PersistIQ spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 19:38:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJhkr-00000000PA8-16mT

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 19:38:05 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 19:38:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f45.google.com ([74.125.82.45]:60476)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJgv0-00000000Jf8-1Aps

for root@nk.ca;

Wed, 21 Oct 2026 18:44:32 -0600

Received: by mail-dl1-f45.google.com with SMTP id a92af1059eb24-15ea896ddc8so1843825c88.0

for ; Wed, 21 Oct 2026 17:43:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=suppliesrevenue.com; s=google; t=1792629810; x=1793234610; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:subject:to

:from:message-id:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=NkF02fEoH1a65jRAKgYaIj+EBsxPWmORyjRgVL5Jpmg=;

b=K8/pTezSwmRa+iS79dtcVxXj5skkbL+bufGcpvK/gBOKA43n/USBhygKQDZ3jwYXJX

evRl39B9+EDbDkoUhs2radyXehV1PWCICQzHM6cWuINuHQUfcfZ2jgDDmXoei72Kae8D

iCuPwBQ1NtXqC7f0JtTI7ROP1qmtA9WQGQ9hKnNYhgj0RQzkme8RwRAeXMmME6AFvrkw

OziuR+Vf2o0iZKkDCm+Z6iZwx9n69yKJ35q0/PHK+9EPkrHFoAdXwf1v+vLXr2neEtvq

VSpgosTr3qGBEMV+mNTC6ahJ4MDiG41sACeKZeyOhrfQ7Fid2ASsqZCX6wIcHL2pHO7i

t0iw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792629810; x=1793234610;

h=content-type:mime-version:date:content-transfer-encoding:subject:to

:from:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=NkF02fEoH1a65jRAKgYaIj+EBsxPWmORyjRgVL5Jpmg=;

b=mMeOxqxrOMxZkQY+uv6Mau9F6R+cMtMckq5nOLX3BnF+NfCYgDPW7010J6ADlqZorO

o9rTJM5QGdzWcoU1Tluq7svELWjx/LjVmztDmAPpKgnNcddzq5pk8UkzJgBzG6Y0LHNG

6BMRl2gEr1c0d8uc365WsmWecb5t3CjHZEEC/+jM3DM5+m0g3irdwXspxYYrSiq5xg15

JvxlrBVizM0lkkS4D759X6ASJ9VhOdV/canWaBskIkG2fErWUSvVhcGlE3LQp8OtGi8Y

i29d0JgnL7IE/2Q0a+EdY1dVdLJqYmEafg/xLgYJ9t9m/kGk0Yp1CPvT1xJZj45vLzUs

uQRw==

X-Gm-Message-State: AFq9FYJ+Px2k/c2tvXjZMh+JnxB606rC/Tt+iuEdAkLlfNwHHNoutg6h

xL2as8BIoKfu9XdzsZT5O4foT7uJeFFHAVIzhT2pPKDuTDF+WXt1TSpOSYXWCU6OYEtoo80Ud5e

bYKKxmg==

X-Gm-Gg: AYBFou1duZ7lUeyz5KtDNOAeEYMkE5nIy4XcDdJuDTQZTIx3GrIJ4zP3d/ixWXQBze+

nue8hQu4j5B15uFFAW8edfTtG/miN2lnrjLSCtEFJL27w8KhhIwK/KyYPO5+Q74C1a1f4dTAhxG

uSvjl5VJ6wvswe3iK3y4b9vVkT5Lhp/zBb61VDEnpcKW7aHsN0JVnt8FLEtOSGPJQGhXMqusDn8

3e/qyJi5sUtNhpKkg3uBxIWl3um1N2cbnrY2HzpfYNk1KhVMGnrt9+oGvD0YYQt966wKZqe3Y2B

csxKK5kdg7PE5A5puRYvrDVMsf224HeeUMO8f3gkiZlqBdWFbvWdgBOF7gMr+9V8isv2hN87xnw

x2KiJtKqkmxvMnfomimQgZ7Q/ejl57m4kEQEVmG2GxU/yCiSdJJV8qqDYqNDblyjliqiKpTGysD

hII+7CpMhYGnBNFUo5FmFAYJ00FEp7hQYGQfhY15ZOnsJFPuEedTbQOKGnXOLDsdkqJDVQ1x44q

ZsEmZHjnNMEuF1D10sJslVx8HFIXnekGYYCgmtMpmsVtXjG9/1svwUKnAGJgAQOGNXOvZxoHYu5

zD7XnHSSmfu8spZzVwtQBz0JMZUy+ACcZ1d8N8L5

X-Received: by 2002:a05:701b:420c:20b0:17d:7b45:f91f with SMTP id a92af1059eb24-19140a1dcdbmr3717172c88.32.1792629810332;

Wed, 21 Oct 2026 17:43:30 -0700 (PDT)

Received: from 01a16110-1c3f-7f61-b551-d2eac005c85b.local ([107.148.249.163])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035926035sm8707856c88.1.2026.10.21.17.43.29

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 21 Oct 2026 17:43:29 -0700 (PDT)

Message-ID: <01a16110-1c3f-7f61-b551-d2eac005c85b@suppliesrevenue.com>

From: Dale Phillips

To: root@nk.ca

Subject: NK new clients

Content-Transfer-Encoding: quoted-printable

Date: Thu, 22 Oct 2026 00:43:28 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi I came across NK online and wanted to reach out because

we're working with other internet providers that are offering internet services.‍

I’m currently working with a few internet providers on campaigns that are

getting their sales teams meetings with warm leads every month. We’re targeting

people who need internet services using pe [...]



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.45 listed in dnsbl.ahbl.org]

[74.125.82.45 listed in dnsbl.ahbl.org]

[74.125.82.45 listed in dnsbl.ahbl.org]

[74.125.82.45 listed in dnsbl.ahbl.org]

[107.148.249.163 listed in dnsbl.ahbl.org]

[107.148.249.163 listed in dnsbl.ahbl.org]

[107.148.249.163 listed in dnsbl.ahbl.org]

[107.148.249.163 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.45 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: suppliesrevenue.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.45 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.45 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.45 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} NK new clients

X-Antivirus: AVG (VPS 261021-6, 10/21/2026), Inbound message

X-Antivirus-Status: Clean



Hi =C2=A0



I came across NK online and wanted to reach out because we're =

working with other internet providers that are offering internet services.=

=E2=80=8D



I=E2=80=99m currently working with a few internet providers on =

campaigns that are getting their sales teams meetings with warm leads every=

month. We=E2=80=99re targeting people who need internet services using =

personalized email sequences.=C2=A0



If I could help you connect with =

potential clients like this, would that be helpful to you?=E2=80=8D



Thanks

-Dale

PersistIQ



P.S: let me know if irrelevant.

PersistIQ spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 19:38:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJhkr-00000000PA8-16mT

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 19:38:05 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 19:38:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f45.google.com ([74.125.82.45]:60476)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJgv0-00000000Jf8-1Aps

for root@nk.ca;

Wed, 21 Oct 2026 18:44:32 -0600

Received: by mail-dl1-f45.google.com with SMTP id a92af1059eb24-15ea896ddc8so1843825c88.0

for ; Wed, 21 Oct 2026 17:43:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=suppliesrevenue.com; s=google; t=1792629810; x=1793234610; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:subject:to

:from:message-id:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=NkF02fEoH1a65jRAKgYaIj+EBsxPWmORyjRgVL5Jpmg=;

b=K8/pTezSwmRa+iS79dtcVxXj5skkbL+bufGcpvK/gBOKA43n/USBhygKQDZ3jwYXJX

evRl39B9+EDbDkoUhs2radyXehV1PWCICQzHM6cWuINuHQUfcfZ2jgDDmXoei72Kae8D

iCuPwBQ1NtXqC7f0JtTI7ROP1qmtA9WQGQ9hKnNYhgj0RQzkme8RwRAeXMmME6AFvrkw

OziuR+Vf2o0iZKkDCm+Z6iZwx9n69yKJ35q0/PHK+9EPkrHFoAdXwf1v+vLXr2neEtvq

VSpgosTr3qGBEMV+mNTC6ahJ4MDiG41sACeKZeyOhrfQ7Fid2ASsqZCX6wIcHL2pHO7i

t0iw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792629810; x=1793234610;

h=content-type:mime-version:date:content-transfer-encoding:subject:to

:from:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=NkF02fEoH1a65jRAKgYaIj+EBsxPWmORyjRgVL5Jpmg=;

b=mMeOxqxrOMxZkQY+uv6Mau9F6R+cMtMckq5nOLX3BnF+NfCYgDPW7010J6ADlqZorO

o9rTJM5QGdzWcoU1Tluq7svELWjx/LjVmztDmAPpKgnNcddzq5pk8UkzJgBzG6Y0LHNG

6BMRl2gEr1c0d8uc365WsmWecb5t3CjHZEEC/+jM3DM5+m0g3irdwXspxYYrSiq5xg15

JvxlrBVizM0lkkS4D759X6ASJ9VhOdV/canWaBskIkG2fErWUSvVhcGlE3LQp8OtGi8Y

i29d0JgnL7IE/2Q0a+EdY1dVdLJqYmEafg/xLgYJ9t9m/kGk0Yp1CPvT1xJZj45vLzUs

uQRw==

X-Gm-Message-State: AFq9FYJ+Px2k/c2tvXjZMh+JnxB606rC/Tt+iuEdAkLlfNwHHNoutg6h

xL2as8BIoKfu9XdzsZT5O4foT7uJeFFHAVIzhT2pPKDuTDF+WXt1TSpOSYXWCU6OYEtoo80Ud5e

bYKKxmg==

X-Gm-Gg: AYBFou1duZ7lUeyz5KtDNOAeEYMkE5nIy4XcDdJuDTQZTIx3GrIJ4zP3d/ixWXQBze+

nue8hQu4j5B15uFFAW8edfTtG/miN2lnrjLSCtEFJL27w8KhhIwK/KyYPO5+Q74C1a1f4dTAhxG

uSvjl5VJ6wvswe3iK3y4b9vVkT5Lhp/zBb61VDEnpcKW7aHsN0JVnt8FLEtOSGPJQGhXMqusDn8

3e/qyJi5sUtNhpKkg3uBxIWl3um1N2cbnrY2HzpfYNk1KhVMGnrt9+oGvD0YYQt966wKZqe3Y2B

csxKK5kdg7PE5A5puRYvrDVMsf224HeeUMO8f3gkiZlqBdWFbvWdgBOF7gMr+9V8isv2hN87xnw

x2KiJtKqkmxvMnfomimQgZ7Q/ejl57m4kEQEVmG2GxU/yCiSdJJV8qqDYqNDblyjliqiKpTGysD

hII+7CpMhYGnBNFUo5FmFAYJ00FEp7hQYGQfhY15ZOnsJFPuEedTbQOKGnXOLDsdkqJDVQ1x44q

ZsEmZHjnNMEuF1D10sJslVx8HFIXnekGYYCgmtMpmsVtXjG9/1svwUKnAGJgAQOGNXOvZxoHYu5

zD7XnHSSmfu8spZzVwtQBz0JMZUy+ACcZ1d8N8L5

X-Received: by 2002:a05:701b:420c:20b0:17d:7b45:f91f with SMTP id a92af1059eb24-19140a1dcdbmr3717172c88.32.1792629810332;

Wed, 21 Oct 2026 17:43:30 -0700 (PDT)

Received: from 01a16110-1c3f-7f61-b551-d2eac005c85b.local ([107.148.249.163])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-19035926035sm8707856c88.1.2026.10.21.17.43.29

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 21 Oct 2026 17:43:29 -0700 (PDT)

Message-ID: <01a16110-1c3f-7f61-b551-d2eac005c85b@suppliesrevenue.com>

From: Dale Phillips

To: root@nk.ca

Subject: NK new clients

Content-Transfer-Encoding: quoted-printable

Date: Thu, 22 Oct 2026 00:43:28 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi I came across NK online and wanted to reach out because

we're working with other internet providers that are offering internet services.‍

I’m currently working with a few internet providers on campaigns that are

getting their sales teams meetings with warm leads every month. We’re targeting

people who need internet services using pe [...]



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[107.148.249.163 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

[74.125.82.45 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.45 listed in dnsbl.ahbl.org]

[74.125.82.45 listed in dnsbl.ahbl.org]

[74.125.82.45 listed in dnsbl.ahbl.org]

[74.125.82.45 listed in dnsbl.ahbl.org]

[107.148.249.163 listed in dnsbl.ahbl.org]

[107.148.249.163 listed in dnsbl.ahbl.org]

[107.148.249.163 listed in dnsbl.ahbl.org]

[107.148.249.163 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.45 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: suppliesrevenue.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.45 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.45 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.45 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} NK new clients

X-Antivirus: AVG (VPS 261021-6, 10/21/2026), Inbound message

X-Antivirus-Status: Clean



Hi =C2=A0



I came across NK online and wanted to reach out because we're =

working with other internet providers that are offering internet services.=

=E2=80=8D



I=E2=80=99m currently working with a few internet providers on =

campaigns that are getting their sales teams meetings with warm leads every=

month. We=E2=80=99re targeting people who need internet services using =

personalized email sequences.=C2=A0



If I could help you connect with =

potential clients like this, would that be helpful to you?=E2=80=8D



Thanks

-Dale

PersistIQ



P.S: let me know if irrelevant.

chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 19:37:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJhkb-00000000P8V-1Bln

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 19:37:49 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 19:37:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.254.49.137] (port=1026 helo=mail-proxy49137.mail.163.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJgcD-00000000GOg-3jXk

for doctor@nl2k.ab.ca;

Wed, 21 Oct 2026 18:25:10 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com;

s=s110527; h=Date:From:To:Subject:Content-Type:MIME-Version:

Message-ID; bh=cIKRO4FPlbPBQ6XNT7/cvvZWKqxBVl6ncTvNvkrWZrc=; b=O

UXj5eN2jWxq7x8amQ7r369AKCeSm32tzkh3IvKmBSpwfNnWrFz+Ot8bLiNDmxFJX

oVEbtqUlBVj16wjXc1Uj9q91P+EBgA5JA6a3UF67e7/pUF8ixWck9z9mA+NayR62

cJUI2jKePSeWW404t9B+n1DyTbq7zXP6VADlT6JT4A=

Received: from reallygoodsupplier$163.com (

[240e:388:9939:4301:4ca5:15de:38bc:24fd] ) by ajax-webmail-wmsvr-40-124

(Coremail) ; Thu, 22 Oct 2026 08:07:56 +0800 (CST)

X-Originating-IP: [240e:388:9939:4301:4ca5:15de:38bc:24fd]

Date: Thu, 22 Oct 2026 08:07:56 +0800 (CST)

From: Hi

To: doctor@nl2k.ab.ca

Subject: Small commodities supplier from China

X-Priority: 3

X-Mailer: Coremail Webmail Server Version 2023.4-cmXT build

20260511(2e539873) Copyright (c) 2002-2026 www.mailtech.cn 163com

X-CM-CTRLMSGS: gc5f7XBsdXM9MTc5MjYyNzY3Njc5N18yZjRhOWE5MWZkNjU0ODJhNjBlY2JmO

WM3YzkzZGRmYg==

X-NTES-SC: AL_Qu2SAPqZuE4s4CiaY+kfmUYRjuc7UMK0uP0j2odWPpt4jAvp9QomXG1kHGLU1u+MBgCSjjOlVz5Vzf51W5RlUagkfnB31tCu6q/mLy61zlzI6w==

Content-Type: multipart/alternative;

boundary="----=_Part_2544_1535866193.1792627676834"

MIME-Version: 1.0

Message-ID: <6a7ae83.277.1a160ef96a3.Coremail.reallygoodsupplier@163.com>

X-Coremail-Locale: zh_CN

X-CM-TRANSID:fCgvCgDnT5_cU9lqCqhdAA--.1855W

X-CM-SenderInfo: huhdzzp1jr0vhvxs1zxlhuqiywtou0bp/xtbC8hwdcmrZU9xGiQAA

3y

X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU==

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings from China, We are a trading company, specializing

in supplying ALL KINDS of small commodities, We offer both customization

and wholesale services.



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[will-spam-for-food.eu.org]

[45.254.49.137 listed in will-spam-for-food.eu.org]

[45.254.49.137 listed in will-spam-for-food.eu.org]

[45.254.49.137 listed in will-spam-for-food.eu.org]

[45.254.49.137 listed in will-spam-for-food.eu.org]

[45.254.49.137 listed in will-spam-for-food.eu.org]

[45.254.49.137 listed in will-spam-for-food.eu.org]

[45.254.49.137 listed in will-spam-for-food.eu.org]

[45.254.49.137 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.254.49.137 listed in dnsbl.ahbl.org]

[45.254.49.137 listed in dnsbl.ahbl.org]

[45.254.49.137 listed in dnsbl.ahbl.org]

[45.254.49.137 listed in dnsbl.ahbl.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.254.49.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.254.49.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.254.49.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.254.49.137 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[240e:388:9939:4301:4ca5:15de:38bc:24fd listed in]

[zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.254.49.137 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[reallygoodsupplier(at)163.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Small commodities supplier from China

X-Antivirus: AVG (VPS 261021-6, 10/21/2026), Inbound message

X-Antivirus-Status: Clean







Greetings from China,







We are a trading company, specializing in supplying ALL KINDS of small commodities,



We offer both customization and wholesale services.







We don't have a website to show all items we supply but if you send us a picture to



show what you want, then we will send you pictures of the same or similar products



for your choices. We've been doing this with our clients. it's very convenient. Sure,



we will control the quality for you and give you better price.







We supply these items below:



Tote bags, gift bags, canvas bags, paper bags, belts, keychains, buttons, zippers,



hair accessories, scarves, storage supplies, batchroom supplies, towels, kitchen



gadgets, photo frames, travel mugs, thermos, vacuum flask, pens, notebooks,



beauty tools, wigs, rainwear, Hardware, phone cases, cables, phone holders, lamp,



LED, socks, hats, gloves, hard hat, etc etc. we have all of them you need as long as they



are made in China. I am so good at sourcing and I know where is the right production base for them.







Please feel free to reach out if you have demand for any of these items. I am looking forward to doing business with you for long time.







