X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 16:59:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8myI-00000000Oqd-1VF7
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 16:58:50 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 16:58:50 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from cleansy.jp ([210.154.217.180]:53200)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8hJB-000000004Ag-1ohK
for root@nk.ca;
Mon, 21 Sep 2026 10:56:09 -0600
Received: from EC2AMAZ-83P77MT (ec2-43-206-132-113.ap-northeast-1.compute.amazonaws.com [43.206.132.113])
by cleansy.jp (Postfix) with ESMTPA id 1E3FE2C5869C
for ; Tue, 22 Sep 2026 01:55:12 +0900 (JST)
Authentication-Results: cleansy.jp; arc=none smtp.remote-ip=43.206.132.113
ARC-Seal: i=1; a=rsa-sha256; d=bizmw.com; s=default; t=1790009713; cv=none;
b=6UgzRQeBV44DXJGyw3UiM6u9r3hbdLLvBuzLgquo1H2PBlhu8tNwkUKzBy8x3oDrimiEEQ/kA7uaVLvnBYL8EP+1zVseaoux1R5kAGLqzyOFz2KEvC6ZpyHl5BGvQ8zbArjVizdnS0KPlu7iStHiCYhGNkvnntFHaW1Xfz65Lik=
ARC-Message-Signature: i=1; a=rsa-sha256; d=bizmw.com; s=default;
t=1790009713; c=relaxed/relaxed;
bh=TQf1vTJbZ4uAsIwtk9dXWL/cBqZRJKRbsf0iMB8gwbU=;
h=DKIM-Signature:MIME-Version:From:To:Date:Subject; b=YZq5t2uGXR5oL4sYAu6jECJIcRqUxWCugwDTRZys9VRMdsYlsE1wlNDRfjvYyrOQvrmdgwP/FHOENm5RtFo+DLN1vmYU5r0pT7aBpy8vxtjzaIBpyyFS8asAX4eANJj43eiXfufwSTJjPmdmm6w+YwW7/ZW23tjz3nSiJ+bXf34=
ARC-Authentication-Results: i=1; cleansy.jp
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cleansy.jp; s=bizmw;
t=1790009713; bh=TQf1vTJbZ4uAsIwtk9dXWL/cBqZRJKRbsf0iMB8gwbU=;
h=From:To:Date:Subject:From;
b=HC1uMoJ8k2pSL2D7nRvJWd3yWqgv0KZx7kvej5PNi+jhtmRjB95s0R2iQtI8T4HyP
fUOY47d0+PP6fEDwm5d62cFdYE7vowNfsMZ7Uezb15Kj/m6IeHP5Nr/y2hDl+M2LKK
9EvZADXk9Ber0cVVaGDORA3quRRVqgIqzegO2FJU=
MIME-Version: 1.0
From: "Canadian Bread Settlement"
To: root@nk.ca
Date: 21 Sep 2026 16:55:12 +0000
Subject: =?utf-8?B?UGFja2FnZWQgQnJlYWQgU2V0dGxlbWVudCBQYXJ0aWNpcGFu?=
=?utf-8?B?dCBJbmZvcm1hdGlvbiDigJQgUmVmIE5vwrogNTc2MTQyMzA3MDQ2MjM0?=
=?utf-8?B?IC8gOS8yMS8yMDI2IDQ6NTU6MTIgUE0=?=
Content-Type: multipart/alternative;
boundary=--boundary_11998_ea18f861-cd8a-496e-bac1-526e5489f05c
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
name="x-apple-disable-message-reformatting">
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 16:59:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8myC-00000000OnJ-36FJ
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 16:58:44 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 16:58:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs2-f43.google.com ([74.125.227.43]:39063)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8hAU-000000003Km-3L6w
for support@nk.ca;
Mon, 21 Sep 2026 10:47:12 -0600
Received: by mail-vs2-f43.google.com with SMTP id ada2fe7eead31-790b4aeb66bso1881526137.0
for ; Mon, 21 Sep 2026 09:46:15 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1790009169; cv=none;
d=google.com; s=arc-20260327;
b=mO7CQmWmpUH/ijG5inW7T4uISmg8FFDRIwg0095HvxVvUaav1ot8+oclrvhm4UYesM
UrgbHBppi0Kbk/Akn/GS4bEM+kXYskmg157SE00d/anHchQiD2OtmQUV5Cn4lrZAamAf
e4uNjfkdCeS46/Jyjti9JXr+GJj1N+lWVnDjnpVR4RARUFkn8ZUB+I79dJgx4ATAC0FW
wUpF2shQeW1jYBfWdq4NJA7FR5+1WRjgQQmNWJqPBD231QldSQMdm8B0JRgkPBl5MKyd
XGgJdS8nIP/fKVLohCYOnI38VKvqF6JLoICrIht6D0Hd6Q+VH2RuYVMVyPVnxrDuUyC8
A2Gw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:dkim-signature;
bh=GMkeUGTWMQWrTDD7rLPjLWvbSzkB9wzi1uLQ/C4J1B4=;
fh=HqbFLGgfs+VqPCrA8xh3kucvt3Gby38pKp75MsKupbQ=;
b=Gpjk5+aBHZqj/wZeW5QmvKA0VPOShq67q5BW9DpE/6pOy/2K4RjoiyBGlYX8CFssyh
yjtzE1pqMsPCPOigmyX+0PVyLg9WHrJJpLbSDPPxOI2bIGY3imsn31awi42av+ckeTnX
OBH3LFHU4ngU9qNfXEi+bXhoMZYJM/m3sI1sI98fttGHLUWQUYjFmvRiVnyNBMe+At/v
ewibzAKxNgMEXIskZ4ETwBEtAHuuTdNxuF9fIX5wQyaASOyc02qyCnsH1nEPm/naRoaM
V7uv4GC9oVpGNL7DfAZLr0WFR/bi/hhj3+LTAtMIK0a4woLhEimA/4/swpN1n2Ri1zhl
/J5g==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1790009169; x=1790613969; darn=nk.ca;
h=content-type:to:subject:message-id:date:from:in-reply-to:references
:mime-version:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=GMkeUGTWMQWrTDD7rLPjLWvbSzkB9wzi1uLQ/C4J1B4=;
b=GJhqAC67Am8kKmwrwGt2H1LFipYtrnA8kw0Th7A8c2GIyxsDmTEyaJxgTrc16Hh3C2
HwMpl/CvnnbyiV3bi3vDPI0VD8q9sLxqCgQaCrgum+hYlJfcAx8Nxab1t23r3PYVUaTV
z/6WtjWJPNUI62kRh65AwRX7zhulyUZD7ExYm0mQ9ZFty4LZAvZONzFmvTRZd4GfriXL
D4l5EU65ThyORWwPYqvXRFRZ0Iu+vaWvv5fe+MeYzoR6KVk4h2PzYJM5ldE9xsryUpku
JPXLsupZj8VUqGdA78ilAVBJBeJ3omIHpwBCb50GKQPulNNwLAnkKBZuWdlMpUZadO9e
Xh4Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790009169; x=1790613969;
h=content-type:to:subject:message-id:date:from:in-reply-to:references
:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to:content-type;
bh=GMkeUGTWMQWrTDD7rLPjLWvbSzkB9wzi1uLQ/C4J1B4=;
b=C9gdXo4MaKKYFva7eNcVpR3e/i5O3YjEidP+h4N4LCOWw7w8skFj8KVM1YmnA3LonQ
9jr99FXA0IzJSzskd0QfDVJ+LeXCofJWjWIBCMgirQ52zob7ZtihNHp3+bdmwOfgIEgt
QqQ+GUXHQvMv07keMZpR/SLpjtwcXdb9ATYuZTK2q3MqFOdlJnG6AFCmbKpjnXTSDjAP
7LLQ5xCDRRVLMkcObhm7h0QsyWeopkQiTgwLzuoLY5Q7HQyUEoHJNndKtFqJUlxVXih0
yTItSO6ANtsFB81UYxcfgEjpTRq5Hb/q8mLvu08whn2vExtA5p91VCDgYUdTT7SI3jR7
6UuQ==
X-Gm-Message-State: AFuF++mpF/IjZ2TQN+ErCLL1mURhHcqRTyQRcYLUmilTxySF2OUNd3uh
o8YWwYkk+flxZaybgfZ/Gitw2eWwp41X9q/JV2u2bFH9ZSIv8T2IkBJ37MZ+qTVWTE+XZpwm+Jt
pFdCO5niJwIymgWpR/i7um2Sdu0DNvfPoWtRcwY8f7Q==
X-Gm-Gg: AYBFou1JEdSahcszPGQNLd2IAKmXhq+sKjA0T9EyaqY0Cdh7bqLym1W7z05jGCAvzJA
geWDRRMmuaaoS5pvKsFRiPPD7Tl2ggffCPtnXLEted/OUOmNPzoWE1MbP5enkL7HpdurkNo7yMv
i/fVFCLpyCOUdZKjN+AzHaatJOU6ZXiYLxJ2BV5LQHBP3GPBW+PbZHqUwFGy2PGR+zaLyHbZvB2
yf97WH2dQLiJmsCnxddoZcW4/2Zq3xL2EXm2c7k75RsSnRfZQRdsePr1bj+RL8aTxp5cIe8SxL6
qieyu5hpjFm/ubzuISPA9Id7akwV9oNmVrJlbtVF7eP+GMTK0X9IdG8=
X-Received: by 2002:a05:690e:1c21:b0:672:b7c4:718 with SMTP id
956f58d0204a3-672b7c407cfmr1109593d50.97.1790008746749; Mon, 21 Sep 2026
09:39:06 -0700 (PDT)
MIME-Version: 1.0
References:
In-Reply-To:
From: Jdh Heh
Date: Mon, 21 Sep 2026 22:08:54 +0530
X-Gm-Features: AcwNN1URzu0Fqgqc9MJ9ACfHtn5VwQc7EuOYS70b_aujpor9_2I9NJbG9bfXcrg
Message-ID:
Subject: Re: White Label SEO Services!!
To: support@nk.ca
Content-Type: multipart/alternative; boundary="0000000000007eb3c8065c00e39e"
--0000000000007eb3c8065c00e39e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi,
I wanted to reach out one more time to see if you'd be interested in
learning more about our AI visibility services.
I can share a sample report, portfolio, and pricing whenever it's
convenient.
Thank You!
Diego
On Fri, 7 Aug 2026 at 20:36, wrote:
> Hi,
>
> Are you looking to elevate your online presence with expert SEO, SMO, or
> PPC services?
