Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Oct 2026 05:24:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEPkp-000000005E5-21pA

for dave@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 05:24:11 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 Oct 2026 05:24:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-136.dm.aliyun.com ([140.205.208.136]:56772)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEOjs-00000000PXB-0bhS

for doctor@nl2k.ab.ca;

Wed, 07 Oct 2026 04:18:44 -0600

X-AliDM-RcptTo: ZG9jdG9yQG5sMmsuYWIuY2E=

Feedback-ID: default:frank@factorymadecn.com:alibabak_WebBatch:306995

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=factorymadecn.com; s=aliyun-cn-hangzhou;

t=1791368256; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=7Hjmr27RJhqiThEDNcBfQF9RaSp8H5hDd1KdpB//Xfg=;

b=eN72Wu9SrtPET3GPDNl8vjI8xNflQdbWye2iPnERwrfJI8Cng2sOJyyjSDPdFh8iX3uZGzElgr0gRfOVaody3MGiOkwmwK6eG/Ty40RjjomNVoTFGs1pffmwSwdZ29LD9FcxyK5+0QYzCS1qdfX64ODI7EVa+t4WX1CPY7la1HE=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1791368256; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=7Hjmr27RJhqiThEDNcBfQF9RaSp8H5hDd1KdpB//Xfg=;

b=hD46fvhn+4h1kJZ2K2vTaNA0SSNNGhcBl0ltczL+oMrmzuPlU93CswYRQktUPBvj7eEZJpKuBRWR1HySveDpN6LvlsVQZHtuQ9dZH6rqR8Z1uw4klcRMUfLoez57IEUZvRXrUmD0lMpCOO3TLW0hpWhzWtkpDAJpoT/nk1c2c1o=

Received: from chitu-hsf(mailfrom:frank@factorymadecn.com fp:ma_600000357387399133 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Wed, 07 Oct 2026 18:17:16 +0800

Date: Wed, 07 Oct 2026 18:17:16 +0800

From: "=?UTF-8?B?U3BvcnQsZml0bmVzcyxydW5uaW5n?="

To:

Reply-To:

Message-ID: <09522124-a206-4d6a-8778-4d02f6ce26b1@alibaba.com>

Subject: =?UTF-8?B?U3BvcnQsZml0bmVzcyxydW5uaW5nLHlvZ2Esb3V0ZG9vciBlcXVpcG1lbnQ=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000357387399134

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 16.1

X-Spam_score_int: 161

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear manager: Our company specializes in smart sport,fitness,yoga,running,outdoor

equipment,strong OEM capabilities, providing precise customized orders.



Content analysis details: (16.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: factorymadecn.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: factorymadecn.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.136 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.136 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 J_CHICKENPOX_57 BODY: 5alpha-pock-7alpha

0.6 J_CHICKENPOX_55 BODY: 5alpha-pock-5alpha

0.6 J_CHICKENPOX_66 BODY: 6alpha-pock-6alpha

0.6 J_CHICKENPOX_43 BODY: 4alpha-pock-3alpha

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.6 J_CHICKENPOX_37 BODY: 3alpha-pock-7alpha

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?U3BvcnQsZml0bmVzcyxydW5uaW5nLHlvZ2Esb3V0ZG9vciBlcXVpcG1lbnQ=?=



Dear manager:


: wrap;">Our company specializes in smart sport,fitness,yoga,running,outd=

oor  equipment,strong OEM capabilities, providing precise customized orde=

rs.

Smart sport include blue tooth rings=

,watches and earphones,smart VR glasses,smart sweeping robot and swimming pool=

cleaning robot.

Fitness running eq=

uipment include smart running machine,running arm bag and&=

nbsp; waist bag, running storage bag,running rings and watches.

<=

p style=3D"text-wrap-mode: wrap;">Outdoor equipment include outdoor portable p=

ower,solar charging panel ,camping tents, car/caravan tents, hammocks, sl=

eeping bags, outdoor tables ,chairs, backpacks,flashlights,camping lamps,assau=

lt suit, jacket,hiking /mountaineering shoes.


rap;">Which items are you interesting? Please let me know,you are welcome to a=

sk for a catalog.

Best regards,


yle=3D"text-wrap-mode: wrap;">Frank

We C=

hat: 16675973861

Unqi Technology Co., Lt=

d.

doctor@nl2k.ab.ca 



p>

Italian language saxo bank phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Oct 2026 05:24:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEPke-000000005DH-1kLk

for dave@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 05:24:00 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 Oct 2026 05:24:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from qbs.szzrm.com ([20.105.131.134]:45717)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xENiN-00000000Idp-2l9j

for sales@nk.ca;

Wed, 07 Oct 2026 03:13:07 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=qbs.szzrm.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;

i=gozmjgmdg@qbs.szzrm.com;

bh=/niek9q7KExhIu8Te36eIbZJos5D58ChDMGJGDAvoJE=;

b=WM5/MYMJgfWvIkLxL4xwconB5QsnaSJJcUrVWb/HyJpoCnP0MMQfyVPK9sk30i8HcfnJF92rqbBp

CyKsbzK//herb90kCTjxSy9XGqNe2r3wf1Z2Y+bYiMCzCB+EmAC6JXcuMroix8SSfx0PP+14tebA

GS/hk4l+BfS0fQrXhpHSSkFtl3afc99nQx1kd5N4Jj2ky+FXzSkE5e7kHOM1XMPt0RI9EiEvT03+

zPL09Qw2WTNocKMzvZukxQRcRivHWDbts5LRRJw/aZA6XCgndXjMeNIM1HwfqQ2ulButTP6TAtfK

hzoQ/3PtChIk9jqVSeQ/Bu7wAnw/SNR9Mmh80g==

Content-Type: multipart/alternative;

boundary="===============1765268004319603770=="

MIME-Version: 1.0

From: Saxo Bank

To: sales@nk.ca

Subject: Ultimo avviso - Funzionalita del conto limitate fino alla verifica

Date: Wed, 07 Oct 2026 10:12:03 +0100

Message-ID: <179136432336.32894.14423770607514079943@qbs.szzrm.com>

Reply-To: feedback@saxobank.com

Feedback-ID: campaign:saxobank.com:mailer

X-Spam_score: 30.6

X-Spam_score_int: 306

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Gentile sales, ULTIMO AVVISO - VERIFICA IN SOSPESO IL SUO

CONTO PRESENTA LIMITAZIONI OPERATIVE



Content analysis details: (30.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.105.131.134 listed in dnsbl.ahbl.org]

[20.105.131.134 listed in dnsbl.ahbl.org]

[20.105.131.134 listed in dnsbl.ahbl.org]

[20.105.131.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.105.131.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.105.131.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.105.131.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.105.131.134 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 J_CHICKENPOX_39 BODY: 3alpha-pock-9alpha

0.6 J_CHICKENPOX_34 BODY: 3alpha-pock-4alpha

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.105.131.134 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_Z FULL: Dec/Hex char Enc [Zz]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

Subject: {SPAM?} Ultimo avviso - Funzionalita del conto limitate fino alla verifica



--===============1765268004319603770==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Gentile sales,



ULTIMO AVVISO - VERIFICA IN SOSPESO



IL SUO CONTO PRESENTA LIMITAZIONI OPERATIVE



Non risulta ancora completata la verifica richiesta sul Suo conto. Di conseguenza sono attive le limitazioni indicate qui sotto. La preghiamo di effettuare l'accesso e di completare la verifica: le limitazioni verranno rimosse dopo l'approvazione.



OPERATIVITA

Acquisto di strumenti finanziari: Sospeso

Versamento di fondi sul conto: Sospeso

Vendita e riduzione delle posizioni: Consentita

Prelievo di liquidita: Consentito

Trasferimento in uscita degli strumenti: Consentito



Le limitazioni restano attive finche la verifica non viene completata e approvata dal nostro ufficio. La preghiamo di intervenire oggi stesso.



Riferimento pratica: 54624792



Accedi e completa la verifica:

https://www.ebaocheng.com/?email=sales@nk.ca&uid=kZ4cmOisUMYSZGJNiQl6hVip



La rimozione delle limitazioni avviene dopo l'approvazione della verifica.



Perche ricevo questa email?

Le limitazioni derivano dal mancato completamento della verifica richiesta sul Suo rapporto. Se ritiene che si tratti di un errore, La preghiamo di contattare il Servizio Clienti.



Cordiali saluti

Saxo SIM S.p.A. - Servizio Clienti



----------------------------------------------------------------



Messaggio generato automaticamente all'indirizzo sales@nk.ca. La preghiamo di non rispondere a questo indirizzo.



Saxo SIM S.p.A. - Sede legale: Via [INDIRIZZO SEDE], [CAP] [CITTA], Italia - Codice fiscale [CODICE FISCALE].

Societa iscritta all'albo delle SIM e soggetta alla vigilanza di CONSOB e Banca d'Italia.

Il trading di strumenti finanziari comporta rischi, compresa la possibile perdita del capitale investito.



--===============1765268004319603770==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



















Ultimo avviso - Funzionalita del conto limitate fino alla verifica







Sul Suo conto risultano attive limitazioni op​erative. La preghiamo‌ di accedere e di comple‌tare la verifica per ri​pristinare tutte le fun‍zionalita.






















































ULTIMO AVVISO - VERIFICA‌ IN SOSPESO



SAXO





Il Suo conto presenta l‌imitazioni operative​



Gentile sales,



Non risulta ancora comp‌letata la verifica rich​iesta sul Suo conto. Di c‍onseguenza sono attive le limitazioni indic​ate qui sotto. La preghia​mo di effettuare l'accesso e di completare‌ la verifica: le limitazioni verranno rimosse dopo l'approvazione.























































OPERATIVITÀ STATO
Acquisto di strumenti‌ finanziari Sospeso
Versamento di fondi su​l conto Sospeso
Vendita e riduzione del​le posizioni Consentita
Prelievo di liquidità Consentito
Trasferimento in uscita degli strumenti Consentito




Le limitazioni restano attive finché la verifica non viene completata e approvata dal nostro ufficio. La preghiamo di intervenire o​ggi stesso.



Riferimento pratica: 10893224













Accedi e completa la ‍verifica

La rimozione delle lim‍itazioni avviene dopo l‌'approvazione della ve‍rifica.










Perché ricevo questa email?



Le limitazioni derivan​o dal mancato completam‌ento della verifica ri‌chiesta sul Suo rapporto. Se ritiene che si‌ tratti di un errore, La preghiamo di contatta‌re il Servizio Clienti.​ Contatta il Servizio Cli‍enti >







Cordiali saluti
Saxo SIM S.p.A. - Servi‌zio Clienti











Messaggio generato aut‍omaticamente all'indirizzo sales@nk.ca‌. La preghiamo di non r‌ispondere a questo ind​irizzo.



Saxo SIM S.p.A. - Sede l​egale: Via [INDIRIZZO​ SEDE], [CAP] [CITTA], I‍talia - Codice fiscale‍ [CODICE FISCALE].



Società iscritta all'albo delle SIM e soggett‍a alla vigilanza di CON​SOB e Banca d'Italia.



Il trading di strumenti‍ finanziari comporta rischi, compresa la possibile perdita del cap‍itale investito.



















--===============1765268004319603770==--

Chinese products spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Oct 2026 05:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEPkR-000000005CF-3RhM

for dave@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 05:23:47 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 Oct 2026 05:23:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f11.google.com ([74.125.227.139]:56900)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEMix-00000000Bae-1mGC

for root@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 02:09:41 -0600

Received: by mail-pj2-f11.google.com with SMTP id 98e67ed59e1d1-398a384b5f7so511924a91.0

for ; Wed, 07 Oct 2026 01:07:44 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1791360459; x=1791965259; darn=doctor.nl2k.ab.ca;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=McMoEk7tctaiKgReZ0yq4D6i9Wu0MLZfgsGiYX/K7/H2Uw5GXpFZnI8z1KWi+UHmZI

utS5S3d4+2WTgIzg14kYPC2H75Z4dEGcIKwVdKLBe6hsUbZx9CvFCfQt4ABTZ/nClHy1

ixUGO1Ew16b3pCelLfRaiBa1iaEbK2uF+JdXY=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791360459; x=1791965259;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=k3BktfwOqHiFnaJR84Yqhhq3xbiQD4oFJKlRNDbvZ08U5cRB4jGJM3QY0bGyYbSz6q

eZPwL1lj4i+jeRWD3vAzRNChNCsNBlQBPmm6UAkqiPosA/pmUhaUpBQK4/TU0Jo3vSq2

9/iUEOQBGsCYVEtNEBYxHc7AY9gGafeUGB7fbHEeKWEwMMFP95FeYkmzx+osDVU4Z+R2

jOPPeqxczbpubQUZbg8GFM/QM3RNvQ9gnbOWQUvfxkLusy25N0Z2oatj9Ph4llcyXTLq

ll/G+edXR8HzF4DNWRGp2P56BtflooXUO+4/EWNRUUwSM91+qZqGyCpGBU0Qn9jKrMJ6

sRUA==

X-Gm-Message-State: AFq9FYL1FHcfJpDtOoCb6vsVlr4jy9a9x+1UtDXm5zmHVmN3rPx0X2HR

wPTz2dEtGoHMQoO0vodNfWdErXh9taYpIixLYLB0lfnNSFMXOxjc62CQ23rLxkeApldqD8UvzhL

73NXlIDU=

X-Gm-Gg: AYBFou12n8wWi5Np0sz21rXmFh8ooh2tz7hH5YYEzvAZ3k4cGafg+WYr2mxokkfZG7g

qbAVlZCh5z7n1qwmiqk0gVkOiunAEMN48JkbuAv0CBxHtVOb28EF4smmN/rWH3Nu1uJfEuu5Grt

9bN/1Mkj9OR7sBChz3uEOHWSzLvEiIx01InCt59e+Aw27Qld0AMtqg4phgYZYseHzksIvKoUdP8

RPpVtc5/5HCIZHxw1aZ7hCm7EjDloO+KeadFjwQu6xcZbRggUqr1V686VU7jf70ujfN5GlQthi1

7LvyuMsLupK4a2fKfCYkR25EWgYYFGbxL79HncykdBn2iYpYWhYzMnL8KadPtqN4vCCNJlgLGOj

Vwpofv5lRRupudFWaAdhzx6khfesFiq614anJNYdIIaXXX/Y0WPuT7sJVZWAs/Mze8PrVefC/7J

zELc9oMWmeLlygvnoMgllPmJejfOSPWh58c/QSaljzDPHYdclBtvxmJACi1Bx4wmN7uJuwU9/bX

M3XqoEBHVtqS0+0

X-Received: by 2002:a17:90b:4d:b0:3a4:f8da:246d with SMTP id 98e67ed59e1d1-3a8a117a56cmr1039200a91.53.1791360458445;

Wed, 07 Oct 2026 01:07:38 -0700 (PDT)

Received: from lkob ([203.88.114.137])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a85436a39dsm8889191a91.9.2026.10.07.01.07.35

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Wed, 07 Oct 2026 01:07:37 -0700 (PDT)

From: "bella@sanmeng-mould.com"

X-Google-Original-From: "bella@sanmeng-mould.com"

Reply-To:

Message-ID: <1FEAB26521482E769DA41EB665160BCB@lkob>

To:

Subject: Re: plastic injection and die casting molds and moldings

Date: Wed, 7 Oct 2026 16:07:19 +0800

MIME-Version: 1.0

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: bella@sanmeng-mould.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear , We provide:



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[203.88.114.137 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sanmeng-mould.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.139 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.139 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.139 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FAKE_REPLY_C No description available.

