web/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MzP-000000001aH-0fZX

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:26:23 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:26:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f199.google.com ([209.85.208.199]:61603)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MvU-00000000HeR-47gU

for root@nk.ca;

Wed, 23 Sep 2026 07:22:31 -0600

Received: by mail-lj1-f199.google.com with SMTP id 38308e7fff4ca-3a49cdd876dsf4414211fa.2

for ; Wed, 23 Sep 2026 06:21:33 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1790169685; cv=pass;

d=google.com; s=arc-20260327;

b=PYvbHzIRcxRmS0SW1JHXMsNsAYES6sxEEV0A/ryZMTo7pORynr7/VCHhmNaZuXA2Zw

ICKog5cdHSKdlgUavctSzz/MgfAporFsqLg3uLkJHxWqavHCTGswwFsqRFQjv3XkwK+D

znS7lFAzSSHuDIrkExQyoP8wgN+UP1UznAJdBQXZ7aZL4sctsUgJJ3JJUhgUK1MVQPXU

ZbE4S4F/bPGz+nPZIJz0ZPXM3iqVpF/maKl/ImHAZKXtgijjrWTOJTAioJeL/Rfj7Ftg

y/bhnGBxACyo4iIeNdTiT9h1oPRMdMwVGIoC0FiMqGN+VsHiqgM1DgXEh/6P4VgCFN/6

0BSw==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=OuQ1JJ6W66uHxtbHFwbVTzLfY5mSqP/AqqbEHTmGrfg=;

fh=JlLjHqGO0oYJwedmXqEorO9iRAaGvDKnIw9HH3QC9v4=;

b=EdjIDsQWkIUJDXm5TMCEFwHeB4zOOo83OJ5tndhFWvtmKEKk+E/khKPA4zNM/Rt+e2

tCkGrAwiRS0VQXGtIPoDBT1Jjfxf0JeOrmYZ4Eq41L1vFr/Gacg2BW1tK/UimzM8yqAV

Pm6koQ/GpbGHKj4bhZ+72hk0j5wODYUAxnlnfZviRj+fQskpPKJuXvRNdsVZcmBN0XUT

959z44WZSEty2DFzXLBF0tExM/uKsIFYEX2sHn5sBdWogPa4r+XNuAyMD2u878/wCBI5

b1EnAL5ZEV9UEP3BuO4/CK/rIEj+rynnHBAC13QGmYiUWIVTrHPW2LjQCpuynMM1oUhb

DCFg==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b="ctReZu/S";

arc=pass (i=1);

spf=pass (google.com: domain of mathildakelsallwte@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=mathildakelsallwte@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=digitalappsdev-com.20251104.gappssmtp.com; s=20251104; t=1790169685; x=1790774485; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=OuQ1JJ6W66uHxtbHFwbVTzLfY5mSqP/AqqbEHTmGrfg=;

b=h/2mhSyFwdLEPPiucs3pgdFFCUFKQlZEpQDkYkHQdTJjg6U5uIFCWnD4fzUfNlAzDW

J4BZKvj3UGbU0amcXFYdDrxRMnxQqUKeLAQYFa2LlX4aU36bwxx7/cByPdVmwaqM1ASm

oyyks12spmCOu1wq7Fha29tF4KFmuFiR+astKnKokd129BEM675afGyIVYOWVmEukJlG

BQgysDV5tom4OWAoo7CC8Ot2Ke0cX97HUzA0s2H4//26tuGUm3XknwZn9jJTD1aSAheU

apCBeDlYHeD4hCw6BK+luA8OhAuJwD/DyOJPcnKbbhOrpkGZvVmB6zxXczMMgyrBtfZz

j/dQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790169685; x=1790774485;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=OuQ1JJ6W66uHxtbHFwbVTzLfY5mSqP/AqqbEHTmGrfg=;

b=pe0PrHCneAUwashekNKCgnRcIsbiUbm595ZsbAY4Guhi938+7nDNK82WjFcG1ZiLTx

RhzGPW3w5xLphdPwXmboQCnrOH0NMZe5XuPDTTmTFlkDTbNxWhTNvkvmEiEQCz8eW9bG

98ErudJYp4JaA1Vf2mjcBAOS9AFmT2YvpJiPkZ+ngfGlhC5Xil7JIoyFwhFcLhML8365

HUQMj8fPFJLkcMTew+prvZLokRBvRrVaK8hiOW8y/YQPJPOPAXo+aVr7p4hlBMuLlgDQ

lsVI4XBMTEtaMyMc1a2sn0Fr1fe6G5y3iFcIomet52WudiD+k9UfMkiLqMZWm5EMO/pN

Lr+w==

X-Forwarded-Encrypted: i=3; AKwUvBxSxzwkW49aEHOzgq7Yd9dg9UGRJ1K5hWd9zNdpXpPqzn7NxRENdbFKI3oEZ5OKoobzuAKU@nk.ca

X-Gm-Message-State: AFuF++mTQJ1g6zG5lLbW3Cmd3aWo2oAwHDsTskbxzmQ0PBceXRvWYE86

WhM7VftKBoAAv6HaeBJejpUZc19XaWig6V9ClM8j8oJakw5WVqAPgd5eUQ/n69TGDSU=

X-Received: by 2002:a2e:a7c1:0:b0:3a6:1694:8239 with SMTP id 38308e7fff4ca-3a6305cc6b2mr6050651fa.10.1790169685455;

Wed, 23 Sep 2026 06:21:25 -0700 (PDT)

X-BeenThere: mathildakelsallwte@digitalappsdev.com; h="ATskLddK45oAGYr5K//51fWJPcBMbuT8D5Vuf2vaGsfIg1RQcA=="

Received: by 2002:a2e:8845:0:b0:3a6:2fe8:de25 with SMTP id 38308e7fff4ca-3a62fe8deebls3765521fa.1.-pod-prod-09-eu;

Wed, 23 Sep 2026 06:20:45 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AKwUvBwjU77XXgLVjA8GgutVLAEGOcef9Fmv3EtPnP2ref47gcH9PanEHG6CZTIiq+UxneAMe+RL8KyUnDck4Zc21RLSWXc=@digitalappsdev.com

X-Received: by 2002:a05:651c:510:b0:3a6:2f34:c85a with SMTP id 38308e7fff4ca-3a630658c20mr6132041fa.26.1790169644931;