>
> I=E2=80=99m affiliated with a leading SEO company that has successfully h=
elped
> over 500 businesses achieve first-page rankings on Google for highly
> competitive keywords.
>
> Currently, we=E2=80=99re offering affordable, customized packages tailore=
d to meet
> your specific business needs.
>
> Would you like me to send our portfolio and pricing details?
>
> I look forward to hearing from you!
>
> Best regards,
> Diego
>
--0000000000007eb3c8065c00e39e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=3D"gmail_signature" data-smartmail=3D"gmail_signature">
pan style=3D"color:rgb(34,34,34);font-family:"trebuchet ms",sans-=
serif">Hi,
et ms",sans-serif">
trebuchet ms",sans-serif">
ly:"trebuchet ms",sans-serif">I wanted to reach out one more time=
to see if you'd be interested in learning more about our AI visibility=
services.
et ms",sans-serif">
trebuchet ms",sans-serif">
"trebuchet ms",sans-serif">I can share a sample report, portfolio=
, and pricing whenever it's convenient.
4,34,34);font-family:"trebuchet ms",sans-serif">
lor:rgb(34,34,34);font-family:"trebuchet ms",sans-serif">Thank Yo=
u!
ot;,sans-serif">
ms",sans-serif">Diego
=3D"gmail_quote gmail_quote_container">
">On Fri, 7 Aug 2026 at 20:36, <=
diego73652@gmail.com> wrote:
te" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204=
);padding-left:1ex">
Hi,
nt face=3D"verdana, sans-serif" size=3D"2">
=3D"verdana, sans-serif" size=3D"2">Are you looking to elevate your online =
presence with expert SEO, SMO, or PPC services?
=3D"verdana, sans-serif" size=3D"2">
dana, sans-serif" size=3D"2">I=E2=80=99m affiliated with a leading SEO comp=
any that has successfully helped over 500 businesses achieve first-page ran=
kings on Google for highly competitive keywords.
e=3D"verdana, sans-serif" size=3D"2">
rdana, sans-serif" size=3D"2">Currently, we=E2=80=99re offering affordable,=
customized packages tailored to meet your specific business needs.<=
/div>
iv>
Would you like me to send =
our portfolio and pricing details?
sans-serif" size=3D"2">
rif" size=3D"2">I look forward to hearing from you!
face=3D"verdana, sans-serif" size=3D"2">
"verdana, sans-serif" size=3D"2">Best regards,
=3D"verdana, sans-serif" size=3D"2">Diego
--0000000000007eb3c8065c00e39e--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 16:58:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8mxs-00000000Oba-0TaG
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 16:58:24 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 16:58:24 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from out196-30.us.a.dm.aliyun.com ([47.90.196.30]:21659)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8gXj-00000000Pps-2JfD
for doctor@nk.ca;
Mon, 21 Sep 2026 10:07:07 -0600
X-AliDM-RcptTo: ZG9jdG9yQG5rLmNh
Feedback-ID: default:benei@wlkgyj.cn:alibabak_SmtpBatch:276535
DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;
d=wlkgyj.cn; s=aliyun-cn-hangzhou;
t=1790006722; h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;
bh=4ryLC8rHsmh5c/4JYAIgLMktcROblxQXUbb2c0QtAjQ=;
b=ljV9lGr65tV42Q2cujSmUAcFt2Di6TEtAc3Nww3MTTLACFeN3B5HO87idJJEjVk6rD1GYMndo4PJ9r3pnSpFmx6aj3Fvo5rmJaxFW4KkLJQhzVkbQrvE5tBgl+i81x52u/cQhndHVUm4nnBjl3a3yX2/P16VSfNistqbTUQixkM=
Received: from 127.0.0.1(mailfrom:benei@wlkgyj.cn fp:SMTPD_-VHcGLHPXtm cluster:AY35D)
by smtpdm.aliyun.com(127.0.0.1);
Tue, 22 Sep 2026 00:05:21 +0800
X-EnvId: 600000359203487360
Content-Transfer-Encoding: base64
From: Melinda at Dasonlink
Sender: Melinda at Dasonlink
To: doctor@nk.ca
Reply-To: Melinda at Dasonlink
Subject: Challenges of SFP
Message-ID: <5d226555-b016-f929-1628-995df797301b@wlkgyj.cn>
Date: Mon, 21 Sep 2026 16:05:20 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam_score: 9.4
X-Spam_score_int: 94
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi , Have a nice day!
Content analysis details: (9.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[47.90.196.30 listed in dnsbl.ahbl.org]
[47.90.196.30 listed in dnsbl.ahbl.org]
[47.90.196.30 listed in dnsbl.ahbl.org]
[47.90.196.30 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[47.90.196.30 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[47.90.196.30 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[47.90.196.30 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[47.90.196.30 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[47.90.196.30 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URI: wlkgyj.cn]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: wlkgyj.cn]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: wlkgyj.cn]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[47.90.196.30 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Challenges of SFP
Hi ,
Have a nice day!
What challenges are you facing about fiber transceivers this quarter? If it’s one of yours below. I’ve got the things.
fiber transceiver market development issue.
quality issue: like link failure, no packets received or sent, unstable link connection, module not supported by network devices, etc..
supply chain issue: postponed delivery, etc..
We can help to solve all your problems above in the future. Help your team and ours to achieve your goal next quarter, and you’ll be shocked. Because we’ve supported over 158 customers in the past 10 years.
Kind regards,
Melinda
________________________
Business Growth Partner
Dasonlink Tech Co., Ltd.
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 16:58:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8mxs-00000000Oba-0TaG
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 16:58:24 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 16:58:24 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from out196-30.us.a.dm.aliyun.com ([47.90.196.30]:21659)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8gXj-00000000Pps-2JfD
for doctor@nk.ca;
Mon, 21 Sep 2026 10:07:07 -0600
X-AliDM-RcptTo: ZG9jdG9yQG5rLmNh
Feedback-ID: default:benei@wlkgyj.cn:alibabak_SmtpBatch:276535
DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;
d=wlkgyj.cn; s=aliyun-cn-hangzhou;
t=1790006722; h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;
bh=4ryLC8rHsmh5c/4JYAIgLMktcROblxQXUbb2c0QtAjQ=;
b=ljV9lGr65tV42Q2cujSmUAcFt2Di6TEtAc3Nww3MTTLACFeN3B5HO87idJJEjVk6rD1GYMndo4PJ9r3pnSpFmx6aj3Fvo5rmJaxFW4KkLJQhzVkbQrvE5tBgl+i81x52u/cQhndHVUm4nnBjl3a3yX2/P16VSfNistqbTUQixkM=
Received: from 127.0.0.1(mailfrom:benei@wlkgyj.cn fp:SMTPD_-VHcGLHPXtm cluster:AY35D)
by smtpdm.aliyun.com(127.0.0.1);
Tue, 22 Sep 2026 00:05:21 +0800
X-EnvId: 600000359203487360
Content-Transfer-Encoding: base64
From: Melinda at Dasonlink
Sender: Melinda at Dasonlink
To: doctor@nk.ca
Reply-To: Melinda at Dasonlink
Subject: Challenges of SFP
Message-ID: <5d226555-b016-f929-1628-995df797301b@wlkgyj.cn>
Date: Mon, 21 Sep 2026 16:05:20 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam_score: 9.4
X-Spam_score_int: 94
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi , Have a nice day!
Content analysis details: (9.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
[47.90.196.30 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[47.90.196.30 listed in dnsbl.ahbl.org]
[47.90.196.30 listed in dnsbl.ahbl.org]
[47.90.196.30 listed in dnsbl.ahbl.org]
[47.90.196.30 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[47.90.196.30 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[47.90.196.30 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[47.90.196.30 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[47.90.196.30 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[47.90.196.30 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URI: wlkgyj.cn]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: wlkgyj.cn]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: wlkgyj.cn]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[47.90.196.30 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Challenges of SFP
Hi ,
Have a nice day!
What challenges are you facing about fiber transceivers this quarter? If it’s one of yours below. I’ve got the things.
fiber transceiver market development issue.
quality issue: like link failure, no packets received or sent, unstable link connection, module not supported by network devices, etc..
supply chain issue: postponed delivery, etc..
We can help to solve all your problems above in the future. Help your team and ours to achieve your goal next quarter, and you’ll be shocked. Because we’ve supported over 158 customers in the past 10 years.
Kind regards,
Melinda
________________________
Business Growth Partner
Dasonlink Tech Co., Ltd.
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 16:58:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8mxk-00000000OXh-1AWE
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 16:58:16 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 16:58:16 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-m478512591.xmail.ntesmail.com ([47.85.125.91]:13908)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8gTR-00000000P0i-3PQ6
for sales@nk.ca;
Mon, 21 Sep 2026 10:02:50 -0600
Content-Type: multipart/alternative; BOUNDARY="=_Part_63960_168915002.1790006496451"
To: sales
Subject: =?UTF-8?B?UmU6UmU6VHJ5IGEgTmV3IFByb2R1Y3Qgd2l0aCBMb3cgUmlzayAmIEhpZ2ggUG90ZW50aWFs?=
X-Priority: 3
MIME-Version: 1.0
Received: from jack@dingfengsocks.com( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 22 Sep 2026 00:01:36 +0800 (GMT+08:00)
From: jack
Date: Tue, 22 Sep 2026 00:01:36 +0800 (GMT+08:00)
X-WM-Tid: 0aa0c4b38c6e0735kunm3f71a959149c0
DKIM-Signature: a=rsa-sha256;
b=DMw9PIIU0qrWOQuD3JT/ASER3bGK5dRl/8u1fg/eLroTcEbeHoWCV/ac8neuVVdkZOk/gCsVufgob7UOs8uC6lRs+fmbCVE/iJtXrJD2nEQ0scW2EJiKDUf6O92NQwFoUyrRvuhfoFjiQN2rtB3YamHHOT94i+9eDnujQDPcpekpC9dPxj0GEF/KhtUQs/qgy47rjLEkU2vtoT1dmH3H19SJGG2Yh5M8mJXtd7q+1H7Mrp41bZE1LEK+Q5IvJsC09vY5pEYEVegazVXOlYtAW1KvzuzoqBRaeDmbzRFz0fW41tii57msvN9FKxTN/IwSI2tTuo20HSSNrerEMHuVgQ==; c=relaxed/relaxed; s=default; d=dingfengsocks.com; v=1;
bh=lN5xg0r/18P1l5QhsCLoxlNGhAloZkPvof5H4Yz6lD4=;
h=date:mime-version:subject:message-id:from;
Message-ID:
Hi sales,
I hope everything is going well for you.
