German language Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 17:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEEVG-000000009Ts-33iH

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 17:23:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 17:23:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr2-f11.google.com ([74.125.225.75]:56392)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEDv4-000000005eA-3bGz

for doctor@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 16:45:35 -0600

Received: by mail-wr2-f11.google.com with SMTP id ffacd0b85a97d-48c688a7cd9so404202f8f.0

for ; Tue, 06 Oct 2026 15:44:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791326670; x=1791931470; darn=doctor.nl2k.ab.ca;

h=reply-to:date:from:to:subject:content-description

:content-transfer-encoding:mime-version:content-type:message-id:from

:to:cc:subject:date:message-id:reply-to:content-type;

bh=ehLjaAizzG7SZ9sLBPuVCqjEP2MNzj6qQT5HlNq4uvE=;

b=YQgs65qzzOKnWv0QYaS6NdPl5BfzSF7cls23Sx/5BWAIPSChi6cDmsmRSoVkpvfrmH

ofR8PW7TvxYFG7sEj3vSsKoofp+t0BuBxbDJTP556L9SdcdFy2Vw8I0agFlMKs7vDiTd

tE4UEd10Rziukklfyo0fsAn5irzWFX6qm3leEEzg1grzwOY0vCCShVRtV6nJAHy6GAUq

tcu/J6aWMDWQ3ZfRHckN/mRDiynrX+cXb1op+xb+9OoX63oGmFug3BJ32jUOcKkCNSM0

YxXRnEgKyzE67YkW9E/HGZJK/C5BlWOQcULYrbpqoZthryrj9/uzNEIhDHQZ1rYG0Prh

mvTw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791326670; x=1791931470;

h=reply-to:date:from:to:subject:content-description

:content-transfer-encoding:mime-version:content-type:message-id

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=ehLjaAizzG7SZ9sLBPuVCqjEP2MNzj6qQT5HlNq4uvE=;

b=WClrMWIr8Hv/jzDfmnpH8C3S6+q2pZywPjqdyONdSbEJDGsoOYcKU9D2eUIK3M/Xle

eTM6QBpZfhxmDS+C/1jRB1CvvxBG2B/glI5WmJWIrlvudsBzJl9xZayHwt9HCvQuqr4Q

6DIlotBXloKY0qtNJ8xyvgopGXXMdRyCLVIUyQ19Uc7uyuFe/bLP/IZCw7xOKOCDZcZC

QtDmXHFvcO9MoIA/CErl0tqhP8M/7ZzBJIRhOF1oJgPS1u05kchzd7O/VD1MHYSJkhmC

ZKlpINF9wrKy9aqwKv2dmNevaJOSk17MN5Gmn1TMINIgYPwpgExRNgK3IW4lDpqGEgHk

Ubhg==

X-Forwarded-Encrypted: i=1; AKwUvBxw0DTyWph10C8CZ5+VlnzJYgShs2X7TRK+K61r/VtYoiXSjULx/iz9k1ilZcwVa92flvJJFbU=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFq9FYLCTuS+8AOXVWq21hb6enFiLX+WHm4aard49y1UxaSxSHn3+Equ

90xQ73GB2aGKa8tU4umhxzUm3tguixIZxQVNGzLjiaruOsxhro/fOauf

X-Gm-Gg: AYBFou0s21iIweqklXfUsi5yg6hCNUoQ8mcxYqXEFR64MdzziZeybV+adXjnZ20hizL

fvUu70EEzDkN4ITwEoQvjgvAz+/IcnEcA/r9KKyrk5KLCpB/SNgvi5udKaJWRvFcPL4eQSB9+eR

5mhHWpc6xPNkyPqChbqKXe2rBcPwgq3IB4exSkzAqL7wxw46WYDk5E8wBq6EmmTlC1fRm3OBi1j

Z2oYA22jxpWmCL6kj+F97Nc85e8fuakmwszKPkvrr+fV3TpaaPa191sAPGWfpshe8KKSpkn/bzw

ZTlfBXFMtp9kVmJb2JPLEmWaOGsc0bJX387ImWB2IZYRGWo0lyCkfaj4dWY9WwnXsx7f2eUuW6M

DNGLwRLhchgK8wF1YoUO31sfmSH5qB2NnAd03jZbauC7BbArwzvZHPP6mFVqNBLKB59IMZ4H/El

7a1+E+/murdugytIbDi6ChY+y+lpGZH94PmWa6o5ooaDXegR6yEyInew6d21G7F+kjDss4HWiDI

B3rwqQrustHYFQwGBY=

X-Received: by 2002:a5d:64e6:0:b0:488:7f69:632c with SMTP id ffacd0b85a97d-48c7288cee9mr1214407f8f.56.1791326670516;

Tue, 06 Oct 2026 15:44:30 -0700 (PDT)

Received: from DESKTOP-G28RE5S.lan ([129.222.206.218])

by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48c71bd769csm1980384f8f.5.2026.10.06.15.44.23

(version=TLS1 cipher=AES128-SHA bits=128/128);

Tue, 06 Oct 2026 15:44:28 -0700 (PDT)

Message-ID: <6ac579cc.d8747c6a.1fb2f3.4eb0@mx.google.com>

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Ich bin Dominika Kulczyk

To: Recipients

From: zeitrox94@gmail.com

Date: Tue, 06 Oct 2026 15:44:16 -0700

Reply-To: headquarter.ceo11@gmail.com

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ich bin Dominika Kulczyk, eine polnische Milliardärin und

Unternehmerin mit Sitz in den USA. Ich bin die Tochter von Jan Kulczyk, dem

einst reichsten Mann Polens. Zudem bin ich Mitbegründerin und Pr [...]



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

[74.125.225.75 listed in dnsbl.ahbl.org]

[74.125.225.75 listed in dnsbl.ahbl.org]

[74.125.225.75 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.225.75 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[129.222.206.218 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[headquarter.ceo11(at)gmail.com]

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[zeitrox94(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[zeitrox94(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.225.75 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.225.75 listed in wl.mailspike.net]

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Ich bin Dominika Kulczyk



Ich bin Dominika Kulczyk, eine polnische Milliard=C3=A4rin und Unternehmeri=

n mit Sitz in den USA. Ich bin die Tochter von Jan Kulczyk, dem einst reich=

sten Mann Polens. Zudem bin ich Mitbegr=C3=BCnderin und Pr=C3=A4sidentin de=

r Kulczyk Foundation, im Aufsichtsrat der Kulczyk Holding sowie Mitbegr=C3=

=BCnderin der Values ??Consulting Group in den USA, wo ich auch gesch=C3=A4=

ftlich t=C3=A4tig bin.



Informationen =C3=BCber mich finden Sie unter:



https://en.wikipedia.org/wiki/Dominika_Kulczyk



Im Rahmen meines Wohlt=C3=A4tigkeitsprojekts beabsichtige ich, jeweils 450.=

000 US-Dollar aus meinem Verm=C3=B6gen an vier Einzelpersonen weltweit zu s=

penden. Wenn Sie diese E-Mail erhalten haben:



Bitte senden Sie mir Ihre Daten, damit ich meine Bank in den USA anweisen k=

ann, die =C3=9Cberweisung der 450.000 US-Dollar an Sie zu veranlassen =E2=

=80=93 eine Zuwendung, die Ihnen und auch anderen helfen soll.



Dominika Kulczyk

Kontaktieren Sie mich unter: vrosenburg@atomicmail.io

Apple paypal phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 17:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEETw-000000009NZ-0gXy

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 17:22:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 17:22:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f72.google.com ([209.85.222.72]:57786)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE9FR-000000009QA-3dEu

for doctor@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 11:46:19 -0600

Received: by mail-ua1-f72.google.com with SMTP id a1e0cc1a2514c-9806e283b0eso2408589241.3

for ; Tue, 06 Oct 2026 10:45:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1791308716; x=1791913516; darn=doctor.nl2k.ab.ca;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Yi0NigrBbpWvEP6CSBQCPF4ttBl6TSVtCDsQWI1AY4A=;

b=Bs3N+d1unkl/rULTuBiCvUs4B6S0ZYbOy0U9ELboRU/1u8xc8yrE4iiebO2QpAJEfX

hrtf3TwMl2Ewv9KmwRmwlyl6VOtZsL4x8QdAkUsSQ3PpRYAqTnEH2bu/sKwrCKM2nWE7

sKZFB8pZ+JBSV5UlX6Z6CPgFzaUYfRLQGPD+70u68MaIUM6cO+p147aR4WV9o47tojD9

1VMLJqnEss9+bSY9RTxsyL0f+udZHXPq3OxFc0+aohQGMiO+KGSziXqlYGTFzF2sQu64

86Ql69M07N7QAUpTlf3VW/BOY2M2m6pj71bVgCTlZVjXx5sVJOvl4rsXP3xOEyNhTmW/

yL+g==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=colegiobritanico-edu-bo.20251104.gappssmtp.com; s=20251104; t=1791308716; x=1791913516; darn=doctor.nl2k.ab.ca;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Yi0NigrBbpWvEP6CSBQCPF4ttBl6TSVtCDsQWI1AY4A=;

b=pLDdVexGDYURt2mvuHMDr2t0daUc48NaQWCnRS19shMsGp1ZMYbzSjj1SIFqp+xmSW

QaVfU0YCWXq+0TNRhs3nE7ZTWcIxeBCLDnfrfJDbhWx4a/GWAU/ba9tTGzRZAMXCvW+K

BqA/yFMLcjAN2EpgElCBR8pszdtdqBMhs4wLNB+gKycpVJgEmug1JbyuIVp09y2Z4dZu

Ka8tHV/2jvDgYdLubidOEmR6Yx7xilLcjpmHarkiIQ0Thb9zDLbY8k+b6Cz7oW9YB+08

NBUlBPgI9xyIsE7TR+piBJ1Eb5HBh4rR04WRCURnIY/P3bNFB5ZFJRUoOG9YOj0i62aR

+Bww==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791308716; x=1791913516;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=Yi0NigrBbpWvEP6CSBQCPF4ttBl6TSVtCDsQWI1AY4A=;

b=CBtfTYshVK5EAOSe9ftLECGSSoZ4zqakoH3eW/+8BBAm5EDLJ8BnhI4Yd3mNObuNNk

veDYzukZOulnTtEDWtIN9x7avGUEQggLqTJ4Eo10QxLVMHaEVcg1OZ35pdbDgIinQ0vz

Jmg55SjULQQwmetXsHSZp2JG/M4c3Ix6hT0C8CarNC3AIvylo3nD82NtZrKVw1kBQOip

9KtkbhSertxRulpMC4hJ6H87EMWDEYx/uqFofrKVdJx5LCW0J0/v5dcCSokaSLvSjCxJ

rPMmG936z33NsehFNLPB/Vg9UIc/TxgzbWgPGgcWRVHG8+TYQzWkTW9bDu6UIl7SeLd2

TRwQ==

X-Forwarded-Encrypted: i=1; AKwUvBx0ltMOtRulhRRm+IV7a//RcAAUHn8fIOA64GITmL/wTMfVFLBV4BZgkZXuNZxXWrvCHYcCVTg=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFq9FYK4O4A6OymLFjIDRkhdR78kMfBzUIt0Rs63cEkEs1hziN9T/tOx

VvnB6mqL3x3K+i2m3b2uxBwl2AoXMo7RYHAMyh/AxWgzbzuJY+jzL2V3gS3NdCq8zgN3s+gVqGB

j+AufdO0eorDY9tG0m9sh8w84gaDtCj/1O8yUvydpKRk6ug==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:a53:b0:7a7:198b:674b with SMTP id

ada2fe7eead31-7c2460fb1demt9301830137.32.1791308715755; Tue, 06 Oct 2026

10:45:15 -0700 (PDT)

Reply-To: HEVERT GABRIEL DEL RIO FERNANDEZ

Sender: Google Calendar

Message-ID:

Date: Tue, 06 Oct 2026 17:45:15 +0000

Subject: Important Message

From: HEVERT GABRIEL DEL RIO FERNANDEZ

Content-Type: multipart/alternative; boundary="000000000000b1f167065d2f8ff0"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Valued Customer, PayPal has observed activity that doesn't

match your usual usage patterns on your account. Our fraud prevention system

recently logged a $292.95 PayPal purchase attempt at an App [...]



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.72 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.72 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.72 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Important Message



--000000000000b1f167065d2f8ff0

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RGVhciBWYWx1ZWQgQ3VzdG9tZXIsIFBheVBhbCBoYXMgb2JzZXJ2ZWQgYWN0aXZpdHkgdGhhdCBk

b2Vzbid0IG1hdGNoIHlvdXIgIA0KdXN1YWwgdXNhZ2UgcGF0dGVybnMgb24geW91ciBhY2NvdW50

LiBPdXIgZnJhdWQgcHJldmVudGlvbiBzeXN0ZW0gcmVjZW50bHkgIA0KbG9nZ2VkIGEgJDI5Mi45

NSBQYXlQYWwgcHVyY2hhc2UgYXR0ZW1wdCBhdCBhbiBBcHBsZSBTdG9yZSBsb2NhdGlvbiBpbiAg

DQpNYXNzYWNodXNldHRzIChNQSkuIElmIHRoaXMgcHVyY2hhc2Ugd2FzIG1hZGUgYnkgeW91OiBJ

Z25vcmUgdGhpcyBtZXNzYWdlLiAgDQpUaGUgdHJhbnNhY3Rpb24gd2lsbCBjbGVhciBhbmQgc2hv

dyB1cCBpbiB5b3VyIGFjY291bnQgd2l0aGluIDI0IGhvdXJzLiBJZiAgDQp0aGlzIHB1cmNoYXNl

IHdhcyBOT1QgbWFkZSBieSB5b3U6IENhbGwgUGF5UGFsIFN1cHBvcnQgYXMgc29vbiBhcyBwb3Nz

aWJsZSAgDQphdCArMSA4MzAtMzE4LTk3ODcgZm9yIGltbWVkaWF0ZSB2ZXJpZmljYXRpb24gYW5k

IGFjY291bnQgcHJvdGVjdGlvbi4gWW91ciAgDQphY2NvdW50IHNhZmV0eSBpcyBvdXIgdG9wIGNv

bmNlcm4sIGFuZCB3ZSBhcHByZWNpYXRlIHlvdXIgY29vcGVyYXRpb24uICANClRoYW5rcywgUGF5

UGFsIFN1cHBvcnQgVGVhbSArMSA4MzAtMzE4LTk3ODcgS2luZGx5IGRvIG5vdCByZXBseSB0byB0

aGlzICANCm1lc3NhZ2UsIGFzIHRoaXMgYWRkcmVzcyBpcyBub3QgYWN0aXZlbHkgbW9uaXRvcmVk

LiBzZXJ2aWNlQHBheXBhbC5jb20gTm8gIA0KbG9uZ2VyIHdhbnQgdG8gcmVjZWl2ZSB0aGVzZSBl

bWFpbHM/IFVuc3Vic2NyaWJlIMKpIDIwMjYgc2VydmljZUBwYXlwYWwuY29tDQoNCkltcG9ydGFu

dCBNZXNzYWdlDQpUdWVzZGF5IE9jdCA2LCAyMDI2IOKLhSAycG0g4oCTIDNwbQ0KQm9saXZpYSBU

aW1lDQoNCg0KDQpPcmdhbml6ZXINCkhFVkVSVCBHQUJSSUVMIERFTCBSSU8gRkVSTkFOREVaDQpk

ZWxyaW9oZXZlcnRnYWJyaWVsQGNvbGVnaW9icml0YW5pY28uZWR1LmJvDQoNCg==

--000000000000b1f167065d2f8ff0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20


















/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"HEVERT GABRIEL DEL RIO FERNANDEZ: Dear Valued Customer, PayPal has=

observed activity that doesn't match your usual usage patterns on your=

account. Our fraud prevention system recently logged a $292.95 PayPal purc=

hase attempt at an Apple Store location in Massachusetts (MA). If this purc=

hase was made by you: Ignore this message. The transaction will clear and s=

how up in your account within 24 hours. If this purchase was NOT made by yo=

u: Call PayPal Support as soon as possible at +1 830-318-9787 for immediate=

verification and account protection. Your account safety is our top concer=

n, and we appreciate your cooperation. Thanks, PayPal Support Team +1 830-3=

18-9787 Kindly do not reply to this message, as this address is not activel=

y monitored. service@paypal.com No longer want to receive these emails? Uns=

ubscribe =C2=A9 2026 service@paypal.com"/>
itemscope itemtype=3D"http://schema.org/Event">
s" content=3D"http://schema.org/EventScheduled"/>
r" itemscope itemtype=3D"http://schema.org/Organization">
name" content=3D"Google Calendar"/>
alendar" content=3D"3h4mrn3cuegibht94clifgmshr"/>
ne; font-size: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0=

; width: 0; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">=

Important Message
cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:10=

0%;" class=3D"body-container">

"left">
 
<=

!--[if mso | IE]>

ing=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D=

"width:100%;" class=3D"">

">


=3D"description">Dear Valued Customer,
PayPal has observed activity tha=

t doesn't match your usual usage patterns on your account.