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: www.sanmeng-mould.com/96.44.182.133]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: www.sanmeng-mould.com/96.44.182.133]

Subject: {SPAM?} Re: plastic injection and die casting molds and moldings



Dear ,



We provide:



plastic injection and die casting molds and moldings.



 thermoplastic injection molding, overmolding, 2K molding, aluminum & zinc die casting etc.



Competitive prices for exported mold and mass production of production mold.



 Excellent services involving mould design to mould fabrication, from parts to part assembly.



Professional engineering analysis.



 Excellent quality maintained through top-ranking testing machines.



Careful packaging.



 ISO certificate





We value every customer and will respond to any question quickly.



For details information pls check our website: www.sanmeng-mould.com



Looking forward to your soon reply.



Welcome to visit our factory anytime!



Thank you!



--------------------------------------------------------------------------------

Best regards,



Bella

SanMeng Mould Co.,Ltd



Wechat/ WhatsApp: +86-13242975530

Email: bella@sanmeng-mould.com

Website: www.sanmeng-mould.com

Add: NO.45, Jinghai East Rd, Shatou Community, Changan town, Dongguan City, Guangdong Province, 523863, China

Chinese products spam

Posted by Dave Yadallee on
Hey Good Day!

As standard glucosamine formulas hit absorption ceilings, we developed GINPOSOME®—a patent-pending liposomal co-encapsulated Glucosamine-Chondroitin engineered for vastly superior bioactivity.

In a recent AAALAC-accredited CRO study, GINPOSOME® significantly outperformed the industry benchmark brand:

Superior Efficacy at 1/10th Dose : Achieved higher cartilage repair (63% vs. 61%) and faster mobility recovery (83% vs. 64%) at just 9.8% of the benchmark's dosage (114ug/mL vs. 1165ug/mL).

Near-Full Mobility Restoration : Movement performance reached 108--113% of normal control levels at optimized doses (228--456ug/mL).

2.6-13.3times Bioavailability Boost : Enables significantly smaller daily dosing or cleaner-label formulations.



To seamlessly integrate this proprietary technology into your brand lineup, we offer flexible supply options:

Custom Powder Blends (Premix): Standardized, highly stable, and ready to incorporate into your existing manufacturing line.

Bulk Finished Capsules: Fully encapsulated and quality-tested, ready for your contract packaging and branding.



May I send over our technical report for your R&D team?

Simply let me know whether Powder or Capsules would fit your evaluation better.



best regards,



Dennis He



Sales Director



 +86 13795272899



 David.w@ginposome.com









Xiamen Ginposome Pharmaceutical Co., Ltd.

Haicang District, Xiamen City, Fujian, China.



Web : www.ginposome.com

German language Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 17:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEEVG-000000009Ts-33iH

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 17:23:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 17:23:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr2-f11.google.com ([74.125.225.75]:56392)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEDv4-000000005eA-3bGz

for doctor@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 16:45:35 -0600

Received: by mail-wr2-f11.google.com with SMTP id ffacd0b85a97d-48c688a7cd9so404202f8f.0

for ; Tue, 06 Oct 2026 15:44:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791326670; x=1791931470; darn=doctor.nl2k.ab.ca;

h=reply-to:date:from:to:subject:content-description

:content-transfer-encoding:mime-version:content-type:message-id:from

:to:cc:subject:date:message-id:reply-to:content-type;

bh=ehLjaAizzG7SZ9sLBPuVCqjEP2MNzj6qQT5HlNq4uvE=;

b=YQgs65qzzOKnWv0QYaS6NdPl5BfzSF7cls23Sx/5BWAIPSChi6cDmsmRSoVkpvfrmH

ofR8PW7TvxYFG7sEj3vSsKoofp+t0BuBxbDJTP556L9SdcdFy2Vw8I0agFlMKs7vDiTd

tE4UEd10Rziukklfyo0fsAn5irzWFX6qm3leEEzg1grzwOY0vCCShVRtV6nJAHy6GAUq

tcu/J6aWMDWQ3ZfRHckN/mRDiynrX+cXb1op+xb+9OoX63oGmFug3BJ32jUOcKkCNSM0

YxXRnEgKyzE67YkW9E/HGZJK/C5BlWOQcULYrbpqoZthryrj9/uzNEIhDHQZ1rYG0Prh

mvTw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791326670; x=1791931470;

h=reply-to:date:from:to:subject:content-description

:content-transfer-encoding:mime-version:content-type:message-id

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=ehLjaAizzG7SZ9sLBPuVCqjEP2MNzj6qQT5HlNq4uvE=;

b=WClrMWIr8Hv/jzDfmnpH8C3S6+q2pZywPjqdyONdSbEJDGsoOYcKU9D2eUIK3M/Xle

eTM6QBpZfhxmDS+C/1jRB1CvvxBG2B/glI5WmJWIrlvudsBzJl9xZayHwt9HCvQuqr4Q

6DIlotBXloKY0qtNJ8xyvgopGXXMdRyCLVIUyQ19Uc7uyuFe/bLP/IZCw7xOKOCDZcZC

QtDmXHFvcO9MoIA/CErl0tqhP8M/7ZzBJIRhOF1oJgPS1u05kchzd7O/VD1MHYSJkhmC

ZKlpINF9wrKy9aqwKv2dmNevaJOSk17MN5Gmn1TMINIgYPwpgExRNgK3IW4lDpqGEgHk

Ubhg==

X-Forwarded-Encrypted: i=1; AKwUvBxw0DTyWph10C8CZ5+VlnzJYgShs2X7TRK+K61r/VtYoiXSjULx/iz9k1ilZcwVa92flvJJFbU=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFq9FYLCTuS+8AOXVWq21hb6enFiLX+WHm4aard49y1UxaSxSHn3+Equ

90xQ73GB2aGKa8tU4umhxzUm3tguixIZxQVNGzLjiaruOsxhro/fOauf

X-Gm-Gg: AYBFou0s21iIweqklXfUsi5yg6hCNUoQ8mcxYqXEFR64MdzziZeybV+adXjnZ20hizL

fvUu70EEzDkN4ITwEoQvjgvAz+/IcnEcA/r9KKyrk5KLCpB/SNgvi5udKaJWRvFcPL4eQSB9+eR

5mhHWpc6xPNkyPqChbqKXe2rBcPwgq3IB4exSkzAqL7wxw46WYDk5E8wBq6EmmTlC1fRm3OBi1j

Z2oYA22jxpWmCL6kj+F97Nc85e8fuakmwszKPkvrr+fV3TpaaPa191sAPGWfpshe8KKSpkn/bzw

ZTlfBXFMtp9kVmJb2JPLEmWaOGsc0bJX387ImWB2IZYRGWo0lyCkfaj4dWY9WwnXsx7f2eUuW6M

DNGLwRLhchgK8wF1YoUO31sfmSH5qB2NnAd03jZbauC7BbArwzvZHPP6mFVqNBLKB59IMZ4H/El

7a1+E+/murdugytIbDi6ChY+y+lpGZH94PmWa6o5ooaDXegR6yEyInew6d21G7F+kjDss4HWiDI

B3rwqQrustHYFQwGBY=

X-Received: by 2002:a5d:64e6:0:b0:488:7f69:632c with SMTP id ffacd0b85a97d-48c7288cee9mr1214407f8f.56.1791326670516;

Tue, 06 Oct 2026 15:44:30 -0700 (PDT)

Received: from DESKTOP-G28RE5S.lan ([129.222.206.218])

by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48c71bd769csm1980384f8f.5.2026.10.06.15.44.23

(version=TLS1 cipher=AES128-SHA bits=128/128);

Tue, 06 Oct 2026 15:44:28 -0700 (PDT)

Message-ID: <6ac579cc.d8747c6a.1fb2f3.4eb0@mx.google.com>

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Ich bin Dominika Kulczyk

To: Recipients

From: zeitrox94@gmail.com

Date: Tue, 06 Oct 2026 15:44:16 -0700

Reply-To: headquarter.ceo11@gmail.com

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ich bin Dominika Kulczyk, eine polnische Milliardärin und

Unternehmerin mit Sitz in den USA. Ich bin die Tochter von Jan Kulczyk, dem

einst reichsten Mann Polens. Zudem bin ich Mitbegründerin und Pr [...]



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

[74.125.225.75 listed in dnsbl.ahbl.org]

[74.125.225.75 listed in dnsbl.ahbl.org]

[74.125.225.75 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.225.75 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[129.222.206.218 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[headquarter.ceo11(at)gmail.com]

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[zeitrox94(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[zeitrox94(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.225.75 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.225.75 listed in wl.mailspike.net]

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Ich bin Dominika Kulczyk



Ich bin Dominika Kulczyk, eine polnische Milliard=C3=A4rin und Unternehmeri=

n mit Sitz in den USA. Ich bin die Tochter von Jan Kulczyk, dem einst reich=

sten Mann Polens. Zudem bin ich Mitbegr=C3=BCnderin und Pr=C3=A4sidentin de=

r Kulczyk Foundation, im Aufsichtsrat der Kulczyk Holding sowie Mitbegr=C3=

=BCnderin der Values ??Consulting Group in den USA, wo ich auch gesch=C3=A4=

ftlich t=C3=A4tig bin.



Informationen =C3=BCber mich finden Sie unter:



https://en.wikipedia.org/wiki/Dominika_Kulczyk



Im Rahmen meines Wohlt=C3=A4tigkeitsprojekts beabsichtige ich, jeweils 450.=

000 US-Dollar aus meinem Verm=C3=B6gen an vier Einzelpersonen weltweit zu s=

penden. Wenn Sie diese E-Mail erhalten haben:



Bitte senden Sie mir Ihre Daten, damit ich meine Bank in den USA anweisen k=

ann, die =C3=9Cberweisung der 450.000 US-Dollar an Sie zu veranlassen =E2=

=80=93 eine Zuwendung, die Ihnen und auch anderen helfen soll.



Dominika Kulczyk

Kontaktieren Sie mich unter: vrosenburg@atomicmail.io

Apple paypal phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 17:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEETw-000000009NZ-0gXy

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 17:22:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 17:22:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f72.google.com ([209.85.222.72]:57786)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE9FR-000000009QA-3dEu

for doctor@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 11:46:19 -0600

Received: by mail-ua1-f72.google.com with SMTP id a1e0cc1a2514c-9806e283b0eso2408589241.3

for ; Tue, 06 Oct 2026 10:45:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1791308716; x=1791913516; darn=doctor.nl2k.ab.ca;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Yi0NigrBbpWvEP6CSBQCPF4ttBl6TSVtCDsQWI1AY4A=;

b=Bs3N+d1unkl/rULTuBiCvUs4B6S0ZYbOy0U9ELboRU/1u8xc8yrE4iiebO2QpAJEfX

hrtf3TwMl2Ewv9KmwRmwlyl6VOtZsL4x8QdAkUsSQ3PpRYAqTnEH2bu/sKwrCKM2nWE7

sKZFB8pZ+JBSV5UlX6Z6CPgFzaUYfRLQGPD+70u68MaIUM6cO+p147aR4WV9o47tojD9

1VMLJqnEss9+bSY9RTxsyL0f+udZHXPq3OxFc0+aohQGMiO+KGSziXqlYGTFzF2sQu64

86Ql69M07N7QAUpTlf3VW/BOY2M2m6pj71bVgCTlZVjXx5sVJOvl4rsXP3xOEyNhTmW/

yL+g==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=colegiobritanico-edu-bo.20251104.gappssmtp.com; s=20251104; t=1791308716; x=1791913516; darn=doctor.nl2k.ab.ca;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Yi0NigrBbpWvEP6CSBQCPF4ttBl6TSVtCDsQWI1AY4A=;

b=pLDdVexGDYURt2mvuHMDr2t0daUc48NaQWCnRS19shMsGp1ZMYbzSjj1SIFqp+xmSW

QaVfU0YCWXq+0TNRhs3nE7ZTWcIxeBCLDnfrfJDbhWx4a/GWAU/ba9tTGzRZAMXCvW+K

BqA/yFMLcjAN2EpgElCBR8pszdtdqBMhs4wLNB+gKycpVJgEmug1JbyuIVp09y2Z4dZu

Ka8tHV/2jvDgYdLubidOEmR6Yx7xilLcjpmHarkiIQ0Thb9zDLbY8k+b6Cz7oW9YB+08

NBUlBPgI9xyIsE7TR+piBJ1Eb5HBh4rR04WRCURnIY/P3bNFB5ZFJRUoOG9YOj0i62aR

+Bww==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791308716; x=1791913516;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=Yi0NigrBbpWvEP6CSBQCPF4ttBl6TSVtCDsQWI1AY4A=;

b=CBtfTYshVK5EAOSe9ftLECGSSoZ4zqakoH3eW/+8BBAm5EDLJ8BnhI4Yd3mNObuNNk

veDYzukZOulnTtEDWtIN9x7avGUEQggLqTJ4Eo10QxLVMHaEVcg1OZ35pdbDgIinQ0vz

Jmg55SjULQQwmetXsHSZp2JG/M4c3Ix6hT0C8CarNC3AIvylo3nD82NtZrKVw1kBQOip

9KtkbhSertxRulpMC4hJ6H87EMWDEYx/uqFofrKVdJx5LCW0J0/v5dcCSokaSLvSjCxJ

rPMmG936z33NsehFNLPB/Vg9UIc/TxgzbWgPGgcWRVHG8+TYQzWkTW9bDu6UIl7SeLd2

TRwQ==

X-Forwarded-Encrypted: i=1; AKwUvBx0ltMOtRulhRRm+IV7a//RcAAUHn8fIOA64GITmL/wTMfVFLBV4BZgkZXuNZxXWrvCHYcCVTg=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFq9FYK4O4A6OymLFjIDRkhdR78kMfBzUIt0Rs63cEkEs1hziN9T/tOx

VvnB6mqL3x3K+i2m3b2uxBwl2AoXMo7RYHAMyh/AxWgzbzuJY+jzL2V3gS3NdCq8zgN3s+gVqGB

j+AufdO0eorDY9tG0m9sh8w84gaDtCj/1O8yUvydpKRk6ug==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:a53:b0:7a7:198b:674b with SMTP id

ada2fe7eead31-7c2460fb1demt9301830137.32.1791308715755; Tue, 06 Oct 2026

10:45:15 -0700 (PDT)

Reply-To: HEVERT GABRIEL DEL RIO FERNANDEZ

Sender: Google Calendar

Message-ID:

Date: Tue, 06 Oct 2026 17:45:15 +0000

Subject: Important Message

From: HEVERT GABRIEL DEL RIO FERNANDEZ

Content-Type: multipart/alternative; boundary="000000000000b1f167065d2f8ff0"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Valued Customer, PayPal has observed activity that doesn't

match your usual usage patterns on your account. Our fraud prevention system

recently logged a $292.95 PayPal purchase attempt at an App [...]



