nk.ca credential phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 14:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzKrg-000000007VK-2WN1

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 14:04:24 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 14:04:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.nigatom.gov.ng ([170.249.214.194]:60138)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzKoi-000000004Cq-3nn1

for root@nk.ca;

Thu, 18 Sep 2025 14:01:34 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=nigatom.gov.ng; s=default; h=Message-Id:Date:MIME-Version:Content-Type:To:

Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=WNFq/EJzELpZoUv3vWtm9O1dVePrG4myjHKLk7df3Ag=; b=JOLkAsqCZGEPg6vHqv1EjulDym

Eg+hEpKgAtta5ZcnsC64AO73nQuKoK3Eife3d/8YKUpYfZaGEZ+ltdktZOYUOLqnJrZ/5nPWX/eF1

IEBwIHBFFOdW02kfi0Lmxf6cUta9Xk5F5jfZuVO13TfoeBjUED1AhXFIC+ptLh9K2f72esbVHxa8H

IETR7bb9F8FV6uCbTL4/dpAIkSYClr+gIxOiyLR9mjZ82FoGL2Mo/JnpcObLaHb0+amb4t3Twfbat

ZSaPJFwW90y1yv3c+8Wm43n89jJiHcGwamAc4FSWPRxfw+4HK1pTyQ6iVfXHzY5+il+QVLfisVHF1

GMotn/QQ==;

Received: from ec2-3-149-247-239.us-east-2.compute.amazonaws.com ([3.149.247.239]:52679 helo=EC2AMAZ-OL9LF1Q)

by server.nigatom.gov.ng with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1uzKny-00000008asH-33qp

for root@nk.ca;

Thu, 18 Sep 2025 16:00:33 -0400

From: "nk"

Subject: ATTENTION : Password key expired!!!

To:

Content-Type: multipart/alternative; boundary="AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB"

MIME-Version: 1.0

Date: Thu, 18 Sep 2025 20:00:33 +0000

Message-Id: <183220250900203DD29DE1BF$33FD656CF7@nigatom.gov.ng>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.nigatom.gov.ng

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - nigatom.gov.ng

X-Get-Message-Sender-Via: server.nigatom.gov.ng: authenticated_id: inemo.adaka@nigatom.gov.ng

X-Authenticated-Sender: server.nigatom.gov.ng: inemo.adaka@nigatom.gov.ng

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Email Password Center! ? Hello root@nk.ca, We're notifying

you that your current password has expired. To ensure uninterrupted access

to your account, please confirm your existing password below:



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[3.149.247.239 listed in dnsbl.ahbl.org]

[3.149.247.239 listed in dnsbl.ahbl.org]

[3.149.247.239 listed in dnsbl.ahbl.org]

[3.149.247.239 listed in dnsbl.ahbl.org]

[170.249.214.194 listed in dnsbl.ahbl.org]

[170.249.214.194 listed in dnsbl.ahbl.org]

[170.249.214.194 listed in dnsbl.ahbl.org]

[170.249.214.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[3.149.247.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[3.149.247.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[3.149.247.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[3.149.247.239 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large

0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment

1.2 GB_CUSTOM_HTM_URI Custom html uri

Subject: {SPAM?} ATTENTION : Password key expired!!!



This is a multi-part message in MIME format



--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Email Password Center!=20



? Hello root@nk.ca,



We're notifying you that your current password has expired.

To ensure uninterrupted access to your account, please confirm your ex=

isting password below:



Keep Existing Password https://mueblescabra.com.mx/tom/redirect.php#ro=

ot@nk.ca



For a seamless experience and continued security, we recommend keeping=

your current password and staying logged in to your account.

Have questions or need help? We're happy to assist!

Thank you for your swift attention to this matter ;



Note: Failure to update may result in loss of access to your account o=

r email.



Thank You,



2025 nk Server



--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


le=3D1"> <=

title>ATTENTION : Password key expired!!!




=3Dleft>  


14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPAC=

ING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COL=

OR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; W=

IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=

le: initial; text-decoration-color: initial"> 


T-SIZE: small; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: =

0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FON=

T-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,=

255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=

aps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=

: initial; text-decoration-style: initial; text-decoration-color: init=

ial" align=3Dleft>
-large; FONT-FAMILY: 'Segoe UI'; FONT-WEIGHT: bolder">
OX-SIZING: border-box">
-ALIGN: inherit">
: inherit" color=3D#0000ff>Email Password Center!
=

&n=

bsp;


MILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=

-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =

normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=

(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=

variant-caps: normal; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color: initial">


"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-se=

rif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FON=

T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: l=

eft; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-I=

NDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;=

text-decoration-thickness: initial; text-decoration-style: initial; t=

ext-decoration-color: initial">


FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal=

; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=

T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; OR=

PHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =

0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=

oration-style: initial; text-decoration-color: initial">

OX-SIZING: border-box">


ZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-S=

PACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2=

; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fon=

t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=

troke-width: 0px; text-decoration-thickness: initial; text-decoration-=

style: initial; text-decoration-color: initial">
ING: border-box" color=3D#2c363a size=3D2 face=3DArial>⦿ Hello =

root@nk.ca,


edium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px; MAR=

GIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34=

,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=

(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=

variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-co=

lor: initial">

SIZING: border-box" size=3D2>

T style=3D"BOX-SIZING: border-box" color=3D#2c363a face=3DArial>
style=3D"BOX-SIZING: border-box" size=3D2>We're notifying you that you=

r current password has expired.

R style=3D"BOX-SIZING: border-box">To ensure uninterrupted access to y=

our account, please confirm your existing password below:

BOX-SIZING: border-box">

FONT>


; FONT-SIZE: 14px; BORDER-TOP: rgb(211,211,211) 1px dotted; FONT-FAMIL=

Y: Roboto, sans-serif; BORDER-RIGHT: rgb(211,211,211) 1px dotted; WHIT=

E-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: collapse; BORDER-=

BOTTOM: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none; FONT-WEIGHT=

: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; BOR=

DER-LEFT: rgb(211,211,211) 1px dotted; ORPHANS: 2; WIDOWS: 2; BACKGROU=

ND-COLOR: rgb(255,255,255); font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=

ness: initial; text-decoration-style: initial; text-decoration-color: =

initial">
ING: border-box">

(211,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1px dotted; B=

ORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM: 10px; PADDI=

NG-TOP: 10px; PADDING-LEFT: 10px; BORDER-LEFT: rgb(211,211,211) 1px do=

tted; MARGIN: 0px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: blue">
size=3D3 face=3DArial>
ION: none; COLOR: white; BACKGROUND-COLOR: transparent" href=3D"https:=

//mueblescabra.com.mx/tom/redirect.php#root@nk.ca" rel=3Dnoreferrer ta=

rget=3D_blank>Keep Existing Password

<=

p style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=

o, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px=

; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255=

); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=

nitial; text-decoration-style: initial; text-decoration-color: initial=

">

T-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">

: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto,=

sans-serif"><=

SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
BOX-SIZING: border-box; FONT-SIZE: 13px">
rder-box; FONT-SIZE: 12px">
-SIZE: 13px">For a seamless experience and continued security, we reco=

mmend keeping your current password and staying logged in to your acco=

unt.


border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">

le=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sa=

ns-serif">
-FAMILY: Roboto, sans-serif">
NT-SIZE: 16px">
>
"BOX-SIZING: border-box; FONT-SIZE: 12px">
order-box; FONT-SIZE: 13px">Have questions or need help? We're happy t=

o assist!


ZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
R style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=

o, sans-serif">
FONT-FAMILY: Roboto, sans-serif">
x; FONT-SIZE: 16px">
14px">
yle=3D"BOX-SIZING: border-box; FONT-SIZE: 12px">
ING: border-box; FONT-SIZE: 13px">Thank you for your swift attention t=

o this matter ;
<=

/P>

SIZING: content-box; FONT-SIZE: 14px; OVERFLOW: visible; FONT-FAMILY: =

Roboto, sans-serif; BORDER-RIGHT-WIDTH: 0px; BORDER-TOP-COLOR: ; WHITE=

-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRAN=

SFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: norma=

l; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-IND=

ENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -=

webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=

t-decoration-style: initial; text-decoration-color: initial; border-im=

age: initial">


T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =

MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=

,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=

nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">Note:=

Failure to update may result in loss of access to your account or ema=

il.


G: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE=

-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: no=

ne; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHAN=

S: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px;=

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=

xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color: initial">
-SIZING: border-box" size=3D2>
ONT-SIZE: 14px">
">
"BOX-SIZING: border-box; FONT-SIZE: 13px">
order-box; FONT-SIZE: 12px">Thank You,

AN>


T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =

MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=

,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=

nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">
style=3D"BOX-SIZING: border-box" color=3D#0520fa>2025 nk Server
FONT>


ZE: medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px=

; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255=

); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=

nitial; text-decoration-style: initial; text-decoration-color: initial=

" align=3Dleft>  


dy>





--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB--

nk.ca credential phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 14:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzKrX-000000007Tg-1awq

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 14:04:15 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 14:04:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.nigatom.gov.ng ([170.249.214.194]:60108)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzKoi-000000004CQ-3nkm

for doctor@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 14:01:34 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=nigatom.gov.ng; s=default; h=Message-Id:Date:MIME-Version:Content-Type:To:

Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=OEU2ZP3O4O+OCFpWCmqmh95tJh7scR9h3GZ+3kM7N/E=; b=lfeu3R0rhEbbBDHrx5ddsInq3g

d+ayXBBkkxE37TTmK1p3LxddpHl1ZYQjysB5W5VOEZgqVjk+AZYZBrCXk2wuqj1ACUOLOIIIzdLio

Oc3eEkeSuWvaPlBLrlfauD9Rjn9pXRIvO2JZC93azKYyWifQT0o3boEEKIBPqYfG8ybEh+A9S6eOZ

xsl3470wlaEwWLRd5nph/7Dv9HDYwZKuk9XYXoJHdAEBT+hEwnUxlsW+dle+u2So/vghXaQjPLrZq

HfSsNGjf3Lk4DX46utweh/+8OjwiXTDWkfynBEdgHxTsjGYV/nzSp1jtTtgysWJFdMK1qgOBGIDXO

khs4dKqA==;

Received: from ec2-3-149-247-239.us-east-2.compute.amazonaws.com ([3.149.247.239]:52676 helo=EC2AMAZ-OL9LF1Q)

by server.nigatom.gov.ng with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1uzKnx-00000008ar6-1lne

for doctor@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 16:00:32 -0400

From: "doctor"

Subject: ATTENTION : Password key expired!!!

To:

Content-Type: multipart/alternative; boundary="AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB"

MIME-Version: 1.0

Date: Thu, 18 Sep 2025 20:00:32 +0000

Message-Id: <1831202509002076DA0970AC$4B7CB904ED@nigatom.gov.ng>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.nigatom.gov.ng

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - nigatom.gov.ng

X-Get-Message-Sender-Via: server.nigatom.gov.ng: authenticated_id: inemo.adaka@nigatom.gov.ng

X-Authenticated-Sender: server.nigatom.gov.ng: inemo.adaka@nigatom.gov.ng

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Email Password Center! ? Hello doctor@doctor.nl2k.ab.ca,

We're notifying you that your current password has expired. To ensure uninterrupted

access to your account, please confirm your existing password below:



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[3.149.247.239 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

[170.249.214.194 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[3.149.247.239 listed in dnsbl.ahbl.org]

[3.149.247.239 listed in dnsbl.ahbl.org]

[3.149.247.239 listed in dnsbl.ahbl.org]

[3.149.247.239 listed in dnsbl.ahbl.org]

[170.249.214.194 listed in dnsbl.ahbl.org]

[170.249.214.194 listed in dnsbl.ahbl.org]

[170.249.214.194 listed in dnsbl.ahbl.org]

[170.249.214.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[3.149.247.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[3.149.247.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[3.149.247.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[3.149.247.239 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large

0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment

Subject: {SPAM?} ATTENTION : Password key expired!!!



This is a multi-part message in MIME format



--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Email Password Center!=20



? Hello doctor@doctor.nl2k.ab.ca,



We're notifying you that your current password has expired.

To ensure uninterrupted access to your account, please confirm your ex=

isting password below:



Keep Existing Password https://mueblescabra.com.mx/tom/redirect.php#do=

ctor@doctor.nl2k.ab.ca



For a seamless experience and continued security, we recommend keeping=

your current password and staying logged in to your account.

Have questions or need help? We're happy to assist!

Thank you for your swift attention to this matter ;



Note: Failure to update may result in loss of access to your account o=

r email.



Thank You,



2025 doctor Server



--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


le=3D1"> <=

title>ATTENTION : Password key expired!!!




=3Dleft>  


14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPAC=

ING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COL=

OR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; W=

IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=

le: initial; text-decoration-color: initial"> 


T-SIZE: small; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: =

0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FON=

T-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,=

255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=

aps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=

: initial; text-decoration-style: initial; text-decoration-color: init=

ial" align=3Dleft>
-large; FONT-FAMILY: 'Segoe UI'; FONT-WEIGHT: bolder">
OX-SIZING: border-box">
-ALIGN: inherit">
: inherit" color=3D#0000ff>Email Password Center!
=

&n=

bsp;


MILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=

-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =

normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=

(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=

variant-caps: normal; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color: initial">


"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-se=

rif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FON=

T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: l=

eft; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-I=

NDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;=

text-decoration-thickness: initial; text-decoration-style: initial; t=

ext-decoration-color: initial">


FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal=

; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=

T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; OR=

PHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =

0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=

oration-style: initial; text-decoration-color: initial">

OX-SIZING: border-box">


ZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-S=

PACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2=

; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fon=

t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=

troke-width: 0px; text-decoration-thickness: initial; text-decoration-=

style: initial; text-decoration-color: initial">
ING: border-box" color=3D#2c363a size=3D2 face=3DArial>⦿ Hello =

doctor@doctor.nl2k.ab.ca,


; FONT-SIZE: medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPA=

CING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; CO=

LOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGRO=

UND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures:=

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text=

-decoration-color: initial">

style=3D"BOX-SIZING: border-box" size=3D2>

rder-box">
Arial>We're notifying =

you that your current password has expired.

rder-box">
To ensure uninterrupted=

access to your account, please confirm your existing password below:<=

BR style=3D"BOX-SIZING: border-box">

x">


: border-box; FONT-SIZE: 14px; BORDER-TOP: rgb(211,211,211) 1px dotted=

; FONT-FAMILY: Roboto, sans-serif; BORDER-RIGHT: rgb(211,211,211) 1px =

dotted; WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: colla=

pse; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none;=

FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIG=

N: left; BORDER-LEFT: rgb(211,211,211) 1px dotted; ORPHANS: 2; WIDOWS:=

2; BACKGROUND-COLOR: rgb(255,255,255); font-variant-ligatures: normal=

; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=

ration-thickness: initial; text-decoration-style: initial; text-decora=

tion-color: initial">
e=3D"BOX-SIZING: border-box">

DER-TOP: rgb(211,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1=

px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM:=

10px; PADDING-TOP: 10px; PADDING-LEFT: 10px; BORDER-LEFT: rgb(211,211=

,211) 1px dotted; MARGIN: 0px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: =

blue">
TEXT-DECORATION: none; COLOR: white; BACKGROUND-COLOR: transparent" hr=

ef=3D"https://mueblescabra.com.mx/tom/redirect.php#doctor@doctor.nl2k.=

ab.ca" rel=3Dnoreferrer target=3D_blank>Keep Existing Password

NT>


: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPA=

CING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; CO=

LOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGRO=

UND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures:=

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text=

-decoration-color: initial">

OX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-seri=

f">

Roboto, sans-serif">
14px; FONT-FAMILY: Roboto, sans-serif">
er-box; FONT-SIZE: 16px">
IZE: 14px">
AN style=3D"BOX-SIZING: border-box; FONT-SIZE: 12px">
X-SIZING: border-box; FONT-SIZE: 13px">For a seamless experience and c=

ontinued security, we recommend keeping your current password and stay=

ing logged in to your account.