Your interest in our updates means a lot to us. We look forward to keeping you informed with our latest news and offers.
We are interested in learning more about your purchasing needs and the types of products you are seeking. Please let us know, and we can provide you with our comprehensive product catalog..
Your swift feedback will ensure we meet your needs effectively.
Thank you for taking the time to review this. I look forward to your prompt reply.
Best regards,
Obtain the latest product info by choosing . Keep My News Flow
Need to pause messages? Go to Opt Out Settings.
On Fri, Sep 18, 2026, jack wrote:
-----Original Message-----
From: jack
Sent Time: Fri, Sep 18, 2026
To: [sales ]
Subject: Re:Try a New Product with Low Risk & High Potential
Hi sales,
I hope this email finds you well.
Thank you for subscribing to our newsletter. We're thrilled to have you on board!
I am excited to inform you that we are currently offering a special promotion on our products.If you have any needs, please let me know as soon as possible so I can secure a discounted spot for you.
Thank you for your attention, and I look forward to hearing from you soon.
Best regards,
Maintain your product-savvy edge with . Stay Updated on News
If you prefer to exit, choose Review Communication Options.
On Tue, Sep 15, 2026, jack wrote:
-----Original Message-----
From: jack
Sent Time: Tue, Sep 15, 2026
To: [sales ]
Subject: Try a New Product with Low Risk & High Potential
Unlock continuous updates and new feature announcements at . Enable Alerts
Prefer an empty inbox? Adjust settings at Email Preferences.
Have you considered trying a new product to boost your deals?
Our belief is to provide the best service and the most cost-effective products for small and average-sized retailers. With our low MOQ and flexible support, you can test new designs with extremely low risk. Sometimes, a small attempt can lead to unexpectedly strong deals.
We would be glad to support you with costlessdesign service and help you explore new opportunities.
Looking forward to your reply.
在2026-09-11，jack 写道:
-----原始邮件-----
发件人： jack
发件时间: 2026年09月11日 周五
收件人： [sales ]
主题： Custom Socks – Low MOQ & Free Design Service
Continue receiving fresh tips and features by hitting . Go With Future News
To eliminate this communication, just hit Manage Inbox Flow.
Hi Sales,
I’m Jack, representing a specialized sock factory with 15 years of production history.
We Provide
1.Low minimum Command quantity of Just 50 pairs per design, which is ideal for testing new styles or small businesses.
2.Costless design services to help bring your ideas to existence.
Looking forward your reply.
Best regards,
Jack
What's app: +86-13122045126 Website: CustomizeSocks
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 16:58:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8mxc-00000000OUa-31hO
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 16:58:08 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 16:58:08 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj2-f5.google.com ([74.125.227.133]:39272)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8gPX-00000000LI9-2hOY
for sales@nk.ca;
Mon, 21 Sep 2026 09:58:41 -0600
Received: by mail-pj2-f5.google.com with SMTP id 98e67ed59e1d1-3965683e9e9so2415303a91.1
for ; Mon, 21 Sep 2026 08:57:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1790006258; x=1790611058; darn=nk.ca;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:from:to:cc:subject
:date:message-id:reply-to:content-type;
bh=bz0lxz3htNtJqrwlGRl6ppICd/g1YvSwRn36f9c/Y58=;
b=RiFTDSzg5c4FDlZ5CGzy4buTzzXIfqj3SNFpGF7jaR1VkMl+q3xk6yMzA90WvWvDru
GR7RPB6ulu65oS/9E84qCRLspon58K+b7ce44l99W/Hus84+QQgbei48laiFMKhjF2km
smSypPq0Y7uuwl8tIOXdWBI70aBKBJMReu1yhWNGj761FwG1i8lsVyi71vHJjxAi80rk
HFdE2bQzIRamyPhMcTU4IBo94b5fHo/1GQxm0qfj9nTaZiEta3bVfJngRmrS62nkyk1t
whfL40Z9ncrCy34mgX1Lrw3x2zVzpcXFaXpXrDNweR/OQebFiDmm2uMZ7WijxNBtJniY
CUzw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790006258; x=1790611058;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=bz0lxz3htNtJqrwlGRl6ppICd/g1YvSwRn36f9c/Y58=;
b=RN7uXaOh/uvYa5tre9p49mmKnU9jjx74AXWJsjJRT/LHMTz8nKVK9LXIJBSnQKeuyC
RGEryq8B0hO471qFQfkO+3RsWHifvnfjv8RFO3vmtrsJTN4NLMCzlMJstr1bKpp0bB0d
HW+6Vq+5E5b9k+HJzxgmFfODa1MZsdOWGqy1Iad8UrqLyZYriwvmdy4wwqbl1uPNItn4
aIfVCql/rEakW43UWRp1fry3mXGjCjWHwBxOoYQa2C9h7p3B08H+DuXTSR2G+qGn3H/m
DBlf6YNyqxMyykgNiEUxPf/ej6UBxhrRqYQaAiyFTSBcJpt8wjd4U/9whjxVyl2nEezq
11Qg==
X-Gm-Message-State: AFuF++mDy2Zy6SO2nZh2bS45HJPHa2jmv2KHTMghyvzGjhuV0qvxwphe
AtGqQ3amDepYybJF1xQz0J4Smp8Ho/uLzqnyJL4PsvfUitXkooCl0JsUOWqwQkVjz2AoEQ==
X-Gm-Gg: AYBFou051ZC1QMy/dCMlU13eVSe1AwS4w4F9qUNz9l5rQ34ji14jgeIWvrhQvcXyBrO
MGWKXqIQiYqCDnF1vbZtSoMHKyfMt0KlU2R+T6d+SATBn+Npy6SmSSif42VmlEGGfjvI+Rhnn1t
OKZGmt1B0E8KuRjAcIfCbR9/oMjJbyR32a18o5ryvxQrBQZycnRjuU7cBl4dRN+GYjL01y9bE8V
LfYM5IQ2fRTBnQ2F3xSMHBYBe3K2NayH3zoUxxplezQ4l+3P4yT275Pm5uFu1NgR74jbhgmOfD2
lTPu+hL65t2K1jbbfyzzxT1dHAyGXgP2fpiWwWrlJztzXEGMR6KucaK+cIEWbw5FLesS4Aohrov
fVoU13XbqEEeqmzvZlY2aFX4sRv+S3W2VXqCvZGvuxrupTVt+vOJYJa8w341FwndB6IkGIVHDyH
Hb7lWZNkqdtxrHLP+K+OFNn4ZMTmZYUIYak/E6GhvrZFVgomy3dzXoT+41mlee64FOtJkOkEqmg
hgFzpIe0S7kju0UjPablAsz8fQvHnDWtMssDDrO3IMBjbwlAQ==
X-Received: by 2002:a17:90b:548d:b0:39e:4c7e:f040 with SMTP id 98e67ed59e1d1-39e54f889a8mr17875562a91.29.1790006257765;
Mon, 21 Sep 2026 08:57:37 -0700 (PDT)
Received: from DESKTOP-4CHE62R.hgu_lan ([103.186.151.163])
by smtp.gmail.com with ESMTPSA id a92af1059eb24-144d54b248fsm10893221c88.1.2026.09.21.08.57.36
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 21 Sep 2026 08:57:37 -0700 (PDT)
Message-ID: <6ab153f1.54e42a5c.c3481.6e48@mx.google.com>
Date: Mon, 21 Sep 2026 08:57:37 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============0945149766457999976=="
MIME-Version: 1.0
From: leadteachtech293@gmail.com
To: sales@nk.ca
Subject: Salon Industriel de Quebec (SIQ) 2026 visitor contact reference
Reply-To: leadteachtech293@gmail.com
Disposition-Notification-To: leadteachtech293@gmail.com
Return-Receipt-To: leadteachtech293@gmail.com
X-Spam_score: 8.1
X-Spam_score_int: 81
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Salon Industriel de Quebec (SIQ) 2026 visitor contact reference
Dear Sir or Madam,
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[74.125.227.133 listed in will-spam-for-food.eu.org]
[74.125.227.133 listed in will-spam-for-food.eu.org]
[74.125.227.133 listed in will-spam-for-food.eu.org]
[74.125.227.133 listed in will-spam-for-food.eu.org]
[74.125.227.133 listed in will-spam-for-food.eu.org]
[74.125.227.133 listed in will-spam-for-food.eu.org]
[74.125.227.133 listed in will-spam-for-food.eu.org]
[74.125.227.133 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[74.125.227.133 listed in dnsbl.ahbl.org]
[74.125.227.133 listed in dnsbl.ahbl.org]
[74.125.227.133 listed in dnsbl.ahbl.org]
[74.125.227.133 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.227.133 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[103.186.151.163 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[leadteachtech293(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[leadteachtech293(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[leadteachtech293(at)gmail.com]
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.133 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.133 listed in wl.mailspike.net]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
Subject: {SPAM?} Salon Industriel de Quebec (SIQ) 2026 visitor contact reference
Dear Sir or Madam,
I hope you're doing well.
A quick note about Salon Industriel de Quebec (SIQ) 2026, running 06 - 08 Oct 2026 at Québec, Canada.
We are offering a pre-registered attendees list with 11,587 verified contacts.
Attendee List Includes:
• Contact information and professional emails
• Company names and websites
• Job titles, designations, and mobile numbers etc.
Reaching out now leaves time to arrange meetings before the show.
Meetings get booked in advance, so your days on site count for more.
We're able to provide this list at a reduced rate. Interested? A quick reply is all we need to send the pricing and further details.
Thank you for your time.
Kind Regards,
Tessa Thompson
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 16:58:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8mxW-00000000OS8-3MMd
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 16:58:02 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 16:58:02 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-m128169.netease.com ([103.209.128.169]:58820)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8gED-00000000GuV-0qha
for sales@nk.ca;
Mon, 21 Sep 2026 09:46:59 -0600
Content-Type: multipart/alternative; BOUNDARY="=_Part_47940_882566465.1790005550911"
To: sales
Subject: =?UTF-8?B?UmVsaWFibGUgT0VNIGNhdCBsaXR0ZXIgbWFudWZhY3R1cmluZyBiYWNrZWQgYnkgbGFiIHRlc3Rpbmc=?=
X-Priority: 3
MIME-Version: 1.0
Received: from cecily@ncxingmei.com( [10.139.4.149] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 21 Sep 2026 23:45:50 +0800 (GMT+08:00)
From: Cecily
Date: Mon, 21 Sep 2026 23:45:50 +0800 (GMT+08:00)
X-WM-Tid: 0aa0c4a51ee903bfkunm35a448f1f7c5
Message-ID:
Hi Sales,
Product consistency protects your brand reputation. To guarantee this, we test every batch in our in-house laboratory, currently pursuing CNAS accreditation.