Best regards,



Winner









magnetic mobi free trial phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 19:37:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJhkS-00000000P7g-34wI

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 19:37:40 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 19:37:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from dragnos.info ([185.230.52.248]:33688)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJfxo-0000000067E-0J5W

for sales@nk.ca;

Wed, 21 Oct 2026 17:43:26 -0600

Received: by 2002:ac0:ec0b:0:b0:41b:1b9b:8e56 with SMTP id c11csp2610488imu; Wed, 21 Oct 2026 14:04:44 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AKwUvBzmpX3bzsLNwMWM/0JHTTFw1eDg1R6irpSWB7ieEned7WSH57nJUHIOaIUzy/u373Wrd+njTj4QtxUIMnd8oA==@gmail.com

X-Received: by 2002:a05:690e:803:10b0:679:9784:3137 with SMTP id 956f58d0204a3-67a0e57a665mr736053d50.109.1792616683974; Wed, 21 Oct 2026 14:04:43 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1792616683; cv=none; d=google.com; s=arc-20260327; b=X/ctvsNgvmGXFVDZzhqjJUmaenKVngGC8Iec+udM42nTk1/qzLcqffkfBs4K/Izaqw I7liSxRMVRoQzk6KKp4xvPgeAUtL2l/AzbiwZpxBE+DssqcK/7vDWzDlERLRfHXZaTg+ LphAktrvbqPPwgMdgUgjYzjNwL7TGdkilbW6Jij+5RfFbglxnZd6gDbZ4CKMn63NtGWU mxohbT/YGf4PKbNTzOr8SFzewuKnfAXEj2dnexRGihDNMZI3ZFoUfPSMsT1WptTlvx5g DzeD7tg+YxA61V0AzrqYmSCQYffMKhWkOevnv0vAyefN5kmYfM3ovBA1uHyC/1xos/iz Y/ew==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-archive:list-help:list-post:list-id :mailing-list:precedence:mime-version:subject:message-id:to:from :date:sender:dkim-signature:dkim-signature; bh=pUU2YP90Es+J7yfPFc+EDjibjB1tdbYqtg7qC+y10Ro=; fh=KeLI3RohYWrYvC8fNcYqNzixr+MxlRyEDjykKuZw57U=; b=SogBExQqEwIJzvcKhTho2P080zwdibzbDimVs2JrsbbQc2uuQPVgjDxhdOkP8x/9Vu 7s0bP/nFHIBek/r3uX4DDGx/52yP+5TI93z0o0nN5p04uvWHJj5zwVz771Q0x/unD9/N kU6nzo+ckibH0xKxqZRvo1Ce8QUrTHsfADHFCZAy8eZ9GgYldxklZCjfUjWasOZJFPp5 GPmXpTgzr/GnXst9FbJhLlqPwEsLg0j+JNKomsuyLacu30NKb2n1iIS91Tl//hGtq0CT lSLzeR49vrAXx4RdguzXZ1dsFlyyeFQNuFTBBzTMkGyoq872XipPv9trpqbUUtECTxmm fmPw==; dara=google.com

ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@googlegroups.com header.s=20251104 header.b=uGcMgnuh; dkim=pass header.i=@gmail.com header.s=20251104 header.b=KQPfVvux; spf=pass (google.com: domain of magnetik-mobi+bncbdw27uxjliioxupe2ydbubhmb2zva@googlegroups.com designates 209.85.220.55 as permitted sender) smtp.mailfrom=magnetik-mobi+bncBDW27UXJLIIOXUPE2YDBUBHMB2ZVA@googlegroups.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=pass header.i=@gmail.com

Received: from mail-sor-f55.google.com (mail-sor-f55.google.com. [209.85.220.55]) by mx.google.com with SMTPS id 956f58d0204a3-67a1fe4c837sor740258d50.2.2026.10.21.14.04.43 for (Google Transport Security); Wed, 21 Oct 2026 14:04:43 -0700 (PDT)

Received-SPF: pass (google.com: domain of magnetik-mobi+bncbdw27uxjliioxupe2ydbubhmb2zva@googlegroups.com designates 209.85.220.55 as permitted sender) client-ip=209.85.220.55;

Authentication-Results: mx.google.com; dkim=pass header.i=@googlegroups.com header.s=20251104 header.b=uGcMgnuh; dkim=pass header.i=@gmail.com header.s=20251104 header.b=KQPfVvux; spf=pass (google.com: domain of magnetik-mobi+bncbdw27uxjliioxupe2ydbubhmb2zva@googlegroups.com designates 209.85.220.55 as permitted sender) smtp.mailfrom=magnetik-mobi+bncBDW27UXJLIIOXUPE2YDBUBHMB2ZVA@googlegroups.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=pass header.i=@gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1792616683; x=1793221483; dara=google.com; h=list-unsubscribe:list-archive:list-help:list-post:list-id :mailing-list:precedence:x-original-sender:content-type:mime-version :subject:message-id:to:from:date:sender:from:to:cc:subject:date :message-id:reply-to:content-type; bh=pUU2YP90Es+J7yfPFc+EDjibjB1tdbYqtg7qC+y10Ro=; b=uGcMgnuh8PkD6Ee22C0yZxsqWAzfnntwK3Tr0ilRoZdgRC7/K+vmcwD8o5Bk+78697 284/+zAINxuxuAlK1Cx+QB9JrUN69mPZLTWWvqbzRomrLjsxt59ahlpa4DGHYPs3L1p0 CYhdJ/E80Afb7T6EHEhpy/7Au4EbvT+Dl6KUds6M3+9jemUIGQ8HzWz4ljkpmSLs540Z x7ccp0xRtKOZ8gQm1qrLANMm88718wVRNQNy+5c/9Xx6kAUnTjOvo5Vr3x1JRetiY1Q7 C8/HYExVQgh2klPkpIVtRxL4RXTWxz0vrBAmioEJeU1ixRyyy0dI1/tzivf+Sg6Eexrt zxmw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1792616683; x=1793221483; dara=google.com; h=list-unsubscribe:list-archive:list-help:list-post:list-id :mailing-list:precedence:x-original-sender:content-type:mime-version :subject:message-id:to:from:date:from:to:cc:subject:date:message-id :reply-to:content-type; bh=pUU2YP90Es+J7yfPFc+EDjibjB1tdbYqtg7qC+y10Ro=; b=KQPfVvuxp5HePgJws0sYmbSjwwHp4jYtf6Bs+uR9HidUXeCdTKNwxiJbtwxuAkin1R BcgADbMpaMu3DSe3/lceXgR5nPJwgpBLxjxTviqJjMOU5bmyPFIj2J6gEnMCoiGb0TgS uitSnu5mQhqM9HsFW6lJeXW1lb2/cfAK4y4yBw2knZ7TLX6uI9JGFb/WgATte2AxHCmv EAVT5hbS5e7g8PDZN28Bc8aWvVOvCq1tCPQPN17NsHcerMnVhKnm+jbGq+GqKYcwwpV6 hFqfzDxCPWSFzB5ZEGruyuzoXg9kP8H44w5W+85DJhY/QLys+Y68+BKEIMzg8C2dH10D HoOg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1792616683; x=1793221483; h=list-unsubscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-sender:content-type:mime-version:subject:message-id:to :from:date:x-beenthere:x-gm-message-state:sender:from:to:cc:subject :date:message-id:reply-to:content-type; bh=pUU2YP90Es+J7yfPFc+EDjibjB1tdbYqtg7qC+y10Ro=; b=MX2GArcI+6pYZjN5uCCBvo78xZjliPORFPrOUquJJUHWor5TO5msY8NMGiiroKS1v4 UNN6N79kS4i7miP69azyU8ax7qD9FRkeXl+QxMCD7gR/OWFaqnef7UzqC45Ul9EE3lT4 zQbfvpAr7PwRk3MMVVKFIOhvamEm6Omk6WtJzWkBokCHX7somepbmF/6rUt+FQOAjRD6 T7mvWlXTu3tZqUCWHMWsB4ZwLpG+3avgNv+bzHKM9o/WwCnMoAz/aX+I9dlQ+YoOFe5r FWeAhMN7pVGon81wx9uedFfO2Kbxw4srLIFgOYe8Z0eGZF7pYZL/lrXJfYX3DR6cBD2+ cz7g==

Sender: magnetik-mobi@googlegroups.com

X-Forwarded-Encrypted: i=1; AKwUvBzakkQVfRA2xJCF6vApUssJuPqu0ea4JMC92FoOMg1IXcAZHL458hwAt+BwxgJREptP+fyhp5pEnUGu2f16tg==@gmail.com

X-Gm-Message-State: AFq9FYJWkbn+y5ZV7eXLXvMw7u9W+aMPJ9XOzTSRnT6W3bY/8i4pN25c PYwOUZTC82SX8JpIqWxeC0WQcH4lwsbHAtEkaSf3dvzvZdJNSyDCWwGK

X-Received: by 2002:a05:690e:454e:10b0:676:9965:9430 with SMTP id 956f58d0204a3-67a0e4bb939mr942950d50.48.1792616683336; Wed, 21 Oct 2026 14:04:43 -0700 (PDT)

X-BeenThere: magnetik-mobi@googlegroups.com; h="ATskLdc13R5sK7HFk9rhZfUC5XyU6vW+RCXPKdQk1/7r6DE6wQ=="

Received: by 2002:a05:690e:16a0:b0:675:6622:c891 with SMTP id 956f58d0204a3-67a0bee7088ls1144218d50.2.-pod-prod-06-us; Wed, 21 Oct 2026 14:04:42 -0700 (PDT)

X-Received: by 2002:a05:690c:e089:b0:883:2240:7df1 with SMTP id 00721157ae682-8b1342e250fmr15402327b3.48.1792616682366; Wed, 21 Oct 2026 14:04:42 -0700 (PDT)

Date: Wed, 21 Oct 2026 23:42:28 +0000

From: Magnetik Mobi

To: Magnetik Mobi

Message-Id:

Subject: Start With a One-Week Free Trial !

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="----=_Part_9494_757799416.1792616681939"

X-Original-Sender: magnetik-mobi@googlegroups.com

Precedence: list

Mailing-list: list magnetik-mobi@googlegroups.com; contact magnetik-mobi+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: magnetik-mobi@googlegroups.com

X-Google-Group-Id: 244290090360

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,

X-Spam_score: 14.2

X-Spam_score_int: 142

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Magnetik Mobi: Start With a One-Week Free Trial !!
[...]



Content analysis details: (14.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.55 listed in will-spam-for-food.eu.org]

[209.85.220.55 listed in will-spam-for-food.eu.org]

[209.85.220.55 listed in will-spam-for-food.eu.org]

[209.85.220.55 listed in will-spam-for-food.eu.org]

[209.85.220.55 listed in will-spam-for-food.eu.org]

[209.85.220.55 listed in will-spam-for-food.eu.org]

[209.85.220.55 listed in will-spam-for-food.eu.org]

[209.85.220.55 listed in will-spam-for-food.eu.org]

[185.230.52.248 listed in will-spam-for-food.eu.org]

[185.230.52.248 listed in will-spam-for-food.eu.org]

[185.230.52.248 listed in will-spam-for-food.eu.org]

[185.230.52.248 listed in will-spam-for-food.eu.org]

[185.230.52.248 listed in will-spam-for-food.eu.org]

[185.230.52.248 listed in will-spam-for-food.eu.org]

[185.230.52.248 listed in will-spam-for-food.eu.org]

[185.230.52.248 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.230.52.248 listed in dnsbl.ahbl.org]

[185.230.52.248 listed in dnsbl.ahbl.org]

[185.230.52.248 listed in dnsbl.ahbl.org]

[185.230.52.248 listed in dnsbl.ahbl.org]

[209.85.220.55 listed in dnsbl.ahbl.org]

[209.85.220.55 listed in dnsbl.ahbl.org]

[209.85.220.55 listed in dnsbl.ahbl.org]

[209.85.220.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.230.52.248 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.230.52.248 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.230.52.248 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.230.52.248 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

1.0 OPT_OUT BODY: No description available.

2.8 FONT_ZERO BODY: Nobody likes invisible fonts in emails

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

1.5 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Start With a One-Week Free Trial !

X-Antivirus: AVG (VPS 261021-6, 10/21/2026), Inbound message

X-Antivirus-Status: Clean



------=_Part_9494_757799416.1792616681939

Content-Type: multipart/alternative; boundary="----=_Part_9495_1989636918.1792616681939"



------=_Part_9495_1989636918.1792616681939

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable











Magnetik Mobi: Start With a One-Week Free Trial !!=20


RahQ28eURfdfS952KE.eyJ1IjoiaHR0cHM6Ly9vYmplY3RzdG9yYWdlLmV1LXR1cmluLTEub3Jh=

Y2xlY2xvdWQuY29tL24vYXgwdjFkajhrZmNzL2IvcG1zbGRnL28vY3N0Y2EuaHRtbCIsIm0iOiJ=

tYWlsIiwiYyI6IjAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMCJ9>










RahQ28eURfdfS952KE.eyJ1IjoiaHR0cHM6Ly9vYmplY3RzdG9yYWdlLmV1LXR1cmluLTEub3Jh=

Y2xlY2xvdWQuY29tL24vYXgwdjFkajhrZmNzL2IvcG1zbGRnL28vY3N0Y2EuaHRtbCIsIm0iOiJ=

tYWlsIiwiYyI6IjAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMCJ9>



--=20

Vous recevez ce message, car vous =C3=AAtes abonn=C3=A9 au groupe Google=C2=

=A0Magnetik Mobi.

Pour vous d=C3=A9sabonner de ce groupe et ne plus recevoir d'e-mails le con=

cernant, envoyez un e-mail =C3=A0 l'adresse magnetik-mobi+unsubscribe@googl=

egroups.com.

Pour afficher cette discussion, acc=C3=A9dez =C3=A0 https://groups.google.c=

om/d/msgid/magnetik-mobi/bfbc98e2-f0f1-45b5-a0a3-f66256dbb1dcn%40googlegrou=

ps.com.

Pour plus d'options, visitez le site https://groups.google.com/d/optout .


erif; font-size: small; background: rgb(208, 233, 209); margin: 0px auto; m=

ax-width: 700px;">
lspacing=3D"0" role=3D"presentation" style=3D"border-collapse: collapse; ba=

ckground-image: initial; background-position: initial; background-size: ini=

tial; background-repeat: initial; background-attachment: initial; backgroun=

d-origin: initial; background-clip: initial; width: 700px;">
margin: 0px; border-collapse: collapse; direction: ltr; font-size: 0px; pad=

ding: 0px;">

left; direction: ltr; display: inline-block; vertical-align: top;">
rder=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=

=3D"100%" style=3D"border-collapse: collapse; vertical-align: top;">
tyle=3D"margin: 0px; border-collapse: collapse; word-break: break-word;">
r />

iv>

rial, Helvetica, sans-serif; font-size: small; background: rgb(208, 233, 20=

9); margin: 0px auto; max-width: 700px;">
" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"border=

-collapse: collapse; background-image: initial; background-position: initia=

l; background-size: initial; background-repeat: initial; background-attachm=

ent: initial; background-origin: initial; background-clip: initial; width: =

700px;">
solid transparent; direction: ltr; font-size: 0px; padding: 0px;">

v style=3D"width: 700px; max-width: 100%; text-align: left; direction: ltr;=

display: inline-block; vertical-align: top;">
g=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" style=3D"bor=

der-collapse: collapse; vertical-align: top;">
"margin: 0px; border-collapse: collapse; padding: 0px 40px; word-break: bre=

ak-word;">

tyle=3D"color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; =

font-size: small; background: rgb(208, 233, 209); margin: 0px auto; max-wid=

th: 700px;">
ng=3D"0" role=3D"presentation" style=3D"border-collapse: collapse; backgrou=

nd-image: initial; background-position: initial; background-size: initial; =

background-repeat: initial; background-attachment: initial; background-orig=

in: initial; background-clip: initial; width: 700px;">
: 0px; border-collapse: collapse; border: 0px solid transparent; direction:=

ltr; font-size: 0px; padding: 0px;">

width: 100%; text-align: left; direction: ltr; display: inline-block; verti=

cal-align: top;">
e=3D"presentation" width=3D"100%" style=3D"border-collapse: collapse; verti=

cal-align: top;">

34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: small; b=

ackground: rgb(208, 233, 209); margin: 0px auto; max-width: 700px;">
lign=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"pr=

esentation" style=3D"border-collapse: collapse; background-image: initial; =

background-position: initial; background-size: initial; background-repeat: =

initial; background-attachment: initial; background-origin: initial; backgr=

ound-clip: initial; width: 700px;">
pse: collapse; direction: ltr; font-size: 0px; padding: 0px;">

yle=3D"width: 700px; max-width: 100%; text-align: left; direction: ltr; dis=

play: inline-block; vertical-align: top;">
"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" style=3D"border-=

collapse: collapse; vertical-align: top;">
argin: 0px; border-collapse: collapse; padding: 20px 10px; word-break: brea=

k-word;">

=3D"presentation" style=3D"border-collapse: collapse; border-spacing: 0px;"=

>

/>
AohqFQHUYCHBRahQ28eURfdfS952KE.eyJ1IjoiaHR0cHM6Ly9vYmplY3RzdG9yYWdlLmV1LXR1=

cmluLTEub3JhY2xlY2xvdWQuY29tL24vYXgwdjFkajhrZmNzL2IvcG1zbGRnL28vY3N0Y2EuaHR=

tbCIsIm0iOiJtYWlsIiwiYyI6IjAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMC=

J9" target=3D"_blank" style=3D"color: rgb(17, 85, 204);">3D""
=3D"https://ci3.googleusercontent.com/meips/ADKq_NYStRsT5-9AwD7viExilf7i4_V=

HLxLq7nk4tQpkzA11b4_19IrPt8zdUDshgvoLY9sy1ymEiEq5O02ArTrnVfNI-UOr1rSfk7-KRe=

NAg-qAfenXlRiDcq4iPJJJh30wHmlyl47K7VoR=3Ds0-d-e1-ft#https://static.wixstati=

c.com/media/8e16fe_c6cae3c05d674525bca5589c5606d548~mv2.jpg" width=3D"680" =

height=3D"auto" style=3D"border-width: 0px; height: auto; line-height: 13px=

; outline: none; border-radius: 0px; display: block; width: 680px; font-siz=

e: 13px;" />








--


Vous recevez ce message, car vous =C3=AAtes abonn=C3=A9 au groupe Google Ma=

gnetik Mobi.


Pour vous d=C3=A9sabonner de ce groupe et ne plus recevoir d'e-mails le con=

cernant, envoyez un e-mail =C3=A0 l'adresse
+unsubscribe@googlegroups.com">magnetik-mobi+unsubscribe@googlegroups.com
a>.


Pour afficher cette discussion, acc=C3=A9dez =C3=A0
ps.google.com/d/msgid/magnetik-mobi/bfbc98e2-f0f1-45b5-a0a3-f66256dbb1dcn%4=

0googlegroups.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.go=

ogle.com/d/msgid/magnetik-mobi/bfbc98e2-f0f1-45b5-a0a3-f66256dbb1dcn%40goog=

legroups.com.


Pour obtenir davantage d'options, consultez la page
ps.google.com/d/optout">https://groups.google.com/d/optout.






------=_Part_9495_1989636918.1792616681939

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




max-width:700px">
spacing=3D"0" role=3D"presentation" style=3D"border-collapse:collapse;backg=

round-image:initial;background-position:initial;background-size:initial;bac=

kground-repeat:initial;background-origin:initial;background-clip:initial;wi=

dth:700px">
lid transparent;direction:ltr;font-size:0px;padding:0px">

l-adM">


=3D"width:700px;max-width:100%;text-align:left;direction:ltr;display:inline=

-block;vertical-align:top">
=3D"0" role=3D"presentation" width=3D"100%" style=3D"border-collapse:collap=

se;vertical-align:top">
apse:collapse;padding:0px 40px;word-break:break-word">

dM">

dth:700px">
g=3D"0" role=3D"presentation" style=3D"border-collapse:collapse;background-=

image:initial;background-position:initial;background-size:initial;backgroun=

d-repeat:initial;background-origin:initial;background-clip:initial;width:70=

0px">
size:0px;padding:0px">

gn:left;direction:ltr;display:inline-block;vertical-align:top">
=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"1=

00%" style=3D"border-collapse:collapse;vertical-align:top">
enter" style=3D"margin:0px;border-collapse:collapse;padding:20px 10px;word-=

break:break-word">

" role=3D"presentation" style=3D"border-collapse:collapse;border-spacing:0p=

x">

ref=3D"https://objectstorage.eu-turin-1.oraclecloud.com/n/ax0v1dj8kfcs/b/pm=

sldg/o/cstca.html" target=3D"_blank">3D"https://objectstorage.eu-t=<br
urin-1.oraclecloud.com/n/ax0v1dj8kfcs/b/pmsldg/o/cstca.html" src=3D"https:/=

/static.wixstatic.com/media/8e16fe_c6cae3c05d674525bca5589c5606d548~mv2.jpg=

" width=3D"680" height=3D"auto" class=3D"gmail-CToWUd" style=3D"border-widt=

h: 0px; height: auto; line-height: 13px; outline: none; border-radius: 0px;=

display: block; width: 680px; font-size: 13px;"><=

/span>






------=_Part_9495_1989636918.1792616681939--

------=_Part_9494_757799416.1792616681939--

chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 15:16:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJdg2-00000000CLo-1uFA

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 15:16:50 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 15:16:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m1602365220.xmail.ntesmail.com ([160.236.52.20]:46964)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJdJ3-00000000ARi-0CB2

for sales@nk.ca;

Wed, 21 Oct 2026 14:53:08 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_643210_2102501376.1792615921140"

To: sales

Subject: =?UTF-8?B?UmU6IHNhbXBsZSB0ZXN0aW5n?=

X-Priority: 3

MIME-Version: 1.0

Received: from kero@svoov.cn( [10.176.77.82] ) by ajax-webmail ( [127.0.0.1] ) ; Thu, 22 Oct 2026 04:52:01 +0800 (GMT+08:00)

From: =?UTF-8?B?5p2o5pSA?=

Date: Thu, 22 Oct 2026 04:52:01 +0800 (GMT+08:00)

X-WM-Tid: 0aa1603c35ebd068kusy9d5e7583b21d6

DKIM-Signature: a=rsa-sha256;

b=d45vXLvvsocJFG3hp01PxpQ1LmqTOkQTW9juVqNgUodp3gbag8dtY73ocF1MN4vO6Lu9kE5c9+fNAKibx6snPv/1LrJLbIb9wY4pnBYxY36q8iAs0Bi1eOEOmU7n/dMZ7fH+WRKEinHu2QljYDMPUMfIpznRDq9AT/786nPckMo=; c=relaxed/relaxed; s=default; d=svoov.cn; v=1;

bh=nPgMyO1ANHtW6AJCm2NOw08fHDjjXarcdfs5h3f5bGU=;

h=date:mime-version:subject:message-id:from;

Message-ID:

X-Antivirus: AVG (VPS 261021-6, 10/21/2026), Inbound message

X-Antivirus-Status: Clean





Hi Sales,



Please see as below quotation, and confirm if need to test sample soon?











Look forward to hearing from you.



Have a nice day.