Our fraud =

prevention system recently logged a $292.95 PayPal purchase attempt at an A=

pple Store location in Massachusetts (MA).

If this purchase was made by y=

ou:

Ignore this message. The transaction will clear and show up in your a=

ccount within 24 hours.

If this purchase was NOT made by you: Call PayPal=

Support as soon as possible at +1 830-318-9787
for immediate verifica=

tion and account protection.

Your account safety is our top concern, and =

we appreciate your cooperation.

Thanks,

PayPal Support Team
+1 830-3=

18-9787
Kindly do not reply to this message, as this address is not acti=

vely monitored.


ice@paypal.com">service@paypal.com
No longer want to =

receive these emails? Unsubscribe
© 202=

6 service@paypal.com


td>

=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"">

; direction: rtl; font-size: 0; padding: 24px 32px; text-align: left; verti=

cal-align: top;" class=3D"main-container-inner">

tion: ltr; display: inline-block; vertical-align: top; width: 100%;overflow=

: hidden; word-wrap: break-word;">
lspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-column-ta=

ble-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-layout: fixed=

;">

gn:top;">
esentation" width=3D"100%" style=3D"table-layout: fixed;">
r>

font-size: 0; padding: 0; text-align: left; word-break: break-word;;padding=

-bottom:2px;">

s-serif;font-weight: 400; font-size: 22px; line-height: 28px;color: #3c4043=

; text-decoration: none;" class=3D"primary-text" role=3D"presentation">
n itemprop=3D"name">Important Message

=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;pad=

ding-bottom:24px;">

: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spac=

ing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" r=

ole=3D"presentation">Tuesday Oct 6, 2026 =E2=8B=85 2pm=

=E2=80=93 3pm (Bolivia Time)

ize: 0; padding: 0; text-align: left; word-break: break-word;;padding-botto=

m:24px;">

font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px=

;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"pre=

sentation">
presentation" style=3D"padding-bottom: 4px;">


ext" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-we=

ight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Organ=

izer


break-word;;padding-bottom:24px;">

erif;font-style: normal; font-weight: 400; font-size: 14px; line-height: 20=

px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"=

primary-text" role=3D"presentation">
ellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;"><=

td>


-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased;marg=

in: 0; padding: 0;">Guests

(Guest list has been hidde=

n at organizer's request)
=

=



--000000000000b1f167065d2f8ff0--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 11:23:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE8sX-00000000FM4-0y11

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 11:23:01 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 11:23:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8221367.xmail.ntesmail.com ([8.221.36.7]:49452)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE8jt-00000000AZR-19ce

for root@nk.ca;

Tue, 06 Oct 2026 11:13:45 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1178040_399822551.1791306755275"

To: root

Subject: =?UTF-8?B?TWFudWZhY3R1cmUgb2Ygd2lyZQ==?=

X-Priority: 3

MIME-Version: 1.0

Received: from andy_lai@jcnconnect.com( [10.139.4.149] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 7 Oct 2026 01:12:35 +0800 (GMT+08:00)

From: Andy

Date: Wed, 7 Oct 2026 01:12:35 +0800 (GMT+08:00)

X-WM-Tid: 0aa11233ec7803bdkunm6a5f6c0c18918d

DKIM-Signature: a=rsa-sha256;

b=x5lMUuLOPFki/OkFBxnYLHzEd3sLAnlkOXq/37za9AMxqeQBvFH/1ZoffpWtm6IsO42FVgpgUiKnCIlu9fet2iFhccHeJ96nmgJNvpRUc/SnAM7kM/RZumNhVvPVFvkZBmOG3sIPlzsLxD0O7utU8ZvKjjYfDL+zgWB4aECUu7c=; s=default; c=relaxed/relaxed; d=jcnconnect.com; v=1;

bh=reAXg08LOMfRIIiTIKpPJG4Tt3A+Hjc2NSMtsZCYoDA=;

h=date:mime-version:subject:message-id:from;

Message-ID:









Greetings root



Long time no contact, how are you these days?







This is Andy from DongGuang Jalink electronic Co.,ltd.We are a manufacture of various types of wire harness:electronic wire harness, automotive wire harness, equip-ment connection wire harness, medical wire harness,high-temperature wire harness, etc., which accord with UL,ISO 9001,ROHS, CE, SGS,MSDS.Established in 2001,our company is a trinity enterprise of production, agency,and promotion.



I'm writing to introduce our wire harness,contrast to other factory, We have the following advantages:



1. Support for small customized orders 2. Quick quotation process 3. Short production cycle 4. Professional engineers and promotions staff with prompt responses



Hope to establish business relationship with you! If you would like more information about our company, kindly visit jalink-tech.com .Any thoughts/comments would be greatly appreciated.





Best regards

Andy



Hit subscribe now to receive regular updates and our product’s latest features! Subscribe



If you dont want to receive our emails, you can easily unsubscribe here.

andy_lai@jcnconnect.com







On Thu, Sep 24, 2026, Andy wrote:



-----Original Message-----

From: Andy

Sent Time: Thu, Sep 24, 2026

To: [root ]

Subject: Re: Inquiry about Cable Services





Greetings root



Glad to see your website and know that your main product is similar to our product.



This is Andy from DongGuang Jalink electronic Co.,ltd.We are a manufacture of various types of wire harness:electronic wire harness, automotive wire harness, equip-ment connection wire harness, medical wire harness,high-temperature wire harness, etc., which accord with UL,ISO 9001,ROHS, CE, SGS,MSDS.Established in 2001,our company is a trinity enterprise of production, agency,and promotion.



I'm writing to introduce our wire harness,contrast to other factory, We have the following advantages:



1. Support for small customized orders 2. Quick quotation process 3. Short production cycle 4. Professional engineers and promotions staff with prompt responses



Hope to establish business relationship with you! If you would like more information about our company, kindly visit jalink-tech.com .Any thoughts/comments would be greatly appreciated.



Best regards

Andy



Hit subscribe now to receive regular updates and our product’s latest features! Subscribe



If you don't want to receive our emails, you can easily unsubscribe here.

andy_lai@jcnconnect.com





Canada International Property Show Spam from mailjet

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5pw-00000000MLQ-3nm5

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:08:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:08:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o122.p8.mailjet.com ([87.253.233.122]:42639)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5nI-00000000LpP-0xAb

for sales@nk.ca;

Tue, 06 Oct 2026 08:04:59 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=canadapropertyshow.ca; i=info@canadapropertyshow.ca; s=mailjet; t=1791295431; x=1791302631;

h=Message-Id: MIME-Version: From: Reply-To: To: Subject: Date:

List-Id: List-Unsubscribe: List-Unsubscribe-Post:

Feedback-Id: Precedence: X-CampaignID: X-CSA-Complaints:

X-MJ-Mid: X-REPORT-ABUSE-TO: Content-Type: To: From:

Sender: Subject: Date;

bh=dYqphsvEjB+PedAXLGBWVwSzI+LbELremwRS1HhCvpU=;

b=kPpyn6OxBKVjc5N2mpmIIcG1g2XuY5/Gyte/Fi7cjsm5NOsLrOfHAaUae

owMsvk2b2PSwfp/1nq9zPfXO5C8QWfniss6JOoD15z/WYLHP+ZZRNZTXehhQ

CECCAO2sR+ft7KJ1wjb8/Ho3OVHBLDiWhXOX5Ezltzo9Ex7scrH0KhwlUvD1

329/dcXwKYdNdfY9ftq9FJHJsjlYdvvEvIubrt4nmNC0z03uaLqKlMV5MQcD

o8HyJCgSV+ay1AUPxkvQWsjSCCjMwi3bAEVlQA0dC4zK5SvCpWBlcPMPBeIa

yGGc4ZdjpsR3lCGp4xXRXA7B4dONPhO99CC4wraEfG5/w==

Message-Id:

MIME-Version: 1.0

From: Canada International Property Show

Reply-To: info@canadapropertyshow.ca

To: sales@nk.ca

Subject: Get a gift card + more when you attend the Canada Property Show

9-10 Oct. 2026

Date: Tue, 6 Oct 2026 14:03:51 +0000

List-Id:

List-Unsubscribe:

,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-Id: 42:2952425.2720056:MJ

Precedence: bulk

X-CampaignID: 7765199376

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

CAAACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative; boundary="=-XUWfiITMQotWjMjBTH8h"

X-Spam_score: 48.1

X-Spam_score_int: 481

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: <> [https://www.eventbrite.ca/e/2026-canada-international-property-show-9th-10th-october-2026-tickets-1976214273089]

View online version https://sh4zl.mjt.lu/nl3/J-HX5Uif [...]



Content analysis details: (48.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

[87.253.233.122 listed in dnsbl.ahbl.org]

[87.253.233.122 listed in dnsbl.ahbl.org]

[87.253.233.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mjt.lu]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: canadapropertyshow.ca/35.227.194.51]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[87.253.233.122 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[87.253.233.122 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Get a gift card + more when you attend the Canada Property Show

9-10 Oct. 2026



--=-XUWfiITMQotWjMjBTH8h

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



<> [https://www.eventbrite.ca/e/2026-canada-i=

nternational-property-show-9th-10th-october-2026-tickets-1976214273089]

View online version https://sh4zl.mjt.lu/nl3/J-HX5Uif7BLfjKjuVy2Twg?m=3DCAA=

ACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgT=

g&b=3Dacc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w

If you don't like our emails, you can=C2=A0



update your preferences https://sh4zl.mjt.lu/unsub2?m=3DCAAACXp4-9sAAc7XihA=

AA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg&b=3Dacc0a7d7&e=

=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us]or https://sh4zl.mjt.lu/u=

nsub2?m=3DAUYAAHPnElQAAc6lPsQAA9FtWcgAAYKI_iYAoEvTAC0M6QBocCUcmJ9mT1W7QtmiO=

bGBnsWaDQApgTg&b=3Dacc166ac&e=3De9ed69b4&x=3DJXV5YF4Lsy_PYywz1IAQXRtzDekYgN=

I6e86cGq3ZbC4&hl=3Denunsubscribe [https://sh4zl.mjt.lu/unsub2?m=3DCAAACXp4-=

9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg&b=3D=

acc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_usat any time.=



--=-XUWfiITMQotWjMjBTH8h

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




9/xhtml" xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-m=

icrosoft-com:office:office">Get a gift card + more when you at=<br /><br /> tend the Canada Property Show 9-10 Oct. 2026
a http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
a http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8">
name=3D"viewport" content=3D"width=3Ddevice-width,initial-scale=3D1">
type=3D"text/css">#outlook a { padding:0; }

body { margin:0;padding:0;-webkit-text-size-adjust:100%;-ms-text-size=

-adjust:100%; }

table, td { border-collapse:collapse;mso-table-lspace:0pt;mso-table-r=

space:0pt; }

img { border:0;height:auto;line-height:100%; outline:none;text-decora=

tion:none;-ms-interpolation-mode:bicubic; }

p { display:block;margin:13px 0; }
le type=3D"text/css">[owa] .mj-column-per-100 { width:100% !important; max-=

width: 100%; }
acing:normal;background-color:#F4F4F4;">

e:1px;color:#ffffff;line-height:1px;max-height:0px;max-width:0px;opacity:0;=

overflow:hidden;">Get a gift card + more when you attend the Canada Propert=

y Show 9-10 Oct. 2026

"main" lang=3D"en" dir=3D"ltr">

gin:0px auto;max-width:600px;">
ding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"width:100%;">
body>

adding-left:0px;padding-right:0px;text-align:center;"><=

div class=3D"mj-column-per-100 mj-outlook-group-fix" style=3D"font-size:0px=

;text-align:left;direction:ltr;display:inline-block;vertical-align:top;widt=

h:100%;">
esentation" style=3D"vertical-align:top;" width=3D"100%">

gn=3D"center" style=3D"font-size:0px;padding:0px 0px 0px 0px;word-break:bre=

ak-word;">
resentation" style=3D"border-collapse:collapse;border-spacing:0px;">=


-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/1/1=

LpSzBrRXRfg14k0dvPVqw/aHR0cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhL=

WludGVybmF0aW9uYWwtcHJvcGVydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0=

cy0xOTc2MjE0MjczMDg5" target=3D"_blank">3D"Newsletter
s.png" src=3D"https://sh4zl.mjt.lu/img2/sh4zl/0e2ed310-d076-463b-a3f8-9bcd8=

b73319b/content" style=3D"border:none;display:block;outline:none;text-decor=

ation:none;height:auto;width:100%;font-size:13px;" width=3D"600" height=3D"=

auto">

=3D"font-size:0px;padding:0px 0px 0px 0px;padding-top:0px;padding-bottom:0p=

x;word-break:break-word;">

tyle=3D"font-size:0px;padding:0px 0px 0px 0px;padding-top:0px;padding-botto=

m:0px;word-break:break-word;">

Arial, sans-serif;font-size:13px;line-height:1;text-align:left;color:#0000=

00;">


: center; margin: 10px 0; margin-top: 10px;">
ont-family:Arial;font-size:12px">If you don't like our emails, you can =

