Nigerian spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MzE-0000000016x-1vdy

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:26:12 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:26:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk2-f5.google.com ([74.125.230.197]:51003)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Met-00000000Ch5-0uzH

for doctor@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:05:20 -0600

Received: by mail-qk2-f5.google.com with SMTP id af79cd13be357-9392f49a01eso68464685a.1

for ; Wed, 23 Sep 2026 06:04:22 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1790168656; cv=none;

d=google.com; s=arc-20260327;

b=lbYeWdtSWLXi6Ij8uQaqwQPgepZBM45HQESZ1ewnO/Vw/78KbyGfPEADgSdbf7DUzR

PxR/PPSxgATQj5ykx/YmwSz0awGvQPEgTCVI2VWE7lihuPDE18NoRx1OBj5wzHN/HBhc

2m2nut2pl8oPncHwcNBzZNT6W7dFcq+CQTqU/4UlnQ21iPU1kY6tWkCzos2DnMbW3SyS

7jaMZL5pjSY9ngIF2KGuE3OkS0sqsETTjSQKtrlpw65KoGI8eZOf0jqDmnZIv7Ar3dWt

7VaLuwKg6NqfGM3OH3I9HULLN/tfq3PI85VrYcqi23GxEEjwxdoT3h6uIxAJQNEnA/oI

Vm6Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=IstsN//BctbCkKcvYztiUiNwx219GKIBYtmNwuZJT7o=;

fh=moTYyexvaokVqm2gjCAbu/5f+P2QTXtdAsMbSQwhXes=;

b=lUcac/NL03qlJFId3QTBN/8xJnV1aRVGBEj9nRU4+6xMnVzS6GmarITZK/hqtdsVrw

51xh1iHqM/1OW3b0LhSwCvaSr5znVLV5GJJZOKRMzJ7uj/1Ci2KXJxhIvsiI1GDQMCw4

Ap4pO5B68NGbjlaf7D/Z53xekgw6AyDN3syJhfqDddEtnODst7mnm+8f+Fpq6veNUS32

DArWj25YYUPWlcy8X1hmw/ceEnJeUb6QKn0WgQuKBUuifPtsWCxY1qT1/1bqUeoty9p9

LWJSzZCH6uEuTjqyhsbGG6Sc1cgrU0WFEbtPOadwO8v0Cn+7p8PRE/EAdf7ssN54PIkY

LLFg==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1790168656; x=1790773456; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=IstsN//BctbCkKcvYztiUiNwx219GKIBYtmNwuZJT7o=;

b=KFiucOBeMoOZ4ToIitCGN72RgC/C9z7NZo6AbJLRXcBM9wXgcP3j80e9ToQCjetvzk

Bw/gRl7Ui167kvz+vubd0/eqariSMeNDnDsI0OY1gAjNGnt1q7ZwAHQbimeuyaMi3pXU

7Csy3xyuiK+LqLzijXwgg41v/OfmoW4rW+Ah1EQ5Y+G3VOxjFBbQziU3/J6QuTKtUAO6

+97buv8Exb1xooARYGMXIMHyQnifOjfwb0y0VvlAL1yuWGmFA1849wtXyUq/sxxu9pIc

r8T32m/7ZUsHBYVLre8JyYqXHhXB4TbefXTsifAeR6kqLakcNh8XpAdjkNX5n7/m7C5Y

zdbw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790168656; x=1790773456;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=IstsN//BctbCkKcvYztiUiNwx219GKIBYtmNwuZJT7o=;

b=joloKC6OSTaE87sJFFNkuH9d35Qp73YAxDGQFd4hsyJIOIVD04HJAR3mdtX6XGgO95

qyx043SduJ16tH1abTwj5SArCs3moHqkP4kMbumHtmt9IzGI1ANlmovdptoaa/bfXkAU

F/RUo2gbLFSyZYE6+N3z9MwF/X5x12L8Hs0DPkF/F6mTjFHaq43r2FbxSQu+7c+qyWQ3

8VaOBpNuv6bEYstwyzAkPdVqfaVRvgDKU3DpP9thwey76PuJsI3EzPrR2yWd6cagakHz

pOlu7gRqCbi6QVJBUHTypijHySVrSzF2+RtgoKoMZL4zTWNyFdoR6Pqu5+EuqCAwygex

9erA==

X-Forwarded-Encrypted: i=1; AKwUvBwb5GfqM3QH/KFgeTYHulS4mbSpNAYm+U/7qqn+PGj6C0buLk63wPit+SPDS71DKafhyIyHVm8=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++lAJoGS8Wfh3Xfa05xObllKXk6yzJI6SdFb9Xi3q8KbMmS3LJSV

prfPWM2Q6Lsh5r2xDN7996vfwC3Rs1Esv3SE2mBXDir/RAJrsqFHtooiMFgAy5Rj9TC3oYu9nXi

/hRGn2E+EaMI8kD+QXGN2EOO6pvkLZMHoYcw627lT34zp0Mk=

X-Gm-Gg: AYBFou0nTuaJpyQVQ8DYcqNq+Laufv1z4LdrS9M5DP1nt4KwUbNY4k/caWEjiS0FS+/

YaaTVc/XTPtHHLObySPuDjqU49teAR3Vz0h/zmOfMYgtNbNn+5KfJ1uRCtCZsP32/VQOUmunqIp

8NbQfurjE25IcK7SteWITkTp+9huroTDFIpTR4AwTVU8io727yAfUnDBHTHV6XHUSBh7VeTc3h+

2Wn/SXUtBY/lSumsYRrIT1+9IBHCgzmJ5e/jJn9RLJ9WmutStzTxol7+IcZ8POaIziZ20MtKaJl

eTEi2ZqozgKC6RHijMYHVCWgPeSsDkyKywPCRtTWxTSehi66aVkGwS7VOoH4/ABMRAvFjinHlKG

NalDD0zxt2i1O/1A5WnQeWa/NExEprxOexG7nyXK1LVSbdA==

X-Received: by 2002:a05:690e:806:10b0:66f:c1bc:4087 with SMTP id

956f58d0204a3-672d58ab4f1mr818449d50.74.1790168165927; Wed, 23 Sep 2026

05:56:05 -0700 (PDT)

MIME-Version: 1.0

Reply-To: rnzt0777@gmail.com

From: "Ms. ROSELINE"

Date: Wed, 23 Sep 2026 13:55:37 +0100

X-Gm-Features: AcwNN1XAaDIRU7vmjBeuQ_gZQweXFWc-i_ZZOtz6PpIPVZJ71LigSkzBe12uc3I

Message-ID:

Subject: Re: Hello, my greetings to you.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009e4fe7065c260146"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Hello, *My name is Ms. Roseline Nzete, I am from Côte

d'Ivoire (Ivory Coast) in the West Africa region. I work with the UBA GROUP

BANK Abidjan Branch here in my country. Please, are you capable of handling

[...]



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.230.197 listed in dnsbl.ahbl.org]

[74.125.230.197 listed in dnsbl.ahbl.org]

[74.125.230.197 listed in dnsbl.ahbl.org]

[74.125.230.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.230.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.230.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.230.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.230.197 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.230.197 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[roselinenzete016(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[roselinenzete016(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[rnzt0777(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.230.197 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.230.197 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Re: Hello, my greetings to you.



--0000000000009e4fe7065c260146

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



--=20

Hello,



My name is Ms. Roseline Nzete, I am from C=C3=B4te d'Ivoire (Ivory Coast) =

in

the West Africa region. I work with the UBA GROUP BANK Abidjan Branch here

in my country. Please, are you capable of handling a transaction

accomplished contract payment that was left in our bank ?. I assure you

that the transaction is completely 100% risk free that cannot affect you

and your family or any kind of business that you do.




If you have a minute of your time, I would like to discuss it with you for

your kind consideration to know how we can proceed without encountering any

form of trouble before or after the transaction. You can also contact me

back at your earliest convenience time for the discussion if you are ready,

willing and interested. Thank you and please stay safe.




Regards,



Ms. Roseline.



]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]



Ms. ROSELINE NZETE,

THE INTERNAL AUDITOR;

UBA GROUP BANK-CI.

ABIDJAN BRANCH.

WEST AFRICA REGION.

WHATSAPP NO; **+2250500541438

TEL NO; +2250507095005

EMAIL; **rnzt0777@gmail.com ** }}



--0000000000009e4fe7065c260146

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






"gmail_signature_prefix">--


ature" data-smartmail=3D"gmail_signature">

=3D"#0000ff" size=3D"4">Hello,

ff" size=3D"4">

"4">My name is Ms. Roseline Nzete, I am from C=C3=B4te d'Ivoire (Ivo=

ry Coast) in the West Africa region. I work with the UBA GROUP BANK Abidjan=

Branch here in my country. Please, are you capable of handling a transacti=

on accomplished contract payment that was left in our bank ?. I assure you =

that the transaction is completely 100% risk free that cannot affect you an=

d your family or any kind of business that you do.=C2=A0

iv>

lor=3D"#0000ff" size=3D"4">If you have a minute of your time, I would li=

ke to discuss it with you for your kind consideration to know how we can pr=

oceed without encountering any form of trouble before or after the transact=

ion. You can also contact me back at your earliest convenience time for the=

discussion if you are ready, willing and interested. Thank you and please =

stay safe.

<=

/b>
Regards,
nt>


iv>Ms. Roseline.

>

r=3D"#0000ff" size=3D"4">]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
b>


div>
Ms. ROSELINE NZETE,
t>
THE INTERNAL AUDITOR;
>
UBA GROUP BANK-CI.=

ABIDJAN BRANCH.=

WEST AFRICA REG=

ION.=C2=A0=C2=A0

>WHATSAPP NO;=C2=A0=C2=A0
+=

2250500541438=C2=A0

>TEL NO;=C2=A0 +2250507095005

f" size=3D"4">EMAIL;=C2=A0

f">rnzt0777@gmail.c=

om
=C2=A0}}
b>





--0000000000009e4fe7065c260146--

web control panel spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Mz7-000000000oL-3CsZ

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:26:05 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:26:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from gw.d.sender-sib.com ([77.32.148.23]:31212)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MEu-000000009wT-2yUm

for sales@nk.ca;

Wed, 23 Sep 2026 06:38:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=steadfasttools.com;

q=dns/txt; s=brevo2; bh=LR+xiv1t3kJrVoaxicPTz6fXGrd7MAPAcxE3aZ8CMQw=;

h=from:reply-to:subject:date:to:mime-version:content-type:list-unsubscribe:x-csa-complaints:list-unsubscribe-post:message-id:x-sib-id:feedback-id;

b=TEQ9W3t8cKpTWbmZf1DpZq14CfKUtLMfkDIX07hOnrR0DKIQcjCvkzFVtJxB3uK0/BBFbBffj8ct

QrX/HPUbIcE0XdGSXQAkx3HTd0IYw/K45DSRoWT0EgZRP4NynzFITutuSQWWYvdcmvT2LXRB3PVg

1Fos1DxpzZ6ImO7x5BsKWqp3dC5WyCAlTe7yWyr0QdRsizAl60dJPDy3xLJH3dnDJXyYuer3Rfjr

Za0pXYp4LKHZdYbsu1GfXGqwNnx2EiyHoK7/LR0f75xopfAg5QZXctSsTPA7rtE38pJnEACSQPTq

F+23YNeUX1sI6IQSFrZfyaINC9mLkEGFgVJQSA==

Origin-messageId: <202609231237.81678652602@smtp-relay.mailin.fr>

List-Unsubscribe:

X-Mailin-EID: NDc1NTE4OTcwfnNhbGVzQG5rLmNhfjwyMDI2MDkyMzEyMzcuODE2Nzg2NTI2MDJAc210cC1yZWxheS5tYWlsaW4uZnI%2Bfmd3LmQuc2VuZGVyLXNpYi5jb20%3D

Message-Id: <202609231237.81678652602@smtp-relay.mailin.fr>

Reply-To:

Feedback-ID: 77.32.148.23:11330070_-1:11330070:Sendinblue

X-CSA-Complaints: csa-complaints@eco.de

Subject: Following up, plus something for non-cPanel boxes

X-sib-id: W-LYT-RF1MI9x8yBWdtSOsp5iSTCZLMTHkTFIG5N9IV0XJs2GmrTfXw8Jq64WTtQP1c9G-A8XigpRne5y-ZysuMzTxolIJFve21u95GMaImS8PbJtxZS0c-rZJnr5du1UZUwuf_zMj3cN3wVVn0bzc4NNLIjFWaCy7w

List-Unsubscribe-Post: List-Unsubscribe=One-Click

From: "Steadfast Tools"

To:

Date: Wed, 23 Sep 2026 12:37:24 GMT

Mime-Version: 1.0

Content-Type: multipart/alternative; boundary=f393fba6e0868014c44a3b6516e5e1addeaff00a33e10e5bcc68b44b95ff

X-Spam_score: 17.0

X-Spam_score_int: 170

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Edmonton Web Hosting BSD, Apache, Mysql, Postgres, PHP,

Just following up on my earlier email. I know hosting teams are busy - I've

been one for 25 years. If MySQL tuning isn't your biggest headache right

now, I also built BotSurgeon-Pro - a cPanel security layer that handles

bot attacks, brute force, and DDoS triage automatically. I'm currently looki

[...]



Content analysis details: (17.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

[77.32.148.23 listed in dnsbl.ahbl.org]

[77.32.148.23 listed in dnsbl.ahbl.org]

[77.32.148.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[77.32.148.23 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[77.32.148.23 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Following up, plus something for non-cPanel boxes



--f393fba6e0868014c44a3b6516e5e1addeaff00a33e10e5bcc68b44b95ff

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=utf-8



Hi Edmonton Web Hosting BSD, Apache, Mysql, Postgres, PHP,



Just following up on my earlier email. I know hosting teams are busy - I've=

been one for 25 years.



If MySQL tuning isn't your biggest headache right now, I also built BotSur=

geon-Pro
- a cPanel security layer that handles bot attacks, brute force, =

and DDoS triage automatically. I'm currently looking for 10 founding partne=

rs ("Gold Founders") who want early access and input on the roadmap.