We verify using precision equipment from Mettler-Toledo and Retsch.
Clump strength & absorption speed
Exact particle sizing (0.3mm - 4.0mm)
Zero harmful additives
We manage a comprehensive range of services, including tailored granule blends, custom fragrances, and private label packaging.
Shall I send over some recent lab testing reports for your technical team?
Best regards,
Cecily
International Sales
Ningcheng Xingmei Technology Co., Ltd.
cecily@ncxingmei.com
+86 18758194127
Zhongjing Industrial Park, Ningcheng County, Chifeng City, Inner Mongolia Autonomous Region, China
Enable regular insights and our product’s newest features by hittinging . Continue Updates
If you’d rather not get more emails, just hit Adjust Settings at any time.
On Tue, Sep 15, 2026, Cecily wrote:
-----Original Message-----
From: Cecily
Sent Time: Tue, Sep 15, 2026
To: [sales ]
Subject: Bentonite cat litter factory with owned mines
Hi Sales,
I came across your brand and notice you handle cat litter imports.
We source premium bentonite cat litter directly from our owned mines in Inner Mongolia, China. Controlling the raw material allows us to offer stable pricing and consistent quality that trading companies cant match.
We feature:
Wet-process sodium activation (90%+ exchange rate)
Strict dust control under 1%
Full OEM/ODM packaging options
Drop me a quick line if you want to see our latest product catalog.
Best regards,
Cecily
International Sales
Ningcheng Xingmei Technology Co., Ltd.
cecily@ncxingmei.com
+86 18758194127
Zhongjing Industrial Park, Ningcheng County, Chifeng City, Inner Mongolia Autonomous Region, China
Maintain your product-savvy edge with . Stay Updated on News
If you prefer to exit, choose Review Communication Options.
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 09:06:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8fam-000000005qf-3eXh
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 09:06:04 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 09:06:04 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj2-f42.google.com ([74.125.227.170]:42220)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8f8D-00000000290-3ohw
for doctor@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 08:36:44 -0600
Received: by mail-pj2-f42.google.com with SMTP id 98e67ed59e1d1-39e6298aa19so425988a91.0
for ; Mon, 21 Sep 2026 07:35:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1790001341; x=1790606141; darn=doctor.nl2k.ab.ca;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:from:to:cc:subject
:date:message-id:reply-to:content-type;
bh=+MOZjQp5mxknxsDUBtNsHvBekNByiMgO8PKYwdP+a1k=;
b=U/CM+ONEJHvuYSbxWTLlwTA0tA8CJPskEnyIf+bJAJ3Xl0hDsUKx/I4THylydzXQLR
D1fmjELMLXzrT4rWr8bnhFEjTA+E1d5HkodeLZfXsRtb58rZ8XQkh0OXB8ZmbObKs1zA
KUd34ASSksSOYuJUWhzA2j7WO3KUbb1+hfnMNuLomm1YPGycMfHxcDgFJE1298nixG9l
ZTaoczzmS2aP1HCPX++ke3j0AB9f+AO7pxigX+e+8do9Weswngbv1AVQ33PuYTVeGLJl
hL4pN1oW7oChv3xL6ZR2Uzi1V3Bug0n/IXvX1f9toE1HLqjGKKCx5vD7a6INTDuSJeYm
85yQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790001341; x=1790606141;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=+MOZjQp5mxknxsDUBtNsHvBekNByiMgO8PKYwdP+a1k=;
b=B6gLCmKXT3dufX8jwZJGneSkp/+6khUWV6zF8FU2tdjuud6O1df7mflVAYMElbGKEN
lbA4E8cD784kCQfhwvM0aMGY7FeFkIMrpuw8iTCtKHwKykopnAHoxnTMRtsTgSif/KLN
pJZ1uipjjDw4QEUcH6KDC8PBQAw35Eq3EUfFoz9AEXZnK8Y/Fz6OhSdwFNibkro6CvVj
NeX9lK/1TTqr88apbResc2ju1YaGowFfJS2UFcvOVdAwX2FlDfK5Lg2NMYFxPOvV9jJe
5hztgE9KM/OvePgNpJsvx+lhzKMldpkTqRTgVGxGXhxJAKyQj/03M0n4NRGkQRDVqFvY
uuoQ==
X-Gm-Message-State: AFuF++nUK5ni9JhkQWHYLWTZMsicgxtWbM3MTtdbh8VgN6cWluFJNYoR
V95igMuNzBCast9DgXFAazB5NgRkoyrlLqPKNuRdobeKCqVPZotO7qoFK1JITzaju3A=
X-Gm-Gg: AYBFou2j+lgHr1Fa1Pw6ZgrqBHXxFTRB8rhFoj0oanu8ZPtPim1nhlbBZG619Rg7n1f
yNQtPjapBxb7pMHgvpSHCINRiKbUjE2Y3hQPe7/SOpno4C1C+VTjmm0nHbwWofJuusc3DCrbJcr
3vg7ZW+xjr24PfLGkMkXk6Pbz3dwI1W2VAS6gqFhXV2UI70Jd61Kow8JEYSPGKqgPUOd9K4qA2q
Pt8qoxiDWuHqeeka2BoFjw/NRdpEI6Vx5CaFT80vIMr3g78vODUIPj4lkdLy2vWeVxJvstUy/L9
NWGonXzU0/L9TVzQlY5/uQ1Ef27jiwl6y5zVNmQisTKz/GVmF5ELpe5fuujmUxF51OPOeZwOJie
hqzDfvHcW7yurReVGN6ju5ruPNMN/Yy4KkY0od8vtRokcC2V109D2D/LM/LvqaEg9tguGvHO5zY
4RfRwLWrh5r7Xk8RNl46Gq2mz8lElBsvUlP9DGRY03zr6jL5eYT0K5Yz0oDGfMVyDT7iMGbIGSN
cjhSDSWQjNp592O3lznE/Cay7tpR0AwYfChXQGxwShjs18=
X-Received: by 2002:a17:90b:53c5:b0:39d:f130:8f12 with SMTP id 98e67ed59e1d1-39e5942a918mr18988685a91.2.1790001340590;
Mon, 21 Sep 2026 07:35:40 -0700 (PDT)
Received: from DESKTOP-4CHE62R.hgu_lan ([103.186.151.163])
by smtp.gmail.com with ESMTPSA id 5a478bee46e88-33c331aef9bsm20774450eec.25.2026.09.21.07.35.38
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 21 Sep 2026 07:35:39 -0700 (PDT)
Message-ID: <6ab140bb.580c57c2.f25d8.77a4@mx.google.com>
Date: Mon, 21 Sep 2026 07:35:39 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============8339606039266579481=="
MIME-Version: 1.0
From: selita.ebanks.leadforce@gmail.com
To: doctor@doctor.nl2k.ab.ca
Subject: Salon Industriel de Quebec (SIQ) 2026 visitor connection details
Reply-To: selita.ebanks.leadforce@gmail.com
Disposition-Notification-To: selita.ebanks.leadforce@gmail.com
Return-Receipt-To: selita.ebanks.leadforce@gmail.com
X-Spam_score: 7.9
X-Spam_score_int: 79
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Salon Industriel de Quebec (SIQ) 2026 visitor connection
details Hello,
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[103.186.151.163 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[74.125.227.170 listed in dnsbl.ahbl.org]
[74.125.227.170 listed in dnsbl.ahbl.org]
[74.125.227.170 listed in dnsbl.ahbl.org]
[74.125.227.170 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[selita.ebanks.leadforce(at)gmail.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.170 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.170 listed in wl.mailspike.net]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
Subject: {SPAM?} Salon Industriel de Quebec (SIQ) 2026 visitor connection details
Hello,
Hope all is well at your end.
We're offering the pre-registered attendees list for the event below, an effective way to reach relevant buyers ahead of time.
Event Details:
Event: Salon Industriel de Quebec (SIQ) 2026
Dates: 06 - 08 Oct 2026
Location: Québec, Canada
Visitor Count: 11,587
Each line of the list contains:
Contact Name, Email Address, Company Name, Website URL, Phone Number, and Title/Designation.
It turns cold introductions on the day into planned conversations.
We're providing this list at a discounted rate. Please reply if you'd like to see the pricing and additional details.
Looking forward to hearing from you!