;


t-align: center; margin: 10px 0; margin-bottom: 10px;">
:#55575d;font-family:Arial;font-size:12px">update your
ink-build-content" style=3D"color:inherit;text-decoration:none;; text-decor=

ation: none;" target=3D"_blank" href=3D"https://sh4zl.mjt.lu/unsub2?m=3DCAA=

ACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgT=

g&b=3Dacc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=

=3Den_us">pr=

eferences
px">
px">or
coration:none;; text-decoration: none;" target=3D"_blank" href=3D"https://s=

h4zl.mjt.lu/unsub2?m=3DAUYAAHPnElQAAc6lPsQAA9FtWcgAAYKI_iYAoEvTAC0M6QBocCUc=

mJ9mT1W7QtmiObGBnsWaDQApgTg&b=3Dacc166ac&e=3De9ed69b4&x=3DJXV5Y=

F4Lsy_PYywz1IAQXRtzDekYgNI6e86cGq3ZbC4&hl=3Den">
000EE;font-family:Arial;font-size:12px">
content" style=3D"color:inherit;text-decoration:none;; text-decoration: non=

e;" target=3D"_blank" href=3D"https://sh4zl.mjt.lu/unsub2?m=3DCAAACXp4-9sAA=

c7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg&b=3D=

acc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us">
pan style=3D"color:#0000EE;font-family:Arial;font-size:12px">unsubscribe
span>at =

any time.



al, sans-serif;" href=3D"https://sh4zl.mjt.lu/lnk/CAAACXp4-9sAAc7XihAAA-BCc=

pQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/0/HlpY7fF-ztnZk9ol7b=

61jA/aHR0cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW9uYW=

wtcHJvcGVydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0MjczM=

Dg5?b=3D1">​
ock;" href=3D"https://sh4zl.mjt.lu/lnk/CAAACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcA=

oK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/0/HlpY7fF-ztnZk9ol7b61jA/aHR0cH=

M6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW9uYWwtcHJvcGVyd=

Hktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0MjczMDg5?b=3D3">


BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/3f97414f/e.gif" height=3D"1" width=

=3D"1" alt=3D"" border=3D"0" style=3D"height:1px;width:1px;border:0;"/>



=



--=-XUWfiITMQotWjMjBTH8h--

Bitcoin Paypal phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5ph-00000000MJu-02gO

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f181.google.com ([209.85.210.181]:56575)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5aG-00000000GJw-09X9

for doctor@nl2k.ab.ca;

Tue, 06 Oct 2026 07:51:34 -0600

Received: by mail-pf1-f181.google.com with SMTP id d2e1a72fcca58-88aea027391so1437931b3a.0

for ; Tue, 06 Oct 2026 06:50:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791294631; x=1791899431; darn=nl2k.ab.ca;

h=subject:to:from:date:message-id:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=BKCtVGfhvIbcv7tEukp5LEGsx4Zn5SM4hs7B6rk/BHs=;

b=sZXOmhB2N1iV8nlDpfxxAVD95J+7WULJ+nsN1/hX7C9j6BPd71swwuk6buHJeBc6g1

aeJ0W9b/ZHbNkBy7Uf/35zqdoFfZv8RKP4SCHQkfnlUFRVUhyCMgLBqn9tsIBYqjMM0x

JvsHECo+w3CIbbqpJtb8V58iA9+AURSY6ZCUtDVQGdGXxtuDp7DI3DCfZzfD7r2hqLFe

ZwrMasIH6wMXZDi29NO5U+HVs0rhrekxeh/gfjgFEs1pdSFN3GHjZ76gO/IRjALyRPGY

a6SjTDsyBfElWAl/ZtlAF5S6uiDVW5inaf1twtysIkIGt9WoqrIYi8hxk1uVpi+8woWu

2BqA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791294631; x=1791899431;

h=subject:to:from:date:message-id:x-gm-gg:x-gm-message-state:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=BKCtVGfhvIbcv7tEukp5LEGsx4Zn5SM4hs7B6rk/BHs=;

b=zR560fPBjAv/vzZJdrDrQUOuw8UbsnGu+xMlWZHA8iwPHAN2C9EocJrR93jv/iTSKH

veLP2xlN9DoJAlOprIyh1H5qeBMYMHhfy4txuTwLw556469hXQ5SSc8A3w/G34Dlr0GO

D+zeS8FAXLS6286b53V5T6bJ5s8AxVtEKH/0473w5kGxFcptT/0rM+oJ4TQoeKtUk8vd

49XxUr+66+RYB6spQVeETQQ+E8hZ6b1BZh8GPUrFN+l2rcxVnccy6dkKS8Bq3zBaUuge

BcM5IEIh7ulTWiI8mjJdkYqEWGTEAyFtE+hQcymGAX4reNr0uFz2ykfKeOEGHYbPHhDg

MmOQ==

X-Gm-Message-State: AFuF++nnLp4wQvPFHx/I0ZSXXXPGcjqq/jIEpaMi2dXJfikBf8zTTwMh

dz55X4BPcmyVne/2N4y32pFAjlS87H+Bsiq2XlinlSEz6E9DMKSCmbNv9oY6lCYI

X-Gm-Gg: AYBFou2X6iGmLlL0De7Hu4UZUQ8BgFkalAvuzHBYjgHW0UGKAJaTIx8OjalQWqE5OCO

lx9Jvga92rcNjQfa+4ffCrIipmpim6mhdDLGka6QCUffhnMc9xtmacLjHy3pMts2EmbMplptLeG

Rt5J+wC6JyguDuAAQD1prrbOxO6abgnzJMHUaZwv+/qyUIbHB37WvMAVRp+9IrEOWcMHkRz+yrN

aarpKeByhKfTg5EXJcFYSnlvohLaQW+RFHj0KnUOfsYISr2GrTCgKiBrlpDX/KfH83bScya6RTF

2QntahdjTDrVZW3EwJEK9rDlckRiCwA2SjUuZZf1/vQg4ePiaQTLvSq9cXuD0B7ww6Hb6AgCejE

piwVBoh5Br3Uqw5zSzHlYpMNedwNgCOxkTLeubCD/ep7Z57/IOAxUvLxHU1QPB4om7f8cZiYRTw

KtQu7h4tIBDcRL9CO1/c+LHax0GBCkcDKiyF3EjtkZ9qV9CGGgbVLKZ6Pu4k0QE8DZmFzn9U5gr

xj8xIyCyhAZHr/BvQM4w0jiBs+HdnS0dPWTtatI4/GRaGVGKaskKS3ogg2iwwT3k0u5dqj8H3E=

X-Received: by 2002:a05:6a00:3e19:b0:880:4b56:dc28 with SMTP id d2e1a72fcca58-88c62315dffmr9694403b3a.15.1791294631013;

Tue, 06 Oct 2026 06:50:31 -0700 (PDT)

Received: from localhost (ec2-35-88-121-53.us-west-2.compute.amazonaws.com. [35.88.121.53])

by smtp.gmail.com with UTF8SMTPSA id d2e1a72fcca58-88b0ca7c6b7sm4961188b3a.44.2026.10.06.06.50.30

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 06:50:30 -0700 (PDT)

Message-ID: <6ac4fca6.72aa5310.fd419.6a93@mx.google.com>

Date: Tue, 06 Oct 2026 06:50:30 -0700 (PDT)

From: salahulla33@gmail.com

X-Google-Original-From: PayPal

To: doctor@nl2k.ab.ca

Subject: Payment Success | $419.33 | Ref: I-JRM9COL3E947HQ



Dear doctor,



Your PayPal subscription is scheduled for renewal, and a payment of 419.33 USD will be processed within the next 24 hours for another year of service.



Renewal Details:



Service: Bitcoin



Account: doctorHello doctor,



Thank you for your recent purchase with PayPal.

We’re confirming that your payment has been successfully received via PayPal.



Transaction Details

Date: 2026-10-06

Transaction ID: I-F6H7606E8XC9WYBEP

Payment Method: Pay.Pal

Amount Charged: $419.33 USD

Item: Bitcoin

Quantity: 0.05 BTC

Total: $419.33 USD



A confirmation receipt has been sent to your registered email address: doctor@nl2k.ab.ca.



If you have any questions or need assistance, feel free to contact our support team at 1(828) 579-6365.

You may also view your order or manage preferences by logging into your account.



Merchant: doctor

Shipping/Billing Address: 3070 Ridgeview Rd Reva Va 22735 United States



Thank you for choosing PayPal.



Best regards,

The PayPal Team

Indian Education spam from Yahoo! Mail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5pJ-00000000MHa-0THg

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic-asso1-0020.asd.mail.yahoo.com ([34.2.90.19]:1536 helo=sonic.asd.mail.yahoo.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE53B-0000000045T-3stt

for root@nk.ca;

Tue, 06 Oct 2026 07:17:24 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791292576; bh=nwQF3HimN5Ebgb8+gfB8a43K+LvjQJRCxrWDxZMkmjs=; h=Date:From:References:Subject:From:Subject:Reply-To; b=DQ21n1KkdHUsiKSKpQhEyNWU0DG/4X6HByCujnQGYub55HwTAtUZvCtIu0+HzT1vw6p6mWojkn11nlGEaD4EzhiOSdD5XIyvU+17YON/TAgbThF9kBoq7Vdle1FTUouUgckErziq8EYUWGjGb8EC8R7LU0FZSF+1t/o+6hMJrj/6XNJDl/J7d+HtDQl6zwdH0GVGGq74qmrzEWprOOWxX0y2LvHNlneiWMNpfqw7XhJV0JNjFjU7M3ZhHikfl7x15TkDMm5utUMhDR6iaHZiUDOQoJAZmpD/7b5YkmWSvyREHstonjGiSIc1Yg3AAzo719n60LFK3haui92gOxPZHw==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791292576; bh=JSP2IheKODUxp6A+U9qWFuVv9YgvOWbneMW/O7PBWgg=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=gBcYUFvz90OAK6aBMiZxVc/56reHIZnchrQTykzANN5n4v34nmDoq2GiuQnZlxyFca7Z2zeO3iwjxUo8hChKNV+12Z9QOHRn2e4pqIFsU6YS1XXqvWf5cdeFncoXh434Epy0/mNuND4tksUW3/2tzSRWGhrHSjlCQL+sUd33nJ9f8zHFfC705e/AMWCONZ3mU2mhXpyoW1gf489IZyg1/pPscyLz8syb8NH4bO5PCWl45AJQp0WF4qDc0Nroqtx0ML6rfbulPGABn5GKBRK2S6+M9Vl0fPcsTp0PPASffvFCw5FsI8SFya5giOj0dHrm9/0ZOzfkUal1x2e45m+IiA==

X-YMail-OSG: Ug4vHz0VM1kaQ3zbueD6ETD4.tCN68wgzvoMrCvIyv6hHFvIqGhrHIEx0xzrAY0

eCcPC51Y69tzspyfdgZgPSowncSrdmEh_NyiXgf9g4gx2MjDufqXKwRpVS0miek_jSh4lHAtiU0Q

NjAuEnuuLeUUEfW0hkyWWABFVatithdVUaDgNqe5BxeZsBDaInOpCyBuqw9My7YKmX..PBLTu93f

uFcNLXuj3my4D2cNycCy3zUMCN5ifO0RjrCbUwL.R4PUEYvBrNp2tZLoWK0ZAVA.7BP7UmhBLfKK

IUQCH7w0re7HHTU7LNUF94UH4dceJAAfLcLqRQ9tlKiAx06eZYtOQ70Ed4xCmykyiUXT1_UmXZ80

KD1FtTjXooYQDElZ7FxP6Hitg2SP1Wl48LzTQoQOZV4UNw.gxF7hakWILnMWGZLimjC_i8LOECP3

AH7o8IvitFoYVAA3n5Hdcqj4T97nXcoJwUrLimgbkQMaUGNyiVaXsyYlZB9qSm_CMlFVBt33GPid

IhgrcnU48VxFLO55YzuCoaodUpSFJZ9FGa2XXbCsRckZBmcpBfgTVBZ3o9nRn89vDlJa72Q4C.rU

o7BoavJI6.voMP9C8sYBeSY__pTCfm3cAcGP21voO.YwJIfjqN2BIseBID3QUzdNuiaW3Sy5OOaY

aExCmKGcNEzUhnttVUipyLkbfdUAFfyPt14NYrurJmE0UQRoL8SBciAVGp5yxNCaPW4.YXqOdrkR

5kzC0B5dCG01U.aguNEU5KHQ29qhIkihU0DJaZB0e_z37p0VYLXAmKmqH2sA5RG7BbhjwidQzZW6

s2sAcX38blnfSjvYIRGmjp6eEovZPafp6G3Ewp0vmZY82HS5xFf9QCrA4tT3mOETX0OErXDyQhrq

QW95ZE81vpK51Z5Lfuq9nUvU.T5PINRqRYDGH0vhpYt4WycgMePBGUUvQHA3ae9SPnIMwPQx9uhW

mqBQMP0TQl6a4Wz75Pk3W0VkXoxlPDOcvrKw2GH2J60gsugV5K2W0EYUkQAAFCDGcRqbNak9eBnb

yUmkepkdubcpjYABR5oAzrrbPFcVr1z33BsCIqLm9ikmewtioNyZbeYZKwI_lyiqJkH4FEZ96ZvH

Ps8lZc_zSUVKYmTY3.XaEZhK1iJWgXMGdRdauz3S0bgTTeEuh37oUnAYKB6dTpALrifdr4W24d3c

2pi3hYDj_uBtNYNpEeFa74jVRSqvbpI75MVwpv6Nl3XdoJDJiJcuVUfJ5miGy_6gAxEBzkNY17UM

GKRy.dm67RLTbavV6Fr_X1.LdnkjWJ2lvgEc57iZhY9t0tv45xL.tSW7QrGAs0IFU1AXLweLho5d

c18WmbuTWoAVfywi3dJoy9CFs2LkidThQJAZup65d7HGlYhAsv13A1GGakGZrmWk4_Q9mH_WjDGQ

HSNnDqNm9o.wER9oiedZDY30Wij.JKDNVboTdDlgkUECg1TZqvCQURX3u_657pf5DH6Fm.L.VwWm

9D6HXKXRlyCiU_Mtr9XBRk5bFK6BSRzuXlqzFGdUQmDu6vDaIcyrktrKMFaoQm9pRxwAFRb.KVPn

.hSLzoLcz634iXAJ32u6mlyvfXZ0avufvny9izlv0.CFm7M07PbuWXff_fu9pv_eVoUPSGRI8oOm

dJ96Eu5P8wZ0s1JTyYGzcOR83IDP.arHdFKPtj4HAXw2td3w2SNfI4gD2w1iBn7q0P09MGXVnh3X

ttylIIuTAZWmzTuxnZU0qFWjg87kKhz0iJnhgJ20FIgei_DfMen8_cXwgyIu.mINIUlkuhJkZiCt

xED3uCBprdOYTokS1QBpTnrCQ7Gc7WvumsVTm61FlrzIYvGXxtwBQnMGrT6N.hWuDkqCEeIbg5tT

tfENOxCGxXo4EXAM5HdlRzGH6ViIT4VrRbCVyPXKsY1xmSUPsD8FLziAO6hwyVSEQLRGoRIGKlAA

82Dy09MjOEjNgE3dGvwSAFeygQwt7SxKLQT0oO9dvY0W7SXufPcePqhlyMynL2iEvYOg0eAyzDKL

28suFphh4zZAsQoQboHDCLeSBWRBhDDOCIT14p.yM6bbbCoOO9.t0wdSiS_2GNUlCS0esADWCuY6

CbCUvLcNuCenIGIIKkjJ_a_CPNECp6Y4Dy__kh5lmJgV0egMX

X-Sonic-MF:

X-Sonic-ID: 1453dbf3-ab33-4d8a-83da-1e6010e3c2b9

Received: from sonic.gate.mail.ne1.yahoo.com by mail-asdoutdeli-p-cin-asso1-prod-sonicconsumer-svc-101 with HTTP; Tue, 6 Oct 2026 13:16:16 +0000

Date: Tue, 6 Oct 2026 13:16:10 +0000 (UTC)

From: "Chirag Saiya (Speaker&Writer)"

Message-ID: <1954634498.516185.1791292570602@mail.yahoo.com>

References: <1954634498.516185.1791292570602.ref@mail.yahoo.com>

Subject: Tuition Classes for Kids Up to 4th Grade - Admissions Open

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_Part_516184_949650396.1791292570602"

X-Mailer: WebService/1.1.26668 YMailCLDNovation



------=_Part_516184_949650396.1791292570602

Content-Type: multipart/alternative;

boundary="----=_Part_516181_1171333317.1791292570578"



------=_Part_516181_1171333317.1791292570578

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





NAMASTE.