N>

oboto, sans-serif">

x; FONT-FAMILY: Roboto, sans-serif">
box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
BOX-SIZING: border-box; FONT-SIZE: 16px">
rder-box; FONT-SIZE: 14px">
-SIZE: 13px"><=

SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 13px">Have questions =

or need help? We're happy to assist!

>


ILY: Roboto, sans-serif">

E: 14px; FONT-FAMILY: Roboto, sans-serif">
order-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
le=3D"BOX-SIZING: border-box; FONT-SIZE: 16px">
NG: border-box; FONT-SIZE: 14px">
; FONT-SIZE: 13px">
2px">Thank you=

for your swift attention to this matter ;

SPAN>



ORDER-LEFT-WIDTH: 0px; BOX-SIZING: content-box; FONT-SIZE: 14px; OVERF=

LOW: visible; FONT-FAMILY: Roboto, sans-serif; BORDER-RIGHT-WIDTH: 0px=

; BORDER-TOP-COLOR: ; WHITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; W=

ORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(4=

4,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR:=

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; f=

ont-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=

ion-thickness: initial; text-decoration-style: initial; text-decoratio=

n-color: initial; border-image: initial">


r-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: =

normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT=

-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WI=

DOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-strok=

e-width: 0px; text-decoration-thickness: initial; text-decoration-styl=

e: initial; text-decoration-color: initial">
border-box" size=3D2>
: 14px">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
IZING: border-box; FONT-SIZE: 13px">
box; FONT-SIZE: 12px">Note: Failure to update may result in loss of ac=

cess to your account or email.

T>


: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-T=

OP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58);=

FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,=

255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=

ness: initial; text-decoration-style: initial; text-decoration-color: =

initial">
"BOX-SIZING: border-box; FONT-SIZE: 14px">
order-box; FONT-SIZE: 16px">
T-SIZE: 14px">=

Thank You,
AN>


er-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE:=

normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FON=

T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; W=

IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=

le: initial; text-decoration-color: initial">
: border-box" size=3D2>
E: 14px">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 13px">
-box; FONT-SIZE: 9px">
0520fa>2025 doctor Server

N>


SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 4=

00; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; B=

ACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-liga=

tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial" align=3Dleft>
rial>  







--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB--

nk.ca credential phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 14:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzKrc-000000007Ug-0zra

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 14:04:20 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 14:04:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.nigatom.gov.ng ([170.249.214.194]:60144)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzKoi-000000004Cv-3nMz

for sales@nk.ca;

Thu, 18 Sep 2025 14:01:30 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=nigatom.gov.ng; s=default; h=Message-Id:Date:MIME-Version:Content-Type:To:

Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=UC4IK8W44j0LwL3WXcwHRI+rmDanK6egkSffpukioMs=; b=KCQOBrUrmWgLl8qfudtdrE7NbV

386/U4f4FrZRAKbV6+FaBXp3F0hZOdbPrz6S0a+WSke8B2+I/nhDAOpRpb2Q3XH1T34DhP2GIj0zF

rdzhVQUdOeNsH2rjxQq8XougHLHhApWMa+HEUvwZCmt5hWKALPdnPpuofbmBTRjwkwhkBNM1rwDNl

7dQ/zZOF/oU3btGdtlCbTrrP/5/12Qbs6znpJC6Xd+Vh868EQkLNUkYwFR/0EN6qGqYaVjlr0aYpV

eXpSEfABqlJp8TLwtbMW4ivXV03EapRwS0q6CS2zTQekt5Ve5vP1B8lmGmELgsNwj/oMLYRYbC/Vy

LT7hdHIA==;

Received: from ec2-3-149-247-239.us-east-2.compute.amazonaws.com ([3.149.247.239]:52680 helo=EC2AMAZ-OL9LF1Q)

by server.nigatom.gov.ng with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1uzKny-00000008atY-3yHQ

for sales@nk.ca;

Thu, 18 Sep 2025 16:00:33 -0400

From: "nk"

Subject: ATTENTION : Password key expired!!!

To:

Content-Type: multipart/alternative; boundary="AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB"

MIME-Version: 1.0

Date: Thu, 18 Sep 2025 20:00:33 +0000

Message-Id: <18332025090020C3386E4D1D-4FFA3DD753@nigatom.gov.ng>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.nigatom.gov.ng

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - nigatom.gov.ng

X-Get-Message-Sender-Via: server.nigatom.gov.ng: authenticated_id: inemo.adaka@nigatom.gov.ng

X-Authenticated-Sender: server.nigatom.gov.ng: inemo.adaka@nigatom.gov.ng

X-Source:

X-Source-Args:

X-Source-Dir:



This is a multi-part message in MIME format



--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Email Password Center!=20



? Hello sales@nk.ca,



We're notifying you that your current password has expired.

To ensure uninterrupted access to your account, please confirm your ex=

isting password below:



Keep Existing Password https://mueblescabra.com.mx/tom/redirect.php#sa=

les@nk.ca



For a seamless experience and continued security, we recommend keeping=

your current password and staying logged in to your account.

Have questions or need help? We're happy to assist!

Thank you for your swift attention to this matter ;



Note: Failure to update may result in loss of access to your account o=

r email.



Thank You,



2025 nk Server



--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


le=3D1"> <=

title>ATTENTION : Password key expired!!!




=3Dleft>  


14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPAC=

ING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COL=

OR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; W=

IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=

le: initial; text-decoration-color: initial"> 


T-SIZE: small; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: =

0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FON=

T-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,=

255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=

aps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=

: initial; text-decoration-style: initial; text-decoration-color: init=

ial" align=3Dleft>
-large; FONT-FAMILY: 'Segoe UI'; FONT-WEIGHT: bolder">
OX-SIZING: border-box">
-ALIGN: inherit">
: inherit" color=3D#0000ff>Email Password Center!
=

&n=

bsp;


MILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=

-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =

normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=

(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=

variant-caps: normal; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color: initial">


"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-se=

rif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FON=

T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: l=

eft; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-I=

NDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;=

text-decoration-thickness: initial; text-decoration-style: initial; t=

ext-decoration-color: initial">


FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal=

; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=

T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; OR=

PHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =

0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=

oration-style: initial; text-decoration-color: initial">

OX-SIZING: border-box">


ZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-S=

PACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2=

; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fon=

t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=

troke-width: 0px; text-decoration-thickness: initial; text-decoration-=

style: initial; text-decoration-color: initial">
ING: border-box" color=3D#2c363a size=3D2 face=3DArial>⦿ Hello =

sales@nk.ca,


medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px; MA=

RGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,3=

4,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rg=

b(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font=

-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-c=

olor: initial">

-SIZING: border-box" size=3D2>

NT style=3D"BOX-SIZING: border-box" color=3D#2c363a face=3DArial>
style=3D"BOX-SIZING: border-box" size=3D2>We're notifying you that yo=

ur current password has expired.
<=

BR style=3D"BOX-SIZING: border-box">To ensure uninterrupted access to =

your account, please confirm your existing password below:

"BOX-SIZING: border-box">
<=

/FONT>


x; FONT-SIZE: 14px; BORDER-TOP: rgb(211,211,211) 1px dotted; FONT-FAMI=

LY: Roboto, sans-serif; BORDER-RIGHT: rgb(211,211,211) 1px dotted; WHI=

TE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: collapse; BORDER=

-BOTTOM: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none; FONT-WEIGH=

T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; BO=

RDER-LEFT: rgb(211,211,211) 1px dotted; ORPHANS: 2; WIDOWS: 2; BACKGRO=

UND-COLOR: rgb(255,255,255); font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thic=

kness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
ZING: border-box">

b(211,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1px dotted; =

BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM: 10px; PADD=

ING-TOP: 10px; PADDING-LEFT: 10px; BORDER-LEFT: rgb(211,211,211) 1px d=

otted; MARGIN: 0px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: blue">
size=3D3 face=3DArial>
TION: none; COLOR: white; BACKGROUND-COLOR: transparent" href=3D"https=

://mueblescabra.com.mx/tom/redirect.php#sales@nk.ca" rel=3Dnoreferrer =

target=3D_blank>Keep Existing Password

>


oto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0=

px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT=

-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,2=

55); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-ca=

ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initi=

al">

ONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">

NG: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
N style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=

o, sans-serif">
>
"BOX-SIZING: border-box; FONT-SIZE: 13px">
order-box; FONT-SIZE: 12px">
T-SIZE: 13px">For a seamless experience and continued security, we rec=

ommend keeping your current password and staying logged in to your acc=

ount.


: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">

yle=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, s=

ans-serif">
T-FAMILY: Roboto, sans-serif">
ONT-SIZE: 16px">
">
"BOX-SIZING: border-box; FONT-SIZE: 12px">
order-box; FONT-SIZE: 13px">Have questions or need help? We're happy t=

o assist!


ZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
R style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=

o, sans-serif">
FONT-FAMILY: Roboto, sans-serif">
x; FONT-SIZE: 16px">
14px">
yle=3D"BOX-SIZING: border-box; FONT-SIZE: 12px">
ING: border-box; FONT-SIZE: 13px">Thank you for your swift attention t=

o this matter ;
<=

/P>



SIZING: content-box; FONT-SIZE: 14px; OVERFLOW: visible; FONT-FAMILY: =

Roboto, sans-serif; BORDER-RIGHT-WIDTH: 0px; BORDER-TOP-COLOR: ; WHITE=

-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRAN=

SFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: norma=

l; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-IND=

ENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -=

webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=

t-decoration-style: initial; text-decoration-color: initial; border-im=

age: initial">


T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =

MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=

,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=

nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">Note:=

Failure to update may result in loss of access to your account or ema=

il.


G: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE=

-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: no=

ne; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHAN=

S: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px;=

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=

xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color: initial">
-SIZING: border-box" size=3D2>
ONT-SIZE: 14px">
">
"BOX-SIZING: border-box; FONT-SIZE: 13px">
order-box; FONT-SIZE: 12px">Thank You,

AN>


T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =

MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=

,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=

nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">
style=3D"BOX-SIZING: border-box" color=3D#0520fa>2025 nk Server
FONT>


ZE: medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px=

; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255=

); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=

nitial; text-decoration-style: initial; text-decoration-color: initial=

" align=3Dleft>  


dy>





--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB--

nk.ca credential phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 14:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzKrc-000000007Ug-0zra

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 14:04:20 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 14:04:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.nigatom.gov.ng ([170.249.214.194]:60144)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzKoi-000000004Cv-3nMz

for sales@nk.ca;

Thu, 18 Sep 2025 14:01:30 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=nigatom.gov.ng; s=default; h=Message-Id:Date:MIME-Version:Content-Type:To:

Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=UC4IK8W44j0LwL3WXcwHRI+rmDanK6egkSffpukioMs=; b=KCQOBrUrmWgLl8qfudtdrE7NbV

386/U4f4FrZRAKbV6+FaBXp3F0hZOdbPrz6S0a+WSke8B2+I/nhDAOpRpb2Q3XH1T34DhP2GIj0zF

rdzhVQUdOeNsH2rjxQq8XougHLHhApWMa+HEUvwZCmt5hWKALPdnPpuofbmBTRjwkwhkBNM1rwDNl

7dQ/zZOF/oU3btGdtlCbTrrP/5/12Qbs6znpJC6Xd+Vh868EQkLNUkYwFR/0EN6qGqYaVjlr0aYpV

eXpSEfABqlJp8TLwtbMW4ivXV03EapRwS0q6CS2zTQekt5Ve5vP1B8lmGmELgsNwj/oMLYRYbC/Vy

LT7hdHIA==;

Received: from ec2-3-149-247-239.us-east-2.compute.amazonaws.com ([3.149.247.239]:52680 helo=EC2AMAZ-OL9LF1Q)

by server.nigatom.gov.ng with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1uzKny-00000008atY-3yHQ

for sales@nk.ca;

Thu, 18 Sep 2025 16:00:33 -0400

From: "nk"

Subject: ATTENTION : Password key expired!!!

To:

Content-Type: multipart/alternative; boundary="AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB"

MIME-Version: 1.0

Date: Thu, 18 Sep 2025 20:00:33 +0000

Message-Id: <18332025090020C3386E4D1D-4FFA3DD753@nigatom.gov.ng>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.nigatom.gov.ng

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - nigatom.gov.ng

X-Get-Message-Sender-Via: server.nigatom.gov.ng: authenticated_id: inemo.adaka@nigatom.gov.ng

X-Authenticated-Sender: server.nigatom.gov.ng: inemo.adaka@nigatom.gov.ng

X-Source:

X-Source-Args:

X-Source-Dir:



This is a multi-part message in MIME format



--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Email Password Center!=20



? Hello sales@nk.ca,



We're notifying you that your current password has expired.

