤n⁤⁤t⁤ e‌m⁢⁢a‌⁤i⁡l⁤s‌‍.‍ E⁠m⁡a⁤⁣i⁡‌l⁤‍s f⁠‌r⁠o‌‌m⁠ P​a⁣​⁠y⁤‍​P‍a‍⁠​l⁡ w​i‍​l⁤l‌ a⁣‍l⁢⁣w​a⁠y⁣​s⁡ c⁠o⁣n⁣⁠t⁣⁢ai⁣​n⁡ y⁢⁣o⁢u⁣r⁠ fu‌l​l n‍⁡a‍⁡me⁣⁡.​‌



C⁤o⁢p⁣y​⁣r⁡i⁠⁠g​h⁤‌t‌⁡ ©‌ 1​9⁠9⁤‌9⁡–‌​2⁡0⁣‍2⁢6​⁢ P⁣​​a⁣⁡⁠y⁠‌P⁢​⁠a‌​‍l⁠.⁤‌ A‌‍l⁤⁠l​ r⁡ig⁢⁣h⁠t⁡​s r‍e⁢⁢s⁢e⁣‌r⁠v‍e‌​d⁡⁢.‍

P⁤‍‌a⁤‍y⁣‍P⁤⁢⁠a⁣⁣‌l‌,⁡⁢ I⁢‌n⁠‌c⁤‌.​‍ N‍.‍‍A⁤⁣.⁠,⁠ 2⁠⁣2‍1​1⁡ N‍‍.⁡ F‌​i⁢r⁢s⁢⁤t⁣ S⁢t⁡r⁢‍e⁣e⁤t‍⁡,⁠ S‍a‍‌n‍⁡ J⁠⁢o⁠s‌​e⁣,⁡⁡ C⁠A⁡‌ 9⁢5⁣1⁣3‌1⁠⁤,‍‍ U⁤S‍A​.⁡

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 20:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wijd6-00000000KXT-04Id

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 20:09:16 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 20:09:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta13.integratedcollision.com ([162.221.192.45]:40291)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wij3y-00000000HNB-0JMj

for sales@nk.ca;

Sat, 11 Jul 2026 19:33:07 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=pmta1783260803;

d=integratedcollision.com;

h=MIME-Version:Content-Type:Subject:From:To:Date:Message-ID:Reply-To:

List-Unsubscribe:List-ID:List-Post:List-Owner:List-Archive:List-Help;

i=no-reply@integratedcollision.com;

bh=znpp5SCzqq5f/ouP4u4IhWgbVYysZyyfMcE3oxb4W5M=;

b=cswJ+txNri2QdrF7JrgbZEM3g2jifE1aESJq2b8If92vOCIEzF4jurSaWV+aFroVXE4BE2BukzHE

HryJLB0v9/fJyAqNAWhD/IgaqYPGEWQleWxpUxwzodwHDJyNXk/OGKFNWzDrVeXZFcq0S5RQzTA4

cBRCDJ+NYSlKUUCdi0s=

MIME-Version: 1.0

Content-Type: multipart/related; type="multipart/alternative";

boundary="===============3983628736120802485=="

Subject: Reminder: =?utf-8?b?WeKBoG/igIvigaF177u/IGjigaTigaFh77u/duKBomU=?=

=?utf-8?b?4oGgIGHvu7/igaAgbuKAjOKBoWXigaJ34oCN4oGjIG3igaLigItl4oGi4oCLcw==?=

=?utf-8?b?4oGj4oCMc+KAjWHigIvigIxn4oCNZeKBoCE=?=

From:

=?utf-8?b?UOKAjWHigI154oCMUOKBoGHigIts?=

To: sales@nk.ca

Date: Sun, 12 Jul 2026 01:31:51 +0000

Message-ID: <178381991145.1724878.8950802472807735965@integratedcollision.com>

X-Virtual-MTA: pmta-pool

X-Mailer-RecptId: 3b52944cbfdb42b7

Reply-To: support@integratedcollision.com

List-Unsubscribe: =?utf-8?q?=3Cmailto=3Aunsubscribe=40integratedcollision=2E?=

=?utf-8?q?com=3Fsubject=3Dunsubscribe-3b52944cbfdb42b7=3E=2C_=3Chttps=3A//i?=

=?utf-8?q?ntegratedcollision=2Ecom/unsubscribe=3Fid=3D3b52944cbfdb42b7=26e?=

=?utf-8?q?=3Dc2FsZXNAbmsuY2E=3E?=

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-ID: main.integratedcollision.com