Wed, 23 Sep 2026 06:20:44 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1790169644; cv=pass;

d=google.com; s=arc-20260327;

b=lSTMXnQFEUqakbOiF7GDS+pgADs/lacRK8fl5eciTvZ5j+Pl++x0TbjVEIkNj/EozQ

LuqNGMvGqkY1CkS1OHVf5tV4PODcwI2JXRWQF4qs3glLD8CGP1c0my6/HnRMI1M42zIW

uXRuKfL4m4cafjZCtBcJDDSfLy9Hw//q6v+HktuYS+G9GyZBW3vO76dg9no2jkwgSSza

FNMSPrNrILgswMafbdrPqmxXsv75M8+IyYE9FuDp/npslA3PvpLMB6XBPn5KgN9LRWcN

NNqTCzWRGRbxZe7EnvNg/HQUEIT0tJcOeR0hhiBPXZBwHMYNtiTFNB42dGZTvaSJ/nJo

ru1g==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=cazjeLcXC56ieBFP3MWZxMAbj96yGSbsaNbJ3b6+O1o=;

fh=U/NrImOUIDca7IYvC89KLLvJSXkvEWArlfWKVXVSirQ=;

b=OxYgI6SlN6NJsBpwejlsVGAndcMrGc41dIcyv7vQ95TimqoD0CZbQTIcHGq8tuQif0

sAMEF/ovXoSAPEtAkh0+X9SyCQIh55w9BhMZwLGDYtg3qz68qMhmeBPmyhXVEizLIX6l

lqYUZN7/dPziOJf9Y6Z2vobJ6F2P2l1SefLrn5T9EokzhcpfPJ261RKo/0/EsFxOn2Je

v+krq6WoKoI52Rsjy3TmoTwqwSfsFi3wG7oLn02k3+RQndWlOWtZwDyQyZIc/UHghJUK

XnWUc/wHnFsecFvVCulK7m1pZKEirmMOznTMne0EQ9n+mXcdU7AguTK2FestFQn127C/

ydMg==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b="ctReZu/S";

arc=pass (i=1);

spf=pass (google.com: domain of mathildakelsallwte@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=mathildakelsallwte@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 38308e7fff4ca-3a62f50df5asor3519041fa.9.2026.09.23.06.20.44

for

(Google Transport Security);

Wed, 23 Sep 2026 06:20:44 -0700 (PDT)

Received-SPF: pass (google.com: domain of mathildakelsallwte@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1790169644; cv=none;

d=google.com; s=arc-20260327;

b=VTAozx9tsc87N+wYIKwBdyu97FolgkFHEUli6u12hdcBqXlkjJRjyHfEkXWObXRRxg

A3BpgMJcHZhw/Hxpa7LdzkoZJZPJBByGIffaW2G4zhlkP36jRucMyXuzbNF9FmaUH9fV

vzyVxbfUyHhuAwkj2+fiExqmbFO0q8RphTNzE3sKaTpnvnUHIbhpkX7ThJWgPGI5CUxV

HQ7r/F9tBuFfzLpXO77IGn23KJYplIKSFXRKFvQoYiWFC6vegFRoeJHVBKdh0DV8rq6B

j/CNMCxydibZKNatb24JPkZdbinD6O2Sc4vCi5kwSw1K2JA8mTMpKdGAW+LfoiRzT/+L

gSlQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=cazjeLcXC56ieBFP3MWZxMAbj96yGSbsaNbJ3b6+O1o=;

fh=U/NrImOUIDca7IYvC89KLLvJSXkvEWArlfWKVXVSirQ=;

b=QgswDAk9W8Hwq20abzPXOzyxPXpByVOgXuaT3t7WcyDGjHAnxDbcT0djvDUSMns5I8

k+/eWP5jZ7kyIfJluztg6AvGVj8468YRh5iENLBUZskrmvWYruodqFE0gg0vhTSTqwsU

FdZALe87xdoK/LxrbuHFYAaBgdJWw+qeZ7NQT93UIp5HZs49z+SNv4ayCh/bLgoT7DwD

LbRkedzGT9opxv32zyPcd55APy4f8eckIBytuGq/9UqJAjP8EeKS6SMqFi8YiRW70KTE

Ee0I+vBrcotiHkdRs8JQYsirYM0riaUHDNFK2Li6Rs/jxLmoP5k9JdblMooW9MWjpcfZ

iU4g==;

darn=digitalappsdev.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Forwarded-Encrypted: i=1; AKwUvBzEsRuz4NadIIpdqBW03IVD7Il/9PH5nufw2+F/CKpV/pnepezYCM+4GjyqjIKfrd6TL7Pu3lpD+ie9/9gom6he6o0=@digitalappsdev.com

X-Gm-Gg: AYBFou2b00+qQ2nFWHjX60u9a3T+aQBYDVpc67Xf6rtKxlEULpJBxLFzL0/8TW06FtS

SA03PVA5pWeout2CCEokVOYCTr+yaFfZ2AL8EDfjtgVbtvvqbfuGD8gz9kJMy1zwd6cRFtqHqeo

82DZo2z2gMKSdRDwkuqDI5HW67XkwQPA/B+ucpE1BW+83pVCzEJ6FOh0jr2ImFsof6+8oZmq+ia

p+ibxi3w7HBGBcLuvLphnADg6HnMsrVK2VcmT3vXRIFyTWtYbWBBMQSXt7t8a2sjr8JboJSC01J

PAEz9qEofeXYT2o74OGYALpqZbzAVJe563/Wa19Wt7nF50py6/4yT7FuJy755Dn8nlt5T1OVlPC

lOmUYOXNmSHy6ow==

X-Received: by 2002:a2e:b8d2:0:b0:3a5:86d:cc95 with SMTP id

38308e7fff4ca-3a6305b8040mr5756561fa.3.1790169644088; Wed, 23 Sep 2026

06:20:44 -0700 (PDT)

MIME-Version: 1.0

From: Mathilda Kelsall

Date: Wed, 23 Sep 2026 18:50:32 +0530

X-Gm-Features: AclHuK-zrfg73Y62ldeukMBy9NnZnEon39ZmkX6fZgXr-fQW5wDUut7t42xXLUc

Message-ID:

Subject: # Healthcare & Real Estate // Travel Mobile App's?!`~

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b94188065c2659a4"

Bcc: mathildakelsallwte@digitalappsdev.com

X-Original-Sender: mathildakelsallwte@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20251104 header.b="ctReZu/S"; arc=pass

(i=1); spf=pass (google.com: domain of mathildakelsallwte@gmail.com

designates 209.85.220.41 as permitted sender) smtp.mailfrom=mathildakelsallwte@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

Precedence: list

Mailing-list: list mathildakelsallwte@digitalappsdev.com; contact mathildakelsallwte+owners@digitalappsdev.com

List-ID:

X-Spam-Checked-In-Group: mathildakelsallwte@digitalappsdev.com

X-Google-Group-Id: 303645018465

List-Post: ,



List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,





--000000000000b94188065c2659a4

Content-Type: text/plain; charset="UTF-8"



Hello,



Greetings!



Are you looking for a mobile application tailored to your business

requirements?



We build custom iOS and Android solutions for different business models,

including e-commerce, healthcare, booking & scheduling, delivery,

logistics, staff management, cleaning, real estate, education, finance,

travel, and more.



Let me know what type of app you're considering and what you would like it

to do. I can provide relevant working demos and examples for reference.



Thank you!