To ensure uninterrupted access to your account, please confirm your ex=

isting password below:



Keep Existing Password https://mueblescabra.com.mx/tom/redirect.php#sa=

les@nk.ca



For a seamless experience and continued security, we recommend keeping=

your current password and staying logged in to your account.

Have questions or need help? We're happy to assist!

Thank you for your swift attention to this matter ;



Note: Failure to update may result in loss of access to your account o=

r email.



Thank You,



2025 nk Server



--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


le=3D1"> <=

title>ATTENTION : Password key expired!!!




=3Dleft>  


14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPAC=

ING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COL=

OR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; W=

IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=

le: initial; text-decoration-color: initial"> 


T-SIZE: small; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: =

0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FON=

T-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,=

255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=

aps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=

: initial; text-decoration-style: initial; text-decoration-color: init=

ial" align=3Dleft>
-large; FONT-FAMILY: 'Segoe UI'; FONT-WEIGHT: bolder">
OX-SIZING: border-box">
-ALIGN: inherit">
: inherit" color=3D#0000ff>Email Password Center!
=

&n=

bsp;


MILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=

-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =

normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=

(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=

variant-caps: normal; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color: initial">


"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-se=

rif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FON=

T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: l=

eft; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-I=

NDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;=

text-decoration-thickness: initial; text-decoration-style: initial; t=

ext-decoration-color: initial">


FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal=

; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=

T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; OR=

PHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =

0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=

oration-style: initial; text-decoration-color: initial">

OX-SIZING: border-box">


ZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-S=

PACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2=

; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fon=

t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=

troke-width: 0px; text-decoration-thickness: initial; text-decoration-=

style: initial; text-decoration-color: initial">
ING: border-box" color=3D#2c363a size=3D2 face=3DArial>⦿ Hello =

sales@nk.ca,


medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px; MA=

RGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,3=

4,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rg=

b(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font=

-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-c=

olor: initial">

-SIZING: border-box" size=3D2>

NT style=3D"BOX-SIZING: border-box" color=3D#2c363a face=3DArial>
style=3D"BOX-SIZING: border-box" size=3D2>We're notifying you that yo=

ur current password has expired.
<=

BR style=3D"BOX-SIZING: border-box">To ensure uninterrupted access to =

your account, please confirm your existing password below:

"BOX-SIZING: border-box">
<=

/FONT>


x; FONT-SIZE: 14px; BORDER-TOP: rgb(211,211,211) 1px dotted; FONT-FAMI=

LY: Roboto, sans-serif; BORDER-RIGHT: rgb(211,211,211) 1px dotted; WHI=

TE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: collapse; BORDER=

-BOTTOM: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none; FONT-WEIGH=

T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; BO=

RDER-LEFT: rgb(211,211,211) 1px dotted; ORPHANS: 2; WIDOWS: 2; BACKGRO=

UND-COLOR: rgb(255,255,255); font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thic=

kness: initial; text-decoration-style: initial; text-decoration-color:=

initial">
ZING: border-box">

b(211,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1px dotted; =

BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM: 10px; PADD=

ING-TOP: 10px; PADDING-LEFT: 10px; BORDER-LEFT: rgb(211,211,211) 1px d=

otted; MARGIN: 0px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: blue">
size=3D3 face=3DArial>
TION: none; COLOR: white; BACKGROUND-COLOR: transparent" href=3D"https=

://mueblescabra.com.mx/tom/redirect.php#sales@nk.ca" rel=3Dnoreferrer =

target=3D_blank>Keep Existing Password

>


oto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0=

px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT=

-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,2=

55); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-ca=

ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initi=

al">

ONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">

NG: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
N style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=

o, sans-serif">
>
"BOX-SIZING: border-box; FONT-SIZE: 13px">
order-box; FONT-SIZE: 12px">
T-SIZE: 13px">For a seamless experience and continued security, we rec=

ommend keeping your current password and staying logged in to your acc=

ount.


: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">

yle=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, s=

ans-serif">
T-FAMILY: Roboto, sans-serif">
ONT-SIZE: 16px">
">
"BOX-SIZING: border-box; FONT-SIZE: 12px">
order-box; FONT-SIZE: 13px">Have questions or need help? We're happy t=

o assist!


ZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
R style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=

o, sans-serif">
FONT-FAMILY: Roboto, sans-serif">
x; FONT-SIZE: 16px">
14px">
yle=3D"BOX-SIZING: border-box; FONT-SIZE: 12px">
ING: border-box; FONT-SIZE: 13px">Thank you for your swift attention t=

o this matter ;
<=

/P>



SIZING: content-box; FONT-SIZE: 14px; OVERFLOW: visible; FONT-FAMILY: =

Roboto, sans-serif; BORDER-RIGHT-WIDTH: 0px; BORDER-TOP-COLOR: ; WHITE=

-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRAN=

SFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: norma=

l; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-IND=

ENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -=

webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=

t-decoration-style: initial; text-decoration-color: initial; border-im=

age: initial">


T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =

MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=

,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=

nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">Note:=

Failure to update may result in loss of access to your account or ema=

il.


G: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE=

-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: no=

ne; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHAN=

S: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px;=

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=

xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color: initial">
-SIZING: border-box" size=3D2>
ONT-SIZE: 14px">
">
"BOX-SIZING: border-box; FONT-SIZE: 13px">
order-box; FONT-SIZE: 12px">Thank You,

AN>


T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =

MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=

,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=

nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">
style=3D"BOX-SIZING: border-box" color=3D#0520fa>2025 nk Server
FONT>


ZE: medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px=

; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255=

); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=

: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=

nitial; text-decoration-style: initial; text-decoration-color: initial=

" align=3Dleft>  


dy>





--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB--

nk.ca credential phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 14:02:00 -0600

Received: from server.nigatom.gov.ng ([170.249.214.194]:60120)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzKoi-000000004CS-3niO

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 14:01:30 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=nigatom.gov.ng; s=default; h=Message-Id:Date:MIME-Version:Content-Type:To:

Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=n+dcmzampqztYlLeKzUUVOa2g2h1UopwwCynAG/bKkw=; b=rV/HLtP9g8oHMbeKtbMB2E/pws

4twNliDkPPnUgbUkYIBFIko91fsLXxGHM98twfHP53HkkyLa6D1ntNkTRbfoWKYhlZtZGc0abdeNz

1PptFMdm6KNON+yvvfUppS2zbZVKLz3DrKpjEF479uenPPxJTpoeDVQtmVIvcNLTVutOPX2M4VHRW

/2GlAPBSJuJoQpMl79S6ocx1QyniztdwSY0li/Ov6QecrKxvr8X3xmZDqswjWWFfEqRY1bzw1rIgI

861ez3JiN55eG/wY2EZVrg4CS0+hUG5nJixPLnXTt3ZRy0rrEmPfp1unIqxMmkI+Kyd1hyNCotpmY

pYrKIZQA==;

Received: from ec2-3-149-247-239.us-east-2.compute.amazonaws.com ([3.149.247.239]:52677 helo=EC2AMAZ-OL9LF1Q)

by server.nigatom.gov.ng with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2)

(envelope-from )

id 1uzKnx-00000008arE-25eY

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 16:00:32 -0400

From: "doctor"

Subject: ATTENTION : Password key expired!!!

To:

Content-Type: multipart/alternative; boundary="AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB"

MIME-Version: 1.0

Date: Thu, 18 Sep 2025 20:00:32 +0000

Message-Id: <1831202509002081C0620BA5$06AE3F4659@nigatom.gov.ng>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.nigatom.gov.ng

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - nigatom.gov.ng

X-Get-Message-Sender-Via: server.nigatom.gov.ng: authenticated_id: inemo.adaka@nigatom.gov.ng

X-Authenticated-Sender: server.nigatom.gov.ng: inemo.adaka@nigatom.gov.ng

X-Source:

X-Source-Args:

X-Source-Dir:



This is a multi-part message in MIME format



--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Email Password Center!=20



? Hello dave@doctor.nl2k.ab.ca,



We're notifying you that your current password has expired.

To ensure uninterrupted access to your account, please confirm your ex=

isting password below:



Keep Existing Password https://mueblescabra.com.mx/tom/redirect.php#da=

ve@doctor.nl2k.ab.ca



For a seamless experience and continued security, we recommend keeping=

your current password and staying logged in to your account.

Have questions or need help? We're happy to assist!

Thank you for your swift attention to this matter ;



Note: Failure to update may result in loss of access to your account o=

r email.



Thank You,



2025 doctor Server



--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


le=3D1"> <=

title>ATTENTION : Password key expired!!!




=3Dleft>  


14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPAC=

ING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COL=

OR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; W=

IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=

le: initial; text-decoration-color: initial"> 


T-SIZE: small; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: =

0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FON=

T-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,=

255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=

aps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=

: initial; text-decoration-style: initial; text-decoration-color: init=

ial" align=3Dleft>
-large; FONT-FAMILY: 'Segoe UI'; FONT-WEIGHT: bolder">
OX-SIZING: border-box">
-ALIGN: inherit">
: inherit" color=3D#0000ff>Email Password Center!
=

&n=

bsp;


MILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=

-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =

normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=

(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=

variant-caps: normal; text-decoration-thickness: initial; text-decorat=

ion-style: initial; text-decoration-color: initial">


"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-se=

rif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FON=

T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: l=

eft; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-I=

NDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;=

text-decoration-thickness: initial; text-decoration-style: initial; t=

ext-decoration-color: initial">


FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal=

; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=

T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; OR=

PHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =

0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=

oration-style: initial; text-decoration-color: initial">

OX-SIZING: border-box">


ZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-S=

PACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2=

; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fon=

t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=

troke-width: 0px; text-decoration-thickness: initial; text-decoration-=

style: initial; text-decoration-color: initial">
ING: border-box" color=3D#2c363a size=3D2 face=3DArial>⦿ Hello =

dave@doctor.nl2k.ab.ca,


FONT-SIZE: medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACI=

NG: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLO=

R: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUN=

D-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: n=

ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=

-decoration-thickness: initial; text-decoration-style: initial; text-d=

ecoration-color: initial">

tyle=3D"BOX-SIZING: border-box" size=3D2>

er-box">
Arial>We're notifying =

you that your current password has expired.

rder-box">
To ensure uninterrupted=

access to your account, please confirm your existing password below:<=

BR style=3D"BOX-SIZING: border-box">

x">


: border-box; FONT-SIZE: 14px; BORDER-TOP: rgb(211,211,211) 1px dotted=

; FONT-FAMILY: Roboto, sans-serif; BORDER-RIGHT: rgb(211,211,211) 1px =

dotted; WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: colla=

pse; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none;=

FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIG=

N: left; BORDER-LEFT: rgb(211,211,211) 1px dotted; ORPHANS: 2; WIDOWS:=

2; BACKGROUND-COLOR: rgb(255,255,255); font-variant-ligatures: normal=

; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=

ration-thickness: initial; text-decoration-style: initial; text-decora=

tion-color: initial">
e=3D"BOX-SIZING: border-box">

DER-TOP: rgb(211,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1=

px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM:=

10px; PADDING-TOP: 10px; PADDING-LEFT: 10px; BORDER-LEFT: rgb(211,211=

,211) 1px dotted; MARGIN: 0px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: =

blue">
TEXT-DECORATION: none; COLOR: white; BACKGROUND-COLOR: transparent" hr=

ef=3D"https://mueblescabra.com.mx/tom/redirect.php#dave@doctor.nl2k.ab=

=2Eca" rel=3Dnoreferrer target=3D_blank>Keep Existing Password

NT>


: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPA=

CING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; CO=

LOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGRO=

UND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures:=

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text=

-decoration-color: initial">

OX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-seri=

f">

Roboto, sans-serif">
14px; FONT-FAMILY: Roboto, sans-serif">
er-box; FONT-SIZE: 16px">
IZE: 14px">
AN style=3D"BOX-SIZING: border-box; FONT-SIZE: 12px">
X-SIZING: border-box; FONT-SIZE: 13px">For a seamless experience and c=

ontinued security, we recommend keeping your current password and stay=

ing logged in to your account.

N>

oboto, sans-serif">

x; FONT-FAMILY: Roboto, sans-serif">
box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
BOX-SIZING: border-box; FONT-SIZE: 16px">
rder-box; FONT-SIZE: 14px">
-SIZE: 13px"><=

SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 13px">Have questions =

or need help? We're happy to assist!

>


ILY: Roboto, sans-serif">

E: 14px; FONT-FAMILY: Roboto, sans-serif">
order-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
le=3D"BOX-SIZING: border-box; FONT-SIZE: 16px">
NG: border-box; FONT-SIZE: 14px">
; FONT-SIZE: 13px">
2px">Thank you=

for your swift attention to this matter ;

SPAN>



ORDER-LEFT-WIDTH: 0px; BOX-SIZING: content-box; FONT-SIZE: 14px; OVERF=

LOW: visible; FONT-FAMILY: Roboto, sans-serif; BORDER-RIGHT-WIDTH: 0px=

; BORDER-TOP-COLOR: ; WHITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; W=

ORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(4=

4,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR:=

rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; f=

ont-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=

ion-thickness: initial; text-decoration-style: initial; text-decoratio=

n-color: initial; border-image: initial">


r-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: =

normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT=

-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WI=

DOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-strok=

e-width: 0px; text-decoration-thickness: initial; text-decoration-styl=

e: initial; text-decoration-color: initial">
border-box" size=3D2>
: 14px">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
IZING: border-box; FONT-SIZE: 13px">
box; FONT-SIZE: 12px">Note: Failure to update may result in loss of ac=

cess to your account or email.