List-Post: NO

Feedback-ID: main:integratedcollision.com

X-Report-Abuse: Please report abuse here: abuse@integratedcollision.com

X-Complaints-To: abuse@integratedcollision.com

List-Owner:

List-Archive:

List-Help:

Organization: =?utf-8?b?UOKAjWHigI154oCMUOKBoGHigIts?=

Content-Language: en

X-Auto-Response-Suppress: OOF, AutoReply

Importance: normal

X-Spam_score: 19.1

X-Spam_score_int: 191

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wieQt-00000000K5j-1uqG

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:36:19 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:36:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps115623.inmotionhosting.com ([192.145.237.173]:43740)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wie4R-00000000Ikb-3L24

for sales@nk.ca;

Sat, 11 Jul 2026 14:13:16 -0600

Received: from ec2-99-79-123-171.ca-central-1.compute.amazonaws.com ([99.79.123.171]:52506 helo=EC2AMAZ-BO61H8T.ca-central-1.compute.internal)

by vps115623.inmotionhosting.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.4)

(envelope-from )

id 1wie3V-0000000FEmp-3Jb3

for sales@nk.ca;

Sat, 11 Jul 2026 13:12:09 -0700

Content-Type: multipart/alternative; boundary="===============5547780754340454836=="

MIME-Version: 1.0

From: "A Special Gift Inside"

To:

Subject: Shoppers Drug Mart - App Survey

Date: Sat, 11 Jul 2026 20:12:09 +0000

Reply-To: noreply@subsaharamining.com

Message-ID: <2b0f05b7367d41959ff291d506c40bbe@subsaharamining.com>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - vps115623.inmotionhosting.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - subsaharamining.com

X-Get-Message-Sender-Via: vps115623.inmotionhosting.com: authenticated_id: admin@subsaharamining.com

X-Authenticated-Sender: vps115623.inmotionhosting.com: admin@subsaharamining.com



--===============5547780754340454836==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



SGVsbG8sIAoKICAgQ29tcGxldGUgb3VyIHNob3J0IHN1cnZleSBhbmQgcmVjZWl2ZSBhIHNtYWxs

IHRoYW5rLXlvdSBnaWZ0LiAKCiAgICBUYWtlIHRoZSBzdXJ2ZXkgIAoKICAgVGhhbmsgeW91IQ==



--===============5547780754340454836==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PGh0bWw+Cjxib2R5PgogIDxwPkhlbGxvLDwvcD4KCiAgPHA+Q29tcGxldGUgb3VyIHNob3J0IHN1

cnZleSBhbmQgcmVjZWl2ZSBhIHNtYWxsIHRoYW5rLXlvdSBnaWZ0LjwvcD4KCiAgPHA+PGEgaHJl

Zj0iaHR0cHM6Ly9wdGVhYmlzY3VpdC5mci9pbmRleC5odG1sIj5UYWtlIHRoZSBzdXJ2ZXk8L2E+

PC9wPgoKICA8cD5UaGFuayB5b3UhPC9wPgo8L2JvZHk+CjwvaHRtbD4=



--===============5547780754340454836==--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wieQV-00000000K4H-2xH4

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:35:55 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:35:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f70.google.com ([209.85.217.70]:45281)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wicwF-00000000F6m-32pk

for sales@nk.ca;