Mathilda Kelsall



To unsubscribe from this group and stop receiving emails from it, send an email to mathildakelsallwte+unsubscribe@digitalappsdev.com.



--000000000000b94188065c2659a4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

Greetings=

!

Are you looking for a mobile application tailored to your business=

requirements?

We build custom iOS and Android solutions for differe=

nt business models, including e-commerce, healthcare, booking & schedul=

ing, delivery, logistics, staff management, cleaning, real estate, educatio=

n, finance, travel, and more.

Let me know what type of app you'r=

e considering and what you would like it to do. I can provide relevant work=

ing demos and examples for reference.

Thank you!

ce=3D"verdana, sans-serif">Mathilda Kelsall








To unsubscribe from this group and stop receiving emails from it, send an e=

mail to
">mathildakelsallwte+unsubscribe@digitalappsdev.com
.




--000000000000b94188065c2659a4--

WEb/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:28:30 -0600

Received: from mail-qk1-f197.google.com ([209.85.222.197]:44212)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9N12-0000000047C-22z3

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:28:13 -0600

Received: by mail-qk1-f197.google.com with SMTP id af79cd13be357-936708f129aso154383985a.0

for ; Wed, 23 Sep 2026 06:27:17 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1790170031; x=1790774831; darn=doctor.nl2k.ab.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=3+jMkOLE1BULVkGoSMO1apCaF9U1opk+sXZTqy7Bwic=;

b=QPD6iiuRzfLIK0FYAEGT40kHpIrDTYSciUutVQaQAN69u3KhxrOZXgxwj1++H4Pc9z

hkGcIZtJG45Dp7B6FnFfmXO4PnF7ZpbPnFv00LcmIg+SKzeptLheihuSKZrVsIxvtyTF

2EDqu7oFO0TzDgxaSvXayZH9tmSJZ9IbDu/FBmSlrOKVkRXGyn07kv+lMQU37n8tgiCI

NSPSWKGhf5prhebn0POZFV41lWC5hU4zE5JWEpyu1hbkPmiJT/Vq6J5gXfVtSlTfcg5W

fl90dpEltsM4npcob2P8ngZ+tNYjH8d6lWweQrscfflUdN2gvcRF+Z4WGYloCPc0Pn+A

z5Qg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790170031; x=1790774831;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=3+jMkOLE1BULVkGoSMO1apCaF9U1opk+sXZTqy7Bwic=;

b=c1K35oOAS96a5c83Wnva9cLCo/7OTRbWY0nwKpdHXuNk0nb1Ih/3MLCAqgtxUiM2bI

KflVk6Lz2kkCeQtZ56rrTqKPiT7N+IT0H91dkt/pYTOtB0oWQtlLYLgFPBXDpf9ULDUV

VAFJ+wY9dVpZCJW+P+E2+hIrbLhf9afPQIoc//J8e0VCz8uDTRoGu6vb5ys7QVTDVint

MDxzEhExBrm+KDc4F5rGzg1Cwz0lJFNgyiK8V33IMpgYx3KXISaKZ3SR+REj6uF2zMgU

0MzDNokkhI/NiU+Q65FX0k4xd8RoK3FfaLT0AOfWf1q3jfErsPfPGgWFuSiQIM4P4rUx

etUA==

X-Gm-Message-State: AFuF++kqHTdTLq9MLvqxBdKQfsXh0ev0J6H/eyaownBKV5DIuHHjdyvy

hDi1P9KDZhtBEx0TVDJLURgWWex3kCzHTwIWzNnmSMUBVl29nSKkHIVIx7tuph0BoPROcXFnVLH

yI9WOZg==

MIME-Version: 1.0

X-Received: by 2002:a05:690e:262c:b0:66d:fa2:63d0 with SMTP id

956f58d0204a3-672d58c28afmr1012620d50.50.1790169536572; Wed, 23 Sep 2026

06:18:56 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 13:18:56 +0000

Subject: inquiry 9/23/2026

From: dukeanderson12334@gmail.com

To: dave@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="00000000000050b394065c265363"



--00000000000050b394065c265363

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hello,

Have a great day dear,





I was going through your website, and I personally see a lot of potential

in your website and business.



I would like to send you a Proposal of your business website!



May I send you a inquiry?



Thank you!



--00000000000050b394065c265363

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,
Have a great day dear,


I was going through your websit=

e, and I personally see a lot of potential in your website and business.
>
I would like to send you a Proposal of your business website!

M=

ay I send you a inquiry?

Thank you!

--00000000000050b394065c265363--

Who's Who spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 08:58:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9OQQ-00000000LME-3gXc

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 08:58:22 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 08:58:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:58712)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9OMF-00000000Kmv-3WJG

for sales@nk.ca;

Wed, 23 Sep 2026 08:54:11 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-8848dc67d24so17906797b3.1

for ; Wed, 23 Sep 2026 07:53:16 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wcbrb.com; s=google; t=1790175189; x=1790779989; darn=nk.ca;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=+IQRRRfnY79fXmLWjF+Dlt8nkZ/xWHf7HYT0cZvgCZA=;

b=FQbztRxc07EMwjRlFHn/Eu6pl2TYQokHSr9l+ZxJ7MZBR1Y4KxH1KCv/2ENijitgUQ

z0tKXn0bHMPzRQSJp4RpErSsLYlUoc56aoZ4BsiZlro6xETBLPyRmrO5NAG5imJ1Awmp

254V4kIf9fjzy9SoDS4soUtXQMD7ay4Y8Zda07xFsU/Hlq6N3V6LGrFROtT3Wa7lq2+d

WohYntskgwLs6/Euw0dwKIQphkoll88uimZ7msQOeL4SizYR62dRKST7Uf5QKejq79vz

tf33/ECDlSsxWnp+Ajw4CANvFPnLgj9WsJQ0nParhtTxQHH+NX3UE6CggxHZw6W4rEpE

qSOA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790175189; x=1790779989;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=+IQRRRfnY79fXmLWjF+Dlt8nkZ/xWHf7HYT0cZvgCZA=;

b=aZbLETCgc5r0Ji+b4YhChKl3lPDA3dvTioDAjY50VlSk3Zcn8tC9rD4/KcQkbiXLJM

oKuvAQlR05GFEqbn+ANk+s9OI84wdpXskJFmZJV6OyOy8WkIWXyWE/zxC8kUvSZ3C8Ik

DoSVR7Q3wTSoqURDJRzWMZC3/4egbao0Xjvs5wXHFf/N4HvLQEb5wbl1pQqTbnVDQr6e

aFT4LuO1upg6H8zV/XZi5kS9iE6rpkJMELWyfqBCoh/O2wXIuNc0/7VRsd1fHUYE2WyQ

9DA+evI7L0KFURDiOPEChvrfvUn4iUYCCrqEyxrLFsUv0HA4GDCJQC3QMv4TBw4vOW5u

YYXg==

X-Gm-Message-State: AFuF++kBPCoQy43o4yvpVhn/7+nEgVzBdVbf52RSn7jRhOyWQDDMjMrG

AEJ2UR/kpWzML4vCDuasA3Q6vVYEfifJdxArK1Q+ekixKghjuslQ07SUVAu8nwKrjPR7E0dkCxj

2GNYi/KZUgMM46ulpT3CGNA==

MIME-Version: 1.0

X-Received: by 2002:a05:690c:5689:b0:8a3:7828:58b3 with SMTP id

00721157ae682-8a457c7b784mr15398477b3.7.1790175189188; Wed, 23 Sep 2026

07:53:09 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 14:53:09 +0000

Subject: Netknow Internet Service selected for CBRB Best Businesses in Canada 2026

From: cbrbnationalboard@wcbrb.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Congratulations on being selected and approved for

the CBRB Best Businesses in Canada 2026. The CBRB Canadian Business Review

Board assesses and evaluates businesses across Canada and verifies only those

that meet the CBRB Canadian Business Review Standards.