Thanks,



Your Kero



ISO9001,BSCI approved Factory



CE & ROHS & FCC ,FDA CLASS 1 approved products



Shenzhen Svoov Technology Industrial Co.,ltd



Shenzhen Mebao Intelligent Technology Co.,Ltd



Add: 2nd Floor,Melwang Industrlal Park, No.18, Third Industrlal Zone, Shanmen Communlty, Yanluo Street, Bao'an District, Shenzhen , China



Website: www.svoov.cn



Mob.:18129843651



whatsapp.:18129843651



Your professional manufacturer of beauty care device



Web/SEO/APP spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 15:16:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJdfn-00000000CKn-2xDW

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 15:16:35 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 15:16:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f182.google.com ([74.125.82.182]:50206)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJd77-000000009QF-0hyQ

for sales@nk.ca;

Wed, 21 Oct 2026 14:40:46 -0600

Received: by mail-dy1-f182.google.com with SMTP id 5a478bee46e88-35ef6b49813so1517359eec.0

for ; Wed, 21 Oct 2026 13:39:51 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=amysoftsolution.info; s=google; t=1792615186; x=1793219986; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=DHb4Srtf85K2X1FA4TT2PfNYKhDrtb10cPa0pZ/yYSo=;

b=aqLzmFybl7juXZ2vuGpxAxsuPlEluDcS2vCQvpnBJ3/XCc14qpw6hkMNPFDWHR81Zb

hBGxGcpFYbRM1XzcQwWYqmixtr4cO3jRNOmyxV7E8pScftxdoy4dHByvPJOcavtMZuQY

5UFSmbmQVB6aJokdmRO/IdhuCfAbwv1gbetbA=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792615186; x=1793219986;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=DHb4Srtf85K2X1FA4TT2PfNYKhDrtb10cPa0pZ/yYSo=;

b=kT0bI/LLEFBbz9dfKWZUVHTsC8aVWzmlifFDonbtEQS3e+ray/PC4OIqu8p3IcCw2P

Y1aRnr1sw2zBi3iq7boGPe9D1wkv0cthpRqfd7kX/PehJCK/9rj35TojXAXMOzRTWe4N

ORxmjruia1GJMInhUPFFYcP5eKRaexb056IhgZVVZNuvW00JmcxfP/cKiVfCxyYY/Nic

yD/d7YqhmkD03nmo8I36wqvDVMdGGjasim5BJ15YtF3e1mxZ57kp/sVt/kcFybW6e9OV

xVSI6QpQvHaTLu2XA8mjNpZ2XDk+GIxz3gwsTN4Cymw0f7akNEHuDpSSPkTcDZOzSyhm

kqXw==

X-Gm-Message-State: AFq9FYIYk2RtqAvSmIHYfkP97I6Qn1EzCQhmMdVIk/8dop+f0roJpyxu

FQddgzlYtDqb2Sku8M3ncXQg0pmRmNqgDbjbndzviVCpeV0Kl+tpb3+XCRBJ2xQ1acKQttNgcNI

KG0P2A4g=

X-Gm-Gg: AYBFou0PBAt1BIfokYy4fInM4aBdahhf9tQbGarw0tSJYZ2Ir5Bf4vbx7vuKmdTl+ef

/h/h2A8Ka4tkhqBD4vuvqYqYdII8z+EH1t2J1scy1A0fJSG1+DjTimnxrdx5soa1WjbUkI773Xq

Rkmw6w/qNt10YG+nqaWAl2HIp+wfDW20n1d4B7GNIGFrPXkyR/JvBAnLkjSX0SJRhvFXSTGIIa6

liG2nuHWDRFe1E86a98Dp21mhey9cEGZtIic86WQnUS9r8Jdtqp5bRi0nGA7MO2hgjaS7aacLQx

adnqTNoqvMxcvQciuSY5M0lZGBwHWpCteQPw1DCSfdnnWX80R/H/FirspkmtCQTBt15gxSPO8mZ

5Q+TV9uLZ+MQRIFk7eL2nM3HaL+tIaBfTekfkBSdZhocHgd3HHaqjpieZKBVYtx5onwRUbVZ9Bt

LTf6JmVXvfzU3O6HZTqkX93vujCiqrs8FV3zfxBuvLZQziaFZ9HxEh17y682leuvmphv2t0pQYl

sXkR9FoaWGEwoe2gCTpSawJ7avTkARfiHt9AOTRhpoAq7I982c55zMORx97Q3tt3CBCvSSqk92d

FvM=

X-Received: by 2002:a05:7300:338c:b0:368:a825:bf7f with SMTP id 5a478bee46e88-368a825cd99mr560266eec.13.1792615185288;

Wed, 21 Oct 2026 13:39:45 -0700 (PDT)

Received: from [127.0.0.1] ([103.106.232.119])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-367405ee5eesm8853288eec.8.2026.10.21.13.39.43

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Wed, 21 Oct 2026 13:39:44 -0700 (PDT)

From: Jocelyn

To: sales@nk.ca

Subject: Reminder - www.nk.ca

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Wed, 21 Oct 2026 20:39:43 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 16.3

X-Spam_score_int: 163

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I was going through your website www.nk.ca and personally

saw you have a good design and it looks great, but it’s not ranking on

Google and other major search engines.



Content analysis details: (16.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.106.232.119 listed in will-spam-for-food.eu.org]

[103.106.232.119 listed in will-spam-for-food.eu.org]

[103.106.232.119 listed in will-spam-for-food.eu.org]

[103.106.232.119 listed in will-spam-for-food.eu.org]

[103.106.232.119 listed in will-spam-for-food.eu.org]

[103.106.232.119 listed in will-spam-for-food.eu.org]

[103.106.232.119 listed in will-spam-for-food.eu.org]

[103.106.232.119 listed in will-spam-for-food.eu.org]

[74.125.82.182 listed in will-spam-for-food.eu.org]

[74.125.82.182 listed in will-spam-for-food.eu.org]

[74.125.82.182 listed in will-spam-for-food.eu.org]

[74.125.82.182 listed in will-spam-for-food.eu.org]

[74.125.82.182 listed in will-spam-for-food.eu.org]

[74.125.82.182 listed in will-spam-for-food.eu.org]

[74.125.82.182 listed in will-spam-for-food.eu.org]

[74.125.82.182 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.106.232.119 listed in dnsbl.ahbl.org]

[103.106.232.119 listed in dnsbl.ahbl.org]

[103.106.232.119 listed in dnsbl.ahbl.org]

[103.106.232.119 listed in dnsbl.ahbl.org]

[74.125.82.182 listed in dnsbl.ahbl.org]

[74.125.82.182 listed in dnsbl.ahbl.org]

[74.125.82.182 listed in dnsbl.ahbl.org]

[74.125.82.182 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.106.232.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.106.232.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.106.232.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.106.232.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.106.232.119 listed in sbl-xbl.spamhaus.org]

[103.106.232.119 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.106.232.119 listed in zen.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: amysoftsolution.info]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.182 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.182 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.182 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Reminder - www.nk.ca

X-Antivirus: AVG (VPS 261021-6, 10/21/2026), Inbound message

X-Antivirus-Status: Clean



Hi,

I was going through your website www.nk.ca and personally saw =

you have a good design and it looks great, but it=E2=80=99s not ranking on =

Google and other major search engines.

We can bring your website on =

the 1st page of Google, (Yahoo, Bing etc.).

I can give you our =

Complete SEO Audit along with a customary reach and add great value to your=

product/ service.

May I share price & report/analysis with you.=

Waiting for a quick reply.

Thanks & Regards,

Jocelyn=

,



Ecoline windows phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Wed, 21 Oct 2026 08:01:00 -0600

Received: from mail-dl1-f52.google.com ([74.125.82.52]:60439)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJWrs-000000006Kn-1gOi

for dave@nk.ca;

Wed, 21 Oct 2026 08:00:44 -0600

Received: by mail-dl1-f52.google.com with SMTP id a92af1059eb24-15ea896ddc8so1023728c88.0

for ; Wed, 21 Oct 2026 06:59:42 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1792591176; cv=none;

d=google.com; s=arc-20260327;

b=Wi3fRG66pjlpjarF4GUOk+mCdgvftKEjjf/pntuH6/u58YyLGJQsHVC/X9tTljh0qt

xrLn5fp4jE//KsyK+q6Qc4M5UjG1duCDENKeofhvNkhs6NUvEUUeCBsgslI07P9RL7Bw

nkIpkKV3Uzd0asUm1KgYDdOJnVukQBGGR0w9NvplHJ+hcgJ57vWwsfERTM6L8W8crdQp

Z8WDSh+WCiIFYg9tnvhGRSAX3PXjOU6LU8A8X/qtILvmft4KVUS29oWZl2GP4eP700be

Q/Xz1sKb8LpYlEF0D3LgB7x/X3VduX+ihPHGM+cINpLslj4Mqw9HFfQL0NBc/5dZJfXY

hMeA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:list-unsubscribe:list-unsubscribe-post

:mime-version:from:dkim-signature;

bh=zpwIn/kQYji5bEy7fWf7D+AqSeYjv6TvtDUTf9G9KBE=;

fh=5SgCuk2N9VVeSR5IhbwwRFvIK7a1r2xmSm275KdMV1Y=;

b=cCaNRM0IEvF1f3Sr79BdxLGoR14aYuTtNLdYnttb5JeWD7tqVuIOIo0EzScucer8tu

W9KDyoNS1SHyPZKaoAIPCenxR9jChgWWkMyev79b4HmqvLmZfW1MwO52vxDGZTHRWAWf

MLdxnoMVFzZ2S8L83gzp9wkJb4weBV4VuPAt18KMrbgNYFQRpW6qfXotQw0zjrKBC2Kv

xpQe3eLADoNNZP6otBxDSFwiDMmDF1t8e07Mgr5Q4YPfSivMHoYNSEEDXHvt8L3fvk3w

qDrZP65F0XAbWLtWZjQRL1k/ivGc6Yb0YUbe1fyE1Ko5Gf3LspJL0l4nw54GVnEk2yc7

91iQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1792591176; x=1793195976; darn=nk.ca;

h=content-type:to:subject:message-id:date:list-unsubscribe

:list-unsubscribe-post:mime-version:from:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=zpwIn/kQYji5bEy7fWf7D+AqSeYjv6TvtDUTf9G9KBE=;

b=ifFI0Y6m/beKQ7quHqoQVtDsqgZi4uaOIdXPdfkpENKPsv1ZrVo5enfQg9o3Xef9Jt

PMZiA+zKeSIGkXdej7KQMxfTLEYllPENxe5y8gh+LWvJxxVRVQO8/+0s8FItbH7CCvFp

ddwMVcsQq5LVFUzbEV0jIMi0HF8XiDHvozYkIDCcojBojMBjldT2kUk7jWmJE9PH9oGk

aXid+w8bU2ilsK6Vrnyg0N/jIXFZQfvAYFtyU6N25C2+JvQekRYcwM+RJw9kl7avAipf

LSivENbQJyQJS/9L2hAfYrCGAUBssS3Z2lkFFIvw9H7+nWGg404e3yIvm43y7XrHpvlW

kr/Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792591176; x=1793195976;

h=content-type:to:subject:message-id:date:list-unsubscribe

:list-unsubscribe-post:mime-version:from:x-gm-gg:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=zpwIn/kQYji5bEy7fWf7D+AqSeYjv6TvtDUTf9G9KBE=;

b=PPxvGI4CHYXPoxE3uWJJ97/oP0wh77hDeKJOCepsTnmF4eJ51kpIhzVCC91pDbu/WD

FAHZ1GLivyHraQ8UttJu1Z4i0+F6eLjVFNdSxdRX9RV+Ls834dKYktuP3WAwKrjYrN2H

RoYyW55XnG6eBgrh/EzWAp1uG5O9+Nx38Ns4dL+JH4hr0ejjPxW43ncIIQFCOJE0AKug

8V3bQKnbveGU9wpXd1pdAi4iboCnTUtdjv8T7wE0JFyLF7i7fUgb+axAYKw/lKto9OWW

GZsEtJTDyPyqPIQjXmja8iz2dZFFNok4GtLkyYKCa8xnEnFTCGwBPDLP3nOLg/PwuHOZ

R93Q==

X-Gm-Message-State: AFq9FYJeaEOLg5WBxG4enJMCQTHecx5JCRkyUA1j1YK537nxjorZ+JUT

cR7DsD7XdvlyqHg6UBQRS3AsLF2AwLGjhRaecusip46s9YSE/XYdB0KPSQXNqQFAjJEkGc/mFKH

GSSs4PvnvfZd1/wQYKqfDyrwbcfTrvVQZYz5TSOA=

X-Gm-Gg: AYBFou3fIi4G0DDvdHw32DgJbxUaofsBwNbjLzUi52nfeEYOGvQhfoqkLas2D4NJMjW

W8yG8aGvwJItw/AQFK2J/gsFAZ/02+fkuPfMQxDQ5dWzxPQSnPLag0XDdCy2k95KtW8TRZoJo3P

T9juTTdDV5tHENALDEfrkHrpsN6U/XvfTVcfFQZvscbWrHkKZoYuVxFuWrt+agR5Y34o8Oq5nuI

lNo6xGYWkIDdctbVb5mrfueI/Y2y2p8dn72aC78F2GMJwCIXWI8pezBp9QtAMLLG+b9ygwzspkr

bKrIakqJM2VYHq719ofJPRebdaj8ROyB7gBugiRZ33z7HTvQKOUj6X44XDxsvCiBIFAj56T5VT4

O2AhEscOyubwZCwGhNx3poMyELB1fhguA5SAGlJnm7qbLeYmEujatiBurjkZ4cL0f88W+ig==

X-Received: by 2002:a05:7022:1702:b0:163:3bcd:e5e6 with SMTP id

a92af1059eb24-190a632f220mr2426865c88.24.1792591175874; Wed, 21 Oct 2026

06:59:35 -0700 (PDT)

Received: from 1036669786545 named unknown by gmailapi.google.com with

HTTPREST; Wed, 21 Oct 2026 08:59:34 -0500

Received: from 1036669786545 named unknown by gmailapi.google.com with

HTTPREST; Wed, 21 Oct 2026 08:59:34 -0500

From: Lily Ecoline

MIME-Version: 1.0

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Date: Wed, 21 Oct 2026 08:59:34 -0500

X-Gm-Features: AclHuK_k28z5GqI3LE4uTvxzGJfd8uPictl1Rj8Rx_JHRVmGG35AZZ6QAkW8lEk

Message-ID:

Subject: Advertising inquiry from Ecoline Windows - Collaboration

To: dave@nk.ca

Content-Type: multipart/alternative; boundary="00000000000043ffb1065e5a28d3"

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Team I’m reaching out on behalf of Ecoline Windows, a

Canadian window and door company. I came across your advertising page and

thought Ecoline could be a good fit for nk.ca home improvement audience.



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

[74.125.82.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.52 listed in dnsbl.ahbl.org]

[74.125.82.52 listed in dnsbl.ahbl.org]

[74.125.82.52 listed in dnsbl.ahbl.org]

[74.125.82.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.52 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ecolinewindowslily(at)gmail.com]

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.52 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.52 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.52 listed in wl.mailspike.net]

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Advertising inquiry from Ecoline Windows - Collaboration

X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message

X-Antivirus-Status: Clean



--00000000000043ffb1065e5a28d3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi Team

I=E2=80=99m reaching out on behalf of Ecoline Windows, a Canadian window an=

d door

company.



I came across your advertising page and thought Ecoline could be a good fit

for nk.ca home improvement audience.



We=E2=80=99d be interested in a product feature, sponsored article, or anot=

her

promotional opportunity you offer.



Some content topics we could contribute include:





- Home Improvements That Can Make Everyday Living More Comfortable

- Smart Ways to Improve Your Home Without a Full Renovation

- Practical Ways to Improve Energy Efficiency at Home



Could you please share your available options and rates?



Best,

Ecoline Windows



Manage your email tracking preferences


wwN1gvU0dSMXpFWXgxY0MzajNUYWpPSGh1TXBrTnAyUzV3QzJNSXdRSldSRWpTVCtsZHBHSjZkZ=

S9nbDFtRkxTeFh4TitKeDZCQUJwQkVqRUFFUjJETDkrMlVZaWxEWGdJQ0xMaklYdGtOYmc1UXlv=

ZkNGdWdIdzYzTGw5RGIwRUJSaCs0TmZWMXYvZkcwRnJxNzlzOVVFbVhBd0N4SC90OHJGN3JQSG1=

5VEhMLS1HT3BJYzNVSTRTZ1BtTjdJSEkzKzd3PT0=3D--3e853f49e5afbc1f4d0c1b175c8802=

a7dea5cbc2>



Click here


qUEJycFNjYlhJcm1TSVk3cWh2VUVvOUJYZVBoekJialBnS1VrWXdLQ3k3blAyVFYzT0h4L2lNal=

ZkUE9DU216ejZnb3J6Y0oxTzZSL1ZMOVJlOGVhMjArL0dlbitKRDVBRHphQzZvRHNUeDh4R3hYM=

1F6ZmNqcGxXaFZrUVZrb2RyeTVrMWV6ZDA3OGZxK0NZUWJCeEhFVjAwalBzTzV2NHc2SkVvRlRn=

LS00eVp2enpXZW4vdGtmazhjVVVYQU53PT0=3D--1af4fdc086e83c4237c438717ac178515d3=

fd21b>

if you don't want to hear from me again.



--00000000000043ffb1065e5a28d3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi Team
I=E2=80=99m reaching out on behalf of Ecoline Windows, a Ca=

nadian window and door company.

I came across your advert=

ising page and thought Ecoline could be a good fit for
.ca">nk.ca home improvement audience.

We=E2=80=99d be=

interested in a product feature, sponsored article, or another promotional=

opportunity you offer.

Some content topics we could cont=

ribute include:

  • Home Improvements That Can Mak=

    e Everyday Living More Comfortable
  • Smart Ways to I=

    mprove Your Home Without a Full Renovation
  • Practic=

    al Ways to Improve Energy Efficiency at Home
Could y=

ou please share your available options and rates?