If either tool sounds useful, I'd love to hear what challenges you're facin=

g. No pitch, just a conversation between hosting people.



steadfasttools.com



Cheers,

Rudi



--f393fba6e0868014c44a3b6516e5e1addeaff00a33e10e5bcc68b44b95ff

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8




se">
" src=3D"https://bbddaaha.r.bh.d.sendibt3.com/tr/op/iNe9T_O7q5linQUHXC9G7pl=

5s68GngD0ByN4WcOQ1Ig2TebRzZcDsC46ojy7bdxFIaKgnCvLvCXul_0J3pxmb9QAzZevyYJ-3W=

RqDmS7LhFzq_CSmkYUKE5v-NUNGMoJpRDRhkc6sC5nC0Kp1TTROx4gnjhOWJQSZJJbg7pPWdF21=

rNSnwWdyr8yFzP8F20nzYkt5_aBkOqp230D_RR63g" />







Hi=

Edmonton Web Hosting BSD, Apache, Mysql, Postgres, PHP,

/>
Just following up on my earlier email. I know hosting teams are busy=

- I've been one for 25 years.


nt-size: 16px; font-family: Arial;">If MySQL tuning isn't your biggest =

headache right now, I also built
nt-weight: 700;">BotSurgeon-Pro
- a cPanel security layer that han=

dles bot attacks, brute force, and DDoS triage automatically. I'm curre=

ntly looking for 10 founding partners ("Gold Founders") who want ea=

rly access and input on the roadmap.


font-size: 16px; font-family: Arial;">If either tool sounds useful, I'd=

love to hear what challenges you're facing. No pitch, just a conversat=

ion between hosting people.


: 16px; font-family: Arial;">steadfasttools.com


" style=3D"font-size: 16px; font-family: Arial;">Cheers,
Rudi


>



--f393fba6e0868014c44a3b6516e5e1addeaff00a33e10e5bcc68b44b95ff--



Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Myt-000000000A3-23eF

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:51 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f72.google.com ([209.85.219.72]:60753)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9LbH-000000005cB-2H9s

for doctor@nk.ca;

Wed, 23 Sep 2026 05:57:31 -0600

Received: by mail-qv1-f72.google.com with SMTP id 6a1803df08f44-90e80ce3597so18057156d6.1

for ; Wed, 23 Sep 2026 04:56:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ku.th; s=ku; t=1790164590; x=1790769390; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=MjmTqrBnOZE9SLu6sFM12Bs6PlGBlTsvLEq6NSGOD6Y=;

b=fsYslTTco2BYXM49glnCk7W6uA/tiwOUJamSh8nXqWu7pPT0naAsJ/MRoyuVVWA/GZ

4S7Vxm9h4m50pz0t9c4gYEaoquJkHx+UIehPP6Ruk5nE491n2ASpSiClDa17+yprx4Y0

9dcll+k+xudFF2xSuXqVf3kLzAlKpkf2fcNz43ZRmE1eaewccN8AisatR1JOabxa6+aj

vveUVCFLbWS+q4cJyZoHai8fKx7EdXy6XGBLB5dGRlDsWLuGvpJWBP22Sf6/66/ZzPnb

DE433hpmWekL2Y5+oO2RLZ2qKpHUtq1oBMuLd17qqsfX5Az4eO16nhGY0ARSjnze7pG4

w3uw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790164590; x=1790769390;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=MjmTqrBnOZE9SLu6sFM12Bs6PlGBlTsvLEq6NSGOD6Y=;

b=SpRqB7/MIhMle7Art/AXCD84YjmWSeOHHXGwTo620MMCbim1IEkXnGbVOYMH/iSjrc

Z6O2+yfqn+uFm56J6ZCpFalgMv8UnUUSRNEaZabzG9BdzC7KHCSUoj/giTe0Ltm1eTgx

lM30ZTlS0jCGWiGxN+qKXO18nVF84QI56NjoHWtokNZx1rSrbF4ErZBHgkkexf5NVcC+

oS2nx2coDCAUr5UCRn1Y7qx8Cnhizwf4eaaSpaURJV4wrzuOIJjue9lkQgQEZ+NLhL5w

McHZoCB8gb7oQF6bM17arMukQwWrIEUxO8i8nKcR8KoZOs3s18YzVJrBMxNpj6XuOc/2

5m2A==

X-Gm-Message-State: AFuF++kbi1dGpjNk9SNkrpn9JpCJ9wCYtkV9FFn3VKkDa/X0ohoeap5A

JalmPZ4BrML5HMXT5B+wEGVm0ucmrtnzP4LMQKtfrOYgwvwW+UxaW18OynaAx9SKxH+tGUI6C+y

DCLwUAb3kUe9koNbFB9Kt3qWl

MIME-Version: 1.0

X-Received: by 2002:a05:6214:4891:b0:912:517b:974e with SMTP id

6a1803df08f44-9140c476406mr39054616d6.40.1790164589662; Wed, 23 Sep 2026

04:56:29 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 11:56:29 +0000

Subject: 1 minuut van je tijd, kans op 1.000 euro boodschappentegoed

From: Nationaal Koopkrachtonderzoek

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000074e90a065c252c0d"



--00000000000074e90a065c252c0d

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TkFUSU9OQUFMIEtPT1BLUkFDSFRPTkRFUlpPRUsNCg0KDQpXaW4gcHJpanplbg0KDQoNCjEgbWlu

dXV0IHZhbiBqZSB0aWpkLA0Ka2FucyBvcCDigqwgMS4wMDAgYm9vZHNjaGFwcGVudGVnb2VkDQoN

Ck1lcmsgamlqIGhldCBvb2s/IEVuZXJnaWUsIGJvb2RzY2hhcHBlbiBlbiBhYm9ubmVtZW50ZW4g

d29yZGVuIHN0ZWVkcyAgDQpkdXVyZGVyLiA3IG9wIGRlIDEwIE5lZGVybGFuZGVycyB6aWVuIGh1

biBrb29wa3JhY2h0IGRhbGVuLiBEYWFyb20gdm9lcmVuICANCndlIGhldCBOYXRpb25hYWwgS29v

cGtyYWNodG9uZGVyem9layB1aXQg4oCUIDkga29ydGUgdnJhZ2VuLCBob29ndWl0IDEgIA0KbWlu

dXV0LiBFbiBhbHMgYmVkYW5ramUgbWFhayBqZSBrYW5zIG9wIGVlbiBtb29pZSBwcmlqcy4NCg0K

DQoNCg0KDQoNCuKCrCAxLjAwMA0KYm9vZHNjaGFwcGVudGVnb2VkDQoNCg0KDQrigqwgNTAwDQpj

YXNoIG9wIGplIHJla2VuaW5nDQoNCg0KDQoNCg0KQWlyZnJ5ZXINCnR3diDigqwgMjQ5DQoNCg0K

DQpTbWFydHdhdGNoDQp0d3Yg4oKsIDM0OQ0KDQoNCg0KDQoNCkRvZSBtZWUgYWFuIGhldCBvbmRl

cnpvZWsg4oaSDQoNCg0KDQoNCkR1dXJ0IG1hYXIgMSBtaW51dXQgwrcgYWwgMTguNTAwKyBkZWVs

bmVtZXJzIMK3IHZvbCBpcyB2b2wNCg0KDQoNCkRlZWxuYW1lIGFhbiBoZXQgb25kZXJ6b2VrIHN0

YWF0IGxvcyB2YW4gZWVuIGFhbmtvb3AuIFRyZWtraW5nIG9uZGVyIGFsbGUgIA0KZGVlbG5lbWVy

czsgZ2VlbiBhYW5rb29wdmVycGxpY2h0aW5nLiBKZSBvbnR2YW5ndCBkZXplIGUtbWFpbCBvbWRh

dCBqZSBqZSAgDQpoZWJ0IGFhbmdlbWVsZCB2aWEgZWVuIHZhbiBvbnplIHBhcnRuZXJzLg0KQWZt

ZWxkZW4NCg0KDQoNCg0K

--00000000000074e90a065c252c0d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background:#fdf6ec;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:600px;max-width:600px;background:#fff=

fff;font-family:Arial,Helvetica,sans-serif;border-radius:14px;overflow:hidd=

en;box-shadow:0 1px 0 #f0e6d6;">














































ter-spacing:0.5px;">NATIONAAL KOOPKRACHTONDERZOEK





m/nko-hero.jpg" alt=3D"Win prijzen" width=3D"600" style=3D"display:block;wi=

dth:100%;max-width:600px;height:auto;border:0;">




c14;font-weight:bold;">1 minuut van je tijd,
kans op € 1.000 boodsc=

happentegoed




lor:#54463c;">Merk jij het ook? Energie, boodschappen en abonnementen worde=

n steeds duurder. 7 op de 10 Nederlanders zien hun koopkra=

cht dalen. Daarom voeren we het Nationaal Koopkrachtonderzoek uit — 9=

korte vragen, hooguit 1 minuut. En als bedankje maak je kans op een mooie =

prijs.






ellspacing=3D"0" border=3D"0">


















sentation" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" =

style=3D"background:#fdf6ec;border-radius:8px;">

px;text-align:center;font-size:15px;color:#2b1c14;font-weight:bold;">€=

1.000
=

boodschappentegoed

sentation" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" =

style=3D"background:#fdf6ec;border-radius:8px;">

px;text-align:center;font-size:15px;color:#2b1c14;font-weight:bold;">€=

500
ca=

sh op je rekening

sentation" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" =

style=3D"background:#fdf6ec;border-radius:8px;">

px;text-align:center;font-size:15px;color:#2b1c14;font-weight:bold;">Airfry=

er
t.w.=

v. € 249

sentation" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" =

style=3D"background:#fdf6ec;border-radius:8px;">

px;text-align:center;font-size:15px;color:#2b1c14;font-weight:bold;">Smartw=

atch
t.=

w.v. € 349





" border=3D"0">








dius:30px;">


" style=3D"display:inline-block;padding:16px 40px;font-family:Arial,Helveti=

ca,sans-serif;font-size:17px;font-weight:bold;color:#ffffff;text-decoration=

:none;border-radius:30px;">Doe mee aan het onderzoek →






Duurt maar =

1 minuut · al 18.500+ deelnemers · vol is vol




e8d8;">


86;">Deelname aan het onderzoek staat los van een aankoop. Trekking onder a=

lle deelnemers; geen aankoopverplichting. Je ontvangt deze e-mail omdat je =

je hebt aangemeld via een van onze partners.

e.org/t/u/4350489fb85002c46bea" style=3D"color:#a89886;text-decoration:unde=

rline;">Afmelden










ght=3D"1" alt=3D"">

--00000000000074e90a065c252c0d--

Web/SEO/APP spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 05:37:30 -0600

Received: from mail-koreacentralazolkn19011025.outbound.protection.outlook.com ([52.103.74.25]:28563 helo=SLXP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9LHr-000000003ap-0QRV

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 05:37:29 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=T/oNhoCFUoIsmggSoZ2kpJ0wgjYr1+hp4U8r7uTDq/5a8XASwhVtRBir/A0CcrrmwnPg9bWSq4rH0gOCWFNwZArRiD9w/9qjsKLre8Czz3MKjazopq+x0H3H3Vu0nYyS6DuamFlEwAI83+tjKl7kJ3sDNIPbTnofBEo0/rtsiGycB6uhpj3C/hjGNLu65L5Yh0P4sDDHbvItjZ4Qpf4/lf75Ze3KvfGRHNNqVgXk3nl4tZrrre3m4lEu7WcW4ocWqlKZyn+asZBBOB3ezRa+JyebtP/7nDWcNmuvlduWhxjYDksptSuw7F0s+hojayH6ElZyntAs7X9u/FJK5rd6sQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=SbfesEQ4rCzfomwNi8vyoAuBx6HdDqhqWCqfffDNNfs=;

b=SAFUlwQ7x0UHtgoR8OeFtwE0dRq4kWgTWlmkIaPkNRFigI5aJ174eHi5rfpKQJWo5rVoh9RK12T0wYReC/N8Dfh55Wat3l4KTahDimyvmpjq9A4Dz9+lLNsQY84s/0uox+OW8NKF+pay0TgXqbF6jCru2ofhfEx7MNdneyqERcfzZnZvNeFPv2ICeB+hEb5lNLlAEVlsYS8Pqnizc1K0wMIpb3AYlZbmWDEX0i6cyWBJsG5gz3xeFokvuSicboC13mnm719V17n4hqq/1OQd9eKZIT2fs9YcZVqE8AkTzO2Us9EgagAXsisMK4bnkohuYg/ldTmALFQ+e7GS3dr4Zg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=SbfesEQ4rCzfomwNi8vyoAuBx6HdDqhqWCqfffDNNfs=;

b=aBMWUJplWBz/g8Q2hhtErx0xx2h58xbB3oLXKCGRoDGDi4nLVol1a1ZB7Hl+jJiExJJnR8X4yDL+difPy/ZB5fUObMb9f7cPA7RtLDjKoEyJfCiYB9ExuYyG9hmCk9uPnoZ5cSiSPaUk7HVNYDnw3n6zlrWv288EwvAJGm6WsWILoiZEDruoQu6J0t1JX+SmiOSmXVB7ArOd5wMMYlwcl4S1EswQdk83/Sco3YTXjAehUcP8D0igYboEPUWWYtDGpGIu+u1w9C3RPBejWg7VGh+r7vqZxvLmedGVH5M5S5+pt9kIUSUdZ+UBCKu55ueRC+CURxSFt9ZIZwOyCs+BtA==

Received: from PUVP216MB3367.KORP216.PROD.OUTLOOK.COM (2603:1096:301:168::14)

by SE1P216MB2066.KORP216.PROD.OUTLOOK.COM (2603:1096:101:15d::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.14; Wed, 23 Sep