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.197 listed in list.dnswl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: wcbrb.com]

[URI: thecbrb.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: wcbrb.com]

[URI: www.thecbrb.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.197 listed in bl.score.senderscore.com]

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Netknow Internet Service selected for CBRB Best Businesses in Canada 2026



Hello,



Congratulations on being selected and approved for the CBRB Best Businesses in Canada 2026.



The CBRB Canadian Business Review Board assesses and evaluates businesses across Canada and verifies only those that meet the CBRB Canadian Business Review Standards.



Representing the Best Businesses in Canada, the CBRB Canadian Business Review Board has determined that your business meets our review standards, and we look forward to recognizing your achievements and recommending your services.



Membership in the CBRB Best Businesses in Canada 2026 includes listing in our exclusive national directory, official recognition through the CBRB Best Businesses in Canada 2026 Verification Certificate and Custom Badge, as well as promotional content highlighting Netknow Internet Service commitment to upholding:



• Strong Vision

• Customer-Centric Approach

• Customer Satisfaction

• Business Leadership



CBRB verification is granted based on your business meeting our review standards. CBRB membership provides additional benefits, as outlined in the registration form.



The standard CBRB Best Businesses in Canada 2026 badge may be requested by emailing info@thecbrb.com; your custom verification badge, along with membership options are available through the registration form, with applicable administrative fees outlined within the form.



Following registration, you will receive:

• CBRB Best Businesses in Canada 2026 Verification Certificate

• CBRB Best Businesses in Canada 2026 Custom Verification Badge

• CBRB Best Businesses in Canada 2026 Directory Listing & Profile Page



CBRB Canadian Business Review Board may highlight verified businesses on official CBRB social media.



To accept your CBRB Best Businesses in Canada 2026 membership, please complete the following form:

https://forms.gle/JpvTnaRwSshttUum9



If you have any questions, feel free to contact us.



(For all future emails, please send your response to “Info@thecbrb.com”)



Nick Moore

CBRB Canadian Business Review Board

Membership Committee

Best Businesses in Canada

www.thecbrb.com

@thecbrb

@thecbrb_canada











If you would like to unsubscribe from future correspondence, please email your request to unsubscribe@thecbrb.com.

Nigerian spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MzE-0000000016x-1vdy

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:26:12 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:26:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk2-f5.google.com ([74.125.230.197]:51003)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Met-00000000Ch5-0uzH

for doctor@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:05:20 -0600

Received: by mail-qk2-f5.google.com with SMTP id af79cd13be357-9392f49a01eso68464685a.1

for ; Wed, 23 Sep 2026 06:04:22 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1790168656; cv=none;

d=google.com; s=arc-20260327;

b=lbYeWdtSWLXi6Ij8uQaqwQPgepZBM45HQESZ1ewnO/Vw/78KbyGfPEADgSdbf7DUzR

PxR/PPSxgATQj5ykx/YmwSz0awGvQPEgTCVI2VWE7lihuPDE18NoRx1OBj5wzHN/HBhc

2m2nut2pl8oPncHwcNBzZNT6W7dFcq+CQTqU/4UlnQ21iPU1kY6tWkCzos2DnMbW3SyS

7jaMZL5pjSY9ngIF2KGuE3OkS0sqsETTjSQKtrlpw65KoGI8eZOf0jqDmnZIv7Ar3dWt

7VaLuwKg6NqfGM3OH3I9HULLN/tfq3PI85VrYcqi23GxEEjwxdoT3h6uIxAJQNEnA/oI

Vm6Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=IstsN//BctbCkKcvYztiUiNwx219GKIBYtmNwuZJT7o=;

fh=moTYyexvaokVqm2gjCAbu/5f+P2QTXtdAsMbSQwhXes=;

b=lUcac/NL03qlJFId3QTBN/8xJnV1aRVGBEj9nRU4+6xMnVzS6GmarITZK/hqtdsVrw

51xh1iHqM/1OW3b0LhSwCvaSr5znVLV5GJJZOKRMzJ7uj/1Ci2KXJxhIvsiI1GDQMCw4

Ap4pO5B68NGbjlaf7D/Z53xekgw6AyDN3syJhfqDddEtnODst7mnm+8f+Fpq6veNUS32

DArWj25YYUPWlcy8X1hmw/ceEnJeUb6QKn0WgQuKBUuifPtsWCxY1qT1/1bqUeoty9p9

LWJSzZCH6uEuTjqyhsbGG6Sc1cgrU0WFEbtPOadwO8v0Cn+7p8PRE/EAdf7ssN54PIkY

LLFg==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1790168656; x=1790773456; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=IstsN//BctbCkKcvYztiUiNwx219GKIBYtmNwuZJT7o=;

b=KFiucOBeMoOZ4ToIitCGN72RgC/C9z7NZo6AbJLRXcBM9wXgcP3j80e9ToQCjetvzk

Bw/gRl7Ui167kvz+vubd0/eqariSMeNDnDsI0OY1gAjNGnt1q7ZwAHQbimeuyaMi3pXU

7Csy3xyuiK+LqLzijXwgg41v/OfmoW4rW+Ah1EQ5Y+G3VOxjFBbQziU3/J6QuTKtUAO6

+97buv8Exb1xooARYGMXIMHyQnifOjfwb0y0VvlAL1yuWGmFA1849wtXyUq/sxxu9pIc

r8T32m/7ZUsHBYVLre8JyYqXHhXB4TbefXTsifAeR6kqLakcNh8XpAdjkNX5n7/m7C5Y

zdbw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790168656; x=1790773456;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=IstsN//BctbCkKcvYztiUiNwx219GKIBYtmNwuZJT7o=;