Best,
r>=C2=A0Ecoline Windows


olor:#aeaeae">
https://h1.pxl-mailtracker.com/tracking-consent/NkVWSy9YSTBBNWNuMk5VOGhVV2w=

wN1gvU0dSMXpFWXgxY0MzajNUYWpPSGh1TXBrTnAyUzV3QzJNSXdRSldSRWpTVCtsZHBHSjZkZS=

9nbDFtRkxTeFh4TitKeDZCQUJwQkVqRUFFUjJETDkrMlVZaWxEWGdJQ0xMaklYdGtOYmc1UXlvZ=

kNGdWdIdzYzTGw5RGIwRUJSaCs0TmZWMXYvZkcwRnJxNzlzOVVFbVhBd0N4SC90OHJGN3JQSG15=

VEhMLS1HT3BJYzNVSTRTZ1BtTjdJSEkzKzd3PT0=3D--3e853f49e5afbc1f4d0c1b175c8802a=

7dea5cbc2">Manage your email tracking preferences

=


derline;color:#aeaeae" href=3D"https://h1.pxl-mailtracker.com/unsubscribe/W=

UE5S040NDRsREI2VG9YTm1CT3JuWk9qUEJycFNjYlhJcm1TSVk3cWh2VUVvOUJYZVBoekJialBn=

S1VrWXdLQ3k3blAyVFYzT0h4L2lNalZkUE9DU216ejZnb3J6Y0oxTzZSL1ZMOVJlOGVhMjArL0d=

lbitKRDVBRHphQzZvRHNUeDh4R3hYM1F6ZmNqcGxXaFZrUVZrb2RyeTVrMWV6ZDA3OGZxK0NZUW=

JCeEhFVjAwalBzTzV2NHc2SkVvRlRnLS00eVp2enpXZW4vdGtmazhjVVVYQU53PT0=3D--1af4f=

dc086e83c4237c438717ac178515d3fd21b">Click here if you don't want t=

o hear from me again.
l/edc545331fdb1cbb64b535acdc4b8c9a4c47cb58?rid=3Dedc545331fdb1cbb64b535acdc=

4b8c9a4c47cb58" width=3D"1" height=3D"1" border=3D"0" style=3D"display: non=

e;">



--00000000000043ffb1065e5a28d3--

Amazon Prime phish for Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 07:15:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJWA2-00000000KYE-0QvI

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 07:15:18 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 07:15:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f2.google.com ([74.125.227.130]:64793)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJTCH-000000004Oo-31Xo

for doctor@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 04:05:35 -0600

Received: by mail-pj2-f2.google.com with SMTP id d9443c01a7336-2e651c30dcbso2026085ad.0

for ; Wed, 21 Oct 2026 03:04:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rrqx63.juventus5.biz.id; s=google; t=1792577072; x=1793181872; darn=doctor.nl2k.ab.ca;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=9ulrljOCYRqYMMYVF23GmarN6ZAS2Cik3sGHgOru9mY=;

b=cZoapHYjT2Y4nK/iIFhEu63ZE5PpAoDROcI6v12/YZLqzPGpBJSY0Ib7gB1Ije03of

mfUNXz4AteQuZeHPTQMerhIjnbigkeX3jth+/QamBxM6fVkUDwIzpB+98tZsQ1x6QVyr

p1rxt26x75+ZQZwFPSPidsCfZcBUwpUt1LEW2sI4AIxqAFORT1zPRl/MNY/0jIZGPos3

wzdywKr/ZUFKYj9+TVi3l0jst7tSTJV20K7EMZORXGvfjGYcrf716fsKkpGDMTtmh170

7+9pm8mqKPIInydEw+kBhd0j/OqMzn4TVLXVFTQPXIpq6P8hEYtuaIPqQffvHR1lkGcq

7HiQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792577072; x=1793181872;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=9ulrljOCYRqYMMYVF23GmarN6ZAS2Cik3sGHgOru9mY=;

b=ul5a7K0lfnfWVfYff4GpyhZX5Lp+LIWH1FxHO12Jsr4J2ZK6oq2Cz3WFNsSEhGH1fe

UWnEUt69aGe8BD/7CTTfKabF13m9BoBd85qojaaMRZaCN2FeYij+IuUzW02NDGlWzrnL

QyI/FwKK7r5M0km89ijTP3a5apqOdTQbs14JYvSEh86+ODGv0wnuGu9lu0Bk3VTCtEk0

GaNhHyjfLudDZaalan0bJMcJ8c7uAN4VNhkBIXhJfgiHtw35Aw6nCNKcDtIIpFI93gHd

4Ch4hFghONBugbGoTXSGP0hm8bRIe4BZUOD6iE9suCTVGeGk2GDIJG50sTyHWh0XHJjt

QXjw==

X-Gm-Message-State: AFq9FYL3F4YXwcWRMy6TbqtOmp6z5zGDbUULRrPQG19WO98bD9oqKq1D

bNb2KLm4mY+TJym7SssxLQHQZpHjDpl7tkqJ0itZSDIzrqyhO0MZv3g0f7x2aCDhVnfTxlvYxUx

VlyyAGF9rEpc=

X-Gm-Gg: AYBFou3J4QlelYJF/rwaC8NKVSRItXdET1sPBcThyxDXD7E/YuhIiZxrbEAd8dEq2x8

pT9B5eDrPCJ35A+GECl6TXLhAJ2Jg8ZR6ozwjpIF17i1p1y13Pe5AOh0ABTT/QUFjLRxZqy3Zr3

PIArrxQYLKyR38nF9UMmUiwPqXs+0Wdced7IlcWDVpZpx4l/OEI1fLnHH+QMC2FordVRcYHG6UI

FRvjT4ry81ufCYYos25G2mPz4mivHoRZf91W5cAcnWBqD33Ilr9pVXj/9wPzAGW5kpiOIMuuvS7

z9AP0IzK+l9l6eNvZMyQLtu3Oit3iqWA4i6eIZCWSkeyS279BnVQraBaXBCDpbfL6H4BQX7ZN01

Ow+yzirLKFjDrJl0pu2YKBTaNJuNrlqT02cnFY4K+ttbINezxAP1XbhWfqHiyjHiRc6WSDQgpc1

sfBrL/tYgPN55vrB70cPNkcaM5CMWKkOKZK1/4d0zpucfkpdu3cxtXhI3G+FIEikw7e0PvWmtL3

ZUKMDJPq5/8J8wQ2SLtCLwSR+I+Pi1jKtl/sXKnqudn/rby6slE1FlMdPZHTWFDUPk1NjdoUVOH

2ulTNrwewMPsKWCGNSrecq28PSTvKF94zdMBlnY=

X-Received: by 2002:aa7:88ce:0:b0:8a0:1e49:71bb with SMTP id d2e1a72fcca58-8a089d8bccbmr1266599b3a.57.1792577071975;

Wed, 21 Oct 2026 03:04:31 -0700 (PDT)

Received: from mail-qv1-5727.google.com ([47.237.157.222])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-8a0894b49c6sm704311b3a.17.2026.10.21.03.04.30

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 21 Oct 2026 03:04:31 -0700 (PDT)

From: "=?UTF-8?Q?Prime Membership Service?="

X-Google-Original-From: =?UTF-8?Q?Prime Membership Service?=

Date: Wed, 21 Oct 2026 10:04:28 +0000

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Wed, October 21, 2026 10:04 AM?=

Message-ID:

X-Priority: 1

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 10.6

X-Spam_score_int: 106

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Prime benefits are on hold due to a billing issue Hello,

We're unable to charge your payment method for $14.99 and any applicable

taxes for your next 1 month of Prime. Your Prime benefits are cu [...]



Content analysis details: (10.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.130 listed in dnsbl.ahbl.org]

[74.125.227.130 listed in dnsbl.ahbl.org]

[74.125.227.130 listed in dnsbl.ahbl.org]

[74.125.227.130 listed in dnsbl.ahbl.org]

[47.237.157.222 listed in dnsbl.ahbl.org]

[47.237.157.222 listed in dnsbl.ahbl.org]

[47.237.157.222 listed in dnsbl.ahbl.org]

[47.237.157.222 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.130 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.130 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.130 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.130 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.237.157.222 listed in will-spam-for-food.eu.org]

[47.237.157.222 listed in will-spam-for-food.eu.org]

[47.237.157.222 listed in will-spam-for-food.eu.org]

[47.237.157.222 listed in will-spam-for-food.eu.org]

[47.237.157.222 listed in will-spam-for-food.eu.org]

[47.237.157.222 listed in will-spam-for-food.eu.org]

[47.237.157.222 listed in will-spam-for-food.eu.org]

[47.237.157.222 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[47.237.157.222 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.130 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.130 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.130 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

3.0 URI_GOOGDRAWPREVIEW_MINFP Link to image at Google Docs, probable

phishing

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Wed, October 21, 2026 10:04 AM?=

X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message

X-Antivirus-Status: Clean



=0A =0A =0A =0A =0A=

=0A
=0A
=0A
enter class=3D"x_wrapper" style=3D"">=0A
" border=3D"0" cellspacing=3D"0" width=3D"100%" class=3D"x_main-container" =

style=3D"width:100%; max-width:578px; min-width:343px">=0A =

=0A =0A =0A

578">=0A
n=3D"center" width=3D"100%" style=3D"margin:0 auto; width:100%; border-spac=

ing:0; font-family:sans-serif; color:#4a4a4a">=0A =

=0A =0A =0A =0A
>=0A
=0A =


=3D"border-radius:16px; font-family:CircularStd,Arial">=0A =

=0A =0A =

=0A =

=0A =0A =

=0A
tr>=0A =0A =

=0A =

=0A =0A =

=0A =0A =

=0A
=0A
" width=3D"100%" class=3D"x_logo-table" bgcolor=3D"#ffffff" style=3D"border=

-top-left-radius:16px; border-top-right-radius:16px; background-color:#fff"=

>=0A =0A =

=0A =

=0A =

=0A =0A =


tom:24px">
ORw0KGgoAAAANSUhEUgAAAGEAAAA2CAYAAADXjffsAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjw=

v8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAABYOSURBVHhe7VsJjF3Vef7u9tZ582azZ7yAMXhsZ=

