Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 11 Oct 2026 04:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFqgY-00000000JUA-1Tgx

for dave@doctor.nl2k.ab.ca;

Sun, 11 Oct 2026 04:21:42 -0600

Resent-From: The Doctor

Resent-Date: Sun, 11 Oct 2026 04:21:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f71.google.com ([209.85.217.71]:51536)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <110715256@huertocordoba.com.ar>)

id 1xFqcR-00000000JA8-21O5

for doctor@nk.ca;

Sun, 11 Oct 2026 04:17:35 -0600

Received: by mail-vs1-f71.google.com with SMTP id ada2fe7eead31-7bf45388253so916879137.3

for ; Sun, 11 Oct 2026 03:16:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=huertocordoba-com-ar.20251104.gappssmtp.com; s=20251104; t=1791713793; x=1792318593; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=RTN1+CcIEH8eHEG1OqBsM5b/nGiE04j1uZIrfudeDd4=;

b=G5XRmgF90JA9B0ba5hCQXfHLvS3uxhymnWurUP1oyjGoCYjyjmgLgbMsOWZj9sriG5

i6QW8cDw9rlCFSisCt/Cs4OZwvWO1KTOJ3vQwDVyOjjwFYIMt0Q+mnPwktqUH+/x7ReX

c81uL5f/LjsvkWeNZHFcrcg5Hr8iHNx/auLTOifzOoo0sluwT8CYf0vqLZq9oJ7mL4X/

x3futxrYYl/UNR4A0fP2nxAVMYb2JzltpL0P9F3ZOxUrsuaCfx3B/I3c17NVCg7VM72t

InX4fsRljvzWASG28qb4HxxeARIWgwHkDUMzZGf8FtD8p/TE1NWS/0hW0Tx8+E8ysM6I

A0yg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791713793; x=1792318593;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=RTN1+CcIEH8eHEG1OqBsM5b/nGiE04j1uZIrfudeDd4=;

b=lY7jIKPFs2b4pnn3bOfIHbHB609xdGyy1lu/UWe50cwu4Ccdag3J6W4RI4NGJFUmsD

1AYKTLk4/MrlB2hJjc3P5OwnTMtVfwblu9FPO9gV/eWqerIYXiN5AE5FehciIw5rM8pR

HQk0O9YZN29X95ZMC/emFKO0Wf0Mi6d3CSWTmZyVyMovfwXVCseS7OvAnuVIdi8eUAAm

cG4WhmGChfsAWWZ1Xxie2v4egSBVuVML8gveYk0mbZm9BQo+BjpgmSm0xP0ppgrOJife

nD4zGmcFQfEuoBEmtV6l2ErX4puj2t8LgT6cDQgeuRYoln4TZUDY2egVJHwgt4UVzVtk

Wkug==

X-Gm-Message-State: AFq9FYLwqUwROGajXUCHW9Vh+R4cj1fmPG196w9/g8Ye9Xf7f5dUn4sW

b6x2IewJmbil/PfhDyV/vCyakERaP4tI+gq1pKV+EzlpGvHoXjZ0x1/KnNZEG3A8mrLR2GwBRJt

vJIVre/YTMfxekwk2IikgTa8z

MIME-Version: 1.0

X-Received: by 2002:a05:6102:2d09:b0:7b3:4199:2dd7 with SMTP id

ada2fe7eead31-7cb361bcee2mr2279503137.0.1791713792949; Sun, 11 Oct 2026

03:16:32 -0700 (PDT)

Message-ID:

Date: Sun, 11 Oct 2026 10:16:32 +0000

Subject: =?UTF-8?Q?Uw_besparing_berekend=3A_tot_=E2=82=AC984_per_jaar_mogelijk?=

From: Energiecheck Nederland <110715256@huertocordoba.com.ar>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000002b1418065d8de030"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Energietarieven zijn gedaald. Check binnen 1 minuut wat u

kunt besparen. Persoonlijk Energierapport Energiecheck Nederland



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: wirels.xyz]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.71 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.217.71 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.71 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: wirels.xyz (xyz)]

1.0 OPT_OUT BODY: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Uw_besparing_berekend=3A_tot_=E2=82=AC984_per_jaar_mogelijk?=



--0000000000002b1418065d8de030

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RW5lcmdpZXRhcmlldmVuIHppam4gZ2VkYWFsZC4gQ2hlY2sgYmlubmVuIDEgbWludXV0IHdhdCB1

IGt1bnQgYmVzcGFyZW4uDQoNCg0KDQoNCg0KUGVyc29vbmxpamsgRW5lcmdpZXJhcHBvcnQNCg0K

RW5lcmdpZWNoZWNrIE5lZGVybGFuZA0KDQoNCg0KRW5lcmdpZXRhcmlldmVuIHppam4gZ2VkYWFs

ZCDigJQgY2hlY2sgbnUgdXcgYmVzcGFyaW5nDQoNCg0KDQoNClV3IG1vZ2VsaWprZSBiZXNwYXJp

bmcNCg0KR3JhdGlzLCBvbmFmaGFua2VsaWprIGVuIHpvbmRlciB2ZXJwbGljaHRpbmdlbg0KDQoN

CkJlc3BhcmluZyB0b3QNCg0K4oKsOTg0DQoNCnBlciBqYWFyDQoNCg0KQmVzcGFyaW5nc3BvdGVu

dGllZWwNCg0KDQpFbmVyZ2lldGFyaWV2ZW4gemlqbiBnZWRhYWxkLiBEaXQgaXMgaGV0IG1vbWVu

dCBvbSB0ZSBjaGVja2VuIHdhdCB1ICANCmNvbmNyZWV0IGt1bnQgYmVzcGFyZW4gb3AgdXcgYWRy

ZXMuIEJpbm5lbiAxIG1pbnV1dCB6aWV0IHUgd2F0IGRpdCBiZXRla2VudCAgDQp2b29yIHV3IG1h

YW5kLSBlbiBqYWFybGFzdGVuLg0KDQpVIHppZXQgZGlyZWN0IHdlbGtlIGFhbnBhc3NpbmdlbiBp

biB1dyBzaXR1YXRpZSBoZXQgbWVlc3RlIG9wbGV2ZXJlbiBlbiAgDQp3YWFyIHUgdmFuZGFhZyBu

b2cgdm9vcmRlZWwga3VudCBwYWtrZW4uDQoNCg0KDQoNCjEgVnVsIHV3IHBvc3Rjb2RlIGVuIGh1

aXNudW1tZXIgaW4NCg0KDQoNCg0KDQoyIFdpaiB2ZXJpZmllcmVuIHV3IGFkcmVzIGVuIGJlcmVr

ZW5lbiB1dyBpbmRpY2F0aWUNCg0KDQoNCg0KDQozIFUgemlldCBkaXJlY3QgdXcgbW9nZWxpamtl

IHZvb3JkZWVsIGVuIHZlcnZvbGdzdGFwDQoNCg0KDQpEZSB3aW50ZXIgdmVyaG9vZ3QgaGV0IHZl

cmJydWlrIGVuIGFjdGllcyB2ZXJhbmRlcmVuIHNuZWwuIENoZWNrIG51IG9mICANCmhvbmRlcmRl

biBldXJvJ3Mgdm9vcmRlZWwgZGl0IG5hamFhciByZWFsaXN0aXNjaCBpcy4NCg0KDQoNCg0KU3Rh

cnQgZ3JhdGlzIHNjYW4NCg0KDQoNCg0KRGl0IGlzIGVlbiBvbmFmaGFua2VsaWprZSBwcm9tb3Rp

ZSBlbiBpcyBuaWV0IHZlcmJvbmRlbiBhYW4gb2YgZ29lZGdla2V1cmQgIA0KZG9vciBFbmVyZ2ll

Y2hlY2sgTmVkZXJsYW5kLiBBbGxlIHJlY2h0ZW4gdm9vcmJlaG91ZGVuLg0KDQpVaXRzY2hyaWp2

ZW4NCg0KDQoNCg0KDQpPcHQgb3V0DQo=

--0000000000002b1418065d8de030

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






schemas-microsoft-com:office:office">










l=3Dno,date=3Dno,url=3Dno">





Energiecheck










nsparent;">Energietarieven zijn gedaald. Check binnen 1 minuut wat u kunt b=

esparen.











=3D"0" border=3D"0" style=3D"margin:0 auto;">



























































Persoonlijk Energierapport



Energiecheck Nederland


Energietarieven zijn gedaald =E2=80=94 check nu uw =

besparing






Uw mogelijke besparing



Gratis, onafhankelijk en zonder verplichtingen









Besparing tot



=E2=82=AC984



per jaar











Besparingspotentie=

el















Energietarieven zijn gedaald. Dit is het moment om te checken wat u concree=

t kunt besparen op uw adres. Binnen 1 minuut ziet u wat dit betekent voor u=

w maand- en jaarlasten.







U ziet direct welke aanpassingen in uw situatie het meeste opleveren en waa=

r u vandaag nog voordeel kunt pakken.








=3D"0" border=3D"0">






















0">









1 Vul uw postcode en huisnummer in





0">







2 Wij verifieren uw adres en berekenen uw indicatie
td>



0">







3 U ziet direct uw mogelijke voordeel en vervolgstap<=

/td>








De winter verhoogt het verbruik en acties veranderen s=

nel. Check nu of honderden euro's voordeel dit najaar realistisch is.



=3D"0" border=3D"0">











=

Start gratis scan




Dit is een onafhanke=

lijke promotie en is niet verbonden aan of goedgekeurd door Energiecheck Ne=

derland. Alle rechten voorbehouden.




14f1" style=3D"color:#888888;text-decoration:underline;">Uitschrijven
p>









=3D"1" style=3D"display:none">

<=

a href=3D"https://wirels.xyz#t/p/9b197a9da833a5e314f1" style=3D"color:#999;=

text-decoration:underline;">Opt out






--0000000000002b1418065d8de030--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 10 Oct 2026 14:33:41 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFdkk-00000000NyU-1bk6

for dave@doctor.nl2k.ab.ca;

Sat, 10 Oct 2026 14:33:10 -0600

Resent-From: The Doctor

Resent-Date: Sat, 10 Oct 2026 14:33:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f172.google.com ([74.125.82.172]:52463)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFaRL-000000005rP-07xd

for root@nk.ca;

Sat, 10 Oct 2026 11:01:03 -0600

Received: by mail-dy1-f172.google.com with SMTP id 5a478bee46e88-33bf40b0c8bso2106816eec.0

for ; Sat, 10 Oct 2026 10:00:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webappsconsultants.com; s=google; t=1791651602; x=1792256402; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=MiYuc3x2eDS+8GV1jjYE/cI7rF5w6eUtjeegj/UNZAo=;

b=lnoy/KPzy8HhwIkbWRUhuBkKm0CqqsSOuJaYiY5sxv1N+Ik/rdcBQCBJUzQLrBhTBD

qsRTFB2yUvBmMZDZn2ei0p4Dimq27oK7wehyuuy2qEdlojH7LVkJMVnRIcp1W7a5y9Bs

Azd1lD8JHE8PjjZETFCH6i/eKSatQ7tWQgha2B27BzbMxVUTgsy97epCCabm+bzi+KoS

Un2iq6Vf2fNbM+jmwA4rnJoPJMxChaeu/kExGBgvkX91cVV/nI0F+Sn7qi/ewBHy8iZr

jr+j7JgFlcFzwKsIB2SXPL4l6wfNvNhCsla1E4InkqzmRhwcNFwYCm91WRAra2IRAPBB

jZeA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791651602; x=1792256402;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=MiYuc3x2eDS+8GV1jjYE/cI7rF5w6eUtjeegj/UNZAo=;

b=q1FwswCfDpqW1dce80a74yVG5P5V762KxJzIloNypf/98xxqQQ87PPgrla5u56R5mF

kR6okGkYPXuZCUShZBlz8Q19JLHj3WqYSDMiuE/xf55V9d/aRRyHFGzGBzK19SnhcSDD

x3mz2PMvJzCTdkeysUWwZIV5l2JXtAgQYIRqYGgC0ItZYgKULYBfoGPxuX7K6TP3ES1b

d5V5JBukD0Hr9RRocRBhkn8Yt/mgXlJFx9l7uH0v9opAVJWVRQKEFEmzNCD++ubekQBa

kxeTtV8B5wP7vq1egji8ebXU8UHCcd8qr+NBnuf1FUsHBrykdg+Y2VPrVD52TEtakShm

GUzA==

X-Gm-Message-State: AFq9FYJBAsSUQEJX+OSwUg/y/6InrdOy1X5sfTBcijh9eh3+E4IItKnk

kpJ0pzE5LFKdx0zHi8a+Cg0y36Fyhfns1ToRYkISw9xHhuFtsJZk6JL8S3CUZXmd6zn5vYG/w9b

5z7TrULs=

X-Gm-Gg: AYBFou1o9eaJgp36sB25XVpunu92Tg068l1IrIcjtgr/+s8e6s9GeSqsWosVpDQdrSG

BxpCZKunzQ2LYwLZFxA8zkd8rsL+kBoLo55yG2r3NnKzQxxw3RMUkiKzwpIHWNIzgP9o3DJXtIM

Ms0rRFWPzHvfo/1PIafA/ifkLG9IJx98UwCHcotpWUlwssUjUiIpSKXiyRox//sdLfEpAEO4k9u

b87BhI1i9wEPq/w/A0See2AgW50wEiJXxr1ggpa66yH7NSEFAjorVQW6p5Q+7oEV7SXyNSOvuD9

1SfYIELO/h5IbJTKtbe3es3hcNZyUHFyet7VIh0mDEMatnaWGBnilGQdYYWeoJx/oVW/yGK0yRQ

sQQuxFAKPog93dVQnRVlJnjgVlpF5BN5xAKWpokmdBwQsYMVJvhefVQi+460gBcjk98avT4QH7z

3j6VTCEzMc9meIghQgjRnNHkOtq1IEj+6U1KnSCZN98aA/fRe3yuL+0oxVzfNTDzIvqC7ZuuWo9

PVlN5iqpIjfwdvNNC18yw==

X-Received: by 2002:a05:693c:4145:20b0:342:810b:9554 with SMTP id 5a478bee46e88-3537e0f5bb2mr7604036eec.32.1791651601627;

Sat, 10 Oct 2026 10:00:01 -0700 (PDT)

Received: from [127.0.0.1] ([103.106.232.14])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-3537ca1cc25sm20116253eec.8.2026.10.10.09.59.59

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Sat, 10 Oct 2026 10:00:00 -0700 (PDT)

From: Joseph

To: root@nk.ca

Subject: Reminder - www.nk.ca

Message-ID: <360cce39-b683-f25c-c92f-c6b2c5623b06@webappsconsultants.com>

Content-Transfer-Encoding: quoted-printable

Date: Sat, 10 Oct 2026 16:59:58 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 19.9

X-Spam_score_int: 199

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I was going through your website www.nk.ca and personally

saw you have a good design and it looks great, but it’s not ranking on

Google and other major search engines.



Content analysis details: (19.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.106.232.14 listed in will-spam-for-food.eu.org]

[103.106.232.14 listed in will-spam-for-food.eu.org]

[103.106.232.14 listed in will-spam-for-food.eu.org]

[103.106.232.14 listed in will-spam-for-food.eu.org]

[103.106.232.14 listed in will-spam-for-food.eu.org]

[103.106.232.14 listed in will-spam-for-food.eu.org]

[103.106.232.14 listed in will-spam-for-food.eu.org]

[103.106.232.14 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.172 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

[103.106.232.14 listed in dnsbl.ahbl.org]

[103.106.232.14 listed in dnsbl.ahbl.org]

[103.106.232.14 listed in dnsbl.ahbl.org]

[103.106.232.14 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.172 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.172 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.172 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.172 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.106.232.14 listed in sbl-xbl.spamhaus.org]

[103.106.232.14 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.106.232.14 listed in zen.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: webappsconsultants.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: webappsconsultants.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: webappsconsultants.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: webappsconsultants.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.172 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.172 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Reminder - www.nk.ca



Hi,

I was going through your website www.nk.ca and personally saw =

you have a good design and it looks great, but it=E2=80=99s not ranking on =

Google and other major search engines.

We can bring your website on =

the 1st page of Google, (Yahoo, Bing etc.).

I can give you our =

Complete SEO Audit along with a customary reach and add great value to your=

product/ service.

May I share price & report/analysis with you.=

Waiting for a quick reply.

Thanks & Regards,

Joseph,=



German language Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 10 Oct 2026 05:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFVLq-00000000GCB-1D7U

for dave@doctor.nl2k.ab.ca;

Sat, 10 Oct 2026 05:34:54 -0600

Resent-From: The Doctor

Resent-Date: Sat, 10 Oct 2026 05:34:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail9350.maychuemail.com ([112.213.93.50]:54042)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFTdK-00000000Cua-3xbx

for doctor@doctor.nl2k.ab.ca;

Sat, 10 Oct 2026 03:44:59 -0600

Received: from mail9350.maychuemail.com (mail9350.maychuemail.com [127.0.0.1])

by mail9350.maychuemail.com (Postfix) with ESMTP id 4j1zMG3Dx9z288M

for ; Sat, 10 Oct 2026 16:43:54 +0700 (+07)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=620idic.com.vn;

h=reply-to:date:from:to:subject:content-description

:content-transfer-encoding:mime-version:content-type; s=dkim; t=

1791625434; x=1794217435; bh=ehLjaAizzG7SZ9sLBPuVCqjEP2MNzj6qQT5

HlNq4uvE=; b=DnC27uEuMYefThUGnttAE/Iq+LpYQANKbZCsWTPX6CpjBnSbr2e

2CxMFaXox8zYpidnKI+XtVhNSKY+8W048KHxLElYaEI6H075w6NFtBU1GTbZ2H5N

3trv1+VRWMQ0ldG6XQFr8FDIlzJ2OclewenFEdhU81R7V7J5OxAUARdQhvs3tUMW

LVMF/Nx/NYGJAO+QBCWYNJBfSO6AzglLdjKJq+w3Dik+aExRALOemIzVwnJjmoUE

8eWUsAoFchVzWXXzgEjy/oWAySB1eJJuw8N2ryshR1Lt2mTKgT1iOeRFBvbaXIsG

4sNEAzROcE0/Un1OiI15Ppyo9BGQafUTDIg==

Received: from mail9350.maychuemail.com ([127.0.0.1])

by mail9350.maychuemail.com (mail9350.maychuemail.com [127.0.0.1]) (amavis, port 10026)

with ESMTP id kzOb5OW4BFEb for ;

Sat, 10 Oct 2026 16:43:54 +0700 (+07)

Received: by mail9350.maychuemail.com (Postfix, from userid 976)

id 4j1zKl0qXPz27hv; Sat, 10 Oct 2026 16:42:34 +0700 (+07)

Received: from DESKTOP-G28RE5S.lan (unknown [138.186.143.50])

by mail9350.maychuemail.com (Postfix) with ESMTPSA id 4j1zKL2ZXwz27dq;

Sat, 10 Oct 2026 16:42:12 +0700 (+07)

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Dominika Kulczyk

To: Recipients

From: lark620idic01@620idic.com.vn

Date: Sat, 10 Oct 2026 02:41:56 -0700

Reply-To: headquarter.ceo11@gmail.com

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ich bin Dominika Kulczyk, eine polnische Milliardärin und

Unternehmerin mit Sitz in den USA. Ich bin die Tochter von Jan Kulczyk, dem

einst reichsten Mann Polens. Zudem bin ich Mitbegründerin und Pr [...]



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[138.186.143.50 listed in will-spam-for-food.eu.org]

[138.186.143.50 listed in will-spam-for-food.eu.org]

[138.186.143.50 listed in will-spam-for-food.eu.org]

[138.186.143.50 listed in will-spam-for-food.eu.org]

[138.186.143.50 listed in will-spam-for-food.eu.org]

[138.186.143.50 listed in will-spam-for-food.eu.org]

[138.186.143.50 listed in will-spam-for-food.eu.org]

[138.186.143.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[112.213.93.50 listed in dnsbl.ahbl.org]

[112.213.93.50 listed in dnsbl.ahbl.org]

[112.213.93.50 listed in dnsbl.ahbl.org]

[112.213.93.50 listed in dnsbl.ahbl.org]

[138.186.143.50 listed in dnsbl.ahbl.org]

[138.186.143.50 listed in dnsbl.ahbl.org]

[138.186.143.50 listed in dnsbl.ahbl.org]

[138.186.143.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[112.213.93.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[112.213.93.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[112.213.93.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[112.213.93.50 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[112.213.93.50 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[headquarter.ceo11(at)gmail.com]

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Dominika Kulczyk



Ich bin Dominika Kulczyk, eine polnische Milliard=C3=A4rin und Unternehmeri=

n mit Sitz in den USA. Ich bin die Tochter von Jan Kulczyk, dem einst reich=

sten Mann Polens. Zudem bin ich Mitbegr=C3=BCnderin und Pr=C3=A4sidentin de=

r Kulczyk Foundation, im Aufsichtsrat der Kulczyk Holding sowie Mitbegr=C3=

=BCnderin der Values ??Consulting Group in den USA, wo ich auch gesch=C3=A4=

ftlich t=C3=A4tig bin.



Informationen =C3=BCber mich finden Sie unter:



https://en.wikipedia.org/wiki/Dominika_Kulczyk



Im Rahmen meines Wohlt=C3=A4tigkeitsprojekts beabsichtige ich, jeweils 450.=

000 US-Dollar aus meinem Verm=C3=B6gen an vier Einzelpersonen weltweit zu s=

penden. Wenn Sie diese E-Mail erhalten haben:



Bitte senden Sie mir Ihre Daten, damit ich meine Bank in den USA anweisen k=

ann, die =C3=9Cberweisung der 450.000 US-Dollar an Sie zu veranlassen =E2=

=80=93 eine Zuwendung, die Ihnen und auch anderen helfen soll.