b=joloKC6OSTaE87sJFFNkuH9d35Qp73YAxDGQFd4hsyJIOIVD04HJAR3mdtX6XGgO95

qyx043SduJ16tH1abTwj5SArCs3moHqkP4kMbumHtmt9IzGI1ANlmovdptoaa/bfXkAU

F/RUo2gbLFSyZYE6+N3z9MwF/X5x12L8Hs0DPkF/F6mTjFHaq43r2FbxSQu+7c+qyWQ3

8VaOBpNuv6bEYstwyzAkPdVqfaVRvgDKU3DpP9thwey76PuJsI3EzPrR2yWd6cagakHz

pOlu7gRqCbi6QVJBUHTypijHySVrSzF2+RtgoKoMZL4zTWNyFdoR6Pqu5+EuqCAwygex

9erA==

X-Forwarded-Encrypted: i=1; AKwUvBwb5GfqM3QH/KFgeTYHulS4mbSpNAYm+U/7qqn+PGj6C0buLk63wPit+SPDS71DKafhyIyHVm8=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++lAJoGS8Wfh3Xfa05xObllKXk6yzJI6SdFb9Xi3q8KbMmS3LJSV

prfPWM2Q6Lsh5r2xDN7996vfwC3Rs1Esv3SE2mBXDir/RAJrsqFHtooiMFgAy5Rj9TC3oYu9nXi

/hRGn2E+EaMI8kD+QXGN2EOO6pvkLZMHoYcw627lT34zp0Mk=

X-Gm-Gg: AYBFou0nTuaJpyQVQ8DYcqNq+Laufv1z4LdrS9M5DP1nt4KwUbNY4k/caWEjiS0FS+/

YaaTVc/XTPtHHLObySPuDjqU49teAR3Vz0h/zmOfMYgtNbNn+5KfJ1uRCtCZsP32/VQOUmunqIp

8NbQfurjE25IcK7SteWITkTp+9huroTDFIpTR4AwTVU8io727yAfUnDBHTHV6XHUSBh7VeTc3h+

2Wn/SXUtBY/lSumsYRrIT1+9IBHCgzmJ5e/jJn9RLJ9WmutStzTxol7+IcZ8POaIziZ20MtKaJl

eTEi2ZqozgKC6RHijMYHVCWgPeSsDkyKywPCRtTWxTSehi66aVkGwS7VOoH4/ABMRAvFjinHlKG

NalDD0zxt2i1O/1A5WnQeWa/NExEprxOexG7nyXK1LVSbdA==

X-Received: by 2002:a05:690e:806:10b0:66f:c1bc:4087 with SMTP id

956f58d0204a3-672d58ab4f1mr818449d50.74.1790168165927; Wed, 23 Sep 2026

05:56:05 -0700 (PDT)

MIME-Version: 1.0

Reply-To: rnzt0777@gmail.com

From: "Ms. ROSELINE"

Date: Wed, 23 Sep 2026 13:55:37 +0100

X-Gm-Features: AcwNN1XAaDIRU7vmjBeuQ_gZQweXFWc-i_ZZOtz6PpIPVZJ71LigSkzBe12uc3I

Message-ID:

Subject: Re: Hello, my greetings to you.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009e4fe7065c260146"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Hello, *My name is Ms. Roseline Nzete, I am from Côte

d'Ivoire (Ivory Coast) in the West Africa region. I work with the UBA GROUP

BANK Abidjan Branch here in my country. Please, are you capable of handling

[...]



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

[74.125.230.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.230.197 listed in dnsbl.ahbl.org]

[74.125.230.197 listed in dnsbl.ahbl.org]

[74.125.230.197 listed in dnsbl.ahbl.org]

[74.125.230.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.230.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.230.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.230.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.230.197 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.230.197 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[roselinenzete016(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[roselinenzete016(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[rnzt0777(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.230.197 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.230.197 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Re: Hello, my greetings to you.



--0000000000009e4fe7065c260146

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



--=20

Hello,



My name is Ms. Roseline Nzete, I am from C=C3=B4te d'Ivoire (Ivory Coast) =

in

the West Africa region. I work with the UBA GROUP BANK Abidjan Branch here

in my country. Please, are you capable of handling a transaction

accomplished contract payment that was left in our bank ?. I assure you

that the transaction is completely 100% risk free that cannot affect you

and your family or any kind of business that you do.




If you have a minute of your time, I would like to discuss it with you for

your kind consideration to know how we can proceed without encountering any

form of trouble before or after the transaction. You can also contact me

back at your earliest convenience time for the discussion if you are ready,

willing and interested. Thank you and please stay safe.




Regards,



Ms. Roseline.



]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]



Ms. ROSELINE NZETE,

THE INTERNAL AUDITOR;

UBA GROUP BANK-CI.

ABIDJAN BRANCH.

WEST AFRICA REGION.

WHATSAPP NO; **+2250500541438

TEL NO; +2250507095005

EMAIL; **rnzt0777@gmail.com ** }}



--0000000000009e4fe7065c260146

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






"gmail_signature_prefix">--


ature" data-smartmail=3D"gmail_signature">

=3D"#0000ff" size=3D"4">Hello,

ff" size=3D"4">

"4">My name is Ms. Roseline Nzete, I am from C=C3=B4te d'Ivoire (Ivo=

ry Coast) in the West Africa region. I work with the UBA GROUP BANK Abidjan=

Branch here in my country. Please, are you capable of handling a transacti=

on accomplished contract payment that was left in our bank ?. I assure you =

that the transaction is completely 100% risk free that cannot affect you an=

d your family or any kind of business that you do.=C2=A0

iv>

lor=3D"#0000ff" size=3D"4">If you have a minute of your time, I would li=

ke to discuss it with you for your kind consideration to know how we can pr=

oceed without encountering any form of trouble before or after the transact=

ion. You can also contact me back at your earliest convenience time for the=

discussion if you are ready, willing and interested. Thank you and please =

stay safe.

<=

/b>
Regards,
nt>


iv>Ms. Roseline.

>

r=3D"#0000ff" size=3D"4">]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
b>


div>
Ms. ROSELINE NZETE,
t>
THE INTERNAL AUDITOR;
>
UBA GROUP BANK-CI.=

ABIDJAN BRANCH.=

WEST AFRICA REG=

ION.=C2=A0=C2=A0

>WHATSAPP NO;=C2=A0=C2=A0
+=

2250500541438=C2=A0

>TEL NO;=C2=A0 +2250507095005

f" size=3D"4">EMAIL;=C2=A0

f">rnzt0777@gmail.c=

om
=C2=A0}}
b>





--0000000000009e4fe7065c260146--

web control panel spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Mz7-000000000oL-3CsZ

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:26:05 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:26:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from gw.d.sender-sib.com ([77.32.148.23]:31212)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MEu-000000009wT-2yUm

for sales@nk.ca;