T>


: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-T=

OP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58);=

FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,=

255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=

ness: initial; text-decoration-style: initial; text-decoration-color: =

initial">
"BOX-SIZING: border-box; FONT-SIZE: 14px">
order-box; FONT-SIZE: 16px">
T-SIZE: 14px">=

Thank You,
AN>


er-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE:=

normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FON=

T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; W=

IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=

ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=

ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=

le: initial; text-decoration-color: initial">
: border-box" size=3D2>
E: 14px">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 13px">
-box; FONT-SIZE: 9px">
0520fa>2025 doctor Server

N>


SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 4=

00; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; B=

ACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-liga=

tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial" align=3Dleft>
rial>  







--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB--

TD Webbroker phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 10:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzH5W-00000000AHj-2gVi

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 10:02:26 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 10:02:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [85.142.92.44] (port=36212 helo=mail.lbufz.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzE1e-00000000FIq-25Lf

for doctor@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 06:46:23 -0600

DKIM-Signature: v=1; a=rsa-sha256; d=lbufz.com; s=dkim; c=relaxed/relaxed;

bh=WC1xcZd30/OiJtwFEi3VGIl8bX+I+mJNAnxeZtFNqks=;

h=from:to:subject:date:message-id:sender; t=1758199525;

b=KnP/FSTwyDhZUhTX6+T+kHQUv2lKjNlLco7r8cAfmOL36A0/7jKLEDwbuhmFH427P1Tyd0H2C

pPLuhbS2IAbzwpd3UT6n23Oo8kBQOF08jK6MbYf7fOxRVPSGVir8vfiE3h3sOYQevJebeEdIYMe

E+cq8+iKf2faID4lqu3qzhtJAFC7enwJjdXIHw/HmTSRejxVw+mHg19rgXwCHkMy8qS/M875e3g

IxcRvwM2AEmHJxGkoYJ3mKbMhVwQGzUWOTKZ11Qd99rJ5JT2sQC4SU+2TMA3y5LHu3HtI5yA3SQ

PvCn823fbWdmX9+uiiJ3w1Z9PmpBkRoJmtoAaVpKZEEQ==;

From: TD WebBroker

To: doctor@doctor.nl2k.ab.ca

Subject: Verification Request: Maintain Full Account Access

Date: Thu, 18 Sep 2025 12:45:25 +0000

List-Unsubscribe:



List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <175819952504.10631.9999863271734446455@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============6212458025780768096=="

X-Spam_score: 18.0

X-Spam_score_int: 180

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This email requires an HTML-compatible viewer. Verification

Request: Maintain Full Account Access Verification Request: Maintain Full

Account Access



Content analysis details: (18.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[85.142.92.44 listed in dnsbl.ahbl.org]

[85.142.92.44 listed in dnsbl.ahbl.org]

[85.142.92.44 listed in dnsbl.ahbl.org]

[85.142.92.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[85.142.92.44 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[85.142.92.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[85.142.92.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[85.142.92.44 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: authentication-td-phhrip.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: lbufz.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: lbufz.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: lbufz.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are

non-standard

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} Verification Request: Maintain Full Account Access



--===============6212458025780768096==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit



This email requires an HTML-compatible viewer.



--===============6212458025780768096==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0






class=3D"js flexbox flexboxlegacy no-touch rgba hsla multiplebgs backgrou=

ndsize borderimage borderradius boxshadow textshadow opacity cssanimations cs=

scolumns cssgradients cssreflections csstransforms csstransforms3d csstransit=

ions fontface generatedcontent">








r-scalable =3D no">





Verification Request: Maintain Full Account Access






















href=3Ddata:image/x-icon;base64,AAABAAEAEBAQAAEABAAoAQAAFgAAACgAAAAQAAAAI=

AAAAAEABAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgA=

AAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AIiIiIiIiIiIiIiIiIiIiIiIiIiI=

iIiIiIiKIKIiIgiIiIv8v+Ij/giIi/y/yIo/yIiL/L/IiL/IiIv8v8iIv8iIi/y/yIi/yIiL/L/Ii=

L/IiIv8v8iKP8iiI/4iIiP+CKIiIiIiIgiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAAAAAAA=

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>




er=3Dwebbroker&locale=3Den_CA#/uap/reset">


content=3D"default-src 'none'; font-src 'self' data:; img-src 'self' data=

:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inli=

ne' data:; object-src 'self' data:; frame-src 'self' data:;">








-c165 _nghost-dsl-c99>


















ss>


    nav-utilities>


  • class=3D"td-dropdown td-dropdown-=

    no-hover hidden sf-hidden">


  • class=3D"td-dropdown td-dropdown-=

    language td-dropdown-no-hover hidden sf-hidden">


  • true class=3Dsecure-lock-position>
    _ngcontent-dsl-c99

    class=3D"td-icon icon-regular=

    td-icon-logout mbna-overide">














n">









le=3Dpadding-top:70px>
_ngcontent-dsl-c165>
ghost-dsl-c144 class=3Dng-star-inserted>




-center tabindex=3D-1 style=3Doutline:none>

Verification Request: Maintain Full Account Access
1>









class=3D"td-col-md-6 td-col-md-offset-3 td-co=

l-sm-10 td-col-sm-offset-1">

Dear Client,





Ensuring the ongoing safety of your account remains our top priority. We are =

therefore contacting you to request confirmation of your current session. Acc=

ounts that have not recently been checked are required to complete this quick=

procedure to comply with security standards and prevent unauthorized entry. =

By completing verification, you help us strengthen your personal account prot=

ection and contribute to safeguarding our platform for all users. Delaying th=

is step may cause certain features to become temporarily unavailable until yo=

ur profile is updated.



Please avoid sending personal credentials in response to this email. Instead,=

visit the secure page provided below to complete the process. Once logged in=

, the system will present you with the =E2=80=9CAccount Verification=E2=80=9D=

prompt. The action requires only a brief confirmation and does not involve u=

ploading further identity documentation. After you confirm, the system will i=

mmediately register your account as verified, restoring uninterrupted service=

. To protect your information and ensure compliance, we ask you to complete t=

his today at:
zD9q9MHUgZ3Ye">Login
.



Thanks for your cooperation!




class=3D"td-col-md-6 td-col-md-offset=

-3 td-col-sm-4 td-col-sm-offset-4">

=20














=3DfooterId1 _nghost-dsl-c97>







TD Webbroker phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 10:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzH5W-00000000AHj-2gVi

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 10:02:26 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 10:02:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [85.142.92.44] (port=36212 helo=mail.lbufz.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzE1e-00000000FIq-25Lf

for doctor@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 06:46:23 -0600

DKIM-Signature: v=1; a=rsa-sha256; d=lbufz.com; s=dkim; c=relaxed/relaxed;

bh=WC1xcZd30/OiJtwFEi3VGIl8bX+I+mJNAnxeZtFNqks=;

h=from:to:subject:date:message-id:sender; t=1758199525;

b=KnP/FSTwyDhZUhTX6+T+kHQUv2lKjNlLco7r8cAfmOL36A0/7jKLEDwbuhmFH427P1Tyd0H2C

pPLuhbS2IAbzwpd3UT6n23Oo8kBQOF08jK6MbYf7fOxRVPSGVir8vfiE3h3sOYQevJebeEdIYMe

E+cq8+iKf2faID4lqu3qzhtJAFC7enwJjdXIHw/HmTSRejxVw+mHg19rgXwCHkMy8qS/M875e3g

IxcRvwM2AEmHJxGkoYJ3mKbMhVwQGzUWOTKZ11Qd99rJ5JT2sQC4SU+2TMA3y5LHu3HtI5yA3SQ

PvCn823fbWdmX9+uiiJ3w1Z9PmpBkRoJmtoAaVpKZEEQ==;

From: TD WebBroker

To: doctor@doctor.nl2k.ab.ca

Subject: Verification Request: Maintain Full Account Access

Date: Thu, 18 Sep 2025 12:45:25 +0000

List-Unsubscribe:



List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <175819952504.10631.9999863271734446455@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============6212458025780768096=="

X-Spam_score: 18.0

X-Spam_score_int: 180

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This email requires an HTML-compatible viewer. Verification

Request: Maintain Full Account Access Verification Request: Maintain Full

Account Access



Content analysis details: (18.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

[85.142.92.44 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[85.142.92.44 listed in dnsbl.ahbl.org]

[85.142.92.44 listed in dnsbl.ahbl.org]

[85.142.92.44 listed in dnsbl.ahbl.org]

[85.142.92.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[85.142.92.44 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[85.142.92.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[85.142.92.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[85.142.92.44 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: authentication-td-phhrip.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: lbufz.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: lbufz.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: lbufz.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are

non-standard

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} Verification Request: Maintain Full Account Access



--===============6212458025780768096==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit



This email requires an HTML-compatible viewer.



--===============6212458025780768096==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0






class=3D"js flexbox flexboxlegacy no-touch rgba hsla multiplebgs backgrou=

ndsize borderimage borderradius boxshadow textshadow opacity cssanimations cs=

scolumns cssgradients cssreflections csstransforms csstransforms3d csstransit=

ions fontface generatedcontent">








r-scalable =3D no">





Verification Request: Maintain Full Account Access






















href=3Ddata:image/x-icon;base64,AAABAAEAEBAQAAEABAAoAQAAFgAAACgAAAAQAAAAI=

AAAAAEABAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgA=

AAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AIiIiIiIiIiIiIiIiIiIiIiIiIiI=

iIiIiIiKIKIiIgiIiIv8v+Ij/giIi/y/yIo/yIiL/L/IiL/IiIv8v8iIv8iIi/y/yIi/yIiL/L/Ii=

L/IiIv8v8iKP8iiI/4iIiP+CKIiIiIiIgiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAAAAAAA=

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>




er=3Dwebbroker&locale=3Den_CA#/uap/reset">


content=3D"default-src 'none'; font-src 'self' data:; img-src 'self' data=

:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inli=

ne' data:; object-src 'self' data:; frame-src 'self' data:;">








-c165 _nghost-dsl-c99>


















ss>


    nav-utilities>


  • class=3D"td-dropdown td-dropdown-=

    no-hover hidden sf-hidden">


  • class=3D"td-dropdown td-dropdown-=

    language td-dropdown-no-hover hidden sf-hidden">


  • true class=3Dsecure-lock-position>
    _ngcontent-dsl-c99

    class=3D"td-icon icon-regular=

    td-icon-logout mbna-overide">














n">









le=3Dpadding-top:70px>
_ngcontent-dsl-c165>
ghost-dsl-c144 class=3Dng-star-inserted>




-center tabindex=3D-1 style=3Doutline:none>

Verification Request: Maintain Full Account Access
1>









class=3D"td-col-md-6 td-col-md-offset-3 td-co=

l-sm-10 td-col-sm-offset-1">

Dear Client,





Ensuring the ongoing safety of your account remains our top priority. We are =

therefore contacting you to request confirmation of your current session. Acc=

ounts that have not recently been checked are required to complete this quick=

procedure to comply with security standards and prevent unauthorized entry. =

By completing verification, you help us strengthen your personal account prot=

ection and contribute to safeguarding our platform for all users. Delaying th=

is step may cause certain features to become temporarily unavailable until yo=

ur profile is updated.



Please avoid sending personal credentials in response to this email. Instead,=

visit the secure page provided below to complete the process. Once logged in=

, the system will present you with the =E2=80=9CAccount Verification=E2=80=9D=

prompt. The action requires only a brief confirmation and does not involve u=

ploading further identity documentation. After you confirm, the system will i=

mmediately register your account as verified, restoring uninterrupted service=

. To protect your information and ensure compliance, we ask you to complete t=

his today at:
zD9q9MHUgZ3Ye">Login
.



Thanks for your cooperation!




class=3D"td-col-md-6 td-col-md-offset=

-3 td-col-sm-4 td-col-sm-offset-4">

=20














=3DfooterId1 _nghost-dsl-c97>







TD Webbroker phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 10:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzH5t-00000000AMb-3zlV

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 10:02:49 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 10:02:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [85.142.92.40] (port=33964 helo=mail.nqded.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzECC-00000000GPX-46Ba

for bin@nl2k.ab.ca;

Thu, 18 Sep 2025 06:57:17 -0600

DKIM-Signature: v=1; a=rsa-sha256; d=nqded.com; s=dkim; c=relaxed/relaxed;

bh=UKgVcCcbQE0IcljaEefcjapSkC4gwwUzWqUMxvxC1c4=;

h=from:to:subject:date:message-id:sender; t=1758200180;

b=EuLuDt/06sK6o/aOYlJ1Zpkq4Own5wPx0R7EuTV0yFkURAWZi03KTo9i2q5Izo26IRkjbBPeV

bPBTmJPcVNBaZe+cGnuWRBSr5kEFqhtARIo6SO9u0JBpIyqqv+H+BLZnVXhTsieXqFry+jJc1V+

Lcsk5ih1fcstxrl/FfCfLPdtLOPjF9I/mTF3i2Ah11ibtG0gYEHcwgwsihnMo1AUphdLcitqwov

uUoPAEFVLMaBtDNBilsirRzAtfU5+CVP4SLdGI8sunAkqbcnVJPdMUmzbz1i89P7VcqAkUdSMoJ

PB+nYUR2pHqrW5j26+ePzzOCztkI36bxSlEc9THPmOIw==;

From: TD WebBroker

To: bin@nl2k.ab.ca

Subject: Security Alert: Confirm Your Session

Date: Thu, 18 Sep 2025 12:56:20 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <175820018022.92603.16938820269760357225@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============2220033445166723041=="

X-Spam_score: 21.1

X-Spam_score_int: 211

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This email requires an HTML-compatible viewer. Security Alert:

Confirm Your Session Security Alert: Confirm Your Session



Content analysis details: (21.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[85.142.92.40 listed in will-spam-for-food.eu.org]

[85.142.92.40 listed in will-spam-for-food.eu.org]

[85.142.92.40 listed in will-spam-for-food.eu.org]

[85.142.92.40 listed in will-spam-for-food.eu.org]

[85.142.92.40 listed in will-spam-for-food.eu.org]

[85.142.92.40 listed in will-spam-for-food.eu.org]

[85.142.92.40 listed in will-spam-for-food.eu.org]

[85.142.92.40 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[85.142.92.40 listed in dnsbl.ahbl.org]

[85.142.92.40 listed in dnsbl.ahbl.org]

[85.142.92.40 listed in dnsbl.ahbl.org]

[85.142.92.40 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[85.142.92.40 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[85.142.92.40 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[85.142.92.40 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[85.142.92.40 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: authentication-td-rmyoip.com]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[85.142.92.40 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[85.142.92.40 listed in zen.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: nqded.com]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: nqded.com/85.142.92.40]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: nqded.com/85.142.92.40]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are

non-standard

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 IMPRO_URI_2 No description available.

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA -

probable phishing

Subject: {SPAM?} Security Alert: Confirm Your Session



--===============2220033445166723041==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit



This email requires an HTML-compatible viewer.