=C2=A0



Please Find Attached:



=C2=A0



=C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Chirag Saiya Tuition Classes Mul=

und - West (Mumbai)



=C2=A0



Kindly Read + Do Share WithAll & Oblige.



=C2=A0



Thank You.



Best Wishes!



Love &Light=E2=80=A6



=C2=A0



Chirag Saiya(Philosopher)



Spiritual Speaker & Writer



Website:http://sites.google.com/site/chiragsaiya



Whats-App: +919819210230 / chiragsaiya@gmail.com



=C2=A0



Save The Soul. Change The World.



Protect The Future Of All Innocent AngelKids.



Where There Is A Will There Is A Way. WayTo Freedom=E2=80=A6



May All Living-Beings Be Delivered FromSuffering & Be Liberated!



=C2=A0

Truth- Justice - Equality - Freedom - Peace - Happiness - Joy - Health For =

All LivesWith Right Vision & True Mission Of Well-Being Of All Living-Being=

s AlwaysForever & Ever=E2=80=A6!!!

------=_Part_516181_1171333317.1791292570578

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable




ly:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">

=3D"ltr" data-setdir=3D"false">


style=3D"font-size:12.0pt;line-height:115%;font-family:Verdana,sans-serif;=

mso-bidi-font-family:Arial">NAMASTE.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial"> 
span>






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">Plea=

se Find Attached:






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">&nbs=

p;






amily:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol;col=

or:red">=C2=B7
nt-stretch: normal; font-size: 7pt; line-height: normal; font-family: Times=

New Roman;">      
s-serif;color:red;background:white">Chirag Saiya Tuition Classes Mulund - W=

est (Mumbai)






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">&nbs=

p;






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial">Kindly R=

ead + Do Share With

All & Oblige.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial"> 
span>






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Thank You.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Best Wishes!






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Love &

Light=E2=80=A6






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0"> 






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#C0=

0000">Chirag Saiya

(Philosopher)






ht:115%;font-family:Verdana,sans-serif;color:#1D1B11;mso-themecolor:backgro=

und2;mso-themeshade:26;background:white">Spiritual Speaker & Writer
an>
s-serif;mso-bidi-font-family:Arial;color:#1D1B11;mso-themecolor:background2=

;mso-themeshade:26">






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#98=

4806;mso-themecolor:accent6;mso-themeshade:128">Website:
=3D"font-size:12.0pt;line-height:115%;font-family:Verdana,sans-serif;mso-bi=

di-font-family:Arial">


" target=3D"_blank">
amily:Verdana,sans-serif;mso-bidi-font-family:Arial">http://sites.google.co=

m/site/chiragsaiya
5%;font-family:Verdana,sans-serif">






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#4F=

6228;mso-themecolor:accent3;mso-themeshade:128">Whats-App: +919819210230
pan>
ns-serif;mso-bidi-font-family:Arial"> /
a@gmail.com" rel=3D"nofollow" target=3D"_blank">
.0pt;line-height:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:A=

rial;color:#E36C0A;mso-themecolor:accent6;mso-themeshade:191">chiragsaiya@g=

mail.com
mily:Verdana,sans-serif">






ht:115%;font-family:Verdana,sans-serif"> 






ht:115%;font-family:Verdana,sans-serif;color:#002060">Save The Soul. Change=

The World.






ht:115%;font-family:Verdana,sans-serif;color:#002060">Protect The Future Of=

All Innocent Angel

Kids.






ht:115%;font-family:Verdana,sans-serif;color:#002060">Where There Is A Will=

There Is A Way. Way

To Freedom=E2=80=A6






ht:115%;font-family:Verdana,sans-serif;color:#002060">May All Living-Beings=

Be Delivered From

Suffering & Be Liberated!






ht:115%;font-family:Verdana,sans-serif;color:#002060"> 






erif;mso-fareast-font-family:Times New Roman;mso-fareast-theme-font:minor-f=

areast;mso-bidi-font-family:Times New Roman;mso-bidi-theme-font:minor-bidi;=

mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA"=

>Truth

- Justice - Equality - Freedom - Peace - Happiness - Joy - Health For All L=

ives

With Right Vision & True Mission Of Well-Being Of All Living-Beings Alw=

ays

Forever & Ever=E2=80=A6!!!


------=_Part_516181_1171333317.1791292570578--



------=_Part_516184_949650396.1791292570602

Content-Type: image/jpeg

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="Chirag Saiya Tuition Classes Mulund

- West (Mumbai).jpg"

Content-ID: <853dba1a-1d62-3244-5502-db3d78c4a48a@yahoo.com>

...



------=_Part_516184_949650396.1791292570602--

WEb/SEo/App Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5p8-00000000MGg-0Aag

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:18 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f52.google.com ([209.85.216.52]:42157)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4q5-000000002xX-1U9W

for root@nk.ca;

Tue, 06 Oct 2026 07:03:50 -0600

Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-39647aa9d52so702595a91.0

for ; Tue, 06 Oct 2026 06:02:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mindswebsolutiion-com.20251104.gappssmtp.com; s=20251104; t=1791291751; x=1791896551; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=rsgC2Sx4fVLlDbUyRf8U5JlTTBjwWV8hIagsACZvNs4=;

b=EYg7t5+TzFHWp21Ar4mY99+7KN6RWK9oyOx36Q1Z8tOq8G86fFW2ZpgV+IY/ONKx/n

Ka/xDeawYZz+YLoTLnO+VZwXbrSzsPl7ROvH9LQmpLFAd31ld49A4a30O5wxQECJ98wr

84L6uM3tgzg50s5rb+NMvZVCub931YE04Ld4eUnc4r+WW3Xk5EwN3tVNbf8xWOOMju/c

v7+E4L/nEXQydIe67cVP+8l4avcU3XPHP8ikFMsJVZ/qaFycfj7JRzoVgrRYOTqw6WeT

fR9jy/oNXDBzn7m6jkEjbzNtM67aj1/0giPmebEE0aZ0dl+IJTvQZADxIRB9OwuuI9OZ

K//w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791291751; x=1791896551;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=rsgC2Sx4fVLlDbUyRf8U5JlTTBjwWV8hIagsACZvNs4=;

b=qs6thc4vezzpNdjNaavbos2FegxE4wJRlEimAcaelwAOxUQK9rJfTj4EW9NDOIFAtf

utUU2YlR/JB+YswD0+6bLWHYj0TWFaElPBDSMWklPy1Og2xsi+YcBVZlWl6a41fIsct8

x/nN28Wa0DczkQ1xlksstb8Sa643EdENY+SQ5Gulb7RB9+8J1+QEaB15mR+PZxyTXCBS

9UGhHaUZZbPPWcbZbhta8Ai4qGyDFWCAdoHLVgoTMRnl4nX/pXh4i3GcOL2Ec7OiuxvY

F20UfUPj1Fn979ChVV8Mx5XBc5LymIV1N1reOcvxP/dNa+hJhb3j17OR3mx6Vw03Hj+o

hQMg==

X-Gm-Message-State: AFq9FYLz+sz8ydt5VVbK7QSD1mB5x6qqBCO2fpR2t8IyKKeH4AdGQ0ce

btAGN4A3UVa8ycpMNxQE1+lpQS3Z0M9Jq0mbUbRiJxZiPH+H8FZvlj/KYhvJpnZWtR30G0PnBle

ymEmE

X-Gm-Gg: AYBFou0hDV4SLcRtvJsREhX2U3MODDgvziC+zxQyPysvX5cQ9Z/j+uCRXNIdaqjqFXp

r2X1uRJ3PCEfreySwQUWa6iWi5GnVldKaUjcb5MbhD4tJbPgGJWNWz0vMb3nFfhDsKM/jsAaCl0

olaBnBIhqwl9GHyuiAt4/qCsP54WfQd9Uwm9iBpqGaGYS6u0VTBBNTFaTdzmeVYVF+7mrSCaE31

5M8b5sn+Hu7zGqZcSdYHxxamcxuPlxA4R7eOpWlBMweXBOHdBDsSY5gbBefuoUc6ca4wUMQyrxm

Q9zCBOw8UpHN7sH18Up6JgBhbVyOhUMmWIWRrtRW2VwV6N2h9Kh0Jk7i5YTvFyWGsl+JCrAyUWk

ESyDwwyT+RRzSBjHIhpiYg2LcogVPwNTPhnjK4euc1RN/y3w+ZQA3MUJgvJilVB5vwGfEYQ9oG/

rHcROkRIHPbagsyj1hpgCIdlhpkEz4kYs7eEKTDCzerAgr8WSxJGfztWvChNlICuM1+hsozCYsf

wSlUbhlAAcc+5rhA7En

X-Received: by 2002:a17:90b:3b8f:b0:3a7:96d:feaf with SMTP id 98e67ed59e1d1-3a87368575emr666527a91.16.1791291751275;

Tue, 06 Oct 2026 06:02:31 -0700 (PDT)

Received: from [127.0.0.1] ([103.106.232.126])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a8543b0c1fsm6538153a91.14.2026.10.06.06.02.30

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 06:02:30 -0700 (PDT)

From: Shaun

To: root@nk.ca

Subject: Get Ranking Report - www.nk.ca?

Message-ID: <9f79cda1-df76-2449-26f6-311a43047b0e@mindswebsolutiion.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 06 Oct 2026 13:02:28 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, With your permission, I would like to send you an SEO

report www.nk.ca with prices showing you a few things to greatly improve

these search results for you. These things are not difficult, and my repo

[...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.52 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.106.232.126 listed in sbl-xbl.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.52 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.52 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Get Ranking Report - www.nk.ca?



Hi,

With your permission, I would like to send you an SEO report =

www.nk.ca with prices showing you a few things to greatly improve these =

search results for you. These things are not difficult, and my report will =

be very specific.

We can place your website on Google's 1st page. =

Yahoo, Bing etc.

May I send you a quote, previous work and our =

proposal?

Kind Regards,

Shaun,



Geek squad phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:07:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5p1-00000000MF7-2Pwo

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:11 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f41.google.com ([209.85.216.41]:47402)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4mG-000000002ae-3dzi

for doctor@nl2k.ab.ca;

Tue, 06 Oct 2026 06:59:55 -0600

Received: by mail-pj1-f41.google.com with SMTP id 98e67ed59e1d1-3a6cf104827so426065a91.3

for ; Tue, 06 Oct 2026 05:58:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791291500; x=1791896300; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=HA6BFvZLuIteIfa1z6TcVJK9y44bulEU8LHBGWyjlm4=;

b=eLXpkaW9AABTsJqeTKlqZvbzhSgB2MZnjcS2A1TTpFG+dMMZtZFFwfi4hoOJQJdqDp

tsM2StbAry7tu+d9lsxjD1JL5SJSohkTiCSDlw3WoHDCuqj/nCleYePZzR2UfxLrnlld

KpmaFdmvYcj8lqtqqcCDO+ot4h1T2mWdYyI0XzxNehdxx9mXu31CVux6jfb6BR0yfEdy

dTBYJSuLFe5ylXH6ZTKtyXDPZ4QFIcYLXHt8LDJC/odL8s10lGDG6PF8wmFC3Y4o07w7

zst6KPrwACE/HfMSKudlLPdDaR/R+3zRzQx5YwadEUx9syUSPdzIqSl0KkSF4AZWm6dI

3mLg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791291500; x=1791896300;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=HA6BFvZLuIteIfa1z6TcVJK9y44bulEU8LHBGWyjlm4=;

b=T8oVhDW4cyDzd9BFfllw/K0N1xf/sMMEV541tI2vBoxeWpNz/sefcPAZ2usYXuzkft

i9wk9TlsGStG3jPIsR1sDHMSb5PtcyxHb4BHTtDNT1ulC+3Yx5O31X+I8qHBZ/R9FRoH

4WzQQU2YaY+TFdaRQDjieeIch8eT6p1c2+q1qzRQQMRuszwx1gAmmAz7lSwNQ/seNlZk

52umF09r9ygWoK6CnXHFdvVfVwqHypHOHZ/4igEm/aHVQ1BaLIzzHlwCoP7486VW9MB6

hjDIN03ZYUXZTRf0IjTKySKm7Gwzv79AAZpTjwTmyS03nHgHvu5Yf54wzS1NnMLzzN3L

v+1A==

X-Gm-Message-State: AFq9FYIDUDV1d+FTZMWVXOixLU2aeLbhHxzY6+/v5FQvKNoJCg9Apit5

F8YElkXoynXsySjMWMQCc2howdDR23T4KIKi0Ch+shcnOxeU1QTKenZOmdhoiX620lo0Gw==

X-Gm-Gg: AYBFou3kFLCmwjhVOcQ3k0aNnsCS+iKLUE+F7WnpW02CxJeFQc20xNTsqWBMZ9DV6H1

9rK0OqtH79QSMayUAWpqoUlfxw3aPzbdcVaJ+Fefoc6aQMKmitq/ZiJRw2s9vgboKrjIJG/PUnx

eOUxuEQW82G3th75THHDhBjRFSrJetxqIrzAr9hM0zSxIlJOrADxBnEvENtF9qKq7TWdK5vq8/S

yT0urEt8ZX2usS1auaBhvJFf2lcd0bm3auv28ODSas9XRXEKlDZEspBatj5suIYCglpR86pEhem

XF5FCuAnE4ChxkxLwElDcM0Z7OCs6nBKxq5LtdsoIAOoCgJzRG/iS3C4pHkFHPByTOZJSuX6qEe

+9swLCLau4Ms+WyXHQfChQIozRRpDk1GlHobaSXD8EBCpe8cbF2z1nqVYOWrimaHQrJpE2KkvFY

spK4vVcWaG0nAZgsA0rf98mUuMBWEiJMXhlvwkZE4ndW8l+0MyxBWX4yqtTgZis0vp3Rz027gYY

23rQKk5Bsi7LxCHQGoQOL01XV+J/MRfWskDbQ==

X-Received: by 2002:a17:90b:2c90:b0:3a8:1a1a:7895 with SMTP id 98e67ed59e1d1-3a87350ac2emr461501a91.18.1791291499583;

Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Received: from [10.203.1.48] ([43.167.223.122])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a853cafddesm7101151a91.10.2026.10.06.05.58.18

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Message-ID: <6ac4f06b.0a1c4297.15ce81.c8c6@mx.google.com>

Date: Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============0833806656785191990=="

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: We updated arrangement No #34399956

Importance: normal

Priority: normal



--===============0833806656785191990==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













































--===============0833806656785191990==--

Virtual Assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:07:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5ou-00000000MEU-1HRM

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:04 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f176.google.com ([209.85.215.176]:58604)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4V6-00000000178-3p1P

for root@nk.ca;

Tue, 06 Oct 2026 06:42:11 -0600

Received: by mail-pg1-f176.google.com with SMTP id 41be03b00d2f7-cc4c7fab7b6so1925103a12.0

for ; Tue, 06 Oct 2026 05:40:44 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791290439; x=1791895239; darn=nk.ca;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=4WBpCrNm9OIUiVDc/hV2evamZRzUH0C92RMA2TYtbEw=;

b=fIsoY3IRrg7bYNlX3RaBqwEu07CUSlyb4RZqI1+eovjU7t7zX0kbGHixQIv4SujfWh

wRAdKByx0Ze84uaZ/DdDlNl+cCfUW2NkgpR7wVHS76VwUVhTLN4kvYDK50TW2kA4xPDY

NNxb5YKm5zWQssZqt906/uH6RVa1xqY93j0UJDMkChL+vOLhdX4jWTwoPEC5g0AhMgf+

gWPPYPavf+KcN6fyh6jkJ2pg8dpUSBnlKADijd41ihvMJUqRTseugvZtmgUtTXQ7K61h

/3CW0JR4APaYejXbtIKPiv8BhY8Oz1AhewVK8ubz9tc7bmI5WarIigEvTtchGmaKkB8V

iU7Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791290439; x=1791895239;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=4WBpCrNm9OIUiVDc/hV2evamZRzUH0C92RMA2TYtbEw=;

b=iiUOOSSJeviWdzywWwPjkkhQp+R1Jy6TEKd4zBFFNgQcUe6PJG0gR0Ti9GDbYi+wj6

ha5rbG9Iq9ZoKzG/+PuGHkIytYh1VQ4LjgC+C8CFAXmXlomxQzAXm9BVwYDzJ34WK0aY

w64zeEeTci259ZDAaS0HmwNnf0CG66Ab6y4gjIVpR0CYXeDWqzsHKYDn9wL7oiKoHi62

ygWWrrGpvXyLr5EJijrAddx+0Bc5QXllm4Lw33kEm5H/FBCcZa1oBFFsipeKMOFqtI8y

9onIrnU5NFgoyUocqBRxOUY1uGnBRSbrgEN+aVDSffGqJ+WRkKDg9MJch+bP6q61Lz6C

Bg9g==

X-Gm-Message-State: AFq9FYKT5fvC7iGNY4yPZEcwtrfE8oHwWkgTljdJaOLVRGd9V+zM2lJt

8Zb+m5qXpJsXjCQbf6gc/Nyc6EHwms+dDYQQODSle4El/b6uu/IPfFnSB3Xg3g==

X-Gm-Gg: AYBFou11o6Vc4zp4uMOBcRyOaiOJi4jejr3y5Js9rT1qtg9ehAd3Ep9Eh+lQlv7xSgc

/v72wSK3Y38KSGSYlX0jkTtFOJ6j3JscMIPbM/0eSrShe+ZjEuTM4eu0pwgXCIIqy8MUF5XGABc

mytu8pdpE9bhzhd3riy8+CzDsMUxDr59ZKsg5AAH0U5c65niglTtAZH0M7Wvf6hAF/TQVX70xfQ

mYTCRC+fxz/BHj6fOPE0b6UD+mIYF6+fQzpCG2/XAvGnbK+QZIAB8Zq2yNH/UupadSnocTNl+Kl

fTfToHFK5a3tSW3FyVE9nW+tjr/RkU3hglwrR0tbxJN/dqo2PFHdSjiYjsMtVnz1+q9rxrcaX/D

d1oRkCQpaBX12R/0es3XZq0tDhbjrjn2gVHTzCJ37vg7IaAHU5qcgQjft4/nT04bIiJX4A0GN7g

yduaz2kI0sITs3lZMkadXcb3SX72KiD5nHgbZMrRU+U/dP09aG+aH4m6TUlp81t0tA/8jA0N+rk

B6+EQNPYeIQfZvgrtLZ

X-Received: by 2002:a17:90b:164b:b0:3a4:d338:4136 with SMTP id 98e67ed59e1d1-3a78779e4e0mr8661328a91.66.1791290438752;

Tue, 06 Oct 2026 05:40:38 -0700 (PDT)

Received: from gmail.com ([122.160.196.13])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a8543ab76bsm4768047a91.13.2026.10.06.05.40.33

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 06 Oct 2026 05:40:37 -0700 (PDT)

Message-ID: <6ac4ec45.0d0da1c3.2f63f8.ec6b@mx.google.com>

From: "Kanhaya"

Subject: Re: Dear, Good Morning, Reminder # root@nk.ca My Name is Kanhaya

To: "root"

Content-Type: multipart/alternative; boundary="Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt"

MIME-Version: 1.0

Organization: Headfield Solutions Pvt Ltd

Date: Tue, 6 Oct 2026 18:10:34 +0530



This is a multi-part message in MIME format



--Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Dear, Good Morning,



Any Update.?



Let me know if you=E2=80=99d like quick support or more details.



Thank you!

Kanhaya

VA Team



On Fri, Jun 19, 2026, at 10:45=E2=80=AFAM Kanhaya
9@gmail.com> wrote:



Hi, root@nk.ca



Please could you let me know whether you are interested in hiring a Re=

mote Virtual Assistant (like Cold Callers, Appointment setters, Marke=

ting associates, social media managers, administrative executives, dig=

ital marketing, lead generation, data entry, etc.) to work at a reason=

able cost?



Can we schedule a quick call this week/next.?



Sincerely,

Kanhaya

VA Team

Note: If this isn=E2=80=99t relevant, feel free to reply =E2=80=9COpt-=

out=E2=80=9D





--Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline




sform: none; text-indent: 0px; letter-spacing: normal; font-family: Ar=

ial, Helvetica, sans-serif; font-style: normal; font-weight: 400; word=

-spacing: 0px; white-space: normal; orphans: 2; widows: 2; background-=

color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial; text-decoration-color: i=

nitial;">Dear, Good =

Morning,


ext-transform: none; text-indent: 0px; letter-spacing: normal; font-fa=

mily: Arial, Helvetica, sans-serif; font-style: normal; font-weight: 4=

00; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; bac=

kground-color: rgb(255, 255, 255); font-variant-ligatures: normal; fon=

t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio=

n-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;">Any=

Update.?


text-transform: none; text-indent: 0px; letter-spacing: normal; font-f=

amily: Arial, Helvetica, sans-serif; font-style: normal; font-weight: =

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; ba=

ckground-color: rgb(255, 255, 255); font-variant-ligatures: normal; fo=

nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial;">Le=

t me know if you=E2=80=99d like quick support or more details.<=

u>


one; text-indent: 0px; letter-spacing: normal; font-family: Arial, Hel=

vetica, sans-serif; font-style: normal; font-weight: 400; word-spacing=

: 0px; white-space: normal; orphans: 2; widows: 2; background-color: r=

gb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: =

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: ini=

tial; text-decoration-style: initial; text-decoration-color: initial;"=

>Thank you!
Kanha=

ya
VA Team


4); text-transform: none; text-indent: 0px; letter-spacing: normal; fo=

nt-family: Arial, Helvetica, sans-serif; font-style: normal; font-weig=

ht: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2=

; background-color: rgb(255, 255, 255); font-variant-ligatures: normal=

; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=

ration-thickness: initial; text-decoration-style: initial; text-decora=

tion-color: initial;">
">On Fri, Jun 19, 2026, at 10:45=E2=80=AFAM Kanhaya  <kanhayak=

umari778899@gmail.com> wrote:


olor: rgb(34, 34, 34); text-transform: none; text-indent: 0px; letter-=

spacing: normal; font-family: Arial, Helvetica, sans-serif; font-style=

: normal; font-weight: 400; word-spacing: 0px; white-space: normal; or=

phans: 2; widows: 2; background-color: rgb(255, 255, 255); font-varian=

t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;">
alibri, sans-serif;">Hi, root@nk.ca


rgb(34, 34, 34); text-transform: none; text-indent: 0px; letter-spacin=

g: normal; font-family: Arial, Helvetica, sans-serif; font-style: norm=

al; font-weight: 400; word-spacing: 0px; white-space: normal; orphans:=

2; widows: 2; background-color: rgb(255, 255, 255); font-variant-liga=

tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;">
, sans-serif;">Please could you let me know whether you are interested=

in hiring a Remote Virtual Assistant  (
lor: red; font-family: Calibri, sans-serif;">like Cold Callers, Appoin=

tment setters, Marketing associates, social media managers, administra=

tive executives, digital marketing, lead generation, data entry, etc.<=

/span>) to work at a reasonable cost?
>


: 0px; letter-spacing: normal; font-family: Arial, Helvetica, sans-ser=

if; font-style: normal; font-weight: 400; word-spacing: 0px; white-spa=

ce: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255=

); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-=

text-stroke-width: 0px; text-decoration-thickness: initial; text-decor=

ation-style: initial; text-decoration-color: initial;">
font-family: Calibri, sans-serif;">Can we schedule a quick call this w=

eek/next.?


text-transform: none; text-indent: 0px; letter-spacing: normal; font-=

family: Arial, Helvetica, sans-serif; font-style: normal; font-weight:=

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; b=

ackground-color: rgb(255, 255, 255); font-variant-ligatures: normal; f=

ont-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=

ion-thickness: initial; text-decoration-style: initial; text-decoratio=

n-color: initial;">S=

incerely,
Kanhaya
VA Team
Note: If this isn=E2=80=99t relevan=

t, feel free to reply =E2=80=9COpt-out=E2=80=9D


l>





--Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt--



Web/SEo/app spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5oP-00000000MBp-2kPO

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:06:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:06:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f46.google.com ([74.125.82.46]:46310)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE3H4-00000000JbP-21yY

for sales@nk.ca;

Tue, 06 Oct 2026 05:23:34 -0600

Received: by mail-dl1-f46.google.com with SMTP id a92af1059eb24-1517bda04a0so185224c88.0

for ; Tue, 06 Oct 2026 04:21:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=amysoftsolution.info; s=google; t=1791285699; x=1791890499; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=AO0yaYJu2hCsokJkjhgD0CMb5NhpHBGTwPc2cgSaJ9k=;

b=WkjwO1tyKj5KV6mKIdnG0KvJeU9Ff6V0L431bafSF7DMJ7lQW8b9ItlieKHY66EPF4

2qjrZ8U/wI0Zo5ioheAmbYn6KnH+rx9v2Soj299EeBllUHMKK4T27iggc+5lHr/0oumz

DFGSpVsoUHsBXW0GeyeOLi5Ldf3woyoOZEGS8=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791285699; x=1791890499;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=AO0yaYJu2hCsokJkjhgD0CMb5NhpHBGTwPc2cgSaJ9k=;

b=W6zK74jEeOG+uZWOY+UWE3Ok19Hg4XqB2Zm8pUJKdIGn7YwxTkyj8TEtZE8yYWru98

jzCd1I/lG9EOPuzDLr9QXIjtlB7JsXFrUxqAPNuBPWDPOm0oTo7wOTTXkn7WOxQKZstu

+6vRjEOGJvPOjr+gr9H9SoQDAHvgxEvxpCC/j/rFMIrGCVdK239hGnJ0jhxwlxKuzB7h

zbmjUO12eDgPODehJ6JsTRLxxeA2NTfdrlgV8isgP1sppjmUYb+Hu5aS2b/dySsYjOto

AMoDHXXWGrHoT3eapTgtCQ4iB0U905hSPPpwNOZLrpyziHiPeM+pnCI4r17ZtcmoZYUO

6C8Q==

X-Gm-Message-State: AFuF++krGB5SknUAxfIQ/TtCqpLyb9a1jm4DrvtRZTH3qVs/gZ1+E3j+

kgDYthKZftvyUQQqhQsenB+VQxsDw3wKP9hLcjH+2P+BHVgkotic5vVlSpvjGCXJaoknwLCI2p6

jOFyt

X-Gm-Gg: AYBFou3bhi0eTrv11C9LjWabKgoAm9YmFJiUDLsAXbhGMGxyHwbOmgnAbN8c75N2d27

k6DlYBa6f2z6GrafmPSO+KEgu0++bYGzWzXyk4R5Zi44RjlKt/qp+22JgOotczw08ZnKZ1RNiEm

Jbb2iv8gySvXowq4IffhLEPRvWyyXK1ttxT1Pcbmph7I0NlNLhkZXqRWE57dKhfugy1ZvccxvWc

SXenZAqK+y4KiM8rfjKiUHjSN+kbqw/TEQL+wE1xymb+tEFlyrQ36Jv6EkGdq8dMuGW0wsrRhe0

jD+aVO/Eayr6KpLmWO/cgZfry7E1HAERzrY0U6pT057fcP9xBqeOsfVTn//C402jn5iWZEcL20V

HAKVhkjjR8J0qb9JDOv7sB1lQ7Y3vJB2r1UTted+ByMw9qm37M9a7GanV265vRVX/QUR67b70nv

dTH9hNOi1AfrPOcBVYIYXqAX/EpWHRePP/i/VWTdA0mMIeSXTzHY6ImJ35XFTc/ku4MeNlM2CLX

9oluFvcg3MQ6fNj7cPZ6mkecCk=

X-Received: by 2002:a05:7022:383:b0:15e:9126:c60f with SMTP id a92af1059eb24-15ecb3bab4fmr1615963c88.29.1791285699199;

Tue, 06 Oct 2026 04:21:39 -0700 (PDT)

Received: from [127.0.0.1] ([122.161.50.206])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-16044b97384sm575561c88.1.2026.10.06.04.21.37

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 04:21:38 -0700 (PDT)

From: Lane

To: sales@nk.ca

Subject: =?UTF-8?Q?Need_a_Custom_Android_App=3F_=E2=80=93_w?=

=?UTF-8?Q?ww=2Enk=2Eca?=

Message-ID: <57f6311f-dbbf-c88c-571a-b4a8d934b641@amysoftsolution.info>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 06 Oct 2026 11:21:36 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 20.2

X-Spam_score_int: 202

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Sorry for disturbing you,



Content analysis details: (20.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.46 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.50.206 listed in sbl-xbl.spamhaus.org]

[122.161.50.206 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[122.161.50.206 listed in zen.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: amysoftsolution.info]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: amysoftsolution.info]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: amysoftsolution.info]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.46 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.46 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} =?UTF-8?Q?Need_a_Custom_Android_App=3F_=E2=80=93_w?=

=?UTF-8?Q?ww=2Enk=2Eca?=



Hi,

=C2=A0

Sorry for disturbing you,

=C2=A0

Do =

you want to develop a mobile app for your business?