Dominika Kulczyk

Kontaktieren Sie mich unter: vrosenburg@atomicmail.io

German language Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 10 Oct 2026 05:34:41 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFVLa-00000000FPI-3vLx

for dave@doctor.nl2k.ab.ca;

Sat, 10 Oct 2026 05:34:38 -0600

Resent-From: The Doctor

Resent-Date: Sat, 10 Oct 2026 05:34:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail9350.maychuemail.com ([112.213.93.50]:55576)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFT9K-000000008f9-2Y4X

for doctor@doctor.nl2k.ab.ca;

Sat, 10 Oct 2026 03:14:01 -0600

Received: from mail9350.maychuemail.com (mail9350.maychuemail.com [127.0.0.1])

by mail9350.maychuemail.com (Postfix) with ESMTP id 4j1ygQ6Qxcz27dW

for ; Sat, 10 Oct 2026 16:12:50 +0700 (+07)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=620idic.com.vn;

h=reply-to:date:from:to:subject:content-description

:content-transfer-encoding:mime-version:content-type; s=dkim; t=

1791623570; x=1794215571; bh=ehLjaAizzG7SZ9sLBPuVCqjEP2MNzj6qQT5

HlNq4uvE=; b=FiG0tA+5KUnLF88QpocdZnQYzI8vPA7qbdTMZsNngZywtmiwW2Z

qFeDD4Djl80UDqDcw94Mr4XH684YJYJlAfHmQs5YUXizZpkDZZlYnROggv4pNxZK

vyTJFIwbbFpd4/d9T58SDWAEKgXK45xfvO6qRACyMjx62GiTt3AhevYQJOn+iYRO

i3SRKYzuiFHbkYV6NddLFFHIiTgWtv0OrBd1XrjILrmBN9+LMWlLYeO3LVz2+l72

N8EQsBw6QaHtNiEne6dcoa/r9SgtDA7rpzkX8uGFdEsfBWP8mF9/g2YxO8kr2nw8

pmtsZseOP46sAx54rr/AwQvGmJMcWj4Y+OA==

Received: from mail9350.maychuemail.com ([127.0.0.1])

by mail9350.maychuemail.com (mail9350.maychuemail.com [127.0.0.1]) (amavis, port 10026)

with ESMTP id ddZO5xFDdPl2 for ;

Sat, 10 Oct 2026 16:12:50 +0700 (+07)

Received: by mail9350.maychuemail.com (Postfix, from userid 976)

id 4j1ycg41zYz21kF; Sat, 10 Oct 2026 16:10:27 +0700 (+07)

Received: from DESKTOP-G28RE5S.lan (unknown [143.105.113.145])

by mail9350.maychuemail.com (Postfix) with ESMTPSA id 4j1ycV09xyz21gy;

Sat, 10 Oct 2026 16:10:17 +0700 (+07)

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Ich bin Dominika Kulczyk

To: Recipients

From: lark620idic01@620idic.com.vn

Date: Sat, 10 Oct 2026 02:10:06 -0700

Reply-To: headquarter.ceo11@gmail.com

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ich bin Dominika Kulczyk, eine polnische Milliardärin und

Unternehmerin mit Sitz in den USA. Ich bin die Tochter von Jan Kulczyk, dem

einst reichsten Mann Polens. Zudem bin ich Mitbegründerin und Pr [...]



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[143.105.113.145 listed in will-spam-for-food.eu.org]

[143.105.113.145 listed in will-spam-for-food.eu.org]

[143.105.113.145 listed in will-spam-for-food.eu.org]

[143.105.113.145 listed in will-spam-for-food.eu.org]

[143.105.113.145 listed in will-spam-for-food.eu.org]

[143.105.113.145 listed in will-spam-for-food.eu.org]

[143.105.113.145 listed in will-spam-for-food.eu.org]

[143.105.113.145 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

[112.213.93.50 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[112.213.93.50 listed in dnsbl.ahbl.org]

[112.213.93.50 listed in dnsbl.ahbl.org]

[112.213.93.50 listed in dnsbl.ahbl.org]

[112.213.93.50 listed in dnsbl.ahbl.org]

[143.105.113.145 listed in dnsbl.ahbl.org]

[143.105.113.145 listed in dnsbl.ahbl.org]

[143.105.113.145 listed in dnsbl.ahbl.org]

[143.105.113.145 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[112.213.93.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[112.213.93.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[112.213.93.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[112.213.93.50 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[112.213.93.50 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[headquarter.ceo11(at)gmail.com]

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Ich bin Dominika Kulczyk



Ich bin Dominika Kulczyk, eine polnische Milliard=C3=A4rin und Unternehmeri=

n mit Sitz in den USA. Ich bin die Tochter von Jan Kulczyk, dem einst reich=

sten Mann Polens. Zudem bin ich Mitbegr=C3=BCnderin und Pr=C3=A4sidentin de=

r Kulczyk Foundation, im Aufsichtsrat der Kulczyk Holding sowie Mitbegr=C3=

=BCnderin der Values ??Consulting Group in den USA, wo ich auch gesch=C3=A4=

ftlich t=C3=A4tig bin.



Informationen =C3=BCber mich finden Sie unter:



https://en.wikipedia.org/wiki/Dominika_Kulczyk



Im Rahmen meines Wohlt=C3=A4tigkeitsprojekts beabsichtige ich, jeweils 450.=

000 US-Dollar aus meinem Verm=C3=B6gen an vier Einzelpersonen weltweit zu s=

penden. Wenn Sie diese E-Mail erhalten haben:



Bitte senden Sie mir Ihre Daten, damit ich meine Bank in den USA anweisen k=

ann, die =C3=9Cberweisung der 450.000 US-Dollar an Sie zu veranlassen =E2=

=80=93 eine Zuwendung, die Ihnen und auch anderen helfen soll.



Dominika Kulczyk

Kontaktieren Sie mich unter: vrosenburg@atomicmail.io

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 10 Oct 2026 05:34:41 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFVLU-00000000F4D-1XgL

for dave@doctor.nl2k.ab.ca;

Sat, 10 Oct 2026 05:34:32 -0600

Resent-From: The Doctor

Resent-Date: Sat, 10 Oct 2026 05:34:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-135.dm.aliyun.com ([140.205.208.135]:38067)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFT5Z-000000008Pt-3TkL

for root@nk.ca;

Sat, 10 Oct 2026 03:10:13 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.rymat.ltd:alibabak_WebBatch:512257

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.rymat.ltd; s=aliyun-cn-hangzhou;

t=1791623341; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=TFuJ7otm83Y4KqxAy3qmNvcfysBE6VBeW0/XcfKaqkE=;

b=gB+O8RtE6Ryz9sYVpcooV7mSI4lgw4BriLIo1pFx0oILhAcwazTDzh06J1jLLj5w7tb2VCU0HfZEtkiF8tp09OH3Q6d9AQLoHubNGR0G9sDVDiFOId7eyK4ts7w3SB5UXIey0Isc5nxhz3pONi0C3UIElRQshAjRu0T8UsJ03Mk=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1791623341; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=TFuJ7otm83Y4KqxAy3qmNvcfysBE6VBeW0/XcfKaqkE=;

b=rnbYvmrbHmTxFXMO7GvXTHdrYBp/01+W05SuDVWfF6BXOHPFYrNnHGG0jVJJqbBLK3E1I7ydw7grPdiNwHKD7Pjd04KO85SYaamwxcfO8wzNU/I1k1IGjfAfjEdmEUmnmuEiuSGCexkRdbymwD1y3/0Bl6xUYV/TqlN1ww0B7XQ=

Received: from chitu-hsf(mailfrom:vip@vip.rymat.ltd fp:ma_600000357391395321 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Sat, 10 Oct 2026 17:07:07 +0800

Date: Sat, 10 Oct 2026 17:07:07 +0800

From: "Chris Liu"

To:

Reply-To:

Message-ID: <411052ca-1ebb-402e-b9c3-65570ab184c5@alibaba.com>

Subject: =?UTF-8?B?UHJlbWl1bSBGdW5jdGlvbmFsIENoZW1pY2FsIEFkZGl0aXZlcyBNYW51ZmFjdHVyZXI=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000357391395324

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Partner, This is Chris from Tianjin Eclat Co., Ltd (subsidiary

of Hebei Anjiefa Building Materials Co., Ltd), a leading manufacturer of

functional chemical additives since 1992. Operating a 34,000-square-meter

[...]



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

[140.205.208.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.135 listed in dnsbl.ahbl.org]

[140.205.208.135 listed in dnsbl.ahbl.org]

[140.205.208.135 listed in dnsbl.ahbl.org]

[140.205.208.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.135 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.135 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.135 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[140.205.208.135 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?UTF-8?B?UHJlbWl1bSBGdW5jdGlvbmFsIENoZW1pY2FsIEFkZGl0aXZlcyBNYW51ZmFjdHVyZXI=?=




px">
: 14pxfont-family:Arial">Dear Partner,


t-align: justify;font-family: Arial;font-size: 14px">
y: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


tyle=3D"margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px">=


pxfont-family:Arial">This is Chris from Tianjin Eclat Co., Ltd (subsidiary of =

Hebei Anjiefa Building Materials Co., Ltd), a leading manufacturer of function=

al chemical additives since 1992. Operating a 34,000-square-meter facility wit=

h 120+ employees and 15 technicians, we supply high-grade fine chemicals to gl=

obal markets.


ily: Arial;font-size: 14px">
=85=E9=BB=91;font-size: 14pxfont-family:Arial">We provide tailored, one-stop s=

upply solutions featuring a comprehensive portfolio designed for diverse indus=

trial and architectural applications:


-align: justify;font-family: Arial;font-size: 14px">
: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14pxfont-family:Arial">
=


nt-size: 14px">Tile Adhesives & Grouts
an>


ize: 14px">External Thermal Insulation Composi=

te Systems (ETICS/EIFS)


y;font-family: Arial;font-size: 14px">Water-Ba=

sed Coatings


ly: Arial;font-size: 14px">Petroleum Extractio=

n


ont-size: 14px">Emulsion Polymerization=


: 14px">Detergent Industry


"margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
tyle=3D"font-size: 14px">Paper Industry


xt-align: justify;font-family: Arial;font-size: 14px">
: 14px">Textile Printing & Dyeing


-align: justify;font-family: Arial;font-size: 14px">
14px">Ceramic Industry


;font-family: Arial;font-size: 14px">
=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


llspacing=3D"0" style=3D"text-align: justify;font-family: 'Times New Roman';fo=

nt-size: 13px;margin-left: 7px;border: none">

gn=3D"center" style=3D"width: 554px;padding: 0 7px;border-width: 1px;border-co=

lor: windowtext">


;font-size: 14px">
px">Core Products


"center" style=3D"width: 554px;padding: 0 7px;border-left-width: 1px;border-le=

ft-color: windowtext;border-right-width: 1px;border-right-color: windowtext;bo=

rder-top: none;border-bottom-width: 1px;border-bottom-color: windowtext">


yle=3D"margin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
ong>


Arial;font-size: 14px">RDP (Redispersible Polymer Powder):
pan style=3D"font-size: 14px">Enhances flexibility, adhesion, and crack resist=

ance in tile adhesives, ETICS/EIFS, and repair mortars.


margin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
=3D"font-size: 14px"> 


ft;font-family: Arial;font-size: 14px">HPMC(Hydroxypr=

opyl methylcellulose): Serves as a hi=

gh-efficiency water-retaining agent, thickener, and anti-sagging modifier for =

dry-mix mortars and water-based coatings.


text-align: left;font-family: Arial;font-size: 14px">
14px"> 


: Arial;font-size: 14px">HEC(Hydroxyethyl cellulose)<=

/strong>: Delivers super=

ior high-shear rheology, thickening, and protective colloid properties for lat=

ex paints, personal care, and oilfield applications.


gin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
"font-size: 14px"> 


font-family: Arial;font-size: 14px">PCE (Polycarboxyl=

ate Ether): Del=

ivers ultra-high water reduction, superior fluidity, and slump retention for a=

dvanced concrete and self-leveling formulations.


0 0 0;text-align: left;font-family: Arial;font-size: 14px">
t-size: 14px"> 


-family: Arial;font-size: 14px">PP 
ong>Fiber: Provides three-dimens=

ional crack arrest and reinforcement for high-performance concrete, waterproof=

ing, and road engineering.


t;font-family: Arial;font-size: 14px">

pan>


y;font-family: Arial;font-size: 14px">
=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px">
"https://i.postimg.cc/vb2DFHJt/EDM-package-chris.jpg"/>


margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
yle=3D"font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px">

>


;font-family: 'Times New Roman';font-size: 13px;margin-left: 7px;border: none"=

>
>

0 7px;border-width: 1px;border-color: windowtext">


rial;font-size: 14px">
: 15px">Why partner with us?


er-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;borde=

r-right-color: windowtext;border-top: none;border-bottom-width: 1px;border-bot=

tom-color: windowtext">


14px;text-indent: 0">


-family: Arial;font-size: 14px;text-indent: 0">Tailored Formulations:<=

/strong> We adjust molecular weight, degr=

ee of substitution, and active solids according to your requirement and specif=

ication.


x;text-indent: 0"> 


"margin: 0 0 0;font-family: Arial;font-size: 14px;text-indent: 0">Supp=

ly Chain Reliability: Direct fac=

tory production ensures consistent lot-to-lot quality, competitive pricing, an=

d scalable bulk delivery.


;font-family: Arial;font-size: 14px">
=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


>


y: Arial;font-size: 14px">
=85=E9=BB=91;font-size: 14px">


lign: justify;font-family: Arial;font-size: 14px">
=E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 
//i.postimg.cc/hD18zP45/EDM-factory-chris.jpg"/>


0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
font-size: 15px">


;font-family: Arial;font-size: 14px">We are co=

mmitted to delivering true one-stop supply services and tailored systematic so=

lutions for your business.If you are in=

terest
15px">ed in our products, please reach us directly
family: =E5=AE=8B=E4=BD=93;font-size: 15pxfont-family:Arial">on
yle=3D"font-size: 15px"> 
=93;font-size: 15pxfont-family:Arial">Whatsapp/Wechat
t-size: 15px"> or simply reply by E-mail


0 0;text-align: justify;font-family: Arial;font-size: 14px;text-indent: 0">
an style=3D"font-family: =E5=AE=8B=E4=BD=93;font-size: 15px"> 

=


x;">=

Best Regards


: 14px; text-indent: 0px;">
elvetica, sans-serif">Chris Liu


justify; font-size: 14px; text-indent: 0px;">
, helvetica, sans-serif">Tianjin Eclat Co., L=

td


//dm-cn.aliyuncs.com/trace/v1/report?bid=3D2682129&env=3D600000357391395324&ma=

c=3D512257&mf=3Dvip%40vip.rymat.ltd&msgid=3D411052ca-1ebb-402e-b9c3-65570ab184=

c5%40alibaba.com&sac=3D0&tag=3DFinechemicalglobal1&tid=3D2682129&to=3Droot%40n=

k.ca&tpl=3D&ts=3D1791623227&type=3D1&url=3D&v=3D1.0&sign=3Dd426bdaa9f29ffa4d25=

456f51c54c06c&urlts=3D1791623341" alt=3D"" style=3D"display: none; width: 1px;=

height: 1px;" />

chinese products spam from Google GMail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 10 Oct 2026 05:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFVKx-00000000BvO-1IWG

for dave@doctor.nl2k.ab.ca;

Sat, 10 Oct 2026 05:33:59 -0600

Resent-From: The Doctor

Resent-Date: Sat, 10 Oct 2026 05:33:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f8.google.com ([74.125.227.136]:45138)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFSlk-000000006qY-1U2J

for sales@nk.ca;

Sat, 10 Oct 2026 02:49:39 -0600

Received: by mail-pj2-f8.google.com with SMTP id 98e67ed59e1d1-398b9f722abso265265a91.0

for ; Sat, 10 Oct 2026 01:48:41 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1791622115; x=1792226915; darn=nk.ca;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=C137b+7Gvhdq4BWaBoH4kJpAeiVJaorr9xZW/chokNsy/5//KFevRODSE8NdtDsdOC

F1sGtsjonohxatW+JhFmjVlve0IqKESvTsHCQbOqNx5dR0sslnOPXWUQtVEdLQt5McbU

jMncMnqPH7okDFUkjrQx5QZZLajfi48Qm8YGo=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791622115; x=1792226915;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=xss4ywlk61nWQBLSxnyDG5ueYT2h3A3FDScuCdGx2IUP5qD5NkGnyCuQkMYDktAX2a

43bUW57ngOb2QPnpompaMfgLNErS2XXAVMdF4cXseq8jrntUttv2JBEWnPS3yVxwzsWO

ZSFng4UoUygpkXL7qyfsDgE+vQDQO9PubE2QdZYpKy7lOynLfEIOCtyKEcNZcrvHnuqI

1QqDjVty2ibtvdn32aXRjL4wuYH9xWeKXcRa/vXBqg+LJM15tU78FUJgDk2wwUYFdPva

eDXtw6HS/gqMhVUlVrmRb5M7aHfp++bYzj6+buARxs1U6GqvbByT1rJrQwzybWbLOGf/

3E2Q==

X-Gm-Message-State: AFq9FYJdqalif3M2RHwaUzqkb60QNDwAAdSFmpPqKv3j/YixkeXfXT91

ij50T/EmLWIuzNajARHryTDg7diS+VSfQTNI9GpQVDYfoJpSWQH4+XJ3KEIg+NWD8rbZpsDFyuh

d0ncZWro=

X-Gm-Gg: AYBFou1krxHSHN+mwVCPoos15mXA50x1zhyHynFB8vS0oNuGISGHR/gmG7MYD0R3WA1

3iU1rUH7x/rqkT6b7ubjc5l2nMepDB3wUhxcQOCfoKETTc+mFBNOQ67YswXRtTH9ZOHbce5x0Hw

BCE0UbpBTh0ccFLmkFdkIxtAziNB2pd1N7GPJV8etmbzu1QIaDpNf4OEM5HsL6ySvf0IWoMdQCz

/VAqNoRDkFiLsNBfZa9VCvGwaOEoULm44ZhX6rvxHNcoz/ZW14zsWEo+Asidop93TqzEUHYtOsj

OkHjidgxUPnFxL9RBjkLQGjq/rU08nsTYSaJyeOJNT/V1Q+RpUNxvwJ1nBykxHqS5EnBGu57TVv

IOcvNnCUo+2yN0RdHven7Ea/rrnCmSqPm0xwR1gO6bJFfukJRCCDWPneb8LgAN4HDhRmn0K6vx4

PlaXU1ATGHVgfmJP7+EENV7fIMhSoA84UcMl6hsesZJ+LzVAKs7i3UNt89luRBnnr26Ni/W2eoq

uR0LhV3

X-Received: by 2002:a17:90b:3b84:b0:3aa:f4af:1e16 with SMTP id 98e67ed59e1d1-3ab3a4871e5mr3424074a91.7.1791622114750;

Sat, 10 Oct 2026 01:48:34 -0700 (PDT)

Received: from kngbtik ([203.88.114.137])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3ab36f46dfesm7342713a91.8.2026.10.10.01.48.30

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Sat, 10 Oct 2026 01:48:33 -0700 (PDT)

From: "bella@sanmeng-mould.com"

X-Google-Original-From: "bella@sanmeng-mould.com"

Reply-To:

Message-ID: <0D4A43495C692BF8191239A79E4B5175@kngbtik>

To:

Subject: Re: plastic injection and die casting molds and moldings

Date: Sat, 10 Oct 2026 16:48:07 +0800

MIME-Version: 1.0

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: bella@sanmeng-mould.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 11.0

X-Spam_score_int: 110

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear , We provide:



Content analysis details: (11.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.136 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.136 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[203.88.114.137 listed in sbl-xbl.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sanmeng-mould.com]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.136 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.136 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 FAKE_REPLY_C No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: lxu.idcease.net/96.44.182.133]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: lxu.idcease.net/96.44.182.133]

Subject: {SPAM?} Re: plastic injection and die casting molds and moldings



Dear ,



We provide:



plastic injection and die casting molds and moldings.



 thermoplastic injection molding, overmolding, 2K molding, aluminum & zinc die casting etc.



Competitive prices for exported mold and mass production of production mold.



 Excellent services involving mould design to mould fabrication, from parts to part assembly.



Professional engineering analysis.



 Excellent quality maintained through top-ranking testing machines.



Careful packaging.



 ISO certificate





We value every customer and will respond to any question quickly.



For details information pls check our website: www.sanmeng-mould.com



Looking forward to your soon reply.



Welcome to visit our factory anytime!



Thank you!