mzAGEMgLGmpWVKWxEQgVYXSkKihaRWUqmojkSpRqrZq0lQKShBJUSXShYQGFShlc0gAE0MMBIgh=

xMb74HXGs89b7rtLv+/c9wwxMPYMDgyuf/u+e+9Z//Pv/zl3rJiA4/CBgl2/H4cPEI4zYQbAjDd=

HQq6BoW4WL1s/xxDMeCaUA+C+jSG++4qDiRBY3Q18/nSgmE4YcizAjDZHEo9d48C/vFTBthGgf7=

iGe14u4dl9b2rHsQAzmwm8qmGMgSiPUYp92fPQb+cQBJGpO1ZgRjPBIuHnFCxc3DGEruoBFINxn=

NVcwfL22jEVUcx4n0A3gGH6hV8PAKUa0NsBzM1EZNCxw4bpM4HUqTiAiwBuTCoFISIPmEAKI76H=

0AdaU0CTq2iGL3ENoZ03ZkTks6MAEZ9slsSWAyui8Wd9ieKvetIbhbDCX4KV5iycknUu0XXCUcA=

rcswqAtZVWZcjPjE7RtQeiyM7UY2OPI0DnJpoopAF0qxPo8IZM5zP51zClUNVKsimiHzWQd5QYw=

y+VUAq4px1XidzVIhXBqNEzidCmq+F68u5LLDY2AiGZtMgvPMWG3wmhykzQY3V44FtATbsdZENf=

CxdkMLCTuCn24B1jGQ2DwUkDtDZHGPlwgz+YAmwJEuiW67pL6TWvAGs5UV64bTZwFWnACPjEdbu=

rOG5PTUMoAm3fATozgE/2Aj0DUckgI32PHBdD80UGSx4Zi/wxDYSnVw/q8PHmYuajdY8RFye3wW=

MjlWQs0tY1Bpi9RmzcO4JwAE6+cdYt35rCRuHHURBgFxTHr+zwMcfnpZCd7aEqpVDmv4oJC2dKM=

TQRIBHdmXwk60+Ng3HKPk2xa2KWU0eVnancR3xX5iP4FkSF63TJnETHA/Hhakzga0DXjc9XsOj2=

zzkKSJz24FM2seWwRCVKEuJpXRRMrN0oFmnip7OKv720hYsLkgLIkQc5NYnQ9z5eooaAZzeNIYv=

XFzA954FNuzn+FyHlwHuuAL4SLGE6x8I8PJIMzgc5mer+N7qNE5rDlGLHfzzerZ7KTFbXbkAvbN=

cbN05jDfCFkphTGmewKDXBFownOyO4IyFRby6J0QfPX3NtqkXnIv4umEIxylh1bwM/n6VhxaGwF=

5ACaek/2rYw1eeqOGJAx7StRC+45j5ikGZq7HIqAxWtFfx1UvTODPPMptqRzBKFLMlNX0yqCvb1=

ECMdWueUbVqpoxNJWDbfhuFlIP5LSFOyAfIOD4mPBv7vCzWHSjiu08PYVA2hlIlPQ5IQKGWplnY=

VCrg1h+TAfsChCRWioi7bOaR2S7NmGfHxjxJ/S2apCKlXohnIjYmSOssyt4bFRePUbt22S0okg7=

NdOrVdBNylBqZqS1+EfdvBjaVHaSyNjrSMea6gREEi4QatQt4creHzdQUh/OCmtvHdf7DE2NYv9=

/hOAE8Ir20GOOj1N7O9iwZSWmJI7w84ODfn2OfmKaYOIlGBjuZqcPAtJgg1aESI0u7nqM5SnPGT=

/W6uPPSFO6+3MH3r3BxyzlE0hug1NN+knCP7yvgV4NJ54Ao+nZDOmJQuzFSpmQ5NcydBZw010Fv=

F9BGQlZRhI+8sc1aWI12PKAhCIiBZQiVLCIbsqU/gctm13D7KuBHV9bww48Df3mGD5fSbJEyDu8=

dto8vrQhx15U0c1fHuO1yF735CUOwbBhghO32EhebY9eI9yM0a2v7m+jrEv/1uTMdPHTJAP7n4j=

dw1+XAeR0lKktIC2Fh7XafmlU3ueyfkH9yLRBMnQmiBKHsRZzaJaOLIO1wySLgrDkhuosVLCtWc=

W1vCud3taNA0+ISq32Bi1f2qD+R5BgeTZIk3eG9me/XLKzg3tUpPPoJ4CdXl/CjKwIsL/hmQVQE=

cDqk4wqn5wPfzQLpCGX6pAmGMW4eF3V7+PiCEEs6ApzaBnxsYYoBQkBBoZax36y8hdU9DpYzylr=

SWsZ582imOjLGzGaCktkSocXhHJYxVY9uGDRBBOUd53RU8NnlnLZ1FsqF+ehqph9g35rloUyh6g=

9yfE6EVAYyubPgMDB1JiQjIxXQumvxdg2uExon5MheUB0VzXS5Ec4+kWaEgsBHc706EKFC6ZJsB=

LwzLqI6p43GLu2kc2930MLucHNUezLLoffVoji4iB7FaRKdhOcAKc4XUwjEYF1qF3H6DM2dFhUj=

y/IQtDpIkYtBPShwadjEfBpTvmXNOIUMO3PMstNkSJYnRwIra7TzxZE2jNtJ6+7OgoJAWR/Y5Qr=

W9QFP7wyN+dH6OjOhGc8AzZshbt1kTgam3dGCmIRtcF4OeHaLbRYtkkhiB8d9cxf5ZyTU0TLOlv=

eh8RBlou+wXBL+b6/FuOzuAOf9J3D+f3n484cDbK1QakjoglPB6tNcapyfaCkHk7DFB83uu8PRZ=

YJ+DA/0xLCR8yfynpQYHs1AkLM3d/ObgPCtSuxZ6FL0UyS0RbM0UqpibMJnEOAwEmSITm2bnynh=

prMyuH6petLRmwH0G/Ht8HBUmdCA2CzHBkN0E0Za/CcTUKRhlemQpM1EkK8SJNjTtFGIPAkTk1F=

p9vn0N5/5aB7X9KRw05IAt6wEvnVhDfetzuKvT69gnqeUjpGXGYRRAOFICHxUmNCQ9MaT1LFKSd=

i2awgB1UGlaUYLC2dnaJ4abY8cptp++pBwQdorI9KSTyHDJKJM3ySf0uWP4YtnAF+/EPjax1z8B=

ZnwiZ4M2otcI3OFmJGbiC+NSXCW/zu8LkybCdpyUMQSalLG7cMTwITPRVCF7WACPx+08dB2hnVs=

oygjl3awkmGnEzPGl7Ois5WTdqMklKsycXonkPOv0TEKHKq+IiUtSzba4lg1dmPyynb0Oyy3qHl=

MuxIicGxJt4ioAvOszIzPtl5M4kFTE5dNCKyQ1DGoWSjxvTPHLLy9ZpytEuG1fTU8vFXrDA3O0g=

6TjLFugIscF1JiJHFJzLDeE42YDDjV9MAlAkl4aGHUzeIbT5fx6cd8/NnTKfzpmjz+5qEQr5eLJ=

C7Vmu1XtIxhMUNG4RUzwnHFDL5GjCLk+HLROO9a2m+CQthsxGyQ/Xxb0VCIPON5mTeBMnPt8TTG=

S0cVOGHZPMdMpESMQjievHMMh4mLnoW7oRELNa+iu2xYM0zORFXkKc0ek4trzkihhVl3jXx83Wr=

DV58McPNjIb7xTIh/fM7GrT9zcPOjMW58MMJPN5fM1ooJw83Mgjqik4DwmRZI8iSlIpJEcF+Qxb=

N9KTzwGvDgjgo2+VRJSnwrCbQoN4LPnFfEHE8ZZb0/pVULrh2MHhTyvh0dI00kvNgjhmqXJdSGn=

+J+hsIaTnUlmgNtKPosq8uowU9EJjlRZZ3KUgdNBYFrkBAxyDZMqTkeShTcCsNmwyoSc9Vc4PdP=

oT/jIvPU8nKlijW7U/jOLx1850XgrleANTstvELNH6xyLo4jn6e5jhSmzQSpvNboUQJbwxJWn0p=

iN48xRBsl8krl08hygT0dIb50eRErO8mw+k6jJi1kXbTGE1zcCHIowSvkzALeBiReJmWjyDla6C=

BzdhXjKS3SZY4CNNNSdUQjaAsG0VEZRobpe81NGyIow9U2g0u/lLPKKFJLmolvlX2M8HA8tSt6P=

maFYyjGw+iMRsHci4xgbz60OFX81UV5fH6lg3lpagTnNbJCXGX+lDRo7JOKIU7oyJq1SaveaSnv=

BtPewPuTRyUBSVmO6nrbVXl0MwvdvpdXf4X2NcKSLgu9XRl0ULqYYpEkkn6dijkYYiCxY4wIsJ3=

v2OgpKNYW9g3NSCBi+y000BO0SFqZth6WFaokhCQ+xB5mgzvojzJyFKTAKUUmW2Y+AoOBgMnjVs=

4zYpImG20c4+Rmn/MqhpFmetjH2zYmZtq3aua1kGNkDaOSnV+xXN13EI8X9gMb98YYLvlIc57OJ=

gdL57jopqklDxiyUne1tU8/lsx4eJj+LuoaMmGHNCFCE8q4/YocLpqX8N/YW4LsNicgJpIZOUsF=

q5qODdhP5kfvzLeNjzHl5norKNpiP3XTG6ttLZLEkeJrTNUbyTZ9OY4RVb3r4jPrZD7N9rIpUb9=

kbtOEhcJBIOdvCqjFqkzaqUx6xR7qwkvYGmAziU0iZGybDEM4+HBYOBJGvSNISkSQGhdcpQPUJp=

1BiJdkTJdByHyfIoKJAYLkt2GWVKraBJV63W9AcshjhudlEDYMEIhAyTZI0kD3xpL0Un9mnWZLi=

CVImGHaGCSTMZJx+GvGSPon7VST4K/lUHHhNS6+myUaP2Ue6teRQ4LTFEFTpBmxyMnpWdvNqagh=

S8dhqjB1JpDS0uAxt5lRByVSLzrLZJSjx+MwdZi6T9DFnzs3ARt2VhlghPBcB587N43uQl2lj8O=

UYMpMEKiDxYRGe/hyihXqU3PE8MKk7R9eNph1NZ4YOJgn2Xrz1ACWG5LVyWb8R8Og1J266tkvGS=

/5nQymxQSBIkKzQ69IhQyJnSYTMXz4NUE7n9qCJ3BtNROiyu/pnXUkunYntFVnDqX4rMjaiyukp=

phBCkSMeRmsKEpM9o4agcQ7w7SZAEq+DrQ1RcpIDXnO6GByns9wqIe+9HDMsfmo7RI+9ZcdbB+p=

4eV9ETYMprFtzMYYmyowyTkhZucd9HS5WHkicHYrgxYJJ2khqti/DSaosZKaO14FzpsDrGhl9Gw=

xXNXpk+Zmi8b+/IcNRHyRyzbEd7E1SOG+DcDDzId2MuEbooDL4qR52ebTFotZe2J2sqzoyQ7g7h=

s6keXylfe8mWNMbh+mzgS21lntNfdWMTg6gauXtmD1EhsLC8yDOZcYoCE/jIxIUjIRxUefn8JXH=

q/imf4UsnaEPCvS2hK2SV6XeYdfNbvGe+kQK9QeN4pRtMt45rM585FZitl4TC0igUUUM/67wbTM=

kb6g+PUQ8LW1Adb2u1RH4LqTQtzYG6GzkNhQ22QwHzLQFxKWZxgxRqnfsNeHk0qhhQUe7VOKaiI=

fIG0PIgt9bHP3ixEe3lzGBPJmG+PVT7Md27uxApVsYjoOQ4rp+wSm931VB7etq+D+rQ7GIg9zsg=

FWL3PxyROAnuYKXE9fVkjBpZpK5ur5sYxlAzleyrzf8vr+QGPVZj9ECEkPeJkzBm1RJNsUaqi9L=

rXw6AOMs3YyLGEtGbF+N3D9/wYIqD2L2hzcf23abN3bZlwyi+OIApPBtJlgUOfPAeJ1H3OG29eX=

MVh1Tc7QkrZw9uwIV53qYOU8oI2hhUtKG7y4xpDW14m1sVEH7a6aESWD7xMb9BFaAyFzt5CcQiR=

OWUQWE1TjhCFGAwcPvQGs21TCinlZ3NDLcjZ/ZKeFm38M1Gijr+ux8M0LKHB2Y0um4Rcmh+lrgk=

GPF8OxCuOBx/eREc8Cm/b5GKdFjOkfilTvZS0BrlycxvIFNhY01dBKx2Hp2xTWSwMEDRbIfb1fm=

qDTPhFKUtqY00RDipCISWDl0U9zs3tcn7XQOW+hqRlmeyK7Yi5wz6Vsys7fejHAP73oIsMFfH0V=

cO2JJQROrr4WFipyPEzu9B7Mkb5Qo+Pho8s8QXu9W6pZ3MNo4gcbxjEYNxnCUogQEtn5FK/e5ir=

OPiHGysUZrKQfke1MAjmuVp/ImQOZyRE+ekBiK57X/MYEuSS8hzEivXEQeGpLhBd2V7Bl2Ea/n0=

E6GkHVSWNZq4UvX5jGubOAcXa74b/L+PlQFt3uOO74ZBN6CyXU7JzZXdYJoqVd2d8WE0Q6xcA6X=

NFS9P2osuiIZuap3Ta+vX4C64eazKfu+lI5ICeU1GSIUzauore9htNOasJymqtTCsAcGlJ9hMvA=

430Cn6G2g0HfwW6dbVDi19PcvLyzgs2DASasJpOU6RzBtgPMcwJct8jCjeek0ZHxYcceXhu0cM1=

9wDDX9EeLKvjyRRk0O4lwelEFIRO2Rt48Gbwnn5BIsSLhZBLzES0hpmTt4+Ke6gN++PwAnh9uoz=

Ojo+OKzFEH7ZDv2WRcgDz9QZFhRUvOwYk0V6d2eehu1ykdMJfBRYacqzHSktkwttrMwVWbzfJDg=

VjJxhnHmgiKMLPDMqU8jRHipe9Md4+S2JT2DXt1UAOMTLDbxAhKzAv0ratPydVRqlxFm1XFZQtC=

fOqsHE5nIlZkuY5lQzrib6+38HcbPHR5If7jygjL2pPtbPmSI/UHgvfgE94OGkgX8TRPE0RhP6X=

s4VcCPPi6j00TOZNpGuIQO/M5YsQUiYzQgX9M6RKxlYfnUUV73sWsgo2TW2toK2TJKAtNpL1OvV=

rZkDGANm8PLlSBQo08qnKOkh+hVKkxwXKwqeRigOK6e2gCB6oWRnwJBEnEjurjU2Ir+ohAg/BdF=

GlP+ebb08uXNuPCU4AOVkmAkqgJ2E+n8oUHK1g3ksGtK2r44+UeUhxvOsb0qDJB8qlLRPHMCZWc=

HJEmcbdTAtftAu7dUMYLg1mka4FZuDb/xBSprTRDRAmZfeu8WYhJGpUjJZqgP8KgAaR2iGnipEN=

KNnIh+R/TX8+6s5/Mianmu+46/Ne45AXDCfmzJLHUPo+UaBZGcckCi8QvmD9e6SDTE+3TQMmGpd=

jwxB4Lt6wBzm4p45u/R7zy+SQ05TVVOKpMAFVUp+QNRJPlJk+WogRONcyw6Rd9If51i4MdeyYwM=

GGZP2sSURU0iYBqr83BFH2HVLtCUyIC6pIpMM9y5IeCwmDd+GsuvticM2W+bdIBpGyJhEJj6G8e=

iCfbtFAlT2y2cMHcGi7p8bCUZif5sykRnoalzmXNKCI71N7vv2bhma1VfHFVExZndKaeoZCoxdR=

14egyoY6EBmzsmTQQl07IpiNMwsBxNGH/eIRf9gM/2+Pi6b4Y+2mrRRh90CWJ1nLkzKkv6klICC=

vtKDNSORRUnpArAeEhOPgVBwu0pSDp11cbS9pcXLDANXtgi4sxWplsKvbXVxbCO9k5DamZyRfWK=

tNQOofewbyhyIIMxV9ip5WabQrWTxWOKhNEaA0m02G+OKCDlAQKkq/V9EVcmr4CaOKrMG5sC4/T=

hr90wMYvdvjYSIO7u+zRdlsY82NUGXEFVBMFAMZssL3+oONQ0NeAqtOMNgnlkisOr4wXoZkGu82=

rYUELHf/8FH63i46fzr9ZTGEb7QCb7WlejralJdfyU3zS8a2ZleaowQhbWm/EhKkny03AwZk/cC=

a8dwipARbGqQqMEulE6QCpONrB7KeW7B8JMFyOMEqHu72WNzY/QZ9mhcScbZfRqlA366Ajn8LsI=

h0sw98TeJ9N2z6b0tGWEmNISvqjmQIziglSaIV2idawQLbHAN8plQEvSaJkLjEYCSRskCYm9lia=

IDNmDlTM8niZMw+NY+SY/99uzj4omFFMkII3CGpMSv1ZuzgJyJ0moLpDQXVvbZmwMMlmBI063Y1=

/miEws8yRtn9FIjpG41mEmaIT1R0CipLeBqR6o7hxTxhRH8pc0g5qkdkimRkwo5ggRETwBkIyLo=

p4GpRslOsuN30oaMu5QXTTynSQCVKS9eaftipoToLZmQEzzDH//4R3Mq3H4X0F4P8ABwZVfDU9S=

DoAAAAASUVORK5CYII=3D" height=3D"65" alt=3D"=0A Information regarding your=

payment from Amazon Prime=0A">
=0A

ffffff; text-align:center; padding-bottom:52px">=0A =


=3D"padding-top:32px; width:100%; border-top:1px solid #e5e5e5">
=0A=


>=0A =0A =

=0A =0A =

=0A =0A=

=0A =

=0A =

=0A
=0A =

=0A =

=0A =

=0A
id=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"fo=

nt-family:CircularStd,Arial; font-size:16px; line-height:1.5; letter-spacin=

g:0.2px; color:#171731; text-align:left">=0A =


ng-bottom:32px; font-size:18px; color:#00405D">=0A =

=0A =

=0A
d>=0A =0A =

=0A =

=0A =
=0A =


align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,Arial=

; font-size:17px; font-weight:bold; line-height:1.67; letter-spacing:0.38px=

; color:#13126c; text-align:left; margin:0">Your Prime benefits are on hold=

due to a billing issue

=0A =


:12px; font-family:CircularStd,Arial; font-size:15px; font-weight:bold; lin=

e-height:1.67; letter-spacing:0.38px; color:#13126c; text-align:left; margi=

n:0">Hello,

=0A

ass=3D"x_email-paragraph" style=3D"margin-bottom:24px">We're unable to char=

ge your payment method for $14.99 and any applicable taxes for your next 1 =

month of Prime. Your Prime benefits are currently on hold.
=0A =

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">=0A

s=3D"x_email-paragraph" style=3D"margin-bottom:24px">If you don't update yo=

ur payment method in the next 6 days, your membership may be canceled. To r=

estore access to your benefits, please update your payment information.
iv>=0A
=0A =

=0A
resentation" align=3D"left" style=3D"width:100%; max-width:303px">=0A
>=0A =0A =0A=

=0A=0A =0A =


ogle.com/drawings/d/1LulZyQ82Mf6R-InxWbT-sumJZk_K0THNkDga2PVT1u4/preview?Ug=

Mzi" target=3D"_blank" rel=3D"noopener noreferrer" data-auth=3D"NotApplicab=

le" id=3D"x_bill_view_link" data-linkindex=3D"0">=0A

tn x_btn-primary" bgcolor=3D"#3667e9" style=3D"padding-top:10px; padding-bo=

ttom:10px; padding-left:30px; padding-right:30px; letter-spacing:0.8px; lin=

e-height:1; border-radius:12px; border-width:1px; border-color:transparent;=

font-family:CircularStd,Arial; font-size:14px; font-weight:bold; backgroun=

d-color:#FFD916; color:#000000">Update Information
=0A

=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"font-=

family:CircularStd,Arial; font-size:16px; line-height:2; letter-spacing:0.2=

px; color:#171731; text-align:left">=0A =



">Sincerly,
Amazon Prime Team=0A =

=0A =

yle=3D"font-family:CircularStd,Arial; font-size:16px; line-height:0.5; lett=

er-spacing:0.2px; color:#171731; text-align:left">=0A =


bottom:24px">
=0A =

=0A
=0A
tion" width=3D"100%" class=3D"x_responsive-padding-x" style=3D"background-c=

olor:#fafafa; padding-top:31px; padding-bottom:31px">=0A =

=0A =0A =

=0A =0A =

=0A

eft">=0A =0A =


om:16px; font-family:CircularStd,Arial; font-size:12px; line-height:24px; l=

etter-spacing:0.18px; color:#171731">=C2=A9 Amazon.com, Inc. or its affilia=

tes. All rights reserved. Amazon, Amazon.com, Prime, the Amazon.com logo an=

d 1-Click are registered trademarks of Amazon.com, Inc. or its affiliates. =

=0A

-help-link" style=3D"font-family:CircularStd,Arial; font-size:16px; font-we=

ight:500; line-height:19px; letter-spacing:0.6px; color:#171731">=0A =


rgin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; font-size:=

12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color:#17173=

1"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

=0A=0A =

=0A =

=0A =

=0A =

=0A =


=3D"table1footer2" style=3D"border-spacing:0">=0A =

=0A =0A

chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 07:15:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJW9o-00000000IxI-1LEQ

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 07:15:04 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 07:15:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.75.48] (port=53290 helo=mta75-48.mmglsmd.net)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJTDF-000000004WO-2rVO

for root@nk.ca;

Wed, 21 Oct 2026 04:06:34 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.shinestarsteel.com; i=@hn.shinestarsteel.com;

q=dns/txt; s=umail; t=1792577132; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : list-unsubscribe : subject : from : date;

bh=IBXRql1fkpDa1/xuKWeABjDhZGh6uC3YNFoJaT13DLo=;

b=SFZR0NamY4UvL3Cusru1DQEgdAQeWbNKBwdxnLxvc5+ixIlgqw7okUjZ

QOF2F24/LYE7y4krblN9TuN7g4fWZe0LTJ4l6SaPpyjDgUvGHsW5hsjQyw

py4mJ8J+ITOJDfE5pQsjoMMRwLnU4Vi47Ert05OPvAGsvcYsDlahN4Nlw=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.shinestarsteel.com (Postfix) with ESMTP id lHVEwFUOojdc

for ; Wed, 21 Oct 2026 17:58:09 +0800

Content-Type: multipart/mixed; boundary="===============1214661499422154050=="

MIME-Version: 1.0

Message-Id: <20261021175809.62199-{13453:20261021175213-13453-100}-0062123@hn.shinestarsteel.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3A_Hastelloy_/Stainless_steel=C2=A0=C2=A0pipe_and_=C2=A0fitt?=

=?utf-8?q?ing-elbows=2C=C2=A0valves=2C=C2=A0flanges_--Threewaysteel?=

From: Sophia-Threewaysteel

To: "www.nk.ca"

Date: Wed, 21 Oct 2026 17:58:09 +0800

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Mail-ID: 6ad88bc1e1382308ada268c3

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Good day!



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.75.48 listed in dnsbl.ahbl.org]

[160.124.75.48 listed in dnsbl.ahbl.org]

[160.124.75.48 listed in dnsbl.ahbl.org]

[160.124.75.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.75.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.75.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.75.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.75.48 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.75.48 listed in will-spam-for-food.eu.org]

[160.124.75.48 listed in will-spam-for-food.eu.org]

[160.124.75.48 listed in will-spam-for-food.eu.org]

[160.124.75.48 listed in will-spam-for-food.eu.org]

[160.124.75.48 listed in will-spam-for-food.eu.org]

[160.124.75.48 listed in will-spam-for-food.eu.org]

[160.124.75.48 listed in will-spam-for-food.eu.org]

[160.124.75.48 listed in will-spam-for-food.eu.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shinestarsteel.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: count.shinestarsteel.com]

[URI: hn.shinestarsteel.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist

[URI: ns18.xincache.com/112.80.181.111]

[URI: ns17.xincache.com/112.80.181.45]

[URI: ns17.xincache.com/125.94.59.210]

[URI: ns3.dnsv2.com/125.94.59.155]

[URI: ns4.dnsv2.com/101.227.168.55]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.75.48 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.6 J_CHICKENPOX_73 BODY: 7alpha-pock-3alpha

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?q?Re=3A_Hastelloy_/Stainless_steel=C2=A0=C2=A0pipe_and_=C2=A0fitt?=

=?utf-8?q?ing-elbows=2C=C2=A0valves=2C=C2=A0flanges_--Threewaysteel?=

X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message

X-Antivirus-Status: Clean





Dear Purchasing Manager,





Good day!





Greetings from Threeay Steel !



We Threeway steel as one of biggest manufacturers and exporters of steel pipe and fittings with more than 32years.

The material included Stainless Steel, Carbon Steel, Alloy Steel, Duplex, Super Duplex, Nickel Alloys, Monel, Inconel, Hastelloy, Copper, Aluminium & Brass Products.

Since our establishment, Threeway steel has been committed to delivering superior-quality products and reliable services to clients across the globe.

Our product have exported to Europe, South East, Africa, South Americal etc.



Our main product:



Steel pipes, tubes,

Steel pipe fittings, flanges, gaskets,cap , etc.

valves

pipe spools,

Steel sheets, plates & coils.



Our product according to international standards such as ASTM, ASME, DIN, ANSI, API, DIN, EN, JIS, BIS, IS and ISO.

All product can accept the third party to test it before shipping to ensure the bes quality for all of our clients.



If you have any demands, please kindly contact me.



The best price and delivery time will send to you at once.





















If you have any inquiry, pls keep me posted. Thank you.



Wish you have a nice day.



Best regards,



Sophia Zeng

Sales Manager | Industrial Pipe Division



Threeway Steel Co.,Ltd

Tel:+86-731-88736283 Fax:+86-731-88896236

Mobile : +86-13544036536

Email: sophia@threewaysteel.com

Website: www.threewaysteel.com

Skype: zeng.sophia1 Wechat:meiping77



Hunan Steel Industrial Zone, Tianxin Special District,

Changsha City,China



NIgerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 07:14:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJW9h-00000000IvO-19Th

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 07:14:57 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 07:14:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yx1-f48.google.com ([74.125.224.48]:44317)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJSnd-0000000023C-2Njb

for Mailer-Daemon@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 03:40:07 -0600

Received: by mail-yx1-f48.google.com with SMTP id 956f58d0204a3-67999045530so406136d50.1

for ; Wed, 21 Oct 2026 02:39:10 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1792575544; cv=none;

d=google.com; s=arc-20260327;

b=C3wTNgmwGdP5bfwp7OTchy2AIpx6ATPsga4ORCPAE0dK24QXuMzJdBk8cOykNCKwZp

wvrF01EhKoCC6znRDQEhG5WAeKZxj/Psy1nMoNa2+7WIxjL7vYgX6W8OK/zb/nHThzbE

2LQsMa65/wjKUN7sDUlLiG+SHX0lNx+SdImCkE2BOHDvsW+OJnQLzd84PajDSmYkKh98

dyh8mQPIotjmi6iIi8C6cprVhCIOt/d9Y9uf5KqxbKV0VO6ETaPXtVSjhpibV8xO5ViQ

qCwcVy6JlmF2OcUmDRqv9xqKKKyVxzonuw65DReTTrRMNKitBLtLxUTK3YMCrI9o9MIW

F8fA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=2SlJP1qkVKprcPZ6fVTz6pU0d8jlZrxM2L1s+n2svVs=;

fh=ASQMSj08Ib3fFP9w1fQ/PMbItD9O4kOo73Wq1j06uoU=;

b=qE6cvav8066edMw3TjuD2KWh+gAIeosvGQU+PPIGl8svGFpHalO75iSoG7AY6QDyD3

0SnGNfJbK9GShPGhuqRt23FXR5nxX+eipCMmh8IeuP5pqoJuMouTI9IbtzESkJSfokHs

6J7DysXoMOKu8+6TnJmd40KHScIVcRdfFV+Rq3orjEeLsZ7pHC7mSCeja8idh+xa24Sn

e73eFvAMfgYpQQ3dPTpAOpOEDT1ErTlOunXLm1S7k4fUCXnjMYcLj9pCxWQARNNrWpts

Tk0Kow8DtJsjSqSD+hZI6OIsI7AbrhU+0Eq1LnpW1wf2Uniph2QzCvxI7z/VgUlOryJp

clWQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1792575544; x=1793180344; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=2SlJP1qkVKprcPZ6fVTz6pU0d8jlZrxM2L1s+n2svVs=;

b=Z8HB/B6dsJJGBWhjQ7hzEvEiN8llMpyrUYw84XAQLXeVfHFOy6kPr4ZqQLkEEEHllZ

MeWnwP2wBWzwSJsgmx++UC8OWomFZ6Gz3p/Zyzc7ETkNndX6TpU8lIAJEcBp84iX5LK9

zYrQI5iDWs6furqPJPvGPwWYaPDUOa5b8wMQ6tug2CktVKDA+sXhci+XFV33ETNnb0bU

W3m0ukHzx855PMSED+Cuac1SeDKW8AIUap9IBp5qT1qL1nGQ35Bl6HD4aTCwyFMFZtmT

+sjOn1T7dqDlBwG7D2S7FXUTa5tWGZje4rMU9qEcc910BnAE0ShI+Y887MMHtKAKTvf9

kxAg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792575544; x=1793180344;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=2SlJP1qkVKprcPZ6fVTz6pU0d8jlZrxM2L1s+n2svVs=;

b=Z0cPUA9KlVhgUaAtyJxMbtnfTp3HORjfeuvzDnAqdHUaWQx/89BLXN38GQEUs/fa6p

42WDRYe3bGJzGscz6LTlghVB3OXFIKtERFbaIach6d2elRtu5kxFJZCyxdX5HF70Z8eo

S06DGO+lLBM39e77+ZtZl832caVE54HjOWgtUHCO/atuurYbFMsPaUVljBgn63hu8uim

b6EetuqFOqM5xEFuHPFS1aGQImChnAkUNnfHOhh9jpZ26LYsPiutaUbXogaDWmPDWTaG

KwAeFGbikzBHpgW1+Rqw7KsAvAMjRijfeHwPY4mB1m34e3ok8EI8szxWTDiaPbuZCrQ0

dqLw==

X-Forwarded-Encrypted: i=1; AKwUvBxj0PBvmOhZm1ndxiDJpjhUeb4bmHQCgC7Y3rjm1Ko/eEyZ1abqVHWenR3sqUuDTXCwsVZnUdXJOhB8z11f@doctor.nl2k.ab.ca

X-Gm-Message-State: AFq9FYIG72uF8XPJbsXo1Ihj5RgWqk6uI0zN9ZEgQTh22ExY0hcOp2iW

eTjBA+P+z1irWRKya/UKJvYHJeP3oJ3Tld9tB+8GCtstmOkyEJYmOdD3ca31IFP+InUi9yFnoAD

ER1PJdGVatPCSDAwGtI0BIhLoekJCVf8=

X-Gm-Gg: AYBFou2SQL8i0SH1e82+wEu8JU8IUwwfx+u5huZrgnDrScWFIGUp27x5yeKT+uZwXn/

wZrUeXB4+uoSq/NDFRUIL1bUYCygt+dKfA+/c4HHFNxEiA5E/X9zeAsiV7R/jUGnl8ei3lGMjY3

VedApr8CiwhYGUnQQ4L5Qq9VPA5UmeaDFC7iiCEskgJy06asH15uOB5YNTXzHTdJ5Uw3QPgm6xr

jLdOI1QUltgfDQRclJnjqwN2pavJ2nv7007usV0BN1mMdjgJKvtUTMRB/k+uyQfJHDwwG4vBWbm

/JyC3LxFYx4hP8ZCwBiqdS+FiO9lg9w+/ZX5OIyRYcQ7XmzO2uL2aG/7c9doPoua6y951ZeR8ga

bLfQV8Cjw8m5f6Tv9QgUcIiRbJLautDbRupSL3LJxcHsnXoChDbtCAVxyJ9Gk9VyDkH02Boer0g

==

X-Received: by 2002:a05:690e:43d9:b0:679:ba6e:4d87 with SMTP id

956f58d0204a3-67a0e4b6766mr540828d50.31.1792575543803; Wed, 21 Oct 2026

02:39:03 -0700 (PDT)

MIME-Version: 1.0

From: "relieffunde@outlook.com"

Date: Wed, 21 Oct 2026 15:08:52 +0530

X-Gm-Features: AclHuK8-qIy9txI3a7HfPerM5xJK0om4mA2gvKag1PPpce_lhG1wpHG-JBIlDfw

Message-ID:

Subject: UN HUMANITARIAN AID PROGRAM 2026

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000858316065e56847c"

Bcc: Mailer-Daemon@doctor.nl2k.ab.ca

X-Spam_score: 22.6

X-Spam_score_int: 226

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR

UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com

YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:





Content analysis details: (22.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.48 listed in dnsbl.ahbl.org]

[74.125.224.48 listed in dnsbl.ahbl.org]

[74.125.224.48 listed in dnsbl.ahbl.org]

[74.125.224.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.48 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[billcole483(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[billcole483(at)gmail.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.48 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.48 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.224.48 listed in bl.score.senderscore.com]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.2 UPPERCASE_75_100 message body is 75-100% uppercase

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

1.0 FREEMAIL_REPLY From and body contain different freemails

3.6 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail

account

0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 FILL_THIS_FORM Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026

X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message

X-Antivirus-Status: Clean



--000000000000858316065e56847c

Content-Type: text/plain; charset="UTF-8"



DEAR SIR/ MADAM,



YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO

CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com



YOUR FULL NAME:

ADDRESS:

NATIONALITY:

MOBILE NUMBER:

AGE:

GENDER:

OCCUPATION:



--000000000000858316065e56847c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



DEAR SIR/ MADAM,

_signature" data-smartmail=3D"gmail_signature">

=3D"color:rgb(32,33,36);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-weight:400;letter-spacing:normal;text-align:star=

t;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;b=

ackground-color:rgb(255,255,255)">=C2=A0=C2=A0
YOUR EMAIL HAS BEEN ELECT=

RICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE=

, EMAIL US. re=

lieffunde@outlook.com

YOUR FULL NAME:
ADDRESS:
NATIONALITY=

:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0









--000000000000858316065e56847c--

chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 07:14:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJW9T-00000000IqI-3qxp

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 07:14:43 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 07:14:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out21-130.dm.aliyun.com ([115.124.21.130]:30388)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJSNi-00000000PzJ-1oGb

for root@nk.ca;

Wed, 21 Oct 2026 03:13:22 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.cinclineelectric.ltd:alibabak_WebBatch:483765

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.cinclineelectric.ltd; s=aliyun-cn-hangzhou;

t=1792573933; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=YYdu9cj3x4vg3BiLc1o+lW93SyPvtWaXH3H8EiP0Rn8=;

b=cBLftJmXth2Ut61AZxvzS1JAzZmUJCNraaZhdgopbZmxsOyHb4/o2FdCg+RvkuMCoSzn10eMSzxGCcJchdCJDtyOJgNaODo5FF7IC+jEv7KJ7tEotO35ZIwJktAPCSmpPVfGLWEt2CR/uuwp2zAcDLn8JiIis9+qEGOfOgqeMTs=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1792573933; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=YYdu9cj3x4vg3BiLc1o+lW93SyPvtWaXH3H8EiP0Rn8=;

b=XW4DIAvTFteyoiYkwxhRT60lQpDP41b9hFlZsH5A8O1rX1QSPKrDO+6cs8C1MQQ6GaPsjyZPZvv0/edoGaMnlltX+ZLZdEnrbsICDtu4e35sbYxcSwLAjVH9esFfJxklTYroL3DVr3VnsSIxm3lBswHqxLMvYH/AihQUDyc1OKk=

Received: from chitu-hsf(mailfrom:vip@vip.cinclineelectric.ltd fp:ma_600000365162783948 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Wed, 21 Oct 2026 17:10:40 +0800

Date: Wed, 21 Oct 2026 17:10:40 +0800

From: "Ella"

To:

Reply-To:

Message-ID: <23b34f9f-cac5-4769-b836-2b77e2721ea9@alibaba.com>

Subject: =?UTF-8?B?Q29vcGVyYXRpb24gT3Bwb3J0dW5pdHkgb2YgUG93ZXIgRXF1aXBtZW50?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000365162783951

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, I hope this message finds you well.