=C2=A0

If =

you are interested, PLEASE=C2=A0SEND ME YOUR =

CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

/>=C2=A0

Regards,

Lane



Sutton hotel Employment phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 02:52:00 -0600

Received: from mout.mail.com ([74.208.4.200]:35417)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE0u2-000000006lZ-1wC2

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 02:51:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=worker.com;

s=s1089575; t=1791276577; x=1791881377;

i=suttonplacehotels@worker.com;

bh=DJTT7TBuCrHIT/gCVklSo1nE6CYGzaK+XAqedNaxfnM=;

h=X-UI-Sender-Class:MIME-Version:Message-ID:From:To:Subject:

Content-Type:Date:Content-Transfer-Encoding:cc:

content-transfer-encoding:content-type:date:from:message-id:

mime-version:reply-to:subject:to;

b=U9FbfIRvV6t9BxGyl92g+XQW97uNHtDccMzV3+Z2XtRw3JGaZ2ZHbWwMjL7xunGM

jjndeAXIoa1izs54ZZRLUD5eqJ3lnGPooWQXweDfq4rel0itco8opz+YJGnZPbqpa

eThOsblyVlbItp+Rs/5DaMrn77/Ntw8xMmosSziw2A8HE1HpIGdMy9iiCg7gM5EHO

/6bbTFDRyhGnaGp3eENQecwnCkgE+/M7KVK0AgqTo+ceoXwwLFbLqw+VDolaT8bPv

ioK90cLN4tzf5G3i9OABbU+Xyy+WtpnXMd+QvfUeTX0LmSjvkNdNXHNF+fU73pFWo

HIGPkoQ/i6jPjMuVBQ==

X-UI-Sender-Class: f2cb72be-343f-493d-8ec3-b1efb8d6185a

Received: from [137.255.195.224] ([137.255.195.224]) by

trinity-msg-rest-gmx-mailcom-live-6b476b5775-26vzt (via HTTP); Tue, 6 Oct

2026 08:49:37 +0000

MIME-Version: 1.0

Message-ID:

From: suttonplace Hotel

To: dave@doctor.nl2k.ab.ca

Subject: JOB @ CANADA HOTEL CANADA 2026/2027

Content-Type: text/html; charset=UTF-8

Importance: normal

Date: Tue, 6 Oct 2026 08:49:37 +0000

Sensitivity: Normal

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-UI-CLIENT-META-MAIL-DROP: W10=

X-Provags-ID: V03:K1:6lpsnnQMw/SwU5Uei2GH/M3IZSl92zvUl0fszYGx7EtNiAr+J6sGIVeTDUjlcVGTwB80A