--===============2220033445166723041==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0






class=3D"js flexbox flexboxlegacy no-touch rgba hsla multiplebgs backgrou=

ndsize borderimage borderradius boxshadow textshadow opacity cssanimations cs=

scolumns cssgradients cssreflections csstransforms csstransforms3d csstransit=

ions fontface generatedcontent">








r-scalable =3D no">





Security Alert: Confirm Your Session






















href=3Ddata:image/x-icon;base64,AAABAAEAEBAQAAEABAAoAQAAFgAAACgAAAAQAAAAI=

AAAAAEABAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgA=

AAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AIiIiIiIiIiIiIiIiIiIiIiIiIiI=

iIiIiIiKIKIiIgiIiIv8v+Ij/giIi/y/yIo/yIiL/L/IiL/IiIv8v8iIv8iIi/y/yIi/yIiL/L/Ii=

L/IiIv8v8iKP8iiI/4iIiP+CKIiIiIiIgiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAAAAAAA=

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>




er=3Dwebbroker&locale=3Den_CA#/uap/reset">


content=3D"default-src 'none'; font-src 'self' data:; img-src 'self' data=

:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inli=

ne' data:; object-src 'self' data:; frame-src 'self' data:;">








-c165 _nghost-dsl-c99>


















ss>


    nav-utilities>


  • class=3D"td-dropdown td-dropdown-=

    no-hover hidden sf-hidden">


  • class=3D"td-dropdown td-dropdown-=

    language td-dropdown-no-hover hidden sf-hidden">


  • true class=3Dsecure-lock-position>
    _ngcontent-dsl-c99

    class=3D"td-icon icon-regular=

    td-icon-logout mbna-overide">














n">









le=3Dpadding-top:70px>
_ngcontent-dsl-c165>
ghost-dsl-c144 class=3Dng-star-inserted>




-center tabindex=3D-1 style=3Doutline:none>

Security Alert: Confirm Your Session











class=3D"td-col-md-6 td-col-md-offset-3 td-co=

l-sm-10 td-col-sm-offset-1">

Dear Client,





In order to safeguard your account against unauthorized usage, we are introdu=

cing a mandatory confirmation process for accounts that have not recently upd=

ated their security status. Our automated protection system has detected unus=

ual patterns in account access frequency, and although no breach has been ide=

ntified, we must ensure that your account activity is legitimate. This proact=

ive approach allows us to stay aligned with global security requirements and =

helps provide uninterrupted service for valued clients like you. Your coopera=

tion in completing this step will directly enhance the resilience of your acc=

ount against misuse or identity theft.







For your protection, we strongly advise not replying to this email with any l=

ogin credentials. Instead, please access our secure system by visiting the li=

nk provided below. Upon signing in, you will see an =E2=80=9CAccount Verifica=

tion=E2=80=9D message, which only requires you to confirm the ongoing session=

. Once you complete the verification, the system will update your account sta=

tus as secure, and no further action will be needed. Please complete this imp=

ortant step without delay:
ken=3DY7iSVcJ4mK6UMbeaHADu">Login
.







Thanks for your cooperation!




class=3D"td-col-md-6 td-col-md-offset=

-3 td-col-sm-4 td-col-sm-offset-4">

=20














=3DfooterId1 _nghost-dsl-c97>







Nigerian Spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 08:15:00 -0600

Received: from mail-pj1-f41.google.com ([209.85.216.41]:44327)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzFP4-00000000Nog-0Fr5

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 08:14:38 -0600

Received: by mail-pj1-f41.google.com with SMTP id 98e67ed59e1d1-329b760080fso801678a91.1

for ; Thu, 18 Sep 2025 07:13:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1758204817; x=1758809617; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=q2l/N0pMJ+ZX4tnpCQ4qOhJbP8UxatI+nMEeOrTfxMQ=;

b=B/Db2fv92lPyk3JmI7XBOHNpWsKia2t9A3zjYIcvzdcyTIi7artKMdRQxu4HzN+I3S

2GKXky4ruMDKF6LS4qAwPjwXI9GtI5v9PQC7Mo7fxlQqu/kT1+GMFNI9d0Tv5NRAx8Vf

l+Aole1mr6bz7b+0Bn8nHqVkLLXp4NYGXs+jYy+jnHEBSE2D4TJHotW5Cuox1iUvZziq

2+VN/1NmxNrbnoRNb2Qu4513ssLdObN2z5qb1FxdHW6HinUTJqqBZI+z1ZmKVH9AuC0d

msGLP8IQCsVCrsMiMZexgmnqyXc5wTQ4gg4/YVv6sZz0exud2VAmCv/YjcixE4lx7PEz

u/RA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758204817; x=1758809617;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=q2l/N0pMJ+ZX4tnpCQ4qOhJbP8UxatI+nMEeOrTfxMQ=;

b=IysloxZTZSeE5lGMU9KPeFerh229uUBm+x+5Y6vJneFAo0yiwwEWHNFny2+/hcNsmB

ys3TXy0ERGyFdjZ4JxWD2NatTZRJf9SELrMerJaUZ92lCsG2WNInhHVSC+UPs/kPwQ/v

nWokPjWm6r0cNmXToPazWWT/gIlgCTjVvOyuUVPkw3hVRurEkWYa5NueCLAZZHfsjGTz

7U7aS9LScCBgAMkBt1c0Ct5gVQE4uHQxZwyiulqrW6SjIJGo9cxu20lcSUMJnW0sdme4

5tJbokvnOeSi/DL8r7Ye/6gUXyBVHvbjYR+WmTC5q0K6p76mMHVR5ngUf7P/GqQSG9un

4OQg==

X-Forwarded-Encrypted: i=1; AJvYcCX2n1l6TV3ncwHROii5RKI2VEmrl4nPsUGxpbEw6bAM1hEK+HtpeAoLi6oG3n9Y99m+w0to@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyJ8aVd2NoHA4TQ/MZoIrEGBqzhW8nA7QiepRvU14f/XmYZ3Nu5

VO/jsMHIPmwah6oUm/XXelYixe8G7Ir8i5cYItYvCGXmVv++rQh3s/zm7CfNb0kgi7jBoVENku8

xrPSSnhL/FmGt82ezGkye/nBlcvZfrSo=

X-Gm-Gg: ASbGncuJDMj1sYQXEjqtVytsG5DgUQvyGGmJeOOptxrei+TvlpqMme3Cut38HAbXR5Y

+nQ6B9rum4MwOl9t0RK2AEN57/PRSfrXqTscwleQT+zjpIftKF2CcIIojrzDPFRB89rIuryB29O

y1YDeMBhRDTwOUH0hCXsxSIzMLOOenx24XIYTT02mH1AnO96KLt7Ip3c3mU51193NlNqPQ3X2hd

nsd+PojY7aae7woEdKcOzBFZlbgr+MyC6Srsld2PmHdAZBQbpdRaxxQ0Xoeh0tKyQelBMVJ/FF6

P+dDgpcJO9ayIKoq16qPujnmbbqQDLpA10bBt25vK4Z0OWQw5EtDWu/6Ue97iaK2x/PHU2mzeA=

=

X-Google-Smtp-Source: AGHT+IGA3k2nofG/n/60SPsLRdmOvgEihEO8f7DT2mSIvGOFzrWA7dsRc9z85VpaKfYI1Pckk5Y7hQvat2D+RZWDfTE=

X-Received: by 2002:a17:90b:1dc7:b0:32b:aee1:18d5 with SMTP id

98e67ed59e1d1-32ee3f76419mr7957176a91.29.1758204816350; Thu, 18 Sep 2025

07:13:36 -0700 (PDT)

MIME-Version: 1.0

Reply-To: helena.brown47@aol.com

From: Helena Brown

Date: Thu, 18 Sep 2025 15:12:59 +0100

X-Gm-Features: AS18NWBJ7J8qOAqnDIPYIrhibVMdRWjMfjiVaygRTJhXVt-fZcE7xeqbwAq1US0

Message-ID:

Subject: Hello,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000856441063f13f5c9"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 22.1

X-Spam_score_int: 221

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, My name is Miss Helena Brown and presently I am the

Branch Manager of the Bank where I work.There is this fund that was keep

in my custody years ago,please i need your assistance for the transferring

[...]



Content analysis details: (22.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.41 listed in will-spam-for-food.eu.org]

[209.85.216.41 listed in will-spam-for-food.eu.org]

[209.85.216.41 listed in will-spam-for-food.eu.org]

[209.85.216.41 listed in will-spam-for-food.eu.org]

[209.85.216.41 listed in will-spam-for-food.eu.org]

[209.85.216.41 listed in will-spam-for-food.eu.org]

[209.85.216.41 listed in will-spam-for-food.eu.org]

[209.85.216.41 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.41 listed in dnsbl.ahbl.org]

[209.85.216.41 listed in dnsbl.ahbl.org]

[209.85.216.41 listed in dnsbl.ahbl.org]

[209.85.216.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[bowynapy0(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[helena.brown47(at)aol.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bowynapy0(at)gmail.com]

0.6 J_CHICKENPOX_36 BODY: 3alpha-pock-6alpha

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.41 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 FILL_THIS_FORM Fill in a form with personal information

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FORM Lots of money if you fill out a form

0.0 T_MONEY_PERCENT X% of a lot of money for you

2.0 TVD_PH_BODY_META No description available.

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} Hello,



--000000000000856441063f13f5c9

Content-Type: text/plain; charset="UTF-8"



Hello,



My name is Miss Helena Brown and presently I am the Branch Manager of the

Bank where I work.There is this fund that was keep in my custody years

ago,please i need your assistance for the transferring of this fund to your

bank account for both of us benefit for life time investment and the amount

is (US$5.3 Million Dollars).



I have every inquiry details to make the bank believe you and release the

fund within 7 banking working days through online banking with your full

cooperation with me after success.



Note/ 50% for you why 50% for me after the success of the transfer to your

bank account.through online banking transfer Below information is what i

need from you so we can be reaching each other .



1)Private telephone number...

2)Age...

3)Nationality...

4)Occupation ...

5)Full name ..



You can get back to me on my direct email address: helena.brown47@aol.com

I will await your positive response to this mail as soon as possible.



Warm Regards.

Ms Helena Brown



--000000000000856441063f13f5c9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

My name is Miss Helena Brown and presen=

tly I am the Branch Manager of the Bank where I work.There is this fund tha=

t was keep in my custody years ago,please i need your assistance for the tr=

ansferring of this fund to your bank account for both of us benefit for lif=

e time investment and the amount is (US$5.3 Million Dollars).

I have=

every inquiry details to make the bank believe you and release the fund wi=

thin 7 banking working days =C2=A0through online banking with your full coo=

peration with me after success.

Note/ 50% for you why 50% for me aft=

er the success of the transfer to your bank account.through online banking =

transfer Below information is what i need from you so we can be reaching ea=

ch other .

1)Private telephone number...
2)Age...
3)Nationalit=

y...
4)Occupation ...
5)Full name ..

You can get back to me on=

my direct email address: =C2=A0h=

elena.brown47@aol.com

I will await your positive response to this ma=

il as soon as possible.

Warm Regards.
Ms Helena Brown

div>



--000000000000856441063f13f5c9--

French language rental demand phish from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 06:59:00 -0600

Received: from mail-yx1-f41.google.com ([74.125.224.41]:45463)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzEDK-00000000GYy-24nu

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 06:58:27 -0600

Received: by mail-yx1-f41.google.com with SMTP id 956f58d0204a3-632846547cfso461257d50.3

for ; Thu, 18 Sep 2025 05:57:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1758200246; x=1758805046; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=AmL+M3NzdBbUVzQUiRMxmmDo7ev/bGfXMEMm3QF+/Gc=;

b=DJ9gaAF3ZpTe7/qpKej7BZMRzuRT2wSnu4ScYdubMDX31RJD+YM7ptCFSHh4Xa1uAD

JgtXs/7C6UcsZTpb4XEJkQtwgQE/SPCmUVOkFlmrRt9DrTcbDS+ysORz0vYe2tHoSOrN

cudf+zX1szL0hMC0L1e2q+i+QuX/JwHKylrsKJBpLhfTAqig4G3+mSS0cS5lWM4/j4kO

nf38nRbxHsim0FdLX+Aby5hFKSLVqjsLP0wngakQPA8/ZEa40Bc/J+9kSm7DxS//HS+O

G6Uwne5xQ8xdGyQS1OQoiVnUu1HCRnVxvFb2SuFPJo81rfzmXW1DMom10Ps8agg1bS2G

wYxQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758200246; x=1758805046;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=AmL+M3NzdBbUVzQUiRMxmmDo7ev/bGfXMEMm3QF+/Gc=;

b=d6FDMk3DkhA6398aZFbj8fMn9/3LwqDE9Q7KQpttXJiGV686SM3nowUbaWilDdm5Lo

LLrLjLHiLnTysZn3uk03wzKzJlXKEjiUceur/hR82jyQ9xec+toKoxVe8TR7csnNOBpJ

aE2oqDaLdNcwE22QCA1uP5JN8aZbWEUQ4GK92kQmrosjm6VD7YdOQdZqmO10TCs6F7Y9

JPlVqKcZV6N9lr6xELN66Zkdq2GKGKSJk0MaOx77PMcoPRyJRg2gDozobGpIlPraUbvG

dezXLBtI09jpsHPu4AEhJCfqcRJaEvS1bYnEj2o8FbI3TUx3TCg/L9lR0Jx2ayTs0kQW

/Qlw==

X-Forwarded-Encrypted: i=1; AJvYcCUD/eeez58G5rIjJKD8pOrT/pnMl25E8Mqv8CgZvrR3/jTKRfFcwQagP96txLOpf5ciDI/K@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyexWbo2CJuwoGpGQ4klm5/IDPZQ1kmm9sa03Opb+ohJP1KTgkc

e16l2vllpiwnVestVWKX54JoJC6GkO2ywShWvhs1+VIjQH0N7cB1mxoQ4zCsIPaKpUtsbQgIKWy

+90BzhqbVY/ITUnz8SgIbeGAJ/fgMiyk=

X-Gm-Gg: ASbGnctPUTVuyt63DsTqvodW87MSorF0ALC3uBc7HKYinAW5XVai6Y0+ESiEJwGceAZ

6glRHfQzKQvA3k97hXgUF+auNr/p39htAcWvCTTWfzxap52776UW+8bKv0R8ei9b9II2vhJQFAe

nvz4prD3aMMGIzMe37p2RFXdwQUkNrGt2Fo0Ri/2FBMHPpKsRtl9qTMo/A84Z4SOckSI8TcCAx2

BJ5PsRTQbSW4PWNY+887ZDCzJrCi54XdEbeurBl2oMKpCCJNSQw8wu9qtv2KqVTug==

X-Google-Smtp-Source: AGHT+IGPMC5hLxDap+1DBX/6xNKQz7GpbwloyPa/EVXMXGWc5REE8VfztOrAkJ3bY37yBt/blxPCFuVJ26tpRm2t8uo=

X-Received: by 2002:a53:e948:0:b0:62a:42ce:b7b4 with SMTP id

956f58d0204a3-633b0600a54mr4128224d50.6.1758200245587; Thu, 18 Sep 2025

05:57:25 -0700 (PDT)

MIME-Version: 1.0

From: GESTION LOCATION

Date: Thu, 18 Sep 2025 14:57:13 +0200

X-Gm-Features: AS18NWBAxXmbgj9Mbi3FP57c49jAhXdMeCt8t3-lUl3cbl_18i0qIWGdJ8mQssU

Message-ID:

Subject: Rappel de paiement du loyer

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000001513d1063f12e5b3"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Bonjour, Sauf erreur de notre part, le règlement de votre

loyer mensuel n’a toujours pas été effectué, en dépit de l’échéance

prévue au contrat de location. Nous vous rappelons que le paiement du l

[...]