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.124.21.130 listed in dnsbl.ahbl.org]

[115.124.21.130 listed in dnsbl.ahbl.org]

[115.124.21.130 listed in dnsbl.ahbl.org]

[115.124.21.130 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.124.21.130 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.124.21.130 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.124.21.130 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.124.21.130 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[115.124.21.130 listed in will-spam-for-food.eu.org]

[115.124.21.130 listed in will-spam-for-food.eu.org]

[115.124.21.130 listed in will-spam-for-food.eu.org]

[115.124.21.130 listed in will-spam-for-food.eu.org]

[115.124.21.130 listed in will-spam-for-food.eu.org]

[115.124.21.130 listed in will-spam-for-food.eu.org]

[115.124.21.130 listed in will-spam-for-food.eu.org]

[115.124.21.130 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.124.21.130 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[115.124.21.130 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[115.124.21.130 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?Q29vcGVyYXRpb24gT3Bwb3J0dW5pdHkgb2YgUG93ZXIgRXF1aXBtZW50?=

X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message

X-Antivirus-Status: Clean



Dear Sir/Madam,


style=3D"text-wrap-mode: nowrap;">


mode: nowrap;">I hope this message finds you well.


"text-wrap-mode: nowrap;">


wrap;">My name is Ella, and I represent Qianchuan Electric, a power equipment =

manufacturer with 30 years of industry experience and a 69,000 m=C2=B2 manufac=

turing facility.



pan>

We understand that transfor=

mer suppliers and manufacturers need consistent product quality, flexible prod=

uction capabilities, and effective coordination to meet different project and =

market requirements.



>

Qianchuan Electric manu=

factures a range of power equipment, including:


xt-wrap-mode: nowrap;">


p;">- Oil-Immersed Transformers for industrial and power distribution applicat=

ions

- Dry-Type Transform=

ers for commercial, industrial, and specialized installations


an style=3D"text-wrap-mode: nowrap;">- Power Transformers for substations and =

energy infrastructure projects


rap;">- Distribution Cabinets and Switchgear for integrated power distribution=

solutions

- Customized T=

ransformer Solutions based on project specifications and technical requirement=

s



n style=3D"text-wrap-mode: nowrap;">With our manufacturing experience and prod=

uct development capabilities, we are interested in exploring cooperation with =

transformer manufacturers, equipment suppliers, and electrical engineering com=

panies. Depending on your requirements, we can discuss product customization, =

equipment sourcing, and project-based supply arrangements.


style=3D"text-wrap-mode: nowrap;">


mode: nowrap;">If your company is evaluating additional manufacturing resource=

s or expanding its transformer product portfolio, we would welcome the opportu=

nity to learn more about your needs.

Best regards,

Ella

=

Qianchuan Electric


ion-Opportunity-of-Power-Equipment.jpg" _src=3D"https://i.postimg.cc/D2Tc5wk0/=

Cooperation-Opportunity-of-Power-Equipment.jpg" referrerpolicy=3D"no-referrer"=

/>



Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 07:14:24 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJW93-00000000IO0-39U5

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 07:14:17 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 07:14:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f197.google.com ([209.85.167.197]:44466)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3un_YahQNBnkiblkloX.YrkX.pqrabkqXZZbpp.bar.mealZqlokh.ZX@maestro.bounces.google.com>)

id 1xJSKV-00000000PgN-2grR

for doctor@nk.ca;

Wed, 21 Oct 2026 03:09:59 -0600

Received: by mail-oi1-f197.google.com with SMTP id 5614622812f47-4b37620eb73so798566b6e.1

for ; Wed, 21 Oct 2026 02:09:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=access-edu-ph.20251104.gappssmtp.com; s=20251104; t=1792573738; x=1793178538; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=10E5z0Q1UiEejqW9y9fZb4NSgeeGFUG87rqb6hiDtvY=;

b=tDMrtnxe8EnJNW6Dawztak8kvo/ej3f35vtpI/NAEHV0AUfOexGqXi7SuvFTD5Xcel

IaOgopVBRYkj1mm/orC8VtfBZd86VVP7/fuxVms1M8pyrZJBrSPuuJuHCMZJ6FUyDs7c

EJa+6SAKvvJD17NvwiWGKv8C3tW325EE8167j70fXDn1w+hQh6VByn6+B60oH0Ngl93H

icKC4khcupkhm3HNm31QYytLGxYGiT9dTSULwZcPU9gKtLwkgIiVZR2YXA6uim8BqUxe

DyErOa+edGMQf5iwPRKNgR/L/5300G5Gy6B4SybEgtq6rSgUdPCPQM1NSIlL3FTFmKfQ

KKRg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792573738; x=1793178538;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=10E5z0Q1UiEejqW9y9fZb4NSgeeGFUG87rqb6hiDtvY=;

b=PDcJ7OKMelmkfzg2bsH1mvXh0eperZKwa9JQKUBujjJhYcmuLiqcU8V3x8Py/oEh7u

U62DA/qu/0SzJnzQ09zxK4kcsDZXobUaRGOrUPmS/UUgCxgW7O89q2tgaWpHsrQaHjnz

iOukpb40zqOptMq7EHvEjyBBGxz2OlwGm6HZPSRNQXQrt72GQwJeLkgLqAYbJ+IL9HUG

fyEmnSApzaJm2cys5NeK5pPTmcGz+xzVUhbs88UMTtToyxTHKhL/SsWGDkXoiEZ7B48N

tGIXSXhoegrMP3NFt2s4kGqhx+B5zNX8tQgPzsMcsVLjABmiCBPjSE8PHKwr9InUtUKm

ZIKg==

X-Gm-Message-State: AFq9FYIpkKfrENwXNpWTnIQ/lSTJ8U8ycU7mF1tfCwvrm+mYUp+78Oly

4EzQ3CoQw4ptWlSlTxGJNUXefsrKqIAnkKY+9k1lP2ZeBwPfphQSYZQar4+ZCAgWoAFjtiWUr/B

Gh531U/yFwnWRjEvvKs1/+fTR

MIME-Version: 1.0

X-Received: by 2002:a05:690e:441b:b0:675:4453:fb3c with SMTP id

956f58d0204a3-67a0e538c30mr423569d50.64.1792573370766; Wed, 21 Oct 2026

02:02:50 -0700 (PDT)

Message-ID:

Date: Wed, 21 Oct 2026 09:02:50 +0000

Subject: =?UTF-8?Q?Energietarieven_gedaald_=E2=80=94_betaalt_u_nog_te_veel=3F?=

From: Energietarieven Alert

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000ffab57065e5602d7"

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: TBwLxiyECaribVqKBzRmbYMieZYziwribKfcLBaaImCYQddQsYchIeizxpeUJlUjaLqwJJdsnFQnsinmIxpgaoRrg

EnetvtVhdrtHKiZlgiAwCgNQhuGRetarievJodjIen gedaIXDsetUalgAhszddCEJQPswoasqBApRpsntrolpnOxaXFhgywMeeucZQSfunkr

orlFQtof utneFQdbPXre veZWDfsvdoeeXVezTl betAxxIsteWeaFDZMCcKFeqaTGwxkClt





Content analysis details: (10.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.197 listed in dnsbl.ahbl.org]

[209.85.167.197 listed in dnsbl.ahbl.org]

[209.85.167.197 listed in dnsbl.ahbl.org]

[209.85.167.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.197 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.197 listed in will-spam-for-food.eu.org]

[209.85.167.197 listed in will-spam-for-food.eu.org]

[209.85.167.197 listed in will-spam-for-food.eu.org]

[209.85.167.197 listed in will-spam-for-food.eu.org]

[209.85.167.197 listed in will-spam-for-food.eu.org]

[209.85.167.197 listed in will-spam-for-food.eu.org]

[209.85.167.197 listed in will-spam-for-food.eu.org]

[209.85.167.197 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_UG BODY: Odd Letter Triples with UG

0.1 TW_KM BODY: Odd Letter Triples with KM

0.6 MEGALONGWORD BODY: Uses really overlong words

0.1 TW_TN BODY: Odd Letter Triples with TN

0.1 TW_WT BODY: Odd Letter Triples with WT

0.1 TW_VM BODY: Odd Letter Triples with VM

0.1 TW_QW BODY: Odd Letter Triples with QW

0.1 TW_GQ BODY: Odd Letter Triples with GQ

0.1 TW_XW BODY: Odd Letter Triples with XW

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

0.3 LONGWORD BODY: Uses overlong words

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.197 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.197 listed in wl.mailspike.net]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 IMPRO_URI_2 No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.197 listed in bl.score.senderscore.com]

Subject: {SPAM?} =?UTF-8?Q?Energietarieven_gedaald_=E2=80=94_betaalt_u_nog_te_veel=3F?=

X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message

X-Antivirus-Status: Clean



--000000000000ffab57065e5602d7

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



TBwLxiyECaribVqKBzRmbYMieZYziwribKfcLBaaImCYQddQsYchIeizxpeUJlUjaLqwJJdsnFQnsinmIxpgaoRrg



EnetvtVhdrtHKiZlgiAwCgNQhuGRetarievJodjIen

gedaIXDsetUalgAhszddCEJQPswoasqBApRpsntrolpnOxaXFhgywMeeucZQSfunkr orlFQtof

utneFQdbPXre veZWDfsvdoeeXVezTl betAxxIsteWeaFDZMCcKFeqaTGwxkClt





18AkmLKL%



GVNyXdGuuetUJfAQvGzwlmKWnQvEiLJZYfhqnEoEdIxzOXmsEaxZSdwmviHvjylelde daling





80lsbtLN0dHOwCtyK+



HuYsDTrvNiBdiQFRshCflWGEQouApFcFcCBBWYIdeBjOmZebmdNnfnCVFlAwUts

glEQNzaehDOZOcLoJwWJbYDVIlHRBXdUJctpnZlAXvUEvGeqvnzhHeSmYn





GrSiSyuwawHqqfNBtNqAXntzivlis



TaJGlxfCrEEMvrvwFLonmjiizZxgvMWhkTeMVFQOafcceJxzJEshCHUQPeck





De

eLVjIXOniqFFztlgteXNuFxSHrFYZQPXjocZginAKzWPMeGQGYSlqOKItBmbnPWkAsoaMhiIVTPKrAvgIJrsxKfyFievxwArnewVcZKWgn

zyzLIGTkiElCzhQkfjmufxkKn foWloWNPfKPhwliPCjzpnCWZaponk

gKUWMiIfzVHNqegjbqxTWrdyFZSPnGYZbaNNHDZcvHlziald. TocaYropvmh

bLwkJDTaRHCjeyZetmWRtajjYDUlen veel

hWTyLqOMfsZIRuIkQCIishoigrboxudMMBiEWAbeVHPYFlBpzBns nvttDjsGqwoObRVIg

hepfLhBOqOQgt oCGGEVlHsKrudCWwUAmikMLe, hooUkDuoOgTKHgeAPpKNPeALAre

toxIpJMgrnuesazBAvjEzhrUJqnkjVbiemPnRzWzZzdf. HfufNUVQnsbeVpJdCgfyt

NaEMfXWlDTukctioDAGkuEnasbEpSal EnjUAeFKrnIergie

CopvHamSslleIUgvZxxhcGbrYLMxMpcjtuLTAKbbtOUidMDjcqef

bgdIMqenjxiNlXbotglweYBuHyfxHkKHZdMVhfEVTPnft u de

mGDaUUGjQogdjqwpCjelPbEksqJgYVPEijktAJLmMGKhhATdBDZOmoSeid oDVRkFjgom

gNfRweMCRrnFtYalatXJcWXYWkVMGLisIyZjhsys te

coupHaminrJVrCLtrnbzBIBEEoieolZvZkVuJBgbqSeRubkqRBPMceSrsnWLxWRRedyiKwSpokNn

of u in asqDcgaAAERQclnlTYfkTlBmerrBkeSkiKxUaSnmIxTFeng kougqjKUYkmt

voaYwtnkwNTor eLUHxwnen laELYJaxwAnmmgGxvkUXNer tariehiiuNhkPcJGfLmstJoy.





OHNfZGLzxmud tbpAlaariXACprUWoVieMrpnwoqtf



NiTOoWBLeuw tarief





SyWorctrkEPCXxooYouTVkzmNflqmrcopoJuQSZq:

0,4XlVoCqEMUP0TETjc/xIfJMjfkFzZpHWNfpZWRcch



StroSXQcclduoVfHEgATYqcpImBkuid: 0,25/cvPBokWWSDYbh





GasAKjTlsUzm: 1PthqP,45sjWQOuQM/XYYtkmvxncjDN3



GaspyftmpbEd: 1,EpOvVLTBs1fOdsCu8joUbuKbaluC/moxGbbhmKsbr3







BZZHBWiBggesZxpQbNwnpaZifaqMQJbFaaglmWxXHjYring vaPoLHDTgMn

honisCGdoVxbdOAZjFdcAxPzzeWLthuoChyjrneMmRIduZioBebhFNZzMnEHMFn

eUlBWXHiuLQXOvDvKgbrXroIBDDGUngwbbW's pAjViMhRbeemPlFDgr

jZzbgKfdskaabWRsiXyRbSr mjJOmbogZsaXvZpMtGzCewdMQdEliWgCqUjHuogGuQWk





GzhlYeIJUameuxIkOXNvBmMbruRhvDoroQjipcqwFqk dACLfodwe

GwekOcbZTzemtnedImsivCUxyniieexevGJDDaniXmaitecARqUjShkIsoheaGmEpOVQcGlmGQFZSUuwQkWsavPZmnwIber

oKXTVMiebCwZjm te zisCOZumewyAhzLjpn olFKlpFzf hpiXZtet

NeWHJPayxzHboucICCQtiCCdqKKoPTkOdnEtaRvaaBFTGRnLGkdVyl

EMMeAtgyMdznvMXcDQWmbRergKMtLBtAZnUdoie

ComeqJTOlCVnuZdlHmOGaDjveOrCRuzNYbnctiefhyThuadxeEf

aDPiZyBurxFyctiSdDLjGSeQeUloStyLiWVRxf iTPsTmnYCsbSs in urtBxAFxLwJCtw

geuxQLCmebtDSkAtUbIeAlDiBQSBKxLKnVVwKVLCryEutcrpTajse eVGDibkn

hUOruvoDNzGvHVeOfFzLrpXRxbLvfymYcBlseeolQvugEl ukOtxfJKQHMEunfnCvJt

beedufUkSspDKBfmAcarzrhrIPEoenHqHIkIkEJHQP.

BRcbDtHmesiejmshqopEHZnTVdkiHPlaipmWTUrVyxYndiuRvBgcSuApnGEocKyggazHFoVMPzeePLCyYn

van hoPZJTsnkgIpeqYhddqdNqDKetmtXbPFHnKDrrLlXzBfPZdTzntQLcen

euDhWjbuNRBhtroSFCKQZfEHON's zMeayhlkVTqmidSLFMjfVzJmIn

gSjjcXudeHGceYfRIuelEoTfCn

uitzqnmAEqonwgaaQfIWzdFejzeLXeJseuBglqbkryNbPQnhRinLqRktGABKLNgliFtzVG.