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.72 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.72 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.72 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Important Message



--000000000000b1f167065d2f8ff0

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RGVhciBWYWx1ZWQgQ3VzdG9tZXIsIFBheVBhbCBoYXMgb2JzZXJ2ZWQgYWN0aXZpdHkgdGhhdCBk

b2Vzbid0IG1hdGNoIHlvdXIgIA0KdXN1YWwgdXNhZ2UgcGF0dGVybnMgb24geW91ciBhY2NvdW50

LiBPdXIgZnJhdWQgcHJldmVudGlvbiBzeXN0ZW0gcmVjZW50bHkgIA0KbG9nZ2VkIGEgJDI5Mi45

NSBQYXlQYWwgcHVyY2hhc2UgYXR0ZW1wdCBhdCBhbiBBcHBsZSBTdG9yZSBsb2NhdGlvbiBpbiAg

DQpNYXNzYWNodXNldHRzIChNQSkuIElmIHRoaXMgcHVyY2hhc2Ugd2FzIG1hZGUgYnkgeW91OiBJ

Z25vcmUgdGhpcyBtZXNzYWdlLiAgDQpUaGUgdHJhbnNhY3Rpb24gd2lsbCBjbGVhciBhbmQgc2hv

dyB1cCBpbiB5b3VyIGFjY291bnQgd2l0aGluIDI0IGhvdXJzLiBJZiAgDQp0aGlzIHB1cmNoYXNl

IHdhcyBOT1QgbWFkZSBieSB5b3U6IENhbGwgUGF5UGFsIFN1cHBvcnQgYXMgc29vbiBhcyBwb3Nz

aWJsZSAgDQphdCArMSA4MzAtMzE4LTk3ODcgZm9yIGltbWVkaWF0ZSB2ZXJpZmljYXRpb24gYW5k

IGFjY291bnQgcHJvdGVjdGlvbi4gWW91ciAgDQphY2NvdW50IHNhZmV0eSBpcyBvdXIgdG9wIGNv

bmNlcm4sIGFuZCB3ZSBhcHByZWNpYXRlIHlvdXIgY29vcGVyYXRpb24uICANClRoYW5rcywgUGF5

UGFsIFN1cHBvcnQgVGVhbSArMSA4MzAtMzE4LTk3ODcgS2luZGx5IGRvIG5vdCByZXBseSB0byB0

aGlzICANCm1lc3NhZ2UsIGFzIHRoaXMgYWRkcmVzcyBpcyBub3QgYWN0aXZlbHkgbW9uaXRvcmVk

LiBzZXJ2aWNlQHBheXBhbC5jb20gTm8gIA0KbG9uZ2VyIHdhbnQgdG8gcmVjZWl2ZSB0aGVzZSBl

bWFpbHM/IFVuc3Vic2NyaWJlIMKpIDIwMjYgc2VydmljZUBwYXlwYWwuY29tDQoNCkltcG9ydGFu

dCBNZXNzYWdlDQpUdWVzZGF5IE9jdCA2LCAyMDI2IOKLhSAycG0g4oCTIDNwbQ0KQm9saXZpYSBU

aW1lDQoNCg0KDQpPcmdhbml6ZXINCkhFVkVSVCBHQUJSSUVMIERFTCBSSU8gRkVSTkFOREVaDQpk

ZWxyaW9oZXZlcnRnYWJyaWVsQGNvbGVnaW9icml0YW5pY28uZWR1LmJvDQoNCg==

--000000000000b1f167065d2f8ff0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20


















/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"HEVERT GABRIEL DEL RIO FERNANDEZ: Dear Valued Customer, PayPal has=

observed activity that doesn't match your usual usage patterns on your=

account. Our fraud prevention system recently logged a $292.95 PayPal purc=

hase attempt at an Apple Store location in Massachusetts (MA). If this purc=

hase was made by you: Ignore this message. The transaction will clear and s=

how up in your account within 24 hours. If this purchase was NOT made by yo=

u: Call PayPal Support as soon as possible at +1 830-318-9787 for immediate=

verification and account protection. Your account safety is our top concer=

n, and we appreciate your cooperation. Thanks, PayPal Support Team +1 830-3=

18-9787 Kindly do not reply to this message, as this address is not activel=

y monitored. service@paypal.com No longer want to receive these emails? Uns=

ubscribe =C2=A9 2026 service@paypal.com"/>
itemscope itemtype=3D"http://schema.org/Event">
s" content=3D"http://schema.org/EventScheduled"/>
r" itemscope itemtype=3D"http://schema.org/Organization">
name" content=3D"Google Calendar"/>
alendar" content=3D"3h4mrn3cuegibht94clifgmshr"/>
ne; font-size: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0=

; width: 0; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">=

Important Message
cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:10=

0%;" class=3D"body-container">

"left">
 
<=

!--[if mso | IE]>

ing=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D=

"width:100%;" class=3D"">

">


=3D"description">Dear Valued Customer,
PayPal has observed activity tha=

t doesn't match your usual usage patterns on your account.

Our fraud =

prevention system recently logged a $292.95 PayPal purchase attempt at an A=

pple Store location in Massachusetts (MA).

If this purchase was made by y=

ou:

Ignore this message. The transaction will clear and show up in your a=

ccount within 24 hours.

If this purchase was NOT made by you: Call PayPal=

Support as soon as possible at +1 830-318-9787
for immediate verifica=

tion and account protection.

Your account safety is our top concern, and =

we appreciate your cooperation.

Thanks,

PayPal Support Team
+1 830-3=

18-9787
Kindly do not reply to this message, as this address is not acti=

vely monitored.


ice@paypal.com">service@paypal.com
No longer want to =

receive these emails? Unsubscribe
© 202=

6 service@paypal.com


td>

=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"">

; direction: rtl; font-size: 0; padding: 24px 32px; text-align: left; verti=

cal-align: top;" class=3D"main-container-inner">

tion: ltr; display: inline-block; vertical-align: top; width: 100%;overflow=

: hidden; word-wrap: break-word;">
lspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-column-ta=

ble-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-layout: fixed=

;">

gn:top;">
esentation" width=3D"100%" style=3D"table-layout: fixed;">
r>

font-size: 0; padding: 0; text-align: left; word-break: break-word;;padding=

-bottom:2px;">

s-serif;font-weight: 400; font-size: 22px; line-height: 28px;color: #3c4043=

; text-decoration: none;" class=3D"primary-text" role=3D"presentation">
n itemprop=3D"name">Important Message

=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;pad=

ding-bottom:24px;">

: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spac=

ing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" r=

ole=3D"presentation">Tuesday Oct 6, 2026 =E2=8B=85 2pm=

=E2=80=93 3pm (Bolivia Time)

ize: 0; padding: 0; text-align: left; word-break: break-word;;padding-botto=

m:24px;">

font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px=

;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"pre=

sentation">
presentation" style=3D"padding-bottom: 4px;">


ext" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-we=

ight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Organ=

izer


break-word;;padding-bottom:24px;">

erif;font-style: normal; font-weight: 400; font-size: 14px; line-height: 20=

px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"=

primary-text" role=3D"presentation">
ellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;"><=

td>


-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased;marg=

in: 0; padding: 0;">Guests

(Guest list has been hidde=

n at organizer's request)
=

=



--000000000000b1f167065d2f8ff0--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 11:23:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE8sX-00000000FM4-0y11

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 11:23:01 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 11:23:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8221367.xmail.ntesmail.com ([8.221.36.7]:49452)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE8jt-00000000AZR-19ce

for root@nk.ca;

Tue, 06 Oct 2026 11:13:45 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1178040_399822551.1791306755275"

To: root

Subject: =?UTF-8?B?TWFudWZhY3R1cmUgb2Ygd2lyZQ==?=

X-Priority: 3

MIME-Version: 1.0

Received: from andy_lai@jcnconnect.com( [10.139.4.149] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 7 Oct 2026 01:12:35 +0800 (GMT+08:00)

From: Andy

Date: Wed, 7 Oct 2026 01:12:35 +0800 (GMT+08:00)

X-WM-Tid: 0aa11233ec7803bdkunm6a5f6c0c18918d

DKIM-Signature: a=rsa-sha256;

b=x5lMUuLOPFki/OkFBxnYLHzEd3sLAnlkOXq/37za9AMxqeQBvFH/1ZoffpWtm6IsO42FVgpgUiKnCIlu9fet2iFhccHeJ96nmgJNvpRUc/SnAM7kM/RZumNhVvPVFvkZBmOG3sIPlzsLxD0O7utU8ZvKjjYfDL+zgWB4aECUu7c=; s=default; c=relaxed/relaxed; d=jcnconnect.com; v=1;

bh=reAXg08LOMfRIIiTIKpPJG4Tt3A+Hjc2NSMtsZCYoDA=;

h=date:mime-version:subject:message-id:from;

Message-ID:









Greetings root



Long time no contact, how are you these days?







This is Andy from DongGuang Jalink electronic Co.,ltd.We are a manufacture of various types of wire harness:electronic wire harness, automotive wire harness, equip-ment connection wire harness, medical wire harness,high-temperature wire harness, etc., which accord with UL,ISO 9001,ROHS, CE, SGS,MSDS.Established in 2001,our company is a trinity enterprise of production, agency,and promotion.



I'm writing to introduce our wire harness,contrast to other factory, We have the following advantages:



1. Support for small customized orders 2. Quick quotation process 3. Short production cycle 4. Professional engineers and promotions staff with prompt responses



Hope to establish business relationship with you! If you would like more information about our company, kindly visit jalink-tech.com .Any thoughts/comments would be greatly appreciated.





Best regards

Andy



Hit subscribe now to receive regular updates and our product’s latest features! Subscribe



If you dont want to receive our emails, you can easily unsubscribe here.

andy_lai@jcnconnect.com







On Thu, Sep 24, 2026, Andy wrote:



-----Original Message-----

From: Andy

Sent Time: Thu, Sep 24, 2026

To: [root ]

Subject: Re: Inquiry about Cable Services





Greetings root



Glad to see your website and know that your main product is similar to our product.



This is Andy from DongGuang Jalink electronic Co.,ltd.We are a manufacture of various types of wire harness:electronic wire harness, automotive wire harness, equip-ment connection wire harness, medical wire harness,high-temperature wire harness, etc., which accord with UL,ISO 9001,ROHS, CE, SGS,MSDS.Established in 2001,our company is a trinity enterprise of production, agency,and promotion.



I'm writing to introduce our wire harness,contrast to other factory, We have the following advantages:



1. Support for small customized orders 2. Quick quotation process 3. Short production cycle 4. Professional engineers and promotions staff with prompt responses



Hope to establish business relationship with you! If you would like more information about our company, kindly visit jalink-tech.com .Any thoughts/comments would be greatly appreciated.



Best regards

Andy



Hit subscribe now to receive regular updates and our product’s latest features! Subscribe



If you don't want to receive our emails, you can easily unsubscribe here.

andy_lai@jcnconnect.com





Canada International Property Show Spam from mailjet

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5pw-00000000MLQ-3nm5

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:08:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:08:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o122.p8.mailjet.com ([87.253.233.122]:42639)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5nI-00000000LpP-0xAb

for sales@nk.ca;

Tue, 06 Oct 2026 08:04:59 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=canadapropertyshow.ca; i=info@canadapropertyshow.ca; s=mailjet; t=1791295431; x=1791302631;

h=Message-Id: MIME-Version: From: Reply-To: To: Subject: Date:

List-Id: List-Unsubscribe: List-Unsubscribe-Post:

Feedback-Id: Precedence: X-CampaignID: X-CSA-Complaints:

X-MJ-Mid: X-REPORT-ABUSE-TO: Content-Type: To: From:

Sender: Subject: Date;

bh=dYqphsvEjB+PedAXLGBWVwSzI+LbELremwRS1HhCvpU=;

b=kPpyn6OxBKVjc5N2mpmIIcG1g2XuY5/Gyte/Fi7cjsm5NOsLrOfHAaUae

owMsvk2b2PSwfp/1nq9zPfXO5C8QWfniss6JOoD15z/WYLHP+ZZRNZTXehhQ

CECCAO2sR+ft7KJ1wjb8/Ho3OVHBLDiWhXOX5Ezltzo9Ex7scrH0KhwlUvD1

329/dcXwKYdNdfY9ftq9FJHJsjlYdvvEvIubrt4nmNC0z03uaLqKlMV5MQcD

o8HyJCgSV+ay1AUPxkvQWsjSCCjMwi3bAEVlQA0dC4zK5SvCpWBlcPMPBeIa

yGGc4ZdjpsR3lCGp4xXRXA7B4dONPhO99CC4wraEfG5/w==

Message-Id:

MIME-Version: 1.0

From: Canada International Property Show

Reply-To: info@canadapropertyshow.ca

To: sales@nk.ca

Subject: Get a gift card + more when you attend the Canada Property Show

9-10 Oct. 2026

Date: Tue, 6 Oct 2026 14:03:51 +0000

List-Id:

List-Unsubscribe:

,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-Id: 42:2952425.2720056:MJ

Precedence: bulk

X-CampaignID: 7765199376

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

CAAACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative; boundary="=-XUWfiITMQotWjMjBTH8h"

X-Spam_score: 48.1

X-Spam_score_int: 481

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: <> [https://www.eventbrite.ca/e/2026-canada-international-property-show-9th-10th-october-2026-tickets-1976214273089]

View online version https://sh4zl.mjt.lu/nl3/J-HX5Uif [...]