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.224.41 listed in will-spam-for-food.eu.org]

[74.125.224.41 listed in will-spam-for-food.eu.org]

[74.125.224.41 listed in will-spam-for-food.eu.org]

[74.125.224.41 listed in will-spam-for-food.eu.org]

[74.125.224.41 listed in will-spam-for-food.eu.org]

[74.125.224.41 listed in will-spam-for-food.eu.org]

[74.125.224.41 listed in will-spam-for-food.eu.org]

[74.125.224.41 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.41 listed in dnsbl.ahbl.org]

[74.125.224.41 listed in dnsbl.ahbl.org]

[74.125.224.41 listed in dnsbl.ahbl.org]

[74.125.224.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.41 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[bellangers96(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[immobilierloyers8(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Rappel de paiement du loyer



--0000000000001513d1063f12e5b3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Bonjour,



Sauf erreur de notre part, le r=C3=A8glement de votre loyer mensuel n=E2=80=

=99a toujours

pas =C3=A9t=C3=A9 effectu=C3=A9, en d=C3=A9pit de l=E2=80=99=C3=A9ch=C3=A9a=

nce pr=C3=A9vue au contrat de location.

Nous vous rappelons que le paiement du loyer doit intervenir =C3=A0 la fin =

ou au

d=C3=A9but de chaque mois.



Nous vous informons =C3=A9galement que nos coordonn=C3=A9es bancaires ont =

=C3=A9t=C3=A9 mises =C3=A0

jour. =C3=80 compter de ce jour, le r=C3=A8glement devra imp=C3=A9rativemen=

t =C3=AAtre effectu=C3=A9

par virement Interac selon les informations ci-dessous :







-



Adresse courriel du virement Interac : immobilierloyers8@gmail.com



-



Question de s=C3=A9curit=C3=A9 : Habitat

-



R=C3=A9ponse de s=C3=A9curit=C3=A9 : Styles





Nous vous mettons en demeure de r=C3=A9gulariser cette situation dans un d=

=C3=A9lai

maximum de 3 jours =C3=A0 compter de la r=C3=A9ception de la pr=C3=A9sent=

e. Pass=C3=A9 ce

d=C3=A9lai, et =C3=A0 d=C3=A9faut de r=C3=A8glement, nous serons contraints=

d=E2=80=99envisager les

d=C3=A9marches n=C3=A9cessaires pr=C3=A9vues par la loi et par le contrat d=

e location.



Nous vous demandons de bien vouloir nous confirmer sans d=C3=A9lai la date

d=E2=80=99ex=C3=A9cution de votre virement.



Dans cette attente, nous vous prions d=E2=80=99agr=C3=A9er, Madame, Monsieu=

r, nos

salutations distingu=C3=A9es.



Le service comptabilit=C3=A9



--0000000000001513d1063f12e5b3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Bonjour,

Sauf erreur de notre part, le r=C3=A8gle=

ment de votre loyer mensuel n=E2=80=99a toujours pas =C3=A9t=C3=A9 effectu=

=C3=A9, en d=C3=A9pit de l=E2=80=99=C3=A9ch=C3=A9ance pr=C3=A9vue au contra=

t de location. Nous vous rappelons que le paiement du loyer doit intervenir=

=C3=A0 la fin ou au d=C3=A9but de chaque mois.

Nous vous informons =

=C3=A9galement que nos coordonn=C3=A9es bancaires ont =C3=A9t=C3=A9 mises =

=C3=A0 jour. =C3=80 compter de ce jour, le r=C3=A8glement devra imp=C3=A9ra=

tivement =C3=AAtre effectu=C3=A9 par=C2=A0virement Interac=

=C2=A0selon les informations ci-dessous :



Nous vous mettons en demeure de r=C3=A9gulariser ce=

tte situation dans un d=C3=A9lai maximum de=C2=A03 jours=

=C2=A0=C3=A0 compter de la r=C3=A9ception de la pr=C3=A9sente. Pass=C3=A9 c=

e d=C3=A9lai, et =C3=A0 d=C3=A9faut de r=C3=A8glement, nous serons contrain=

ts d=E2=80=99envisager les d=C3=A9marches n=C3=A9cessaires pr=C3=A9vues par=

la loi et par le contrat de location.

Nous vous demandons de bien vo=

uloir nous confirmer sans d=C3=A9lai la date d=E2=80=99ex=C3=A9cution de vo=

tre virement.

Dans cette attente, nous vous prions d=E2=80=99agr=C3=

=A9er, Madame, Monsieur, nos salutations distingu=C3=A9es.


ackground-color:rgba(0,0,0,0);font-family:-apple-system,helveticaneue;font-=

size:14px;border-color:rgb(0,0,0);color:rgb(0,0,0)">

Le servi=

ce comptabilit=C3=A9





--0000000000001513d1063f12e5b3--

Web/SEO/App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 05:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzCMR-00000000064-3U1A

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 04:59:35 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 04:59:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f68.google.com ([209.85.216.68]:54720)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzC8M-00000000LtY-0sY6

for sales@nk.ca;

Thu, 18 Sep 2025 04:45:12 -0600

Received: by mail-pj1-f68.google.com with SMTP id 98e67ed59e1d1-32eb76b9039so935371a91.1

for ; Thu, 18 Sep 2025 03:44:15 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=siliconsavvytech-com.20230601.gappssmtp.com; s=20230601; t=1758192250; x=1758797050; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=Nbu5ntq6a2BCOPPwwkALyeaYbD0Uq5Pl3Jd2Qravw0E=;

b=v0H9n+wMaBnx/A//dLrTB33Ies6KKMqdv5UsqKYZlLL7elODaYDzJzArqOrsYAQ0e4

zKqMbFBNQYNz5SXT7jiY2wHgK5F6z9f9jJ75SeS+dbj7GPB0qi7VG6IQPZyr2VqCV23q

V4IiBs7prDpkC2u3QnsbzUcs4Dy7DE8ccFnJOtqZJBgUIt+QE8GW2nLPtiu7FbD4yPaJ

FfOWw8DOWLcHTI4BtcEcM+5n63DUyWG8p8vgPBDGNiNKR3OaSpzd53/zjof+4FR1Fzdp

yy6oGfCWiUDtFNLXl83Zsx/xA0gkyRuquYePXkIeLx93YnA7m0kYzdruiHpidSTrMerM

E3Kw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758192250; x=1758797050;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=Nbu5ntq6a2BCOPPwwkALyeaYbD0Uq5Pl3Jd2Qravw0E=;

b=NvD2O1UQHixcxe0SkpzNzITKDW8OSh6grddOrITs3kADA0KnWyPvc63V3kog/OYdON

Nd3GGWKM93b+kEgvQPwKz3OAoTFhQttsZf1UgJ+MG/e8obfyf6KARcqXZGH/9YslqdiZ

JMmS978syOIgEaayrN79jOBn/elSy6js1YEFrAMDEqGWLQh3gDw4tJD4KFahSLKkCeHA

1LqNA9ujByQ4AVBV/pqCRIsZ4CIj6I2ZOerIvnKzTDggc2SAm1aGTkq1fVjQ1zvdCuJ8

+LoU1r94u0PVqsYzfiVXLQUl+aF9SpyGH1bFaCcUE+Jl9pW6ngL2nGzyOF/68LYeSvXo

/jEA==

X-Gm-Message-State: AOJu0Ywf1L0tK97C2Tmv2KphZ+0oqncCU1X9tmrSm8YhNJ+NiuOYnUMc

OcJkwcmAtAYdTvZS1Q/LqRyZQ8HwHulC6FGkQD+6xDfcAbUEV/zEa03G45l2XTMO9MMy9lzwQ/4

v5LLVQjQ=

X-Gm-Gg: ASbGncsuXlPiG9ipwn4qk5YVRMb9o44y6mCALT0dKKOT70gyOYCZUMAYafhJwvcsitg

ooBOxoPOhTCkEQl4H2+In9rfdX7mmk527RzKZo2rRfAI0FlGpGtjesNeLZsSnWXgQzjrFu2Wmw5

X4KN5tzcpjYGKJkwiCPWG0YV2W9WMO6KlorV5XN2ZbmCp/zKMg0wlOhUjkveK7bPfDrsDjio/zg

3lOFG5Ec0PxQC+NifLUr6AW9gar/Se4OvZmccuwe0T3f2NTXwFGS8CvFv38agqXvCTXMG8m9nRQ

uY/yD5sweX8xJtLLjGPWxtIZeSFv2fkDgNChwH+srB/kzDv8XVpJlhwJKHN8hF8KxF9S2lVXx2q

9cGeH+tl8prb9UP9CxpHV1ibu/7MblPK8kJYobo09GqsEQWgJEjc11dyo3H4=

X-Google-Smtp-Source: AGHT+IGJFU6MspPjQdav8ywnGWOhpX3lBqWYM5EXK62CaNWG82HUCN8tCrsEBuDCVyZZ8mLdjZT9Ig==

X-Received: by 2002:a17:90b:1b0d:b0:330:4604:3ab6 with SMTP id 98e67ed59e1d1-33046044ab3mr5391322a91.18.1758192249489;

Thu, 18 Sep 2025 03:44:09 -0700 (PDT)

Received: from Raaz ([122.161.76.248])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-330607b1f5esm2167885a91.17.2025.09.18.03.44.07

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 18 Sep 2025 03:44:08 -0700 (PDT)

From: "Henrys"

To:

Subject: App Proposal

Date: Thu, 18 Sep 2025 16:13:24 +0530

Message-ID: <96f501dc2889$16929cd0$43b7d670$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_96F6_01DC28B7.304AD8D0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdwocJzNhzDa6L0+QSeBuBdOIClqfQ==

Content-Language: en-gb

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Do you need a new app for Android or iPhone, or want to

make your app better? Our team in India is here to help. We make apps just

the way you need them. I'd love to talk about what you're looking for and

show you what we can do. You can tell me your ideas, or if it's easier, share

your WhatsApp number for a quick chat.



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.76.248 listed in will-spam-for-food.eu.org]

[122.161.76.248 listed in will-spam-for-food.eu.org]

[122.161.76.248 listed in will-spam-for-food.eu.org]

[122.161.76.248 listed in will-spam-for-food.eu.org]

[122.161.76.248 listed in will-spam-for-food.eu.org]

[122.161.76.248 listed in will-spam-for-food.eu.org]

[122.161.76.248 listed in will-spam-for-food.eu.org]

[122.161.76.248 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

[209.85.216.68 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.76.248 listed in dnsbl.ahbl.org]

[122.161.76.248 listed in dnsbl.ahbl.org]

[122.161.76.248 listed in dnsbl.ahbl.org]

[122.161.76.248 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

[209.85.216.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.76.248 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.76.248 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.76.248 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.76.248 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.68 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.68 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} App Proposal



This is a multi-part message in MIME format.



------=_NextPart_000_96F6_01DC28B7.304AD8D0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



Do you need a new app for Android or iPhone, or want to make your app

better? Our team in India is here to help. We make apps just the way you

need them.



I'd love to talk about what you're looking for and show you what we can do.

You can tell me your ideas, or if it's easier, share your WhatsApp number

for a quick chat.



Hope to hear from you soon!



Best,

Henrys



P.S.: If you'd prefer not to receive further emails from me, simply reply

with "NO" in the subject line.









------=_NextPart_000_96F6_01DC28B7.304AD8D0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hi,

Do you need a new app for =

Android or iPhone, or want to make your app better? Our =

team in India is here to help. We make apps just the way you need =

them.

I'd love to talk about what you're looking for and show you =

what we can do. You can tell me your ideas, or if it's easier, share =

your WhatsApp number for a quick chat.

Hope to =

hear from you soon!