Sat, 11 Jul 2026 13:00:45 -0600

Received: by mail-vs1-f70.google.com with SMTP id ada2fe7eead31-738627c7908so538541137.2

for ; Sat, 11 Jul 2026 11:59:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783796380; x=1784401180; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Ay9IzvcOZcT2WYjLO3oUklABaVtCm5W1Cj+p0JZB95s=;

b=fGjzpcQjeEk4kx1NSur/uP+Dnb+hZKYn1bueWjAI6BkGUdOuh1wqIgs5486p0ik4ch

koxjbW0wBVkAXf7fTcp2iKjUuM/ndmqMXrl1IDrC5HXJJ2nAH6pGexJmrj/poNsnU6Ue

X1kshff1TIb+6rJ9a2p9Fe8YXtZSw42ZF1tAFvsQVZKzpSLYEqLHVpt6CkTCW85wHilN

6HwWLuVbbkXHSc+hJDNwum/0cdy66BipHfrGL240zzyc1tJz1kInZH6ghD2ReKraxI4R

j9T6aRyGSOWAmlSv15sb8vmZrO+NOIchWFMlwyu07/zplLKxgP1KA9dbFlwolB1MPUUJ

0zCw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783796380; x=1784401180;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Ay9IzvcOZcT2WYjLO3oUklABaVtCm5W1Cj+p0JZB95s=;

b=nDT9cs19LJYZfLJ62Z1buxVKoRue4waQCPR+WYOuk9i8UCvByeoj0zmwPjWZC5mkhh

NNgBX5mttLSGOudU5j4O9W8YilUhDR7syS5jR5PPCxp3idEnSu2bujG2UYPHSvjoQJ9D

YqbJmb1sYnQz47pc+AsuVR+qUvaIF9CA2BI5QeiiAgaq7OT4J1mbuGVloTRsL/KQw52K

B1Fw03I2UAPuvbUBKyu1uYbjxYwGsoK9/ZJLELTLpILUasX49AxLcrirUX+XAGWMqpQo

up1jiWRITfTEu4JG3xRJx8NCTm5RuSkPVZZ5p34CHGw7RP8tfoFQjrzWLeu5h2hP04OB

NuQg==

X-Gm-Message-State: AOJu0YzCV14689gYaHeOA7cgPeRqjwUSOipEaD8su6l1sDFJvr3kodHl

DX1YrklX/tNPA6AdiTG0lQF+Ap1uowgHDgISB14uXPUJN7gQNaLhq80G96pl6HKX6vryno+bn8+

W/tju3g==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:554b:b0:738:bce9:6afc with SMTP id

ada2fe7eead31-7453384d1eamr1958786137.0.1783796379992; Sat, 11 Jul 2026

11:59:39 -0700 (PDT)

Message-ID:

Date: Sat, 11 Jul 2026 18:59:39 +0000

Subject: your company have a lot of potential.

From: ryanstrain86@gmail.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000094c86306565a75b5"



--00000000000094c86306565a75b5

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



We analyzed your website and discovered some SEO opportunities worth

exploring.



May I send over a brief proposal?



Thanks,

Faheem



--00000000000094c86306565a75b5

Content-Type: text/html; charset="UTF-8"



Hi,

We analyzed your website and discovered some SEO opportunities worth exploring.

May I send over a brief proposal?

Thanks,
Faheem

--00000000000094c86306565a75b5--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sat, 11 Jul 2026 11:34:00 -0600

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:53602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiba3-00000000AXg-20hk

for dave@nk.ca;

Sat, 11 Jul 2026 11:33:45 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyG4B2gw9zyw

for ; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyG4B2Yb4z7pNs; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Date: Sat, 11 Jul 2026 10:32:37 -0700

To: dave@nk.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID: <155a947b8a9c91d9f5243f35fae30748@intelcom.com>

List-Unsubscribe: mailto:bounce547-EbflqqdmYlMWp1I@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1c5df8daaf17dd68862db039456ed1085"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--1c5df8daaf17dd68862db039456ed1085

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1c5df8daaf17dd68862db039456ed1085

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

Intelcom

Delivery Update

Your package is currently being processed and requires a small fee for customs handling.

Amount due: 2.96 CAD

Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery

This is an automated message. Please do not reply.