Kind Regards,
Selita Ebanks
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 09:06:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8fav-000000005rd-32Vw
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 09:06:13 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 09:06:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pz2-f30.google.com ([74.125.228.30]:33009)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8f8D-0000000028u-0cNZ
for doctor@nl2k.ab.ca;
Mon, 21 Sep 2026 08:36:43 -0600
Received: by mail-pz2-f30.google.com with SMTP id 41be03b00d2f7-cc1cea50dc0so1288903a12.2
for ; Mon, 21 Sep 2026 07:35:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1790001340; x=1790606140; darn=nl2k.ab.ca;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:from:to:cc:subject
:date:message-id:reply-to:content-type;
bh=TlqB3q0Uwa/5hOQbDFHrZwIJ4ipr8qjloq8ONRAII90=;
b=NmiiHc4WXSsaVoZeIAobP+5+2f7iqAiE/It3hIhbQWl/iWtd9WUYi35Awq4lo241Q5
UOy+oBCmlXIHEXa95M3BFHhlSAhvM9OCSdTqJtrlq+K0YBf5kuyZNmBitYQO0s2T7PsJ
vgyFVRdwncL2fjI0YnofJv6SlrUONMSM57Kzosumk3Q2ainDSZLgYCmfna5yl0QQkzI5
zT6ePcV+Jxb4C1jpQM3QdSpGVcjcS/MO0bnu7grzsflyhZ5WRWNcJgstuy2rzt2RvYBJ
N/+e6W0osyytYjcmi+pVnATuY0CJAPYNflamh/0KApvqGAgCbwg5/7wkS06lRHOrjo6l
WoDQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790001340; x=1790606140;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=TlqB3q0Uwa/5hOQbDFHrZwIJ4ipr8qjloq8ONRAII90=;
b=H8rbC/jqpQbOW9elFXKplkXYLAQswhAs76asoNBeCaz7x6I8tir+UsOU0jztsq2wMo
TZZcjexT+aWwhPU6qnz/2wkoykPZX5onc2/iDfRM9j496LTKSWjoHXFg2UN6+r0rHTkn
h4nrAFJ+KJqqt3iAwbb9Jl8y/ukOXSjYXqz6ZPHsXGVnVpY2oPkUum9NoP1S/XpbuooX
TK2vbnCsgZ7JP2bCgPfwG6ah56+RW/WLK55hiKUSGY0W71HFk0+eKlO2eiC1qCyPHysC
CofWEhqlqK8ZnihrCeASh7s6Obc7Eo7G2TDT/VhkvByQRuqSJKDSgdfp/GrkzMc+cHnP
HJFg==
X-Gm-Message-State: AFuF++lWUbtsS1ozgXg8jC9vDcTl4y4RpNsMWCTvUIXoTOD9GnlVBMFO
TxH01O0ovWAkCV+NeSyHr+UTI5av3AFAWTDKlPfuDU77C4fTRqLsd5noPF4wzGTlKIE=
X-Gm-Gg: AYBFou0nqiAyLG+K6fyMmCN18NgwVT+CoZWKZbJgXRUpR5UqYG3Uz8Mr+Bch7Bte2ej
JNUkWezImxW+f62xIulsRUPk+tu/0T+yjLhWiwj8XiwdhfzzrCMtgXWa/57mEyqBnNlyNHknz4+
Yr7knW13lL7RJDOEgAcfyj1vqvOKr2SzTTR52dAl9/+kbWQwFX7/Odas6MukMT933Vs8zUy3opR
vj38cLdoFOjfIyESURTHKbTdYU9xHgaqwp9LrZaFaZrjf0WBpJSN6tmCr8L3HoJSiH1HWEg33hb
zBuy1vCGJbREPPqoTZBClWQqDtHIyAaWDRe0TLaLoARHpCMcnjJAmzY6qkMb+JA2m+2MNtOc4IB
H5U4W+Yfr4IabyRJJu+o14DMQLYcOviZMUPjPHSVVSHUusJfCsZXYQLDCJmOuFi2xJeuwGPAosR
yDDi3G/7xq18J9kST71eACK1KgTMGPa2JxIOx7enotiiNlXt8HxvT7ItnFh+dlHj3pNpjKSr26R
TbgGB/T48Km7Si4xVnVhn8NkvmwztxhPbSgktaAoavxK8hghgnLixvPWC3q3g68fzIFOA==
X-Received: by 2002:a05:6a20:b78a:b0:3dd:a195:dd53 with SMTP id adf61e73a8af0-3dda195e4efmr11143615637.53.1790001340114;
Mon, 21 Sep 2026 07:35:40 -0700 (PDT)
Received: from DESKTOP-4CHE62R.hgu_lan ([103.186.151.163])
by smtp.gmail.com with ESMTPSA id 5a478bee46e88-33e3f17288dsm12510371eec.29.2026.09.21.07.35.38
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 21 Sep 2026 07:35:39 -0700 (PDT)
Message-ID: <6ab140bb.c121173f.1602f8.60ba@mx.google.com>
Date: Mon, 21 Sep 2026 07:35:39 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============1452285711577727447=="
MIME-Version: 1.0
From: sia.rae.conflyst@gmail.com
To: doctor@nl2k.ab.ca
Subject: Salon Industriel de Quebec (SIQ) 2026 attendee contact reference
Reply-To: sia.rae.conflyst@gmail.com
Disposition-Notification-To: sia.rae.conflyst@gmail.com
Return-Receipt-To: sia.rae.conflyst@gmail.com
X-Spam_score: 5.9
X-Spam_score_int: 59
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Salon Industriel de Quebec (SIQ) 2026 attendee contact reference
Greetings,
Content analysis details: (5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[103.186.151.163 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[74.125.228.30 listed in dnsbl.ahbl.org]
[74.125.228.30 listed in dnsbl.ahbl.org]
[74.125.228.30 listed in dnsbl.ahbl.org]
[74.125.228.30 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[sia.rae.conflyst(at)gmail.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.228.30 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.228.30 listed in wl.mailspike.net]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
Subject: {SPAM?} Salon Industriel de Quebec (SIQ) 2026 attendee contact reference
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 08:34:00 -0600
Received: from mail-pz2-f12.google.com ([74.125.228.12]:41227)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8f5Q-00000000Lq3-2Anj
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 08:33:50 -0600
Received: by mail-pz2-f12.google.com with SMTP id d2e1a72fcca58-85469a34908so2746759b3a.0
for ; Mon, 21 Sep 2026 07:32:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1790001168; x=1790605968; darn=doctor.nl2k.ab.ca;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:from:to:cc:subject
:date:message-id:reply-to:content-type;
bh=NmwWVz/NzNY+uO4DfZG0wvY9IbN3oT4nj/vZJo+4Lak=;
b=BcPwuyWzABuUDNubzpMO/wPT4JyQoR1MQtMKzH936OU1sMxQs+kRp43uPCXcy8PVEk
O4SQZXXARnbCfM37LwKptjSNRuHQx6nz3HQPKMhcwGFh4c/fTUxdxvSxJl9+gzLNgTxt
8VGcmbFtx/MKUxa69MytJhlIQf/e6GGKaD/0YOMCBdBpYGE8KimEYLLlUMVOHKamUF3+
5E0BZi7OrRXgS+1gSgs4FyGOLvBFtwr8JPMOu1B1Muqrkw3+GiRVyec6sSwj/uIsKEcC
WQYPXvnh6modptEmk8PrD3dJyjm8wZF6Pgg9sTU0EfgpFD5KTYDGqkb1h6pW3zT1BScV
UMHQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790001168; x=1790605968;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=NmwWVz/NzNY+uO4DfZG0wvY9IbN3oT4nj/vZJo+4Lak=;
b=nwFw0BlZKrfxur3Ab6a7yJroRzo1xhvEDi9D2djg7/BXLZ11+msOCxUshOyWIA3Q6N
Lmp8xPDYR0tqnJz74wgkpfS9zERp+cuOTSgfK1wj3MQREPp1jterHbrL3BAhc83rSiSv
154rMRfXmUhS6mX3/9Kh++D66/zsPaYvIRPvKl2r8UI/0Fed4ulXZLtPl/qTloFONZU0
TH5m/eZiUXM0FHIv6lrSxeLD+Bgn9kaemVHb3PFdVix+8Gmkv+5JY9ZcuPJ51vQ7vLqG
TmB7B1niOH4FxEqFtMIOy1A3X8jC2vMbAVvK+EwjUHdVU2P/3tsHSjWHRe9aFwB9+zqL
+cjQ==
X-Gm-Message-State: AFuF++mtCRxo5HigBnOm6Qm7OIs+N4LGJAGSrEyI4PnEZcFZImQWITQF
/V3mJWniSVIs2tIKgrSoJRgZPAGyWjF2EZfkHHtQcKmeRGaONgmwqRNMk3mC1MHh4PA=
X-Gm-Gg: AYBFou0ws1qEcHYeR6ED31FU3RS75oymfIZWgaGMVoWrVJV5VwWffpIhMsswvYpsQtM
IhHKibBslU1YAb+jggagyOHv1n4mLiHGlWPhWBm/eB5ILdPqAoU+SiS1UPZAA9nucvuUvtkx2MM
jKTJZHhIJr7fGsB5c9H8fC0JPxK7huBKWuFucGULiPei3eEXnUtqC2iiOutIgbec/qewhDi4JDX
ecSrUjR0WgsLlqDQF6ZZUvjFXt17kE8f5fF8iQb3MeXnTsJ8ojKTVWaB1PNgLEq7e4UG7w8dvJa
/V/oRkWCb7ja8aOgbp4F1qvXLUusWAJRnqGI3DfOrwLurXtAdX9gLCzjmMmA9DUk+yqfdOKCfFi
1+hpFuqB8kE/QDfE5oYdfL/uyQLIwK9x5B0pYHGUJwQ2OcjSCgCYpXiVQ5JbKTvfX2jZCGdg6l+
9XQZDIs1RCDO+2RL8OVc/NamyS0EiGr2uscPAF3MifOtdXv/e+Lrdeu3EvdR4H7KY/Izpz/ILhW
dVxXw/6GIX/ac1twO6XpwnqU8M77mcv9nmqMZmflZKVur19Y4KtCMVhuEbdxrICBcb72QfMpwXZ
N9D1nHO2zgFC
X-Received: by 2002:a05:6a00:94ed:b0:871:eea6:95f4 with SMTP id d2e1a72fcca58-874dd9f1531mr16984105b3a.19.1790001167788;
Mon, 21 Sep 2026 07:32:47 -0700 (PDT)
Received: from DESKTOP-4CHE62R.hgu_lan ([103.186.151.163])
by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-877a9b0d62csm3297037b3a.39.2026.09.21.07.32.45
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 21 Sep 2026 07:32:46 -0700 (PDT)
Message-ID: <6ab1400e.8c731851.21a85.1d04@mx.google.com>
Date: Mon, 21 Sep 2026 07:32:46 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============2288923993310494796=="
MIME-Version: 1.0
From: ximena.luna.leadexpert@gmail.com
To: dave@doctor.nl2k.ab.ca
Subject: Salon Industriel de Quebec (SIQ) 2026 attendee access overview
Reply-To: ximena.luna.leadexpert@gmail.com
Disposition-Notification-To: ximena.luna.leadexpert@gmail.com
Return-Receipt-To: ximena.luna.leadexpert@gmail.com
X-Spam_score: 7.9
X-Spam_score_int: 79
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Salon Industriel de Quebec (SIQ) 2026 attendee access overview
Hi,
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.228.12 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[103.186.151.163 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.228.12 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.228.12 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ximena.luna.leadexpert(at)gmail.com]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
Subject: {SPAM?} Salon Industriel de Quebec (SIQ) 2026 attendee access overview
Hi,
Trust you're well.
Attendance at Salon Industriel de Quebec (SIQ) 2026 has reached 11,587 visitors.
Event Details:
Date: 06 - 08 Oct 2026
Location: Québec, Canada
Attendees include buyers, engineers, distributors and project managers.
We are providing access to the pre-registered attendees list ahead of the show.