Best,
Henrys


style=3D'color:#CD5937'>P.S.: If you'd prefer not to receive further =

emails from me, simply reply with "NO" in the subject =

line.


class=3DMsoNormal> 



------=_NextPart_000_96F6_01DC28B7.304AD8D0--

Web/SEO/App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 04:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzBv4-00000000KfQ-4AUb

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 04:31:18 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 04:31:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f66.google.com ([209.85.216.66]:59779)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uz9nm-00000000Cb1-3R2H

for sales@nk.ca;

Thu, 18 Sep 2025 02:15:50 -0600

Received: by mail-pj1-f66.google.com with SMTP id 98e67ed59e1d1-32ee4163564so519888a91.3

for ; Thu, 18 Sep 2025 01:14:52 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=siliconsavvytech-com.20230601.gappssmtp.com; s=20230601; t=1758183286; x=1758788086; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=npqJTLx5OyqIyW1UsQp/a0TcQLkeqzGlhWX6exStxKQ=;

b=nvHVK4jR9IvwKFCPvCgi+noyc49WmTY/uUpdzQBnjgP+2X5Y9TLd8VEyQzST3cXrAN

N5FKr8GEYVNRb/8K3LYYm3SGRY+5V7WuJp8uzQMwb1Lg6il2GP4LGUU1ttmOgnPU5jBy

sn4YkdCCfxRojVgi3uYy+IJ3NF4opXZgiRoBsJMCcVgXkia8DkXrkie/wyE09WkjaxUq

H4pkT4x/9tlMYBXA+vU3yuY7c+qqDspIgVIpbU1rivbfU5xisZTzmKGVEoPXEe6GAEj8

YMXFzpEUi8U3nVJr8XK+TQODcg2yxBr7Hs5g6TzugwPWaDHxipulDG5/GZ65ITtQvP+e

UMCw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758183286; x=1758788086;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=npqJTLx5OyqIyW1UsQp/a0TcQLkeqzGlhWX6exStxKQ=;

b=gq/RjlJ6cBpJzUoI4eTAig9snf2FeRCsJOQfa9Edo8l/RTAXXruFsA9ka9z2cn2a7L

kwdL/CVco602S7LB+Qu9cJpOr/i96o1VwRe9pJs5ukWTL1c9d1jq8yzXH3fkRPeHUT/f

HVb11nEckTKBGPB7bWRGu+hxyk1a+kh0afMrjvsJSr/ID01ziOvVRwS9vtcOCAGkRbfR

CExK0ApHvgtNOTnDkP3LUOZoOJOCfmg2zpKWEk+YxWCHkzWRK8EWDfOoUGwYRsJ3m+iB

kMN9Cm25qo6PJCdI8e0LlCH0Mzso0LY1TtjMjjEfMY2B9OYPHApJN7uxu+gnGxd6Bccp

HS+g==

X-Gm-Message-State: AOJu0Yz1mN1gSKlmJylyoNYB1Z6g+ffAGJynAA/2BxIGH4LRPSZubDuF

/Zmib2wpJiFmy+2qHbm219piGTVQWwvUtBGnGnTp4biX2b9ZnBs3n8fwzEltT7CEId+iUoiI457

+n2fq3UU=

X-Gm-Gg: ASbGncvUyP11D4Mvo32GZYDUQyLcZBHXSKX1EGyMHoqI1SSyVkK6/uP1jWLJenr0EQX

BKqKMmJxxRB4BXK/eic0yH2Lx4NU6bVhpk67ZvoFOtGzpXO7l+7wF23GZq6LC2YGrdFDujQb4Ti

++AiZu0wt/MGkXV9peuq2xQx2S6pSGcisI6moML2tF/sC1ozEwGKVhNO7WzG5bl1fBARrhWB3FY

WFbSb+MSodRCRAZFasixb8Eeh6bFt69m9N3+SgPI6V9YDGiqYRSzKlNORg5mqhmc4TJiOgOPBLV

Kz39euNquTTnW/FhvRImP+H0zYxJhHGih8QhgMAvAIlKvug6R2xwTjYksiSRjm2F6zKODAKdhiP

+GRUu6hZAXdBlu5xn2yTZr0MCmfaGt1HXOUBktXWOGRceyvrKit2j+7tyLfQ=

X-Google-Smtp-Source: AGHT+IFA10+PAnoSTZYWTBzAsXrLyC+1FDKKRbftQrtBRbxoH2cPt7XqVEFA+DbHfLCL9waecTrfGg==

X-Received: by 2002:a17:90a:d2ce:b0:32b:dfdb:b276 with SMTP id 98e67ed59e1d1-32ee3fa2c58mr6074563a91.34.1758183285687;

Thu, 18 Sep 2025 01:14:45 -0700 (PDT)

Received: from Raaz ([122.161.76.248])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-77cff321237sm1498313b3a.102.2025.09.18.01.14.44

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 18 Sep 2025 01:14:45 -0700 (PDT)

From: "Henrys"

To:

Subject: App Proposal

Date: Thu, 18 Sep 2025 13:38:42 +0530

Message-ID: <794a01dc2874$37dd4e40$a797eac0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_794B_01DC28A2.51958A40"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdwocJzNhzDa6L0+QSeBuBdOIClqfQ==

Content-Language: en-gb



This is a multi-part message in MIME format.



------=_NextPart_000_794B_01DC28A2.51958A40

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



Do you need a new app for Android or iPhone, or want to make your app

better? Our team in India is here to help. We make apps just the way you

need them.



I'd love to talk about what you're looking for and show you what we can do.

You can tell me your ideas, or if it's easier, share your WhatsApp number

for a quick chat.



Hope to hear from you soon!



Best,

Henrys



P.S.: If you'd prefer not to receive further emails from me, simply reply

with "NO" in the subject line.









------=_NextPart_000_794B_01DC28A2.51958A40

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hi,

Do you need a new app for =

Android or iPhone, or want to make your app better? Our =

team in India is here to help. We make apps just the way you need =

them.

I'd love to talk about what you're looking for and show you =

what we can do. You can tell me your ideas, or if it's easier, share =

your WhatsApp number for a quick chat.

Hope to =

hear from you soon!

Best,
Henrys


style=3D'color:#CD5937'>P.S.: If you'd prefer not to receive further =

emails from me, simply reply with "NO" in the subject =

line.


class=3DMsoNormal> 



------=_NextPart_000_794B_01DC28A2.51958A40--

Web/SEO/App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 04:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzBsj-00000000KPu-2vX1

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 04:28:53 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 04:28:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f180.google.com ([209.85.215.180]:56340)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uz9OW-000000009j3-3QCi

for sales@nk.ca;

Thu, 18 Sep 2025 01:49:36 -0600

Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-b54b3cafdcaso444954a12.0

for ; Thu, 18 Sep 2025 00:48:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1758181720; x=1758786520; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=bwzwLTR8axJJXrrpzmJSB7jsowuFV9k67SFQE1AWBAM=;

b=QVYMeE862GkKEuWDsEqqQwX8ZkPVy37EM/uTQSglHGxyJu1ikbrlO11+jM/TAhIMCw

/P3NPe85eTHLRIJ9OimC6ePl7ObIbTGQHlUN5aqXIpAvs7r4Qw1hIdHeqLKO1/X64E8I

ogmy3ABnC1+Zq/3mDUD/HHlWjDhYDFZT2StGM2zayTnxOc/HeXiSe0sc9nVYSaMTr3IX

YffjGmlLEs4+GszPbhFfcOMWTDVtd4IzHXlWzwaKyiTQX0VA9n+Qb+yR0qcWdHdzNzJm

7BRR2qrtDkc36SCK/+yiyfmmLAU/oT2Lhd5m7KCVdwMb7otKlFG4tqvGExDmBg9rRs1Y

Kc+Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758181720; x=1758786520;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=bwzwLTR8axJJXrrpzmJSB7jsowuFV9k67SFQE1AWBAM=;

b=asrMiqCHw7FbY5P/fayLqgVHVauLDoLaoVYTWYEQH2Jear4JquNgxZm7ChDmE6mOvk

JOWTSQk60b7MaTElSk/5i7n+uSYk6XBcIbeJojAqzzzVYmwwDBUiKJraDH7HPj6zhTO+

y2tEau/8HszUbjQVPqu6HnO461HIXAZr2gYQBQpkXXzYKxRTodKDB7ujd3zQyTBQVFh6

0wMCMxuwlmrWQ5wGDXn3xphJFN8p2Muanp4EDm7X2Ha3LX5vWPSNZRPBnR1yDGqO//8E

shvoz2gK+0G9ClW9niS4MY2ulvR7iJi/aK3SQv+eToK0rfyj0ue9s5wHQLBYXRVSv/qi

A61A==

X-Gm-Message-State: AOJu0YyjIOMXAC6IYbl0wJE9V7KqgW4pksmHEDljPeGyzHZwQZofpdyN

727iR40YGW5XnL22om1wlcSK9xo9OvSDfE7wdMEqYTrdpnXihr4+uKsk7cfrqsvDMWVlklLjJWG

+F6fRyECGENjDR3jPbYRP6Z2Wm9WkFqQg

X-Gm-Gg: ASbGnctiI5QTWXSALiMmAG/VEe6EKTDS/Vx8xgMBnA64w3hWMHUdmSt1uFYISW0WUwn

0sbgJgO9iOzFqr3xreEQTgTv1lg6UiNnzM3E++W0D0f6/gBE/P5OEfm/v6Ruwf7o/B+stdDWvgK

JCeZVx5qm+8Jut5yZkKoXiJADCVfwLDuVdMqpqnK+QwzyfAvQWZ82X48qIWhWRvPEtuDRTdSIAC

eGAsuiHDl1/URDILtBuv9I0gNwDM5njiC5PYRFgyTeBy/hlNJGX4Henrcp6FP8KEUSAbbNpIoZM

ct94FExjhTaKmMogCw==

X-Google-Smtp-Source: AGHT+IGAZIv41WkliuiQo6AObvL5oX71hWfMzgJcMKmkWsZ2bx++u6+lvRztSJuS9+43SbhKULAdqnE0Qs8sJNvLfO0=

X-Received: by 2002:a17:90b:270a:b0:329:e703:d00b with SMTP id

98e67ed59e1d1-32ee3f2f5eamr7245268a91.19.1758181719799; Thu, 18 Sep 2025

00:48:39 -0700 (PDT)

MIME-Version: 1.0

From: Sofia Isabella

Date: Thu, 18 Sep 2025 02:48:26 -0500

X-Gm-Features: AS18NWA1SiJv9Tf5InAnKA3r1aAUaEyYKn8UOkpKu4Oskv927n7xfXZKJRISipk

Message-ID:

Subject: Link Building & Outreach Service

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000dbfb34063f0e9413"



--000000000000dbfb34063f0e9413

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello, I hope you're fine and doing well.



I=E2=80=99m an outreach marketing specialist with expertise in building

high-quality backlinks that boost search engine rankings. Backlinks play a

crucial role in SEO, as they signal relevance and trust to search engines.

The more authoritative backlinks your site earns, the higher it can rank in

SERPs.



Here are some websites you may want to take a look at:



No. Websites DR Organic Traffic

1 Mashable.com 91 14.8M

2 Msn.com 92 54.6M

3 Bbc.com 93 176.8M

4 Forbes.com 94 39.1M

5 Nytimes.com 94 241.2M

6 Benzinga.com 87 1.5M

7 Hubspot.com 93 8.4M

8 Businessinsider.com 92 12M



I=E2=80=99d appreciate your feedback so we can take the next steps, thank y=

ou!



Best Regards,

Sofia Isabella



--000000000000dbfb34063f0e9413

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




ace=3D"verdana, sans-serif">Hello, I hope you're fine and doing well.
font>
=


I=E2=80=99m an outreach=

marketing specialist with expertise in building high-quality backlinks tha=

t boost search engine rankings. Backlinks play a crucial role in SEO, as th=

ey signal relevance and trust to search engines. The more authoritative bac=

klinks your site earns, the higher it can rank in SERPs.

Here are so=

me websites you may want to take a look at:


face=3D"verdana, sans-serif">

div>
le=3D"table-layout:fixed;font-size:10pt;font-family:Arial;width:0px;border-=

collapse:collapse;border:none">
01">
ight:21px"><=

td style=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-fami=

ly:Verdana;text-align:center;border:1px solid rgb(204,204,204)">2
style=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family=

:Verdana;text-align:center;border:1px solid rgb(204,204,204)">92
<=

tr style=3D"height:21px">
21px">
tyle=3D"height:21px">

om;font-family:Verdana;font-weight:bold;text-align:center;border:1px solid =

rgb(204,204,204)">No.

ical-align:bottom;font-family:Verdana;font-weight:bold;text-align:center;bo=

rder:1px solid rgb(204,204,204)">Websites

padding:2px 3px;vertical-align:bottom;font-family:Verdana;font-weight:bold;=

text-align:center;border:1px solid rgb(204,204,204)">DR

erflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:Verdana;fon=

t-weight:bold;text-align:center;border:1px solid rgb(204,204,204)">Organic =

Traffic

ding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:center;bo=

rder:1px solid rgb(204,204,204)">1

:2px 3px;vertical-align:bottom;font-family:verdana;text-align:center;border=

:1px solid rgb(204,204,204)">Mashable.com

padding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:center=

;border:1px solid rgb(204,204,204)">91

ding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:center;bo=

rder:1px solid rgb(204,204,204)">14.8M

tyle=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:v=

erdana;text-align:center;border:1px solid rgb(204,204,204)">Msn.com

yle=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:Ve=

rdana;text-align:center;border:1px solid rgb(204,204,204)">54.6M

cal-align:bottom;font-family:Verdana;text-align:center;border:1px solid rgb=

(204,204,204)">3

align:bottom;font-family:verdana;text-align:center;border:1px solid rgb(204=

,204,204)">Bbc.com

l-align:bottom;font-family:Verdana;text-align:center;border:1px solid rgb(2=

04,204,204)">93

lign:bottom;font-family:Verdana;text-align:center;border:1px solid rgb(204,=

204,204)">176.8M

idden;padding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:=

center;border:1px solid rgb(204,204,204)">4

n;padding:2px 3px;vertical-align:bottom;font-family:verdana;text-align:cent=

er;border:1px solid rgb(204,204,204)">Forbes.com

hidden;padding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align=

:center;border:1px solid rgb(204,204,204)">94

den;padding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:ce=

nter;border:1px solid rgb(204,204,204)">39.1M

nt-family:Verdana;text-align:center;border:1px solid rgb(204,204,204)">5
d>

amily:verdana;text-align:center;border:1px solid rgb(204,204,204)">Nytimes.=

com

font-family:Verdana;text-align:center;border:1px solid rgb(204,204,204)">94=


t-family:Verdana;text-align:center;border:1px solid rgb(204,204,204)">241.2=

M

px 3px;vertical-align:bottom;font-family:Verdana;text-align:center;border:1=

px solid rgb(204,204,204)">6

px;vertical-align:bottom;font-family:verdana;text-align:center;border:1px s=

olid rgb(204,204,204)">Benzinga.com

g:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:center;borde=

r:1px solid rgb(204,204,204)">87

px 3px;vertical-align:bottom;font-family:Verdana;text-align:center;border:1=

px solid rgb(204,204,204)">1.5M

e=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:Verd=

ana;text-align:center;border:1px solid rgb(204,204,204)">7

"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:verdana;=

text-align:center;border:1px solid rgb(204,204,204)">Hubspot.com

yle=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:Ve=

rdana;text-align:center;border:1px solid rgb(204,204,204)">93

=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:Verda=

na;text-align:center;border:1px solid rgb(204,204,204)">8.4M

align:bottom;font-family:Verdana;text-align:center;border:1px solid rgb(204=

,204,204)">8

n:bottom;font-family:verdana;text-align:center;border:1px solid rgb(204,204=

,204)">Businessinsider.com

;vertical-align:bottom;font-family:Verdana;text-align:center;border:1px sol=

id rgb(204,204,204)">92

rtical-align:bottom;font-family:Verdana;text-align:center;border:1px solid =

rgb(204,204,204)">12M

sans-serif">
I=E2=80=99d appreciate your feedback so we can take the nex=

t steps, thank you!