--------------------------------------------------------------------------------

Best regards,



Bella

SanMeng Mould Co.,Ltd



Wechat/ WhatsApp: +86-13242975530

Email: bella@sanmeng-mould.com

Website: www.sanmeng-mould.com

Add: NO.45, Jinghai East Rd, Shatou Community, Changan town, Dongguan City, Guangdong Province, 523863, China

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Oct 2026 19:48:41 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFMCT-00000000II8-1oeb

for dave@doctor.nl2k.ab.ca;

Fri, 09 Oct 2026 19:48:37 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Oct 2026 19:48:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:43360)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFI3m-0000000032h-17aA

for root@nk.ca;

Fri, 09 Oct 2026 15:23:32 -0600

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-5338c59f90dsf48422951cf.1

for ; Fri, 09 Oct 2026 14:22:07 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1791580922; cv=pass;

d=google.com; s=arc-20260327;

b=aTZ1Y8EtjfLfEhULz0GnQXId/urcevA16R5pmA4K+tAbP5+cEaJQ2E0j+pQBbOpfdN

GP4H76dORF0p/gNTi2mNqtwOvUFgGvSVzKLFF9XPiODm7d6XWOMd0LDCX17TRWZAvPAr

qoIrdPLs6WjDobNZ8clzv9d/lIgZ4HDrd09Z4j89T6aVMp3lZlff8WAlalNQmO02BN6W

xPCYNaHce42rZCqViocY9RiVEuqU0moewJ0gg4a0Cz8a168dbW/poDuqFBuLEEsTtZdB

xq+d8xpq1Uo+2zjJu445hlRApixOXeXV++AfILmnKh5qtdG/vFmH3qwhw3bxwOt2motn

Fyzg==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=dxmUCaGMf2RILJMPB7rTCufRYEyxvw0Tape4ABrK/8k=;

fh=iLrCZnMFsmRPL3DFQnE7jziERC/NMXOpeNeS/C4AJbQ=;

b=CQw7zrS/hbsfNBOTD0nyWUqQ/Z3o+OLEW1Vklj//bNSIl3PHy83t9yLv7icjdWCF74

Y18EE0kgDgeIxLturjjDWpojv3LQD/2ZZxY9DGsL23BVVLVAJVPq3GX5GlVZ1LhTYhGU

JJU55a+S+lINwH7vS8pvcEOHQdZfBdmAI/3+NYx4yorcoSF9ltrKONtgN4820r5XwHee

Q932N0XiB0i6v72fIKwEbvl28hVMxEng3xvaT+J9yGyNU++OUDKbhDRu7720i4Z9/MH/

QWz/SL7Sl3t/RRHLWlk5GFQiHamMPwXIhX5XlDma7CxYgnEp70AYKnE4kxQnm8T0cbPH

GhSg==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@rankseosignal.com header.s=google header.b=XSdDyfPp;

arc=pass (i=1);

spf=pass (google.com: domain of ben@rankseosignal.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=ben@rankseosignal.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=rankseosignal.com;

dara=neutral header.i=@wntdigitaloutsourcing.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wntdigitaloutsourcing-com.20251104.gappssmtp.com; s=20251104; t=1791580922; x=1792185722; darn=nk.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=dxmUCaGMf2RILJMPB7rTCufRYEyxvw0Tape4ABrK/8k=;

b=lvmqmz5bgOgWgg9eOqz9ohQcZEFrkIBiaYlEP/hMz958xPAvsUXuWqpPSffcd+8NsO

iNgcbk9U/Cv2r32f5kvShTOL3uvISEBlPH3+PjIXTd0bpZMfmSoXj6SIjulgBRe1Pl71

b7+2o2wl7IfRIeLfJKNFvcZkrBgOyRzkDJ63tiwAVlWVrzjqIM+al3skJqkGNuSuXKTQ

O34Zr0AvjY1PJmh4FaKYTOGnGVy2Erzb5+++auOYVTaYJbMSB0Xv0wjqwwoqLziraWTd

dB4ERGSg9CXpYnx/C8WTrNyjtE9YgTzMNyl8I/X5q5A/ctC1yZpCvWm9LsAV4VImw+Or

Xq9Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791580922; x=1792185722;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=dxmUCaGMf2RILJMPB7rTCufRYEyxvw0Tape4ABrK/8k=;

b=iw6tTMPQYi7ixd32HswRFvnSjKSGSoBHDAzpT8CaLOwW1Ftb//j797xXOh0PHZtumv

0tLRswJfTyFfM2YUnDz1Q4P1MjRV7dl2A2TftPrtPvAvSOODQIU+Q18RXL/WrPiDRer3

G4e0lZXd04TtnQMJMOWMvrx96bh4U3kuUdYWq4+gQ6rJFOJtbsNcfIf8dgE22/1lPUav

gGMBOp3UAIdjspRpUSHS76YujyOZfzxCoQHUoDPSINOrAOvhjkKHnsjmtHSzuFQNZXmg

htURs8BdVWJ2YFphKmDe3oeH0aAVOfhzLVyu1H7NBRSA1KUm64A1ActN17iLlPz9yI92

2WLA==

X-Forwarded-Encrypted: i=3; AKwUvBwr+pHaJTzwpc6kc8KOu/zUyxicqIuFvUADuO/gG49scE/c1rYhqycL2j0pmV5IOxmOa1G1@nk.ca

X-Gm-Message-State: AFq9FYIYUnsET8f0udD6N1YsZPNnLwDZVVl4c5DeEogr/Qpo3HEBuu96

GjtVHO37M6f8unvv+N/qyPDxwnNJgi3W29laPNDqHvovqtFyuD8kFz4p/N9CHjV7x6Y=

X-Received: by 2002:a05:690e:4813:b0:675:68f5:2012 with SMTP id 956f58d0204a3-679368f5342mr739120d50.26.1791580560032;

Fri, 09 Oct 2026 14:16:00 -0700 (PDT)

X-BeenThere: seo_strategy@wntdigitaloutsourcing.com; h="ATskLdf0ZmOLByG8vzX3lU8t/YntSzIRV0JFop76w9HnORURcw=="

Received: by 2002:a53:c68c:0:b0:672:281a:d0bc with SMTP id 956f58d0204a3-679330f764els586279d50.1.-pod-prod-00-us-canary;

Fri, 09 Oct 2026 14:15:28 -0700 (PDT)

X-Received: by 2002:a05:690c:9e:b0:8a9:a1e9:2665 with SMTP id 00721157ae682-8b07d3c4195mr11626347b3.6.1791580528004;

Fri, 09 Oct 2026 14:15:28 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1791580527; cv=pass;

d=google.com; s=arc-20260327;

b=UpAsnLpqQL2Kxv0XX8vSusAJ9yKpKCIc6CEavZw18/2LoZC4S/21fAjShwHN8GdHL8

nms1Lcu8UqIgLcmLVUh2kar4G5OQjGZpedUBGR18OzCi5Kr9NQHs5J+ubt/Fy9ld9iNJ

bvAPc+bUgciIffReGKGgKjoGIEj7T1988m44qK7zHyzFw8nlOBDwDLRC1gUaCz4g1lEb

092JDMeFsdAFpK3l63h07f79O+vRDd3SOgcZXVZ4O9V8LVLte2HbNcEaJqusl1CRy9dV

h4nZ6o3lPNEcwe+lSclkDn/RDD0/A/NJiaPzEbdIjfTs+f51e4zczimHaeJR7pKOCA1N

jZBA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=LR5HmbMCuTRIlZqUOyipCAanrcdBdTImvP6uBSTBwXc=;

fh=csapi9IGeYJhFW6iJX10+bS8VG5RB6/mGSSuHBC83Ys=;

b=NRb6t4ialo8YJYCbU+yNjMQTEATnX2PJwaEwq0uDoB6T3yhxhAjhaKBo0XX3Svd513

x22q60wU0biBZgLmu1PLjkaKofBjKoEGQ1+kDZqKec90ZlIAz46IaBKnWBB0qjo90dXb

Gt6RkOGS7vhppT0rzQ9HdZ9e5DQjt3DBm5yT1ExTh0vPZiojcjk5r9bDwJ4ivaxz0vrS

kzpoQb2xsM4gFb+66uDElW782iXIbyI7uu/753YYl2fKQIcARxyoBbf2iELOozp83/GL

d/YQ6rZceo5DlPT53bNQPNwd8XCRDc/sqCXDF6puaRZo2pOXV1LLX7GB1quV8MjfGMeQ

PxVw==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@rankseosignal.com header.s=google header.b=XSdDyfPp;

arc=pass (i=1);

spf=pass (google.com: domain of ben@rankseosignal.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=ben@rankseosignal.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=rankseosignal.com;

dara=neutral header.i=@wntdigitaloutsourcing.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 00721157ae682-8b07f3a31c1sor15771927b3.8.2026.10.09.14.15.27

for

(Google Transport Security);

Fri, 09 Oct 2026 14:15:27 -0700 (PDT)

Received-SPF: pass (google.com: domain of ben@rankseosignal.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1791580527; cv=none;

d=google.com; s=arc-20260327;

b=VXS9Kub+Og7GTm5FM5vuxJFG9p6Nk73aiG7hxj5uoC98nRxLtl0E8JP5tK3nxx9Esf

PS/jY2K4Px4KPBEpqrsw99hcHnAxmcmLmZhuqzIgVpcQgYbGbmdrNdaX8eCnjUJh17u5

/jPnJJQPwkHDMk/nHAvG2BAOcP6HIDIkChSh9HNGPCTiPCkxRB3eZ5W3VnYa0M8FuvJl

oB75rfDgZr1er3Xpcc1TmhNbejGXG1+RUB3TcUvpTUEeS4C2PWtP+KggXCJqakPodssA

+5g1BsLjomu3d5DDGgWfyQ0ZwaNAfOS9GkYUvsn4RwcnrlXcck87Gccwy0sfU0lBHpBv

4D2g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=LR5HmbMCuTRIlZqUOyipCAanrcdBdTImvP6uBSTBwXc=;

fh=csapi9IGeYJhFW6iJX10+bS8VG5RB6/mGSSuHBC83Ys=;

b=H97NP+U4WXed1oGDsnT/X8LxktVMh2uqb+TZ33E6RExZ28Ml/6VZ6LpLmPtjUO3uEr

BnNnrXGqbYmWj6oekaZ0qSb0Um0eqv/jn4WRyT/Ls6EJWi96xI7QZDa8Xsi9AJr/5eNB

ITfVidCjmI2VcedOh9O+uAphhRwOKgJQbVKdq8l9+VZKPeUPPofYYuUoGxuHpwhyW+7m

2/5hYq9DgA4Yzm+fACujGB+3I8T5EH7uIT8y5H92W2syN5deUi3mCzrPedblEtiy9RD9

RaHAJEqnEX0sCMb3DoZwf+FuIVd5sgWP5VsqFH5ytIhRAJYVejQ4rU1Cs9IdvMbrVRgO

FZGQ==;

darn=wntdigitaloutsourcing.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AYBFou19QYpW4jxVHe/Iz+t3OzBf9MJV93QB+eOsZn9oxsQMDM55p4vvgVpaYZXaj1g

y3EPSrK1gmzJeCppCXC93nOrVdR2ajt2NIDUf/PcBw/ISzKrVlWcS3FAtupH2dzArJ6ziIkKrj0

qW1sy3LoBTv+0duKu1XE4duH6kMg2J8aTFX2ehwkLOgBncLkTh/e2S+REpZRbEnPLY+5/T9iO7Q

JPYmpYczFuIm4aHhatrbJfgNhV3Kgl6P0OMOiP2zY4Bu7FlUiS7+r9OHb7XC4DxSLmNNokhxYkD

O+3ZDahQnIb1g1spSxTynUKx1HND9WO2HaGOtPOewrts7pXgOq9G8g==

X-Received: by 2002:a05:690c:7107:b0:8aa:e4e7:c5a with SMTP id

00721157ae682-8b07d21d2e4mr11564387b3.5.1791580527524; Fri, 09 Oct 2026

14:15:27 -0700 (PDT)

MIME-Version: 1.0

From: "'Ben Matinez' via seo_strategy"

Date: Sat, 10 Oct 2026 02:45:17 +0530

X-Gm-Features: AclHuK_B3IEXugWyHSL5726ODI9BWWCN1MKGzpHxrob46b60kUX4GVkjgqkJQvE

Message-ID:

Subject: Issue

To: SEO_Strategy@wntdigitaloutsourcing.com

Content-Type: multipart/alternative; boundary="000000000000ee1339065d6ed864"

X-Original-Sender: ben@rankseosignal.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@rankseosignal.com header.s=google header.b=XSdDyfPp; arc=pass

(i=1); spf=pass (google.com: domain of ben@rankseosignal.com designates

209.85.220.41 as permitted sender) smtp.mailfrom=ben@rankseosignal.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=rankseosignal.com;

dara=neutral header.i=@wntdigitaloutsourcing.com

X-Original-From: Ben Matinez

Reply-To: Ben Matinez

Precedence: list

Mailing-list: list seo_strategy@wntdigitaloutsourcing.com; contact seo_strategy+owners@wntdigitaloutsourcing.com

List-ID:

X-Spam-Checked-In-Group: seo_strategy@wntdigitaloutsourcing.com

X-Google-Group-Id: 760210143748

List-Post: ,



List-Help: ,



List-Archive:

List-Unsubscribe: ,





--000000000000ee1339065d6ed864

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi there,

I found a few SEO issues on your website and have screenshots ready. These

may affect your search visibility and rankings.

Reply* =E2=80=9COK=E2=80=9D *and I=E2=80=99ll share the findings.



To unsubscribe from this group and stop receiving emails from it, send an e=

mail to seo_strategy+unsubscribe@wntdigitaloutsourcing.com.



--000000000000ee1339065d6ed864

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi there,
I found a few SEO issues on your website and=

have screenshots ready. These may affect your search visibility and rankin=

gs.
Reply =E2=80=9CO=

K=E2=80=9D and I=E2=80=99ll share the findings.

>







To unsubscribe from this group and stop receiving emails from it, send an e=

mail to
m">seo_strategy+unsubscribe@wntdigitaloutsourcing.com.




--000000000000ee1339065d6ed864--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Oct 2026 14:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFGlv-000000000V7-2aQN

for dave@doctor.nl2k.ab.ca;

Fri, 09 Oct 2026 14:00:51 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Oct 2026 14:00:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m16023653212.xmail.ntesmail.com ([160.236.53.212]:33350)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFFzH-00000000LxQ-3DhS

for sales@nk.ca;

Fri, 09 Oct 2026 13:10:45 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1869937_1429101228.1791572975517"

To: sales

Subject: =?UTF-8?B?RGlyZWN0IGJlbnRvbml0ZSBjYXQgbGl0dGVyIHN1cHBseSBmb3IgeW91ciBicmFuZA==?=

X-Priority: 3

MIME-Version: 1.0

Received: from cecily@ncxingmei.com( [10.139.0.42] ) by ajax-webmail ( [127.0.0.1] ) ; Sat, 10 Oct 2026 03:09:35 +0800 (GMT+08:00)

From: Cecily

Date: Sat, 10 Oct 2026 03:09:35 +0800 (GMT+08:00)

X-WM-Tid: 0aa122121f6500f6kunm17f31ea826c25f

Message-ID:





Hi Sales,



I know you are busy, so I'll keep this brief.



Our factory, equipped with proprietary mines, wet-process technology, and a state-of-the-art laboratory, currently provides reliable bentonite supply to over 1,400 global brands.



We have export-ready stock in 5L, 10L, and 20L bags available right now.



We can arrange for a physical package to be sent to you for evaluation, allowing you to assess our quality firsthand. Would you like us to mail some physical types to your office?



Best regards,



Cecily





International Sales





Ningcheng Xingmei Technology Co., Ltd.





cecily@ncxingmei.com





+86 18758194127





Zhongjing Industrial Park, Ningcheng County, Chifeng City, Inner Mongolia Autonomous Region, China

Canada International Property Show spam from mailjet

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Oct 2026 14:00:43 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFGlh-000000000Si-1JEr

for dave@doctor.nl2k.ab.ca;

Fri, 09 Oct 2026 14:00:37 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Oct 2026 14:00:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o58.p38.mailjet.com ([185.250.237.58]:43275)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <1aa0ad06.CAAACYLci3MAAc7XimAAA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTdt@a2952425.bnc3.mailjet.com>)

id 1xFFgr-00000000Jtd-2O2R

for sales@nk.ca;

Fri, 09 Oct 2026 12:51:41 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=canadapropertyshow.ca; i=info@canadapropertyshow.ca; s=mailjet; t=1791571821; x=1791579021;

h=Message-Id: MIME-Version: From: Reply-To: To: Subject: Date:

List-Id: List-Unsubscribe: List-Unsubscribe-Post:

Feedback-Id: Precedence: X-CampaignID: X-CSA-Complaints:

X-MJ-Mid: X-REPORT-ABUSE-TO: Content-Type: To: From:

Sender: Subject: Date;

bh=QPzJP5fClrjgC+i60iyYkNHa21kg7txT62wxCV7K6b4=;

b=ixsqAtrlz+wN0w5okH0Bfi/fYs1Sc3KerJlIyu52OVptlTsrnIjNs3+/C

j7pxs+c1PLyeafOATR8Zaa7Zjk7SNm2FnXHsWxZF0AVK+6Nt8K56ZvE8dXsK

rBLUchKpjcXCgjxnLfH2WujFIKOgMyNrJ1F9l3TQDtiehq/XvyNbkvAiYCCU

4C0jOn4imxJME92fWJLDHHEyIMOuNPBwVgYu6OCl+XmOoc1FwWeezsioXAzg

dDMfhrQEoStH7mnNG0KyPstyIafs/OWcLInJkSQElcBmrda9WUurB9ZDA0+M

VqIHcqs9ly7P3jTtu5V0GNRr1Y8Yru/N9b8XNtuUvah5g==

Message-Id: <1aa0ad06.CAAACYLci3MAAc7XimAAA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTdt@mailjet.com>

MIME-Version: 1.0

From: Canada International Property Show

Reply-To: info@canadapropertyshow.ca

To: sales@nk.ca

Subject: Visit Boma Desarrollos (Platinum Sponsors) at the Canada Intl

Property Show Oct. 9 - 10

Date: Fri, 9 Oct 2026 18:50:21 +0000

List-Id:

List-Unsubscribe:

,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-Id: 42:2952425.2720056:MJ

Precedence: bulk

X-CampaignID: 7765199456

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

CAAACYLci3MAAc7XimAAA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTdtxgTtqcgGSXKYl9jJg4Vy4QApgTg

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative; boundary="=-7v17JnDcPgrHMPww+ReS"

X-Spam_score: 49.7

X-Spam_score_int: 497

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: <> [https://www.eventbrite.ca/e/2026-canada-international-property-show-9th-10th-october-2026-tickets-1976214273089]

View online version https://sh4zl.mjt.lu/nl3/WkujmCZ-W8C8M [...]



Content analysis details: (49.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.250.237.58 listed in will-spam-for-food.eu.org]

[185.250.237.58 listed in will-spam-for-food.eu.org]

[185.250.237.58 listed in will-spam-for-food.eu.org]

[185.250.237.58 listed in will-spam-for-food.eu.org]

[185.250.237.58 listed in will-spam-for-food.eu.org]

[185.250.237.58 listed in will-spam-for-food.eu.org]

[185.250.237.58 listed in will-spam-for-food.eu.org]

[185.250.237.58 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.250.237.58 listed in dnsbl.ahbl.org]

[185.250.237.58 listed in dnsbl.ahbl.org]

[185.250.237.58 listed in dnsbl.ahbl.org]

[185.250.237.58 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.250.237.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.250.237.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.250.237.58 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.250.237.58 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mjt.lu]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.250.237.58 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.250.237.58 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[185.250.237.58 listed in wl.mailspike.net]

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Visit Boma Desarrollos (Platinum Sponsors) at the Canada Intl

Property Show Oct. 9 - 10



--=-7v17JnDcPgrHMPww+ReS

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



<> [https://www.eventbrite.ca/e/2026-canada-intern=

ational-property-show-9th-10th-october-2026-tickets-1976214273089]

View online version https://sh4zl.mjt.lu/nl3/WkujmCZ-W8C8McUD2YvfUg?m=3DCAA=

ACYLci3MAAc7XimAAA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTdtxgTtqcgGSXKYl9jJg4Vy4QApgT=

g&b=3D1aa0ad06&e=3D360ca73a&x=3DBCwpwHREIv6H13pFkkwx5w

If you don't like our emails, you can=C2=A0



update your preferences https://sh4zl.mjt.lu/unsub2?m=3DCAAACYLci3MAAc7XimA=

AA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTdtxgTtqcgGSXKYl9jJg4Vy4QApgTg&b=3D1aa0ad06&e=

=3D360ca73a&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us]or https://sh4zl.mjt.lu/u=

nsub2?m=3DAUYAAHPnElQAAc6lPsQAA9FtWcgAAYKI_iYAoEvTAC0M6QBocCUcmJ9mT1W7QtmiO=

bGBnsWaDQApgTg&b=3Dacc166ac&e=3De9ed69b4&x=3DJXV5YF4Lsy_PYywz1IAQXRtzDekYgN=

I6e86cGq3ZbC4&hl=3Denunsubscribe [https://sh4zl.mjt.lu/unsub2?m=3DCAAACYLci=

3MAAc7XimAAA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTdtxgTtqcgGSXKYl9jJg4Vy4QApgTg&b=3D=

1aa0ad06&e=3D360ca73a&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_usat any time.=



--=-7v17JnDcPgrHMPww+ReS

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




9/xhtml" xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-m=

icrosoft-com:office:office">Visit Boma Desarrollos (Platinum S=<br /><br /> ponsors) at the Canada Intl Property Show Oct. 9 - 10
8">
1">
le type=3D"text/css">[owa] .mj-column-per-100 { width:100% !important; max-=

width: 100%; }
acing:normal;background-color:#F4F4F4;">

e:1px;color:#ffffff;line-height:1px;max-height:0px;max-width:0px;opacity:0;=

overflow:hidden;">Visit Boma Desarrollos (Platinum Sponsors) at the Canada =

Intl Property Show Oct. 9 - 10

" role=3D"main" lang=3D"en" dir=3D"ltr">

le=3D"margin:0px auto;max-width:600px;">
" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"width:=

100%;">

0px 0px;padding-left:0px;padding-right:0px;text-align:center;">

-size:0px;text-align:left;direction:ltr;display:inline-block;vertical-align=

:top;width:100%;">
ole=3D"presentation" style=3D"vertical-align:top;" width=3D"100%">
r>

break:break-word;">
role=3D"presentation" style=3D"border-collapse:collapse;border-spacing:0px;=

">

/CAAACYLci3MAAc7XimAAA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTdtxgTtqcgGSXKYl9jJg4Vy4Q=

ApgTg/1/Ut6wpSzoRhlAdcsZdm1Ipw/aHR0cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYt=

Y2FuYWRhLWludGVybmF0aW9uYWwtcHJvcGVydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjY=

tdGlja2V0cy0xOTc2MjE0MjczMDg5" target=3D"_blank">3D"Boma
r (1).png" src=3D"https://sh4zl.mjt.lu/img2/sh4zl/86e87ac2-5e21-4ae7-8d13-6=

789105464e6/content" style=3D"border:none;display:block;outline:none;text-d=

ecoration:none;height:auto;width:100%;font-size:13px;" width=3D"600" height=

=3D"auto">

yle=3D"font-size:0px;padding:0px 0px 0px 0px;padding-top:0px;padding-bottom=

:0px;word-break:break-word;">

ft" style=3D"font-size:0px;padding:0px 0px 0px 0px;padding-top:0px;padding-=

bottom:0px;word-break:break-word;">

tica, Arial, sans-serif;font-size:13px;line-height:1;text-align:left;color:=

#000000;">


align: center; margin: 10px 0; margin-top: 10px;">
75d;font-family:Arial;font-size:12px">If you don't like our emails, you can=

 


; text-align: center; margin: 10px 0; margin-bottom: 10px;">
color:#55575d;font-family:Arial;font-size:12px">update your
=3D"link-build-content" style=3D"color:inherit;text-decoration:none;; text-=

decoration: none;" target=3D"_blank" href=3D"https://sh4zl.mjt.lu/unsub2?m=

=3DCAAACYLci3MAAc7XimAAA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTdtxgTtqcgGSXKYl9jJg4Vy=

4QApgTg&b=3D1aa0ad06&e=3D360ca73a&x=3DBCwpwHREIv6H13pFkkwx5w&am=

p;hl=3Den_us">
">preferences
e:12px">
e:12px">or
t-decoration:none;; text-decoration: none;" target=3D"_blank" href=3D"https=

://sh4zl.mjt.lu/unsub2?m=3DAUYAAHPnElQAAc6lPsQAA9FtWcgAAYKI_iYAoEvTAC0M6QBo=

cCUcmJ9mT1W7QtmiObGBnsWaDQApgTg&b=3Dacc166ac&e=3De9ed69b4&x=3DJ=

XV5YF4Lsy_PYywz1IAQXRtzDekYgNI6e86cGq3ZbC4&hl=3Den">
r:#0000EE;font-family:Arial;font-size:12px">
ild-content" style=3D"color:inherit;text-decoration:none;; text-decoration:=

none;" target=3D"_blank" href=3D"https://sh4zl.mjt.lu/unsub2?m=3DCAAACYLci=

3MAAc7XimAAA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTdtxgTtqcgGSXKYl9jJg4Vy4QApgTg&=

b=3D1aa0ad06&e=3D360ca73a&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us=

">unsubscrib=

e
>at any time.