2026 11:35:58 +0000

Received: from PUVP216MB3367.KORP216.PROD.OUTLOOK.COM

([fe80::b639:d2ef:8d24:2e60]) by PUVP216MB3367.KORP216.PROD.OUTLOOK.COM

([fe80::b639:d2ef:8d24:2e60%6]) with mapi id 15.21.0451.014; Wed, 23 Sep 2026

11:35:58 +0000

From: ariaconnet plus

To: ariaconnet plus

Subject: =?Windows-1252?Q?Re:_Proposal_with_price=94=3F?=

Thread-Topic: =?Windows-1252?Q?Proposal_with_price=94=3F?=

Thread-Index: AQHdSrK1wI/m8SwdHUybgZH2jHx+87bcCc1f

Date: Wed, 23 Sep 2026 11:35:58 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUVP216MB3367:EE_|SE1P216MB2066:EE_

x-ms-office365-filtering-correlation-id: 922e429e-6d52-4ff2-5ebd-08df1966d63a

x-ms-exchange-slblob-mailprops:

dXgNGeDBlWeZjiaahKr5xkTHsya7RDLNkNbpu4DdsiGtxge++aIqBfAiHWk+qfwr0vzSkG9vlTtyH1nZGkHSZlZ2x9Ev3+a7Rsfu9FkyNb7BKMCxk4W28ImKqjiyKtzJ6USdm8MGlmRECU+rLGCBrt17qLDR/mbro9w3ibgYB8f+pB6leh7cIFElU5FKpMup4zV0R8sT2F972EtcxebgOXpOyoPqPU1pjZEtva6fOsKaq4vN5gIi0a3RSMx+tiF5As6gGJaoLK2f/+G+eXlt8etCxaeGfI2jF2+T3/hR/90dp93ngFtLrd04xWxXojtMsMB9MgyUn/KOIWsyZQB8H5FM/MAPU9/8oCBDYv924ZKapomqJc/vQTdqng1Gl60qjvYCyIkt6hHL4o05U7wI3uqh7RdPE94E/vgNGwWrMDWIsIbhh7kexm+ZeWkq0/mbz99dNSSxtJZhvaeMr2SDTzuIvMQWJpCp6Ec1Qjo+gX5nR/n+CoSGCRQuuTXcPkUgo6kXhZ4sXWSfFU4y24afnJhOq/lOupKW8T86rLgc5Z1QXvFPL9ei3mGtWRtgT3TI78ywl4T+58+tnxiXBRb/n80chraD7kAV8QxOREDTylfcvgW6TCPXrafJdSG4Bhfp

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|15030799006|24121999003|37011999003|22091999003|55001999006|25010399006|704163111799003|2604032081799003|2604032031799003|45011099003|16051099003|51005399006|8062599012|8060799015|48001999003|19110799012|31061999003|40105399003|2607281247196008|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?JkZaXw+cV9wLgR6lUHR8JnNc3StzAisNB/5bAAwGQKQNb109SkPmqMhz?=

=?Windows-1252?Q?SMo+KMsab7gbgMGtF59Jy9kGDStqIsFeu5l41JsJKqGDAMbEimRrcBHq?=

=?Windows-1252?Q?ezZ845mxN8Sy1/x1VZMEys91G2xQVs2qqwCFesamqyiym/pJGZ+TvXO1?=

=?Windows-1252?Q?0dHm0BoXCfISldNgo1Djb6rgCWRsoeHj6yOQ79+zOvwr5t56C2QImbNA?=

=?Windows-1252?Q?jXWRjKOHnxDXqWwJ1S+bGzDYtsBbjZcMxNk+qzz5yi+vql+q8oW1JqV5?=

=?Windows-1252?Q?PG6/VsKoUg2E/iO48lcS8nt0E7wwMrWYOMZth+z0vBuOQUCM9OKJJfI3?=

=?Windows-1252?Q?S+DirY5dmohM+RpuRZD7N2JidMxUCxRWdmzkYSPAunvvWLNBtOdVFPfV?=

=?Windows-1252?Q?O7X3/Rqr1Ume3nxxGtTChrPYH2oyOXq+XMXuykOSNtfh4tBiC5/ipNle?=

=?Windows-1252?Q?DRvnic66C/utUy1sG5bjVUm672d6nwnsUfafrMLWf7jAzIN0miR+yfut?=

=?Windows-1252?Q?TmcpISC8TkyXNT2aph0092m/MIL0ShxanuRkWyIaYMAHxmOisZOfr8fK?=

=?Windows-1252?Q?u20+5x0sd7mg5dcL7xN2swYc456HwSMe1enJfEhxIPSpwKmtY48vN1vz?=

=?Windows-1252?Q?MgwXuDBYFmUACgra0DE7yAYQCfRghqsUzjWvH/8p4lKma7UJf9lf7AJj?=

=?Windows-1252?Q?6iXmwCZGVCOfef2iaVPIeTbRsJCFtI1Ep3mFsDPRc+hHj6ogaOmNnnoo?=

=?Windows-1252?Q?2pz0zSoJaaVulwYBHvaCOqGWfv+9nGCzdnMYOvkCv9OKszG1CKcoc43n?=

=?Windows-1252?Q?g7QvsEuBTRFlMNM8tyNZfFSAA9AyBjCbsX3ErZ4/QBUKLCWF+0GB6A/P?=

=?Windows-1252?Q?lvhRpk1nRugO+2g2pQMukP0BjiDaZV/RtUKxumL7va5ETlggoZPBnQSP?=

=?Windows-1252?Q?DeTchAjW6xe1aiszgQyJi8qDd3nNJ1DQ6oAvPNJWBp8tko0vwkJjHbpu?=

=?Windows-1252?Q?2HREhrQARYfJ6x13pcFWM/0JecKC0t2vTtydymIf3dXHReCGBAbNsCPr?=

=?Windows-1252?Q?530pGfxvXW8Gt0gdJeY+siZ5QoKn4iV+ZnFzlr81te1JrBkjR9WBL/st?=

=?Windows-1252?Q?rHw0JWyP/FuCunBcf3EVvp/n4Z+ZXuyKqkF2D0ETyhb+0WQJiF7xtS08?=

=?Windows-1252?Q?MpIQTCYb29XrBopcsLMhRbXkabfy2mFzmrcE9NX8OUPE9oUF2mjUH49v?=

=?Windows-1252?Q?/WG+szIOaxCaUd8aCJ+FbMY4Pn5V+uNVutdPgA/7l6GyK9+sMGoiZ0nK?=

=?Windows-1252?Q?q7HAuQRqC9ofUpWtTfmmhMCuNjAirG9AWpD0/dxjd21gkORY6vT+Pkts?=

=?Windows-1252?Q?rm5CsPeEvKAWuUgD4QvW2Rngx/yDEl1aiCl4bzAy5d/OT6UgHvaVfPpf?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?lwmhgHDuiKaKgiv2rPPo0sKOBBuNPuB61lSI1/AXPckk1SDScHqRNJNe?=

=?Windows-1252?Q?xmkVtXL27kt7IdJYlWxcKy71X4fWB6z4CmVGOUSRS8Gqp6/WX8G/WtEw?=

=?Windows-1252?Q?exkyuZjdQoE2vkA1FbIyq0bUZkpKj6AgHzbZjsvAnxCkYpOFLWyPgvi4?=

=?Windows-1252?Q?tvZjfULiVuB1EopRTVfpIHJVICs8q9CvVd94NXPKj/JAjYBFMnZGUgKQ?=

=?Windows-1252?Q?enoTA4AeqlLW6wLh1mNdA5VOTjLhv4U1x0WHhA3DLmJ3XaDDjKpeEPdX?=

=?Windows-1252?Q?1oQtRxu3dkw0Qr6t09JEZy0M15ObwhCriGW0c3Wu62JEq6EBk8rW1UWy?=

=?Windows-1252?Q?Ha8NtF+Fvhh+1maaQWajkUBlGpnpwcqaMvywXDJaQtNb/isA/wF7uv6Q?=

=?Windows-1252?Q?wAEXRS3dZ2EfK4SplPkMV1xScsdSOKJLDN2SRQZfzV6haXYgqp+PPKSN?=

=?Windows-1252?Q?zXVlnvSRR3g6kbWYQ8LmwgXSKwYu5MebO8p93EmxdCCQhQS4JKvrCswv?=

=?Windows-1252?Q?ZA3z/7+oAZ3+zGQmKTpNdA4NpmlREzQx3dAW47IEImOcAqdMxvuBKZUL?=

=?Windows-1252?Q?0zcH1N7B1epFps6GTGRzBLQlXq4AcW6d0wdYOEPhA+D7+pgB2MwaDVWb?=

=?Windows-1252?Q?D9zlm4xd5fMJ0ZZirgo7Mj42cZF2/bPTZXJsY+OlXz2cC7ThCfPH6h4U?=

=?Windows-1252?Q?NlxMGZ9a1bAl1y+r4qgFCS5Abxmu6mh0/5FF/WVDiqEsURXVw/xgs86z?=

=?Windows-1252?Q?UXJAsPDuCnscZzI06MR0eCGyxqJNsTXagIjHFGlEdBY/BjqPGUX9Tmqw?=

=?Windows-1252?Q?a5CLvmk/rfhx2/iFeGhnlvuHA4hCXpwlYn/UfVtJGLQFFfozIHnlYASD?=

=?Windows-1252?Q?rM4uybmxygZlOfec9O2YKrdsPoYQfsTBGmZNCw4Dqj+13F5vZj2EKsoX?=

=?Windows-1252?Q?161NAs8u04Lkc9x9De6f8Shq6NeMk3USKILudmQP1HLJn1Qgc5IiDrHY?=

=?Windows-1252?Q?6MlqgntPdlaFo0aYnAa5eAbwaJxtPP+DKSozRyFKT5BzUtrHQXeeeHmG?=

=?Windows-1252?Q?6fai0+GtT+3C4EbIsL/yp/4trEdVGu3e1jvvNLu/8it2KxDmo8aMpVIu?=

=?Windows-1252?Q?xgFYsL1XubqbF0T3SrOetwUHxVg+MYgGHBL6IfX5XS83QwHDEzJYFZtW?=

=?Windows-1252?Q?DHiPhHCmeTs8frvMKrbSC5ua/BjSePi8BJGOzMSqXcC3lMn9po8YhDSb?=

=?Windows-1252?Q?+8BzOU3zOvbvQor5weuTafMIBW/RlejSCZAONy2n372hdvYqFC5Ka2Uq?=

=?Windows-1252?Q?1hW3g3IAvuMgKwY9mYUZG7Rmz44Weeabxobl44edLxoiJKcj/OwwBz06?=

=?Windows-1252?Q?G75EOMdvAs2cYLz7B/zDMzUeO+k0LdwdOFDYIUez2xmFf7J7FOviMYTd?=

=?Windows-1252?Q?O95sdWQ5W8XqVkQ177Lo1mJAEBBZd9Ohxrh3o5CZb4X3LrqeoqLEKH0O?=

=?Windows-1252?Q?1TQMWboS4I/PmLsX618Juebs7oXpzYLTqV6ZiXQLJNIlOR/Jg3sy1Uyd?=

=?Windows-1252?Q?RcndzwhHzJgzsSBH?=

Content-Type: multipart/alternative;

boundary="_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-94596.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUVP216MB3367.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 922e429e-6d52-4ff2-5ebd-08df1966d63a

X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Sep 2026 11:35:58.1126

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB2066



--_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable





________________________________

From: ariaconnet plus

Sent: Wednesday, September 23, 2026 5:01 PM

To: ariaconnet plus

Subject: Re: Proposal with price=94?



Hi,



Good morning



I was going through your website & I personally saw a lot of potential in y=

our website & business.



I would like to send you a Proposal of your business website! You can get y=

our website on the 1st page of GOOGLE.



May I send you a Proposal with price=94?



Thank you,





--_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












yle=3D"font-size:11pt" color=3D"#000000">From: ariaconnet plus


Sent: Wednesday, September 23, 2026 5:01 PM


To: ariaconnet plus <ariaconnetplus@hotmail.com>


Subject: Re: Proposal with price=94?


 









nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

Hi,


 


Good morning


 


I was going through your website & I personally saw a lot of potential =

in your website & business.


 


I would like to send you a Proposal of your business website! You can get y=

our website on the 1st page of GOOGLE.


 



,255,0)">May I send you a Proposal with price=94?



 


Thank you,



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">














--_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Myj-00000000Pjv-3qfS

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:51370)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9LHC-000000003Wv-0KsT

for doctor@nk.ca;

Wed, 23 Sep 2026 05:36:47 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-8a35310148aso18909617b3.2

for ; Wed, 23 Sep 2026 04:35:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=iisponti.edu.it; s=google; t=1790163345; x=1790768145; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Qhg5F5utim/re2AKU7RfSLMQ6CE6t168Cy9l0Og8N4g=;

b=YNuDLcMBR/PP+gb+IB3uiJtCOhDNDWRr1RJaHfyeV7eIAppK8u9vNeAMzdCoPUzzym

0uilLHjApgbwEm45EizVmVnCabXJENYwZrQ8Sn2g8823Z/Ogj+Q89IIO9/3RjJBYUYWg

VNIHGIVyV1+BjXz1NU0qpyKg0AZn+65gYN8QS4U8x4rt+GKbylM8Ji4WGs7xwlV1envU

a/1N7Gxu/8xDjyeL3Tx7QMfDmq/W2HLPhO0rG+mnsU+F1xwlDkhWSeG2aQ40jFJlqjNE

2a/lDfnuRH7dA5mo1E6bLvpfNL7DEH0lFbRUST8WtmschCZ1jXtDYK7qt+yGr3HQVuwn

c2IQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790163345; x=1790768145;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Qhg5F5utim/re2AKU7RfSLMQ6CE6t168Cy9l0Og8N4g=;

b=PX/CHwfqhOyYosuTtaYB7gzW8+jG7O7aKMmY6PV+41MkHU5M3TNZPgFuLYfT8xsMVu

1FW1CG2UDTkD/Vb5QvutiBLT3Hu1Jul94xQYvmd7mF1ezZtWBW1bjO1talT0E1FVJ4Bj

Vap2AGFIEQo+M1oRvLaUFaFQ+TXnT181NOM9uaF6CdZAUuIoGKy0V8NrrQJWgI6wUmAu

EKitbMWFDr0OVVMC+U8107sMEZgZRFsK+dK5zuJLY//K8w88+MHieLDwoxeM9B8DKffa

7WChW6dVJMZsbArefp7vKXE2bgBXGwGwJBdqs/iRAdTYUnG4NF0wYP3SbuXegub8gUOZ

xkSw==

X-Gm-Message-State: AFuF++nNB8uRYYMqyC7BCPYtb+tDWWlxknD6HaOjUQ+DgvWsj0Ua4Hy1

/yfyr0Jui5Lw9XCwGI95SNZZFC/LYQ83BRAHfIFGaV4srYpxsbIpQyR/nDToYP+ifsBw/wrXvub

ROUHbq7nuIm/OnpmsFXVDKdY4

MIME-Version: 1.0

X-Received: by 2002:a53:c1d2:0:b0:672:a52c:daf9 with SMTP id

956f58d0204a3-672d599df01mr860866d50.108.1790162847346; Wed, 23 Sep 2026

04:27:27 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 11:27:27 +0000

Subject: =?UTF-8?Q?Check_in_1_minuut_of_uw_bedrijf_tot_=E2=82=AC_500_telecom=2D?=

=?UTF-8?Q?cashback_krijgt?=

From: Nationaal Telecom Onderzoek

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000009b462f065c24c411"

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Nationaal Telecom Onderzoek ZAKELIJK TELECOM ONDERZOEK Tot

€500 cashback op uw zakelijke telecom — betaalt u te veel?