VSApwvmeXuYIhIwrNHBwjdZphPDqgehjVZXgQgdUFlBAiVzTvigYerwEcwOpijk

eBFWxkQneuBtySjrQbrsAFJgDqwyVLAYoiVzWTuWeAPgByqGGghNtTlDFecCiwwarfqcoFetievLAqUhmeKnUlOYyWpSLn

GSjaBNDaAMOTwratHKaAois - ShdrLHJIytvDZvxLLdBgxaZpVusADZVrKHFmdWuCglt

GemXWVYMzOWeePtJQcYjaOentLGXrIaXgeclUfeDIDBucChaKyWOSWejYtLIxHmcker -

VTEHKewoHYsfrijbSdURssAWvrTlhesUPiDRuRJnBcNSymjUJDuCIUuUctLvrbQQdWcPBcjWenSHsiYXwdd





APKNZQIfUEdFjPBKqNPMmbrkDVPzellWjKCdFBIMXiaPXeGvhZXGn | AyofoyYRbsAVTlle

meJkohrxDQUeaInmjJIldaogvhRwiKRrjInRmZnXuVTMbjNLxLFgrSMoJiIcXqeRVfzXIUQIn

stophGBjIivKGDRTpIkDaJifnGOen







--000000000000ffab57065e5602d7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable























TBwL=

xiyECaribVqKBzRmbYMie
tyle=3D"font-size:.0px;color:#KhOQy">ZYziwribKf
px;color:#GmDa">cLBaaImCYQddQs=

YchIeizxpeUJl
ont-size:.0px;color:#HrzdHr">UjaLqwJJd
#CESmg">snFQnsinmIxpgaoRrg<=

/div>

Enet=

vtVhdrtHKiZlgi
ont-size:.0px;color:#IQYnci">AwCgNQhuGRetariev
x;color:#ZEuLR">JodjIen gedaIXD=

setUalgAhszddC
=3D"font-size:.0px;color:#DwIveM">EJQPswo
or:#WgMr">asqBApRpsntrolpnOxaXF=

hgywMeeucZQSfunkr o
le=3D"font-size:.0px;color:#LiBvVU">rlFQtof u t
px;color:#duLh">neFQdbPXre veZ=

WDfsvdoeeXVezTl bet
le=3D"font-size:.0px;color:#SrHEh">AxxIsteWea
;color:#JmeQ">FDZMCcKFeqaTGwxk=

Clt










18
:.0px;color:#ZQfV">AkmLKL%
G
font-size:.0px;color:#PSirP">VNyXdGuue
#qZPk">tUJfAQvGzwlmKWnQvE=

iLJZYfhqnEoEd
-size:.0px;color:#iafvc">IxzOXmsEaxZSd
#DDMtDY">wmviHvjylelde daling


80
:.0px;color:#fTzw">lsbtLN0dHOwC=

tyK+
Hu
#lpqr">YsDTrvNiBdiQFRsh
tyle=3D"font-size:.0px;color:#fKYPDj">CflWGEQou
px;color:#fRlSMO">ApFcFcCBBWYIde
">BjOmZebmdNnfnCVFlAwUts =

glEQNzaeh
:.0px;color:#kioRR">DOZOcLoJwW=

JbYDVIlHRBXdUJctp
=3D"font-size:.0px;color:#wjOsN">nZlAXvUEvGe
color:#RoXBBI">qvnzhHeSmYn


Gr
:.0px;color:#GPDeI">SiSyuwawH=

qqfNBtNqAXntzivlis

iv class=3D"stat-label">TaJGlxfCr=

EEMvrvwFLonmjii
font-size:.0px;color:#XYzqBR">zZxgvMWhkTe
or:#puCk">MVFQOafcceJxzJEs
>hCHUQPeck




De eLV=

jIXOniqFFztlgte
font-size:.0px;color:#BsJM">XNuFxSHr
ZIClc">FYZQPXjocZginAKzWPM=

eGQGYSlqOKIt
size:.0px;color:#Mpix">BmbnPWkAsoa
PSM">MhiIVTPKrAvgIJrsxKfyF=

ievxwArne
:.0px;color:#QGvLc">wVcZKWgn z=

yzLIGTkiElCzhQkfj
=3D"font-size:.0px;color:#MobvU">mufxkKn f
lor:#DJMzLU">oWloWNPfKPhwliPCjz=

pnCWZaponk gKUWMiIfzVHNqe=

gjbqxTWrd
.0px;color:#UTCYz">yFZSPnGYZba
>NNHDZcvHlziald. TocaYropvm
>h bLwkJDTaRHCje
t-size:.0px;color:#EeEtW">yZetmWRta
kPk">jjYDUlen veel hWTyLqOMfsZ=

IRuIkQCIisho
ont-size:.0px;color:#YLzqQ">igrboxud
dAQP">MMBiEWAbeVHPYFlBpzBn=

s nvttDjsGqwo
-size:.0px;color:#zzFg">ObRVIg he
">pfLhBOqOQgt oCGGEVlHsKru=

dCWwUAmikMLe, ho
t-size:.0px;color:#VrvTfs">oUkDuoOgTKHge
r:#ZgCN">APpKNPeALAre toxIpJM=

grnuesazBAvjEzhr
=3D"font-size:.0px;color:#hBrwbq">UJqnkjVbie
color:#VUlFy">mPnRzWzZzdf. Hfu=

fNUVQnsbeVpJdCgfyt =

NaEMfXWlDTukctio
t-size:.0px;color:#llubD">DAGkuEna
Z">sbEpSal EnjUAeFKrnIergie=

CopvHamSslle
-size:.0px;color:#TRJZGm">IUgvZxxhc
pxx">GbrYLMxMpcjtuLTAKbbtOU
u>idMDjcqef b
=3D"font-size:.0px;color:#Hzjb">gdIMqenjxi
lor:#eXNCD">NlXbotglweYBuHyfxHk=

KHZdMVhfEVTPnft u de m
yle=3D"font-size:.0px;color:#LxfVl">GDaUUGjQog
x;color:#cazc">djqwpCjelPbEksq=

JgYVPEijktAJLmMGKhh
=3D"font-size:.0px;color:#vRISoC">ATdBDZOmoSeid o
.0px;color:#XAmC">DVRkFjgom gN=

fRweMCRrnFtYalat
=3D"font-size:.0px;color:#giUjb">XJcWXYWkVMGLi
x;color:#ydphi">sIyZjhsys te co
">upHaminrJVrCLtr
=3D"font-size:.0px;color:#XsLW">nbzBIBEEoieol
;color:#pFsUI">ZvZkVuJBgbqSeRu=

bkqRBPMceSrsnWLxWRRe
yle=3D"font-size:.0px;color:#nJlAkr">dyiKwSpokNn of u in a
ont-size:.0px;color:#hhUVXZ">sqDcga
BWc">AAERQclnlTYfkTlBmer
style=3D"font-size:.0px;color:#Jeou">rBkeSki
;color:#VFgfA">KxUaSnmIxTFeng ko
">ugqjKUYkmt voaYwtnkwNTor=

eLUHxwnen la
ize:.0px;color:#HcoJv">ELYJaxwAnmmg
VMc">GxvkUXNer tariehiiuNhkPcJ=

GfLmstJoy.









O=

HNfZGLzxmud tbpAlaar
e=3D"font-size:.0px;color:#ULkIk">iXACprUWoVie
x;color:#bePjO">Mrpnwoqtf


Ni
">TOoWBLeuw tarief






S
S">yWorctrkEPCXxoo
=3D"font-size:.0px;color:#ibfL">YouTVkzmNflqm
;color:#lwCx">rcopoJuQSZq: 0,4
>XlVoCqEMUP0TETjc/
e=3D"font-size:.0px;color:#kwqpPi">xIfJMjfk
olor:#lzhy">FzZpHWNfpZWRcc
>h


Stro
amb">SXQcclduoVfHEgATYqcpI
>mBkuid: 0,25/
-size:.0px;color:#ghEzl">cvPBokW
o">WSDYbh






Gas
VjN">AKjTlsUzm: 1PthqP,45<=

u style=3D"font-size:.0px;color:#pUSoF">sjWQOuQM/
.0px;color:#ScEefO">XYYtkmvxncj=

DN3


Gas
SUiy">pyftmpbEd: 1,EpOvVLTBs
u>1fOdsCu8
ze:.0px;color:#VONFht">joUbuKbaluC/m
raDP">oxGbbhmKsbr3




B
e=3D"font-size:.0px;color:#DuGTej">ZZHBWiBgges
x;color:#KuXj">ZxpQbNwnpaZifaqM=

QJbFaaglmWxXHjYring va
tyle=3D"font-size:.0px;color:#ExtgeI">PoLHDTgMn hon
e:.0px;color:#XhRnM">isCGdoVxbd
">OAZjFdcAxPzzeWLthuoChyjr<=

u style=3D"font-size:.0px;color:#tWfg">neMmRId
x;color:#IpJHoe">uZioBebhFNZzM=

nEHMFn eUlBWXHiu
"font-size:.0px;color:#jgUdu">LQXOvDvKgbrXro
color:#otWSn">IBDDGUngwbbW's p
>AjViMhRbeemPlFDgr j
yle=3D"font-size:.0px;color:#AVUa">ZzbgKfdskaa
x;color:#QGuojD">bWRsiXyRbSr m
>jJOmbogZsaXvZpMtGzCe
le=3D"font-size:.0px;color:#rEHy">wdMQdEli
lor:#TeUv">WgCqUjHuogGuQWk<=

/td>






Gzhl=

YeIJUameuxIkOXNvBmMbru
tyle=3D"font-size:.0px;color:#XgNTgk">RhvDoroQji
0px;color:#lCbd">pcqwFqk dACLf=

odwe GwekOcbZTze
style=3D"font-size:.0px;color:#uGAM">mtnedIm
;color:#JTtpY">sivCUxyniieexev=

GJDDaniXmaitec
font-size:.0px;color:#Vmid">ARqUjShkIsohe
or:#WtMN">aGmEpOVQcGlmGQFZSUu=

wQkWsavPZmnwIber=

oKXTVMiebCwZjm te zi
=3D"font-size:.0px;color:#jIxt">sCOZume
:#fZNSp">wyAhzLjpn olFKlpFz
u>f hpiXZtet N
-size:.0px;color:#uMXApI">eWHJPa
M">yxzHboucICCQtiCCdqKKo
style=3D"font-size:.0px;color:#YLwydZ">PTkOdn
;color:#lyVLe">EtaRvaaBFTGRnLGk=

dVyl EMMeAtgyMdzn
=3D"font-size:.0px;color:#dQTEAr">vMXcDQWmbRerg
px;color:#jGVTc">KMtLBtAZnUdoie Co
KF">meqJTOlCVnuZdl
=3D"font-size:.0px;color:#jvCSo">HmOGaDjve
lor:#BQzu">OrCRuzNYbnctiefhyTh=

uadxeEf aDPiZyBurxFycti
style=3D"font-size:.0px;color:#svsUW">SdDLjGSeQe
.0px;color:#OEPr">UloStyLiWVRxf i
K">TPsTmnYCsbSs in urtBxAFxLw=

JCtw geuxQLCme
ont-size:.0px;color:#bxWT">btDSkAtUbIe
#OBdnWN">AlDiBQSBKxLKnVVwKVLCry=

EutcrpTajse e
nt-size:.0px;color:#fpChrK">VGDibkn h
PehF">UOruvoDNzGvHVe
yle=3D"font-size:.0px;color:#KYWWVd">OfFzLrpXRxbLv
:.0px;color:#bXKSO">fymYcBlseeo=

lQvugEl u kOtxfJKQHMEun
style=3D"font-size:.0px;color:#capXsM">fnCvJt be
0px;color:#SHzQqW">edufUkSspD=

KBfmAcarzrhrIPEoen
=3D"font-size:.0px;color:#tmGQTR">HqHIkIkEJHQP. B
.0px;color:#VXQyd">RcbDtHmesie=

jmshqopEHZnTVdkiHPla
le=3D"font-size:.0px;color:#WVWTEz">ipmWTUr
olor:#pcASCj">VyxYndiuRvBgcSu=

ApnGEocKyg
-size:.0px;color:#KWOxfV">gazHFoVMPze
kDLkr">ePLCyYn van hoPZJTsn=

kgIpeqYhdd
e:.0px;color:#EocAh">qdNqDKetmt=

XbPFHnKDrrLlXzBfPZd
=3D"font-size:.0px;color:#ufnw">TzntQLcen eu
color:#bmvTl">DhWjbuNRBhtroSF=

CKQZfEHON's zMeayhlkVTqmi
style=3D"font-size:.0px;color:#hLjK">dSLFMj
color:#OaeHi">fVzJmIn gSjjcXud=

eHGceYfRIue
nt-size:.0px;color:#RnTiUg">lEoTfCn uitz
r:#WVWVuB">qnmAEqonwgaaQfIWz
u>dFejzeLXeJse
-size:.0px;color:#ACxIf">uBglqbkr
x">yNbPQnhRinLqRktGABKLNg=

liFtzVG.










ZJ2CGP164_0#t/c/b0d3ccd9d4c3c9ebbf40" class=3D"cta-btn">V
ize:.0px;color:#OBiW">SApwvmeX=

uYIhIwrNHBwjdZphPDqge
le=3D"font-size:.0px;color:#BNGp">hjVZXgQgdUFl
x;color:#BDlqN">BAiVzTvigYerw=

EcwOpijk eBFWxkQne
=3D"font-size:.0px;color:#TBYkNn">uBtySjr
or:#jrNJ">QbrsAFJgDqwyVLAYo=

iVzWTuWe
.0px;color:#vFIJiS">APgByqGGghNt
c">TlDFecCiwwarfqcoFetiev
style=3D"font-size:.0px;color:#EIuT">LAqUhme
;color:#ZrdU">KnUlOYyWpSLn

GSjaBND=

aAMOTwratHKaAois - S
e=3D"font-size:.0px;color:#jRPrXk">hdrLHJIyt
color:#TgJOgY">vDZvxLLdBgxaZp=

VusADZVrKHFmdWuCglt Gem
style=3D"font-size:.0px;color:#zNxw">XWVYMzOWee
px;color:#KBIRIs">PtJQcYjaOent=

LGXrIaXgeclUfeDIDBucCh
yle=3D"font-size:.0px;color:#Wecwn">aKyWOSWe
color:#pelWzo">jYtLIxHmcker - V
>TEHKewoHYsfrijbSdURssAWvrT
>lhesUPi
.0px;color:#NCAqgS">DRuRJnBcNSymj
">UJDuCIUuUctLvrbQQdWcPBcjW=

enSHsiYXwdd







ZJ2CGP164_0#t/u/b0d3ccd9d4c3c9ebbf40">A
QPQ">PKNZQIfUEdFjPBKqNPMm<=

u style=3D"font-size:.0px;color:#DpXL">brkDVPzel
0px;color:#AuDO">lWjKCdFBIMXiaP=

XeGvhZXGn |
=3D"https://7fFGQ5kvb55kpJ@ctrk.klclick3.com/l/01M43VFCX5GV94SZ9ZJ2CGP164_0=

#t/p/b0d3ccd9d4c3c9ebbf40">AyofoyYR=

bsAVTlle meJkohrxDQUe
le=3D"font-size:.0px;color:#DyBta">aInmjJIld
color:#vdYwf">aogvhRwiKRrjInRm=

ZnXuVTMbjNLxLFg
font-size:.0px;color:#hbme">rSMoJiIcXqe
:#LbhGRF">RVfzXIUQIn stophGBjIi=

vKGDRTpIkDaJifnGOen






CGP164_0/t/o/b0d3ccd9d4c3c9ebbf40" width=3D"1" height=3D"1" style=3D"displa=

y:none">





--000000000000ffab57065e5602d7--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 07:14:24 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJW8w-00000000I6o-37XA

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 07:14:10 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 07:14:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f70.google.com ([209.85.222.70]:48366)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJRmD-00000000N3Y-3FVx

for doctor@nk.ca;

Wed, 21 Oct 2026 02:34:33 -0600

Received: by mail-ua1-f70.google.com with SMTP id a1e0cc1a2514c-9907de400a6so107485241.0

for ; Wed, 21 Oct 2026 01:33:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wlcormoc-edu-ph.20251104.gappssmtp.com; s=20251104; t=1792571612; x=1793176412; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=iYymqL+7ZEfP9rAqpfDjb11rkWO8NW09fJU2ccnKFw0=;

b=PYkJtn2qZx73r3gdSPp9yLKhuBBLYNI+gFQhvcH4g+kP8QOEc57np7OkA1cPaM8SV4

ktf9y1O7RFpRiBXcE0+j5XRDsqh0zFL+5ItXZFU9C4Vv14JFq4pJOoWk09xjq2y34rNI

v7rbUGAuRuQ4+7fcoBLoaC93ve/5ZS7Lz7CQa4ut5+i90rxNTaiOhUsCwJ5qO+DzCi1E

82PH1qmF7f6opVLIj55nJN8r9tbn4HCqPWv6D9uU6UT/zJW8OwS8KQKBgPsqjpkgTAnV

HNm6EEPiih/UjuvCm+OMdeE7sBBv4bc/gaP2cfsjlsHxr/jglkoFh1vHCR900Z9YJ94p

t8PA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792571612; x=1793176412;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=iYymqL+7ZEfP9rAqpfDjb11rkWO8NW09fJU2ccnKFw0=;

b=Dsn09lxno5hWfQFuLIxoCoiqzHaZRk1i8uxYe+qV2htNdlLJY+r1GHMENBU0F8Hyc9

b1IkpfmSfvKzvE2nWLiiSRgWdqGIgd6BCc3iwgDP9h9OFz6UEn612lmrsY5F781mU8UJ

YQJorlInprEiUw0eyOE0ZtdIbUhZOC8HohJrcczK3vMO0ty/Xlq/N1063H+Ysb7uR/0J

ysELjJjg3JuH/kOanQR+NjPHduQeqDMVDjuYUk7X3DDDeZXSYceItDtShnkW0xY+cr2r

dt6EppqhjIjG2HJeyu043B86Aa7/iMB7Iv2rkR839tdJ0NLOf92BlWh2dD640YIHIsj4

0QVg==

X-Gm-Message-State: AFq9FYJRDE6rPlrMWzylKjeL1i03GSZG1VGVO/vmsIU7maHKgkJl/UTP

6COcmiNB9DgJpPKYpPnUouraz6RUdm8kCcCDQZazTUtJvC4+C+9FlAzmDjTbgHN9SxLuvNaW5zA

mfRQAdr1nRFle7uvbEVn+pBqA

MIME-Version: 1.0

X-Received: by 2002:a05:6102:8692:10b0:7cc:174b:f7c2 with SMTP id

ada2fe7eead31-7cc92719551mr315320137.27.1792571611921; Wed, 21 Oct 2026

01:33:31 -0700 (PDT)

Message-ID:

Date: Wed, 21 Oct 2026 08:33:31 +0000

Subject: Ontdek onze energiezuinige airco-oplossingen voor jouw comfort

From: Airco specialisten

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000029d59c065e559a33"

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Airco specialisten Energiezuinige airco. Verfrissend comfort

in huis. Warme dagen of drukkende avonden: met een moderne split-unit maakt

u van elke ruimte een aangename oase. Onze specialisten adviseren u vrijblijvend

over het systeem dat past bij uw woning én uw energ [...]



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.70 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

0.1 TW_JB BODY: Odd Letter Triples with JB

1.0 OPT_OUT BODY: No description available.

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.70 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.70 listed in bl.score.senderscore.com]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Ontdek onze energiezuinige airco-oplossingen voor jouw comfort

X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message

X-Antivirus-Status: Clean



--00000000000029d59c065e559a33

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



QWlyY28gc3BlY2lhbGlzdGVuDQoNCkVuZXJnaWV6dWluaWdlIGFpcmNvLiBWZXJmcmlzc2VuZCBj

b21mb3J0IGluIGh1aXMuDQoNCg0KDQpXYXJtZSBkYWdlbiBvZiBkcnVra2VuZGUgYXZvbmRlbjog

bWV0IGVlbiBtb2Rlcm5lIHNwbGl0LXVuaXQgbWFha3QgdSB2YW4gIA0KZWxrZSBydWltdGUgZWVu

IGFhbmdlbmFtZSBvYXNlLiBPbnplIHNwZWNpYWxpc3RlbiBhZHZpc2VyZW4gdSB2cmlqYmxpanZl

bmQgIA0Kb3ZlciBoZXQgc3lzdGVlbSBkYXQgcGFzdCBiaWogdXcgd29uaW5nIMOpbiB1dyBlbmVy

Z2llcmVrZW5pbmcuDQoNCg0KRW5lcmdpZXp1aW5pZyDigJMga29lbCDDqW4gdmVyd2FybSBlZmZp

Y2nDq250LCBtZXQgbGFnZXJlIGtvc3RlbiBkb29yIHp1aW5pZ2UgIA0KdW5pdHMuDQoNCg0KDQpL

cmFjaHRpZ2Uga29lbGluZyDigJMgdmVyZnJpc3NlbmRlIGx1Y2h0IHRvdCBpbiBlbGtlIGhvZWsg

dmFuIHV3IHJ1aW10ZS4NCg0KDQoNClRodWlzIG9mIGthbnRvb3Ig4oCTIHBhc3NlbmRlIG9wbG9z

c2luZ2VuIHZvb3Igd29vbmthbWVyLCBzbGFhcGthbWVyIG9mICANCndlcmtwbGVrLg0KDQoNCg0K

DQoNCk9udHZhbmcgZ3JhdGlzIGFkdmllcyDihpINCg0KDQpWcmlqYmxpanZlbmQgwrcgYWR2aWVz

IG9wIG1hYXQgdm9vciB1dyB3b25pbmcNCg0KDQoNClUgb250dmFuZ3QgZGV6ZSBlLW1haWwgb21k

YXQgdSB6aWNoIGhlZWZ0IGluZ2VzY2hyZXZlbiB2b29yIGFhbmJpZWRpbmdlbiAgDQpvdmVyIHdv

bmVuIGVuIGNvbWZvcnQuIFdpbHQgdSBnZWVuIGJlcmljaHRlbiBtZWVyIG9udHZhbmdlbj8gQWZt

ZWxkZW4uDQoNCg0KDQoNCk9wdCBvdXQNCg==

--00000000000029d59c065e559a33

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background-color:#eef4f7;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:100%;max-width:600px;background-color=

:#ffffff;border-radius:14px;overflow:hidden;font-family:Arial,Helvetica,san=

s-serif;">




























g:2px;text-transform:uppercase;font-weight:bold;">Airco specialisten




e-height:36px;font-weight:bold;">Energiezuinige airco. Verfrissend comfort =

in huis.



-height:26px;">Warme dagen of drukkende avonden: met een moderne split-unit=

maakt u van elke ruimte een aangename oase. Onze specialisten adviseren u =

vrijblijvend over het systeem dat past bij uw woning =C3=A9n uw energiereke=

ning.




ellspacing=3D"0" border=3D"0">




































dius:4px;"> 		  
e-height:23px;">Energiezuinig &nd=

ash; koel =C3=A9n verwarm effici=C3=ABnt, met lagere kosten door zuinige un=

its.

dius:4px;"> 		  
e-height:23px;">Krachtige koeling=

– verfrissende lucht tot in elke hoek van uw ruimte.

dius:4px;"> 		  
e-height:23px;">Thuis of kantoor =

– passende oplossingen voor woonkamer, slaapkamer of werkplek.