Arial, sans-serif;" href=3D"https://sh4zl.mjt.lu/lnk/CAAACYLci3MAAc7XimAAA=

-BCcpQAAYKI8DcAoK7NAC0M6QBqyTdtxgTtqcgGSXKYl9jJg4Vy4QApgTg/0/z3kxjGrllT4qjH=

BXw1GTFA/aHR0cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW=

9uYWwtcHJvcGVydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0M=

jczMDg5?b=3D1">​
e-block;" href=3D"https://sh4zl.mjt.lu/lnk/CAAACYLci3MAAc7XimAAA-BCcpQAAYKI=

8DcAoK7NAC0M6QBqyTdtxgTtqcgGSXKYl9jJg4Vy4QApgTg/0/z3kxjGrllT4qjHBXw1GTFA/aH=

R0cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW9uYWwtcHJvc=

GVydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0MjczMDg5?b=

=3D3">


NAC0M6QBqyTdtxgTtqcgGSXKYl9jJg4Vy4QApgTg/20ce1ae2/e.gif" height=3D"1" width=

=3D"1" alt=3D"" border=3D"0" style=3D"height:1px;width:1px;border:0;"/>



=



--=-7v17JnDcPgrHMPww+ReS--

Canada International Property Show spam from mailjet

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Oct 2026 14:00:42 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFGlW-000000000RG-1fG5

for dave@doctor.nl2k.ab.ca;

Fri, 09 Oct 2026 14:00:26 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Oct 2026 14:00:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o65.p38.mailjet.com ([185.250.237.65]:48747)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFFFo-00000000GB8-2D63

for sales@nk.ca;

Fri, 09 Oct 2026 12:23:44 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=canadapropertyshow.ca; i=info@canadapropertyshow.ca; s=mailjet; t=1791570155; x=1791577355;

h=Message-Id: MIME-Version: From: Reply-To: To: Subject: Date:

List-Id: List-Unsubscribe-Post: List-Unsubscribe:

Feedback-Id: Precedence: X-CampaignID: X-CSA-Complaints:

X-MJ-Mid: X-REPORT-ABUSE-TO: Content-Type: To: From:

Sender: Subject: Date;

bh=CfUD0Mv31k73CC7BrDIhADrApFWnQlMDKSLuVpFcFdM=;

b=Z2bMRQ5MIXvn4e1LIHYiGaswVsS57bEFg+Gwh/FTSAsUZeTeh2fq/QYiX

jCYCzIIHiE3JpIqmaH8WiRaaMC4edVprG9H1YIN77VJmH8DIdAki3xiZBa4c

Xqx6eLfynAJBM3oNohQt8gdcKs+lsmX67336M/TmfadDzqUoUtTm3HYt99Z8

dvuCvUILDdEsmbDtyy2hx9tmgS2nygiok8Q7Ip/r9UhE5805QbVWKxyF4ZSa

Qk6UpX99AChRcxFj2eaZpVjSocFELYeYcFFxC9g8d03+VrPkwZXBjpYgSJLW

zxm21FI5Vry/RBDkAsrUkD53AoHNxB701NfCX/tBKzVQw==

Message-Id:

MIME-Version: 1.0

From: Canada International Property Show

Reply-To: info@canadapropertyshow.ca

To: sales@nk.ca

Subject: 5 things you should not miss at the Canada Property Show - Today

Date: Fri, 9 Oct 2026 18:22:35 +0000

List-Id:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

,



Feedback-Id: 42:2952425.2720056:MJ

Precedence: bulk

X-CampaignID: 7765199454

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

BAAACYTr-2cAAc7Xil4AA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTDrdYtTn9cGR7K_E38HccAyxAApgTg

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative; boundary="=-ZQdhw8DL6Hb/1uYHGajd"

X-Spam_score: 49.9

X-Spam_score_int: 499

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: <> [https://www.eventbrite.ca/e/2026-canada-international-property-show-9th-10th-october-2026-tickets-1976214273089]

View online version https://sh4zl.mjt.lu/nl3/27k [...]



Content analysis details: (49.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.250.237.65 listed in will-spam-for-food.eu.org]

[185.250.237.65 listed in will-spam-for-food.eu.org]

[185.250.237.65 listed in will-spam-for-food.eu.org]

[185.250.237.65 listed in will-spam-for-food.eu.org]

[185.250.237.65 listed in will-spam-for-food.eu.org]

[185.250.237.65 listed in will-spam-for-food.eu.org]

[185.250.237.65 listed in will-spam-for-food.eu.org]

[185.250.237.65 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.250.237.65 listed in dnsbl.ahbl.org]

[185.250.237.65 listed in dnsbl.ahbl.org]

[185.250.237.65 listed in dnsbl.ahbl.org]

[185.250.237.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.250.237.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.250.237.65 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.250.237.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.250.237.65 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mjt.lu]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.250.237.65 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)

[185.250.237.65 listed in wl.mailspike.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} 5 things you should not miss at the Canada Property Show - Today



--=-ZQdhw8DL6Hb/1uYHGajd

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



<> [https://www.eventbrite.ca/e/2026-can=

ada-international-property-show-9th-10th-october-2026-tickets-1976214273089=

]

View online version https://sh4zl.mjt.lu/nl3/27krv5pnga8DnojqyPKhGw?m=3DBAA=

ACYTr-2cAAc7Xil4AA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTDrdYtTn9cGR7K_E38HccAyxAApgT=

g&b=3Df43fcb7f&e=3D83fac5b4&x=3DBCwpwHREIv6H13pFkkwx5w

If you don't like our emails, you can=C2=A0



update your preferences https://sh4zl.mjt.lu/unsub2?m=3DBAAACYTr-2cAAc7Xil4=

AA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTDrdYtTn9cGR7K_E38HccAyxAApgTg&b=3Df43fcb7f&e=

=3D83fac5b4&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us]or https://sh4zl.mjt.lu/u=

nsub2?m=3DAUYAAHPnElQAAc6lPsQAA9FtWcgAAYKI_iYAoEvTAC0M6QBocCUcmJ9mT1W7QtmiO=

bGBnsWaDQApgTg&b=3Dacc166ac&e=3De9ed69b4&x=3DJXV5YF4Lsy_PYywz1IAQXRtzDekYgN=

I6e86cGq3ZbC4&hl=3Denunsubscribe [https://sh4zl.mjt.lu/unsub2?m=3DBAAACYTr-=

2cAAc7Xil4AA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTDrdYtTn9cGR7K_E38HccAyxAApgTg&b=3D=

f43fcb7f&e=3D83fac5b4&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_usat any time.=



--=-ZQdhw8DL6Hb/1uYHGajd

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




9/xhtml" xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-m=

icrosoft-com:office:office">5 things you should not miss at th=<br /><br /> e Canada Property Show - Today
=3D"X-UA-Compatible" content=3D"IE=3Dedge">
=3D"Content-Type" content=3D"text/html; charset=3DUTF-8">
port" content=3D"width=3Ddevice-width,initial-scale=3D1">
le type=3D"text/css">[owa] .mj-column-per-100 { width:100% !important; max-=

width: 100%; }
acing:normal;background-color:#F4F4F4;">

e:1px;color:#ffffff;line-height:1px;max-height:0px;max-width:0px;opacity:0;=

overflow:hidden;">5 things you should not miss at the Canada Property Show =

- Today

"en" dir=3D"ltr">

ax-width:600px;">
lspacing=3D"0" role=3D"presentation" style=3D"width:100%;">

tyle=3D"direction:ltr;font-size:0px;padding:0px 0px 0px 0px;padding-left:0p=

x;padding-right:0px;text-align:center;">

mj-column-per-100 mj-outlook-group-fix" style=3D"font-size:0px;text-align:l=

eft;direction:ltr;display:inline-block;vertical-align:top;width:100%;">
le border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" s=

tyle=3D"vertical-align:top;" width=3D"100%">

style=3D"font-size:0px;padding:0px 0px 0px 0px;word-break:break-word;">
ble border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" =

style=3D"border-collapse:collapse;border-spacing:0px;">

=3D"width:600px;">
-BCcpQAAYKI8DcAoK7NAC0M6QBqyTDrdYtTn9cGR7K_E38HccAyxAApgTg/1/bI6_xyO8FMuT_K=

a0-56tOg/aHR0cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW=

9uYWwtcHJvcGVydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0M=

jczMDg5" target=3D"_blank">3D"Property
rc=3D"https://sh4zl.mjt.lu/img2/sh4zl/e07eb85e-629c-4ffa-9323-db232c3fdfd8/=

content" style=3D"border:none;display:block;outline:none;text-decoration:no=

ne;height:auto;width:100%;font-size:13px;" width=3D"600" height=3D"auto">
a>

size:0px;padding:0px 0px 0px 0px;padding-top:0px;padding-bottom:0px;word-br=

eak:break-word;">
ont-size:0px;padding:0px 0px 0px 0px;padding-top:0px;padding-bottom:0px;wor=

d-break:break-word;">

ans-serif;font-size:13px;line-height:1;text-align:left;color:#000000;">


lass=3D"text-build-content" style=3D"line-height: 14px; text-align: center;=

margin: 10px 0; margin-top: 10px;">
y:Arial;font-size:12px">If you don't like our emails, you can <=

/p>


center; margin: 10px 0; margin-bottom: 10px;">
font-family:Arial;font-size:12px">update your
-content" style=3D"color:inherit;text-decoration:none;; text-decoration: no=

ne;" target=3D"_blank" href=3D"https://sh4zl.mjt.lu/unsub2?m=3DBAAACYTr-2cA=

Ac7Xil4AA-BCcpQAAYKI8DcAoK7NAC0M6QBqyTDrdYtTn9cGR7K_E38HccAyxAApgTg&b=

=3Df43fcb7f&e=3D83fac5b4&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us"=

>preferences=
an>or
pan>
none;; text-decoration: none;" target=3D"_blank" href=3D"https://sh4zl.mjt.=

lu/unsub2?m=3DAUYAAHPnElQAAc6lPsQAA9FtWcgAAYKI_iYAoEvTAC0M6QBocCUcmJ9mT1W7Q=

tmiObGBnsWaDQApgTg&b=3Dacc166ac&e=3De9ed69b4&x=3DJXV5YF4Lsy_PYy=

wz1IAQXRtzDekYgNI6e86cGq3ZbC4&hl=3Den">
t-family:Arial;font-size:12px">
style=3D"color:inherit;text-decoration:none;; text-decoration: none;" targe=

t=3D"_blank" href=3D"https://sh4zl.mjt.lu/unsub2?m=3DBAAACYTr-2cAAc7Xil4AA-=

BCcpQAAYKI8DcAoK7NAC0M6QBqyTDrdYtTn9cGR7K_E38HccAyxAApgTg&b=3Df43fcb7f&=

amp;e=3D83fac5b4&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us">
=3D"color:#0000EE;font-family:Arial;font-size:12px">unsubscribe =

at any time.=



serif;" href=3D"https://sh4zl.mjt.lu/lnk/BAAACYTr-2cAAc7Xil4AA-BCcpQAAYKI8D=

cAoK7NAC0M6QBqyTDrdYtTn9cGR7K_E38HccAyxAApgTg/0/npq2UQ5jRzih3nlnWoMI8A/aHR0=

cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW9uYWwtcHJvcGV=

ydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0MjczMDg5?b=3D1=

">​
f=3D"https://sh4zl.mjt.lu/lnk/BAAACYTr-2cAAc7Xil4AA-BCcpQAAYKI8DcAoK7NAC0M6=

QBqyTDrdYtTn9cGR7K_E38HccAyxAApgTg/0/npq2UQ5jRzih3nlnWoMI8A/aHR0cHM6Ly93d3c=

uZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW9uYWwtcHJvcGVydHktc2hvdy=

05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0MjczMDg5?b=3D3">


NAC0M6QBqyTDrdYtTn9cGR7K_E38HccAyxAApgTg/614e906f/e.gif" height=3D"1" width=

=3D"1" alt=3D"" border=3D"0" style=3D"height:1px;width:1px;border:0;"/>



=



--=-ZQdhw8DL6Hb/1uYHGajd--

Chinese products spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Oct 2026 09:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFCxe-00000000LS0-34Fr

for dave@doctor.nl2k.ab.ca;

Fri, 09 Oct 2026 09:56:42 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Oct 2026 09:56:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f0.google.com ([74.125.227.128]:47078)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFCpF-00000000KHx-2QDl

for root@nk.ca;

Fri, 09 Oct 2026 09:48:11 -0600

Received: by mail-pj2-f0.google.com with SMTP id 98e67ed59e1d1-3a4883304bdso1750898a91.1

for ; Fri, 09 Oct 2026 08:47:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1791560819; x=1792165619; darn=nk.ca;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=DLfYvIuuxvxPS8c6yM60oyk9FgWbpzWQMxD0R9DPuMbsxH4y83Hr341W893+7Wslgh

mbI8rjMZHqgXRjBz7UgF6Xc0kW5+vVzv3gQ5X9JManNYN6OxB0s60kEaCbCbi80/PjsX

14Sn7nLaHzu8mSy7dAMjFtz39lIbaG/XdYczc=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791560819; x=1792165619;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=cBBRuS9EqjgxDUwEBcRiJiuxBgEoNYkh26eHZ6gJxfXcrKJbTnlJIOUPWWLec3COkz

u4ssSf6HPbo8fuLc/VD8XLYeXFxkRd0flYQlZDKPqiOzlMW+cjpu0CMa6s1BgdP/xlpb

r3cKDSVdGggViKGv9VRmgQjuRfwcrFgXgGWYMueGP7xFQ14zFr3Rplg4r966PDVnlSzs

N8dAjfCdNfVjDkQ/YGBRjQN5ZxpSEhLS3hdZVInuJX2BBwzUdvpVHC1K7UsJFOliG3ui

BA0kVw+7/ZDbnJqMdQcwiyghOxZSsPufe+Y3ObkIWMQ1FbR5RrAzVJC0j6fRuqVJitJC

gPXA==

X-Gm-Message-State: AFq9FYJKvO7Jq2tDJKUa4W/ljXGpmbGNED4yqbmT7BN7xEh1Y3SnVExS

roIsHx0W4WVedEcVxdrx2A6TUEB3ojy5tfO4MlVR3DcLuYklPaC6fmYJjJZj+YoCauotgdZU26z

Nd8LAhJlwxQ==

X-Gm-Gg: AYBFou3F+GpGn1an2ZKMxrsiLodff6kP2nlvxtZCA4KwHhs2ZaK8FRd32/ZPHOrF+Rc

FnCjfem8ChadoduU7I/F0/vy24Hr2/awtMBRDRh7H19pj6v11v+VZVcv7BZzi2FZnQOZ9z6bceZ

N0zhEeGIlmxDZNAlOAfj95GKq9lJcjLmhJ449SvnqByqlhDXYuUyiNJCKtiCjMUTQ2bnHmZCRdW

JEBL7J/iz9rWVjSnxoRDNK/4jW3mHp9e3NTMA7YIwoN5n3VRytNqIFLUDMMnwQaGPMb/KarQADT

pHPbK9VMu/MqKmght47s7t+rIEZGXESCRzGK5Vl1phLUZccP5FAf8/L6ruaM3noLqSOlEg2JiV0

NeniCo6Ef7b7vRv0BOQd9XuJohSEXFAgt8ceusIyi0rQfAMwd2gvUGhEq9AdYTIdUP7iMMS2YOl

3g8a7xVH2h0eIdLREvMi4CmiDROpXZ8zV8EHYaC6MZxeJoZbQrZecK06nIW/4Yt9F8bJhOymQwQ

K9NBe4=

X-Received: by 2002:a17:90b:2d86:b0:3ab:33b6:2c27 with SMTP id 98e67ed59e1d1-3ab3a747d2fmr2047289a91.23.1791560819057;

Fri, 09 Oct 2026 08:46:59 -0700 (PDT)

Received: from daoxi ([203.88.114.137])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cd3d9e3dafesm1168047a12.20.2026.10.09.08.46.56

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Fri, 09 Oct 2026 08:46:58 -0700 (PDT)

From: "bella@sanmeng-mould.com"

X-Google-Original-From: "bella@sanmeng-mould.com"

Reply-To:

Message-ID: <1D26AC96AB4EC63D38612600F913F1EA@daoxi>

To:

Subject: Re: plastic injection and die casting molds and moldings

Date: Fri, 9 Oct 2026 23:46:28 +0800

MIME-Version: 1.0

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: bella@sanmeng-mould.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear , We provide:



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.128 listed in dnsbl.ahbl.org]

[74.125.227.128 listed in dnsbl.ahbl.org]

[74.125.227.128 listed in dnsbl.ahbl.org]

[74.125.227.128 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.128 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.128 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.128 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[203.88.114.137 listed in sbl-xbl.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sanmeng-mould.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.128 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.128 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 FAKE_REPLY_C No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

Subject: {SPAM?} Re: plastic injection and die casting molds and moldings



Dear ,



We provide:



plastic injection and die casting molds and moldings.



 thermoplastic injection molding, overmolding, 2K molding, aluminum & zinc die casting etc.



Competitive prices for exported mold and mass production of production mold.



 Excellent services involving mould design to mould fabrication, from parts to part assembly.



Professional engineering analysis.



 Excellent quality maintained through top-ranking testing machines.



Careful packaging.



 ISO certificate





We value every customer and will respond to any question quickly.



For details information pls check our website: www.sanmeng-mould.com



Looking forward to your soon reply.



Welcome to visit our factory anytime!



Thank you!