The list includes:
• Full contact names and business email addresses
• Company names and websites
• Designations, job titles, and mobile numbers etc.
Your team can target the right accounts and follow up quickly.
We can offer the list at a special rate. Let us know if that is of interest and we'll share the pricing and further details.
Thank you for your time.
Kind Regards,
Ximena Luna
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 08:20:31 -0600
Received: from mail-pz2-f12.google.com ([74.125.228.12]:53703)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8es8-00000000KTi-36vm
for dave@nl2k.ab.ca;
Mon, 21 Sep 2026 08:20:06 -0600
Received: by mail-pz2-f12.google.com with SMTP id 41be03b00d2f7-cc1cea4ae2cso2512379a12.0
for ; Mon, 21 Sep 2026 07:19:09 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1790000343; cv=none;
d=google.com; s=arc-20260327;
b=lW06Kn76KM01oHeFeMOhWwqTBSgNh0jPTWXPBQGQ7/bQ0zUO9XBNnwopxbEFjpmVyd
5WXy8/w6tPirjgS3GH4WZWAnJUS/rCjkqd8Cgj+RrablXVxEPa0D7Tda7qRpQx8lRuLV
svzvMPvJ5eRV1no/tuXarHpsaULbkBIGyN9LQKWj9l1jrmZQsPa3SBuLQWjlSFtlFcX+
5D2Glq6sM6R2p2JhaS2C2Rf6ALS2szHtROZjovjH76X2OYMZxmPZi9/2jBvLlWhX6kwq
+XsWyMbc0boxALKvvC4yiamxAA1oTFPZtfZHzGUeqWmTA+7A/Kd9P+jwsckG4aOpUT1a
FIsg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=yKRCSYgqMEKFHtW8TGCOWN0XrLNv9FoUh22hHKtIqfI=;
fh=uWMryb96Izk6ZmDZCubdYP24Mnm+lNqDjLYVCVC8ZAA=;
b=WQ5OjwdM1j1V8fhdB9HahNKIv7DJcgSdqtcnfJi2Mz/3lXt+FHY80QskQQIZCoZcVh
JtWKd1mBj+pWHwjUq2du5KeJfj1q1Xq+dz6YakwVGiwY5csSFhMJH8YZ6wEL3w+Lhg2y
mA+spa1TFXa8L1vbPRLvz0NWojnX89OY/33fiV/9POHiUTt6LS83fkUxrRIsQQEPOH41
iPQzdfUPNK1OanlfppXyaPqCZcvb60TDDLn0z423yle8ZOXovnK2ipWist7S+HOZ+FuY
6d+Wj//u/CRe62Wz7DdEktHQ/j+G2XH6EtriW1dOL32f4511C5twGwpiBmzzO1Te6Spe
ojHA==;
darn=nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1790000343; x=1790605143; darn=nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=yKRCSYgqMEKFHtW8TGCOWN0XrLNv9FoUh22hHKtIqfI=;
b=Zl1MBi89C5Y9+cK/UrdRWTHSLc+ZIPqpHbT0gUsPsfT+7z2atwbWeMSIAhO1xyR+lT
Zp9og9KLyV7U/xKwV77cM6JCnlsBDZV6uQBMwLOFmOoQSx4gabKTWdc9BvlNnulOXHy5
FrDW+EgPmDtTjVxd/XTobgY9F/uDJtsFsBwhmuGdyVADE5iAn2mGbHqLJm36HhvvCCuj
/ttSQodWVPnFzIobIgmVXjnwjN+CA9igsuU6wMSzA021xmgXSGVijgpFrjFaGZiOMKp+
dEs+yKEfBTpPI0r/6v2QZeAQrMV+eUo4lwTUvM5Io7Fky/1F+Bp9vlIXxNvD0b3z4dN5
1ORA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790000343; x=1790605143;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=yKRCSYgqMEKFHtW8TGCOWN0XrLNv9FoUh22hHKtIqfI=;
b=WM2q4bUips+yiB/Oxum646RnY6jzmR+2tKuJAbr9iAPxPSRuCxq71z+fa8AzwgNGvS
a1xbe6o9CoR1BToDo3Q+k8BmwqmC20+TBbl1UuQMzIoqjdU7UtZH7FUYkEoFXFit9P9V
BH3/86hR3YFgcOWAYLuoepf4xn3oXF3e5gUj2mVh0PErImXkVkxQU/R8GCQiml3J5ZzP
zliltbYY5RTCIsrXvqKhxjlCPKWUjaNFo6SsKVyuQHgF0vUuTQ5tHYUWaTFVXLHu1Egj
yT99+1eC6bDbp8TClv+xzQ+7h1RWvHrTy3cuU7HZsmRj0c5zGl3tIRj/NgzFNjn+CRJK
codg==
X-Forwarded-Encrypted: i=1; AKwUvBxX9v8gSdz2/gAIXCz/Va0uCtKhMzU4uusM5KSWCw+Kh9v1N0NQLqSm2I9fa7h195hxBXd7@nl2k.ab.ca
X-Gm-Message-State: AFuF++kMGiMT7IZDTipjr3kkE9uIBaF/V0apD8KDNhTSydX+P/898Tlc
PADLyLpjJhL0gVRfoTYTwM6OT4TNx1hIeBJxr5IlMtrRnsuWxB4HXZUcGLC4qWVrktF+JmuUMpU
oUlDruaYNr+BciWlzCDdgo1lB1ROzD+2nEFc5p59puc7j
X-Gm-Gg: AYBFou0kkck1XbVsIp6yvoUFNp51r5PJ3NABKtTANKR/DjckTaoZyWlQIILTrMLPMA+
7PIlxuAaxz9OrKuOFurs8XLb0ejSAVCfPYiZBAPf4xSK/kc1nPUdJ1pIS724saXEcKlskgj3Rjc
IPK268qmN7xaaagS6qH0fPDJzdluKa5xBiM//wZ0HV89bQP7slskBD1g8+C/KwJaziPgypa+lpt
Tac9yw8evOry8RV+0wWv1rAp+1iML4kdwocE/j3YnNvg4sFpAu762yniw22xQiJ3vC+YHpgvEnJ
SuwRACOuyiu0+slg3LSDwu9FHUz/GXhXrYmSNy6EyvqznKNqugOWCCLG3hmk1SbUNmo+YtxGixh
7gZEAwbAqk1/hTQoqadXajqwH65jF+ey4ZfB/MBtTN8ozvURV
X-Received: by 2002:a05:690e:168e:b0:672:99e1:11cf with SMTP id
956f58d0204a3-67299e115demr2168950d50.108.1789999978269; Mon, 21 Sep 2026
07:12:58 -0700 (PDT)
MIME-Version: 1.0
From: "martingruenberg00@outlook.com"
Date: Mon, 21 Sep 2026 15:12:46 +0100
X-Gm-Features: AcwNN1UpLV2ftlA_VdtuHKouQpkSbtyin4jGxJlPdg-M4tzCQhAjXSf8kqv7lGg
Message-ID:
Subject: Confidential message
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000da4f35065bfed83e"
Bcc: dave@nl2k.ab.ca
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Confidential message My name is Mr.Martin J. Gruenberg, and
I would like to present a business opportunity that may be advantageous for
both of us. In my position at the bank, I have come across funds [...]
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.228.12 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[martin.gruenberg00(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[martin.gruenberg00(at)gmail.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.228.12 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.228.12 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Confidential message
--000000000000da4f35065bfed83e
Content-Type: text/plain; charset="UTF-8"
Confidential message
My name is Mr.Martin J. Gruenberg, and I would like to present a business
opportunity that may be advantageous for both of us. In my position at the
bank, I have come across funds that belong to a deceased customer.
I have all the necessary documentation to facilitate the release of these
funds, and I am suggesting an equal division of the total amount. I kindly
ask for your response to discuss further details regarding the process and
your potential involvement. Rest assured, this opportunity is completely
risk-free.
to me
--000000000000da4f35065bfed83e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Confidential message
My name is Mr.Martin J. Gruenb=
erg, and I would like to present a business opportunity that may be advanta=
geous for both of us. In my position at the bank, I have come across funds =
that belong to a deceased customer.
I have all the necessary documen=
tation to facilitate the release of these funds, and I am suggesting an equ=
al division of the total amount. I kindly ask for your response to discuss =
further details regarding the process and your potential involvement. Rest =
assured, this opportunity is completely risk-free.
to me
--000000000000da4f35065bfed83e--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 09:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8fZY-000000005jm-2G3t
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 09:04:48 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 09:04:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from qhupl.tswenni.com ([20.240.194.100]:59893)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8e3H-00000000FIW-0itc
for root@nk.ca;
Mon, 21 Sep 2026 07:27:30 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=qhupl.tswenni.com;
h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;
i=pnwtlfudo@qhupl.tswenni.com;
bh=kebY/a40L46UK6ZtTVSYqimbmv75m6Cz4GIpWVFmu7w=;
b=QkQtzdLwcZdVaRGAJaybWpok6OpHHVw613hmDFrseYAVnLyiF2BlEO4ewMRV79X79V2FBLnwWEtz
TxEjgZNDMTLkn+cGxW8XIWQPr3RWLGMvj+c/MN1AK0f8DG28n5RjDD3jou3pHS/Tlc1Itdqq6jJ9
GiNvNTYetLyTAcLU3vWoqPO2h/1ElKtZhoAXs6UUm1ckLnbYwKQhijzW7WN6cdsbZEqq8aL4gen4
hMSOI+fQyVRHefG6kFbCLNaM1vuBzJxiv3FZIOr/rq9rF4bp2mEwlsxPYiiONKoYyM5sFt1lcMuZ
QDv7R7hcp9EZXyLmql6TR3wL28ohcYO2hjW9+Q==
Content-Type: multipart/alternative;
boundary="===============3700870325063818660=="
MIME-Version: 1.0
From: Wealthsimple Team
To: root@nk.ca
Subject: Your tax details need an update
Date: Mon, 21 Sep 2026 09:26:35 -0400
Message-ID: <178999719504.30787.11039605708692946691@qhupl.tswenni.com>
Reply-To: feedback@wealthsimple.com
Feedback-ID: campaign:wealthsimple.com:mailer
X-Spam_score: 30.2
X-Spam_score_int: 302
X-Spam_bar: ++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello root, We noticed that the tax information on your account
is incomplete or out of date. To comply with current regulations, we ask
you to update it as soon as you can. Account: root@nk.ca Reference: 79012426
Status: Update required
Content analysis details: (30.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 HK_RANDOM_FROM From username looks random
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
2.3 MANGLED_ACCNT BODY: mangled account(s)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[20.240.194.100 listed in bl.score.senderscore.com]
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]
1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]
1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]
1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]
1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]
1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]
1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]
1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]
1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]
1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]
1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]
1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]
1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]
1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]
1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]
1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]
1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]
1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]
1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]
1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 WINDOWS_7BITS Windows charset announced as 7 bit
1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)
0.0 GB_CUSTOM_HTM_URI Custom html uri
Subject: {SPAM?} Your tax details need an update
--===============3700870325063818660==
Content-Type: text/plain; charset=windows-1252
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Hello root,
We noticed that the tax information on your account is incomplete or
out of date. To comply with current regulations, we ask you to update
it as soon as you can.