Content analysis details: (48.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

[87.253.233.122 listed in dnsbl.ahbl.org]

[87.253.233.122 listed in dnsbl.ahbl.org]

[87.253.233.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mjt.lu]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: canadapropertyshow.ca/35.227.194.51]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[87.253.233.122 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[87.253.233.122 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Get a gift card + more when you attend the Canada Property Show

9-10 Oct. 2026



--=-XUWfiITMQotWjMjBTH8h

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



<> [https://www.eventbrite.ca/e/2026-canada-i=

nternational-property-show-9th-10th-october-2026-tickets-1976214273089]

View online version https://sh4zl.mjt.lu/nl3/J-HX5Uif7BLfjKjuVy2Twg?m=3DCAA=

ACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgT=

g&b=3Dacc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w

If you don't like our emails, you can=C2=A0



update your preferences https://sh4zl.mjt.lu/unsub2?m=3DCAAACXp4-9sAAc7XihA=

AA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg&b=3Dacc0a7d7&e=

=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us]or https://sh4zl.mjt.lu/u=

nsub2?m=3DAUYAAHPnElQAAc6lPsQAA9FtWcgAAYKI_iYAoEvTAC0M6QBocCUcmJ9mT1W7QtmiO=

bGBnsWaDQApgTg&b=3Dacc166ac&e=3De9ed69b4&x=3DJXV5YF4Lsy_PYywz1IAQXRtzDekYgN=

I6e86cGq3ZbC4&hl=3Denunsubscribe [https://sh4zl.mjt.lu/unsub2?m=3DCAAACXp4-=

9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg&b=3D=

acc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_usat any time.=



--=-XUWfiITMQotWjMjBTH8h

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




9/xhtml" xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-m=

icrosoft-com:office:office">Get a gift card + more when you at=<br /><br /> tend the Canada Property Show 9-10 Oct. 2026
a http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
a http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8">
name=3D"viewport" content=3D"width=3Ddevice-width,initial-scale=3D1">
type=3D"text/css">#outlook a { padding:0; }

body { margin:0;padding:0;-webkit-text-size-adjust:100%;-ms-text-size=

-adjust:100%; }

table, td { border-collapse:collapse;mso-table-lspace:0pt;mso-table-r=

space:0pt; }

img { border:0;height:auto;line-height:100%; outline:none;text-decora=

tion:none;-ms-interpolation-mode:bicubic; }

p { display:block;margin:13px 0; }
le type=3D"text/css">[owa] .mj-column-per-100 { width:100% !important; max-=

width: 100%; }
acing:normal;background-color:#F4F4F4;">

e:1px;color:#ffffff;line-height:1px;max-height:0px;max-width:0px;opacity:0;=

overflow:hidden;">Get a gift card + more when you attend the Canada Propert=

y Show 9-10 Oct. 2026

"main" lang=3D"en" dir=3D"ltr">

gin:0px auto;max-width:600px;">
ding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"width:100%;">
body>

adding-left:0px;padding-right:0px;text-align:center;"><=

div class=3D"mj-column-per-100 mj-outlook-group-fix" style=3D"font-size:0px=

;text-align:left;direction:ltr;display:inline-block;vertical-align:top;widt=

h:100%;">
esentation" style=3D"vertical-align:top;" width=3D"100%">

gn=3D"center" style=3D"font-size:0px;padding:0px 0px 0px 0px;word-break:bre=

ak-word;">
resentation" style=3D"border-collapse:collapse;border-spacing:0px;">=


-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/1/1=

LpSzBrRXRfg14k0dvPVqw/aHR0cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhL=

WludGVybmF0aW9uYWwtcHJvcGVydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0=

cy0xOTc2MjE0MjczMDg5" target=3D"_blank">3D"Newsletter
s.png" src=3D"https://sh4zl.mjt.lu/img2/sh4zl/0e2ed310-d076-463b-a3f8-9bcd8=

b73319b/content" style=3D"border:none;display:block;outline:none;text-decor=

ation:none;height:auto;width:100%;font-size:13px;" width=3D"600" height=3D"=

auto">

=3D"font-size:0px;padding:0px 0px 0px 0px;padding-top:0px;padding-bottom:0p=

x;word-break:break-word;">

tyle=3D"font-size:0px;padding:0px 0px 0px 0px;padding-top:0px;padding-botto=

m:0px;word-break:break-word;">

Arial, sans-serif;font-size:13px;line-height:1;text-align:left;color:#0000=

00;">


: center; margin: 10px 0; margin-top: 10px;">
ont-family:Arial;font-size:12px">If you don't like our emails, you can =

;


t-align: center; margin: 10px 0; margin-bottom: 10px;">
:#55575d;font-family:Arial;font-size:12px">update your
ink-build-content" style=3D"color:inherit;text-decoration:none;; text-decor=

ation: none;" target=3D"_blank" href=3D"https://sh4zl.mjt.lu/unsub2?m=3DCAA=

ACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgT=

g&b=3Dacc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=

=3Den_us">pr=

eferences
px">
px">or
coration:none;; text-decoration: none;" target=3D"_blank" href=3D"https://s=

h4zl.mjt.lu/unsub2?m=3DAUYAAHPnElQAAc6lPsQAA9FtWcgAAYKI_iYAoEvTAC0M6QBocCUc=

mJ9mT1W7QtmiObGBnsWaDQApgTg&b=3Dacc166ac&e=3De9ed69b4&x=3DJXV5Y=

F4Lsy_PYywz1IAQXRtzDekYgNI6e86cGq3ZbC4&hl=3Den">
000EE;font-family:Arial;font-size:12px">
content" style=3D"color:inherit;text-decoration:none;; text-decoration: non=

e;" target=3D"_blank" href=3D"https://sh4zl.mjt.lu/unsub2?m=3DCAAACXp4-9sAA=

c7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg&b=3D=

acc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us">
pan style=3D"color:#0000EE;font-family:Arial;font-size:12px">unsubscribe
span>at =

any time.



al, sans-serif;" href=3D"https://sh4zl.mjt.lu/lnk/CAAACXp4-9sAAc7XihAAA-BCc=

pQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/0/HlpY7fF-ztnZk9ol7b=

61jA/aHR0cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW9uYW=

wtcHJvcGVydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0MjczM=

Dg5?b=3D1">​
ock;" href=3D"https://sh4zl.mjt.lu/lnk/CAAACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcA=

oK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/0/HlpY7fF-ztnZk9ol7b61jA/aHR0cH=

M6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW9uYWwtcHJvcGVyd=

Hktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0MjczMDg5?b=3D3">


BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/3f97414f/e.gif" height=3D"1" width=

=3D"1" alt=3D"" border=3D"0" style=3D"height:1px;width:1px;border:0;"/>



=



--=-XUWfiITMQotWjMjBTH8h--

Bitcoin Paypal phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5ph-00000000MJu-02gO

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f181.google.com ([209.85.210.181]:56575)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5aG-00000000GJw-09X9

for doctor@nl2k.ab.ca;

Tue, 06 Oct 2026 07:51:34 -0600

Received: by mail-pf1-f181.google.com with SMTP id d2e1a72fcca58-88aea027391so1437931b3a.0

for ; Tue, 06 Oct 2026 06:50:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791294631; x=1791899431; darn=nl2k.ab.ca;

h=subject:to:from:date:message-id:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=BKCtVGfhvIbcv7tEukp5LEGsx4Zn5SM4hs7B6rk/BHs=;

b=sZXOmhB2N1iV8nlDpfxxAVD95J+7WULJ+nsN1/hX7C9j6BPd71swwuk6buHJeBc6g1

aeJ0W9b/ZHbNkBy7Uf/35zqdoFfZv8RKP4SCHQkfnlUFRVUhyCMgLBqn9tsIBYqjMM0x

JvsHECo+w3CIbbqpJtb8V58iA9+AURSY6ZCUtDVQGdGXxtuDp7DI3DCfZzfD7r2hqLFe

ZwrMasIH6wMXZDi29NO5U+HVs0rhrekxeh/gfjgFEs1pdSFN3GHjZ76gO/IRjALyRPGY

a6SjTDsyBfElWAl/ZtlAF5S6uiDVW5inaf1twtysIkIGt9WoqrIYi8hxk1uVpi+8woWu

2BqA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791294631; x=1791899431;

h=subject:to:from:date:message-id:x-gm-gg:x-gm-message-state:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=BKCtVGfhvIbcv7tEukp5LEGsx4Zn5SM4hs7B6rk/BHs=;

b=zR560fPBjAv/vzZJdrDrQUOuw8UbsnGu+xMlWZHA8iwPHAN2C9EocJrR93jv/iTSKH

veLP2xlN9DoJAlOprIyh1H5qeBMYMHhfy4txuTwLw556469hXQ5SSc8A3w/G34Dlr0GO

D+zeS8FAXLS6286b53V5T6bJ5s8AxVtEKH/0473w5kGxFcptT/0rM+oJ4TQoeKtUk8vd

49XxUr+66+RYB6spQVeETQQ+E8hZ6b1BZh8GPUrFN+l2rcxVnccy6dkKS8Bq3zBaUuge

BcM5IEIh7ulTWiI8mjJdkYqEWGTEAyFtE+hQcymGAX4reNr0uFz2ykfKeOEGHYbPHhDg

MmOQ==

X-Gm-Message-State: AFuF++nnLp4wQvPFHx/I0ZSXXXPGcjqq/jIEpaMi2dXJfikBf8zTTwMh

dz55X4BPcmyVne/2N4y32pFAjlS87H+Bsiq2XlinlSEz6E9DMKSCmbNv9oY6lCYI

X-Gm-Gg: AYBFou2X6iGmLlL0De7Hu4UZUQ8BgFkalAvuzHBYjgHW0UGKAJaTIx8OjalQWqE5OCO

lx9Jvga92rcNjQfa+4ffCrIipmpim6mhdDLGka6QCUffhnMc9xtmacLjHy3pMts2EmbMplptLeG

Rt5J+wC6JyguDuAAQD1prrbOxO6abgnzJMHUaZwv+/qyUIbHB37WvMAVRp+9IrEOWcMHkRz+yrN

aarpKeByhKfTg5EXJcFYSnlvohLaQW+RFHj0KnUOfsYISr2GrTCgKiBrlpDX/KfH83bScya6RTF

2QntahdjTDrVZW3EwJEK9rDlckRiCwA2SjUuZZf1/vQg4ePiaQTLvSq9cXuD0B7ww6Hb6AgCejE

piwVBoh5Br3Uqw5zSzHlYpMNedwNgCOxkTLeubCD/ep7Z57/IOAxUvLxHU1QPB4om7f8cZiYRTw

KtQu7h4tIBDcRL9CO1/c+LHax0GBCkcDKiyF3EjtkZ9qV9CGGgbVLKZ6Pu4k0QE8DZmFzn9U5gr

xj8xIyCyhAZHr/BvQM4w0jiBs+HdnS0dPWTtatI4/GRaGVGKaskKS3ogg2iwwT3k0u5dqj8H3E=

X-Received: by 2002:a05:6a00:3e19:b0:880:4b56:dc28 with SMTP id d2e1a72fcca58-88c62315dffmr9694403b3a.15.1791294631013;

Tue, 06 Oct 2026 06:50:31 -0700 (PDT)

Received: from localhost (ec2-35-88-121-53.us-west-2.compute.amazonaws.com. [35.88.121.53])

by smtp.gmail.com with UTF8SMTPSA id d2e1a72fcca58-88b0ca7c6b7sm4961188b3a.44.2026.10.06.06.50.30

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 06:50:30 -0700 (PDT)

Message-ID: <6ac4fca6.72aa5310.fd419.6a93@mx.google.com>

Date: Tue, 06 Oct 2026 06:50:30 -0700 (PDT)

From: salahulla33@gmail.com

X-Google-Original-From: PayPal

To: doctor@nl2k.ab.ca

Subject: Payment Success | $419.33 | Ref: I-JRM9COL3E947HQ



Dear doctor,



Your PayPal subscription is scheduled for renewal, and a payment of 419.33 USD will be processed within the next 24 hours for another year of service.



Renewal Details:



Service: Bitcoin



Account: doctorHello doctor,



Thank you for your recent purchase with PayPal.

We’re confirming that your payment has been successfully received via PayPal.



Transaction Details

Date: 2026-10-06

Transaction ID: I-F6H7606E8XC9WYBEP

Payment Method: Pay.Pal

Amount Charged: $419.33 USD

Item: Bitcoin

Quantity: 0.05 BTC

Total: $419.33 USD



A confirmation receipt has been sent to your registered email address: doctor@nl2k.ab.ca.



If you have any questions or need assistance, feel free to contact our support team at 1(828) 579-6365.

You may also view your order or manage preferences by logging into your account.



Merchant: doctor

Shipping/Billing Address: 3070 Ridgeview Rd Reva Va 22735 United States



Thank you for choosing PayPal.