--------------------------------------------------------------------------------

Best regards,



Bella

SanMeng Mould Co.,Ltd



Wechat/ WhatsApp: +86-13242975530

Email: bella@sanmeng-mould.com

Website: www.sanmeng-mould.com

Add: NO.45, Jinghai East Rd, Shatou Community, Changan town, Dongguan City, Guangdong Province, 523863, China

Amazon Prime membership phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Oct 2026 08:11:41 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFBJl-00000000ErY-2KX4

for dave@doctor.nl2k.ab.ca;

Fri, 09 Oct 2026 08:11:25 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Oct 2026 08:11:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f3.google.com ([74.125.227.131]:40968)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xF7EF-00000000Iqp-0Ykr

for sales@nk.ca;

Fri, 09 Oct 2026 03:49:37 -0600

Received: by mail-pj2-f3.google.com with SMTP id d9443c01a7336-2e81a3da3abso4876015ad.0

for ; Fri, 09 Oct 2026 02:48:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=proaa61.louisvuitton1.biz.id; s=google; t=1791539313; x=1792144113; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=+qrZb7Y09k7LuZaWfcNfUTqNJZrEO2IuMw8mPBXaxY0=;

b=hxBdI6mPq8ENXuFa9TFGMgMesQCn6mw6hkqhgHhGiaNRnWhx4F6F164wYpHq1i2M1A

tNXomSl0rwPtb78gRAP8XPz9huCtFAJ9tU6qFa7NdnHtQw9ZiuWxk5AMxCp/bSVo5cLU

pTJim5YsEZx3hsggctYo7sm4pnkGkMIZofW5GatSliPiJSy1ZbT5eUT0S2wxtHyKa79h

m7FUFL/y0DTCtP0haeGf+pF2DkVpmdtXrj4UNLK0d/xSTRwNAwzFq4soVidYT9euyPJV

l2gm9u+oDbRI1Gq2+hfa3+bhYfDHFs1EXoMs7RFToyReQ3JA62O2WJrmQ0/x0x/sxXSl

XmuQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791539313; x=1792144113;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=+qrZb7Y09k7LuZaWfcNfUTqNJZrEO2IuMw8mPBXaxY0=;

b=KWjhbCsK8CMzyPBv93SnuvXHeuJkEmFAJnr6fRACPAiHIfagdX+eo9x8Jt6HriAWcS

wKKKvLjsZmmUOEfzSw2FwPCu5HMKnXvrIsdaPEonVLttNGmWwtJoKvZY0ga44ziEaC9n

Q9KVYaQFzV3NLo8gLH5AbApuPF2GN4OsFYyzBBBBIWQr1ePlaXVkZ727ItWv7+7zOZiL

4LMn8sk9dHcPCVQ4y1Li9FVD6D+tFvJIHxprEfIGTtSR5Qj8OdWEaBdvxNBipwkwkDhA

l17Vgs9yRTwwZ5O/P0+nZr1H6jqsDgFwQViav4daEEPDQRGC/pwjFK7kYH/OxHgZVxel

KE1Q==

X-Gm-Message-State: AFq9FYJt1x0fSlPzy/M1ykZVZRUokc5nhX/3Ae2mvNkaDFB717L4wesl

oe56xta2qw4UWRGsSLXtU/SiKw9CEc8RF/hkJqFReldwRmnFNfiLq8pRNag2t5Eu1eIiVNg7veC

f6CTgF4Uo6GUHvKv4

X-Gm-Gg: AYBFou0s9/hes89bJ+424/78EtU9F3JSLFFjtTg6SKU/ISXExTgK/TZLaHVJxZ++uf2

/plMmz8jjVVSVbr9upgGQiu4dHKIDQ1spEXTpw1FBYYtZ8/gK/Oze2LPval98CP18H45c+2z5Pn

B2Uu78yrTbueDt70yNptXj3hF6rEp4wQDoO/OT3TDTE9iSNphfcDvhPuNdDiQBVSu7oYRuBMLtH

N0GcGLfftMZijQOmOwyr2RlXDIauVsqj27NYdxi81S9p0RE01OOLS+D4Qj6zAGtNuA/6sjBQsgg

D4HTFqtaRLtqg7kh4kZoSVLihyosGYxXqUVNk7z4fGz0jYgCl/0lGptYSu0mvS4yeRbtQ2zxhGL

9XkN0sBGKrt2DMZKgVIywT5NsfZGhjhsQNEuL+Vo2r9vJ3s3JG00dE0xxr4CisNSR5+L5Bw/8wZ

m+xGtqSLObncqCx1e7miRCSeLHCUo50iVWO/hOKBgxy5AWpQP+CvvvnLs0rMgpOdPJSRHlQoELo

yJRWucYWKhgnWBXFfSHdC9YiO17ZeRa9DVoPgPDZz8VgK4b3g==

X-Received: by 2002:a17:903:249:b0:2dd:c100:80ba with SMTP id d9443c01a7336-2e842e0e7f5mr11465225ad.53.1791539313082;

Fri, 09 Oct 2026 02:48:33 -0700 (PDT)

Received: from mail-qv1-234.google.com ([47.84.57.205])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2e8419ff572sm6066315ad.2.2026.10.09.02.48.31

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 09 Oct 2026 02:48:32 -0700 (PDT)

From: "=?UTF-8?Q?Prime Membership Service?="

X-Google-Original-From: =?UTF-8?Q?Prime Membership Service?=

Date: Fri, 9 Oct 2026 09:48:28 +0000

To: sales@nk.ca

Subject: =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Fri, October 09, 2026 9:48 AM?=

Message-ID:

X-Priority: 1

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Prime benefits are on hold due to a billing issue Hello,

We're unable to charge your payment method for $14.99 and any applicable

taxes for your next 1 month of Prime. Your Prime benefits are cu [...]



Content analysis details: (15.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.84.57.205 listed in will-spam-for-food.eu.org]

[47.84.57.205 listed in will-spam-for-food.eu.org]

[47.84.57.205 listed in will-spam-for-food.eu.org]

[47.84.57.205 listed in will-spam-for-food.eu.org]

[47.84.57.205 listed in will-spam-for-food.eu.org]

[47.84.57.205 listed in will-spam-for-food.eu.org]

[47.84.57.205 listed in will-spam-for-food.eu.org]

[47.84.57.205 listed in will-spam-for-food.eu.org]

[74.125.227.131 listed in will-spam-for-food.eu.org]

[74.125.227.131 listed in will-spam-for-food.eu.org]

[74.125.227.131 listed in will-spam-for-food.eu.org]

[74.125.227.131 listed in will-spam-for-food.eu.org]

[74.125.227.131 listed in will-spam-for-food.eu.org]

[74.125.227.131 listed in will-spam-for-food.eu.org]

[74.125.227.131 listed in will-spam-for-food.eu.org]

[74.125.227.131 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.131 listed in dnsbl.ahbl.org]

[74.125.227.131 listed in dnsbl.ahbl.org]

[74.125.227.131 listed in dnsbl.ahbl.org]

[74.125.227.131 listed in dnsbl.ahbl.org]

[47.84.57.205 listed in dnsbl.ahbl.org]

[47.84.57.205 listed in dnsbl.ahbl.org]

[47.84.57.205 listed in dnsbl.ahbl.org]

[47.84.57.205 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 HK_RANDOM_FROM From username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[47.84.57.205 listed in sbl-xbl.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.131 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.131 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.131 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 URI_GOOGDRAWPREVIEW_MINFP Link to image at Google Docs, probable

phishing

Subject: {SPAM?} =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Fri, October 09, 2026 9:48 AM?=



=0A =0A =0A =0A =0A=

=0A
=0A
=0A
enter class=3D"x_wrapper" style=3D"">=0A
" border=3D"0" cellspacing=3D"0" width=3D"100%" class=3D"x_main-container" =

style=3D"width:100%; max-width:578px; min-width:343px">=0A =

=0A =0A =0A

578">=0A
n=3D"center" width=3D"100%" style=3D"margin:0 auto; width:100%; border-spac=

ing:0; font-family:sans-serif; color:#4a4a4a">=0A =

=0A =0A =0A =0A
>=0A
=0A =


=3D"border-radius:16px; font-family:CircularStd,Arial">=0A =

=0A =0A =

=0A =

=0A =0A =

=0A
tr>=0A =0A =

=0A =

=0A =0A =

=0A =0A =

=0A
=0A
" width=3D"100%" class=3D"x_logo-table" bgcolor=3D"#ffffff" style=3D"border=

-top-left-radius:16px; border-top-right-radius:16px; background-color:#fff"=

>=0A =0A =

=0A =

=0A =

=0A =0A =


tom:24px">
ORw0KGgoAAAANSUhEUgAAAGEAAAA2CAYAAADXjffsAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjw=

v8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAABYOSURBVHhe7VsJjF3Vef7u9tZ582azZ7yAMXhsZ=