4giov2rHy7TPonn9wnpufVsyqh0SLgkoagGDv8aLaG9fSGqeELrtBSrqtm2q69D3JCoK6DloUeHm

EsJJGpk4D8p5bDOBQi/2ZMVTF+MWl6w0edoEla4K6bCqq5FPSSM2mjWXmIZ517/DeQZEkeA2EotP

YG9QkYojdIsTKUg7SPf2CBacxb6QQxGee26clr1q7fWQkNrLSwZv7Y+QaZfa9thSSycP30E545Mi

HcI+qta49A1r74FpmjjnoBdFQiR8gGO9PWRq87jLmq0Jastes7O1iJtDXpn3ETODrT1e7EeQwWaA

YfSkwcKixHT

X-Spam-Flag: NO

UI-OutboundReport: notjunk:1;M01:P0:f6/ZhzMSmm8=;nBgyQXbDLCLUF3Eb6TLQoJRhNUJ

+YSqlcaUuj7mBpLSwMeiiFRG/wUBFgGjkPKKCso6osjwD+FyoAf414G+tKYSLDpbmmaFiNqg3

5jpYTv1tJRyBUFKj/b7SuqMMdzrSFyxmcUdR5imcCuhhsekvOFhZ2/Wl4vFVc79IvNCmhj9Q2

ZEcgwtkDwSo4oBe4wcOcoyiH5W+E2tmIWezQJItaGgIO3KjrBhmcF/gMhkgoCUxlOXBWk8EBj

0xKWx8hb+eZRaQvWKKzLy9rlC4XBFyl+uopuVc9l6DZsjfMa7cxCGQNLJqjw5Wtqho/FvG4oX

e+WXknElBnfsEDlnSUBLba3Ph3ZZ7ZJGWyLkcnZsMxa7WD5yfkkhIbGIR/nBN4utCzX07vkhH

aI6bDoVCxI+1E8qnrOu2FZfjcx6fEkX5hzSB6tSpYYo2TUWPnNljzDWcJ+io6KJqNGIC/b0RR

iCUZVYH0PhIfwMqMzP5zDeww+SfMvTgyrDsHicLeucvmoN1idtzifHFtwA1K8IT4TIhDOKNso

RCpvok7XrsXwk5ZY6AeF+XkadiFPDO9m+r098rrP06W6u1wxJz9pefbGqf/ltqgP/jeSsSpud

G/+tDOUiX5/KPhzh8yrvTruTy0VnfGddgO7mOgftRVFUzLJQrCVmFXUAYBEZcDgRWJoWN0Wt0

yC1OoWgsu5h5I09XnAPlNxoLmKZYpxW+Y2iBYkGzP8LxPyADp4O2AlF/ByE9ZpLG+dTSI3FQ9

tE0f2dr7q9kk3uoaoPxQX/p0M6EG4sOMQaPE9b9qIWWIbzYf6FoDefmM2JD09aUAuJZKdcPmr

5pHUA3gbAIJqCXtPaGZWf8GgRBd7kRzZvAEVg7S9tsuU9zoBZf0wwEinnJC1F1KFhMKau5bva

98Llj/wzR5712MXuWkpuj82Lecsp4ygidyrqpbCsIMRz7CkTG6LdAPID/IL0aAnCPbTAuLvP/

iXO1ERBgIwO2ZB/LCVxBbhYqEQV0/vvO1+5RYGJLMw9nVfPAG0T/g+zC0I7eH42QS/vpgWxb7

bxUDL0/2ZQehwQaFz+QgkUPXOOvBB1AY5fTvvi+xOcLGl8axq2oUm6h007sZIt8R0+U8LC4hB

qOx/WA81Kwf1QqQlVQme0frrtp4BshZTZEPiN5hfGR8JAMJz55N3Q63aYkYLSy40CaMgQ94g6

yACrgUvwxMOC5HZmp5SXAdprGjG+n0Cp97TQ0W+0Sxu8mHEQ+2UYiB25CDqGZoHNR72PiAh/u

kPgTySzkADY7wYi35bs/kQ/qk5swJ1/VJ7/DBh3pFq/TwxdMojkAUyPC/VOJUrlUAopRXuUlx

HbBF/R6hjZWYmCxRsCAQN2JW7/pR7ICGhKRd7cVi3CPXqm8ZRTmy5sYM/ktrNDtxTYE22a12N

RhQ6VY8j2AmSI+Rgn6qLR+R5qsOnOHO57a1vmQKobGrPdTpBUdtWENnFFBoSMuesBxAAIzP9n

v/GPILv7KE9IJ22oxD/o0SPuLqKhMAIeO+NkDTR2ItqhrDSmg4FQ6U32yK8OgnNgIpXwvda9x

mvpjL9gI8vrQMj8s8mXKD3vvm6VygFgyQ0mGpZgfSMEvjWP4XvDGjY8Y3EW8qTLbZxiTrDgDl

Z2AlG5fFQB2iUuaZKn+fXvx/YXUlvF3D9ShcjQvj/m8zYLU3W/kzJRRCw8e2q0o53LIKiTNiH

7YkZW6QU3xG1lj0mDPkOEeEG/CBuWAja8fvS2nvmRwEUO41xMHRpq+DQE1iFk49Hl67i7lSnQ

udc/jHldgHQSOYOPxsCc9tObItGTkhBUWnDIONP3iE34ukdD3E4IQxIyGdmBY3a/sNtKNVwSf

d0bgqRhjd/GcqfOfCyUP8698DR9e7EtlOEwX9EElZPCCLt1oIxbguBvTcIxrcBdXZOKOghkDU

HU4REqqJMXShZmr5Q3IMsQOkNNBh6+0J6sy/riHOG284kMDvvMr37pdRJ44hVUakspTC7+uLd

BUiumm5W8vn40CpQf1O/rP8NqmRJwPy9hFoi5Ukc9PVLfbWS+HVM9qe9593YnvszsaHEfzUK+

C6Fvt/peNyVyUcWSv0BKAkcVBiXckI8wRqBkuN/OZJQcCqu6JeJNxXlBNu7IKZpGNYi+4NGFb

9kU8TGLEcEytcEF8SswOOtPgHvo6ExjNDcZ+SSrAL5ihGSNrXlVBZltiA7d0BYYLosJLp0z+t

EupN/phsKpeLYIRYVlGBU+j2CTjsCOoVLvJDq/lUwSeqoM5gYMIj2HYFJssvr/lUGVFPx1OUe

pfEv9+n8bUt0EAcCMPh972ORWiRoLM1AsZUynLGuyEJYquzYVXGQTkBAM0LbajLWJn4441pFN

1FUGgjCCofTHeRv8UNZnlXSitm/j7f0o77wXavx7I3OTsmBIojq7DIpOxEEuooXxmlZerb7St

Yo2sn33CYZlx2rr73S5TVP/cjs5KILtzY2a65ZwqV4uRg4+RFooWuxJlFIoENF+CNT6YiC3lG

rpLMs5wSCJetzvxbODmX0fbNlbWN57CKsXPH+bZbiJ2shmgrUk5gv56RRKPF2aINrZXluYSSp

KjXYPKIK8b3OxiNBRPTZ3PQDz0YDAGu/MtDooOruOmvtOnC1N611yenWBH+S3eUAHbrZOLX5g

ZgBy/ddkfKXGW4Q8ukZspWvj3hN41Zru8p7kunvRM1gDMHAYtPXC40z6Dca4VQGl2ADF6bVtm

tHkYcCBybNI4o6+JAjnkxYEYcIZskp5FjjlZoKiXzGa7NECcLSnFhaGKQUJbUVP3t465GRHOx

gW67vkBMVeCcXZCOI/GPxbeayT4EcMwa4mU4T21nSNHT6QuefL4I4KM1ogZ7ENVH8HAVPDuy0

1MaZoxL3jjA8ilgBFj/zO1MwOTzkPnRN/d+wHiqXdpVBIXlVFU/zsbKhkJ/OFTgdwYMKIA1N5

qPEZIB5uIEc4k6oXQTRi9HNdIEy+NGWAPBmjyDiM1lH6o4epdywg+o7sRFnTk2AVqv62Ch4pO

cc+ZSsWvhsAm21rIcCssSxU2rRmg5h+7UhTjLI5rfMGA0seWkk6g0Zh/dWi9SsZRTDaNk6NnQ

L+gDBuxsxVE+Uc0H7hMLa07vO9Zex+/biOOPcwDygFQH0t/CvTZxRqufzQvs+w1IZbNP7AQrF

qRbLOIS0opTSrmKdDwwVODnvJndNNm8y3I62Vq0KX/ufYkDzgoBYr55lfGTJPzWAz3IMLiu7h

f+GWouNTFn1ekm6s7+sw0HqMu7IpPaUEg1JyKD5mr9NMAKMyokPSxkrCfybKVqVFt+uexAhR3

EqxifZYzwoZW+sQbtLOPdQjonKYs+bdNDPCZQ4ixwaMholzkjxnGb0YDeTdr5YcHCcKh8/ELg

+mjZw/NdSbuT6k+HTLZLIzHIBnRvS/hGjO14Iy5OweHEHILZ5mhIqL9LUOilpmkrJ6gH0IqEC

OeQarEsEu18n6bw/cUyxVPFRXICZrpvyGW6rpLGqyMx8wjD5AtNaSD+rz2umz+hp5fqqiBnFH

0h1P7PXlgWf7/Zh5kUPc9AQdf+eKdhl6jst+nv1eGEMPfoxS+SM/rAEmHsBY5z5bY+h4YkCjM

JCQwiBXPr5Z59aypdB74bJdJ3uSgfCaRUNaP7yqs2WapO+e9HEF2K5//yykFTUE2xDfyz+wje

A+XRMG3T+R8LGRxGLTYIgJKzqC+uIpsLsDjx9y9YeRMVfaw8owBRqHsI8ouiFXorG8sR057tJ

4NrIVI3rdS9edMLFOd+PUPSPXsFLGUATX+Qc3nKXk3yxbz6H0krDiTISCvEqie+mUGU/unIlt

zFbWZhd00ruMPcjfqlj465PHk9K7YRA8PxyBoSH9SDDXwckZ1Aa208lFyFz1ywDrmDmcrTi+c

X2CzHimgphUBou81lytp0OaLkzbMVdVfHrmCBU1PMHJeeqpHOXwaeSfSHPmijJYIv0e3A/MpP

KpkApolWQUDhnwEMJPUXACse96zuHUchrqhrGq0XFD9Z16RHVVEMdxl0KlNYeaIlBMx36bfTZ

MYsT+2kOghZ7LYyNPI8rNwQNDHzajaqTORRR2KsI+BFmlT+6FkLt2nOBP5RlKHuahW33vC91E

wx9Vi3IJIci6l9rawlMFJcMgF6rhJW+iIg5ILa+nWmb/kUPHOocZbY2gK4hBQ+fct1hSu3mWo

wOINFkMxEwnSpDkXwoFHgURMVJ6D2kBWB73q07B6vMnyfVfOYFR9c2Fi2mVpxzfV5eXzLKlLg

o6HaDzJHgYMA6wmmw0OONFXcaq2Y5FCuPpkwbL9FpKUjDjH5jl/Uk/iirGPNLmrPyvyL69j9W

uzysXN17XO9EaMqxIpsfb01NlGwVpbGdiLGBdYyagmIKD2qpJHZcMQkEbjtZ1RWloUcD2QZ+e

YVavytj8zZDSL627+m3GXx3gLAOJrRCkC5/78JzawhhfK5vfBEyYBIE5gqJzgKpyyctqbPbN5

WYcFz0hKRz6WusMor4Z3zDW6bHLfN5PF8683+M5gg7DYNvpZIIJR48n/oc7SXNlC+t1kkE4UH

tWIdW3IPOQOj5PsRhf+7oOQCuOC6QrIKfaAffnBkMNvk4KosCBGd/CvK8PsrhyX3LI5YMOs1p

p5klHbJnHO9kNvaNzuShKmLWos35hzb2r7IOQCbRFmGYtUBOfLnh+SfAz7yANh9gxp4/k+4Hb

PmOl84omw4OFvABUu4J0AuULEP/G0N98TkF5lsjA56v9KDmu0C/VzKSxhTXvIDOohzTP66gjt

rdFxcQfq10QRZAqVoAJapblbrj29W9AT6GxmxPggfJjj/JbaqTfPaoXRKmRR/Yyuv0LJPHWHI

61vw2+Rr8N1VV5OH4VISNZ511rE0lmi5v9A2vc18yIQUH/QUGq5ucyYDBUCStYsMQJbclP/X+

0rBXtD9WAk1UO/1GX8lmdeTrPANkbVRAmYk/30rOtrluduqpWQyUj1/+jkPkT29wjYTQrHAre

wSWSLN8V6xOKgHaLQ4pokKuoTQ0nsG1o+zN8Wtf5FCRmGb3KYEAigrGapGzW2mLoVjYkuWjJ/

VQ5tKUnJjj6Uoiqr9S7+hNB2BromHMC6fg0zFbzmoUx6IMs3dpZ41rHGl/CtexrpLEOPBlhRw

8WdrzhUeJrt65Ppo4TN0Bvejs3svseSOKCASt0DzQ1jBa8tYmYjUUrD8wxZEF+zKSUsw+dCfN

1UMrV+eiV+Zr90lnyUGUIgb5kBT4LS+yLRozkImeEe7uRvsgoRC97UF7Hoz56NRQw9L7rtr8/

EF2A2lc9Su1lfzR88iMVoV1g76y9B2Yz2tJ5DExK8F46oYd+irGM9zTjkkebAsbVNmyG8o+y8

w94tGCknXxUviT9wc9Tsy2H3f4hKcdBTRkQXRELIK8J0m1DRE/pNUVUP4T5YRqS4QRsr+UFCM

dJiUJc6KqIcPZ29ofV7V8F/ImFNfFZGNzeEvdUMve+jnMFt5wihGLvCmh8OkERDSN7xpV5kHw

yk74HJSfR6A+DcyyPqtonvo8Dd7DIjFPHQajwb8luegvauym/tjQ0L09RgshifirLvL4d53n3

OLJFL2Vap37Fo5yyyMmVW0GJr2S4HnO4khpsV+Dcif7s6Xt6AEAMpFP9CK5ZOHAwAf/Q7Oyi3

dkyra8Zw6c0b4/hWVwB33MtAXDjicEJJDtuCKovBe/AbDZIgHQyUmBXnCJPcX/8xpSM1IQ==

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PLEASE THE SUTTON PLACE HOTELS CANADA, are recruiting new

workers Opportunities are available We’ll offer You Air Ticket,Accommodation,

Medication, Feeding and other relevant services as attractive [...]



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

[74.208.4.200 listed in dnsbl.ahbl.org]

[74.208.4.200 listed in dnsbl.ahbl.org]

[74.208.4.200 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[74.208.4.200 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[suttonplacehotels(at)worker.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.208.4.200 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.208.4.200 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} JOB @ CANADA HOTEL CANADA 2026/2027




#000000;">
ound-color: #ffffff;">
fffff;">
;">
pan style=3D"white-space: normal;">
tyle=3D"float: none;">PLEASE THE SUTTON PLACE HOTELS CANADA, are recruiting=

new workers Opportunities are available We=E2=80=99ll offer You Air Ticket=

,Accommodation, Medication, Feeding and other relevant services as attracti=

ve salary awaits you=2E QUALIFICATIONS, (a) MEN, WOMEN, FRENCH, SPANISH, AR=

ABIC AND ENGLISH SPEAKERS=2E (b) SECONDARY CERTIFICATE TO PhD HOLDERS=2E (c=

) AGE IS FROM 17 yrs TO Unlimited age provided you can render the needed se=

rvice=2E=2E =



style: normal; font-weight: 400; white-space: normal;"> 

color: #000000; font-family: Verdana; font-size: large; font-style: normal;=

font-weight: 400; white-space: normal;">
ffffff;">
style=3D"color: #000000;">
e=3D"font-style: normal;">
white-space: normal;">
: none;">Send your resume CV to this email address for more information wil=

l be send to you,, =



; font-style: normal; font-weight: 400; white-space: normal;"> 

yle=3D"color: #000000; font-family: Verdana; font-size: large; font-style: =

normal; font-weight: 400; white-space: normal;">
ff; background-color: #ffffff;">
ize: large; font-style: normal; font-weight: 400; white-space: normal; back=

ground-color: #ffffff;">
lto:suttonplacehotel@worker=2Ecom" target=3D"_blank" rel=3D"noopener norefe=

rrer" data-href=3D"mailto:suttonplacehotel@worker=2Ecom">suttonplacehotel@w=

orker=2Ecom


Database for sale spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5n8-00000000M6A-1dNv

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:05:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:05:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from relay.idcloudhost.com ([103.193.179.117]:57290)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE0bs-000000005B3-2X6z

for root@nk.ca;

Tue, 06 Oct 2026 02:32:54 -0600

Received: from relay.idcloudhost.com (localhost.localdomain [127.0.0.1])

by relay.idcloudhost.com (Proxmox) with ESMTP id AB1CF1CD71E;

Tue, 06 Oct 2026 15:29:05 +0700 (WIB)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ischotour.com;

h=cc:content-transfer-encoding:content-type:content-type:date

:from:from:message-id:mime-version:reply-to:reply-to:subject

:subject:to:to; s=default; bh=i8vUIrFg1XTDWwzUwj81mlj+P+ocqyupMw

PcRJ7aMAg=; b=qd+jTDq++SWT2qOgw4tEYU/o+BeMmesnnLyMLIhOqDFXr1DYJM

2a3Ws7DF5oIRRIDyIl7QobiNwkM/R9XF/ACjTVog7j0Miiq5jZIqaKcFnJ1rUhVU

Q9QND9jw796bOGRISSGZrp9JsUZSO4/1w+AaLn8QQH+C53pW75NyJ/DXYaFmRIZw

kamO3Se7xLnb4YB6t5TE9WNaOysRswUxKu+I+AdY0UzUGVeAu9GhkURCeeaHQMzr

JlZuONvTlQfBpK1Xu0PERqE7dy0cMqiW6mmly6XNQKSS1yhtsObNRZ0LQI5dHqjl

ztnxVNgDXpae8/Iq2+5sCnVzllzE6MWKtIfA==

Received: from iix1290.idcloudhost.com (iix1290.idcloudhost.com [103.63.24.141])

by relay.idcloudhost.com (Proxmox) with ESMTPS id DF8081C9101;

Tue, 06 Oct 2026 15:28:38 +0700 (WIB)

Received: from [181.36.167.206] (port=36262 helo=googlemail.com)

by iix1290.idcloudhost.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1)

(envelope-from )

id 1xE0W7-00000008qIu-3RpV;

Tue, 06 Oct 2026 15:27:19 +0700

Message-ID: <2d2d70db2febc1caec165ff18084af31c24889@ischotour.com>

Reply-To: Paul

From: Paul

To: Kimberly

Subject: 1win casino database for sale and cryptorino database for sale

Date: Tue, 6 Oct 2026 10:26:18 +0200

MIME-Version: 1.0

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable



hello,



I am selling the following databases



All records contain contact details such as email addresses, names, physi=

cal addresses, phone numbers, and more.



1win.com.sql (An online casino =E2=80=94 very large)

63 million records

Price: $900



cryptorino.io.sql (A crypto casino =E2=80=94 complete database)

Price: $900



If you are interested contact me on Telegram at @paulxq9 or paulxq99 or p=

aulxq999 , if one username does not work try another.



I accept only bitcoin or another cryptocurrency as payment method.



Do not reply to this email, instead, contact me on Telegram if you are in=

terested!









wlnflootvmobcfnnqsymqxckrrmjqusaxliymlcckmfjcsblnakllew



Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:05:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5my-00000000M5D-1WeL

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:05:04 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:05:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f71.google.com ([209.85.210.71]:48486)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <366fEahEPBqoWKbVOXK.ZKbKcMRSfVSMOeVZOMROK.bYNYMdYbXU.MK@maestro.bounces.google.com>)

id 1xE03O-0000000021m-3Dzd

for doctor@nk.ca;

Tue, 06 Oct 2026 01:57:14 -0600

Received: by mail-ot1-f71.google.com with SMTP id 46e09a7af769-82412fd5f11so3225538a34.1

for ; Tue, 06 Oct 2026 00:55:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=liceulpechea-ro.20251104.gappssmtp.com; s=20251104; t=1791273313; x=1791878113; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=pdGX8mjfIP51RhvEDvQQ2rJMWYZfEzeJLz/OLjpDkVw=;

b=O8QAlknmuTtXNHA0UQBj8Rf7qFBX+tNmSuWiD2hVoXrf87E+Xykjj1XDT8/8nuBiLX

zdhclbFwKrMfqoxkUC+ptrn/OithSCfDmfFklFxgK2KarBwB9LXpsH9sl6yshilq4tPK

cILZEhFs4tq3PmkiXcriXIOfdc14pQ8Rr9Fzddp6gDHyf6h6yaSo46fFnTIYXXv6sGZ1

Jk/qOMVp58YjereRR3mwmXbv/tltuiD5KTFVDyTkqgW5o3x1Auyhif8VJKV/pjU+0mTi

F6O4/42pM1E7RjpU4vfJ9D38BDZJWTfM2CzDhtv98wG9peD7OAj3BIVU7GRP6WFaeZI/

WGoQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791273313; x=1791878113;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=pdGX8mjfIP51RhvEDvQQ2rJMWYZfEzeJLz/OLjpDkVw=;

b=bQm3IDKqnccXwGC4oGQrEejL0sDOCml/4XE5aebQbEHfKMARR5orwipM2cUhnPBCwh

gs7hyqln65+YEyWUeDhdrMRd0V0tciHsJXLn29oWp8c51s3Wb+w0Ah+Nhx9Sg6RlqS1K

usLtIn74z6wyHQDItLHfZ8d5wD1Mx4y0OakK8OJ2xWO5jXCNGmRRqJxVbZpWD+2NrU/K

hpZu1SNxMJSSeTSrE4D91/CzdzfAlx+5ME+j7h7mfXZAv7nSnD89OyHJoUSraAcV7lK9

twmp4Q75c+G35yB7zutyfxjQq+2BXOrSnSKawAh85cSE/WBlPmL9vlOBcWlIZZ2fzU6B

rgzg==

X-Gm-Message-State: AFuF++mQWM8/3zs8jfGu/sTIiIt0OI4vIXIQnjr8hxybn3zPrrVXVwAu

CjFpd4ICRQUmFRfe/GGJnD3Sp1qsh7EtQvZoukXTA2gghAFJzL+Qgnnxl8P7C2bDOWnkuhUEB5x

Osz0ugRX58OPGfu+IG6DjUOn4

MIME-Version: 1.0

X-Received: by 2002:a05:690e:1913:b0:677:d478:a0a0 with SMTP id

956f58d0204a3-678fcc5b157mr185719d50.2.1791272939789; Tue, 06 Oct 2026

00:48:59 -0700 (PDT)

Message-ID:

Date: Tue, 06 Oct 2026 07:48:59 +0000

Subject: =?UTF-8?Q?Uw_pakket_is_onderweg_=E2=80=93_bezorgdetails?=

From: Aramex Koerier

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000045b1ee065d273b7b"

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: aramex Koeriersdienst Trackingnummer ARX-94827561-NL Stap

Status Datum



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.71 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.71 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.71 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 IMPRO_URI_2 No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

Subject: {SPAM?} =?UTF-8?Q?Uw_pakket_is_onderweg_=E2=80=93_bezorgdetails?=



--00000000000045b1ee065d273b7b

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



YXJhbWV4IEtvZXJpZXJzZGllbnN0DQoNCg0KDQpUcmFja2luZ251bW1lcg0KQVJYLTk0ODI3NTYx

LU5MDQoNCg0KDQpTdGFwIFN0YXR1cyBEYXR1bQ0KDQpWZXJ6b25kZW4g4pyTIDQgb2t0DQoNClNv

cnRlZXJjZW50cnVtIOKckyA1IG9rdA0KDQpCZXpvcmdpbmcgT25kZXJ3ZWcgNi03IG9rdA0KDQoN

CldpanppZyB1dyBiZXpvcmdhZHJlcyBvZiBraWVzIGVlbiBhZmhhYWxwdW50IHZpYSBvbmRlcnN0

YWFuZGUgbGluay4NCg0KDQpCZWhlZXIgdXcgYmV6b3JnaW5nDQoNCg0KDQpBZm1lbGRlbiB8IE5p

ZXQgbWVlciBvbnR2YW5nZW4NCg0K

--00000000000045b1ee065d273b7b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




h:600px;margin:0 auto;font-family:Arial,Helvetica,sans-serif;background:#ff=

ffff;">









aramex
>

Ko=

eriersdienst




nd:#fff3e0;border-radius:6px;margin-bottom:20px;">





Trackingnummer



:1px;">ARX-94827561-NL




px solid #eee;border-radius:6px;">


















>


nd:#fafafa;">

Stap


und:#fafafa;">

Status


und:#fafafa;">

Datum


e:13px;color:#333;">Verzonden
px;color:#2e7d32;">✓
px;color:#666;">4 okt

e:13px;color:#333;">Sorteercentrum
px;color:#2e7d32;">✓
px;color:#666;">5 okt
Bezorging
d>


d;">Onderweg		 6-7 okt


Wij=

zig uw bezorgadres of kies een afhaalpunt via onderstaande link.