Best regards,

The PayPal Team

Indian Education spam from Yahoo! Mail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5pJ-00000000MHa-0THg

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic-asso1-0020.asd.mail.yahoo.com ([34.2.90.19]:1536 helo=sonic.asd.mail.yahoo.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE53B-0000000045T-3stt

for root@nk.ca;

Tue, 06 Oct 2026 07:17:24 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791292576; bh=nwQF3HimN5Ebgb8+gfB8a43K+LvjQJRCxrWDxZMkmjs=; h=Date:From:References:Subject:From:Subject:Reply-To; b=DQ21n1KkdHUsiKSKpQhEyNWU0DG/4X6HByCujnQGYub55HwTAtUZvCtIu0+HzT1vw6p6mWojkn11nlGEaD4EzhiOSdD5XIyvU+17YON/TAgbThF9kBoq7Vdle1FTUouUgckErziq8EYUWGjGb8EC8R7LU0FZSF+1t/o+6hMJrj/6XNJDl/J7d+HtDQl6zwdH0GVGGq74qmrzEWprOOWxX0y2LvHNlneiWMNpfqw7XhJV0JNjFjU7M3ZhHikfl7x15TkDMm5utUMhDR6iaHZiUDOQoJAZmpD/7b5YkmWSvyREHstonjGiSIc1Yg3AAzo719n60LFK3haui92gOxPZHw==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791292576; bh=JSP2IheKODUxp6A+U9qWFuVv9YgvOWbneMW/O7PBWgg=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=gBcYUFvz90OAK6aBMiZxVc/56reHIZnchrQTykzANN5n4v34nmDoq2GiuQnZlxyFca7Z2zeO3iwjxUo8hChKNV+12Z9QOHRn2e4pqIFsU6YS1XXqvWf5cdeFncoXh434Epy0/mNuND4tksUW3/2tzSRWGhrHSjlCQL+sUd33nJ9f8zHFfC705e/AMWCONZ3mU2mhXpyoW1gf489IZyg1/pPscyLz8syb8NH4bO5PCWl45AJQp0WF4qDc0Nroqtx0ML6rfbulPGABn5GKBRK2S6+M9Vl0fPcsTp0PPASffvFCw5FsI8SFya5giOj0dHrm9/0ZOzfkUal1x2e45m+IiA==

X-YMail-OSG: Ug4vHz0VM1kaQ3zbueD6ETD4.tCN68wgzvoMrCvIyv6hHFvIqGhrHIEx0xzrAY0

eCcPC51Y69tzspyfdgZgPSowncSrdmEh_NyiXgf9g4gx2MjDufqXKwRpVS0miek_jSh4lHAtiU0Q

NjAuEnuuLeUUEfW0hkyWWABFVatithdVUaDgNqe5BxeZsBDaInOpCyBuqw9My7YKmX..PBLTu93f

uFcNLXuj3my4D2cNycCy3zUMCN5ifO0RjrCbUwL.R4PUEYvBrNp2tZLoWK0ZAVA.7BP7UmhBLfKK

IUQCH7w0re7HHTU7LNUF94UH4dceJAAfLcLqRQ9tlKiAx06eZYtOQ70Ed4xCmykyiUXT1_UmXZ80

KD1FtTjXooYQDElZ7FxP6Hitg2SP1Wl48LzTQoQOZV4UNw.gxF7hakWILnMWGZLimjC_i8LOECP3

AH7o8IvitFoYVAA3n5Hdcqj4T97nXcoJwUrLimgbkQMaUGNyiVaXsyYlZB9qSm_CMlFVBt33GPid

IhgrcnU48VxFLO55YzuCoaodUpSFJZ9FGa2XXbCsRckZBmcpBfgTVBZ3o9nRn89vDlJa72Q4C.rU

o7BoavJI6.voMP9C8sYBeSY__pTCfm3cAcGP21voO.YwJIfjqN2BIseBID3QUzdNuiaW3Sy5OOaY

aExCmKGcNEzUhnttVUipyLkbfdUAFfyPt14NYrurJmE0UQRoL8SBciAVGp5yxNCaPW4.YXqOdrkR

5kzC0B5dCG01U.aguNEU5KHQ29qhIkihU0DJaZB0e_z37p0VYLXAmKmqH2sA5RG7BbhjwidQzZW6

s2sAcX38blnfSjvYIRGmjp6eEovZPafp6G3Ewp0vmZY82HS5xFf9QCrA4tT3mOETX0OErXDyQhrq

QW95ZE81vpK51Z5Lfuq9nUvU.T5PINRqRYDGH0vhpYt4WycgMePBGUUvQHA3ae9SPnIMwPQx9uhW

mqBQMP0TQl6a4Wz75Pk3W0VkXoxlPDOcvrKw2GH2J60gsugV5K2W0EYUkQAAFCDGcRqbNak9eBnb

yUmkepkdubcpjYABR5oAzrrbPFcVr1z33BsCIqLm9ikmewtioNyZbeYZKwI_lyiqJkH4FEZ96ZvH

Ps8lZc_zSUVKYmTY3.XaEZhK1iJWgXMGdRdauz3S0bgTTeEuh37oUnAYKB6dTpALrifdr4W24d3c

2pi3hYDj_uBtNYNpEeFa74jVRSqvbpI75MVwpv6Nl3XdoJDJiJcuVUfJ5miGy_6gAxEBzkNY17UM

GKRy.dm67RLTbavV6Fr_X1.LdnkjWJ2lvgEc57iZhY9t0tv45xL.tSW7QrGAs0IFU1AXLweLho5d

c18WmbuTWoAVfywi3dJoy9CFs2LkidThQJAZup65d7HGlYhAsv13A1GGakGZrmWk4_Q9mH_WjDGQ

HSNnDqNm9o.wER9oiedZDY30Wij.JKDNVboTdDlgkUECg1TZqvCQURX3u_657pf5DH6Fm.L.VwWm

9D6HXKXRlyCiU_Mtr9XBRk5bFK6BSRzuXlqzFGdUQmDu6vDaIcyrktrKMFaoQm9pRxwAFRb.KVPn

.hSLzoLcz634iXAJ32u6mlyvfXZ0avufvny9izlv0.CFm7M07PbuWXff_fu9pv_eVoUPSGRI8oOm

dJ96Eu5P8wZ0s1JTyYGzcOR83IDP.arHdFKPtj4HAXw2td3w2SNfI4gD2w1iBn7q0P09MGXVnh3X

ttylIIuTAZWmzTuxnZU0qFWjg87kKhz0iJnhgJ20FIgei_DfMen8_cXwgyIu.mINIUlkuhJkZiCt

xED3uCBprdOYTokS1QBpTnrCQ7Gc7WvumsVTm61FlrzIYvGXxtwBQnMGrT6N.hWuDkqCEeIbg5tT

tfENOxCGxXo4EXAM5HdlRzGH6ViIT4VrRbCVyPXKsY1xmSUPsD8FLziAO6hwyVSEQLRGoRIGKlAA

82Dy09MjOEjNgE3dGvwSAFeygQwt7SxKLQT0oO9dvY0W7SXufPcePqhlyMynL2iEvYOg0eAyzDKL

28suFphh4zZAsQoQboHDCLeSBWRBhDDOCIT14p.yM6bbbCoOO9.t0wdSiS_2GNUlCS0esADWCuY6

CbCUvLcNuCenIGIIKkjJ_a_CPNECp6Y4Dy__kh5lmJgV0egMX

X-Sonic-MF:

X-Sonic-ID: 1453dbf3-ab33-4d8a-83da-1e6010e3c2b9

Received: from sonic.gate.mail.ne1.yahoo.com by mail-asdoutdeli-p-cin-asso1-prod-sonicconsumer-svc-101 with HTTP; Tue, 6 Oct 2026 13:16:16 +0000

Date: Tue, 6 Oct 2026 13:16:10 +0000 (UTC)

From: "Chirag Saiya (Speaker&Writer)"

Message-ID: <1954634498.516185.1791292570602@mail.yahoo.com>

References: <1954634498.516185.1791292570602.ref@mail.yahoo.com>

Subject: Tuition Classes for Kids Up to 4th Grade - Admissions Open

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_Part_516184_949650396.1791292570602"

X-Mailer: WebService/1.1.26668 YMailCLDNovation



------=_Part_516184_949650396.1791292570602

Content-Type: multipart/alternative;

boundary="----=_Part_516181_1171333317.1791292570578"



------=_Part_516181_1171333317.1791292570578

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





NAMASTE.



=C2=A0



Please Find Attached:



=C2=A0



=C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Chirag Saiya Tuition Classes Mul=

und - West (Mumbai)



=C2=A0



Kindly Read + Do Share WithAll & Oblige.



=C2=A0



Thank You.



Best Wishes!



Love &Light=E2=80=A6



=C2=A0



Chirag Saiya(Philosopher)



Spiritual Speaker & Writer



Website:http://sites.google.com/site/chiragsaiya



Whats-App: +919819210230 / chiragsaiya@gmail.com



=C2=A0



Save The Soul. Change The World.



Protect The Future Of All Innocent AngelKids.



Where There Is A Will There Is A Way. WayTo Freedom=E2=80=A6



May All Living-Beings Be Delivered FromSuffering & Be Liberated!



=C2=A0

Truth- Justice - Equality - Freedom - Peace - Happiness - Joy - Health For =

All LivesWith Right Vision & True Mission Of Well-Being Of All Living-Being=

s AlwaysForever & Ever=E2=80=A6!!!

------=_Part_516181_1171333317.1791292570578

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable




ly:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">

=3D"ltr" data-setdir=3D"false">


style=3D"font-size:12.0pt;line-height:115%;font-family:Verdana,sans-serif;=

mso-bidi-font-family:Arial">NAMASTE.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial"> 
span>






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">Plea=

se Find Attached:






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">&nbs=

p;






amily:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol;col=

or:red">=C2=B7
nt-stretch: normal; font-size: 7pt; line-height: normal; font-family: Times=

New Roman;">      
s-serif;color:red;background:white">Chirag Saiya Tuition Classes Mulund - W=

est (Mumbai)






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">&nbs=

p;






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial">Kindly R=

ead + Do Share With

All & Oblige.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial"> 
span>






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Thank You.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Best Wishes!






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Love &

Light=E2=80=A6






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0"> 






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#C0=

0000">Chirag Saiya

(Philosopher)






ht:115%;font-family:Verdana,sans-serif;color:#1D1B11;mso-themecolor:backgro=

und2;mso-themeshade:26;background:white">Spiritual Speaker & Writer
an>
s-serif;mso-bidi-font-family:Arial;color:#1D1B11;mso-themecolor:background2=

;mso-themeshade:26">






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#98=

4806;mso-themecolor:accent6;mso-themeshade:128">Website:
=3D"font-size:12.0pt;line-height:115%;font-family:Verdana,sans-serif;mso-bi=

di-font-family:Arial">


" target=3D"_blank">
amily:Verdana,sans-serif;mso-bidi-font-family:Arial">http://sites.google.co=

m/site/chiragsaiya
5%;font-family:Verdana,sans-serif">






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#4F=

6228;mso-themecolor:accent3;mso-themeshade:128">Whats-App: +919819210230
pan>
ns-serif;mso-bidi-font-family:Arial"> /
a@gmail.com" rel=3D"nofollow" target=3D"_blank">
.0pt;line-height:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:A=

rial;color:#E36C0A;mso-themecolor:accent6;mso-themeshade:191">chiragsaiya@g=

mail.com
mily:Verdana,sans-serif">






ht:115%;font-family:Verdana,sans-serif"> 






ht:115%;font-family:Verdana,sans-serif;color:#002060">Save The Soul. Change=

The World.






ht:115%;font-family:Verdana,sans-serif;color:#002060">Protect The Future Of=

All Innocent Angel

Kids.






ht:115%;font-family:Verdana,sans-serif;color:#002060">Where There Is A Will=

There Is A Way. Way

To Freedom=E2=80=A6






ht:115%;font-family:Verdana,sans-serif;color:#002060">May All Living-Beings=

Be Delivered From

Suffering & Be Liberated!






ht:115%;font-family:Verdana,sans-serif;color:#002060"> 






erif;mso-fareast-font-family:Times New Roman;mso-fareast-theme-font:minor-f=

areast;mso-bidi-font-family:Times New Roman;mso-bidi-theme-font:minor-bidi;=

mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA"=

>Truth

- Justice - Equality - Freedom - Peace - Happiness - Joy - Health For All L=

ives

With Right Vision & True Mission Of Well-Being Of All Living-Beings Alw=

ays

Forever & Ever=E2=80=A6!!!


------=_Part_516181_1171333317.1791292570578--



------=_Part_516184_949650396.1791292570602

Content-Type: image/jpeg

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="Chirag Saiya Tuition Classes Mulund

- West (Mumbai).jpg"

Content-ID: <853dba1a-1d62-3244-5502-db3d78c4a48a@yahoo.com>

...