mzAGEMgLGmpWVKWxEQgVYXSkKihaRWUqmojkSpRqrZq0lQKShBJUSXShYQGFShlc0gAE0MMBIgh=

xMb74HXGs89b7rtLv+/c9wwxMPYMDgyuf/u+e+9Z//Pv/zl3rJiA4/CBgl2/H4cPEI4zYQbAjDd=

HQq6BoW4WL1s/xxDMeCaUA+C+jSG++4qDiRBY3Q18/nSgmE4YcizAjDZHEo9d48C/vFTBthGgf7=

iGe14u4dl9b2rHsQAzmwm8qmGMgSiPUYp92fPQb+cQBJGpO1ZgRjPBIuHnFCxc3DGEruoBFINxn=

NVcwfL22jEVUcx4n0A3gGH6hV8PAKUa0NsBzM1EZNCxw4bpM4HUqTiAiwBuTCoFISIPmEAKI76H=

0AdaU0CTq2iGL3ENoZ03ZkTks6MAEZ9slsSWAyui8Wd9ieKvetIbhbDCX4KV5iycknUu0XXCUcA=

rcswqAtZVWZcjPjE7RtQeiyM7UY2OPI0DnJpoopAF0qxPo8IZM5zP51zClUNVKsimiHzWQd5QYw=

y+VUAq4px1XidzVIhXBqNEzidCmq+F68u5LLDY2AiGZtMgvPMWG3wmhykzQY3V44FtATbsdZENf=

CxdkMLCTuCn24B1jGQ2DwUkDtDZHGPlwgz+YAmwJEuiW67pL6TWvAGs5UV64bTZwFWnACPjEdbu=

rOG5PTUMoAm3fATozgE/2Aj0DUckgI32PHBdD80UGSx4Zi/wxDYSnVw/q8PHmYuajdY8RFye3wW=

MjlWQs0tY1Bpi9RmzcO4JwAE6+cdYt35rCRuHHURBgFxTHr+zwMcfnpZCd7aEqpVDmv4oJC2dKM=

TQRIBHdmXwk60+Ng3HKPk2xa2KWU0eVnancR3xX5iP4FkSF63TJnETHA/Hhakzga0DXjc9XsOj2=

zzkKSJz24FM2seWwRCVKEuJpXRRMrN0oFmnip7OKv720hYsLkgLIkQc5NYnQ9z5eooaAZzeNIYv=

XFzA954FNuzn+FyHlwHuuAL4SLGE6x8I8PJIMzgc5mer+N7qNE5rDlGLHfzzerZ7KTFbXbkAvbN=

cbN05jDfCFkphTGmewKDXBFownOyO4IyFRby6J0QfPX3NtqkXnIv4umEIxylh1bwM/n6VhxaGwF=

5ACaek/2rYw1eeqOGJAx7StRC+45j5ikGZq7HIqAxWtFfx1UvTODPPMptqRzBKFLMlNX0yqCvb1=

ECMdWueUbVqpoxNJWDbfhuFlIP5LSFOyAfIOD4mPBv7vCzWHSjiu08PYVA2hlIlPQ5IQKGWplnY=

VCrg1h+TAfsChCRWioi7bOaR2S7NmGfHxjxJ/S2apCKlXohnIjYmSOssyt4bFRePUbt22S0okg7=

NdOrVdBNylBqZqS1+EfdvBjaVHaSyNjrSMea6gREEi4QatQt4creHzdQUh/OCmtvHdf7DE2NYv9=

/hOAE8Ir20GOOj1N7O9iwZSWmJI7w84ODfn2OfmKaYOIlGBjuZqcPAtJgg1aESI0u7nqM5SnPGT=

/W6uPPSFO6+3MH3r3BxyzlE0hug1NN+knCP7yvgV4NJ54Ao+nZDOmJQuzFSpmQ5NcydBZw010Fv=

F9BGQlZRhI+8sc1aWI12PKAhCIiBZQiVLCIbsqU/gctm13D7KuBHV9bww48Df3mGD5fSbJEyDu8=

dto8vrQhx15U0c1fHuO1yF735CUOwbBhghO32EhebY9eI9yM0a2v7m+jrEv/1uTMdPHTJAP7n4j=

dw1+XAeR0lKktIC2Fh7XafmlU3ueyfkH9yLRBMnQmiBKHsRZzaJaOLIO1wySLgrDkhuosVLCtWc=

W1vCud3taNA0+ISq32Bi1f2qD+R5BgeTZIk3eG9me/XLKzg3tUpPPoJ4CdXl/CjKwIsL/hmQVQE=

cDqk4wqn5wPfzQLpCGX6pAmGMW4eF3V7+PiCEEs6ApzaBnxsYYoBQkBBoZax36y8hdU9DpYzylr=

SWsZ582imOjLGzGaCktkSocXhHJYxVY9uGDRBBOUd53RU8NnlnLZ1FsqF+ehqph9g35rloUyh6g=

9yfE6EVAYyubPgMDB1JiQjIxXQumvxdg2uExon5MheUB0VzXS5Ec4+kWaEgsBHc706EKFC6ZJsB=

LwzLqI6p43GLu2kc2930MLucHNUezLLoffVoji4iB7FaRKdhOcAKc4XUwjEYF1qF3H6DM2dFhUj=

y/IQtDpIkYtBPShwadjEfBpTvmXNOIUMO3PMstNkSJYnRwIra7TzxZE2jNtJ6+7OgoJAWR/Y5Qr=

W9QFP7wyN+dH6OjOhGc8AzZshbt1kTgam3dGCmIRtcF4OeHaLbRYtkkhiB8d9cxf5ZyTU0TLOlv=

eh8RBlou+wXBL+b6/FuOzuAOf9J3D+f3n484cDbK1QakjoglPB6tNcapyfaCkHk7DFB83uu8PRZ=

YJ+DA/0xLCR8yfynpQYHs1AkLM3d/ObgPCtSuxZ6FL0UyS0RbM0UqpibMJnEOAwEmSITm2bnynh=

prMyuH6petLRmwH0G/Ht8HBUmdCA2CzHBkN0E0Za/CcTUKRhlemQpM1EkK8SJNjTtFGIPAkTk1F=

p9vn0N5/5aB7X9KRw05IAt6wEvnVhDfetzuKvT69gnqeUjpGXGYRRAOFICHxUmNCQ9MaT1LFKSd=

i2awgB1UGlaUYLC2dnaJ4abY8cptp++pBwQdorI9KSTyHDJKJM3ySf0uWP4YtnAF+/EPjax1z8B=

ZnwiZ4M2otcI3OFmJGbiC+NSXCW/zu8LkybCdpyUMQSalLG7cMTwITPRVCF7WACPx+08dB2hnVs=

oygjl3awkmGnEzPGl7Ois5WTdqMklKsycXonkPOv0TEKHKq+IiUtSzba4lg1dmPyynb0Oyy3qHl=

MuxIicGxJt4ioAvOszIzPtl5M4kFTE5dNCKyQ1DGoWSjxvTPHLLy9ZpytEuG1fTU8vFXrDA3O0g=

6TjLFugIscF1JiJHFJzLDeE42YDDjV9MAlAkl4aGHUzeIbT5fx6cd8/NnTKfzpmjz+5qEQr5eLJ=

C7Vmu1XtIxhMUNG4RUzwnHFDL5GjCLk+HLROO9a2m+CQthsxGyQ/Xxb0VCIPON5mTeBMnPt8TTG=

S0cVOGHZPMdMpESMQjievHMMh4mLnoW7oRELNa+iu2xYM0zORFXkKc0ek4trzkihhVl3jXx83Wr=

DV58McPNjIb7xTIh/fM7GrT9zcPOjMW58MMJPN5fM1ooJw83Mgjqik4DwmRZI8iSlIpJEcF+Qxb=

N9KTzwGvDgjgo2+VRJSnwrCbQoN4LPnFfEHE8ZZb0/pVULrh2MHhTyvh0dI00kvNgjhmqXJdSGn=

+J+hsIaTnUlmgNtKPosq8uowU9EJjlRZZ3KUgdNBYFrkBAxyDZMqTkeShTcCsNmwyoSc9Vc4PdP=

oT/jIvPU8nKlijW7U/jOLx1850XgrleANTstvELNH6xyLo4jn6e5jhSmzQSpvNboUQJbwxJWn0p=

iN48xRBsl8krl08hygT0dIb50eRErO8mw+k6jJi1kXbTGE1zcCHIowSvkzALeBiReJmWjyDla6C=

BzdhXjKS3SZY4CNNNSdUQjaAsG0VEZRobpe81NGyIow9U2g0u/lLPKKFJLmolvlX2M8HA8tSt6P=

maFYyjGw+iMRsHci4xgbz60OFX81UV5fH6lg3lpagTnNbJCXGX+lDRo7JOKIU7oyJq1SaveaSnv=

BtPewPuTRyUBSVmO6nrbVXl0MwvdvpdXf4X2NcKSLgu9XRl0ULqYYpEkkn6dijkYYiCxY4wIsJ3=

v2OgpKNYW9g3NSCBi+y000BO0SFqZth6WFaokhCQ+xB5mgzvojzJyFKTAKUUmW2Y+AoOBgMnjVs=

4zYpImG20c4+Rmn/MqhpFmetjH2zYmZtq3aua1kGNkDaOSnV+xXN13EI8X9gMb98YYLvlIc57OJ=

gdL57jopqklDxiyUne1tU8/lsx4eJj+LuoaMmGHNCFCE8q4/YocLpqX8N/YW4LsNicgJpIZOUsF=

q5qODdhP5kfvzLeNjzHl5norKNpiP3XTG6ttLZLEkeJrTNUbyTZ9OY4RVb3r4jPrZD7N9rIpUb9=

kbtOEhcJBIOdvCqjFqkzaqUx6xR7qwkvYGmAziU0iZGybDEM4+HBYOBJGvSNISkSQGhdcpQPUJp=

1BiJdkTJdByHyfIoKJAYLkt2GWVKraBJV63W9AcshjhudlEDYMEIhAyTZI0kD3xpL0Un9mnWZLi=

CVImGHaGCSTMZJx+GvGSPon7VST4K/lUHHhNS6+myUaP2Ue6teRQ4LTFEFTpBmxyMnpWdvNqagh=

S8dhqjB1JpDS0uAxt5lRByVSLzrLZJSjx+MwdZi6T9DFnzs3ARt2VhlghPBcB587N43uQl2lj8O=

UYMpMEKiDxYRGe/hyihXqU3PE8MKk7R9eNph1NZ4YOJgn2Xrz1ACWG5LVyWb8R8Og1J266tkvGS=

/5nQymxQSBIkKzQ69IhQyJnSYTMXz4NUE7n9qCJ3BtNROiyu/pnXUkunYntFVnDqX4rMjaiyukp=

phBCkSMeRmsKEpM9o4agcQ7w7SZAEq+DrQ1RcpIDXnO6GByns9wqIe+9HDMsfmo7RI+9ZcdbB+p=

4eV9ETYMprFtzMYYmyowyTkhZucd9HS5WHkicHYrgxYJJ2khqti/DSaosZKaO14FzpsDrGhl9Gw=

xXNXpk+Zmi8b+/IcNRHyRyzbEd7E1SOG+DcDDzId2MuEbooDL4qR52ebTFotZe2J2sqzoyQ7g7h=

s6keXylfe8mWNMbh+mzgS21lntNfdWMTg6gauXtmD1EhsLC8yDOZcYoCE/jIxIUjIRxUefn8JXH=

q/imf4UsnaEPCvS2hK2SV6XeYdfNbvGe+kQK9QeN4pRtMt45rM585FZitl4TC0igUUUM/67wbTM=

kb6g+PUQ8LW1Adb2u1RH4LqTQtzYG6GzkNhQ22QwHzLQFxKWZxgxRqnfsNeHk0qhhQUe7VOKaiI=

fIG0PIgt9bHP3ixEe3lzGBPJmG+PVT7Md27uxApVsYjoOQ4rp+wSm931VB7etq+D+rQ7GIg9zsg=

FWL3PxyROAnuYKXE9fVkjBpZpK5ur5sYxlAzleyrzf8vr+QGPVZj9ECEkPeJkzBm1RJNsUaqi9L=

rXw6AOMs3YyLGEtGbF+N3D9/wYIqD2L2hzcf23abN3bZlwyi+OIApPBtJlgUOfPAeJ1H3OG29eX=

MVh1Tc7QkrZw9uwIV53qYOU8oI2hhUtKG7y4xpDW14m1sVEH7a6aESWD7xMb9BFaAyFzt5CcQiR=

OWUQWE1TjhCFGAwcPvQGs21TCinlZ3NDLcjZ/ZKeFm38M1Gijr+ux8M0LKHB2Y0um4Rcmh+lrgk=

GPF8OxCuOBx/eREc8Cm/b5GKdFjOkfilTvZS0BrlycxvIFNhY01dBKx2Hp2xTWSwMEDRbIfb1fm=

qDTPhFKUtqY00RDipCISWDl0U9zs3tcn7XQOW+hqRlmeyK7Yi5wz6Vsys7fejHAP73oIsMFfH0V=

cO2JJQROrr4WFipyPEzu9B7Mkb5Qo+Pho8s8QXu9W6pZ3MNo4gcbxjEYNxnCUogQEtn5FK/e5ir=

OPiHGysUZrKQfke1MAjmuVp/ImQOZyRE+ekBiK57X/MYEuSS8hzEivXEQeGpLhBd2V7Bl2Ea/n0=

E6GkHVSWNZq4UvX5jGubOAcXa74b/L+PlQFt3uOO74ZBN6CyXU7JzZXdYJoqVd2d8WE0Q6xcA6X=

NFS9P2osuiIZuap3Ta+vX4C64eazKfu+lI5ICeU1GSIUzauore9htNOasJymqtTCsAcGlJ9hMvA=

430Cn6G2g0HfwW6dbVDi19PcvLyzgs2DASasJpOU6RzBtgPMcwJct8jCjeek0ZHxYcceXhu0cM1=

9wDDX9EeLKvjyRRk0O4lwelEFIRO2Rt48Gbwnn5BIsSLhZBLzES0hpmTt4+Ke6gN++PwAnh9uoz=

Ojo+OKzFEH7ZDv2WRcgDz9QZFhRUvOwYk0V6d2eehu1ykdMJfBRYacqzHSktkwttrMwVWbzfJDg=

VjJxhnHmgiKMLPDMqU8jRHipe9Md4+S2JT2DXt1UAOMTLDbxAhKzAv0ratPydVRqlxFm1XFZQtC=

fOqsHE5nIlZkuY5lQzrib6+38HcbPHR5If7jygjL2pPtbPmSI/UHgvfgE94OGkgX8TRPE0RhP6X=

s4VcCPPi6j00TOZNpGuIQO/M5YsQUiYzQgX9M6RKxlYfnUUV73sWsgo2TW2toK2TJKAtNpL1OvV=

rZkDGANm8PLlSBQo08qnKOkh+hVKkxwXKwqeRigOK6e2gCB6oWRnwJBEnEjurjU2Ir+ohAg/BdF=

GlP+ebb08uXNuPCU4AOVkmAkqgJ2E+n8oUHK1g3ksGtK2r44+UeUhxvOsb0qDJB8qlLRPHMCZWc=

HJEmcbdTAtftAu7dUMYLg1mka4FZuDb/xBSprTRDRAmZfeu8WYhJGpUjJZqgP8KgAaR2iGnipEN=

KNnIh+R/TX8+6s5/Mianmu+46/Ne45AXDCfmzJLHUPo+UaBZGcckCi8QvmD9e6SDTE+3TQMmGpd=

jwxB4Lt6wBzm4p45u/R7zy+SQ05TVVOKpMAFVUp+QNRJPlJk+WogRONcyw6Rd9If51i4MdeyYwM=

GGZP2sSURU0iYBqr83BFH2HVLtCUyIC6pIpMM9y5IeCwmDd+GsuvticM2W+bdIBpGyJhEJj6G8e=

iCfbtFAlT2y2cMHcGi7p8bCUZif5sykRnoalzmXNKCI71N7vv2bhma1VfHFVExZndKaeoZCoxdR=

14egyoY6EBmzsmTQQl07IpiNMwsBxNGH/eIRf9gM/2+Pi6b4Y+2mrRRh90CWJ1nLkzKkv6klICC=

vtKDNSORRUnpArAeEhOPgVBwu0pSDp11cbS9pcXLDANXtgi4sxWplsKvbXVxbCO9k5DamZyRfWK=

tNQOofewbyhyIIMxV9ip5WabQrWTxWOKhNEaA0m02G+OKCDlAQKkq/V9EVcmr4CaOKrMG5sC4/T=

hr90wMYvdvjYSIO7u+zRdlsY82NUGXEFVBMFAMZssL3+oONQ0NeAqtOMNgnlkisOr4wXoZkGu82=

rYUELHf/8FH63i46fzr9ZTGEb7QCb7WlejralJdfyU3zS8a2ZleaowQhbWm/EhKkny03AwZk/cC=

a8dwipARbGqQqMEulE6QCpONrB7KeW7B8JMFyOMEqHu72WNzY/QZ9mhcScbZfRqlA366Ajn8LsI=

h0sw98TeJ9N2z6b0tGWEmNISvqjmQIziglSaIV2idawQLbHAN8plQEvSaJkLjEYCSRskCYm9lia=

IDNmDlTM8niZMw+NY+SY/99uzj4omFFMkII3CGpMSv1ZuzgJyJ0moLpDQXVvbZmwMMlmBI063Y1=

/miEws8yRtn9FIjpG41mEmaIT1R0CipLeBqR6o7hxTxhRH8pc0g5qkdkimRkwo5ggRETwBkIyLo=

p4GpRslOsuN30oaMu5QXTTynSQCVKS9eaftipoToLZmQEzzDH//4R3Mq3H4X0F4P8ABwZVfDU9S=

DoAAAAASUVORK5CYII=3D" height=3D"65" alt=3D"=0A Information regarding your=

payment from Amazon Prime=0A">
=0A

ffffff; text-align:center; padding-bottom:52px">=0A =


=3D"padding-top:32px; width:100%; border-top:1px solid #e5e5e5">
=0A=


>=0A =0A =

=0A =0A =

=0A =0A=

=0A =

=0A =

=0A
=0A =

=0A =

=0A =

=0A
id=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"fo=

nt-family:CircularStd,Arial; font-size:16px; line-height:1.5; letter-spacin=

g:0.2px; color:#171731; text-align:left">=0A =


ng-bottom:32px; font-size:18px; color:#00405D">=0A =

=0A =

=0A
d>=0A =0A =

=0A =

=0A =
=0A =


align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,Arial=

; font-size:17px; font-weight:bold; line-height:1.67; letter-spacing:0.38px=

; color:#13126c; text-align:left; margin:0">Your Prime benefits are on hold=

due to a billing issue

=0A =


:12px; font-family:CircularStd,Arial; font-size:15px; font-weight:bold; lin=

e-height:1.67; letter-spacing:0.38px; color:#13126c; text-align:left; margi=

n:0">Hello,

=0A

ass=3D"x_email-paragraph" style=3D"margin-bottom:24px">We're unable to char=

ge your payment method for $14.99 and any applicable taxes for your next 1 =

month of Prime. Your Prime benefits are currently on hold.
=0A =

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">=0A

s=3D"x_email-paragraph" style=3D"margin-bottom:24px">If you don't update yo=

ur payment method in the next 6 days, your membership may be canceled. To r=

estore access to your benefits, please update your payment information.
iv>=0A
=0A =

=0A
resentation" align=3D"left" style=3D"width:100%; max-width:303px">=0A
>=0A =0A =0A=

=0A=0A =0A =


ogle.com/drawings/d/1x0MiwZctTnA-1ndEzFkBAIghJCHLAzKd9IuflnMZrDI/preview?b8=

NHD" target=3D"_blank" rel=3D"noopener noreferrer" data-auth=3D"NotApplicab=

le" id=3D"x_bill_view_link" data-linkindex=3D"0">=0A

tn x_btn-primary" bgcolor=3D"#3667e9" style=3D"padding-top:10px; padding-bo=

ttom:10px; padding-left:30px; padding-right:30px; letter-spacing:0.8px; lin=

e-height:1; border-radius:12px; border-width:1px; border-color:transparent;=

font-family:CircularStd,Arial; font-size:14px; font-weight:bold; backgroun=

d-color:#FFD916; color:#000000">Update Information
=0A

=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"font-=

family:CircularStd,Arial; font-size:16px; line-height:2; letter-spacing:0.2=

px; color:#171731; text-align:left">=0A =



">Sincerly,
Amazon Prime Team=0A =

=0A =

yle=3D"font-family:CircularStd,Arial; font-size:16px; line-height:0.5; lett=

er-spacing:0.2px; color:#171731; text-align:left">=0A =


bottom:24px">
=0A =

=0A
=0A
tion" width=3D"100%" class=3D"x_responsive-padding-x" style=3D"background-c=

olor:#fafafa; padding-top:31px; padding-bottom:31px">=0A =

=0A =0A =

=0A =0A =

=0A

eft">=0A =0A =


om:16px; font-family:CircularStd,Arial; font-size:12px; line-height:24px; l=

etter-spacing:0.18px; color:#171731">=C2=A9 Amazon.com, Inc. or its affilia=

tes. All rights reserved. Amazon, Amazon.com, Prime, the Amazon.com logo an=

d 1-Click are registered trademarks of Amazon.com, Inc. or its affiliates. =

=0A

-help-link" style=3D"font-family:CircularStd,Arial; font-size:16px; font-we=

ight:500; line-height:19px; letter-spacing:0.6px; color:#171731">=0A =


rgin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; font-size:=

12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color:#17173=

1"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

=0A=0A =

=0A =

=0A =

=0A =

=0A =


=3D"table1footer2" style=3D"border-spacing:0">=0A =

=0A =0A

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Oct 2026 08:11:41 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFBJR-00000000EqK-3udc

for dave@doctor.nl2k.ab.ca;

Fri, 09 Oct 2026 08:11:05 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Oct 2026 08:11:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-119.dm.aliyun.com ([140.205.208.119]:20880)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xF6MM-00000000EcM-1XQE

for doctor@nl2k.ab.ca;

Fri, 09 Oct 2026 02:53:54 -0600

X-AliDM-RcptTo: ZG9jdG9yQG5sMmsuYWIuY2E=

Feedback-ID: default:vip@vip.rymat.ltd:alibabak_WebBatch:512257

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.rymat.ltd; s=aliyun-cn-hangzhou;

t=1791535964; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=AzcnSJ/a5rukf8xoBO4QcfDjJ0dpuqspzoeuiAjgcHY=;

b=UEd+f5TqaDRrNkILxGEJCYrUfCQgdNKztup6zPuXhsk8I6YS/fOmqGA1AVnGvAay5wRbJxpJT8Nv9WZ0SDn6v7XMQ4XaxJLVgpb2en3/UHeHEA51clCQchGcKM5QdrgNiK95J7OlGTBRvk8PMhk+y+RRZS2bN/QZLZfpBs0YBiY=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1791535964; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=AzcnSJ/a5rukf8xoBO4QcfDjJ0dpuqspzoeuiAjgcHY=;

b=iY85oK9JXXSGfEx+0aLuGO91pOL0iAUqNYq17wOGdyXk+LJwfGO5x6IQ8vmBZCIIswWviO4hjBD9KKM678AjFO1xCtW1lpzEGVcHuFMB8w3MNU090tX2HAaq1kzIbF1tagwn58/gQVVjaZHZx/U3n9YrHzFrUVUBnA+D+D5KpIk=

Received: from chitu-hsf(mailfrom:vip@vip.rymat.ltd fp:ma_600000357274851666 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Fri, 09 Oct 2026 16:51:36 +0800

Date: Fri, 09 Oct 2026 16:51:36 +0800

From: "Chris Liu"

To:

Reply-To:

Message-ID: <3b2a48a1-8fa5-4078-927c-e618067d3c51@alibaba.com>

Subject: =?UTF-8?B?Q29uc3RydWN0aW9uIEFkZGl0aXZlcyBNYW51ZmFjdHVyZXIgZm9yIENoZW1pY2Fs?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000357274851667

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Partner, This is Chris from Tianjin Eclat Co., Ltd (subsidiary

of Hebei Anjiefa Building Materials Co., Ltd), a leading manufacturer specializing

in functional chemical additives.



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.119 listed in will-spam-for-food.eu.org]

[140.205.208.119 listed in will-spam-for-food.eu.org]

[140.205.208.119 listed in will-spam-for-food.eu.org]

[140.205.208.119 listed in will-spam-for-food.eu.org]

[140.205.208.119 listed in will-spam-for-food.eu.org]

[140.205.208.119 listed in will-spam-for-food.eu.org]

[140.205.208.119 listed in will-spam-for-food.eu.org]

[140.205.208.119 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.119 listed in dnsbl.ahbl.org]

[140.205.208.119 listed in dnsbl.ahbl.org]

[140.205.208.119 listed in dnsbl.ahbl.org]

[140.205.208.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.119 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.119 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.119 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[140.205.208.119 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.119 listed in list.dnswl.org]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?UTF-8?B?Q29uc3RydWN0aW9uIEFkZGl0aXZlcyBNYW51ZmFjdHVyZXIgZm9yIENoZW1pY2Fs?=




px;text-indent: 0">


in: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px;text-indent: =

0">


lign: justify;font-family: Arial;font-size: 14px;text-indent: 0">
"font-size: 15px">Dear Partner,


: justify;font-family: Arial;font-size: 14px;text-indent: 0">
nt-size: 15px"> 


font-family: Arial;font-size: 14px;text-indent: 0">
5px">This is Chris from Tianjin Eclat C=

o., Ltd (subsidiary of Hebei Anjiefa Building Materials Co., Ltd), a leading m=

anufacturer specializing in functional chemical additives.


"margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px;text-ind=

ent: 0">Established in 1992, our 34,000-square=

-meter facility features 120+ skilled employees and 15 technicians, supplying =

high-grade RDP, PCE, HPMC, PVA, PP fibers, and starch ether to global chemical=

markets


Arial;font-size: 14px;text-indent: 0"> 
span>


-size: 14px;text-indent: 0">Applicatio=

ns: 


"margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px;text-ind=

ent: 0">Tile Adhesives


argin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px;text-inden=

t: 0">ETICS/EIFS


0 0 0;text-align: justify;font-family: Arial;font-size: 14px;text-indent: 0">=

High-Performance Concrete


"margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px;text-ind=

ent: 0">Precast Concrete


"margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px;text-ind=

ent: 0">Self-Consolidating Concrete, SCC
>


e: 14px;text-indent: 0">Gypsum-based Products<=

/span>


t-size: 14px;text-indent: 0">Water-based Coati=

ngs


;font-size: 14px;text-indent: 0">
;font-size: 15px"> 


mily: 'Times New Roman';font-size: 13px;margin-left: 7px;border: none" cellspa=

cing=3D"0" border=3D"1">

rder-width: 1px;border-color: windowtext" valign=3D"center" width=3D"553">


tyle=3D"margin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
rong>Core Chemical Pr=

oducts


px;border-left-width: 1px;border-left-color: windowtext;border-right-width: 1p=

x;border-right-color: windowtext;border-top: none;border-bottom-width: 1px;bor=

der-bottom-color: windowtext" valign=3D"center" width=3D"553">


in: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
tyle=3D"font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;color: rgb(255, 0, 0=

);font-size: 15pxfont-family:Arial">RDP (Redispersible Polymer Powder)<=

/strong>


amily: Arial;font-size: 14px">Enhances flexibi=

lity, adhesion, and crack resistance in tile adhesives, exterior insulation sy=

stems, and wall putties.


ding: 0 7px;border-left-width: 1px;border-left-color: windowtext;border-right-=

width: 1px;border-right-color: windowtext;border-top: none;border-bottom-width=

: 1px;border-bottom-color: windowtext" valign=3D"center" width=3D"553">


e=3D"margin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
g>
255, 0, 0);font-size: 15pxfont-family:Arial">PCE (Polycarboxylate Superplastic=

izer)


: left;font-family: Arial;font-size: 14px">Del=

ivers exceptional fluidity and high water-reduction rates in advanced concrete=

and self-leveling mortar formulations.


idth: 554px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtex=

t;border-right-width: 1px;border-right-color: windowtext;border-top: none;bord=

er-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"center" width=3D=

"553">


14px">
;color: rgb(255, 0, 0);font-size: 15pxfont-family:Arial">HPMC (Hydroxypropyl M=

ethyl Cellulose)


;text-align: left;font-family: Arial;font-size: 14px">
: 15px">Acts as an efficient water-retaining agent, thickener, and anti-saggin=

g modifier for building materials and water-based chemical systems.

=


amily: Arial;font-size: 14px">
=9B=85=E9=BB=91;font-size: 14px"> 


xt-align: justify;font-family: Arial;font-size: 14px">
ly: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px">
i.postimg.cc/vb2DFHJt/EDM-package-chris.jpg"/>


0 0;text-align: justify;font-family: Arial;font-size: 14px">
nt-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px">
<=

/p>


e: 13px;margin-left: 7px;border: none" cellspacing=3D"0" border=3D"1"><=

tr>

ndowtext" valign=3D"center" width=3D"553">


: left;font-family: Arial;font-size: 14px">
5px">Why choose us


=3D"width: 554px;padding: 0 7px;border-left-width: 1px;border-left-color: wind=

owtext;border-right-width: 1px;border-right-color: windowtext;border-top: none=

;border-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"center" w=

idth=3D"553">


an style=3D"font-size: 15px">Over 30 years of production experience

=


ont-size: 15px">ISO Certified


Arial;font-size: 14px">Fastest delivery time:=

5-7 days


ial;font-size: 14px">OEM Packaging is availabl=

e


0;text-align: justify;font-family: Arial;font-size: 14px;text-indent: 0">

>


e: 14px;text-indent: 0">
chris.jpg"/>


al;font-size: 14px;text-indent: 0">We are comm=

itted to delivering true one-stop supply services and tailored systematic solu=

tions for your business.If you are inte=

rest
px">ed in our products, please reach us directly at +86 15522516763 or simply =

reply by E-mail.


family: Arial;font-size: 14px;text-indent: 0">=

 


; text-indent: 0px;">=

Best Regards


: 14px; text-indent: 0px;">
erif">Chris Liu


ize: 14px; text-indent: 0px;">
s-serif">Tianjin Eclat Co., Ltd


: justify;font-family: Arial;font-size: 14px;text-indent: 0">
nt-family:arial, helvetica, sans-serif">



"https://dm-cn.aliyuncs.com/trace/v1/report?bid=3D2679592&env=3D60000035727485=

1667&mac=3D512257&mf=3Dvip%40vip.rymat.ltd&msgid=3D3b2a48a1-8fa5-4078-927c-e61=

8067d3c51%40alibaba.com&sac=3D0&tag=3Dchemicalcanada2&tid=3D2679592&to=3Ddocto=

r%40nl2k.ab.ca&tpl=3D&ts=3D1791535896&type=3D1&url=3D&v=3D1.0&sign=3Db3d80ddac=

68ee22fc2339fe1552d2aab&urlts=3D1791535964" alt=3D"" style=3D"display: none; w=

idth: 1px; height: 1px;" />

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Oct 2026 08:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFBJM-00000000Epx-1Akz

for dave@doctor.nl2k.ab.ca;

Fri, 09 Oct 2026 08:11:00 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Oct 2026 08:11:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:50472)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xF6IL-00000000EI5-1jIx

for doctor@nk.ca;

Fri, 09 Oct 2026 02:49:46 -0600

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-53380b67cfdso137440361cf.1

for ; Fri, 09 Oct 2026 01:48:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=u2t-ac-th.20251104.gappssmtp.com; s=20251104; t=1791535708; x=1792140508; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=I4sAM+MHur6+rfutMZmywUKxBFjQT8e1wKqa2IQxUBU=;

b=Ia5sczbgxWXnsI3S0+KisF0C1SJA8T9BOrOtBqVsJag5doNxYE4Vz7iX91uZ3Z8g1G

rXAxctKh9bO/O+6fQrEax//BbaIJbP4eUuRovaToWjF5D8aa3ewra+oCUjCK5UxoQjAS

SV5+3jOk7Y2zWFdIFEw8v5cTn9YBYIKFlRVm1ckAaDytKs2Ye7OIRybeomW6HiRpkOzK

9cwBUwpmaJuF75Y42ul5qTUNUgyHvTaf2Ft88rNEmPlbAqjPdDcAKO8biszxQjIn+oWK

NnwzAwuzGgUEMCplXUvsOrqdWiGdCVlfBbCl5ODU8EQCPTU/+SV+xfQnBmZIUo9YfDLT

RCzQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791535708; x=1792140508;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=I4sAM+MHur6+rfutMZmywUKxBFjQT8e1wKqa2IQxUBU=;

b=pXqg2es63SEc1PaKz+DuEKouZXrwgjYpAQbcOeOHlwzd9PdSK3w1GzKQR4th3S9XkG

p80tdaz7NV8pmiRvH6OY0O4o1k7LZLS9QYud0tGykzKRqmCeaZKRSJEmwOoFFBbSgyJM

jU0zGm6HL6j2JLUzNbqfP2Ild6veLybo+dqh/tveVdDx9aGZIDVBj7FXIfz+gqjYgPoN

jLmoXy1go+G/nxnq8BWG/uLhd2EEE6Y/orZKjD8I8A/jv5pwHG9eqSBpyrVZMBErcTkh

lugX0HR6TFX17CRvIl6Ga60IB/ifkhF2vkBhMTA0r0glRjZdgil9PpB7nZuaq4OvUoYy

i0BQ==

X-Gm-Message-State: AFuF++k53KD8nyjt+NYJMXKzrO9G1HGupBH2sjB1rR2K6x88pzkPzB1J

iQyeEuUBy0U7nltlIJ4mslkUwoF9KQj2EX+Wp9VFPur2AD4UbZHMIBmUlvs8wmGfDkxqNSxLmYA

12agFYiyj1PDXwvIz+XrMP0qv

MIME-Version: 1.0

X-Received: by 2002:a05:622a:4c89:b0:535:70b3:3527 with SMTP id

d75a77b69052e-5359fe07959mr15323671cf.62.1791535708490; Fri, 09 Oct 2026

01:48:28 -0700 (PDT)

Message-ID:

Date: Fri, 09 Oct 2026 08:48:28 +0000

Subject: Schilderwerk voor een vast bedrag per maand - zo werkt het

From: VerfZeker Woningcheck

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000081fe14065d646931"

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: WNEiVxalgDtoAuZwUTzIwsnikboTUUprjwfnJYuxCrSeUWNgoGAKlJVpVxndNAZYhkFLneUCPFpXbOrhfDPeToAPubZZUDUmNLuaywMRdmJjIgHdCDT

ChaCOmBAgmSiuMeqKpGvcMufAtwJjkqjjlt VPfRWYguaeyrqmUnrRKvvBcciflNtNAtOZdwHWEekNOpdTGsCZrterrpXbUV

WoCplhBQFUVCuInQSJKuIjLYoifaWIejnkxGQgnTWMZXTLjgcKFXHQPJhIAyGQGBTecsMytakzRNlUk





Content analysis details: (6.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

[209.85.160.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

[209.85.160.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.198 listed in dnsbl.ahbl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.198 listed in bl.score.senderscore.com]

0.1 TW_EG BODY: Odd Letter Triples with EG

0.6 MEGALONGWORD BODY: Uses really overlong words

0.1 TW_OC BODY: Odd Letter Triples with OC

0.1 TW_GJ BODY: Odd Letter Triples with GJ

0.1 TW_XX BODY: Odd Letter Triples with XX

0.3 LONGWORD BODY: Uses overlong words

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.198 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.198 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 HTML_SINGLET_MANY Many single-letter HTML format blocks