Account: root@nk.ca
Reference: 79012426
Status: Update required
Update your tax details:
https://www.huizegroup.com/?email=root@nk.ca&uid=lsiZEbByw4aKXXWPb2t5ezXq
It only takes a minute or two - and it helps you avoid withholding
tax at a higher rate.
Warm regards,
The Wealthsimple team
---
This email was sent automatically to root@nk.ca.
If this message was not meant for you, you can safely ignore it.
--===============3700870325063818660==
Content-Type: text/html; charset=utf-8
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Your tax details need an update
Wealthsimple
|
A note from Wealthsimple
|
Your tax details
need an update
|
Hello root,
We noticed that the tax information on your account is incomplete or out of date. To comply with current regulations, we ask you to update it as soon as you can.
|
|
It only takes a minute or two - and it helps you avoid withholding tax at a higher rate.
|
Account
root@nk.ca
|
Reference
98986909
|
Status
Update required
|
|
Warm regards,
The Wealthsimple team
|
This email was sent automatically to root@nk.ca.
If this message was not meant for you, you can safely ignore it.
Help
·
Privacy
·
Terms
Copyright Wealthsimple Technologies Inc. All rights reserved.
|
|
--===============3700870325063818660==--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 09:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8fZP-000000005j0-35TR
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 09:04:39 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 09:04:39 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from qhupl.tswenni.com ([20.240.194.100]:36327)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8e1f-00000000F6Q-2LzK
for doctor@nk.ca;
Mon, 21 Sep 2026 07:25:51 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=qhupl.tswenni.com;
h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;
i=qnephqfss@qhupl.tswenni.com;
bh=6wEcFg+UK6gptLxLF1ObrRG9So55d7ZVi+57Y2NoBt0=;
b=MRbMbt3JZgdbljCBrXqwTNrQ3+HOeiFJn3qBnD85N/golk4ZYU8wh+3XS0+xxjGackWu2Q31yju+
egLSCGr+fi0TI/BYak7fpFkCd44iOE6IpZIChyjuD+zV7xgFL0/l3zNRZeUD6s9KwS6/kmSHh3ut
Q+bHbl0Q/Ggz/oqwomjzqNljp41qZt3AVC04391F/sGlTaF49db3GNfbdDjh0VdUmbk5pDqbd3Td
8FmuDKV9rX0LKMjrhd5tOB/gYx/9Ot7RooPGr+s/dPPdDdTBpMMpx5gEuyOGuSCsXhB9zXBTQHvY
ntEP7kwZea7NJer8wh/rjIVAmhPA0cosClzQ2Q==
Content-Type: multipart/alternative;
boundary="===============2890450572559252456=="
MIME-Version: 1.0
From: Wealthsimple investing
To: doctor@nk.ca
Subject: Your tax details need an update
Date: Mon, 21 Sep 2026 09:24:53 -0400
Message-ID: <178999709355.30787.11860610694060458852@qhupl.tswenni.com>
Reply-To: feedback@wealthsimple.com
Feedback-ID: campaign:wealthsimple.com:mailer
X-Spam_score: 31.9
X-Spam_score_int: 319
X-Spam_bar: +++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello doctor, We noticed that the tax information on your
account is incomplete or out of date. To comply with current regulations,
we ask you to update it as soon as you can. Account: doctor@nk.ca Reference:
68692127 Status: Update required
Content analysis details: (31.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
2.3 MANGLED_DOCTOR BODY: mangled doctor
2.3 MANGLED_ACCNT BODY: mangled account(s)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[20.240.194.100 listed in bl.score.senderscore.com]
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]
1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]
1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]
1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]
1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]
1.0 J_WEEDS_Q FULL: Dec/Hex char Enc [Qq]
1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]
1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]
1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]
1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]
1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]
1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]
1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]
1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]
1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]
1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]
1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]
1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]
1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]
1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]
1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]
0.0 GB_CUSTOM_HTM_URI Custom html uri
1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)
2.0 WINDOWS_7BITS Windows charset announced as 7 bit
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} Your tax details need an update
--===============2890450572559252456==
Content-Type: text/plain; charset=windows-1252
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Hello doctor,
We noticed that the tax information on your account is incomplete or
out of date. To comply with current regulations, we ask you to update
it as soon as you can.
Account: doctor@nk.ca
Reference: 68692127
Status: Update required
Update your tax details:
https://www.jskxyl.com/?email=doctor@nk.ca&uid=pyvdTGHy8zhHHA89LSTf2ilK
It only takes a minute or two - and it helps you avoid withholding
tax at a higher rate.
Warm regards,
The Wealthsimple team
---
This email was sent automatically to doctor@nk.ca.
If this message was not meant for you, you can safely ignore it.
--===============2890450572559252456==
Content-Type: text/html; charset=utf-8
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Your tax details need an update
Wealthsimple
|
A note from Wealthsimple
|
Your tax details
need an update
|
Hello doctor,
We noticed that the tax information on your account is incomplete or out of date. To comply with current regulations, we ask you to update it as soon as you can.
|
|
It only takes a minute or two - and it helps you avoid withholding tax at a higher rate.
|
Account
doctor@nk.ca
|
Reference
15302828
|
Status
Update required
|
|
Warm regards,
The Wealthsimple team
|
This email was sent automatically to doctor@nk.ca.
If this message was not meant for you, you can safely ignore it.
Help
·
Privacy
·
Terms
Copyright Wealthsimple Technologies Inc. All rights reserved.
|
|
--===============2890450572559252456==--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 07:16:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8dsi-000000005Q2-30Lk
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 07:16:28 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 07:16:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs2-f15.google.com ([74.125.227.15]:33116)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8ZEf-0000000005D-1B2D
for doctor@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 02:18:58 -0600
Received: by mail-vs2-f15.google.com with SMTP id 71dfb90a1353d-5c981b0d59cso1695301e0c.3
for ; Mon, 21 Sep 2026 01:17:34 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1789978649; cv=none;
d=google.com; s=arc-20260327;
b=UEpYHECSIprMnRlyTi4btMNZ5fwroHhxqLyuLux6TUeULOP5l2J/4yih4pOh9q0Ju/
8iK+AraM/XGVEaj0WLtb3RRvzNRv9Pl2HpPhcnfLQItYce3eFUr2FSAxAcWfrH1YQSyB
72LLY/auE6Pa+Z1ORfIWlzfoW6V7PO7dzOXE5eqkph6J+HWmho3CCCycm6EZhuEE6nIM
94F6VqAGI13WB9LLZdLoAsOZiuijk8A+GtWfxjKE8MlNwhmppir8ZMAMhP+N8m9+/lvc
1x86nBMFeB64sEXx2bpuaI1S3ZrBUTvbu069xJxxoM+J2idcU0LYe6UeXEKT63ma9TKN
vG7A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
fh=Cbj9vSK1W7yoRZRdOfZJMtquxUbc3jT+BV3cWtEo2fs=;
b=jDh70zaIKeJS+nKoFQcFy8pVgCM/aobQJqAmDpXS7X/yEojvNl8Ft49NXYs1E9dbH5
wZLppXZVU5qLid0AznSBEt0UEGGD8uSnQtLORKnwaPbyemF+VbseuLiBw279G7UXAH4S
5fHWHo0yKagcyaWkWc3wCs60aDvssl0K6eN0LPIGsalBLCFzX1br2DAQCZlbBafITWJt
fpNNqT8WixAM7WpDZOtJN+1o3tGxqU+/ecZL7ZqpXHRbgVjSLasTntrrnM55A0EVrwXF
NGjZ+c1IKa0tYUEmiuftSqcIFNJEcbkJ2cmNdvlOGZf1vLqJ6iD5ZcMhodYA/nerByln
gcyA==;
darn=doctor.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1789978649; x=1790583449; darn=doctor.nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=aFye5pB3L+ZAL6zStb19hnB8KFwjCvMrO2GoQYppgBvk88EA3Ygfc1PWT4ULMS7SrY
V1enXsCmnmuUqyxRkbieRZ7jI7mAJrCXWLsXuB7P6kuz/531LXY9AjmXlDbDowtwgNUV
Zozarhdy0Jpju8yj7kRVqqQd/y1bpBnXXGKtT9pF7ADe+shtwoTQn/HxBbpWyEX4X36y
oMkUKbi9DRWyU+fqe9IiF/9G9LSZf497GqJ/qcuIJdVDopCP+6xP3uP/PdmxtaOOZAwx
/OPlbc2JrYiXY5Nx9ZCJozuSioliztAFXE2DrArLSp56hn62hoBvLne3FOGkhctOy/Xg
pfpA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789978649; x=1790583449;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=YJIrCd5VNe6887mFuLOYkFo27EU3HqgM+qH0jQiVu7XvYGr5QXe6JyxL+s1T6WyRlG
pvAGFpr9x8z3XL8QEsv8HbpBGhd8x1NXWee5oQFgkjOTXTUQiyTLpwvcsQP74a1keur/
N2kAJbqNwybg1OhZA1fRdOzcJE0SN+ySAMBjXCC0P3GTmnCzd39qseHEbZCn/+rcuYsz
yQE+x2thl5fFZDD7vLSlc+PYqLEiZY2KqG3sqnAiTropO9gutk6KuViEctS/7dqkCvpI
/mLyOuLcRY8GJwXmYcQaje+5u+9AL8HnNuO/z84NGrMac+DJRKmdcWhPE//sf7QENcFl
3m3g==
X-Forwarded-Encrypted: i=1; AKwUvBxc/s0T8XERZA0VOzxsDWY+Yt+evtS8FKVobNHd75srzYGpNwZ/CNPR02XU0elAszru0kic9ns=@doctor.nl2k.ab.ca
X-Gm-Message-State: AFuF++mD/Ly11nZObFTlbNXLpaHDRPB8pSo4rcEjxQKa2xo8bXi0CMvP
haMQvCxT7ckAqYtq0zwFitknTkVB54YuMvhFJkrrtrDZ4L8S1UL6LgzYxXL6IKdENoRgSq19oVe
Iv7FjpUkYwwe19VMXuiXXHajr/vuwLzsvhAS8YK0=
X-Gm-Gg: AYBFou2ukNH217j5Np9qBHujMhk7e5z8dCNS0FH5AmU2ZQGyKDcpbfndAFGTcuA0mS8
9hXmznScM52K/kdWO0CtfNXeDN0oiBzlqdMT3XMmG3HSngbOVHRNOUtu3Wad+uhUxY3Ue+lTnsZ
dqYC1EsCFUJL76jw5vX+vqtOY1xsnZ4mNeZYBT2+yOr6lIHUtDmMi/4dhPzF9pJ5pevqISM+Lvs
oIv8DtYw93oTTpGCdHEkz2dFHjNXLxxrO+4gbxz3lgxwuj1A+U8Ie0WRtMBLucXrPEq5Ea7BkKf
LKas5KrMv4qcaCR0wY7n5Z+gZNk3E0hV52B/tNZzexHmz1M8lasA/EMjxaZq8tUC0wjYhlOM1Po
hpwbsjss3gJa7zg==
X-Received: by 2002:a05:690e:1349:b0:671:8e1:2386 with SMTP id
956f58d0204a3-6717fcf014bmr2850265d50.44.1789978197126; Mon, 21 Sep 2026
01:09:57 -0700 (PDT)
MIME-Version: 1.0
From: "relieffunde@outlook.com"
Date: Mon, 21 Sep 2026 13:39:46 +0530
X-Gm-Features: AcwNN1XUbFwPZynzidLxneCpY8Aah1Xc9RFWlPxOam2yTgvODnIPZb1IIajwqLg
Message-ID:
Subject: UN HUMANITARIAN AID PROGRAM 2026
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009871fd065bf9c651"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 20.5
X-Spam_score_int: 205
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR
UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.227.15 listed in dnsbl.ahbl.org]
[74.125.227.15 listed in dnsbl.ahbl.org]
[74.125.227.15 listed in dnsbl.ahbl.org]
[74.125.227.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.227.15 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.227.15 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.227.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.227.15 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kouamekouakouemmanuel49(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kouamekouakouemmanuel49(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.5 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail
account
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.0 FREEMAIL_REPLY From and body contain different freemails
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.15 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.15 listed in wl.mailspike.net]
Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026
--0000000000009871fd065bf9c651
Content-Type: text/plain; charset="UTF-8"
DEAR SIR/ MADAM,
YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO
CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS:
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:
--0000000000009871fd065bf9c651
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
DEAR SIR=
/ MADAM,
ail=3D"gmail_signature">
=C2=A0=C2=A0
YOUR EMAIL HA=
S BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR W=
INNING PRIZE, EMAIL US.