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.197 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: businesssnap.xyz (xyz)]

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_JB BODY: Odd Letter Triples with JB

0.1 TW_IJ BODY: Odd Letter Triples with IJ

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.197 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Check_in_1_minuut_of_uw_bedrijf_tot_=E2=82=AC_500_telecom=2D?=

=?UTF-8?Q?cashback_krijgt?=



--0000000000009b462f065c24c411

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TmF0aW9uYWFsIFRlbGVjb20gT25kZXJ6b2VrDQoNCg0KWkFLRUxJSksgVEVMRUNPTSBPTkRFUlpP

RUsNCg0KVG90IOKCrDUwMCBjYXNoYmFjayBvcCB1dyB6YWtlbGlqa2UgdGVsZWNvbSDigJQgYmV0

YWFsdCB1IHRlIHZlZWw/DQoNCg0KDQpWZWVsIG9uZGVybmVtZXJzIHppdHRlbiBhbCBqYXJlbiB2

YXN0IGFhbiBoZXR6ZWxmZGUgdGVsZWNvbWNvbnRyYWN0IGVuICANCmJldGFsZW4gaG9uZGVyZGVu

IGV1cm8ncyBwZXIgamFhciB0ZSB2ZWVsLiBEb2UgbWVlIGFhbiBoZXQgb25kZXJ6b2VrIGVuIHUg

IA0KemlldCBpbiAxIG1pbnV1dCBvZiB1dyBiZWRyaWpmIHJlY2h0IGhlZWZ0IG9wIHRvdCDigqw1

MDAgdGVsZWNvbS1jYXNoYmFjay4gIA0KQWxzIGRlZWxuZW1lciBtYWFrdCB1IGJvdmVuZGllbiBr

YW5zIG9wIGVlbiBtb29pZSBwcmlqcy4NCg0KDQoNCk1BQUsgS0FOUyBPUDoNCg0KDQoNClNhbXN1

bmcgR2FsYXh5IFdhdGNoNw0KR2FsYXh5IFdhdGNoNw0KDQoNClBsYXlTdGF0aW9uIDUgU2xpbQ0K

UGxheVN0YXRpb24gNQ0KDQoNCkFwcGxlIGlQYWQNCkFwcGxlIGlQYWQNCg0KDQoNCg0KDQpTdGFy

dCBkZSB0ZWxlY29tY2hlY2sgwrsNCg0KDQpEdXVydCAxIG1pbnV1dCDCtyBncmF0aXMgwrcgZ2Vo

ZWVsIHZyaWpibGlqdmVuZA0KDQoNCg0KVSBvbnR2YW5ndCBkZXplIGUtbWFpbCBhbHMgemFrZWxp

amtlIHJlbGF0aWUgZGllIGludGVyZXNzZSB0b29uZGUgaW4gIA0Ka29zdGVuYmVzcGFyaW5nLiBD

YXNoYmFjayBlbiBhY3RpZXZvb3J3YWFyZGVuIHppam4gYWZoYW5rZWxpamsgdmFuIHV3ICANCnNp

dHVhdGllIGVuIGRlIGRlZWxuZW1lbmRlIGFhbmJpZWRlcnMuDQoNCkFmbWVsZGVuDQoNCg0KDQoN

Cg==

--0000000000009b462f065c24c411

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable








schemas-microsoft-com:office:office">









Zakelijke telecom-cashback






=3D"0" border=3D"0" style=3D"background:#0b1f3a;">






"0" border=3D"0" style=3D"width:600px;max-width:600px;font-family:Arial,Hel=

vetica,sans-serif;background:#ffffff;border-radius:16px;overflow:hidden;">












































1).png" alt=3D"Nationaal Telecom Onderzoek" width=3D"240" style=3D"display:=

block;width:240px;max-width:70%;height:auto;border:0;">




ze:12px;font-weight:bold;padding:6px 12px;border-radius:999px;">ZAKELIJK TE=

LECOM ONDERZOEK



a;font-weight:800;">Tot €500 cashback op uw zakelijke telecom — =

betaalt u te veel?







Veel ondernemers zitten al jaren vast aan hetzelfde telecomcontract en beta=

len honderden euro’s per jaar te veel. Doe mee aan het onderzoek en u=

ziet in 1 minuut of uw bedrijf recht heeft op tot €500 teleco=

m-cashback
. Als deelnemer maakt u bovendien kans op een mooie prij=

s.






;letter-spacing:.5px;">MAAK KANS OP:




=3D"0" border=3D"0">
















laxy-watch-7.webp" alt=3D"Samsung Galaxy Watch7" width=3D"90" style=3D"disp=

lay:block;width:90px;max-width:100%;height:auto;border:0;margin:0 auto 8px =

auto;">

Galaxy=

Watch7










n-5-slim.webp" alt=3D"PlayStation 5 Slim" width=3D"90" style=3D"display:blo=

ck;width:90px;max-width:100%;height:auto;border:0;margin:0 auto 8px auto;">

PlaySt=

ation 5










.webp" alt=3D"Apple iPad" width=3D"90" style=3D"display:block;width:90px;ma=

x-width:100%;height:auto;border:0;margin:0 auto 8px auto;">

Apple =

iPad














ground:#123a7a;border-radius:10px;color:#ffffff;display:block;max-width:460=

px;font-size:17px;font-weight:bold;line-height:20px;padding:17px 24px;text-=

align:center;text-decoration:none;box-sizing:border-box;margin:0 auto;">Sta=

rt de telecomcheck »






Duurt 1 minuut ·=

gratis · geheel vrijblijvend







U ontvangt deze e-mail als zakelijke relatie die interesse toonde in kosten=

besparing. Cashback en actievoorwaarden zijn afhankelijk van uw situatie en=

de deelnemende aanbieders.




r:#8a929b;text-decoration:underline;">Afmelden















height=3D"1" alt=3D"">

--0000000000009b462f065c24c411--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Mya-00000000PI3-0F5O

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:32 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f72.google.com ([209.85.219.72]:46308)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9K7u-00000000LiW-3o8p

for doctor@nk.ca;

Wed, 23 Sep 2026 04:23:07 -0600

Received: by mail-qv1-f72.google.com with SMTP id 6a1803df08f44-91213a1aa68so11282936d6.0

for ; Wed, 23 Sep 2026 03:22:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=hou.edu.vn; s=google; t=1790158924; x=1790763724; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=ILTsLtZlwNaWR50mXDlXiwY8uijCht65QsSROliqG5Q=;

b=g+/j+1EWd8fmTWcBBilegSoS/Xp0KfTD3AR3rpl308fYQgFxd/mQUEKxGmeSZ9VxmE

bma97uHcI8ibE1w8auhXapAD2O2d8gRKj+i/2SnwBYjWiL9WM3i5NED/NMA38ZF5C7Lt

lHys/k8t2gm2pkgxJJWtfb+Qb4G3hE/1C7awA=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790158924; x=1790763724;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=ILTsLtZlwNaWR50mXDlXiwY8uijCht65QsSROliqG5Q=;

b=Ni2cX80MipIE8uKJ5P5ziCUUHExp6RJHd0bJytO4BmiVeARCX0BufYSMeq1P/yWcDI

uS4J1/kklMGg+3asWZZSsrwedXRxIB+5iDeRAqlHTYjP7GRR1S4abgEjsbda0Yl4WZ4b

q19sl+3W+wFEv/uithTDhBfiRfRRo9dx3+okiIXULuXgYYK3hTtvUtK+mjv/XlC4i/+0

3frakktbth1IxAogK1H4x/GLi87kc7Hew/0YHrapgWvZ2uyRMAK/ZBanIEtP64V8ypnp

LLNv2n4Ht2bOcpeOSmrpwqGVUVzP0fUMgVfZhgALxbCUIfOFNAAv0fOTNuczqRtOtnlM

zWhA==

X-Gm-Message-State: AFuF++nYQg7gAQ1rNjoBYXSEx4sO1retpOXE3vrCGXcyiD5USEzxWGy/

OktpeyPkRdXoRR1uci/tZ3DqCHoizlSYw0mIOgmJN33XXkxHR4UM8m39eCogOWoxcD7gy1rqhgo

B72XYqwpT/vF5XwSLSpj2wz1I7zvMp0vQ6aUr3nhuxYUIF588lGF0g/Rr64JSisWB9Lt18DGGwG

j+sQWAuOO9sfWJnJOv5HM5yQtkI6kH+vAcQnLUxS9zpg==

MIME-Version: 1.0

X-Received: by 2002:ac8:7fc1:0:b0:532:d18f:bd57 with SMTP id

d75a77b69052e-532eabdd4b6mr36759731cf.18.1790158923816; Wed, 23 Sep 2026

03:22:03 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 10:22:03 +0000

Subject: Laatste kans: jouw gemeente zit bijna vol

From: Lisa van EnergieCheck

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000bef424065c23da4e"

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ⏳ Laatste kans – jouw gemeente zit bijna vol Steeds meer

huishoudens stappen over. Is er nog plek in jouw gemeente? Hoi, ik ben Lisa.

Veel mensen betalen nog altijd te veel voor stroom en gas, gewoon omdat overstappen

als gedoe voelt. Dat hoeft niet: met de gratis EnergieCheck zie je in een

minuut of jij goedkoper [...]



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.72 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.72 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.72 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.1 TW_IK BODY: Odd Letter Triples with IK

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Laatste kans: jouw gemeente zit bijna vol



--000000000000bef424065c23da4e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



4o+zIExhYXRzdGUga2FucyDigJMgam91dyBnZW1lZW50ZSB6aXQgYmlqbmEgdm9sDQoNCg0KDQpT

dGVlZHMgbWVlciBodWlzaG91ZGVucyBzdGFwcGVuIG92ZXIuIElzIGVyIG5vZyBwbGVrIGluIGpv

dXcgZ2VtZWVudGU/DQoNCg0KDQpIb2ksIGlrIGJlbiBMaXNhLiBWZWVsIG1lbnNlbiBiZXRhbGVu

IG5vZyBhbHRpamQgdGUgdmVlbCB2b29yIHN0cm9vbSBlbiAgDQpnYXMsIGdld29vbiBvbWRhdCBv

dmVyc3RhcHBlbiBhbHMgZ2Vkb2Ugdm9lbHQuIERhdCBob2VmdCBuaWV0OiBtZXQgZGUgIA0KZ3Jh

dGlzIEVuZXJnaWVDaGVjayB6aWUgamUgaW4gZWVuIG1pbnV1dCBvZiBqaWogZ29lZGtvcGVyIHVp

dCBiZW50IOKAkyB6b25kZXIgIA0Kb3ZlcnN0YXBzdHJlc3MuDQoNCg0KDQoNCg0KMS4gVnVsIGpl

IHBvc3Rjb2RlIGVuIGh1aWRpZ2Ugc2l0dWF0aWUgaW4NCg0KMi4gSmUgemlldCBkaXJlY3QgamUg

bW9nZWxpamtlIGJlc3BhcmluZyBwZXIgbWFhbmQNCg0KMy4gV2lqIHJlZ2VsZW4gZGUgb3ZlcnN0

YXAg4oCTIGppaiBkb2V0IG5pZXRzIGV4dHJhJ3MNCg0KDQoNCg0KDQpQZXIgZ2VtZWVudGUgaXMg

ZXIgZWVuIGJlcGVya3QgYWFudGFsIHBsZWtrZW4gYmlqIG9uemUgc2NoZXJwc3RlIHRhcmlldmVu

LiAgDQpaaXQgamlqIG5vZyB2YXN0IGFhbiBlZW4gZHV1ciBjb250cmFjdD8gQ2hlY2sgaGV0IG51

IGhldCBub2cga2FuLg0KDQoNCg0KDQpDaGVjayBtaWpuIGJlc3BhcmluZyDihpINCg0KDQoNCg0K

U2xpbSBiZXNwYXJlbiwNCkxpc2EgdmFuIEVuZXJnaWVDaGVjaw0KDQoNCg0KQmVzcGFyaW5nZW4g

emlqbiBpbmRpY2F0aWVmIGVuIGFmaGFua2VsaWprIHZhbiBqZSB2ZXJicnVpaywgaHVpZGlnZSAg

DQpjb250cmFjdCBlbiBiZXNjaGlrYmFyZSB0YXJpZXZlbi4gRGUgRW5lcmdpZUNoZWNrIGlzIGdy

YXRpcyBlbiB2cmlqYmxpanZlbmQuDQpBZm1lbGRlbg0KDQoNCg0KDQo=

--000000000000bef424065c23da4e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background-color:#eef2f3;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:100%;max-width:600px;background-color=

:#ffffff;font-family:'Segoe UI',Arial,Helvetica,sans-serif;">




















































fff;font-weight:700;text-align:center;letter-spacing:0.5px;">⏳ Laatst=

e kans – jouw gemeente zit bijna vol






3039;font-weight:800;">Steeds meer huishoudens stappen over. Is er nog plek=

in jouw gemeente?






54b;">Hoi, ik ben Lisa. Veel mensen betalen nog altijd te veel voor stroom =

en gas, gewoon omdat overstappen als gedoe voelt. Dat hoeft niet: met de gr=

atis EnergieCheck zie je in een minuut of jij goedkoper uit bent –
trong>zonder overstapstress.






ellspacing=3D"0" border=3D"0" style=3D"background-color:#f3f7f8;border-radi=

us:10px;">










px;color:#123039;">1.=

  Vul je postcode en huidige situatie in




px;color:#123039;">2.=

  Je ziet direct je mogelijke besparing per maand




r:#123039;">3.  =

Wij regelen de overstap – jij doet niets extra’s








a60;">Per gemeente is er een beperkt aantal plekken bij onze scherpste tari=

even. Zit jij nog vast aan een duur contract? Check het nu het nog kan.