1#t/c/c5d7e8f9ea81fd3f0f95" style=3D"display:inline-block;padding:14px 36px=

;color:#ffffff;font-size:15px;font-weight:bold;text-decoration:none;">Behee=

r uw bezorging




1px;color:#999;text-align:center;">


1#t/u/c5d7e8f9ea81fd3f0f95" style=3D"color:#999;text-decoration:underline;"=

>Afmelden  | 
01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/c5d7e8f9ea81fd3f0f95" style=3D"color:#999=

;text-decoration:underline;">Niet meer ontvangen



--00000000000045b1ee065d273b7b--

Dutch language phidh from Google GMail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5mm-00000000M3Z-3b3b

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:04:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:04:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f199.google.com ([209.85.222.199]:47292)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDzlA-000000000Cj-0MJd

for doctor@nk.ca;

Tue, 06 Oct 2026 01:38:23 -0600

Received: by mail-qk1-f199.google.com with SMTP id af79cd13be357-93cbacbb996so412900185a.2

for ; Tue, 06 Oct 2026 00:36:29 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=afu-edu-np.20251104.gappssmtp.com; s=20251104; t=1791272183; x=1791876983; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=HlhxDfAyud7oQ6hAtax4HiK9q2o/CcWJtfFNq3hBMGw=;

b=aq//AXA2SZ21XoTFIwAzHJURMQcAHr6bMN2qsGd202ZJi2eHN1kI4STeUg4h0Yry0C

Mik50shsWQgiNrSXfzcU2Z/L0vtoC6Yr+Z9HEhTtxp2QEPyGuZ1+vZjw3GE7Zfw+kxeg

UiaN7JbJ+HP5/0Sz6HoqszdBHukhUkkQZ/fiBwbpkJz9eqsvkaJIUfmyfLUlt9zjHJ6G

0RVwqbqVXukgjV5qEFvlEspxPnzuRrtkXjQD5DKDPO9j2BlovNMYByXbmejeyeZ0cxc3

x25N5u7qpVM413LAE32lu7Qrtofx2ttY9ZLjYKkOj9nBHha3lFB5Gt6KK72Q02fHkHSq

0h2A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791272183; x=1791876983;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=HlhxDfAyud7oQ6hAtax4HiK9q2o/CcWJtfFNq3hBMGw=;

b=loKHIMMsbhksyYGOmAfFXqPQRWyoGB4QW7UwRgbnEzdZ6AdOP0uhm5vP8sif7+M+Ba

ApN12OnwIGv2EBglOYGPAMW/tPAQe3pbtOZ6fg3YElOYiHGAhZof32PaiBmBMix1CyC9

BaaPxzhzSq+GWd5/it4gak8E24NND3lDm1Rn9Fh/iBEotffTxw9ncIn3zSbcSREgDLE5

3lBoynk3CKy/nts/z0PKzMohlZgieeoGDdelXOZryLHCY8GwoQUCW5TVuHKfEr4mtA++

Rl4B9RYSLFrP21boD5btQTGH5XeMJXWA9Vr+/HyBNjbZghEXKEUauUEQ+KLLe9HYr/eP

8hjQ==

X-Gm-Message-State: AFuF++neUiitVbVQNh6gYIhgj+RPKyTPD9KY4FbiQTUe4bZbnLVVKOBd

0GT8Ng1kUwPfVqQgtMFDEvOqI/l42E/baeyfwsO+g9mOBwbcjvh0IH+2OK7Wt0PTboQvU42+RFh

cSF0OJOtkTB1deFJYrmRawqZJ

MIME-Version: 1.0

X-Received: by 2002:a05:620a:6cc7:b0:93e:7939:acd0 with SMTP id

af79cd13be357-93e8f4a60b4mr98586685a.37.1791272182941; Tue, 06 Oct 2026

00:36:22 -0700 (PDT)

Message-ID:

Date: Tue, 06 Oct 2026 07:36:22 +0000

Subject: =?UTF-8?Q?Beveiligingswaarschuwing_=E2=80=93_uw_wifi=2Dnetwerk?=

From: Digitale Veiligheidsdienst

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000291e62065d270ef8"

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 🔒 Digitale Veiligheidsdienst ⚠KWETSBAARHEID GEDETECTEERD

IN UW NETWERK Uit recente scans blijkt dat miljoenen Nederlandse thuisnetwerken

kwetsbaar zijn voor ongeautoriseerde toegang. De oorzaak: verouderde router-firmware

en standaard wachtwoorden die nooit zijn gewijzig [...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.199 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.199 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_JK BODY: Odd Letter Triples with JK

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.199 listed in list.dnswl.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 IMPRO_URI_2 No description available.

Subject: {SPAM?} =?UTF-8?Q?Beveiligingswaarschuwing_=E2=80=93_uw_wifi=2Dnetwerk?=



--000000000000291e62065d270ef8

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



8J+UkiBEaWdpdGFsZSBWZWlsaWdoZWlkc2RpZW5zdA0KDQoNCg0K4pqgIEtXRVRTQkFBUkhFSUQg

R0VERVRFQ1RFRVJEIElOIFVXIE5FVFdFUksNCg0KDQoNCg0KVWl0IHJlY2VudGUgc2NhbnMgYmxp

amt0IGRhdCBtaWxqb2VuZW4gTmVkZXJsYW5kc2UgdGh1aXNuZXR3ZXJrZW4ga3dldHNiYWFyICAN

Cnppam4gdm9vciBvbmdlYXV0b3Jpc2VlcmRlIHRvZWdhbmcuIERlIG9vcnphYWs6IHZlcm91ZGVy

ZGUgcm91dGVyLWZpcm13YXJlICANCmVuIHN0YW5kYWFyZCB3YWNodHdvb3JkZW4gZGllIG5vb2l0

IHppam4gZ2V3aWp6aWdkLg0KDQpNZXQgZWVuIGdyYXRpcyBuZXR3ZXJrc2NhbiBrdW50IHUgaW4g

MzAgc2Vjb25kZW4gemllbiBvZiB1dyB3aWZpLW5ldHdlcmsgIA0KdmVpbGlnIGlzLiBVIGtyaWpn

dCBkaXJlY3QgZWVuIHJhcHBvcnQgbWV0IGV2ZW50dWVsZSByaXNpY28ncyBlbiBhZHZpZXMuDQoN

Cg0KDQpWZWVsdm9vcmtvbWVuZGUgcmlzaWNvJ3M6DQrigKIgT25iZXZlaWxpZ2RlIElvVC1hcHBh

cmF0ZW4gKGNhbWVyYSwgZGV1cmJlbCkNCuKAoiBWZXJvdWRlcmRlIFdQQTItZW5jcnlwdGllDQri

gKIgU3RhbmRhYXJkIHJvdXRlcndhY2h0d29vcmQgYWN0aWVmDQoNCg0KDQoNClN0YXJ0IGdyYXRp

cyBuZXR3ZXJrc2Nhbg0KDQoNCg0KQWZtZWxkZW4gfCBOaWV0IG1lZXIgb250dmFuZ2VuDQoNCg==

--000000000000291e62065d270ef8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




h:600px;margin:0 auto;font-family:Arial,Helvetica,sans-serif;background:#ff=

ffff;">











🔒 Di=

gitale Veiligheidsdienst




nd:#c62828;border-radius:0 0 8px 8px;">





⚠ KWET=

SBAARHEID GEDETECTEERD IN UW NETWERK





Uit=

recente scans blijkt dat miljoenen Nederlandse thuisnetwerken kwetsbaar zi=

jn voor ongeautoriseerde toegang. De oorzaak: verouderde router-firmware en=

standaard wachtwoorden die nooit zijn gewijzigd.



Met=

een gratis netwerkscan kunt u in 30 seconden zien of uw wifi-netwerk veili=

g is. U krijgt direct een rapport met eventuele risico's en advies.




nd:#f5f5f5;border-radius:6px;border-left:4px solid #c62828;">





Ve=

elvoorkomende risico's:
• Onbeveiligde IoT-apparaten (came=

ra, deurbel)
• Verouderde WPA2-encryptie
• Standaard router=

wachtwoord actief












1#t/c/3dd0f4d5688292d705f1" style=3D"display:inline-block;padding:14px 36px=

;color:#ffffff;font-size:15px;font-weight:bold;text-decoration:none;">Start=

gratis netwerkscan




1px;color:#999;text-align:center;">


1#t/u/3dd0f4d5688292d705f1" style=3D"color:#999;text-decoration:underline;"=

>Afmelden  | 
01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/3dd0f4d5688292d705f1" style=3D"color:#999=

;text-decoration:underline;">Niet meer ontvangen



--000000000000291e62065d270ef8--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5me-00000000M2z-0I42

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:04:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:04:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f200.google.com ([209.85.210.200]:42432)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDzOR-00000000O6a-3OBS

for doctor@nk.ca;

Tue, 06 Oct 2026 01:14:55 -0600

Received: by mail-pf1-f200.google.com with SMTP id d2e1a72fcca58-88b9d8c9e55so586730b3a.1

for ; Tue, 06 Oct 2026 00:13:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=afu-edu-np.20251104.gappssmtp.com; s=20251104; t=1791270778; x=1791875578; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=+RDjNda7qEDg1oRh2ccR+hTKDmvxGSxyccjcKmvQ45Q=;

b=R6DqOWA73Oj2UvNtr3e6WepeU4sbbATLdWweX3XAMhFMfKycpG4FgGfirR9ONeyMY4

ll0MHkBh6DmtKhg/EOYUA/xrlEVlSszvgptlx/NwiZEyK2hOmJtFhvHWhg2nUXdnTxD5

elMIv6PC6e7rL1ZsHp2pc1nsfdRoygUwn7xXy51Jnj1qd+K3mMycmwLbM2pOn1JAfK3I

tRfh7mSBgBmamxK9t/KUafjD6mrsIWG0jC/ML61tRkdDkrHW6qKdvtj7i2IXMgR79ZfW

BVqX0fwluSucfWdfT3MEVFjCxb2l8PTwtjWGrFEHSE43ZQf5sE1+A/l/mieGd/2JtPfx

mrCg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791270778; x=1791875578;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=+RDjNda7qEDg1oRh2ccR+hTKDmvxGSxyccjcKmvQ45Q=;

b=zooVJcqLl8R6WC391mMMtD7KGM+3ErCXk7s7kwBetcw4RS+73mflKfHf5p581fVj7A

rbaKcoBU+hD+jZnd3q6tx3Kf8A8g5SIKqnPVflYJYmkT810uknMuHq9IKzn4+ddNXEDX

jEa2mx3Lfq+5rqUmT57ggzwAKXptVRKJxIhA2vwIlHUGYbVeIot5aOA5hkvyBwjXG8T5

23gc8JURxqZHvrXuDfyHgo5gDdL47blNCxPmHI2aoLXpl1H9I3c7R/Sl1uWoIa7wHCBY

X6zZGZY0Oc+pnUdVay1ad3Sw+yNmtNPlBvyxQ2ukAtFWAjp0qgGyF+Dpb97xCdpmNMrM

VZ4A==

X-Gm-Message-State: AFuF++lZdj5XzEiBXPN01E6mwl6YXrRs5Zwz3JiLQn6fEGOoXiqq7u8l

T3EN5gj62ryGArweOYFm2ETkGNVudnoZiji08Z0b1Ve9LyfFkUDrW4WaoXg61axQOCKVEqSYtST

QCPtfJg82I+KMBSGWnoOYWiNa

MIME-Version: 1.0

X-Received: by 2002:a05:6a00:4610:b0:88d:a4c:3a5e with SMTP id

d2e1a72fcca58-8904926965cmr1374422b3a.49.1791270778599; Tue, 06 Oct 2026

00:12:58 -0700 (PDT)

Message-ID:

Date: Tue, 06 Oct 2026 07:12:58 +0000

Subject: Wat betalen anderen voor hun abonnement?

From: Nationaal Telecom Onderzoek

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000748dff065d26ba24"

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Nationaal Telecom Onderzoek Editie oktober 2026 Betaalt u

te veel voor uw telefoonabonnement?



Content analysis details: (6.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

[209.85.210.200 listed in dnsbl.ahbl.org]

[209.85.210.200 listed in dnsbl.ahbl.org]

[209.85.210.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.200 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.200 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.200 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.1 TW_JK BODY: Odd Letter Triples with JK

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 IMPRO_URI_2 No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Wat betalen anderen voor hun abonnement?



--000000000000748dff065d26ba24

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TmF0aW9uYWFsIFRlbGVjb20gT25kZXJ6b2VrDQoNCkVkaXRpZSBva3RvYmVyIDIwMjYNCg0KDQoN

CkJldGFhbHQgdSB0ZSB2ZWVsIHZvb3IgdXcgdGVsZWZvb25hYm9ubmVtZW50Pw0KDQpVaXQgb25z

IGxhYXRzdGUgb25kZXJ6b2VrIG9uZGVyIDE0LjAwMCBOZWRlcmxhbmRzZSBodWlzaG91ZGVucyBi

bGlqa3QgZGF0ICANCjYyJSBtZWVyIGJldGFhbHQgZGFuIG5vZGlnLiBHZW1pZGRlbGQgZ2FhdCBo

ZXQgb20g4oKsOCw0MCBwZXIgbWFhbmQg4oCUIGRhdCBpcyAgDQpydWltIOKCrDEwMCBwZXIgamFh

ci4NCg0KDQoNCuKCrDI0DQoNCmdlbWlkZGVsZCBiZXRhYWxkDQoNCuKCrDE1LDYwDQoNCmxhYWdz

dGUgdGFyaWVmKg0KDQoNCg0KVmVyZ2VsaWprIHV3IGFib25uZW1lbnQgbWV0IGR1aXplbmRlbiBh

bmRlcmUgTmVkZXJsYW5kZXJzIGVuIG9udGRlayBvZiB1ICANCmt1bnQgYmVzcGFyZW4uDQoNCg0K

VmVyZ2VsaWprIHV3IGFib25uZW1lbnQNCg0KDQoqQnJvbjogTlRPIG9rdG9iZXIgMjAyNiwgc2lt

LW9ubHkgMTBHQisNCg0KDQpBZm1lbGRlbiB8IE5pZXQgbWVlciBvbnR2YW5nZW4NCg0K

--000000000000748dff065d26ba24

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




h:600px;margin:0 auto;font-family:Arial,Helvetica,sans-serif;background:#ff=

ffff;">









Nation=

aal Telecom Onderzoek



Editie oktober 20=

26






argin:0 0 15px;">Betaalt u te veel voor uw telefoonabonnement?



Uit=

ons laatste onderzoek onder 14.000 Nederlandse huishoudens blijkt dat 62% =

meer betaalt dan nodig. Gemiddeld gaat het om €8,40 per maand — =

dat is ruim €100 per jaar.




px solid #e3f2fd;border-radius:8px;">










solid #e3f2fd;">

€=

24



gemiddeld betaald
>

€=

15,60



laagste tarief*


Verge=

lijk uw abonnement met duizenden andere Nederlanders en ontdek of u kunt be=

sparen.










1#t/c/ce4bffee27c7ec4e8bd3" style=3D"display:inline-block;padding:14px 36px=

;color:#ffffff;font-size:15px;font-weight:bold;text-decoration:none;">Verge=

lijk uw abonnement



*Bron: NTO oktober =

2026, sim-only 10GB+




1px;color:#999;text-align:center;">


1#t/u/ce4bffee27c7ec4e8bd3" style=3D"color:#999;text-decoration:underline;"=

>Afmelden  | 
01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/ce4bffee27c7ec4e8bd3" style=3D"color:#999=

;text-decoration:underline;">Niet meer ontvangen



--000000000000748dff065d26ba24--