Wed, 23 Sep 2026 06:38:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=steadfasttools.com;

q=dns/txt; s=brevo2; bh=LR+xiv1t3kJrVoaxicPTz6fXGrd7MAPAcxE3aZ8CMQw=;

h=from:reply-to:subject:date:to:mime-version:content-type:list-unsubscribe:x-csa-complaints:list-unsubscribe-post:message-id:x-sib-id:feedback-id;

b=TEQ9W3t8cKpTWbmZf1DpZq14CfKUtLMfkDIX07hOnrR0DKIQcjCvkzFVtJxB3uK0/BBFbBffj8ct

QrX/HPUbIcE0XdGSXQAkx3HTd0IYw/K45DSRoWT0EgZRP4NynzFITutuSQWWYvdcmvT2LXRB3PVg

1Fos1DxpzZ6ImO7x5BsKWqp3dC5WyCAlTe7yWyr0QdRsizAl60dJPDy3xLJH3dnDJXyYuer3Rfjr

Za0pXYp4LKHZdYbsu1GfXGqwNnx2EiyHoK7/LR0f75xopfAg5QZXctSsTPA7rtE38pJnEACSQPTq

F+23YNeUX1sI6IQSFrZfyaINC9mLkEGFgVJQSA==

Origin-messageId: <202609231237.81678652602@smtp-relay.mailin.fr>

List-Unsubscribe:

X-Mailin-EID: NDc1NTE4OTcwfnNhbGVzQG5rLmNhfjwyMDI2MDkyMzEyMzcuODE2Nzg2NTI2MDJAc210cC1yZWxheS5tYWlsaW4uZnI%2Bfmd3LmQuc2VuZGVyLXNpYi5jb20%3D

Message-Id: <202609231237.81678652602@smtp-relay.mailin.fr>

Reply-To:

Feedback-ID: 77.32.148.23:11330070_-1:11330070:Sendinblue

X-CSA-Complaints: csa-complaints@eco.de

Subject: Following up, plus something for non-cPanel boxes

X-sib-id: W-LYT-RF1MI9x8yBWdtSOsp5iSTCZLMTHkTFIG5N9IV0XJs2GmrTfXw8Jq64WTtQP1c9G-A8XigpRne5y-ZysuMzTxolIJFve21u95GMaImS8PbJtxZS0c-rZJnr5du1UZUwuf_zMj3cN3wVVn0bzc4NNLIjFWaCy7w

List-Unsubscribe-Post: List-Unsubscribe=One-Click

From: "Steadfast Tools"

To:

Date: Wed, 23 Sep 2026 12:37:24 GMT

Mime-Version: 1.0

Content-Type: multipart/alternative; boundary=f393fba6e0868014c44a3b6516e5e1addeaff00a33e10e5bcc68b44b95ff

X-Spam_score: 17.0

X-Spam_score_int: 170

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Edmonton Web Hosting BSD, Apache, Mysql, Postgres, PHP,

Just following up on my earlier email. I know hosting teams are busy - I've

been one for 25 years. If MySQL tuning isn't your biggest headache right

now, I also built BotSurgeon-Pro - a cPanel security layer that handles

bot attacks, brute force, and DDoS triage automatically. I'm currently looki

[...]



Content analysis details: (17.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

[77.32.148.23 listed in dnsbl.ahbl.org]

[77.32.148.23 listed in dnsbl.ahbl.org]

[77.32.148.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[77.32.148.23 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[77.32.148.23 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Following up, plus something for non-cPanel boxes



--f393fba6e0868014c44a3b6516e5e1addeaff00a33e10e5bcc68b44b95ff

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=utf-8



Hi Edmonton Web Hosting BSD, Apache, Mysql, Postgres, PHP,



Just following up on my earlier email. I know hosting teams are busy - I've=

been one for 25 years.



If MySQL tuning isn't your biggest headache right now, I also built BotSur=

geon-Pro
- a cPanel security layer that handles bot attacks, brute force, =

and DDoS triage automatically. I'm currently looking for 10 founding partne=

rs ("Gold Founders") who want early access and input on the roadmap.



If either tool sounds useful, I'd love to hear what challenges you're facin=

g. No pitch, just a conversation between hosting people.



steadfasttools.com



Cheers,

Rudi



--f393fba6e0868014c44a3b6516e5e1addeaff00a33e10e5bcc68b44b95ff

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8




se">
" src=3D"https://bbddaaha.r.bh.d.sendibt3.com/tr/op/iNe9T_O7q5linQUHXC9G7pl=

5s68GngD0ByN4WcOQ1Ig2TebRzZcDsC46ojy7bdxFIaKgnCvLvCXul_0J3pxmb9QAzZevyYJ-3W=

RqDmS7LhFzq_CSmkYUKE5v-NUNGMoJpRDRhkc6sC5nC0Kp1TTROx4gnjhOWJQSZJJbg7pPWdF21=

rNSnwWdyr8yFzP8F20nzYkt5_aBkOqp230D_RR63g" />







Hi=

Edmonton Web Hosting BSD, Apache, Mysql, Postgres, PHP,

/>
Just following up on my earlier email. I know hosting teams are busy=

- I've been one for 25 years.


nt-size: 16px; font-family: Arial;">If MySQL tuning isn't your biggest =

headache right now, I also built
nt-weight: 700;">BotSurgeon-Pro
- a cPanel security layer that han=

dles bot attacks, brute force, and DDoS triage automatically. I'm curre=

ntly looking for 10 founding partners ("Gold Founders") who want ea=

rly access and input on the roadmap.


font-size: 16px; font-family: Arial;">If either tool sounds useful, I'd=

love to hear what challenges you're facing. No pitch, just a conversat=

ion between hosting people.


: 16px; font-family: Arial;">steadfasttools.com


" style=3D"font-size: 16px; font-family: Arial;">Cheers,
Rudi


>



--f393fba6e0868014c44a3b6516e5e1addeaff00a33e10e5bcc68b44b95ff--



Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Myt-000000000A3-23eF

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:51 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f72.google.com ([209.85.219.72]:60753)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9LbH-000000005cB-2H9s

for doctor@nk.ca;

Wed, 23 Sep 2026 05:57:31 -0600

Received: by mail-qv1-f72.google.com with SMTP id 6a1803df08f44-90e80ce3597so18057156d6.1

for ; Wed, 23 Sep 2026 04:56:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ku.th; s=ku; t=1790164590; x=1790769390; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=MjmTqrBnOZE9SLu6sFM12Bs6PlGBlTsvLEq6NSGOD6Y=;

b=fsYslTTco2BYXM49glnCk7W6uA/tiwOUJamSh8nXqWu7pPT0naAsJ/MRoyuVVWA/GZ

4S7Vxm9h4m50pz0t9c4gYEaoquJkHx+UIehPP6Ruk5nE491n2ASpSiClDa17+yprx4Y0

9dcll+k+xudFF2xSuXqVf3kLzAlKpkf2fcNz43ZRmE1eaewccN8AisatR1JOabxa6+aj

vveUVCFLbWS+q4cJyZoHai8fKx7EdXy6XGBLB5dGRlDsWLuGvpJWBP22Sf6/66/ZzPnb

DE433hpmWekL2Y5+oO2RLZ2qKpHUtq1oBMuLd17qqsfX5Az4eO16nhGY0ARSjnze7pG4

w3uw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790164590; x=1790769390;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=MjmTqrBnOZE9SLu6sFM12Bs6PlGBlTsvLEq6NSGOD6Y=;