------=_Part_516184_949650396.1791292570602--

WEb/SEo/App Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5p8-00000000MGg-0Aag

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:18 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f52.google.com ([209.85.216.52]:42157)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4q5-000000002xX-1U9W

for root@nk.ca;

Tue, 06 Oct 2026 07:03:50 -0600

Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-39647aa9d52so702595a91.0

for ; Tue, 06 Oct 2026 06:02:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mindswebsolutiion-com.20251104.gappssmtp.com; s=20251104; t=1791291751; x=1791896551; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=rsgC2Sx4fVLlDbUyRf8U5JlTTBjwWV8hIagsACZvNs4=;

b=EYg7t5+TzFHWp21Ar4mY99+7KN6RWK9oyOx36Q1Z8tOq8G86fFW2ZpgV+IY/ONKx/n

Ka/xDeawYZz+YLoTLnO+VZwXbrSzsPl7ROvH9LQmpLFAd31ld49A4a30O5wxQECJ98wr

84L6uM3tgzg50s5rb+NMvZVCub931YE04Ld4eUnc4r+WW3Xk5EwN3tVNbf8xWOOMju/c

v7+E4L/nEXQydIe67cVP+8l4avcU3XPHP8ikFMsJVZ/qaFycfj7JRzoVgrRYOTqw6WeT

fR9jy/oNXDBzn7m6jkEjbzNtM67aj1/0giPmebEE0aZ0dl+IJTvQZADxIRB9OwuuI9OZ

K//w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791291751; x=1791896551;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=rsgC2Sx4fVLlDbUyRf8U5JlTTBjwWV8hIagsACZvNs4=;

b=qs6thc4vezzpNdjNaavbos2FegxE4wJRlEimAcaelwAOxUQK9rJfTj4EW9NDOIFAtf

utUU2YlR/JB+YswD0+6bLWHYj0TWFaElPBDSMWklPy1Og2xsi+YcBVZlWl6a41fIsct8

x/nN28Wa0DczkQ1xlksstb8Sa643EdENY+SQ5Gulb7RB9+8J1+QEaB15mR+PZxyTXCBS

9UGhHaUZZbPPWcbZbhta8Ai4qGyDFWCAdoHLVgoTMRnl4nX/pXh4i3GcOL2Ec7OiuxvY

F20UfUPj1Fn979ChVV8Mx5XBc5LymIV1N1reOcvxP/dNa+hJhb3j17OR3mx6Vw03Hj+o

hQMg==

X-Gm-Message-State: AFq9FYLz+sz8ydt5VVbK7QSD1mB5x6qqBCO2fpR2t8IyKKeH4AdGQ0ce

btAGN4A3UVa8ycpMNxQE1+lpQS3Z0M9Jq0mbUbRiJxZiPH+H8FZvlj/KYhvJpnZWtR30G0PnBle

ymEmE

X-Gm-Gg: AYBFou0hDV4SLcRtvJsREhX2U3MODDgvziC+zxQyPysvX5cQ9Z/j+uCRXNIdaqjqFXp

r2X1uRJ3PCEfreySwQUWa6iWi5GnVldKaUjcb5MbhD4tJbPgGJWNWz0vMb3nFfhDsKM/jsAaCl0

olaBnBIhqwl9GHyuiAt4/qCsP54WfQd9Uwm9iBpqGaGYS6u0VTBBNTFaTdzmeVYVF+7mrSCaE31

5M8b5sn+Hu7zGqZcSdYHxxamcxuPlxA4R7eOpWlBMweXBOHdBDsSY5gbBefuoUc6ca4wUMQyrxm

Q9zCBOw8UpHN7sH18Up6JgBhbVyOhUMmWIWRrtRW2VwV6N2h9Kh0Jk7i5YTvFyWGsl+JCrAyUWk

ESyDwwyT+RRzSBjHIhpiYg2LcogVPwNTPhnjK4euc1RN/y3w+ZQA3MUJgvJilVB5vwGfEYQ9oG/

rHcROkRIHPbagsyj1hpgCIdlhpkEz4kYs7eEKTDCzerAgr8WSxJGfztWvChNlICuM1+hsozCYsf

wSlUbhlAAcc+5rhA7En

X-Received: by 2002:a17:90b:3b8f:b0:3a7:96d:feaf with SMTP id 98e67ed59e1d1-3a87368575emr666527a91.16.1791291751275;

Tue, 06 Oct 2026 06:02:31 -0700 (PDT)

Received: from [127.0.0.1] ([103.106.232.126])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a8543b0c1fsm6538153a91.14.2026.10.06.06.02.30

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 06:02:30 -0700 (PDT)

From: Shaun

To: root@nk.ca

Subject: Get Ranking Report - www.nk.ca?

Message-ID: <9f79cda1-df76-2449-26f6-311a43047b0e@mindswebsolutiion.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 06 Oct 2026 13:02:28 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, With your permission, I would like to send you an SEO

report www.nk.ca with prices showing you a few things to greatly improve

these search results for you. These things are not difficult, and my repo

[...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.52 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.106.232.126 listed in sbl-xbl.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.52 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.52 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Get Ranking Report - www.nk.ca?



Hi,

With your permission, I would like to send you an SEO report =

www.nk.ca with prices showing you a few things to greatly improve these =

search results for you. These things are not difficult, and my report will =

be very specific.

We can place your website on Google's 1st page. =

Yahoo, Bing etc.

May I send you a quote, previous work and our =

proposal?

Kind Regards,

Shaun,



Geek squad phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:07:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5p1-00000000MF7-2Pwo

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:11 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f41.google.com ([209.85.216.41]:47402)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4mG-000000002ae-3dzi

for doctor@nl2k.ab.ca;

Tue, 06 Oct 2026 06:59:55 -0600

Received: by mail-pj1-f41.google.com with SMTP id 98e67ed59e1d1-3a6cf104827so426065a91.3

for ; Tue, 06 Oct 2026 05:58:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791291500; x=1791896300; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=HA6BFvZLuIteIfa1z6TcVJK9y44bulEU8LHBGWyjlm4=;

b=eLXpkaW9AABTsJqeTKlqZvbzhSgB2MZnjcS2A1TTpFG+dMMZtZFFwfi4hoOJQJdqDp

tsM2StbAry7tu+d9lsxjD1JL5SJSohkTiCSDlw3WoHDCuqj/nCleYePZzR2UfxLrnlld

KpmaFdmvYcj8lqtqqcCDO+ot4h1T2mWdYyI0XzxNehdxx9mXu31CVux6jfb6BR0yfEdy

dTBYJSuLFe5ylXH6ZTKtyXDPZ4QFIcYLXHt8LDJC/odL8s10lGDG6PF8wmFC3Y4o07w7

zst6KPrwACE/HfMSKudlLPdDaR/R+3zRzQx5YwadEUx9syUSPdzIqSl0KkSF4AZWm6dI

3mLg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791291500; x=1791896300;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=HA6BFvZLuIteIfa1z6TcVJK9y44bulEU8LHBGWyjlm4=;

b=T8oVhDW4cyDzd9BFfllw/K0N1xf/sMMEV541tI2vBoxeWpNz/sefcPAZ2usYXuzkft

i9wk9TlsGStG3jPIsR1sDHMSb5PtcyxHb4BHTtDNT1ulC+3Yx5O31X+I8qHBZ/R9FRoH

4WzQQU2YaY+TFdaRQDjieeIch8eT6p1c2+q1qzRQQMRuszwx1gAmmAz7lSwNQ/seNlZk

52umF09r9ygWoK6CnXHFdvVfVwqHypHOHZ/4igEm/aHVQ1BaLIzzHlwCoP7486VW9MB6

hjDIN03ZYUXZTRf0IjTKySKm7Gwzv79AAZpTjwTmyS03nHgHvu5Yf54wzS1NnMLzzN3L

v+1A==

X-Gm-Message-State: AFq9FYIDUDV1d+FTZMWVXOixLU2aeLbhHxzY6+/v5FQvKNoJCg9Apit5

F8YElkXoynXsySjMWMQCc2howdDR23T4KIKi0Ch+shcnOxeU1QTKenZOmdhoiX620lo0Gw==

X-Gm-Gg: AYBFou3kFLCmwjhVOcQ3k0aNnsCS+iKLUE+F7WnpW02CxJeFQc20xNTsqWBMZ9DV6H1

9rK0OqtH79QSMayUAWpqoUlfxw3aPzbdcVaJ+Fefoc6aQMKmitq/ZiJRw2s9vgboKrjIJG/PUnx

eOUxuEQW82G3th75THHDhBjRFSrJetxqIrzAr9hM0zSxIlJOrADxBnEvENtF9qKq7TWdK5vq8/S

yT0urEt8ZX2usS1auaBhvJFf2lcd0bm3auv28ODSas9XRXEKlDZEspBatj5suIYCglpR86pEhem

XF5FCuAnE4ChxkxLwElDcM0Z7OCs6nBKxq5LtdsoIAOoCgJzRG/iS3C4pHkFHPByTOZJSuX6qEe

+9swLCLau4Ms+WyXHQfChQIozRRpDk1GlHobaSXD8EBCpe8cbF2z1nqVYOWrimaHQrJpE2KkvFY

spK4vVcWaG0nAZgsA0rf98mUuMBWEiJMXhlvwkZE4ndW8l+0MyxBWX4yqtTgZis0vp3Rz027gYY

23rQKk5Bsi7LxCHQGoQOL01XV+J/MRfWskDbQ==

X-Received: by 2002:a17:90b:2c90:b0:3a8:1a1a:7895 with SMTP id 98e67ed59e1d1-3a87350ac2emr461501a91.18.1791291499583;

Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Received: from [10.203.1.48] ([43.167.223.122])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a853cafddesm7101151a91.10.2026.10.06.05.58.18

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Message-ID: <6ac4f06b.0a1c4297.15ce81.c8c6@mx.google.com>

Date: Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============0833806656785191990=="

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: We updated arrangement No #34399956

Importance: normal

Priority: normal



--===============0833806656785191990==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













































--===============0833806656785191990==--

Virtual Assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:07:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5ou-00000000MEU-1HRM

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:04 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f176.google.com ([209.85.215.176]:58604)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4V6-00000000178-3p1P

for root@nk.ca;

Tue, 06 Oct 2026 06:42:11 -0600

Received: by mail-pg1-f176.google.com with SMTP id 41be03b00d2f7-cc4c7fab7b6so1925103a12.0

for ; Tue, 06 Oct 2026 05:40:44 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791290439; x=1791895239; darn=nk.ca;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=4WBpCrNm9OIUiVDc/hV2evamZRzUH0C92RMA2TYtbEw=;

b=fIsoY3IRrg7bYNlX3RaBqwEu07CUSlyb4RZqI1+eovjU7t7zX0kbGHixQIv4SujfWh

wRAdKByx0Ze84uaZ/DdDlNl+cCfUW2NkgpR7wVHS76VwUVhTLN4kvYDK50TW2kA4xPDY

NNxb5YKm5zWQssZqt906/uH6RVa1xqY93j0UJDMkChL+vOLhdX4jWTwoPEC5g0AhMgf+

gWPPYPavf+KcN6fyh6jkJ2pg8dpUSBnlKADijd41ihvMJUqRTseugvZtmgUtTXQ7K61h

/3CW0JR4APaYejXbtIKPiv8BhY8Oz1AhewVK8ubz9tc7bmI5WarIigEvTtchGmaKkB8V

iU7Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791290439; x=1791895239;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=4WBpCrNm9OIUiVDc/hV2evamZRzUH0C92RMA2TYtbEw=;

b=iiUOOSSJeviWdzywWwPjkkhQp+R1Jy6TEKd4zBFFNgQcUe6PJG0gR0Ti9GDbYi+wj6

ha5rbG9Iq9ZoKzG/+PuGHkIytYh1VQ4LjgC+C8CFAXmXlomxQzAXm9BVwYDzJ34WK0aY

w64zeEeTci259ZDAaS0HmwNnf0CG66Ab6y4gjIVpR0CYXeDWqzsHKYDn9wL7oiKoHi62

ygWWrrGpvXyLr5EJijrAddx+0Bc5QXllm4Lw33kEm5H/FBCcZa1oBFFsipeKMOFqtI8y

9onIrnU5NFgoyUocqBRxOUY1uGnBRSbrgEN+aVDSffGqJ+WRkKDg9MJch+bP6q61Lz6C

Bg9g==

X-Gm-Message-State: AFq9FYKT5fvC7iGNY4yPZEcwtrfE8oHwWkgTljdJaOLVRGd9V+zM2lJt

8Zb+m5qXpJsXjCQbf6gc/Nyc6EHwms+dDYQQODSle4El/b6uu/IPfFnSB3Xg3g==

X-Gm-Gg: AYBFou11o6Vc4zp4uMOBcRyOaiOJi4jejr3y5Js9rT1qtg9ehAd3Ep9Eh+lQlv7xSgc

/v72wSK3Y38KSGSYlX0jkTtFOJ6j3JscMIPbM/0eSrShe+ZjEuTM4eu0pwgXCIIqy8MUF5XGABc

mytu8pdpE9bhzhd3riy8+CzDsMUxDr59ZKsg5AAH0U5c65niglTtAZH0M7Wvf6hAF/TQVX70xfQ

mYTCRC+fxz/BHj6fOPE0b6UD+mIYF6+fQzpCG2/XAvGnbK+QZIAB8Zq2yNH/UupadSnocTNl+Kl

fTfToHFK5a3tSW3FyVE9nW+tjr/RkU3hglwrR0tbxJN/dqo2PFHdSjiYjsMtVnz1+q9rxrcaX/D

d1oRkCQpaBX12R/0es3XZq0tDhbjrjn2gVHTzCJ37vg7IaAHU5qcgQjft4/nT04bIiJX4A0GN7g

yduaz2kI0sITs3lZMkadXcb3SX72KiD5nHgbZMrRU+U/dP09aG+aH4m6TUlp81t0tA/8jA0N+rk

B6+EQNPYeIQfZvgrtLZ

X-Received: by 2002:a17:90b:164b:b0:3a4:d338:4136 with SMTP id 98e67ed59e1d1-3a78779e4e0mr8661328a91.66.1791290438752;

Tue, 06 Oct 2026 05:40:38 -0700 (PDT)

Received: from gmail.com ([122.160.196.13])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a8543ab76bsm4768047a91.13.2026.10.06.05.40.33

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 06 Oct 2026 05:40:37 -0700 (PDT)

Message-ID: <6ac4ec45.0d0da1c3.2f63f8.ec6b@mx.google.com>

From: "Kanhaya"

Subject: Re: Dear, Good Morning, Reminder # root@nk.ca My Name is Kanhaya

To: "root"

Content-Type: multipart/alternative; boundary="Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt"

MIME-Version: 1.0

Organization: Headfield Solutions Pvt Ltd

Date: Tue, 6 Oct 2026 18:10:34 +0530



This is a multi-part message in MIME format



--Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Dear, Good Morning,



Any Update.?



Let me know if you=E2=80=99d like quick support or more details.



Thank you!

Kanhaya

VA Team



On Fri, Jun 19, 2026, at 10:45=E2=80=AFAM Kanhaya
9@gmail.com> wrote:



Hi, root@nk.ca



Please could you let me know whether you are interested in hiring a Re=

mote Virtual Assistant (like Cold Callers, Appointment setters, Marke=

ting associates, social media managers, administrative executives, dig=

ital marketing, lead generation, data entry, etc.) to work at a reason=

able cost?



Can we schedule a quick call this week/next.?