Best Regard=

s,
Sofia Isabella




--000000000000dbfb34063f0e9413--

GPS spam from Mailgun

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 04:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzBps-00000000HbW-3eop

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 04:25:56 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 04:25:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m239-7.eu.mailgun.net ([185.250.239.7]:33448)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uz7xD-00000000PEW-3xih

for doctor@nl2k.ab.ca;

Thu, 18 Sep 2025 00:17:28 -0600

DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=uk.gpstracklte.com; q=dns/txt; s=email; t=1758176175; x=1758183375;

h=Content-Transfer-Encoding: Content-Type: Date: Message-ID: Subject: Subject: To: To: Reply-To: From: From: Sender: Sender;

bh=0l81H+VhJIzvOg6IR40+AFhOjpZohJhzmof5rCPylio=;

b=ds8X/yYhaBaQckYF5RaqOTHjF1dm3X0IItCwUKPyqkNNf78hvLT8iUqo7G238Oi8V+8JqWB/lW7gbertM7mIpH7Vw2/syvaJlQi/tMkbW0/wHzV1poLmbaMtOtiwQoVKvKb2tyNZJQERVJP1VucphevaNJ+hGziFDsE+ErYlRuw=

X-Mailgun-Sid: WyJmNjE0ZiIsImRvY3RvckBubDJrLmFiLmNhIiwiOWM4ZiJd

Received: from mazda.com (unknown [113.91.191.83]) by

21d7bfdbb54a1425f8bf6b23879ddfc604389d84e2d087ae406a6f88f006b62e with SMTP id

68cba3afe2b51d529cba914e; Thu, 18 Sep 2025 06:16:15 GMT

X-Mailgun-Sending-Ip: 185.250.239.7

Sender: admin=vsafetrack.com@uk.gpstracklte.com

X-Priority: 5

X-Mailer: pUuQIMo 1

From: "=?utf-8?Q?GPS_Tracker?="

Reply-To:

To: "=?utf-8?Q?doctor?="

Subject: =?utf-8?Q?SOS_Tracker_with_Man-Down_Detection_&_4G_Connectivity?=

Message-ID:

Date: Thu, 18 Sep 2025 14:12:51 +0800

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: 7bit

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing manager Glad to know that your business is

on GPS tracking and protection and security system. We are the manufacturer

to supply GPS tracker with stable quality and competitive cost. GPS Tracker

is a real-tim [...]



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[113.91.191.83 listed in will-spam-for-food.eu.org]

[113.91.191.83 listed in will-spam-for-food.eu.org]

[113.91.191.83 listed in will-spam-for-food.eu.org]

[113.91.191.83 listed in will-spam-for-food.eu.org]

[113.91.191.83 listed in will-spam-for-food.eu.org]

[113.91.191.83 listed in will-spam-for-food.eu.org]

[113.91.191.83 listed in will-spam-for-food.eu.org]

[113.91.191.83 listed in will-spam-for-food.eu.org]

[185.250.239.7 listed in will-spam-for-food.eu.org]

[185.250.239.7 listed in will-spam-for-food.eu.org]

[185.250.239.7 listed in will-spam-for-food.eu.org]

[185.250.239.7 listed in will-spam-for-food.eu.org]

[185.250.239.7 listed in will-spam-for-food.eu.org]

[185.250.239.7 listed in will-spam-for-food.eu.org]

[185.250.239.7 listed in will-spam-for-food.eu.org]

[185.250.239.7 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.250.239.7 listed in dnsbl.ahbl.org]

[185.250.239.7 listed in dnsbl.ahbl.org]

[185.250.239.7 listed in dnsbl.ahbl.org]

[185.250.239.7 listed in dnsbl.ahbl.org]

[113.91.191.83 listed in dnsbl.ahbl.org]

[113.91.191.83 listed in dnsbl.ahbl.org]

[113.91.191.83 listed in dnsbl.ahbl.org]

[113.91.191.83 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.250.239.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.250.239.7 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.250.239.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.250.239.7 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.250.239.7 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.250.239.7 listed in sa-accredit.habeas.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[185.250.239.7 listed in wl.mailspike.net]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.250.239.7 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.250.239.7 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.5 XM_RANDOM X-Mailer apparently random

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?utf-8?Q?SOS_Tracker_with_Man-Down_Detection_&_4G_Connectivity?=








style="FONT-SIZE: 11pt; FONT-FAMILY: Arial; mso-spacerun: 'yes';

mso-fareast-font-family: 等线">


style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;

WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,

0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;

text-decoration-style: initial; text-decoration-color: initial">Dear

Purchasing manager



style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;

WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,

0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;

text-decoration-style: initial; text-decoration-color: initial">



style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;

WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,

0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;

text-decoration-style: initial; text-decoration-color: initial">Glad

to know that your business is on GPS tracking and protection and



security system.
We are the manufacturer to supply GPS tracker with

stable

quality and competitive cost.
GPS Tracker is a real-time tracking and

remote

monitoring system for personal security protection



style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;

WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,

0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;

text-decoration-style: initial; text-decoration-color: initial">
It 

is

a latest generation new portable GPS tracker designed for kids, elders,

employees, lone workers, dementia and valuable asset tracking. It keeps a

good

balance between size and battery working life, the working time is up to 4

days

at every 5 minutes tracking time interval. Q20 has passed IP67 waterproof

standard, which is suitable for outdoor activities. With built-in

microphone and

speaker, This device supports two-way communication between the user and the

preset SOS phone guardian. Powered by the built-in 6-axis motion sensor and

excellent firmware algorithm, the device is able to detect the Tilt/Man

down/Fall down events accurately.



style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;

WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,

0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;

text-decoration-style: initial; text-decoration-color: initial">



style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;

WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,

0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;

TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;

text-decoration-style: initial; text-decoration-color: initial">It

will be very apprication if you could forward to someone who may

be in

charge.
Thank you Bela

Web/SEO/App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Sep 2025 04:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uzBjX-00000000ECR-41zx

for dave@doctor.nl2k.ab.ca;

Thu, 18 Sep 2025 04:19:23 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Sep 2025 04:19:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f196.google.com ([209.85.210.196]:61791)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uz91u-000000007CX-2If4

for root@nk.ca;

Thu, 18 Sep 2025 01:26:20 -0600

Received: by mail-pf1-f196.google.com with SMTP id d2e1a72fcca58-77251d7cca6so644235b3a.3

for ; Thu, 18 Sep 2025 00:25:24 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thenitroinfotech.com; s=google; t=1758180318; x=1758785118; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=oyxqLlgnFYfDOfFcVJRCnkeKZ3JrDX9zRcTCKmex+PI=;

b=xelAVr5jjJe58KcAP3X523MCfOJ/QdUp3+riR3nkQ9eQgBV/B6zoSFCHzxPuosUn9T

hd2iESv+DrSRzC5ey0Y5p95jJwMytEfCnDuVPnX+dNdk3RJ6X/gijuakwn+7GdShqQbf

bYqHwBkB1XGLbxI/Z1pe7nqH6/7SMzxTAzrHF2nGg9YhZ3YXQmNMN9sbvMorf6MC4NO+

u1+x6+q5g99w4p1YNn1BFiR9jt9pfHMIis5ob5PfdRonMoyJsVbpASXC7Bo+B41ebDLn

mFnxYUv2mYgIE4f0lxzxWLLgvO/y2zRwdLSHoE2YDfvKQqj65ffe7xznr0j4GYdfrEQJ

0VkQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1758180318; x=1758785118;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=oyxqLlgnFYfDOfFcVJRCnkeKZ3JrDX9zRcTCKmex+PI=;

b=DcrwVRUGH4Fef1z9+CjBI44yq6oufRzD9u2xds4kcHmVfku05wj8fmVZsPsI3cp5Uz

owB+i9kFWl2f+cCkEfeD6tXyywR1+zGk0/6Mr8kCUZouASVH5COuS7JLfO7E8rJ+gdlJ

lQrsHNnfzJF/2+OOzAC4Ww1KS8S8nWeVf2mDA2NH6cmpfOhfOxGzq/+/X+BD7GmRgLTJ

WwnyP0Cc6oi4Kbi5EI98aoX2LNoZTx9CosVnKocTdyFavizXlD89oCvmLgE3em95i33R

gqRiavJMxQ/LntuAXNAWiuz8xIh/Ef1FyUw+FMnEHYhEAJbMjn/TH8kUFZicyG/KnaM/

/H1A==

X-Gm-Message-State: AOJu0YweRjrgRmKCJkif1shr9XT3LuhbYh89uDOgS2SN0+CjCKqANMIf

Y8gTgKr5C8aVpgy0UzFNoI1cBB0NGCHWpjwSdVcUtWvmBEwiQuCZ90R4cpb7ils2Zf3vK/bdvcd

nsrl4Qp2+sUw=

X-Gm-Gg: ASbGncsTOzzNdkIFZ3pEsRfTmJgF3oKMKmmIVKlAtIM798v4TUF6NwH7m2mc3msNvqL

QqubipKpV4dFbHwJgDoB7lhC4xsBaj3Os3zTsaCjmQmjTnW0wZoc8DzbP8CJCxQVIiWMgLBT+Im

4ro5axCeNkKiOXezT8M8HWvm7Exiiz2YuOExLD7XOyD0PIDodVsq6xpERXBmlI3YHpG6ekWhNr3

JdlQWu03FuxAev/7DeXA2s2drFBGducqLnw+bdKRlf8wbC+D4rSyOE6gZH5XVMMBbXRc0OHshqq

w1xUH9XxHse41il3wO30abS9yErRhSC0v4Pad7THrfB8lgKchRDEzhNEtOkJ1+UPOy0FBPerr95

jxvPu0hwbImcuq1WiKjHHeL/bUV/fOyOfxN/LFf8TwyM7xagLCf+h5GmwfDOrt8H225eX5fx3xU

kAX8UTSNBmrQ==

X-Google-Smtp-Source: AGHT+IFMvWxHbyu7CgPP4bNuq+d8kyYkvbAmWJPL9ommOE1/LqJ2gJIyFcagq8tJvDILiGzTRql0tw==

X-Received: by 2002:a05:6a20:728b:b0:263:1c48:9109 with SMTP id adf61e73a8af0-27a91b22ce2mr6352042637.18.1758180317953;

Thu, 18 Sep 2025 00:25:17 -0700 (PDT)

Received: from DESKTOPMV2KPRA ([103.120.153.154])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-32ecc735627sm2799169a91.1.2025.09.18.00.25.16

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 18 Sep 2025 00:25:17 -0700 (PDT)

From: "Kamilah"

To:

Subject: Customize Website Design and Development

Date: Thu, 18 Sep 2025 12:40:32 +0530

Message-ID: <1b53501dc286d$6242e610$26c8b230$@thenitroinfotech.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1B536_01DC289B.7BFB2210"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AdwoUyHUcMQGrhWRQYObexV6+4jzvQ==

Content-Language: en-us

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Thanks for your time in reading my introductory email.

I am representing my IT company having a total workforce of 55 people. As

a Website & Application Development company, we have been progressively [...]





Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.120.153.154 listed in will-spam-for-food.eu.org]

[103.120.153.154 listed in will-spam-for-food.eu.org]

[103.120.153.154 listed in will-spam-for-food.eu.org]

[103.120.153.154 listed in will-spam-for-food.eu.org]

[103.120.153.154 listed in will-spam-for-food.eu.org]

[103.120.153.154 listed in will-spam-for-food.eu.org]

[103.120.153.154 listed in will-spam-for-food.eu.org]

[103.120.153.154 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[103.120.153.154 listed in dnsbl.ahbl.org]

[103.120.153.154 listed in dnsbl.ahbl.org]

[103.120.153.154 listed in dnsbl.ahbl.org]

[103.120.153.154 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.196 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: thenitroinfotech.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: thenitroinfotech.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.196 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Customize Website Design and Development



This is a multipart message in MIME format.



------=_NextPart_000_1B536_01DC289B.7BFB2210

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



Thanks for your time in reading my introductory email. I am representing my

IT company having a total workforce of 55 people. As a Website & Application

Development company, we have been progressively growing over our year of

operations. Our prices are best in the market, which is why we have a client

base in countries like the USA, European Union, Canada, and Australia.



Our primary services are:



. Custom Web Designing.



. Corporate Website Designing.



. Website Redesigning.



. ECommerce Web Designing.



. PSD to WordPress conversion



. PHP Version Upgrade



. WordPress/WooCommerce Development



. Mobile App Development (Android & IOS)



Do let us know if you are interested in designing/developing the sites and I

can share you the detailed information for proceeding further. I would be

happy to share our Work Portfolio, Client testimonials and Methodologies.



In case of questions and queries feel free writing us back?



Best Regards,

Kamilah





------=_NextPart_000_1B536_01DC289B.7BFB2210

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>


style=3D'line-height:normal'>
style=3D'color:black'>Hi,

Thanks for your time in reading my =

introductory email. I am representing my IT company having a total =

workforce of 55 people. As a Website & Application Development =

company, we have been progressively growing over our year of operations. =

Our prices are best in the market, which is why we have a client base in =

countries like the USA, European Union, Canada, and =

Australia.

Our primary services are:

• Custom Web =

Designing.


style=3D'line-height:normal'>• =

Corporate Website Designing.


style=3D'line-height:normal'>• Website =

Redesigning.


style=3D'line-height:normal'>• =

ECommerce Web Designing.


style=3D'line-height:normal'>• PSD to =

WordPress conversion


style=3D'line-height:normal'>• PHP =

Version Upgrade


style=3D'line-height:normal'>• =

WordPress/WooCommerce Development


class=3DMsoNormal style=3D'line-height:normal'>
style=3D'color:black'>• Mobile App Development (Android & =

IOS)

Do let us know if you are interested in designing/developing =

the sites and I can share you the detailed information for proceeding =

further. I would be happy to share our Work Portfolio, Client =

testimonials and Methodologies.


class=3DMsoNormal style=3D'line-height:normal'>
style=3D'color:black'>In case of questions and queries feel free writing =

us back?


style=3D'line-height:normal'>Best =

Regards,
Kamilah



------=_NextPart_000_1B536_01DC289B.7BFB2210--