b=SpRqB7/MIhMle7Art/AXCD84YjmWSeOHHXGwTo620MMCbim1IEkXnGbVOYMH/iSjrc

Z6O2+yfqn+uFm56J6ZCpFalgMv8UnUUSRNEaZabzG9BdzC7KHCSUoj/giTe0Ltm1eTgx

lM30ZTlS0jCGWiGxN+qKXO18nVF84QI56NjoHWtokNZx1rSrbF4ErZBHgkkexf5NVcC+

oS2nx2coDCAUr5UCRn1Y7qx8Cnhizwf4eaaSpaURJV4wrzuOIJjue9lkQgQEZ+NLhL5w

McHZoCB8gb7oQF6bM17arMukQwWrIEUxO8i8nKcR8KoZOs3s18YzVJrBMxNpj6XuOc/2

5m2A==

X-Gm-Message-State: AFuF++kbi1dGpjNk9SNkrpn9JpCJ9wCYtkV9FFn3VKkDa/X0ohoeap5A

JalmPZ4BrML5HMXT5B+wEGVm0ucmrtnzP4LMQKtfrOYgwvwW+UxaW18OynaAx9SKxH+tGUI6C+y

DCLwUAb3kUe9koNbFB9Kt3qWl

MIME-Version: 1.0

X-Received: by 2002:a05:6214:4891:b0:912:517b:974e with SMTP id

6a1803df08f44-9140c476406mr39054616d6.40.1790164589662; Wed, 23 Sep 2026

04:56:29 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 11:56:29 +0000

Subject: 1 minuut van je tijd, kans op 1.000 euro boodschappentegoed

From: Nationaal Koopkrachtonderzoek

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000074e90a065c252c0d"



--00000000000074e90a065c252c0d

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TkFUSU9OQUFMIEtPT1BLUkFDSFRPTkRFUlpPRUsNCg0KDQpXaW4gcHJpanplbg0KDQoNCjEgbWlu

dXV0IHZhbiBqZSB0aWpkLA0Ka2FucyBvcCDigqwgMS4wMDAgYm9vZHNjaGFwcGVudGVnb2VkDQoN

Ck1lcmsgamlqIGhldCBvb2s/IEVuZXJnaWUsIGJvb2RzY2hhcHBlbiBlbiBhYm9ubmVtZW50ZW4g

d29yZGVuIHN0ZWVkcyAgDQpkdXVyZGVyLiA3IG9wIGRlIDEwIE5lZGVybGFuZGVycyB6aWVuIGh1

biBrb29wa3JhY2h0IGRhbGVuLiBEYWFyb20gdm9lcmVuICANCndlIGhldCBOYXRpb25hYWwgS29v

cGtyYWNodG9uZGVyem9layB1aXQg4oCUIDkga29ydGUgdnJhZ2VuLCBob29ndWl0IDEgIA0KbWlu

dXV0LiBFbiBhbHMgYmVkYW5ramUgbWFhayBqZSBrYW5zIG9wIGVlbiBtb29pZSBwcmlqcy4NCg0K

DQoNCg0KDQoNCuKCrCAxLjAwMA0KYm9vZHNjaGFwcGVudGVnb2VkDQoNCg0KDQrigqwgNTAwDQpj

YXNoIG9wIGplIHJla2VuaW5nDQoNCg0KDQoNCg0KQWlyZnJ5ZXINCnR3diDigqwgMjQ5DQoNCg0K

DQpTbWFydHdhdGNoDQp0d3Yg4oKsIDM0OQ0KDQoNCg0KDQoNCkRvZSBtZWUgYWFuIGhldCBvbmRl

cnpvZWsg4oaSDQoNCg0KDQoNCkR1dXJ0IG1hYXIgMSBtaW51dXQgwrcgYWwgMTguNTAwKyBkZWVs

bmVtZXJzIMK3IHZvbCBpcyB2b2wNCg0KDQoNCkRlZWxuYW1lIGFhbiBoZXQgb25kZXJ6b2VrIHN0

YWF0IGxvcyB2YW4gZWVuIGFhbmtvb3AuIFRyZWtraW5nIG9uZGVyIGFsbGUgIA0KZGVlbG5lbWVy

czsgZ2VlbiBhYW5rb29wdmVycGxpY2h0aW5nLiBKZSBvbnR2YW5ndCBkZXplIGUtbWFpbCBvbWRh

dCBqZSBqZSAgDQpoZWJ0IGFhbmdlbWVsZCB2aWEgZWVuIHZhbiBvbnplIHBhcnRuZXJzLg0KQWZt

ZWxkZW4NCg0KDQoNCg0K

--00000000000074e90a065c252c0d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background:#fdf6ec;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:600px;max-width:600px;background:#fff=

fff;font-family:Arial,Helvetica,sans-serif;border-radius:14px;overflow:hidd=

en;box-shadow:0 1px 0 #f0e6d6;">














































ter-spacing:0.5px;">NATIONAAL KOOPKRACHTONDERZOEK





m/nko-hero.jpg" alt=3D"Win prijzen" width=3D"600" style=3D"display:block;wi=

dth:100%;max-width:600px;height:auto;border:0;">




c14;font-weight:bold;">1 minuut van je tijd,
kans op € 1.000 boodsc=

happentegoed




lor:#54463c;">Merk jij het ook? Energie, boodschappen en abonnementen worde=

n steeds duurder. 7 op de 10 Nederlanders zien hun koopkra=

cht dalen. Daarom voeren we het Nationaal Koopkrachtonderzoek uit — 9=

korte vragen, hooguit 1 minuut. En als bedankje maak je kans op een mooie =

prijs.






ellspacing=3D"0" border=3D"0">


















sentation" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" =

style=3D"background:#fdf6ec;border-radius:8px;">

px;text-align:center;font-size:15px;color:#2b1c14;font-weight:bold;">€=

1.000
=

boodschappentegoed

sentation" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" =

style=3D"background:#fdf6ec;border-radius:8px;">

px;text-align:center;font-size:15px;color:#2b1c14;font-weight:bold;">€=

500
ca=

sh op je rekening

sentation" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" =

style=3D"background:#fdf6ec;border-radius:8px;">

px;text-align:center;font-size:15px;color:#2b1c14;font-weight:bold;">Airfry=

er
t.w.=

v. € 249

sentation" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" =

style=3D"background:#fdf6ec;border-radius:8px;">

px;text-align:center;font-size:15px;color:#2b1c14;font-weight:bold;">Smartw=

atch
t.=

w.v. € 349





" border=3D"0">








dius:30px;">


" style=3D"display:inline-block;padding:16px 40px;font-family:Arial,Helveti=

ca,sans-serif;font-size:17px;font-weight:bold;color:#ffffff;text-decoration=

:none;border-radius:30px;">Doe mee aan het onderzoek →






Duurt maar =

1 minuut · al 18.500+ deelnemers · vol is vol




e8d8;">


86;">Deelname aan het onderzoek staat los van een aankoop. Trekking onder a=

lle deelnemers; geen aankoopverplichting. Je ontvangt deze e-mail omdat je =

je hebt aangemeld via een van onze partners.