Subject: {SPAM?} Schilderwerk voor een vast bedrag per maand - zo werkt het



--00000000000081fe14065d646931

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



V05FaVZ4YWxnRHRvQXVad1VUekl3c25pa2JvVFVVcHJqd2ZuSll1eENyU2VVV05nb0dBS2xKVnBW

eG5kTkFaWWhrRkxuZVVDUEZwWGJPcmhmRFBlVG9BUHViWlpVRFVtTkx1YXl3TVJkbUpqSWdIZENE

VCAgDQpDaGFDT21CQWdtU2l1TWVxS3BHdmNNdWZBdHdKamtxampsdA0KDQoNCg0KDQoNClZQZlJX

WWd1YWV5cnFtVW5yUkt2dkJjY2lmbE50TkF0T1pkd0hXRWVrTk9wZFRHc0NacnRlcnJwWGJVViAg

DQpXb0NwbGhCUUZVVkN1SW5RU0pLdUlqTFlvaWZhV0llam5reEdRZ25UV01aWFRMamdjS0ZYSFFQ

SmhJQXlHUUdCVGVjc015dGFrelJObFVrDQoNCg0KDQoNCg0KTkN1alFBQ3hpZW9Ucm5xQm51UElZ

dHREQU5UbGJUd2N6anJubGlGalIgIA0KY29zUk5scXpjQUhIT25XY0V2TERWZk1jZWVDbmlVcnpp

bnB1WnF0b3QNCg0KU2JUVEp3RHBwV2JjQXNHWFZnd3lXaFZkcUpqUGlsaUljVXRrcnVXQ2RlSUlr

ZE1zck1FWWxUa2xZakxFd1BpV0ZHdk1lU1NuS1haYmtycnpzblpjRFpja3FiWFJRUE9yICANCnZv

Y2pUb0tQb3JFTU12a0tsaSAgDQplZUtVT01EUlVobiB2UlZGeWpjZG9hc1JYcXlBU0xZT1h0ICAN

CmJ6b21NTkZzUVdzZWt4bU5lcGFUeUdkVU1LcE1yeGJuT3dNbnd5WXphZ1RhaWRISyBwZVlNeHhx

VHFyICANCm1abUtUdGFhb3Z5dHVJYkFuZFNhZXVaUkF0VG5lDQoNCk5JaXF5bm9vVUFKU3ZpdFN1

aENWSyBtZXJ3d3dvZXJ3bXVRa2tRbG5rIGVhVXN6d2hNWEdEY3dlblFwR1VnZlpuT2IgIA0Kb3Vr

QWdsR250aHpNT1BnRnhUdmVvcmF1cWVudHhwbkNyQWxNS0psa2lEQnVtd2FOR1FXSWxQY2hBTnpq

bVF6QXJpdGVOTG9kTVNtZWMgIA0Kc2JuUUF0R3ZKWWx0c2NoS3hnUEFoTlFHbWlKaWxLUXlsbGRa

anBFUUdDVmVyRUhzTHJIc3hveXFnSlZWb1N2b3lBWWpLTm95UWZmSkpHUHdlckthQm5GTGhmQ3Rh

ZGxWY05hc3Z4bWUuICANClZVeEltTG9vbURwZlNOcnNBY2N3cll6VHBiaHVMS2VseEVWR21SWWJ1

d3FnckpQSnltYWJ0QWhoUHJlbVh2YlBiayAgDQprb1RicG5lc3RRc1FqWWVlZmF6Qk1KbiwgIA0K

cEp3ZHFoQXdXTXJnUUpmalpZbnJKVm9mQU5MeXZmQmZlc3BleEZSc3NRTFJCY3ZlRVFpUUZSdnpm

d2FPRW9vbmFZeExEdGVZREV5TlZGVXdlbHVRWWhQVkdndk0gIA0KcmVwbFdXdktac3V5bnpGYllE

S3BlbHRpb2tRTk1BVWhpYWF0WnZSZXQuDQoNCg0KDQoNCg0KSE5PeFVXTkhjaGZyb2VkTFd1emEg

aGVTcWpEb3V1Y1lSVHRaRVZoZCAgDQp3ZWpCbnNwS1ZDdWNFcnhiT1ZHY0ZrelpkZ2tvRWh1RHB6

bEF0TERXSlBMUnNZV0ENCg0KDQoNCjEgRG5Zb2pWUW5UdGlTb09QdnRSb0JHWUxCZWNmamthY3og

ZGVoWElYaGEgZ3JjamJYdGF0Z0FCVExzc0ZBaXN1SWdrRUQgIA0Kd2lMY0FvWWVJVm5vbndLaUF1

aW5pa1pWck9nY1VvSWF3dUFocXp1YkNpWXNDdGVodW93YkFjY3plZUJ4eXd2TkZJRWsNCg0KDQoN

CjIgT25vUlR3VXR4U0JOSEZOZkh2YVJtcHhOUW5IQmFZVGZhdGNkQmdnIGVhR2JpZHZLeUVyQUll

bnVZdkFWaCAgDQpwYUhNclJMUnRlcnN0eGNPc294aEhwSHpxdEZ6UW9qWXJoREZsc1JmT25sdWRE

aWpvaWFzVUxERG1VSWprRXREcVlGUVUgIA0KcFFMTmJmbGFjelZiVWJuDQoNCg0KDQozIEJUbmln

YWtRWWpPT0xldEhWa1dpdWFCUFlNb2FURUJhbkR1T2FsY1Jud3FYaiBlTmhISWRRTE9nUUdrZW5K

aWFsQ0YgIA0KdmFBdVFobGFzWFpJV0dka3J0dFJjaWZ4Wll3ICANCm1hRmlpQnZnbGRjRVFiYVBS

SHBNS0d0RW5ZS2ttVnNaUGRkQlJrRlhiZUd6QmN3b25kTHhIa09GeHRyc0RYYnhvaXJhZ2pmVlBr

V1Bxem1vcw0KDQoNCg0KDQoNCuKckyBWZktNTHZueUhha0ptWXpHRFBJamtGVmtiZlZzTVhsdXJu

ZXhjbHVGbUNuZFNRaEVpTEZpZ2NUY21NSHl4S1hMZSAgDQpzUmNUWXNjaE5USU9zaGlVSm5ERnda

d0ZFU2xzcGNkVXZUYVlkZUtmR0JOWWh1UmZyVnVxcEd0ZWtzY0FJV2tNcyDinJMgIA0KMVpjTXhH

VERQcGpDMCBqdE1KSE5hYUVlWnVVYXRQRVpociAgDQpnSVJvQUVObnFpdU1hU1dDUXpFamFJVHJh

RmtwWUlqek9Hd25aQWVQQ3d0aWZzeHVCZSDinJMgIA0KR3dVc3JhWGlBY0VlZXVFdmdwRWZJeWZu

ICANCnZGRGxRVGtlS3hJVWJtaHJlcHNXcnJRdGJhSklhSGFzUXlTcE9uaWlvaFJzaUl0WGl5akFL

dnhuZ2pFamh1Z1BNZW5XYWdRaElOaUENCg0KDQoNCg0KDQpFZHF2c3BqYmVnUkRpZUdYZ2J2a1pZ

UnZubWhwakRHYWxpY0tISUV5R01pZ0tySVpuWA0KDQrigqwgNHpiQ3dJQnJIYUN0dS4wYWtBQ2lP

VXVwWncwMHpodlFCTE5XeSAtIDcuMHlRWnBFbXZGMDBJYlhKeQ0KDQoNCg0KVnhpR2VxbWVNVXJu

QVBzaXVMclFDZmREQmR5cHZwZlpVQWlqeWtneHpla3V1cHVXYWVqZWdOcER0bUNEaG5zaXINCg0K

VkFER3NOYW5BWmhlRW5RY0hvU2FmS0xCR3RjIOKCrCA4OUxKTm5Dc3RqWkdQSS9tbmJGanBIeWZk

DQoNCg0KDQoNCg0KU3RZalZ4eEpoRHBPbmphckR4T1poQ09CemR0IHVQWVNVVG9jdyAgDQpnVlpZ

TlR6cm11SE91bm1nTmFoQWJ0bERDbGh0WnRpYmhyRmpERHNrWXBzb1FNWWhmY1AgIA0Kd29pV2Jp

Y0l5WmtCc1JuaUJxRmtLbmdVWGx6bWNpUHpOaWhad3BraGViZm9XeGNja2RyY1RkYk9XamF5Sw0K

DQoNCg0KIkVpaE1rUFdHU1hDV21uZEt3a3hUZ215QmNlZVR2Z3RVbGlrbENMZG5vRGprY2lHbVR3

WHFqaCAgDQpkU3hIWmFKVGlzZ3Z1aW90SmVsbFhPeWhNWGR4emNjcXJ5ZXVXanB1RXpFUmxMQ0d4

UWdNaWppVEN0bWtzY0t6SG5oZVV4WlhnYW16U1dpZGpycXdLQVMgIA0Kb3ZTWklybnVZckhhZUpM

a1J5cklVVHhFdCBtaVNIQWZVZWdqbml0b3B6ICANCnNja2RoRVhicHhoaVpJR25KQ2xUZVR6alNk

ZllCWUt1ZXJkbHdZYm9OeG5ldWFrR2tscVN3S0ROb0txWEJBTkVucHN0ZGZoaEZ0WGxxZVFmalhi

TVVmRXduVm5FcFNlWnhJTGtFay4iDQoNCi0gSGFFY21XbVhxTmhQRG5za3NtenVqTEdHYSBNLiwg

IA0KUnVNakhwY2JmVXhacm90UnRJWUtiTXRscU50ZVJ4U2hGclhiZ0ZZeUNnR2RFZlBuSXNKWnJP

QWFvcExheUxMZ3NtDQoNCg0KDQoNCg0KRGlOSGhBTk10UHNHQ2IgYnhCZGJpQmFlYmVTbndIRVRn

aVlBcnN5UGxoTWpBZlBTTWlkbW9XZHNjQ1NySWtwTWVGTXNoZlhDRFp0ICANCmlDcVNIcnpLZ1lz

YWVYUk4gdnRlb01SZ2VyQkhWZGJxektHbHBGb25mSFhPZ05mZGVtbGlmQ1BkZ24gIA0KbkVNbUNM

QldMVlphbXhVRG5GTHptZHVDZW56a1hUd3MgIA0KVnBLa0pqeWRUQklqaWVyZVRwVUJCUGZuVnJY

aE9FQmNaUnRORkNCQUZmZWtYYW9lZGZ1TmVEbGtlYXJpQVJVRHJmR2JKUSAgDQpXb3B1T1ZLbHVa

bEpqcm5Vb3lZeE5RaWZEbVNuaFhuVHRubmdEbmZJUkl5dmJ0SGNobk5xVnRmT3llY01WckNIbmxr

a0hyY0NkS0cuDQpVaU91VnVCbmRrdHNYWEdjVUdDWEpSdWNoeHl6SmhyQU16Tkl2b294Z2lQS0lZ

QlVOSWppUWFZTXZlTWNpZmxvSWZkSmFuamFRaUh4DQoNCg0KDQoNCg==

--00000000000081fe14065d646931

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable












0">

VerfZeker Woningcheck






l,Helvetica,sans-serif;">


=3D"0" style=3D"background-color:#f2f4f7;">








"0" cellspacing=3D"0" style=3D"background-color:#ffffff;border-radius:8px;o=

verflow:hidden;">








































er;">


=3D"0">




x;text-transform:uppercase;">WNEiV=

xalgDtoAuZwUTzIwsni
=3D"font-size:.0px;color:#pgDoY">kboTUUprjwfn
;color:#AVQe">JYuxCrSeUWNgoGA=

KlJVpVxndNAZYhkFLne
le=3D"font-size:.0px;color:#FzxYI">UCPFpXbOrh
;color:#yPFRa">fDPeToAPubZZUDU=

mNLuaywMRd
size:.0px;color:#Atzb">mJjIgHdCDT Ch
ZBb">aCOmBAgmSiuMeqKpGvc
style=3D"font-size:.0px;color:#KoWy">MufAtwJjk
px;color:#MASX">qjjlt





=3D"0">





V
nt-size:.0px;color:#oTDqWI">PfRWYguae
wHViX">yrqmUnrRKvvBccif
style=3D"font-size:.0px;color:#cjqKqP">lNtNAtOZ
px;color:#OubHuL">dwHWEekNOpdT=

GsCZrterrpXbUV		 Wo
-size:.0px;color:#ZsTlA">CplhBQFUVCuIn
#VQob">QSJKuIjLYoifaWIejnkxGQg<=

/u>nTWMZXTLjgc
-size:.0px;color:#XjZSJP">KFXHQPJh
MB">IAyGQGBTecsMytakzRNlU=

k





=3D"0">








m:uppercase;letter-spacing:1.5px;padding-bottom:12px;">N
ze:.0px;color:#Etui">CujQACxie=

oTrnqBnuPIYttDANTlbTw
tyle=3D"font-size:.0px;color:#CTXodN">czjrnliFjR co
e:.0px;color:#LLAuVC">sRNlqzcAHHOn
Qk">WcEvLDVfMceeCniUrzinp=

uZqtot

#ffffff;line-height:1.3;padding-bottom:12px;">S
olor:#wVyuLO">bTTJwDppWbcAsGXV=

gwyWhVdqJjPil
font-size:.0px;color:#ovtbCp">iIcUtkruWCde
lor:#FQmsn">IIkdMsrMEYlTklYjLE=

wPiWFGvMe
-size:.0px;color:#cJYVT">SSnKXZbkrr
eJg">zsnZcDZckqbXRQPOr vo<=

u style=3D"font-size:.0px;color:#GSRp">cjToKPor
px;color:#wBBjz">EMMvkKli eeK=

UOMDRUhn vRVFyjcdoas
e=3D"font-size:.0px;color:#oHkIs">RXqyASLYOXt b
px;color:#lUxbMK">zomMNFsQWse=

kxmNepaTyGdUMKpMr
=3D"font-size:.0px;color:#eMatl">xbnOwMnwyYzag
x;color:#OlMz">TaidHK peYMxxq=

Tqr mZmKTtaa
nt-size:.0px;color:#vqCGl">ovytuIbAnd
PaUx">SaeuZRAtTne
N
=3D"font-size:.0px;color:#yxOkqY">Iiqynoo
or:#bJPn">UAJSvitSuhCVK me<=

u style=3D"font-size:.0px;color:#KNjoH">rwwwoer
px;color:#iCrd">wmuQkkQlnk eaUs=

zwhMXGDcwenQpGUgfZnOb o
tyle=3D"font-size:.0px;color:#xBIU">ukAglGn
olor:#rNQExD">thzMOPgFxTveorau=

qentxpnCrAlMKJlkiDBumwa
tyle=3D"font-size:.0px;color:#CbTiRT">NGQWIlPch
px;color:#FPJSo">ANzjmQzArite=

NLodMSmec sbnQAtGvJYltsch=

KxgPAhNQGmiJil
size:.0px;color:#ztoJzt">KQylld
">ZjpEQGCVerEHsLrHs
e=3D"font-size:.0px;color:#PNQPpJ">xoyqgJVVoSvo
px;color:#GtWk">yAYjKNoyQffJJ=

GPwerKaBnFLhfCt
font-size:.0px;color:#QdraDB">adlVcNasvxme. V
;color:#PnkJT">UxImLoomDpfSN<=

/u>rsAccwrYzTp
-size:.0px;color:#PhgG">bhuLKel=

xEVGmRYbuwqgrJPJyma
=3D"font-size:.0px;color:#Eqycah">btAhhPre
lor:#fRwqdp">mXvbPbk koTbpne
>stQsQjYee
ze:.0px;color:#CSNzKJ">fazBMJn, p
fV">JwdqhAwWMrgQJfjZYnrJVof=

ANLyvfBfes
ze:.0px;color:#oZGCiD">pexFRss=

QLRBcveEQiQFRvzfwaOEoon
style=3D"font-size:.0px;color:#ISMt">aYxLDte
color:#ptrYo">YDEyNVFUweluQYhP=

VGgvM replWWvKZsu
=3D"font-size:.0px;color:#XViC">ynzFbYDKpelt
color:#BvfGv">iokQNMAUhiaatZvR=

et.





=3D"0">














m:uppercase;letter-spacing:1px;padding-bottom:16px;">H
:.0px;color:#VjDOLw">NOxUWNHchfroe
RZ">dLWuza heSqjDouucYRTt
style=3D"font-size:.0px;color:#hqEoiz">ZEVhd we
0px;color:#gndSos">jBnspKVCucEr
>xbOVGcFkzZdgkoEhuDpzlAt<=

u style=3D"font-size:.0px;color:#KpOe">LDWJPLRsYWA

align:top;">








font-size:14px;font-weight:800;text-align:center;line-height:32px;border-ra=

dius:50%;">1		 =

DnYojVQnTtiSo
size:.0px;color:#YrZa">OPvtRoBGYLBe
mh">cfjkacz dehXIXha gr
style=3D"font-size:.0px;color:#jRIRA">cjbXtat
;color:#KLZEv">gABTLssFAisuIgkE=

D wiLcAoYeIVnon
"font-size:.0px;color:#CDzu">wKiAuin
aCyg">ikZVrOgcUoIawuAh
yle=3D"font-size:.0px;color:#jAFlr">qzubCiYsCte
px;color:#vyiA">huowbAcczeeBxyw=

vNFIEk



align:top;">








font-size:14px;font-weight:800;text-align:center;line-height:32px;border-ra=

dius:50%;">2		 =

OnoRTwUt
0px;color:#yCUcq">xSBNHFNfHvaR=

mpxNQnHBaYTfatcdBgg e
le=3D"font-size:.0px;color:#ilzU">aGbidvKyErAIen
0px;color:#sQGY">uYvAVh paHMr=

RLRterstxcOso
ont-size:.0px;color:#BDmc">xhHpHzqtFzQo
:#ciuAT">jYrhDFlsRfOnludDijo<=

/u>iasULDDmUIjk
t-size:.0px;color:#DwkCpo">EtDqYFQU p
Arkq">QLNbflaczVbUbn











font-size:14px;font-weight:800;text-align:center;line-height:32px;border-ra=

dius:50%;">3		 =

BTnigakQYjOOLet
nt-size:.0px;color:#clvVr">HVkWiuaBPYMoa
r:#Nqypa">TEBanDuOalcRnwqXj
> eNhHIdQLOgQGken
font-size:.0px;color:#MjzVd">JialCF va
#djDtHP">AuQhlasXZIWGdkrt
style=3D"font-size:.0px;color:#YuBRWz">tRcifxZYw ma
ze:.0px;color:#xNtBgQ">FiiBvgldcEQba
ngv">PRHpMKGtEnYKkmVsZPd
style=3D"font-size:.0px;color:#fFIaS">dBRkFXbe
px;color:#nZsy">GzBcwondLxHkO=

FxtrsDXbxoirag
ont-size:.0px;color:#wulGp">jfVPkWPqzmos







=3D"0" style=3D"background-color:#f8f9fb;border-radius:6px;padding:16px;">












px;font-size:12px;color:#555;">=E2=9C=93 V
#RHIXk">fKMLvnyHakJmYzGDPIj=

kFVkbfVsMXlu
ze:.0px;color:#jzaHE">rnexcluFmCnd
v">SQhEiLFigcTcmMHyxKXLe s=

RcTYsc
0px;color:#izRc">hNTIOshiUJnD=

FwZwFESlspcdUvTaYde
le=3D"font-size:.0px;color:#LfCMY">KfGBNYhuRfr
x;color:#Xqlp">VuqpGtekscAIWkMs=
px;font-size:12px;color:#555;">=E2=9C=93 1
#JRSHX">ZcMxGTDPpjC0 jtMJHN
>aaEeZuUatPEZhr g
font-size:.0px;color:#LLefM">IRoAENnqiuMa
or:#vZNm">SWCQzEjaITraFkpYIjzO=

GwnZAePCwti
nt-size:.0px;color:#eEBdk">fsxuBe
px;font-size:12px;color:#555;">=E2=9C=93 G
#mgmz">wUsraXiAcEeeuEvgpEfIyf=

n vFDlQTke
t-size:.0px;color:#SVebUk">KxIUbmhr
yZ">epsWrrQtbaJIaHas
le=3D"font-size:.0px;color:#LotWy">QySpOniiohRsi
0px;color:#lpNVG">ItXiyjAKvxng=

jEjhugPMenWagQhINiA





=3D"0" style=3D"border:2px solid #ff6600;border-radius:8px;overflow:hidden;=

">










dding:20px;text-align:center;vertical-align:middle;">


00%">


r>




spacing:1px;">EdqvspjbegRDie<=

u style=3D"font-size:.0px;color:#LKdGuj">GXgbvkZYRvnm
ize:.0px;color:#DgcF">hpjDGal=

icKHIEyGMigKrIZnX

ding-top:4px;">=E2=82=AC 4zbCwIBrH=

aCtu.0akACiOUupZw00
e=3D"font-size:.0px;color:#pVwCvj">zhvQBLNWy - 7.0
:.0px;color:#tEYKZ">yQZpEmvF00=

IbXJy
dding:20px;text-align:center;vertical-align:middle;">


00%">






er-spacing:1px;">VxiGeqme
le=3D"font-size:.0px;color:#GNwb">MUrnAPsiuLr
;color:#sWvqNM">QCfdDBdypvpfZU=

AijykgxzekuupuWaeje
=3D"font-size:.0px;color:#PJOyc">gNpDtmCDhnsir

px;">VADGsNa
size:.0px;color:#DwcyIl">nAZheEn
">QcHoSafKLBGtc =E2=82=AC =

89LJNnCstjZGPI/mn
ont-size:.0px;color:#wFEcLj">bFjpHyfd





y:inline-block;background-color:#ff6600;color:#ffffff;font-size:16px;font-w=

eight:800;text-decoration:none;padding:14px 40px;border-radius:6px;text-tra=

nsform:uppercase;letter-spacing:0.5px;">St
#sqZld">YjVxxJhDpOnjarDxOZhCOBz=

dt uPYSUTocw g
ont-size:.0px;color:#RBOqPZ">VZYNTzr
VRLM">muHOunmgNahAbtlDClhtZ=

tibhrFjDDskYps
t-size:.0px;color:#JrXoy">oQMYhfcP wo
ziMVy">iWbicIyZkBsRniBqFkK=

ngUXlzmc
:.0px;color:#AORJ">iPzNihZwpkhe
>bfoWxcckdrcTdbOWjayK




=3D"0" style=3D"border-left:3px solid #ff6600;padding-left:16px;">




tr>


5;">"EihMkPWGSXCWmnd
=3D"font-size:.0px;color:#qyMy">KwkxTgmyBce
olor:#ZhiYt">eTvgtUliklCLdnoD<=

/u>jkciGmTwXqjh d
ont-size:.0px;color:#uzUEdo">SxHZaJTisgvui
lor:#LZab">otJellXOyhMXdxzccqry=

euWjpuEzERl
-size:.0px;color:#aJml">LCGxQgMij
zN">iTCtmkscKzHnhe
=3D"font-size:.0px;color:#EqxXs">UxZXgamzSWid
;color:#Ahazf">jrqwKAS ovSZIrnu=

YrHaeJLkRyr
-size:.0px;color:#xSgd">IUTxEt mi
">SHAfUegjnitopz sc
le=3D"font-size:.0px;color:#RsMZ">kdhEXbpxhi
color:#JvpHuk">ZIGnJClTeTzjS
u>dfYBYKuer
ze:.0px;color:#OcpNHg">dlwYboNxneuak
FDBo">GklqSwKDNoKqXBANEnpst=

dfhhFtXlqe
:.0px;color:#wfNF">QfjXbMUfEwnVn
J">EpSeZxILkEk."
- Ha
=3D"font-size:.0px;color:#Wgwx">EcmWmXqNhPDns
;color:#NLLs">ksmzujLGGa M., R=

uMjHpcbfUxZrotRtIYKbMtlqNt=

eRxShFr
px;color:#OhHDT">XbgFYyCgGdEf=

PnIsJZrOAaopLayLLgsm



er;">


=3D"0">





DiNHhANMt
.0px;color:#Omfpj">PsGCb bxBdbi=

BaebeSnwHETgiYAr
=3D"font-size:.0px;color:#rSEdzA">syPlhMjAfPSMi
px;color:#LaCFDo">dmoWdscCSrI=

kpMeFMshfXCDZt i
"font-size:.0px;color:#EDbw">CqSHrzKgYs
:#IfBcQ">aeXRN vteoMRger
style=3D"font-size:.0px;color:#iQnC">BHVdbqz
;color:#IxwoM">KGlpFonfHXOgNf=

demlifCPdgn n
font-size:.0px;color:#PgVpH">EMmCLBWLVZam
or:#HIwnbb">xUDnFLzmduCenzkXT=

ws VpKkJjydTBIjier
=3D"font-size:.0px;color:#dOicm">eTpUBBPf
or:#wczJqZ">nVrXhOEBcZRtNFCBA=

FfekXaoedfuNeDlke
=3D"font-size:.0px;color:#bcfnO">ariARUDr
or:#Bxbx">fGbJQ WopuOVKluZlJj=

rnUoyYxNQi
t-size:.0px;color:#Eepv">fDmSnhXnTtnng
#dNEmq">DnfIRIyvbtHchnNqVtfOy<=

/u>ecMVrCHnlk
size:.0px;color:#hVrYow">kHrcCdKG.