" border=3D"0">




">


target=3D"_blank" style=3D"display:block;padding:16px 44px;font-family:'Seg=

oe UI',Arial,sans-serif;font-size:19px;font-weight:800;color:#ffffff;text-d=

ecoration:none;">Check mijn besparing →







a90;">Slim besparen,
Lisa van EnergieCheck






0a5;text-align:center;">Besparingen zijn indicatief en afhankelijk van je v=

erbruik, huidige contract en beschikbare tarieven. De EnergieCheck is grati=

s en vrijblijvend.

5df2" style=3D"color:#93a0a5;text-decoration:underline;">Afmelden










ght=3D"1" alt=3D"">

--000000000000bef424065c23da4e--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:25:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MyS-00000000Ow9-1V5I

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:24 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f72.google.com ([209.85.210.72]:56715)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9JfL-00000000Ifu-0Ig2

for doctor@nk.ca;

Wed, 23 Sep 2026 03:53:35 -0600

Received: by mail-ot1-f72.google.com with SMTP id 46e09a7af769-7f4f0a1f4f2so1403738a34.1

for ; Wed, 23 Sep 2026 02:52:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=insjonqueres-cat.20251104.gappssmtp.com; s=20251104; t=1790157152; x=1790761952; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=KKc8Z3P/0dkCvlbIEWzWgRLrkTCKH0LKjm5asiGOawg=;

b=JDRTQoUBRbn19sFY6BqQEIqJQosRS3NYespPsLtINdPSW4d/N1M3LTIy5z6B7IY97e

PMG0fWmAn6N0Kno4wzW6wUDIdXKKTnxJBD95PWlFz0W0Ah6dRKiPWxXiem0XwUjekDI9

QL9jhloytP74ypKAJVOf6ZL4U2tg8QJpIyF9+iPelx9aPUseXCO8/Qyn5Dkt+lgCgf3y

EIzL/1gb3rbaw7mvwvf89IVHzf74HilnT9bXcn9bCgPx+/H9TBgqolX4FUDIV6qb1PPx

ijxTR93U/rktEvfkYht1PPol7HhW9zzuNcPlweuuWkxzMrEbAAJc/vps2EHY/FjfE8dv

9u1Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790157152; x=1790761952;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=KKc8Z3P/0dkCvlbIEWzWgRLrkTCKH0LKjm5asiGOawg=;

b=qu7ktaceAyk3r/+zSK/wTRYbCMQIbct9fpVeUWyaYv5EBBQiWKtGo7CtYYor4QgRkT

kxCoXhc85WSCqEukiOoXEkHk5FXGwW3NZgHls/UiPge8NUimS5AB8u7k7Ytxo67Bl9++

0qSGgqBlp+gW1WOdqYNV9Ix2tCFgdW4/4y9EzK0Db/bFInyIau1aUEjgHNGH2VtrhOa6

0B5Qj4/JrACvSQdGsQnUGQ0Vl4N8kOi5E7ROSptFyozPRGVXUV6v+1xgABRMaJxjcGyI

q1KbR7nG2bXBt5kqdnvfYo8LGdUFcM0FP+w7shLf1eQLYMMmM86o2aCsM70HvfQ4YaXD

OVBQ==

X-Gm-Message-State: AFuF++lS9XK1ayvQ6QMpQP8tM/dtPdXJmCWdFcBpMkJpCyoH38mVumxm

CLq6Z/Wu+RbAuR8q9sZm1BwS2chndKaDhrs+XymTlxq93qUmDvI9hZ9/4o/0uRSSF2EXMJVbwiV

xtU8bwpMWwuZflMQmFNjDuQb9

MIME-Version: 1.0

X-Received: by 2002:a05:6820:208d:b0:6b7:83d6:2939 with SMTP id

006d021491bc7-6d2d262298amr1852404eaf.60.1790157151819; Wed, 23 Sep 2026

02:52:31 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 09:52:31 +0000

Subject: Saldering wordt afgebouwd: check nu of u zonder investering kunt starten

From: Landelijk Energieopslag Loket

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000002064cd065c2371d9"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Landelijk Energieopslag Loket âš Salderingsregeling wordt

vanaf 2027 afgebouwd Thuisbatterij voor opslag van zonne-energie



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

[209.85.210.72 listed in dnsbl.ahbl.org]

[209.85.210.72 listed in dnsbl.ahbl.org]

[209.85.210.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.72 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.72 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.72 listed in wl.mailspike.net]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: businesssnap.xyz (xyz)]

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_NK BODY: Odd Letter Triples with NK

0.1 TW_UW BODY: Odd Letter Triples with UW

0.1 TW_IK BODY: Odd Letter Triples with IK

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_JW BODY: Odd Letter Triples with JW

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Saldering wordt afgebouwd: check nu of u zonder investering kunt starten



--0000000000002064cd065c2371d9

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TGFuZGVsaWprIEVuZXJnaWVvcHNsYWcgTG9rZXQNCg0KDQrimqAgU2FsZGVyaW5nc3JlZ2VsaW5n

IHdvcmR0IHZhbmFmIDIwMjcgYWZnZWJvdXdkDQoNCg0KVGh1aXNiYXR0ZXJpaiB2b29yIG9wc2xh

ZyB2YW4gem9ubmUtZW5lcmdpZQ0KDQoNClNhbGRlcmluZyBzdG9wdCDigJQgem8gaG91ZHQgdSB0

w7NjaCB1dyB6b25uZXN0cm9vbQ0KDQpWb29yIGVsa2Uga1doIGRpZSB1dyBwYW5lbGVuIG92ZXJk

YWcgdGVydWdnZXZlbiwga3Jpamd0IHUgc3Ryw6FrcyBzdGVlZHMgIA0KbWluZGVyIHRlcnVnIOKA

lCB0ZXJ3aWpsIHUgJ3MgYXZvbmRzIG5vZyBkZSB2b2xsZSBwcmlqcyBiZXRhYWx0LiBXaWUgbmll

dHMgIA0KZG9ldCwgZ2VlZnQgaG9uZGVyZGVuIGV1cm8ncyBhYW4gem9ubmVzdHJvb20gdnJpandl

bCBncmF0aXMgd2VnLiBEZSAgDQpvcGxvc3Npbmc6IHNsYSB1dyBlaWdlbiBzdHJvb20gb3AgaW4g

ZWVuIHRodWlzYmF0dGVyaWouDQoNCg0KDQoNCuKckyBHZWJydWlrICdzIGF2b25kcyB1dyBlaWdl

biB6b25uZXN0cm9vbSBpbiBwbGFhdHMgdmFuIGR1cmUgbmV0c3Ryb29tDQoNCuKckyBHZWVuIGFh

bnNjaGFma29zdGVuIHZvb3JhZiB2aWEgZGUgbmlldXdlIGdlbWVlbnRlbGlqa2UgcmVnZWxpbmcN

Cg0K4pyTIEJpaiBzdHJvb211aXR2YWwgYmxpanZlbiB2ZXJsaWNodGluZyBlbiB3aWZpIHdlcmtl

biBkYW5remlqIHV3IGJhY2stdXANCg0K4pyTIEJlcGVya3QgYWFudGFsIHBsZWtrZW4gcGVyIGdl

bWVlbnRlIOKAlCBvcCB2b2xnb3JkZSB2YW4gYWFubWVsZGluZw0KDQoNCg0KDQoNCkNoZWNrIGJl

c2NoaWtiYWFyaGVpZCBpbiB1dyBwb3N0Y29kZSDihpINCg0KDQoNCg0KVnJpamJsaWp2ZW5kIMK3

IDIgbWludXRlbiDCtyBnZWVuIHZlcnBsaWNodGluZ2VuDQoNCg0KDQpCZXNjaGlrYmFhcmhlaWQs

IHZvb3J3YWFyZGVuIGVuIHBsYW5uaW5nIHZlcnNjaGlsbGVuIHBlciBnZW1lZW50ZS4gQWFuIGRl

emUgIA0KZS1tYWlsIGt1bm5lbiBnZWVuIHJlY2h0ZW4gd29yZGVuIG9udGxlZW5kLiBVIG9udHZh

bmd0IGRpdCBiZXJpY2h0IG9tZGF0IHUgIA0KemljaCB2aWEgZWVuIHZhbiBvbnplIHBhcnRuZXJz

IGhlZWZ0IGFhbmdlbWVsZC4NCkFmbWVsZGVuDQoNCg0KDQoNCg==

--0000000000002064cd065c2371d9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background:#eef3ee;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:600px;max-width:600px;background:#fff=

fff;font-family:Arial,Helvetica,sans-serif;border-radius:10px;overflow:hidd=

en;">




















































m/lel-logo-768x58-1.png" alt=3D"Landelijk Energieopslag Loket" width=3D"230=

" style=3D"display:block;max-width:100%;height:auto;border:0;">


px;">


ter-spacing:0.5px;">⚠ Salderingsregeling wordt vanaf 2027 afgebouwd
div>




m/lel-image.jpg" alt=3D"Thuisbatterij voor opslag van zonne-energie" width=

=3D"600" style=3D"display:block;width:100%;max-width:600px;height:auto;bord=

er:0;">




3a1e;font-weight:bold;">Saldering stopt — zo houdt u tóch uw z=

onnestroom




olor:#3c4a3f;">Voor elke kWh die uw panelen overdag teruggeven, krijgt u st=

ráks steeds minder terug — terwijl u 's avonds nog de volle pr=

ijs betaalt. Wie niets doet, geeft honderden euro's aan zonnestroom vrijwel=

gratis weg. De oplossing: sla uw eigen stroom op in een thuisbatte=

rij
.






ellspacing=3D"0" border=3D"0">










ine-height:1.5;">
span>  Gebruik 's avonds uw eigen zonnestroom in plaats van dure =

netstroom

ine-height:1.5;">
span>  Geen aanschafkosten vooraf via de nieuwe =

gemeentelijke regeling

ine-height:1.5;">
span>  Bij stroomuitval blijven verlichting en wifi werken dankzi=

j uw back-up

ine-height:1.5;">
span>  Beperkt aantal plekken per gemeente — op volgorde va=

n aanmelding





" border=3D"0">








dius:6px;">


629" style=3D"display:inline-block;padding:16px 34px;font-family:Arial,Helv=

etica,sans-serif;font-size:16px;font-weight:bold;color:#ffffff;text-decorat=

ion:none;border-radius:6px;">Check beschikbaarheid in uw postcode →
>





Vrijblijven=

d · 2 minuten · geen verplichtingen




f2ee;">


9e;">Beschikbaarheid, voorwaarden en planning verschillen per gemeente. Aan=

deze e-mail kunnen geen rechten worden ontleend. U ontvangt dit bericht om=

dat u zich via een van onze partners heeft aangemeld.

/businesssnap.xyz/t/u/885829da110f9470b629" style=3D"color:#9aa69e;text-dec=

oration:underline;">Afmelden










height=3D"1" alt=3D"">

--0000000000002064cd065c2371d9--

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:25:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MyK-00000000OYR-0znn

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:16 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out21-137.dm.aliyun.com ([115.124.21.137]:40237)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9J9n-00000000FGj-2lga

for root@nk.ca;

Wed, 23 Sep 2026 03:21:04 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.cinclinepower.ltd:alibabak_WebBatch:483342

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.cinclinepower.ltd; s=aliyun-cn-hangzhou;

t=1790155193; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=5V2JnyW85OO3RZ4Hh+5wdnjL0VQhxq4EGwz/k3fswZA=;

b=ApDnX3to/Pxq2qk1FgK9ASIclt8Y5gZXDrXerTWjDZS6bbPknAzWR4c5pxn9kmeOSjssBTFLuXhna8GflRi4BLz8R/RHeyA0S6l3afcJHNt3dUh3M53i2DtlwWaCCe/fSArr/OsVWNbK4tK3uLTNKUD7Yg6u449Hc3KgA11WdFU=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1790155193; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=5V2JnyW85OO3RZ4Hh+5wdnjL0VQhxq4EGwz/k3fswZA=;

b=FTplwNGAf2f478ILNosLKOj2R3xtXdGo9VRQY+5kNtpW7gBQSK93uJeAa8iKA6yK4SPI7Gty7+kWlViSIHMaIVQ2momEoDEX9DVSQ1hujGdDunMg17Jhv+0ipMn+VDEZFw3OphcqdO8VnkQL6QjvJBDl1pNAZFPQZDe5XLWW9oY=

Received: from chitu-hsf(mailfrom:vip@vip.cinclinepower.ltd fp:ma_600000357339456587 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Wed, 23 Sep 2026 17:17:13 +0800

Date: Wed, 23 Sep 2026 17:17:13 +0800

From: "Yonit"

To:

Reply-To:

Message-ID: <2c21849d-7a3f-4d56-b40b-2c33e600d5ba@alibaba.com>

Subject: =?UTF-8?B?RWxlY3RyaWMgVHJhbnNmb3JtZXIgTWFudWZhY3R1cmluZyBTb2x1dGlvbnM=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000357339456588

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir or Madam, I am writing to introduce Qianchuan Electric

as a manufacturer of power and distribution transformers for international

markets.



Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

[115.124.21.137 listed in dnsbl.ahbl.org]

[115.124.21.137 listed in dnsbl.ahbl.org]

[115.124.21.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.124.21.137 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[115.124.21.137 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[115.124.21.137 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?RWxlY3RyaWMgVHJhbnNmb3JtZXIgTWFudWZhY3R1cmluZyBTb2x1dGlvbnM=?=



Dear Sir or Madam,

I =

am writing to introduce Qianchuan Electric as a manufacturer of power and dist=

ribution transformers for international markets.