Sincerely,

Kanhaya

VA Team

Note: If this isn=E2=80=99t relevant, feel free to reply =E2=80=9COpt-=

out=E2=80=9D





--Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline




sform: none; text-indent: 0px; letter-spacing: normal; font-family: Ar=

ial, Helvetica, sans-serif; font-style: normal; font-weight: 400; word=

-spacing: 0px; white-space: normal; orphans: 2; widows: 2; background-=

color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial; text-decoration-color: i=

nitial;">Dear, Good =

Morning,


ext-transform: none; text-indent: 0px; letter-spacing: normal; font-fa=

mily: Arial, Helvetica, sans-serif; font-style: normal; font-weight: 4=

00; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; bac=

kground-color: rgb(255, 255, 255); font-variant-ligatures: normal; fon=

t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio=

n-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;">Any=

Update.?


text-transform: none; text-indent: 0px; letter-spacing: normal; font-f=

amily: Arial, Helvetica, sans-serif; font-style: normal; font-weight: =

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; ba=

ckground-color: rgb(255, 255, 255); font-variant-ligatures: normal; fo=

nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial;">Le=

t me know if you=E2=80=99d like quick support or more details.<=

u>


one; text-indent: 0px; letter-spacing: normal; font-family: Arial, Hel=

vetica, sans-serif; font-style: normal; font-weight: 400; word-spacing=

: 0px; white-space: normal; orphans: 2; widows: 2; background-color: r=

gb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: =

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: ini=

tial; text-decoration-style: initial; text-decoration-color: initial;"=

>Thank you!
Kanha=

ya
VA Team


4); text-transform: none; text-indent: 0px; letter-spacing: normal; fo=

nt-family: Arial, Helvetica, sans-serif; font-style: normal; font-weig=

ht: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2=

; background-color: rgb(255, 255, 255); font-variant-ligatures: normal=

; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=

ration-thickness: initial; text-decoration-style: initial; text-decora=

tion-color: initial;">
">On Fri, Jun 19, 2026, at 10:45=E2=80=AFAM Kanhaya  <kanhayak=

umari778899@gmail.com> wrote:


olor: rgb(34, 34, 34); text-transform: none; text-indent: 0px; letter-=

spacing: normal; font-family: Arial, Helvetica, sans-serif; font-style=

: normal; font-weight: 400; word-spacing: 0px; white-space: normal; or=

phans: 2; widows: 2; background-color: rgb(255, 255, 255); font-varian=

t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;">
alibri, sans-serif;">Hi, root@nk.ca


rgb(34, 34, 34); text-transform: none; text-indent: 0px; letter-spacin=

g: normal; font-family: Arial, Helvetica, sans-serif; font-style: norm=

al; font-weight: 400; word-spacing: 0px; white-space: normal; orphans:=

2; widows: 2; background-color: rgb(255, 255, 255); font-variant-liga=

tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;">
, sans-serif;">Please could you let me know whether you are interested=

in hiring a Remote Virtual Assistant  (
lor: red; font-family: Calibri, sans-serif;">like Cold Callers, Appoin=

tment setters, Marketing associates, social media managers, administra=

tive executives, digital marketing, lead generation, data entry, etc.<=

/span>) to work at a reasonable cost?
>


: 0px; letter-spacing: normal; font-family: Arial, Helvetica, sans-ser=

if; font-style: normal; font-weight: 400; word-spacing: 0px; white-spa=

ce: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255=

); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-=

text-stroke-width: 0px; text-decoration-thickness: initial; text-decor=

ation-style: initial; text-decoration-color: initial;">
font-family: Calibri, sans-serif;">Can we schedule a quick call this w=

eek/next.?


text-transform: none; text-indent: 0px; letter-spacing: normal; font-=

family: Arial, Helvetica, sans-serif; font-style: normal; font-weight:=

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; b=

ackground-color: rgb(255, 255, 255); font-variant-ligatures: normal; f=

ont-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=

ion-thickness: initial; text-decoration-style: initial; text-decoratio=

n-color: initial;">S=

incerely,
Kanhaya
VA Team
Note: If this isn=E2=80=99t relevan=

t, feel free to reply =E2=80=9COpt-out=E2=80=9D


l>





--Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt--



Web/SEo/app spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5oP-00000000MBp-2kPO

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:06:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:06:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f46.google.com ([74.125.82.46]:46310)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE3H4-00000000JbP-21yY

for sales@nk.ca;

Tue, 06 Oct 2026 05:23:34 -0600

Received: by mail-dl1-f46.google.com with SMTP id a92af1059eb24-1517bda04a0so185224c88.0

for ; Tue, 06 Oct 2026 04:21:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=amysoftsolution.info; s=google; t=1791285699; x=1791890499; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=AO0yaYJu2hCsokJkjhgD0CMb5NhpHBGTwPc2cgSaJ9k=;

b=WkjwO1tyKj5KV6mKIdnG0KvJeU9Ff6V0L431bafSF7DMJ7lQW8b9ItlieKHY66EPF4

2qjrZ8U/wI0Zo5ioheAmbYn6KnH+rx9v2Soj299EeBllUHMKK4T27iggc+5lHr/0oumz

DFGSpVsoUHsBXW0GeyeOLi5Ldf3woyoOZEGS8=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791285699; x=1791890499;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=AO0yaYJu2hCsokJkjhgD0CMb5NhpHBGTwPc2cgSaJ9k=;

b=W6zK74jEeOG+uZWOY+UWE3Ok19Hg4XqB2Zm8pUJKdIGn7YwxTkyj8TEtZE8yYWru98

jzCd1I/lG9EOPuzDLr9QXIjtlB7JsXFrUxqAPNuBPWDPOm0oTo7wOTTXkn7WOxQKZstu

+6vRjEOGJvPOjr+gr9H9SoQDAHvgxEvxpCC/j/rFMIrGCVdK239hGnJ0jhxwlxKuzB7h

zbmjUO12eDgPODehJ6JsTRLxxeA2NTfdrlgV8isgP1sppjmUYb+Hu5aS2b/dySsYjOto

AMoDHXXWGrHoT3eapTgtCQ4iB0U905hSPPpwNOZLrpyziHiPeM+pnCI4r17ZtcmoZYUO

6C8Q==

X-Gm-Message-State: AFuF++krGB5SknUAxfIQ/TtCqpLyb9a1jm4DrvtRZTH3qVs/gZ1+E3j+

kgDYthKZftvyUQQqhQsenB+VQxsDw3wKP9hLcjH+2P+BHVgkotic5vVlSpvjGCXJaoknwLCI2p6

jOFyt

X-Gm-Gg: AYBFou3bhi0eTrv11C9LjWabKgoAm9YmFJiUDLsAXbhGMGxyHwbOmgnAbN8c75N2d27

k6DlYBa6f2z6GrafmPSO+KEgu0++bYGzWzXyk4R5Zi44RjlKt/qp+22JgOotczw08ZnKZ1RNiEm

Jbb2iv8gySvXowq4IffhLEPRvWyyXK1ttxT1Pcbmph7I0NlNLhkZXqRWE57dKhfugy1ZvccxvWc

SXenZAqK+y4KiM8rfjKiUHjSN+kbqw/TEQL+wE1xymb+tEFlyrQ36Jv6EkGdq8dMuGW0wsrRhe0

jD+aVO/Eayr6KpLmWO/cgZfry7E1HAERzrY0U6pT057fcP9xBqeOsfVTn//C402jn5iWZEcL20V

HAKVhkjjR8J0qb9JDOv7sB1lQ7Y3vJB2r1UTted+ByMw9qm37M9a7GanV265vRVX/QUR67b70nv

dTH9hNOi1AfrPOcBVYIYXqAX/EpWHRePP/i/VWTdA0mMIeSXTzHY6ImJ35XFTc/ku4MeNlM2CLX

9oluFvcg3MQ6fNj7cPZ6mkecCk=

X-Received: by 2002:a05:7022:383:b0:15e:9126:c60f with SMTP id a92af1059eb24-15ecb3bab4fmr1615963c88.29.1791285699199;

Tue, 06 Oct 2026 04:21:39 -0700 (PDT)

Received: from [127.0.0.1] ([122.161.50.206])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-16044b97384sm575561c88.1.2026.10.06.04.21.37

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 04:21:38 -0700 (PDT)

From: Lane

To: sales@nk.ca

Subject: =?UTF-8?Q?Need_a_Custom_Android_App=3F_=E2=80=93_w?=

=?UTF-8?Q?ww=2Enk=2Eca?=

Message-ID: <57f6311f-dbbf-c88c-571a-b4a8d934b641@amysoftsolution.info>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 06 Oct 2026 11:21:36 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 20.2

X-Spam_score_int: 202

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Sorry for disturbing you,



Content analysis details: (20.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.46 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.50.206 listed in sbl-xbl.spamhaus.org]

[122.161.50.206 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[122.161.50.206 listed in zen.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: amysoftsolution.info]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: amysoftsolution.info]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: amysoftsolution.info]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.46 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.46 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} =?UTF-8?Q?Need_a_Custom_Android_App=3F_=E2=80=93_w?=

=?UTF-8?Q?ww=2Enk=2Eca?=



Hi,

=C2=A0

Sorry for disturbing you,

=C2=A0

Do =

you want to develop a mobile app for your business?

=C2=A0

If =

you are interested, PLEASE=C2=A0SEND ME YOUR =

CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

/>=C2=A0

Regards,

Lane



Sutton hotel Employment phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 02:52:00 -0600

Received: from mout.mail.com ([74.208.4.200]:35417)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE0u2-000000006lZ-1wC2

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 02:51:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=worker.com;

s=s1089575; t=1791276577; x=1791881377;

i=suttonplacehotels@worker.com;

bh=DJTT7TBuCrHIT/gCVklSo1nE6CYGzaK+XAqedNaxfnM=;

h=X-UI-Sender-Class:MIME-Version:Message-ID:From:To:Subject:

Content-Type:Date:Content-Transfer-Encoding:cc:

content-transfer-encoding:content-type:date:from:message-id:

mime-version:reply-to:subject:to;

b=U9FbfIRvV6t9BxGyl92g+XQW97uNHtDccMzV3+Z2XtRw3JGaZ2ZHbWwMjL7xunGM

jjndeAXIoa1izs54ZZRLUD5eqJ3lnGPooWQXweDfq4rel0itco8opz+YJGnZPbqpa

eThOsblyVlbItp+Rs/5DaMrn77/Ntw8xMmosSziw2A8HE1HpIGdMy9iiCg7gM5EHO

/6bbTFDRyhGnaGp3eENQecwnCkgE+/M7KVK0AgqTo+ceoXwwLFbLqw+VDolaT8bPv

ioK90cLN4tzf5G3i9OABbU+Xyy+WtpnXMd+QvfUeTX0LmSjvkNdNXHNF+fU73pFWo

HIGPkoQ/i6jPjMuVBQ==

X-UI-Sender-Class: f2cb72be-343f-493d-8ec3-b1efb8d6185a

Received: from [137.255.195.224] ([137.255.195.224]) by

trinity-msg-rest-gmx-mailcom-live-6b476b5775-26vzt (via HTTP); Tue, 6 Oct

2026 08:49:37 +0000

MIME-Version: 1.0

Message-ID:

From: suttonplace Hotel

To: dave@doctor.nl2k.ab.ca

Subject: JOB @ CANADA HOTEL CANADA 2026/2027

Content-Type: text/html; charset=UTF-8

Importance: normal

Date: Tue, 6 Oct 2026 08:49:37 +0000

Sensitivity: Normal

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-UI-CLIENT-META-MAIL-DROP: W10=

X-Provags-ID: V03:K1:6lpsnnQMw/SwU5Uei2GH/M3IZSl92zvUl0fszYGx7EtNiAr+J6sGIVeTDUjlcVGTwB80A