#ff6600;text-decoration:underline;">Ui
A">OuVuBndktsXXGcUGCXJRuch<=

u style=3D"font-size:.0px;color:#tsPsuv">xyzJhr
px;color:#UMgj">AMzNIvooxgiPKI=

YBUNIjiQaYMve
ont-size:.0px;color:#JXcDqh">McifloIfdJan
or:#RWmbLZ">jaQiHx












ight=3D"1" alt=3D"">

--00000000000081fe14065d646931--

Nigerian spam from Microsoft Outloook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Oct 2026 08:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xFBJF-00000000EpQ-2ma8

for dave@doctor.nl2k.ab.ca;

Fri, 09 Oct 2026 08:10:53 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Oct 2026 08:10:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-italynorthazolkn19010021.outbound.protection.outlook.com ([52.103.57.21]:57650 helo=MI1P293CU004.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xF5w5-00000000CWc-3cXr

for root@nk.ca;

Fri, 09 Oct 2026 02:26:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=b9pOW3nlGOWkoNKmSI6xdH+GXxMR/knFRxUdSNtcx7tHJ3fBNkzkUAPHzIcQijP4qMm1odocgqn7DrQniC9/7lKowLPvI4AWqL5SXlhyKrkdRwNJ4UTB5KVUy0VC9yuWseQNRdibWLsQg5gap60G4sS+Qb8KkZ2X0Z+TJcIHiLF6XLXzs2ztIoDyWs0X4alS2vAIq0RzMrIQ9sQIA6UltlIY86Gl3CG9750gg5w8NOAw4FfKpjk+N4U6+DhRz7p5XLTkAiI2Ra8HfSTCxPiPp57rWGTaHoHsnhnbAffw0oI8SCOwpV7BZrnbNs5gWKEw9n5buypNgyO5h47Gl+jpfA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=E7tDg6pepDTOLE8H6BrECZ2i9xmpUIREucsKJbSMu3Y=;

b=c32lesCa8Yx5FjvLpqwA5vrvCCqDDnNTkLhIUsh3WBV8zKjjcjuX6212WVvjBnQYTYlKtDZqWgFapoTEaMkyizP4fOVzvuIkgglXRswyUBuxuDzFrhLrWSat0wLNifGkogTXEYHeA1DTvKVE5tYnDtbbRd/iOqrAuDyPFUywjZlWv5PJEcmRpi4TqrcDYsFUORTzoAxgRINBh/LYkrcSdwTb2IVcKLXQfMmy71y0kQ8skxTyuRQr+oLzQTukY3h12slvDS7i25H2Ggmzev5SXJ0FHp2DAWNx9aC6X1QUc8La96B24TSb4amEz4E443W14gYQp9FvpRn678cjf2UYiQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=E7tDg6pepDTOLE8H6BrECZ2i9xmpUIREucsKJbSMu3Y=;

b=Uq+yb9YqkapINR38vA9bdSUSxwlEC5dRu616y1664QSU8IH7rIZSbvOzyMJXXECqVPbYSqmrAQ01aM9mfILIkLYuByNgSX27y7+FXu4ujYW2GjTn55Gk5VsCZACNgYJXbGVQjPkKuexBAy8UPTcojynMCZuZpa97EibmQ03RtqLiLXAO3KdnWQEBpTwco1ce1UtdfSFKjBKle3YKx5jTSWPzRY/Ma93koU6JExiQOYF50Um9bYve4CoY0xXfKobEbdP6u2cPmcnHPbNBdAX17pPFeeOY4Fn7JCo1HDVq9fPDmjGS8HdeFja7Hp5lUq5/8qy264x2/qaOA0jONIrjLg==

Received: from MI1P293MB0372.ITAP293.PROD.OUTLOOK.COM (2603:10a6:290:10::7) by

MITP293MB0668.ITAP293.PROD.OUTLOOK.COM (2603:10a6:290:a8::9) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.21.496.17; Fri, 9 Oct 2026 08:24:41 +0000

Received: from MI1P293MB0372.ITAP293.PROD.OUTLOOK.COM

([fe80::e3b3:942e:b8ca:f821]) by MI1P293MB0372.ITAP293.PROD.OUTLOOK.COM

([fe80::e3b3:942e:b8ca:f821%4]) with mapi id 15.21.0496.015; Fri, 9 Oct 2026

08:24:41 +0000

From: hgfcds xzsadc !!

Subject: =?Windows-1252?Q?__~=A0Your=A0ATM=A0Card.?=

Thread-Topic: =?Windows-1252?Q?__~=A0Your=A0ATM=A0Card.?=

Thread-Index:

AQHdNruzp6nh6BK9YEefIMqgAZ2yO7bjtVTHgAGtFAuAAYr1eoABlwLOgAGZD0eAAX/5kYADHtJMgAGY5ISAAZe0A4ABmmqngAGZzlE=

Date: Fri, 9 Oct 2026 08:24:41 +0000

Message-ID:



References:























In-Reply-To:



Accept-Language: en-US, en-ZA

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MI1P293MB0372:EE_|MITP293MB0668:EE_

x-ms-office365-filtering-correlation-id: 1ea1651c-54a2-452b-f85c-08df25dec3f8

x-microsoft-antispam:

BCL:0;ARA:14566002|51005399006|24121999003|15030799006|15080799012|22091999003|8060799015|8062599012|31061999003|19110799012|20110799003|12121999013|704163111799003|55001999006|24021099003|16051099003|2604032031799003|25010399006|18010799003|41001999006|102099032|26104999009|440099028|3412199025|40105399003|2607281247196008|261005200801699003|26121999007|11120399003|260806224601699006;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?NFndmJlRHu+h8frInP6++0an5A1ROugzWSEWLQ0xMkvon9+kJY1BfjNQ?=

=?Windows-1252?Q?f1rSCo0rcZfytAY95/LaFdOw3TEMXAshNRba7eCMD9ca7o/Ur6Y0R0RL?=

=?Windows-1252?Q?Cpj06I8LIdhtTUArgbXqYxloGPZmuucor47vdfS6+fOVsa9BpLdj2S3y?=

=?Windows-1252?Q?vFJUgfPjyxmKpWdcJRoZDuza4DvZfdKDt1gzsav2aj+3TFrZyw5quyCH?=

=?Windows-1252?Q?HiQmF68t0eXWBU6tRBRkl0+B3QrpXSMJGVKB8J6R6iTzLDoM48QE55pu?=

=?Windows-1252?Q?Mc14sS2Zsy25F1kP9K1EagmfBDZv2rshwJC3io+2KF6CbIlxPRTkSWVQ?=

=?Windows-1252?Q?f4R7qUaYXc7+RHclUuk6XmFW0Mz/R0u0BpJD/rpI8Qv6keCYJwkXc/Gt?=

=?Windows-1252?Q?r68J+013x5uAQwM3SEGERKL2gCuyaA9/U3O+7PKurmclvfnQgPGmtDSj?=

=?Windows-1252?Q?58+dyJUESFcw1fPzPU8xHDMIRN3E2ggqoHQUhq5IxdWs8Y01h81x80a5?=

=?Windows-1252?Q?oll7oZmwn7gGegb/LRblsSUwcNDpt1WbOJqRXSbmDLopXjRx76JD664c?=

=?Windows-1252?Q?y0lUvu7xeChq9lrq/gwgNNWBIYoC2VzmBreAQfvc76FDduYesSKA/h5t?=

=?Windows-1252?Q?RHbGycTEtRg+DgiWow+rBLbz13wtap++T2I18B7Z7pGJ+YsYyJFSJCCu?=

=?Windows-1252?Q?ndtxBe/ywQ+zLYciaDDZbXkjwJJ4HxIVCD61+jcbxO1gRt0TU5DSrMIm?=

=?Windows-1252?Q?FvmmXl34/lLLorxr5y0xM8/CP03NfN9YnL7LgHw+9twGNWd5V59gRlev?=

=?Windows-1252?Q?LYiK03DkMy4abuIOBY5+Pbp7TQezuaimr1RJIE9AAtZhyochURKsGst9?=

=?Windows-1252?Q?RAJWRPFpEoNfUqZCqRR9QVd73hXmoCK40ZczqPRNCOPhqckwNIol9umD?=

=?Windows-1252?Q?2Iers4oOi/qeHww4Cs7D3Chkf+8mLtNht4UqTgYNDawLI/zZu3BJZx8r?=

=?Windows-1252?Q?0gHdRhh9Y2UgR7JMIuiB1eru2cjvfGSuEwI54ooi5zuGj91mUnS77ms1?=

=?Windows-1252?Q?D6hbc6BXNeYtNx4wOcEPeC+E9ixyw1gPEplgI7LPkiHYJd4MwyL7Ljh9?=

=?Windows-1252?Q?vaJ1eo/lwqFgroTgfFJBOpuYGD4pHT7qZTZyZHVJwlqRLVtguTbncM0w?=

=?Windows-1252?Q?fZASTQklQ9a4zB3SwQTfDNVRjdJjDcxFaKFYAtd05krc4Kq9S+n9b3Ta?=

=?Windows-1252?Q?PSFnJUKCc2AELx6VIIdIbzP7uwBfdGe752lbEbz2TTT7KN1urytQjRFe?=

=?Windows-1252?Q?2uGIluChrHIuyTqQoujjsfXXDD/X6ATCzDzZjpXzdJVUzKPVH3hpupuD?=

=?Windows-1252?Q?qfDiwD60rMwbkhXDZTYcqxRcOja/jUP04Xj7pCsw5qZ1F46Rr5ZglzMO?=

=?Windows-1252?Q?89sKuG8nBiXgUC+t33MKzstomP/uAQzs8nPPWq81qX4k248Y6+igHy1j?=

=?Windows-1252?Q?8YgcAm55RObWg3ZthVU0RbvGgiSCof9IH82Ij1CWh+CjFzMx2yrUWpY8?=

=?Windows-1252?Q?mJysvLd3fLD9UBUM?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?cltYan65Vhk66BpJSfzbyyKzZaaoFBCSFbhjR+G+21H2zQKdr8xpC4I9?=

=?Windows-1252?Q?6j861aj+NWPUBuHXa+ceKPDNhuv75YXwQztiBIY+1ZO+57T8uMWBWTpV?=

=?Windows-1252?Q?+dZF81v79zUVPJ5UAGZoRIcGI0l5cDkCffMKigPJYKPfsY1dWZum7YxL?=

=?Windows-1252?Q?RxT8gujAcuAjTO0LYTdpi4RL1tJEdNEYxZd2xAl54gXpAf3lQUNX7FnT?=

=?Windows-1252?Q?QVfhSMzG43AxeBCctRgTcsiJYF8e+/aG71Jd+LEO6B1OeMv538p238VV?=

=?Windows-1252?Q?UHELj8JNiOEnp0/h+FJKK8ASfluO+tlyuBN+8WxAJYZbWBRouZyaSYAX?=

=?Windows-1252?Q?qJDOcfAGL9WkHQLZlCT+v9fGf2GzszJcKCqAS6B6SvIB5Mext47RZrV1?=

=?Windows-1252?Q?unFu9N8wgfsmHSTJ1Pb9dmHIR3z1tjBYvsW3sC9pHmptVrmaL7UF+4Ta?=

=?Windows-1252?Q?nfbCXd8hB01s22dp2UffG4m/ROnVb3iBguR3SpnpcHqSdQR+aHSjhIcd?=

=?Windows-1252?Q?mhlUJHIjUYggJ11881tym9FZNWFfGK2kH7MHwYeD2oGY80jv535JCkgz?=

=?Windows-1252?Q?qoTdptP+ltJfjZ57AxtnBubJTTEUCWkAnP/vMqauNfuCayK29z5yFmx+?=

=?Windows-1252?Q?R0KPTIq/AaTooCmn+z0vgcsAlKS/PyejGesgkI8FHcmGKtHacn5i/0H7?=

=?Windows-1252?Q?Uw/iSqRYs9fHQu5R0fsJhVvmLNxWlUr+nPBKVLuU8jiPbdzK5IXfk80A?=

=?Windows-1252?Q?n43hhjCdXDxpXvPcNPcJBj22Y+8sPx4zN17d/Gn2X6+xPpJrhGAkXQkZ?=

=?Windows-1252?Q?J5ahPwneHzTV/FwRMGHiDaJmPRR8Jd5JMB6FTtKENQUD+GCFRb+4oG3O?=

=?Windows-1252?Q?DLH7pfrCtyMVto9JXUBHwqkELwM4sdIv38vvhqsWerDZrALmaILqEhG1?=

=?Windows-1252?Q?YwEL1LKWH4EEfYujkG8e2jg/cztli764EXAVdVyMgbgT7i8EaILmQuuz?=

=?Windows-1252?Q?ncadjSYIPTYsqovVEQrRfJVsx42ynOxCC6+Vwk4WhAFD5hSk6vn+wSC1?=

=?Windows-1252?Q?sScae68Y8fnEgnqUXPzXaTBqoCW40NxSnpAT+MfqmrAD1XlWVE47r0ms?=

=?Windows-1252?Q?4spNZcsTe4MwXVh5hKOdFjsFsHrLye9Q3fF0YulfomFm+DVX9jLTSAQM?=

=?Windows-1252?Q?wdrl2B3T7rpNWUcT0wqF5Tfdn6KhwRM+nnVCkZmpfmF0c59D8lEUCXlt?=

=?Windows-1252?Q?7k/TGnlhls45CC8r9k2YIrOysOf/EJ98P+eSoPKUXyf9a2JnW62GX5OV?=

=?Windows-1252?Q?C6wXy/Qzjnc+0FeKmWNRILknUYjzgpPcX0xHh5JxBli6nnl5KkP6E5Mk?=

=?Windows-1252?Q?YgA7p6o3KoOqGb6GJ1o5OMlQsq7nnDfDDVjczMdEc5XNZV83NNmGjHv+?=

=?Windows-1252?Q?Jz3uFT1243w+HQ0rSWj8Y2ep69BXHZ2vwm6RDeaHhiU=3D?=

Content-Type: multipart/alternative;

boundary="_000_MI1P293MB037298667E93CC5F9362A7138E922MI1P293MB0372ITAP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MI1P293MB0372.ITAP293.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 1ea1651c-54a2-452b-f85c-08df25dec3f8

X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Oct 2026 08:24:41.0549

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MITP293MB0668

X-Spam_score: 16.2

X-Spam_score_int: 162

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear, Your ATM Visa Card. Ref. No. SNDCC:74524.



Content analysis details: (16.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:290:10:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[52.103.57.21 listed in will-spam-for-food.eu.org]

[52.103.57.21 listed in will-spam-for-food.eu.org]

[52.103.57.21 listed in will-spam-for-food.eu.org]

[52.103.57.21 listed in will-spam-for-food.eu.org]

[52.103.57.21 listed in will-spam-for-food.eu.org]

[52.103.57.21 listed in will-spam-for-food.eu.org]

[52.103.57.21 listed in will-spam-for-food.eu.org]

[52.103.57.21 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.57.21 listed in dnsbl.ahbl.org]

[52.103.57.21 listed in dnsbl.ahbl.org]

[52.103.57.21 listed in dnsbl.ahbl.org]

[52.103.57.21 listed in dnsbl.ahbl.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10a6:290:10:0:0:0:7 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.57.21 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.57.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.57.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.57.21 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[wcr00015(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[wcr00015(at)outlook.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.57.21 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.57.21 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.57.21 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLY From and body contain different freemails

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.0 MONEY_LOTTERY Lots of money from a lottery

Subject: {SPAM?} =?Windows-1252?Q?__~=A0Your=A0ATM=A0Card.?=



--_000_MI1P293MB037298667E93CC5F9362A7138E922MI1P293MB0372ITAP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable









Hello Dear,



Your ATM Visa Card.

Ref. No. SNDCC:74524.



I have been waiting for you since to contact me regarding your winning amou=

nt of $USD2,000,000.00 (Two Million United State Dollars) loaded in your AT=

M Visa Card which we discussed. We are duly interred switched. Therefore, y=

ou can make withdrawals in any location of ATM Machine Centre Cashpoint of =

your choice in any part of the world and the maximum you can withdraw a day=

is $USD4000.00. This money will be its equivalent in your country's local =

currency.



This money has been in an escrow account; hence I did not hear from you sin=

ce then. The South African Reserve Bank (SARB) has issued a directive rega=

rding the payment of money to third parties. This directive focuses on the =

issuing of ATM VISA CARD.



And then, I went and deposited the ATM VISA CARD with a Diplomatic Courier =

Company, in Johannesburg, South Africa as I travelled out of the country fo=

r a short course and I will not come back till end of first quarter of the =

year 2026. Kindly contact the Diplomatic Courier Security Company as soon a=

s possible to know when they will deliver your package to you because of th=

e expiring date.



Courier Name: Sky Net Diplomatic Courier Company Ltd.

Position: Delivery Department.

Contact Person: Mr. Martins Graham.

WhatsApp/Tel: +270803388010.

E-Mail: martinsgraham@deliveryman.com



The Skynet Express Courier Company will give you a =93tracking number=94 th=

at will enable you to track your parcel online till it gets to your destina=

tion. They have an advanced track and trace technology that lets you keep a=

n eye on your parcel every step of the way via the Internet. When you recei=

ve your ATM Card, the Pin Numbers will be given to you by the (Acting Manag=

er of HSBC Bank Limited).



Yours sincerely.

Dr. Georges Elhedery.

Finance and Accountant.

Acting Manager of HSBC Bank Limited, ...



--_000_MI1P293MB037298667E93CC5F9362A7138E922MI1P293MB0372ITAP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

 







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 











































_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hello Dear,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Your ATM Visa Card.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Ref. No. SNDCC:74524.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I have been waiting for you since to&nbs=

p;contact me regarding your winning amount of=

 $USD2,000,000.00 (Two Million United State D=

ollars) loaded in your ATM Visa Card whi=

ch we discussed. We are duly interred sw=

itched. Therefore, you can make withdrawals i=

n any location of ATM Machine Centre Cas=

hpoint of your choice in any part of&nbs=

p;the world and the maximum you can with=

draw a day is $USD4000.00. This money wi=

ll be its equivalent in your country's l=

ocal currency.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

This money has been in an escrow account=

; hence I did not hear from you sin=

ce then.  The South African Reserve Bank=

 (SARB) has issued a directive regarding =

;the payment of money to third parties. =

This directive focuses on the issuing of =

;ATM VISA CARD.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

And then, I went and deposited the ATM&n=

bsp;VISA CARD with a Diplomatic Courier Compa=

ny, in Johannesburg, South Africa as I t=

ravelled out of the country for a short&=

nbsp;course and I will not come back til=

l end of first quarter of the year =

2026. Kindly contact the Diplomatic Courier S=

ecurity Company as soon as possible to k=

now when they will deliver your package =

to you because of the expiring date.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Courier Name: Sky Net Diplomatic Courier Comp=

any Ltd.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Position: Delivery Department.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Contact Person: Mr. Martins Graham.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

WhatsApp/Tel: +270803388010.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

E-Mail: martinsgraham@deliveryman.com



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

The Skynet Express Courier Company will give&=

nbsp;you a =93tracking number=94 that will en=

able you to track your parcel online til=

l it gets to your destination. They have=

 an advanced track and trace technology =

that lets you keep an eye on your p=

arcel every step of the way via the =

;Internet. When you receive your ATM Card,&nb=

sp;the Pin Numbers will be given to you&=

nbsp;by the (Acting Manager of HSBC Bank =

;Limited).



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Yours sincerely.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Dr. Georges Elhedery.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Finance and Accountant.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Acting Manager of HSBC Bank Limited, ...
>







--_000_MI1P293MB037298667E93CC5F9362A7138E922MI1P293MB0372ITAP_--