>Qianchuan provides oil-immersed power transformers up to 220 kV, dry-type tra=

nsformers up to 110 kV, American-style transformers, prefabricated substations=

, and medium- and low-voltage switchgear. Our products are designed for applic=

ations including power transmission and distribution, renewable energy, indust=

rial facilities, substations, and new energy projects.


edEnd">Our approximately 69,000 m=C2=B2 production base is supported by 326 em=

ployees, including 69 R&D personnel, with dedicated manufacturing and test=

ing facilities. We have established a comprehensive quality and certification =

system and have obtained more than 100 qualifications, certifications, and rel=

ated technical credentials.

With integrated capa=

bilities covering product design, core processing, winding, assembly, testing,=

and quality control, Qianchuan can support both standard products and project=

-specific technical requirements. We also have experience supplying power equi=

pment to international markets and working with different project specificatio=

ns and standards.

If your company is sourcing el=

ectric transformers or evaluating new manufacturing partners, we would be plea=

sed to learn about your current product requirements and discuss suitable tran=

sformer solutions.

Best regards,

Yonit

>Qianchuan Electric


ransformer-Manufacturing.jpg" _src=3D"https://i.postimg.cc/4JtQ26S8/Electric-T=

ransformer-Manufacturing.jpg" referrerpolicy=3D"no-referrer"/>



Bitcoin phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:25:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9My5-00000000Ntx-3D9m

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:01 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cpanel07wh.bkk1.cloud.z.com ([163.44.198.52]:48355)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9HyG-000000006gy-1yxd

for root@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 02:05:00 -0600

Received: from [127.0.0.1] (port=48789 helo=i-tree.co.th)

by cpanel07wh.bkk1.cloud.z.com with esmtp (Exim 4.96.2)

(envelope-from )

id 1x9HwO-002mn4-1p

for root@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 15:02:56 +0700

MIME-Version: 1.0

Date: Wed, 23 Sep 2026 15:02:55 +0700

From: Bit Fore

Subject: Your Portfolio

X-Priority: 1

X-MSMail-Priority: High

Importance: High

X-Mailer: MailChimp Mailer

Message-Id:

Content-Type: multipart/alternative; boundary="Part-056811-2535692974141613131"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - cpanel07wh.bkk1.cloud.z.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - i-tree.co.th

X-Get-Message-Sender-Via: cpanel07wh.bkk1.cloud.z.com: mailgid no entry from get_recent_authed_mail_ips_entry

X-Authenticated-Sender: cpanel07wh.bkk1.cloud.z.com:

X-From-Rewrite: unmodified, no actual sender determined from check mail permissions

X-Spam_score: 29.1

X-Spam_score_int: 291

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Shawn,Your investment has been successfully processed.

Your portfolio currently holds 26.2 Bitcoin as requested on www.gullcoin.netHere

are your Access Codes:Customer ID: cte3018Password: pd8049P [...]



Content analysis details: (29.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

[163.44.198.52 listed in dnsbl.ahbl.org]

[163.44.198.52 listed in dnsbl.ahbl.org]

[163.44.198.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: gullcoin.net]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[163.44.198.52 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[163.44.198.52 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

15 GR_DOMAIN_CHIMP1 X-Mailer spammer tool signature (monkey)

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_54 BODY: 5alpha-pock-4alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

2.5 BITCOIN_XPRIO Bitcoin + priority

2.5 AC_FROM_MANY_DOTS Multiple periods in From user name

Subject: {SPAM?} Your Portfolio



--Part-056811-2535692974141613131

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Dear Shawn,Your investment has been successfully processed. Your portfolio =

currently holds 26.2 Bitcoin as requested on www.gullcoin.netHere are your =

Access Codes:Customer ID: cte3018Password: pd8049Please log in to confirm y=

our balance.Best regards,Portfolio Management



--Part-056811-2535692974141613131

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable















Dear Shawn,

Your investment has been successfully processed. Yo=

ur portfolio currently holds 26.2 Bitcoin as requested on

www.gullc=

oin.net

Here are your Access Codes:

Customer ID: cte3018
P=

assword: pd8049

Please log in to confirm your balance.

Best r=

egards,
Portfolio Management










--Part-056811-2535692974141613131--



Customer negative feedback phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 17:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9A4X-000000004sX-42L3

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 17:38:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 17:38:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-253-214-77.smtp-out.sparkpostmail.com ([147.253.214.77]:3089)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x97Zy-000000006zf-2EpE

for sales@nk.ca;

Tue, 22 Sep 2026 14:59:15 -0600

X-MSFBL: gEFcuK6E9LC2Hx8s0LGSUNDe5a90/2YQ9UNNAXZMIBY=|eyJyIjoic2FsZXNAbms

uY2EiLCJ0ZW5hbnRfaWQiOiJzcGMiLCJzdWJhY2NvdW50X2lkIjoiMjIzODkiLCJ

jdXN0b21lcl9pZCI6IjQ1ODAzOCIsIm1lc3NhZ2VfaWQiOiI2YWIzZTVlYmIyNmE

xOWU5NTg3NyJ9

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gramadoviagem.com.br; s=bird-889-0926; t=1790110693;

i=@gramadoviagem.com.br;

bh=v/k4A9gCNThW7hEg5FQWq7clcB6kq7KKeof81KOXUMQ=;

h=To:Content-Type:Date:From:Subject:Message-Id:From:To:Cc:Subject:

Feedback-Id;

b=QnGgMWAOoldJvQ/hZDfjqdlMZ1B1AkuQTRGKdXx3+2QKJvlMCa2gT6kSFzgN6phC2

JTKevMF0efUAhQXgvOA80/Yk/l9ZAL115Y9l1JC7rqRMLy7hnQNB/glZPCA0a3LPpQ

FbBV5bXi+d9lOuZjtc//Kn1dEpt/ZO9s90KQWa9XJ2q9Xsr0/rkQxVfAeNMA4KMokB

dOLvzgh1rjOvtuYOIFrvtsvuT55d3W76RUSX7hTogqCvEjMjmcRhB8qVcNhM431EDU

Y078V4Erjzx/Zp27oUWXYETME2yQhbmK+ngwFgUFlqW6x5v5HOdDFWf+ctK1dgbqvN

F13TR2Z1Y2WNg==

Received: from [10.90.29.137] ([10.90.29.137])

by i-0505b2d270d2200a3.mta1vrest.sd.prd.sparkpost (ecelerity 5.3.0.76429 r(msys-ecelerity:tags/5.3.0.18)) with REST

id 77/8D-02855-5EBE2BA6; Tue, 22 Sep 2026 20:58:13 +0000

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6"

MIME-Version: 1.0

Date: Tue, 22 Sep 2026 20:58:12 +0000

From: "QBO Team"

Subject: A Client Has Raised Concerns About Their Experience

Message-Id: <9cea9a7c-418c-7506-d2a6-9bbe84426fb5@gramadoviagem.com.br>

X-Spam_score: 25.1

X-Spam_score_int: 251

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your customer just left negative feedback Hello, A customer

left negative feedback about your business. They mentioned wait time and

service quality.



Content analysis details: (25.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

[147.253.214.77 listed in dnsbl.ahbl.org]

[147.253.214.77 listed in dnsbl.ahbl.org]

[147.253.214.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: dogwooddvmswwa.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SPARKP1 Received contains spammer id (sparkp)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[147.253.214.77 listed in bl.score.senderscore.com]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} A Client Has Raised Concerns About Their Experience



--_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset="UTF-8"



Your customer just left negative feedback



Hello,



A customer left negative feedback about your business. They mentioned wait time and service quality.



Sign in to QuickBooks to read the feedback and respond ( https://dogwooddvmswwa.com/iioni )



Thank you,

Intuit QuickBooks Team

--_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"







































































Intuit QuickBooks




































 






































Your customer just left negative feedback


































 


Hello,




A customer left negative feedback about your business. They mentioned wait time and service quality.





Sign in to QuickBooks to read the feedback and respond





Thank you,


Intuit QuickBooks Team










 







--_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6--



Etihad vendor registration spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 14:05:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x96jc-000000001Xh-2wRy

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 14:05:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 14:05:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f103.google.com ([209.85.128.103]:49327)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x93nV-00000000A3T-2whF

for root@nk.ca;

Tue, 22 Sep 2026 10:56:58 -0600

Received: by mail-wm1-f103.google.com with SMTP id 5b1f17b1804b1-49e62c717e6so14015685e9.2

for ; Tue, 22 Sep 2026 09:56:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kashkeesh.com; s=google; t=1790096154; x=1790700954; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=YTx6dcGd2G9Q5XLoV3eu85JeLujjHDA17uaS+JWFiSo=;

b=i8aUNdM+25ePxLmjNU/lIkUjtjlIHrt4usUXFZTNZfeOVMCzXq5XPQTz3guf/5VjjY

2ZDaxv1mpffkze9HJGZBBOhfCDe5r23bXDogHMV8QHs+3QMxDY92uvlncXYqcZSns05h

X4+9OucauLZ8SlkPXoLMNg7cRSqoUqFCsL9bQs3lWhPbKNa1E0tauB4PsB8ozSqKllfP

r9J9vTzLwKiL8AEUBTp/an+VsZYnGgHCic7TZRf+tDiauOU8QaAQBMlZOel1oHCPCLjf

t98kKBH8T/5YJFMybpFWcJidJWe/Dej+e9PBQ45mdFLKIy0nktvkqQy0TDb7B/giwrMc

1W5Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790096154; x=1790700954;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=YTx6dcGd2G9Q5XLoV3eu85JeLujjHDA17uaS+JWFiSo=;

b=OzkPn7Z2NQThd3DlxDBvkkJr66Usvpr7u4HabLFcCRzPLVpX5ci9AeUTtvFEcIYXvz

vKdkZVdFA/f+PFbt1OAqbr+74dyi2FAYQ/pcfZ42y3O4EkAeKwmdFUaEKjPeToejR4Sh

QuAl1Exf/NVAbWi4dxrfhRviOAb69XmFokw/LRXa1V0a9yTXH/MrKxVVaQ/morxDS8lE

wohExlyCLfyxN5uc2LgtogVzPx9x3lpmneszukU+24hCPSDmIrYKsxsDgcES1N4GzlCF

ORfCHHt1xr8nsVNO7e1Zk202PW/Ot9CRupr3cSmNIlvgEoeC9q8XxNRDjTbayCSECLpm

mI1w==

X-Gm-Message-State: AFuF++l7tt2Met0806zBb4NPYJx73D6XLUSS+zSxwJUzRyulWfl99uGS

T+kPjtg0/puqxixVREYu4eDSo6oH68s+OxXt3qi1uE5+SnVzlhr7AM5umtXFbQsJomrp9fBniBt

s02TvlhkJOm/un8QzCK0Dq+y3cL4PAUPNw1NXQoVbJ/AjZE4=

X-Gm-Gg: AYBFou2kIY7ml1tytJRzztVu4iTZxx5SvulCCvOxNhxT8PG4bxBD/plUZH9eZXC3GXN

06Ent6KtucGpoa7q2OgZTizNTgwFBu+SI41Ytn5nAYPrvPohS2fWUw6p2L8Y754XZQ0qpmqdgft

SDCveUyf2l3CKdpXeGPI4mZAIMAaf7rdXukwLpBHsK3U2G+DjJ1Dchqdvt0qKIN2JNrt0vHs6hF

NziXGHp0u75Jb6CZS6QWkb8pJWbENPQV5MBOimI3iW9ri6WeXDLEFcbM4TZOGOL3r8AJvwu/BM3

tG2lgJnGAPXQ4udLQ025wuYkFwYyzCc20qswL16g9U8MX2Xbw9J2YTplk1mtnkMnsVToK5WEUX+

DDhPgt+OY

X-Received: by 2002:a05:600c:c1c8:10b0:49e:81a7:9fbc with SMTP id 5b1f17b1804b1-49fc574aacbmr152445755e9.24.1790096154265;

Tue, 22 Sep 2026 09:55:54 -0700 (PDT)

Received: from kashkeesh.com ([77.83.39.2])

by smtp-relay.gmail.com with ESMTPS id 5b1f17b1804b1-49fde13bbc4sm642385e9.16.2026.09.22.09.55.54

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 22 Sep 2026 09:55:54 -0700 (PDT)

X-Relaying-Domain: kashkeesh.com

Reply-To: registrations@etihadaviation-ae.com

From: ''Etihad Aviation Group PJSC''

To: root@nk.ca

Subject: Invitation: Etihad Vendor Registration Program

Date: 22 Sep 2026 09:55:54 -0700

Message-ID: <20260922095554.57B7162FB0305B47@kashkeesh.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Etihad Aviation Group - Vendor Opportunity ✈️ Etihad

Aviation Group



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.103 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.103 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.103 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[77.83.39.2 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[77.83.39.2 listed in zen.spamhaus.org]

Subject: {SPAM?} Invitation: Etihad Vendor Registration Program












=3D1.0">

Etihad Aviation Group - Vendor Opportunity






padding: 0;

background-color: #f4f4f4;

font-family: Arial, Helvetica, sans-serif">




margin: 20px auto;

background-color: #ffffff;

border-radius: 8px;

box-shadow: 0 4px 12px rgba(0,0,0,0.1);

overflow: hidden" class=3D"email-container">






padding: 20px 30px;

text-align: center" class=3D"header">


font-size: 22px;

margin: 0;

font-weight: 300;

letter-spacing: 1px">✈️ Etihad Aviation Group

=










color: #333333;

line-height: 1.6" class=3D"content">






margin-bottom: 20px" class=3D"greeting">

Dear


=3D"0" style=3D"display:inline-block; vertical-align:middle;">








8px; border-radius:3px; font-weight:bold; color:#1a3c6e; font-size:15px;">

root

,







Unlock a world of opportun=

ity with Etihad Aviation Group.








We're inviting select companies to join our
=3D"color: #1a3c6e">Vendor Registration Program
— your gatew=

ay to future procurement and supply chain partnerships with a global aviati=

on leader.






border-left: 4px solid #1a3c6e;

padding: 15px 20px;

margin: 22px 0;

border-radius: 4px" class=3D"cta-box">



Interested? Simply reply to this email=

=2E We'll send you the Vendor Questionnaire and Ex=

pression of Interest (EOI)
forms to get started.