4giov2rHy7TPonn9wnpufVsyqh0SLgkoagGDv8aLaG9fSGqeELrtBSrqtm2q69D3JCoK6DloUeHm

EsJJGpk4D8p5bDOBQi/2ZMVTF+MWl6w0edoEla4K6bCqq5FPSSM2mjWXmIZ517/DeQZEkeA2EotP

YG9QkYojdIsTKUg7SPf2CBacxb6QQxGee26clr1q7fWQkNrLSwZv7Y+QaZfa9thSSycP30E545Mi

HcI+qta49A1r74FpmjjnoBdFQiR8gGO9PWRq87jLmq0Jastes7O1iJtDXpn3ETODrT1e7EeQwWaA

YfSkwcKixHT

X-Spam-Flag: NO

UI-OutboundReport: notjunk:1;M01:P0:f6/ZhzMSmm8=;nBgyQXbDLCLUF3Eb6TLQoJRhNUJ

+YSqlcaUuj7mBpLSwMeiiFRG/wUBFgGjkPKKCso6osjwD+FyoAf414G+tKYSLDpbmmaFiNqg3

5jpYTv1tJRyBUFKj/b7SuqMMdzrSFyxmcUdR5imcCuhhsekvOFhZ2/Wl4vFVc79IvNCmhj9Q2

ZEcgwtkDwSo4oBe4wcOcoyiH5W+E2tmIWezQJItaGgIO3KjrBhmcF/gMhkgoCUxlOXBWk8EBj

0xKWx8hb+eZRaQvWKKzLy9rlC4XBFyl+uopuVc9l6DZsjfMa7cxCGQNLJqjw5Wtqho/FvG4oX

e+WXknElBnfsEDlnSUBLba3Ph3ZZ7ZJGWyLkcnZsMxa7WD5yfkkhIbGIR/nBN4utCzX07vkhH

aI6bDoVCxI+1E8qnrOu2FZfjcx6fEkX5hzSB6tSpYYo2TUWPnNljzDWcJ+io6KJqNGIC/b0RR

iCUZVYH0PhIfwMqMzP5zDeww+SfMvTgyrDsHicLeucvmoN1idtzifHFtwA1K8IT4TIhDOKNso

RCpvok7XrsXwk5ZY6AeF+XkadiFPDO9m+r098rrP06W6u1wxJz9pefbGqf/ltqgP/jeSsSpud

G/+tDOUiX5/KPhzh8yrvTruTy0VnfGddgO7mOgftRVFUzLJQrCVmFXUAYBEZcDgRWJoWN0Wt0

yC1OoWgsu5h5I09XnAPlNxoLmKZYpxW+Y2iBYkGzP8LxPyADp4O2AlF/ByE9ZpLG+dTSI3FQ9

tE0f2dr7q9kk3uoaoPxQX/p0M6EG4sOMQaPE9b9qIWWIbzYf6FoDefmM2JD09aUAuJZKdcPmr

5pHUA3gbAIJqCXtPaGZWf8GgRBd7kRzZvAEVg7S9tsuU9zoBZf0wwEinnJC1F1KFhMKau5bva

98Llj/wzR5712MXuWkpuj82Lecsp4ygidyrqpbCsIMRz7CkTG6LdAPID/IL0aAnCPbTAuLvP/

iXO1ERBgIwO2ZB/LCVxBbhYqEQV0/vvO1+5RYGJLMw9nVfPAG0T/g+zC0I7eH42QS/vpgWxb7

bxUDL0/2ZQehwQaFz+QgkUPXOOvBB1AY5fTvvi+xOcLGl8axq2oUm6h007sZIt8R0+U8LC4hB

qOx/WA81Kwf1QqQlVQme0frrtp4BshZTZEPiN5hfGR8JAMJz55N3Q63aYkYLSy40CaMgQ94g6

yACrgUvwxMOC5HZmp5SXAdprGjG+n0Cp97TQ0W+0Sxu8mHEQ+2UYiB25CDqGZoHNR72PiAh/u

kPgTySzkADY7wYi35bs/kQ/qk5swJ1/VJ7/DBh3pFq/TwxdMojkAUyPC/VOJUrlUAopRXuUlx

HbBF/R6hjZWYmCxRsCAQN2JW7/pR7ICGhKRd7cVi3CPXqm8ZRTmy5sYM/ktrNDtxTYE22a12N

RhQ6VY8j2AmSI+Rgn6qLR+R5qsOnOHO57a1vmQKobGrPdTpBUdtWENnFFBoSMuesBxAAIzP9n

v/GPILv7KE9IJ22oxD/o0SPuLqKhMAIeO+NkDTR2ItqhrDSmg4FQ6U32yK8OgnNgIpXwvda9x

mvpjL9gI8vrQMj8s8mXKD3vvm6VygFgyQ0mGpZgfSMEvjWP4XvDGjY8Y3EW8qTLbZxiTrDgDl

Z2AlG5fFQB2iUuaZKn+fXvx/YXUlvF3D9ShcjQvj/m8zYLU3W/kzJRRCw8e2q0o53LIKiTNiH

7YkZW6QU3xG1lj0mDPkOEeEG/CBuWAja8fvS2nvmRwEUO41xMHRpq+DQE1iFk49Hl67i7lSnQ

udc/jHldgHQSOYOPxsCc9tObItGTkhBUWnDIONP3iE34ukdD3E4IQxIyGdmBY3a/sNtKNVwSf

d0bgqRhjd/GcqfOfCyUP8698DR9e7EtlOEwX9EElZPCCLt1oIxbguBvTcIxrcBdXZOKOghkDU

HU4REqqJMXShZmr5Q3IMsQOkNNBh6+0J6sy/riHOG284kMDvvMr37pdRJ44hVUakspTC7+uLd

BUiumm5W8vn40CpQf1O/rP8NqmRJwPy9hFoi5Ukc9PVLfbWS+HVM9qe9593YnvszsaHEfzUK+

C6Fvt/peNyVyUcWSv0BKAkcVBiXckI8wRqBkuN/OZJQcCqu6JeJNxXlBNu7IKZpGNYi+4NGFb

9kU8TGLEcEytcEF8SswOOtPgHvo6ExjNDcZ+SSrAL5ihGSNrXlVBZltiA7d0BYYLosJLp0z+t

EupN/phsKpeLYIRYVlGBU+j2CTjsCOoVLvJDq/lUwSeqoM5gYMIj2HYFJssvr/lUGVFPx1OUe

pfEv9+n8bUt0EAcCMPh972ORWiRoLM1AsZUynLGuyEJYquzYVXGQTkBAM0LbajLWJn4441pFN

1FUGgjCCofTHeRv8UNZnlXSitm/j7f0o77wXavx7I3OTsmBIojq7DIpOxEEuooXxmlZerb7St

Yo2sn33CYZlx2rr73S5TVP/cjs5KILtzY2a65ZwqV4uRg4+RFooWuxJlFIoENF+CNT6YiC3lG

rpLMs5wSCJetzvxbODmX0fbNlbWN57CKsXPH+bZbiJ2shmgrUk5gv56RRKPF2aINrZXluYSSp

KjXYPKIK8b3OxiNBRPTZ3PQDz0YDAGu/MtDooOruOmvtOnC1N611yenWBH+S3eUAHbrZOLX5g

ZgBy/ddkfKXGW4Q8ukZspWvj3hN41Zru8p7kunvRM1gDMHAYtPXC40z6Dca4VQGl2ADF6bVtm

tHkYcCBybNI4o6+JAjnkxYEYcIZskp5FjjlZoKiXzGa7NECcLSnFhaGKQUJbUVP3t465GRHOx

gW67vkBMVeCcXZCOI/GPxbeayT4EcMwa4mU4T21nSNHT6QuefL4I4KM1ogZ7ENVH8HAVPDuy0

1MaZoxL3jjA8ilgBFj/zO1MwOTzkPnRN/d+wHiqXdpVBIXlVFU/zsbKhkJ/OFTgdwYMKIA1N5

qPEZIB5uIEc4k6oXQTRi9HNdIEy+NGWAPBmjyDiM1lH6o4epdywg+o7sRFnTk2AVqv62Ch4pO

cc+ZSsWvhsAm21rIcCssSxU2rRmg5h+7UhTjLI5rfMGA0seWkk6g0Zh/dWi9SsZRTDaNk6NnQ

L+gDBuxsxVE+Uc0H7hMLa07vO9Zex+/biOOPcwDygFQH0t/CvTZxRqufzQvs+w1IZbNP7AQrF

qRbLOIS0opTSrmKdDwwVODnvJndNNm8y3I62Vq0KX/ufYkDzgoBYr55lfGTJPzWAz3IMLiu7h

f+GWouNTFn1ekm6s7+sw0HqMu7IpPaUEg1JyKD5mr9NMAKMyokPSxkrCfybKVqVFt+uexAhR3

EqxifZYzwoZW+sQbtLOPdQjonKYs+bdNDPCZQ4ixwaMholzkjxnGb0YDeTdr5YcHCcKh8/ELg

+mjZw/NdSbuT6k+HTLZLIzHIBnRvS/hGjO14Iy5OweHEHILZ5mhIqL9LUOilpmkrJ6gH0IqEC

OeQarEsEu18n6bw/cUyxVPFRXICZrpvyGW6rpLGqyMx8wjD5AtNaSD+rz2umz+hp5fqqiBnFH

0h1P7PXlgWf7/Zh5kUPc9AQdf+eKdhl6jst+nv1eGEMPfoxS+SM/rAEmHsBY5z5bY+h4YkCjM

JCQwiBXPr5Z59aypdB74bJdJ3uSgfCaRUNaP7yqs2WapO+e9HEF2K5//yykFTUE2xDfyz+wje

A+XRMG3T+R8LGRxGLTYIgJKzqC+uIpsLsDjx9y9YeRMVfaw8owBRqHsI8ouiFXorG8sR057tJ

4NrIVI3rdS9edMLFOd+PUPSPXsFLGUATX+Qc3nKXk3yxbz6H0krDiTISCvEqie+mUGU/unIlt

zFbWZhd00ruMPcjfqlj465PHk9K7YRA8PxyBoSH9SDDXwckZ1Aa208lFyFz1ywDrmDmcrTi+c

X2CzHimgphUBou81lytp0OaLkzbMVdVfHrmCBU1PMHJeeqpHOXwaeSfSHPmijJYIv0e3A/MpP

KpkApolWQUDhnwEMJPUXACse96zuHUchrqhrGq0XFD9Z16RHVVEMdxl0KlNYeaIlBMx36bfTZ

MYsT+2kOghZ7LYyNPI8rNwQNDHzajaqTORRR2KsI+BFmlT+6FkLt2nOBP5RlKHuahW33vC91E

wx9Vi3IJIci6l9rawlMFJcMgF6rhJW+iIg5ILa+nWmb/kUPHOocZbY2gK4hBQ+fct1hSu3mWo

wOINFkMxEwnSpDkXwoFHgURMVJ6D2kBWB73q07B6vMnyfVfOYFR9c2Fi2mVpxzfV5eXzLKlLg

o6HaDzJHgYMA6wmmw0OONFXcaq2Y5FCuPpkwbL9FpKUjDjH5jl/Uk/iirGPNLmrPyvyL69j9W

uzysXN17XO9EaMqxIpsfb01NlGwVpbGdiLGBdYyagmIKD2qpJHZcMQkEbjtZ1RWloUcD2QZ+e

YVavytj8zZDSL627+m3GXx3gLAOJrRCkC5/78JzawhhfK5vfBEyYBIE5gqJzgKpyyctqbPbN5

WYcFz0hKRz6WusMor4Z3zDW6bHLfN5PF8683+M5gg7DYNvpZIIJR48n/oc7SXNlC+t1kkE4UH

tWIdW3IPOQOj5PsRhf+7oOQCuOC6QrIKfaAffnBkMNvk4KosCBGd/CvK8PsrhyX3LI5YMOs1p

p5klHbJnHO9kNvaNzuShKmLWos35hzb2r7IOQCbRFmGYtUBOfLnh+SfAz7yANh9gxp4/k+4Hb

PmOl84omw4OFvABUu4J0AuULEP/G0N98TkF5lsjA56v9KDmu0C/VzKSxhTXvIDOohzTP66gjt

rdFxcQfq10QRZAqVoAJapblbrj29W9AT6GxmxPggfJjj/JbaqTfPaoXRKmRR/Yyuv0LJPHWHI

61vw2+Rr8N1VV5OH4VISNZ511rE0lmi5v9A2vc18yIQUH/QUGq5ucyYDBUCStYsMQJbclP/X+

0rBXtD9WAk1UO/1GX8lmdeTrPANkbVRAmYk/30rOtrluduqpWQyUj1/+jkPkT29wjYTQrHAre

wSWSLN8V6xOKgHaLQ4pokKuoTQ0nsG1o+zN8Wtf5FCRmGb3KYEAigrGapGzW2mLoVjYkuWjJ/

VQ5tKUnJjj6Uoiqr9S7+hNB2BromHMC6fg0zFbzmoUx6IMs3dpZ41rHGl/CtexrpLEOPBlhRw

8WdrzhUeJrt65Ppo4TN0Bvejs3svseSOKCASt0DzQ1jBa8tYmYjUUrD8wxZEF+zKSUsw+dCfN

1UMrV+eiV+Zr90lnyUGUIgb5kBT4LS+yLRozkImeEe7uRvsgoRC97UF7Hoz56NRQw9L7rtr8/

EF2A2lc9Su1lfzR88iMVoV1g76y9B2Yz2tJ5DExK8F46oYd+irGM9zTjkkebAsbVNmyG8o+y8

w94tGCknXxUviT9wc9Tsy2H3f4hKcdBTRkQXRELIK8J0m1DRE/pNUVUP4T5YRqS4QRsr+UFCM

dJiUJc6KqIcPZ29ofV7V8F/ImFNfFZGNzeEvdUMve+jnMFt5wihGLvCmh8OkERDSN7xpV5kHw

yk74HJSfR6A+DcyyPqtonvo8Dd7DIjFPHQajwb8luegvauym/tjQ0L09RgshifirLvL4d53n3

OLJFL2Vap37Fo5yyyMmVW0GJr2S4HnO4khpsV+Dcif7s6Xt6AEAMpFP9CK5ZOHAwAf/Q7Oyi3

dkyra8Zw6c0b4/hWVwB33MtAXDjicEJJDtuCKovBe/AbDZIgHQyUmBXnCJPcX/8xpSM1IQ==

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PLEASE THE SUTTON PLACE HOTELS CANADA, are recruiting new

workers Opportunities are available We’ll offer You Air Ticket,Accommodation,

Medication, Feeding and other relevant services as attractive [...]



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

[74.208.4.200 listed in dnsbl.ahbl.org]

[74.208.4.200 listed in dnsbl.ahbl.org]

[74.208.4.200 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[74.208.4.200 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[suttonplacehotels(at)worker.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.208.4.200 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.208.4.200 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} JOB @ CANADA HOTEL CANADA 2026/2027




#000000;">
ound-color: #ffffff;">
fffff;">
;">
pan style=3D"white-space: normal;">
tyle=3D"float: none;">PLEASE THE SUTTON PLACE HOTELS CANADA, are recruiting=

new workers Opportunities are available We=E2=80=99ll offer You Air Ticket=

,Accommodation, Medication, Feeding and other relevant services as attracti=

ve salary awaits you=2E QUALIFICATIONS, (a) MEN, WOMEN, FRENCH, SPANISH, AR=

ABIC AND ENGLISH SPEAKERS=2E (b) SECONDARY CERTIFICATE TO PhD HOLDERS=2E (c=

) AGE IS FROM 17 yrs TO Unlimited age provided you can render the needed se=

rvice=2E=2E =



style: normal; font-weight: 400; white-space: normal;"> 

color: #000000; font-family: Verdana; font-size: large; font-style: normal;=

font-weight: 400; white-space: normal;">
ffffff;">
style=3D"color: #000000;">
e=3D"font-style: normal;">
white-space: normal;">
: none;">Send your resume CV to this email address for more information wil=

l be send to you,, =



; font-style: normal; font-weight: 400; white-space: normal;"> 

yle=3D"color: #000000; font-family: Verdana; font-size: large; font-style: =

normal; font-weight: 400; white-space: normal;">
ff; background-color: #ffffff;">
ize: large; font-style: normal; font-weight: 400; white-space: normal; back=

ground-color: #ffffff;">
lto:suttonplacehotel@worker=2Ecom" target=3D"_blank" rel=3D"noopener norefe=

rrer" data-href=3D"mailto:suttonplacehotel@worker=2Ecom">suttonplacehotel@w=

orker=2Ecom