=3D"_blank">relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS: =
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0=
--0000000000009871fd065bf9c651--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 07:16:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8dsZ-000000004vD-1txL
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 07:16:19 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 07:16:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs2-f40.google.com ([74.125.227.40]:42177)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8ZDz-00000000Q0o-1IZ0
for doctor@nl2k.ab.ca;
Mon, 21 Sep 2026 02:18:17 -0600
Received: by mail-vs2-f40.google.com with SMTP id 71dfb90a1353d-5c9d8b323d9so262124e0c.1
for ; Mon, 21 Sep 2026 01:16:21 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1789978575; cv=none;
d=google.com; s=arc-20260327;
b=OztxUv7ui6sVNCR/qywfp07DFT6IjX7d+T8zga+oVpMDxK3jxvc1vTme3CmwWEJvlj
aGYiXiUUMldN62ue1s2dBnsu5Wu0gk3+zCVtOodca+BYCnWGnxTIVHucDzH8e7LS8O8c
ttZP736nSC1nIAMtt9RSETnIWaxVRLfMjXoaEL2qpS1XJFmSCf1sPKA9Rn/bK/1wvrNi
kzFYpAdPTkGNOSIwCg7HcTT3eWH4AZzpLR61CRvZ5Bf1sLzLwG3gl3addHoGkne8XHCO
hkL1hYr3W0Su+pNa3CsqzIi4vuOELHOCJP1oKMs2c7hoUGuCDOmn0V3vIcMkVAv7cK5N
y1xQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
fh=w9KosX7+8a9wkLJKfYxbXKduy5eUK8cRyHHwq3AL2+8=;
b=Bh6mCG+8mwgJ6y+plcnvVXycBcFekFWcUp3x68KxLGBnIIuxjoED4n7yHsbFhrqmV5
7fuw2N1m4VEls0pe3J/yyCYRITFu580dycYTkJN5Qz3rLrd+XUbFEODg+KRIbQjKUVuP
BSEP9sRQAEslWUK2ahtLK99wGF+6FRTLHpDSwLivVTv7HRzmI1SiHeHVF+hdlf30jZ/s
Y8wb1TBwTaPOiLZEUEk7eYK5tRuVfjG7rNObQM5XsbOPYkHxPGsjcTL3QTT5NDfUP/WZ
EIfZ3xn0SJJ5f7Fxc86e1o8rcA1wKLkItb57fSOcPnq2AC7dEkZ4nUCxOX6F3wqsq7sZ
ZNRA==;
darn=nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1789978575; x=1790583375; darn=nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=V/mOdTwkEjlN3G0V55LJ+L51ZLMroKLghgUlpBPlNaGnY8iNpwjRgcnJCQlSVN3dVJ
7YtLixQfgdODwq5dxL+Q40EOU5PCgXLTBHd/g7vqY+NvmR6O36w8+i24Ydr2xKUs/UL5
ENZojWbcGzqqLUAeVnbxX9ozrXAdOsHQWfPtrFZLRJF2OvFrlc8EGGzjTt6b0ZUgiAMR
smLm3GoQpVO/kmM7KqpSxryINkuFB3sUE4xZX5nR6Wx3IHkwfXms6HZJDyuhq4KHBAkl
kDMNDdBxP8rKZg7PQYojKZetJuLZeXu+LevpquSzxalyjtPRa0GWUEBiwc7WNoKqlgDN
1HPg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789978575; x=1790583375;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=ASgV7d2SDtA8Brj09skq+H7fQz4jBrT7oykq0OqMS/62t4F8WQDjR5V6sd1It8N2u/
nUTUUm1rsa28jYwgIaat8opZDhL7JzKhwP9IDkyxIa13SQbxXHoi33o9O+VgJcG0POMO
UizNn+C+QY1EvQjPaScIb7j4j4dDkHebwHlqT2/MUrPi/YftAjk548nYR33FrHAq9Ji4
hB+JO7NRHC68EcrznIk0/DjRqCX3Pfd7FBwQ/P3KQT7AVheXakTdi03jJE49IKc320JF
MRouy5M4LMzpjzyZKmHEhDD56caanj82tFZwNNx9s9AwVbIDPefqPQELRVoPj8Iq1hM+
JrjQ==
X-Forwarded-Encrypted: i=1; AKwUvBzBURn9vm2/mHmEf2K3y3AUo5DGvShLnY+FPHvoojkDGwR2xh1qii9TXIHaiIhAjLS2UZjQ5vk=@nl2k.ab.ca
X-Gm-Message-State: AFuF++kluX411e8j19SZrwYQj3mmXg5B+f92kRoIEv+2IDHKUtCUJ0QE
b7cSyAvWM3cZISAPbcnMQ472SSfPx2o+FmWKOTISB5Y2xw1UjLY4DL8mKea1BZ7Mnh+Pkvd3gNq
Un9J8jaxwTCj5eBXZIhlZdr6Om6HsCbH0985jFhA=
X-Gm-Gg: AYBFou29sEMhD9/dVftckUbUE46//jLtgBDR0dBvbs/4IKr7W8knAzpUTNIz1/QApho
3BBQcFqUBUbz3XKglsnujkcH5Ik8IPRr3fyDFnRl1duMsMOMJSWlgILE7A1zSX46zdX741RsTxy
XipyS5oaZb9VmkZkGSoiajz5noyzXifwbXM88QFsOiroJX8CnCt005or9I6VKlsZraI5ks+rqKd
wyVOaOP+FY9i0YvibdMG81he//Wm0PSHOPX05/+s8OrQDN6qC/Da8WELjuMtWKdv35Z+hLGSvDS
pOWq5Gx2PqZeyu0jd+LklUJMt0iFxCGhJhSMQQkYISpDc8CvqDM0BvtFynS2P8xTDlTf6Mlmjg3
lVKbn+9PBs7eo
X-Received: by 2002:a05:690e:1349:b0:671:8e1:2386 with SMTP id
956f58d0204a3-6717fcf014bmr2850265d50.44.1789978197126; Mon, 21 Sep 2026
01:09:57 -0700 (PDT)
MIME-Version: 1.0
From: "relieffunde@outlook.com"
Date: Mon, 21 Sep 2026 13:39:46 +0530
X-Gm-Features: AcwNN1XUbFwPZynzidLxneCpY8Aah1Xc9RFWlPxOam2yTgvODnIPZb1IIajwqLg
Message-ID:
Subject: UN HUMANITARIAN AID PROGRAM 2026
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009871fd065bf9c651"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 20.5
X-Spam_score_int: 205
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR
UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
[74.125.227.40 listed in dnsbl.ahbl.org]
[74.125.227.40 listed in dnsbl.ahbl.org]
[74.125.227.40 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.40 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.40 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kouamekouakouemmanuel49(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kouamekouakouemmanuel49(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
3.5 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail
account
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
1.0 FREEMAIL_REPLY From and body contain different freemails
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
0.0 FILL_THIS_FORM Fill in a form with personal information
1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026
--0000000000009871fd065bf9c651
Content-Type: text/plain; charset="UTF-8"
DEAR SIR/ MADAM,
YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO
CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS:
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:
--0000000000009871fd065bf9c651
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
DEAR SIR=
/ MADAM,
ail=3D"gmail_signature">
=C2=A0=C2=A0
YOUR EMAIL HA=
S BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR W=
INNING PRIZE, EMAIL US.
=3D"_blank">relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS: =
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0=
--0000000000009871fd065bf9c651--