Let's explore how we can grow together. We look forward to =

hearing from you.








padding-top: 20px;

border-top: 1px solid #eaeaea" class=3D"signature">

Yours sincerely,




font-size: 16px;

color: #1a3c6e" class=3D"name">Engr. Ibrahim Khalid



color: #555" class=3D"title">Senior Vice President – Supp=

ly Chain Management



color: #555;

margin-top: 2px" class=3D"company">Etihad Aviation Group PJSC
div>


color: #888;

margin-top: 2px" class=3D"location">Dubai, United Arab Emirates=












background-color: #1a3c6e;

color: #ffffff;

padding: 12px 28px;

border-radius: 4px;

text-decoration: none;

font-weight: bold;

font-size: 15px;

margin-top: 5px" href=3D"mailto:registrations@etihadaviation-ae=

=2Ecom?subject=3DVendor%20Registration%20Interest%20-%20[{Email}]&body=

=3DDear%20Etihad%20Aviation%20Group%20Team%2C%0D%0A%0D%0AI%20am%20writing%2=

0to%20express%20our%20organization's%20interest%20in%20joining%20the%20Etih=

ad%20Aviation%20Group%20Vendor%20Registration%20Program.%0D%0A%0D%0APlease%=

20send%20us%20the%20Vendor%20Questionnaire%20and%20Expression%20of%20Intere=

st%20(EOI)%20documents%20for%20completion%20and%20review.%0D%0A%0D%0ACompan=

y%20Name%3A%20%0D%0AContact%20Person%3A%20%0D%0APhone%20Number%3A%20%0D%0AE=

mail%20Address%3A%20[{Email}]%0D%0A%0D%0AWe%20look%20forward%20to%20the%20o=

pportunity%20to%20work%20with%20your%20organization.%0D%0A%0D%0ABest%20rega=

rds%2C%0D%0A%5BYour%20Full%20Name%5D%0D%0A%5BYour%20Job%20Title%5D%0D%0A%5B=

Your%20Company%5D" class=3D"btn" target=3D"_blank">

�� Reply to Express Interest








13px; color: #888;">


; border-radius: 3px;">

⚡ Reply directly to: registrations@etihad=

aviation-ae.com















padding: 15px 30px;

text-align: center;

font-size: 12px;

color: #999;

border-top: 1px solid #eaeaea" class=3D"footer">

© 2026 Etihad Aviation Group PJSC • All rights reserv=

ed.




This message was sent to


=3D"0" style=3D"display:inline-block; vertical-align:middle;">








8px; border-radius:3px; font-weight:bold; color:#1a3c6e; font-size:11px;">

root



and contains confidential information.















Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 14:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x96jU-000000001W6-0162

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 14:04:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 14:04:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ns.dccomp.cz ([82.142.82.201]:40872 helo=server2.dccomp.cz)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x93bK-000000008ts-1VCx

for sales@nk.ca;

Tue, 22 Sep 2026 10:44:32 -0600

Received: from mailserver.dccomp.cz (unknown [10.10.11.25])

by server2.dccomp.cz (Postfix) with ESMTP id 0392E802536

for ; Tue, 22 Sep 2026 18:43:18 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.11.0 server2.dccomp.cz 0392E802536

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=stredniskoladrtinova.cz; s=default; t=1790095398;

bh=rqSeeQY2fGMU1mZgtnWFiMCZQDy+J/uELnYijc/QtkI=;

h=From:Date:Subject:To:Reply-To:From;

b=rzTUOcrGQsLZh7M9gWmPiuBvf+whjwiBwOGIB1gWwtHVPMVhi8LQ4aJbjVmFGcD3E

kHPZFgtHuM1UEDFVGrDW0/A3rwg7/v0CRkUsTKEiuffiRY0WM9Bd8+5SFTGr6780xv

ln+bHoy3s6+leZKk9aEkKeCApTl7qrvcwdrf7NnE=

Received: from 172 (unknown [172.93.220.36])

by mailserver.dccomp.cz (Postfix) with ESMTPSA id 786285C0071

for ; Tue, 22 Sep 2026 18:43:17 +0200 (CEST)

From: Richard Cooks

Date: Tue, 22 Sep 2026 18:43:17 +0200

Subject: Heritage Fund Correspondence

Message-Id:

Priority: urgent

To: sales@nk.ca

Reply-To: richardcooks02@gmail.com

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day: My name is Richards Cooks, and I am writing from

the United Kingdom in connection with financial matters relating to your

family heritage.



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

[172.93.220.36 listed in dnsbl.ahbl.org]

[172.93.220.36 listed in dnsbl.ahbl.org]

[172.93.220.36 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[172.93.220.36 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[82.142.82.201 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[richardcooks02(at)gmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Heritage Fund Correspondence



Good day:



My name is Richards Cooks, and I am writing from the United Kingdom in connection with financial matters relating to your family heritage.



To ensure that this correspondence is directed to the correct recipient, I kindly request that you confirm your full name together with your current residential address and contact information.



I would be grateful to receive your response at your earliest convenience.



Thank you in advance for your cooperation.



Yours sincerely,



Richards Cooks





Business networking spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 14:04:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x96j6-000000001TJ-1rsh

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 14:04:28 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 14:04:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f43.google.com ([74.125.227.171]:44447)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x92bb-000000003WQ-1h0D

for sales@nk.ca;

Tue, 22 Sep 2026 09:40:37 -0600

Received: by mail-pj2-f43.google.com with SMTP id 98e67ed59e1d1-39b2ad861b1so2284a91.1

for ; Tue, 22 Sep 2026 08:39:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=leadzenixb2b-com.20251104.gappssmtp.com; s=20251104; t=1790091573; x=1790696373; darn=nk.ca;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:in-reply-to

:references:to:from:return-receipt-to:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=b9015+12ZauRZKSSi3x1NglbwO/I6fsz/cyG60wmHyw=;

b=XeMfcRbRtGuCu/TSXv+i445tpvI/4jyMXvWPqoM8JMZanPe++nYQ0+QVH5deQgf8sh

TR11UmJzl2FRTWd9QdiEvjj0vqaAuxwXVItAAyd1yw9wiWvABJRaJJkh6cDJ4knDJCaQ

01hAS9DkVcFaAEr3I5O+rszLJQFND/BhRSQVYeqi6Eoz3ZnagMUW6FyVywfvhk9ZvzxZ

l+2uHBxZA/74qj5HK1nYQd+8G//kMDEKGeYDy8UfTi3hEWXU1g6ZjDx+IHK2rH7LjAa+

IvMdGvNd7kul21fcV+QIBYtbdCCrCqOuq7pAyFkgvHcK9WBz3OHbyJcjhP6/FwbSuUS2

v/yw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790091573; x=1790696373;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:in-reply-to

:references:to:from:return-receipt-to:x-gm-gg:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=b9015+12ZauRZKSSi3x1NglbwO/I6fsz/cyG60wmHyw=;

b=fZameJfv1e45Xon6D3kv/KuyTI8SZwbtqC2zkNzuCHMhAMZsZR8v6ETxXO0SAxqysx

pS3iZd307vSJ+WSiT8JhbgtceqPFQ2XqoBuV6dqn9ZfzP6t/K7UleUVDvjuL/DY0SJqz

xzIYPQysfiLRQp6gGm7JMcqG/jc8mYJmZxt35xpYRg0uyzeEKue+84jkac3HlhkrJenb

m8jmlXyYHAW3AZLAs9Inne8VbvW+EiQuvOQl7fsEMKxojgoQcsbKLS5oCIr/iKMeSRK5

fNDi8GGbKETe+T/FfFhM6CWWp96CavLKuZqhEIlle4o22KTtsw3MrmkJt3lt6UpGB9ON

WE9g==

X-Gm-Message-State: AFuF++nIYCFpgPGoy8qPwpsgwznHAzyFrdzhVrtGEXal5NweRX1TrweV

Iz/vOK9NZAdkxLvLWaZWmsJSHjn663hflItIPrlxeygj+vTx9U2x7csFyiYJHbxzNWK4Ey+EDhd

iedOzIQM=

X-Gm-Gg: AYBFou1W+Fi/pz8JXk+SafA8qtIhRYQdhRFTEiWL5KXPzlvxFI7i+L8JozffhCq2hCe

+K0DSw/iwIOnaFYiUb0pO23RXE0LNQgRAnhrQkN3aA6+9YnMx621iSqx46ARbaXBWczqKfu/GPq

Nf1d8XbAAePAbFBNFUUL1lk4dgBXZ6kqeyZhV3XyP+rAOm2pjCq0Qe9m7pjMRDeGPWuGxC6qfgE

EVx8hTkwdzU9uv06o2JH5GEwRf8W9JFMZIO+bqzcMnHjrKHHMeeIyd3qlfvCN6X1l9Hf+dTriyB

qDnwWxLlNDqBIEHfhzoa6T0EdbATnYtPsOQUxw13M97k++ukK/lmA89gWmeRGqioxm2EYONXB1I

AxfXRjHy8grlS0wjVEH6UHNHJUwnGJYd7Sb/pYMSnVQ/KPDX0aCSaWTGxEfLuoSTP/zMrnF1iqL

mXHOK5oSpvYV5CMBgZti/XWXS8AcbUJAzlRtW2DEABVWNjvD/U0ZKFHrwJHZHVd3Aem2MEJmO4z

KLquOIrNKw/kHdgUpAWQfl/+A==

X-Received: by 2002:a17:90b:570e:b0:3a0:60c0:7f8f with SMTP id 98e67ed59e1d1-3a072ea8b51mr2802426a91.0.1790091573322;

Tue, 22 Sep 2026 08:39:33 -0700 (PDT)

Received: from DESKTOP9OFI8GB ([49.207.135.0])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-33e6d73cd86sm92023eec.12.2026.09.22.08.39.31

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 22 Sep 2026 08:39:32 -0700 (PDT)

Return-Receipt-To: "Emily Parker"

From: "Emily Parker"

To:

References:

In-Reply-To:

Subject: RE: Reach Companies Using Hosting and CMS Technologies

Date: Tue, 22 Sep 2026 11:39:02 -0400

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_06D1_01DD4A87.0907CF10"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0PrNUVUUVelT7uSZCVxTIJqicpMg6+6G2w

Content-Language: en-gb

Disposition-Notification-To: "Emily Parker"



This is a multipart message in MIME format.



------=_NextPart_000_06D1_01DD4A87.0907CF10

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







Just following up to see if you had a chance to review my email below.







Looking forward to your response!







Regards,



Emily







From: Emily Parker

Sent: 09 July 2026 10:12 AM

To: 'sales@nk.ca'

Subject: Reach Companies Using Hosting and CMS Technologies







Hi, hope you're doing well!







Would you be interested in reaching Decision-makers at companies using

Hosting infrastructure and CMS technologies across the USA and Canada?







Technologies users included:



. cPanel



. Plesk



. WHMCS



. Cloud Linux



. LiteSpeed



. VMware



. WordPress



. Drupal



. Joomla and more







If this sounds useful, we can share details along with counts and rates

based on your target criteria.







Just let us know your preferred technology, geography, and job titles.







Please let me know your thoughts.







Best Regards,



Emily Parker | Business Development Executive



If you would like to no longer receive emails, reply "remove"





------=_NextPart_000_06D1_01DD4A87.0907CF10

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
link=3D"#0563C1" vlink=3D"#954F72" style=3D'word-wrap:break-word'>

class=3DWordSection1>


style=3D'font-size:11.0pt'>Hi,

style=3D'font-size:11.0pt;mso-ligatures:none'>


class=3DMsoNoSpacing>
style=3D'font-size:11.0pt'> 


class=3DMsoNoSpacing>Just following up =

to see if you had a chance to review my email =

below.


style=3D'font-size:11.0pt'> 


class=3DMsoNoSpacing>Looking forward to =

your response!


style=3D'font-size:11.0pt'> 


class=3DMsoNoSpacing>
style=3D'font-size:11.0pt'>Regards,


class=3DMsoNormal>Emily


class=3DMsoNormal> 


style=3D'border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm =

0cm 0cm'>


style=3D'mso-ligatures:none;mso-fareast-language:EN-GB'>From:
<=

span lang=3DEN-US =

style=3D'mso-ligatures:none;mso-fareast-language:EN-GB'> Emily Parker =

<emily.parker@leadzenixb2b.com>
Sent: 09 July 2026 =

10:12 AM
To: 'sales@nk.ca' =

<sales@nk.ca>
Subject: Reach Companies Using Hosting and =

CMS Technologies


class=3DMsoNormal> 


style=3D'color:black'>Hi, hope you’re doing well! =


style=3D'color:black'> 


class=3DMsoNormal>Would you be interested in =

reaching Decision-makers at companies using Hosting infrastructure =

and CMS technologies across the USA and =

Canada?


style=3D'color:black'> 


class=3DMsoNormal>Technologies users =

included:


style=3D'color:black'>·       &=

nbsp; cPanel


style=3D'color:black'>·       &=

nbsp; Plesk


style=3D'color:black'>·       &=

nbsp; WHMCS


style=3D'color:black'>·       &=

nbsp; Cloud Linux


style=3D'color:black'>·       &=

nbsp; LiteSpeed


style=3D'color:black'>·       &=

nbsp; VMware


style=3D'color:black'>·       &=

nbsp; WordPress


style=3D'color:black'>·       &=

nbsp; Drupal


style=3D'color:black'>·       &=

nbsp; Joomla and more


style=3D'color:black'> 


class=3DMsoNormal>If this sounds useful, we =

can share details along with counts and rates based on your =

target criteria.


style=3D'color:black'> 


class=3DMsoNormal>Just let us know your =

preferred technology, geography, and job =

titles.


style=3D'color:black'> 


class=3DMsoNormal>Please let me know your =

thoughts.

style=3D'mso-ligatures:none'>


class=3DMsoNormal>
style=3D'mso-ligatures:none'> 


class=3DMsoNormal>
style=3D'font-size:11.5pt;mso-ligatures:none'>Best Regards, =


style=3D'font-size:11.5pt;mso-ligatures:none'>Emily Parker | Business =

Development Executive


class=3DMsoNormal>If =

you would like to no longer receive emails, reply =

“remove”



------=_NextPart_000_06D1_01DD4A87.0907CF10--



Paypal phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 08:11:31 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x91DR-00000000KYc-35a9