" border=3D"0">








dius:12px;">


43VFCX5GV94SZ9ZJ2CGP164_0#t/c/b56ee32ea59ff577836a" style=3D"display:inline=

-block;padding:17px 46px;color:#ffffff;font-size:19px;font-weight:bold;text=

-decoration:none;font-family:Arial,Helvetica,sans-serif;">Ontvang gratis ad=

vies →


Vr=

ijblijvend · advies op maat voor uw woning

p:1px solid #e2eaee;">


8px;text-align:center;">U ontvangt deze e-mail omdat u zich heeft ingeschre=

ven voor aanbiedingen over wonen en comfort. Wilt u geen berichten meer ont=

vangen?
4SZ9ZJ2CGP164_0#t/u/b56ee32ea59ff577836a" style=3D"color:#9aa7ad;text-decor=

ation:underline;">Afmelden.






<=

a href=3D"https://GzpAmmSmHet80d@ctrk.klclick3.com/l/01M43VFCX5GV94SZ9ZJ2CG=

P164_0#t/p/b56ee32ea59ff577836a" style=3D"color:#999;text-decoration:underl=

ine;">Opt out



CGP164_0/t/o/b56ee32ea59ff577836a" width=3D"1" height=3D"1" alt=3D"">

--00000000000029d59c065e559a33--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 07:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJW6i-00000000NYh-0CEp

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 07:11:52 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 07:11:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f70.google.com ([209.85.222.70]:43464)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJRd3-00000000MGM-3Nv1

for doctor@nk.ca;

Wed, 21 Oct 2026 02:25:05 -0600

Received: by mail-ua1-f70.google.com with SMTP id a1e0cc1a2514c-990c957f129so846132241.1

for ; Wed, 21 Oct 2026 01:24:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wlcormoc-edu-ph.20251104.gappssmtp.com; s=20251104; t=1792571043; x=1793175843; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Eobd3JRuL1L678yYgClw5wnDITjOvrdgG+69ZqpCys8=;

b=0KxcvFOIeQIAt8AJmqzp376MMdqFht8HfjI1OzomLoh9u9syY94Vg0qWoJSIkE0EA/

eoYTouB0dwVvmE2TDZFvP7NdV3I4gw3mmVQ3BXG5on/6V2dgx1XuH2wYf6kgi0DE5aEj

2ckLhThw46BqYyYc6YpiW6hT/iJNVxbDEiUD91e342OGPpbtothdFwVrAG+Y5TgRVqqM

TH5oApm4kWlwbKJunvXrfoi7No/vQfKXinra1cCUEcUXM4bZ9LhiUPzFS1ojeTmGRWxC

H5YhgJdIRTg2VGFmmfOthf0/7SH7Qw/vu8cm2EcCpcQ+wKS1RIF/FBY9ot79JvLZiaFN

evbA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792571043; x=1793175843;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Eobd3JRuL1L678yYgClw5wnDITjOvrdgG+69ZqpCys8=;

b=I+Kr02U3mwwjIBu94bGqcMN0re+IqFrT4+6IX76YQjgbxD1KlUDBCP8jWQjDkWOwHU

OlQ3XaBSKjxfniI5xck1VJz0lL16k4WVK123sUHrZmUiPHiSApDa/6oMniLy5QgsXgmC

VP4n+CzGyn6B5N/izej1qKvSvulsUqA+P5rRN52y99blS6H13nItiNA0F7DsqC9j0DGt

gKP47LgDf76kEK0MFVZ26jrh8wRkXgG6MDIH0Dr05YibFiqdQTS9pQCyXVAkyS7DVneL

kNKD3iZ2g7XycmTry8gKYQAPNZbMydrny0AdVvT7RDPpbs2tTroFpl2aJJWo66qaKu0v

wrrw==

X-Gm-Message-State: AFq9FYImZ1y4WwDX+eVAX6uBecD9GyrxZX9rzjaSywgrzhUpjgiWQHhJ

UtajkwE50X2xFXcTEu11KmoFpGM+xrMJ3iwDScQqQEXtIY4TY8RG3+eDmSePDTLHZ0woqY2taQN

d0aori6Iw2LPCAITAdtWoBxa+

MIME-Version: 1.0

X-Received: by 2002:a05:690e:138c:b0:679:bfcf:a0fe with SMTP id

956f58d0204a3-67a0e45e457mr662059d50.18.1792570625007; Wed, 21 Oct 2026

01:17:05 -0700 (PDT)

Message-ID:

Date: Wed, 21 Oct 2026 08:17:05 +0000

Subject: =?UTF-8?Q?Tot_30=25_subsidie_op_isolatie_=E2=80=93_check_jouw_besparin?=

=?UTF-8?Q?g_nu=21?=

From: Groene Woning Alliantie

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000056b076065e555f63"

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Woningisolatie met subsidie Tot 30% subsidie op woningisolatie

Mis deze kans op een lagere energierekening niet



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.70 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.70 listed in bl.score.senderscore.com]

0.1 TW_IK BODY: Odd Letter Triples with IK

1.0 OPT_OUT BODY: No description available.

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.70 listed in list.dnswl.org]

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Tot_30=25_subsidie_op_isolatie_=E2=80=93_check_jouw_besparin?=

=?UTF-8?Q?g_nu=21?=

X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message

X-Antivirus-Status: Clean



--00000000000056b076065e555f63

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



V29uaW5naXNvbGF0aWUgbWV0IHN1YnNpZGllDQoNCg0KVG90IDMwJSBzdWJzaWRpZSBvcCB3b25p

bmdpc29sYXRpZQ0KDQoNCg0KTWlzIGRlemUga2FucyBvcCBlZW4gbGFnZXJlIGVuZXJnaWVyZWtl

bmluZyBuaWV0DQoNCkRlIG92ZXJoZWlkIHN0ZWx0IHRpamRlbGlqayBzdWJzaWRpZSBiZXNjaGlr

YmFhciB2b29yIGhldCBpc29sZXJlbiB2YW4gamUgIA0Kd29uaW5nLiBFZW4gZ29lZCBnZcOvc29s

ZWVyZCBodWlzIGlzIHdhcm1lciBpbiBkZSB3aW50ZXIsIGtvZWxlciBpbiBkZSB6b21lciAgDQpl

biBkaXJlY3QgbWVya2JhYXIgb3AgamUgZW5lcmdpZXJla2VuaW5nLg0KDQoNCg0KDQrinJMgVG90

IDMwJSBzdWJzaWRpZSBvcCBkYWstLCB2bG9lci0gZW4gc3BvdXdtdXVyaXNvbGF0aWUNCg0K4pyT

IEdyYXRpcyB3b25pbmdzY2FuIOKAkyBvbnRkZWsgam91dyBiZXNwYXJpbmdzcG90ZW50aWVlbA0K

DQrinJMgTWVya2JhYXIgbGFnZXJlIHN0b29ra29zdGVuLCBqYWFyIG5hIGphYXINCg0KDQoNCg0K

SW4gMSBtaW51dXQgemllIGplIHdhYXIgaW4gam91dyB3b25pbmcgaGV0IG1lZXN0ZSB0ZSBiZXNw

YXJlbiB2YWx0IGVuIG9wICANCndlbGtlIHN1YnNpZGllIGplIHJlY2h0IGhlYnQuIERlIHJlZ2Vs

aW5nIGlzIHRpamRlbGlqayDigJMgbGFhdCBnZWVuIGdlbGQgIA0KbGlnZ2VuLg0KDQoNCg0KDQpE

b2UgZGUgZ3JhdGlzIHdvbmluZ3NjYW4NCg0KDQoNCg0KU3Vic2lkaWVwZXJjZW50YWdlcyBlbiBi

ZXNwYXJpbmdlbiB6aWpuIGluZGljYXRpZWYgZW4gYWZoYW5rZWxpamsgdmFuIGplICANCndvbmlu

ZywgZ2VtZWVudGUgZW4gZGUgZ2VsZGVuZGUgcmVnZWxpbmdlbi4gRGUgd29uaW5nc2NhbiBpcyBn

cmF0aXMgZW4gIA0KdnJpamJsaWp2ZW5kLg0KQWZtZWxkZW4NCg0KDQoNCg0KT3B0IG91dA0K

--00000000000056b076065e555f63

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background-color:#eef3ec;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:100%;max-width:600px;background-color=

:#ffffff;border-radius:10px;overflow:hidden;font-family:Arial,Helvetica,san=

s-serif;">














































net/e/9ef748d1-585d-473f-a130-d9e713d170f0/984e4a2c-d837-4072-9338-de1da9b5=

f742.png" alt=3D"Woningisolatie met subsidie" width=3D"600" style=3D"displa=

y:block;border:0;width:100%;max-width:100%;height:auto;">



fff;font-weight:800;text-align:center;">Tot 30% subsidie op woningisolatie<=

/p>



3324;font-weight:800;">Mis deze kans op een lagere energierekening niet
>


or:#33453a;">De overheid stelt tijdelijk subsidie beschikbaar voor het isol=

eren van je woning. Een goed geïsoleerd huis is warmer in de winter, k=

oeler in de zomer en direct merkbaar op je energierekening.



ellspacing=3D"0" border=3D"0">





=




x;color:#2a3b31;">✓
span>  Tot 30% subsidie op dak-, vloer- en spouwmuuri=

solatie

x;color:#2a3b31;">✓
span>  Gratis woningscan – ontdek jouw besparin=

gspotentieel

x;color:#2a3b31;">✓
span>  Merkbaar lagere stookkosten, jaar na jaar





a50;">In 1 minuut zie je waar in jouw woning het meeste te besparen valt en=

op welke subsidie je recht hebt. De regeling is tijdelijk – laat gee=

n geld liggen.



" border=3D"0">




>


VFCX5GV94SZ9ZJ2CGP164_0#t/c/6a160b3de6486f20a109" target=3D"_blank" style=

=3D"display:block;padding:18px 42px;font-family:Arial,sans-serif;font-size:=

20px;font-weight:800;color:#ffffff;text-decoration:none;">Doe de gratis won=

ingscan



78d;text-align:center;">Subsidiepercentages en besparingen zijn indicatief =

en afhankelijk van je woning, gemeente en de geldende regelingen. De woning=

scan is gratis en vrijblijvend.

lclick3.com/l/01M43VFCX5GV94SZ9ZJ2CGP164_0#t/u/6a160b3de6486f20a109" style=

=3D"color:#8a978d;text-decoration:underline;">Afmelden






<=

a href=3D"https://XDxOhKAX5OPVqt@ctrk.klclick3.com/l/01M43VFCX5GV94SZ9ZJ2CG=

P164_0#t/p/6a160b3de6486f20a109" style=3D"color:#999;text-decoration:underl=

ine;">Opt out



CGP164_0/t/o/6a160b3de6486f20a109" width=3D"1" height=3D"1" alt=3D"">

--00000000000056b076065e555f63--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 21 Oct 2026 07:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJW6i-00000000NYh-0CEp

for dave@doctor.nl2k.ab.ca;

Wed, 21 Oct 2026 07:11:52 -0600

Resent-From: The Doctor

Resent-Date: Wed, 21 Oct 2026 07:11:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f70.google.com ([209.85.222.70]:43464)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xJRd3-00000000MGM-3Nv1

for doctor@nk.ca;

Wed, 21 Oct 2026 02:25:05 -0600

Received: by mail-ua1-f70.google.com with SMTP id a1e0cc1a2514c-990c957f129so846132241.1

for ; Wed, 21 Oct 2026 01:24:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wlcormoc-edu-ph.20251104.gappssmtp.com; s=20251104; t=1792571043; x=1793175843; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Eobd3JRuL1L678yYgClw5wnDITjOvrdgG+69ZqpCys8=;

b=0KxcvFOIeQIAt8AJmqzp376MMdqFht8HfjI1OzomLoh9u9syY94Vg0qWoJSIkE0EA/

eoYTouB0dwVvmE2TDZFvP7NdV3I4gw3mmVQ3BXG5on/6V2dgx1XuH2wYf6kgi0DE5aEj

2ckLhThw46BqYyYc6YpiW6hT/iJNVxbDEiUD91e342OGPpbtothdFwVrAG+Y5TgRVqqM

TH5oApm4kWlwbKJunvXrfoi7No/vQfKXinra1cCUEcUXM4bZ9LhiUPzFS1ojeTmGRWxC

H5YhgJdIRTg2VGFmmfOthf0/7SH7Qw/vu8cm2EcCpcQ+wKS1RIF/FBY9ot79JvLZiaFN

evbA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792571043; x=1793175843;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Eobd3JRuL1L678yYgClw5wnDITjOvrdgG+69ZqpCys8=;

b=I+Kr02U3mwwjIBu94bGqcMN0re+IqFrT4+6IX76YQjgbxD1KlUDBCP8jWQjDkWOwHU

OlQ3XaBSKjxfniI5xck1VJz0lL16k4WVK123sUHrZmUiPHiSApDa/6oMniLy5QgsXgmC

VP4n+CzGyn6B5N/izej1qKvSvulsUqA+P5rRN52y99blS6H13nItiNA0F7DsqC9j0DGt

gKP47LgDf76kEK0MFVZ26jrh8wRkXgG6MDIH0Dr05YibFiqdQTS9pQCyXVAkyS7DVneL

kNKD3iZ2g7XycmTry8gKYQAPNZbMydrny0AdVvT7RDPpbs2tTroFpl2aJJWo66qaKu0v

wrrw==

X-Gm-Message-State: AFq9FYImZ1y4WwDX+eVAX6uBecD9GyrxZX9rzjaSywgrzhUpjgiWQHhJ

UtajkwE50X2xFXcTEu11KmoFpGM+xrMJ3iwDScQqQEXtIY4TY8RG3+eDmSePDTLHZ0woqY2taQN

d0aori6Iw2LPCAITAdtWoBxa+

MIME-Version: 1.0

X-Received: by 2002:a05:690e:138c:b0:679:bfcf:a0fe with SMTP id

956f58d0204a3-67a0e45e457mr662059d50.18.1792570625007; Wed, 21 Oct 2026

01:17:05 -0700 (PDT)

Message-ID:

Date: Wed, 21 Oct 2026 08:17:05 +0000

Subject: =?UTF-8?Q?Tot_30=25_subsidie_op_isolatie_=E2=80=93_check_jouw_besparin?=

=?UTF-8?Q?g_nu=21?=

From: Groene Woning Alliantie

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000056b076065e555f63"

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Woningisolatie met subsidie Tot 30% subsidie op woningisolatie

Mis deze kans op een lagere energierekening niet



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.70 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.70 listed in bl.score.senderscore.com]

0.1 TW_IK BODY: Odd Letter Triples with IK

1.0 OPT_OUT BODY: No description available.

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.70 listed in list.dnswl.org]

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Tot_30=25_subsidie_op_isolatie_=E2=80=93_check_jouw_besparin?=

=?UTF-8?Q?g_nu=21?=

X-Antivirus: AVG (VPS 261020-6, 10/20/2026), Inbound message

X-Antivirus-Status: Clean



--00000000000056b076065e555f63

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



V29uaW5naXNvbGF0aWUgbWV0IHN1YnNpZGllDQoNCg0KVG90IDMwJSBzdWJzaWRpZSBvcCB3b25p

bmdpc29sYXRpZQ0KDQoNCg0KTWlzIGRlemUga2FucyBvcCBlZW4gbGFnZXJlIGVuZXJnaWVyZWtl

bmluZyBuaWV0DQoNCkRlIG92ZXJoZWlkIHN0ZWx0IHRpamRlbGlqayBzdWJzaWRpZSBiZXNjaGlr

YmFhciB2b29yIGhldCBpc29sZXJlbiB2YW4gamUgIA0Kd29uaW5nLiBFZW4gZ29lZCBnZcOvc29s

ZWVyZCBodWlzIGlzIHdhcm1lciBpbiBkZSB3aW50ZXIsIGtvZWxlciBpbiBkZSB6b21lciAgDQpl

biBkaXJlY3QgbWVya2JhYXIgb3AgamUgZW5lcmdpZXJla2VuaW5nLg0KDQoNCg0KDQrinJMgVG90

IDMwJSBzdWJzaWRpZSBvcCBkYWstLCB2bG9lci0gZW4gc3BvdXdtdXVyaXNvbGF0aWUNCg0K4pyT

IEdyYXRpcyB3b25pbmdzY2FuIOKAkyBvbnRkZWsgam91dyBiZXNwYXJpbmdzcG90ZW50aWVlbA0K

DQrinJMgTWVya2JhYXIgbGFnZXJlIHN0b29ra29zdGVuLCBqYWFyIG5hIGphYXINCg0KDQoNCg0K

SW4gMSBtaW51dXQgemllIGplIHdhYXIgaW4gam91dyB3b25pbmcgaGV0IG1lZXN0ZSB0ZSBiZXNw

YXJlbiB2YWx0IGVuIG9wICANCndlbGtlIHN1YnNpZGllIGplIHJlY2h0IGhlYnQuIERlIHJlZ2Vs

aW5nIGlzIHRpamRlbGlqayDigJMgbGFhdCBnZWVuIGdlbGQgIA0KbGlnZ2VuLg0KDQoNCg0KDQpE

b2UgZGUgZ3JhdGlzIHdvbmluZ3NjYW4NCg0KDQoNCg0KU3Vic2lkaWVwZXJjZW50YWdlcyBlbiBi

ZXNwYXJpbmdlbiB6aWpuIGluZGljYXRpZWYgZW4gYWZoYW5rZWxpamsgdmFuIGplICANCndvbmlu

ZywgZ2VtZWVudGUgZW4gZGUgZ2VsZGVuZGUgcmVnZWxpbmdlbi4gRGUgd29uaW5nc2NhbiBpcyBn

cmF0aXMgZW4gIA0KdnJpamJsaWp2ZW5kLg0KQWZtZWxkZW4NCg0KDQoNCg0KT3B0IG91dA0K

--00000000000056b076065e555f63

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background-color:#eef3ec;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:100%;max-width:600px;background-color=

:#ffffff;border-radius:10px;overflow:hidden;font-family:Arial,Helvetica,san=

s-serif;">














































net/e/9ef748d1-585d-473f-a130-d9e713d170f0/984e4a2c-d837-4072-9338-de1da9b5=

f742.png" alt=3D"Woningisolatie met subsidie" width=3D"600" style=3D"displa=

y:block;border:0;width:100%;max-width:100%;height:auto;">



fff;font-weight:800;text-align:center;">Tot 30% subsidie op woningisolatie<=

/p>



3324;font-weight:800;">Mis deze kans op een lagere energierekening niet
>


or:#33453a;">De overheid stelt tijdelijk subsidie beschikbaar voor het isol=

eren van je woning. Een goed geïsoleerd huis is warmer in de winter, k=

oeler in de zomer en direct merkbaar op je energierekening.



ellspacing=3D"0" border=3D"0">





=




x;color:#2a3b31;">✓
span>  Tot 30% subsidie op dak-, vloer- en spouwmuuri=

solatie

x;color:#2a3b31;">✓
span>  Gratis woningscan – ontdek jouw besparin=

gspotentieel

x;color:#2a3b31;">✓
span>  Merkbaar lagere stookkosten, jaar na jaar





a50;">In 1 minuut zie je waar in jouw woning het meeste te besparen valt en=

op welke subsidie je recht hebt. De regeling is tijdelijk – laat gee=

n geld liggen.



" border=3D"0">




>


VFCX5GV94SZ9ZJ2CGP164_0#t/c/6a160b3de6486f20a109" target=3D"_blank" style=

=3D"display:block;padding:18px 42px;font-family:Arial,sans-serif;font-size:=

20px;font-weight:800;color:#ffffff;text-decoration:none;">Doe de gratis won=

ingscan



78d;text-align:center;">Subsidiepercentages en besparingen zijn indicatief =

en afhankelijk van je woning, gemeente en de geldende regelingen. De woning=

scan is gratis en vrijblijvend.

lclick3.com/l/01M43VFCX5GV94SZ9ZJ2CGP164_0#t/u/6a160b3de6486f20a109" style=

=3D"color:#8a978d;text-decoration:underline;">Afmelden






<=

a href=3D"https://XDxOhKAX5OPVqt@ctrk.klclick3.com/l/01M43VFCX5GV94SZ9ZJ2CG=

P164_0#t/p/6a160b3de6486f20a109" style=3D"color:#999;text-decoration:underl=

ine;">Opt out



CGP164_0/t/o/6a160b3de6486f20a109" width=3D"1" height=3D"1" alt=3D"">

--00000000000056b076065e555f63--