© 2026 Intelcom Express

--1c5df8daaf17dd68862db039456ed1085--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sat, 11 Jul 2026 11:34:00 -0600

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:53602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiba3-00000000AXg-20hk

for dave@nk.ca;

Sat, 11 Jul 2026 11:33:45 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyG4B2gw9zyw

for ; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyG4B2Yb4z7pNs; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Date: Sat, 11 Jul 2026 10:32:37 -0700

To: dave@nk.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID: <155a947b8a9c91d9f5243f35fae30748@intelcom.com>

List-Unsubscribe: mailto:bounce547-EbflqqdmYlMWp1I@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1c5df8daaf17dd68862db039456ed1085"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--1c5df8daaf17dd68862db039456ed1085

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1c5df8daaf17dd68862db039456ed1085

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

Intelcom

Delivery Update

Your package is currently being processed and requires a small fee for customs handling.

Amount due: 2.96 CAD

Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery

This is an automated message. Please do not reply.

© 2026 Intelcom Express

--1c5df8daaf17dd68862db039456ed1085--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiePs-00000000K2q-2r4B

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:35:16 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:35:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:53568)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiba3-00000000AXe-20kV

for doctor@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 11:33:45 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyG4B3ccsz10P

for ; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyG4B3VwWz7pNv; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Date: Sat, 11 Jul 2026 10:32:37 -0700

To: doctor@doctor.nl2k.ab.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID:

List-Unsubscribe: mailto:bounce547-EbflqqdmYlMWp1I@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1b1f1ebd66c39eb912bd3c809fb0fca4a"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--1b1f1ebd66c39eb912bd3c809fb0fca4a

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1b1f1ebd66c39eb912bd3c809fb0fca4a

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

Intelcom

Delivery Update

Your package is currently being processed and requires a small fee for customs handling.

Amount due: 2.96 CAD

Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery

This is an automated message. Please do not reply.

© 2026 Intelcom Express

--1b1f1ebd66c39eb912bd3c809fb0fca4a--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 11:36:00 -0600

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:36634)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wibbe-00000000AeU-0Nxb

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 11:35:22 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyG645cRlz1BF

for ; Sat, 11 Jul 2026 10:34:20 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyG4B3mTZz7pNv; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Date: Sat, 11 Jul 2026 10:32:37 -0700

To: dave@doctor.nl2k.ab.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID:

List-Unsubscribe: mailto:bounce547-EbflqqdmYlMWp1I@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1edf94f1f5efb2b6f9567af0e1f27072e"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--1edf94f1f5efb2b6f9567af0e1f27072e

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1edf94f1f5efb2b6f9567af0e1f27072e

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

Intelcom

Delivery Update

Your package is currently being processed and requires a small fee for customs handling.

Amount due: 2.96 CAD

Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery

This is an automated message. Please do not reply.

© 2026 Intelcom Express

--1edf94f1f5efb2b6f9567af0e1f27072e--

This is a multi-part message in MIME format.



--1f0035db069faa3de0823b6dc1c6b60cd

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1f0035db069faa3de0823b6dc1c6b60cd

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



























--1f0035db069faa3de0823b6dc1c6b60cd--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiePF-00000000K1H-23v0

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:34:37 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:34:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:47518)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wia1T-0000000041L-0x7K

for sales@nk.ca;

Sat, 11 Jul 2026 09:53:57 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyCr12zz4zyb

for ; Sat, 11 Jul 2026 08:52:01 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyCr12RB5z7pND; Sat, 11 Jul 2026 08:52:01 -0700 (PDT)

Date: Sat, 11 Jul 2026 08:52:00 -0700

To: sales@nk.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID: <8326dbc5e35ed6d4525234d2b8fd2555@intelcom.com>

List-Unsubscribe: mailto:bounce426-0I5z9GzyDnQBWl9@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1f0035db069faa3de0823b6dc1c6b60cd"

Content-Transfer-Encoding: 8bit

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Intelcom Delivery Update



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

[208.113.156.243 listed in dnsbl.ahbl.org]

[208.113.156.243 listed in dnsbl.ahbl.org]

[208.113.156.243 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[208.113.156.243 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[208.113.156.243 listed in psbl.surriel.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[208.113.156.243 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.113.156.243 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

Subject: {SPAM?} Intelcom Delivery Notification