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 08:11:25 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 08:11:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f42.google.com ([74.125.227.170]:34665)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x90cJ-00000000Fms-3OFD

for doctor@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 07:33:14 -0600

Received: by mail-pj2-f42.google.com with SMTP id 98e67ed59e1d1-39d654f02baso3498887a91.3

for ; Tue, 22 Sep 2026 06:32:16 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1790083931; x=1790688731; darn=doctor.nl2k.ab.ca;

h=subject:to:from:date:message-id:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=kmB8zsq4kfsLr5DtPy9IfZaXU42g3TTX83mvG7srCm8=;

b=Sd8C4JdLEBp6H+E9AEq471xHEcfbJ15Rj+yXUD/UPIRy8zVCQjBwRAp/Md1lFUXJ17

YfEQCnSPkgoqgiSXmfCRV6wqngLmLBzw/zVkCibInPFR5KMlF/ybH6UocGSrAT57Z7IR

7N8zheRzL6rj2tdEs2bwABDu5JEgvwmJLiYjAiWKUG41qsdJVnUlXw3mndEu3P1kmT67

tCu/3a2oqIA4bg3Pp3y3NMZLvePkBakBFt46uS4KtQ33Log3Dn8YkDIKUc3LOSijDvgB

Zx6T+pQztG6w4NEp0AdFU+Tams+ZAyLjtLZSzfUCek/GfxwYWBGXyQ/0+spLN2mtdgWQ

tLYA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790083931; x=1790688731;

h=subject:to:from:date:message-id:x-gm-gg:x-gm-message-state:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=kmB8zsq4kfsLr5DtPy9IfZaXU42g3TTX83mvG7srCm8=;

b=2rB0NqES2KcMfcKHzhgvbnTdxhma3xwiznA4lL9gMclNkCjIpwu/2pCesUqtm/IJ8F

PL6iuMXf6Lwsr6DsB+/oqav2M4GnAeo5xsN4EHaQVAEo0aUo/7/qTxjB3RY7oibJaEPR

2KISR3A1qG4/pL2svk2zoHJTliLXxoA+KXl4/iAgMbsvjJIKi0MSGD3c0Hq/cM9NRhqG

McoKd1f8/IexVoBx2spk2N7YL/HUW0Xl3XzFwcThkYXi7mNk8+8noy+JsSIQl5FrhBwL

ntYX/oUKvkJRoavTdA91PJUsizBDTS/z8Wt16lltzM7CbWccEPt0Jz/JQZAobSZ+aHP0

FPLA==

X-Gm-Message-State: AFuF++kjgp3M1doldiIo4PmywRO4GU2tK+IIUTXtB0nok17hC9dR9QSD

Kpem6fxRnPhPSTR6PtyHhCpexuC4dMc2j2+gI8x6TGgVCRte2BlCEpRvWmojsHZY

X-Gm-Gg: AYBFou1TUf5DCfvRB/9am1Wi94cicBocZzS/tnbScj13fL4wSxQskI2x5e0FmRsu7RY

BFrhDxqJtVkWqNiancTp7X0PNCDK1WrGxOS3+TsH4MvluxYRywuIe5nkzUsod0lkTduNxbLqsQO

hZSKkWSL77jGoDwmLcF5o30sC2VNee/BP0LyvZDJKq8Unk9wtQ9hNCi5sYLFF4jZDwjPTLcnSry

FjZPRoeQaVWy3d9ElRF8A8gFz2UZZhmy1/TkqbCeZ45MxFedzpfw9HX4F+jtow9tfWdliXqX0fF

j/1bwOJ1vJmrzSGSg4rAfI5FjTrqEDFhBllgOriixG46QP4QRa4juqNwpi6m3m0ueoJPZd+zphe

rb67sWSAi2AR/QlY+PSlv6Et07XSGdyH5AvDfCJSNaAWASKbkHjVvoVWujYJmAYyMQZxbUEmwea

J/rXaHgCeQJuwBeElP/D5CHxeUMPPbKLoa/A2MLFmckJTthIdnfc45YYyK1EoHHgOhhsBviYHB1

djAC8AQryu/rp3XQsql9cY=

X-Received: by 2002:a17:90b:4d8f:b0:39e:6a81:5a95 with SMTP id 98e67ed59e1d1-3a0732959afmr1424604a91.41.1790083930828;

Tue, 22 Sep 2026 06:32:10 -0700 (PDT)

Received: from localhost ([124.156.247.147])

by smtp.gmail.com with UTF8SMTPSA id 98e67ed59e1d1-3a06cc3600bsm1095432a91.4.2026.09.22.06.32.08

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 22 Sep 2026 06:32:09 -0700 (PDT)

Message-ID: <6ab28359.18304b58.396882.b9cf@mx.google.com>

Date: Tue, 22 Sep 2026 06:32:09 -0700 (PDT)

From: andiaruna467@gmail.com

X-Google-Original-From: PayPal

To: doctor@doctor.nl2k.ab.ca

Subject: Payment Confirmation | $217.42 | Ref: I-3ETAGDP3JI3WMZ



Subject: Your PayPal Renewal



Hi Coustomer,



Thanks for being part of PayPal! Your 1-year membership renewed automatically at our special anniversary rate.



Renewal Details:



Service: Online Privacy & Security



Customer: Coustomer (ID: UID416430)



Amount: 217.42 USD



Need help? C_ontact u_s: 805-979-6494



Best,

PayPal

805-979-6494

Etihad Vendor Registration spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 08:11:31 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x91DH-00000000KXZ-1o4M

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 08:11:15 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 08:11:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f103.google.com ([209.85.208.103]:56641)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x90Zf-00000000FWV-3WmR

for root@nk.ca;

Tue, 22 Sep 2026 07:30:29 -0600

Received: by mail-ed1-f103.google.com with SMTP id 4fb4d7f45d1cf-6a051b737d8so933981a12.1

for ; Tue, 22 Sep 2026 06:29:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kashkeesh.com; s=google; t=1790083766; x=1790688566; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=YTx6dcGd2G9Q5XLoV3eu85JeLujjHDA17uaS+JWFiSo=;

b=SMDQGqNjDyHtYba/FU7pW4khN1hvbTL4GWMeXgzsuWQMDVZVjqD3SRuEfdDen3bFUC

BrhctRp0Gb3U9men1o8pOnAPKSFhM0eGhlW7KqTOXoW41fkQZ2i9xzOPwThIanEwDxqb

rxQ6dSSSqPskJe+s4Sudvi7mmVuDQ9C0q6ldw3AKRnn+FPJzBXvHmYRXR3EjSBY59Dco

wyFXBKPC0P1e18+o/EURG+pNuMQSakYXKdQ9QCWXXJ9/prYFM+6Di8yeij1zWzzBwNdk

Yo5kT1+FsGBOukjudxGvXStGlHq2xNdxqkX/Qb9wLtF87B4L1RtjugKSThL742/l/W+q

HpHQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790083766; x=1790688566;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=YTx6dcGd2G9Q5XLoV3eu85JeLujjHDA17uaS+JWFiSo=;

b=zZ/LGio4KNcG+XrkoSrAvTKeFS8Hs6SVeA4jgy/+d9bguw4Y8d5QpSV4q91FCXIZSn

yqW28hHvN1ALy+BvwH7CJUbuvm5jjm6iv8bWzY9gCbrtnxAxjfGnZAWxGeuQ95LjwlTC

kM9SFlXrIibTKbzwg9JTx7Pp8bIqy+KjgZ0ql+/g1ORVONtgtMkZaMfWDSnPrPdl2jxv

77WWCNJlC3EN0XiAqaJJ4jVKW7H37EOHjNU2Ok3PpEVUQNcLO43LQt43QgsOEaPgjaeQ

pp3K9oL5Lc2D/I8F7mPCgy7brByQnxRM/dT2H29R3f7NScwzG/F3QKOCB33F7eO5doR3

bbpg==

X-Gm-Message-State: AFuF++nxzo5AHNlvkr58O5mxb5AMujrIBO/CzAr5c16v4HB3V/+x6BSu

MSpKnmgrMrx5pyDWzg9wxZAEkLXOjKeWPRBzFK10MF/PsystafFN+kjYzNTM4V+xZ4lW5JPz6je

2dbQPpw8y9W02ymIuKKBw4IPy5VJpS8kvJj/pYoQN8aKPqgU=

X-Gm-Gg: AYBFou3xqtm3DyvbkLQUn2qPafANPfiBdx5i6BDH9hXbcKf8WBfRi2YQpq08f7sbw4q

E/NWvG2enDcIkco6RHiNiFousVBfVX/9OhiaHhpT7FyxUm3NeZdQXqsrY2kV1IVc8uWJm0zEXR5

KCFYScqEixITHDXKzCyLYX1Sb1Kx1KolhLdBgA1SclDDAkHtzMjC8Qpp3+yy32FjyyqX9yxcVIH

RqOUcvwA3m/YQSRTWjT8K5QGN65+Qi9dLFlcdPIzHZvS/AVNeFRPt/dDTLZeqbgSA+qSJRJ9ZNu

Qb6KOQAMrmyrpCeJWy1leXRjlg8dXURRMNXSXzuQMHCObMAiFbsThxXqeETecZI41IU2lo+bwMS

N6hHeB03L

X-Received: by 2002:a05:6402:52c4:b0:6a9:adea:42e2 with SMTP id 4fb4d7f45d1cf-6aa531dcb09mr9820855a12.39.1790083765918;

Tue, 22 Sep 2026 06:29:25 -0700 (PDT)

Received: from kashkeesh.com ([77.83.39.2])

by smtp-relay.gmail.com with ESMTPS id 4fb4d7f45d1cf-6aaa446a6a1sm871914a12.7.2026.09.22.06.29.25

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 22 Sep 2026 06:29:25 -0700 (PDT)

X-Relaying-Domain: kashkeesh.com

Reply-To: registrations@etihadaviation-ae.com

From: ''Etihad Aviation Group PJSC''

To: root@nk.ca

Subject: Invitation: Etihad Vendor Registration Program

Date: 22 Sep 2026 06:29:25 -0700

Message-ID: <20260922062925.E55B8F45545DCBBA@kashkeesh.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Etihad Aviation Group - Vendor Opportunity ✈️ Etihad

Aviation Group



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

[209.85.208.103 listed in dnsbl.ahbl.org]

[209.85.208.103 listed in dnsbl.ahbl.org]

[209.85.208.103 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[77.83.39.2 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[77.83.39.2 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.103 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.103 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.103 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Invitation: Etihad Vendor Registration Program












=3D1.0">

Etihad Aviation Group - Vendor Opportunity






padding: 0;

background-color: #f4f4f4;

font-family: Arial, Helvetica, sans-serif">




margin: 20px auto;

background-color: #ffffff;

border-radius: 8px;

box-shadow: 0 4px 12px rgba(0,0,0,0.1);

overflow: hidden" class=3D"email-container">






padding: 20px 30px;

text-align: center" class=3D"header">


font-size: 22px;

margin: 0;

font-weight: 300;

letter-spacing: 1px">✈️ Etihad Aviation Group

=










color: #333333;

line-height: 1.6" class=3D"content">






margin-bottom: 20px" class=3D"greeting">

Dear


=3D"0" style=3D"display:inline-block; vertical-align:middle;">








8px; border-radius:3px; font-weight:bold; color:#1a3c6e; font-size:15px;">

root

,







Unlock a world of opportun=

ity with Etihad Aviation Group.








We're inviting select companies to join our
=3D"color: #1a3c6e">Vendor Registration Program
— your gatew=

ay to future procurement and supply chain partnerships with a global aviati=

on leader.






border-left: 4px solid #1a3c6e;

padding: 15px 20px;

margin: 22px 0;

border-radius: 4px" class=3D"cta-box">



Interested? Simply reply to this email=

=2E We'll send you the Vendor Questionnaire and Ex=

pression of Interest (EOI)
forms to get started.









Let's explore how we can grow together. We look forward to =

hearing from you.








padding-top: 20px;

border-top: 1px solid #eaeaea" class=3D"signature">

Yours sincerely,




font-size: 16px;

color: #1a3c6e" class=3D"name">Engr. Ibrahim Khalid



color: #555" class=3D"title">Senior Vice President – Supp=

ly Chain Management



color: #555;

margin-top: 2px" class=3D"company">Etihad Aviation Group PJSC
div>


color: #888;

margin-top: 2px" class=3D"location">Dubai, United Arab Emirates=












background-color: #1a3c6e;

color: #ffffff;

padding: 12px 28px;

border-radius: 4px;

text-decoration: none;

font-weight: bold;

font-size: 15px;

margin-top: 5px" href=3D"mailto:registrations@etihadaviation-ae=

=2Ecom?subject=3DVendor%20Registration%20Interest%20-%20[{Email}]&body=

=3DDear%20Etihad%20Aviation%20Group%20Team%2C%0D%0A%0D%0AI%20am%20writing%2=

0to%20express%20our%20organization's%20interest%20in%20joining%20the%20Etih=

ad%20Aviation%20Group%20Vendor%20Registration%20Program.%0D%0A%0D%0APlease%=

20send%20us%20the%20Vendor%20Questionnaire%20and%20Expression%20of%20Intere=

st%20(EOI)%20documents%20for%20completion%20and%20review.%0D%0A%0D%0ACompan=

y%20Name%3A%20%0D%0AContact%20Person%3A%20%0D%0APhone%20Number%3A%20%0D%0AE=

mail%20Address%3A%20[{Email}]%0D%0A%0D%0AWe%20look%20forward%20to%20the%20o=

pportunity%20to%20work%20with%20your%20organization.%0D%0A%0D%0ABest%20rega=

rds%2C%0D%0A%5BYour%20Full%20Name%5D%0D%0A%5BYour%20Job%20Title%5D%0D%0A%5B=

Your%20Company%5D" class=3D"btn" target=3D"_blank">

�� Reply to Express Interest








13px; color: #888;">


; border-radius: 3px;">

⚡ Reply directly to: registrations@etihad=

aviation-ae.com















padding: 15px 30px;

text-align: center;

font-size: 12px;

color: #999;

border-top: 1px solid #eaeaea" class=3D"footer">

© 2026 Etihad Aviation Group PJSC • All rights reserv=

ed.




This message was sent to


=3D"0" style=3D"display:inline-block; vertical-align:middle;">








8px; border-radius:3px; font-weight:bold; color:#1a3c6e; font-size:11px;">

root



and contains confidential information.