e.org/t/u/4350489fb85002c46bea" style=3D"color:#a89886;text-decoration:unde=

rline;">Afmelden










ght=3D"1" alt=3D"">

--00000000000074e90a065c252c0d--

Web/SEO/APP spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 05:37:30 -0600

Received: from mail-koreacentralazolkn19011025.outbound.protection.outlook.com ([52.103.74.25]:28563 helo=SLXP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9LHr-000000003ap-0QRV

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 05:37:29 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=T/oNhoCFUoIsmggSoZ2kpJ0wgjYr1+hp4U8r7uTDq/5a8XASwhVtRBir/A0CcrrmwnPg9bWSq4rH0gOCWFNwZArRiD9w/9qjsKLre8Czz3MKjazopq+x0H3H3Vu0nYyS6DuamFlEwAI83+tjKl7kJ3sDNIPbTnofBEo0/rtsiGycB6uhpj3C/hjGNLu65L5Yh0P4sDDHbvItjZ4Qpf4/lf75Ze3KvfGRHNNqVgXk3nl4tZrrre3m4lEu7WcW4ocWqlKZyn+asZBBOB3ezRa+JyebtP/7nDWcNmuvlduWhxjYDksptSuw7F0s+hojayH6ElZyntAs7X9u/FJK5rd6sQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=SbfesEQ4rCzfomwNi8vyoAuBx6HdDqhqWCqfffDNNfs=;

b=SAFUlwQ7x0UHtgoR8OeFtwE0dRq4kWgTWlmkIaPkNRFigI5aJ174eHi5rfpKQJWo5rVoh9RK12T0wYReC/N8Dfh55Wat3l4KTahDimyvmpjq9A4Dz9+lLNsQY84s/0uox+OW8NKF+pay0TgXqbF6jCru2ofhfEx7MNdneyqERcfzZnZvNeFPv2ICeB+hEb5lNLlAEVlsYS8Pqnizc1K0wMIpb3AYlZbmWDEX0i6cyWBJsG5gz3xeFokvuSicboC13mnm719V17n4hqq/1OQd9eKZIT2fs9YcZVqE8AkTzO2Us9EgagAXsisMK4bnkohuYg/ldTmALFQ+e7GS3dr4Zg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=SbfesEQ4rCzfomwNi8vyoAuBx6HdDqhqWCqfffDNNfs=;

b=aBMWUJplWBz/g8Q2hhtErx0xx2h58xbB3oLXKCGRoDGDi4nLVol1a1ZB7Hl+jJiExJJnR8X4yDL+difPy/ZB5fUObMb9f7cPA7RtLDjKoEyJfCiYB9ExuYyG9hmCk9uPnoZ5cSiSPaUk7HVNYDnw3n6zlrWv288EwvAJGm6WsWILoiZEDruoQu6J0t1JX+SmiOSmXVB7ArOd5wMMYlwcl4S1EswQdk83/Sco3YTXjAehUcP8D0igYboEPUWWYtDGpGIu+u1w9C3RPBejWg7VGh+r7vqZxvLmedGVH5M5S5+pt9kIUSUdZ+UBCKu55ueRC+CURxSFt9ZIZwOyCs+BtA==

Received: from PUVP216MB3367.KORP216.PROD.OUTLOOK.COM (2603:1096:301:168::14)

by SE1P216MB2066.KORP216.PROD.OUTLOOK.COM (2603:1096:101:15d::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.14; Wed, 23 Sep

2026 11:35:58 +0000

Received: from PUVP216MB3367.KORP216.PROD.OUTLOOK.COM

([fe80::b639:d2ef:8d24:2e60]) by PUVP216MB3367.KORP216.PROD.OUTLOOK.COM

([fe80::b639:d2ef:8d24:2e60%6]) with mapi id 15.21.0451.014; Wed, 23 Sep 2026

11:35:58 +0000

From: ariaconnet plus

To: ariaconnet plus

Subject: =?Windows-1252?Q?Re:_Proposal_with_price=94=3F?=

Thread-Topic: =?Windows-1252?Q?Proposal_with_price=94=3F?=

Thread-Index: AQHdSrK1wI/m8SwdHUybgZH2jHx+87bcCc1f

Date: Wed, 23 Sep 2026 11:35:58 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUVP216MB3367:EE_|SE1P216MB2066:EE_

x-ms-office365-filtering-correlation-id: 922e429e-6d52-4ff2-5ebd-08df1966d63a

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|15030799006|24121999003|37011999003|22091999003|55001999006|25010399006|704163111799003|2604032081799003|2604032031799003|45011099003|16051099003|51005399006|8062599012|8060799015|48001999003|19110799012|31061999003|40105399003|2607281247196008|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?JkZaXw+cV9wLgR6lUHR8JnNc3StzAisNB/5bAAwGQKQNb109SkPmqMhz?=

=?Windows-1252?Q?SMo+KMsab7gbgMGtF59Jy9kGDStqIsFeu5l41JsJKqGDAMbEimRrcBHq?=

=?Windows-1252?Q?ezZ845mxN8Sy1/x1VZMEys91G2xQVs2qqwCFesamqyiym/pJGZ+TvXO1?=

=?Windows-1252?Q?0dHm0BoXCfISldNgo1Djb6rgCWRsoeHj6yOQ79+zOvwr5t56C2QImbNA?=

=?Windows-1252?Q?jXWRjKOHnxDXqWwJ1S+bGzDYtsBbjZcMxNk+qzz5yi+vql+q8oW1JqV5?=

=?Windows-1252?Q?PG6/VsKoUg2E/iO48lcS8nt0E7wwMrWYOMZth+z0vBuOQUCM9OKJJfI3?=

=?Windows-1252?Q?S+DirY5dmohM+RpuRZD7N2JidMxUCxRWdmzkYSPAunvvWLNBtOdVFPfV?=

=?Windows-1252?Q?O7X3/Rqr1Ume3nxxGtTChrPYH2oyOXq+XMXuykOSNtfh4tBiC5/ipNle?=

=?Windows-1252?Q?DRvnic66C/utUy1sG5bjVUm672d6nwnsUfafrMLWf7jAzIN0miR+yfut?=

=?Windows-1252?Q?TmcpISC8TkyXNT2aph0092m/MIL0ShxanuRkWyIaYMAHxmOisZOfr8fK?=

=?Windows-1252?Q?u20+5x0sd7mg5dcL7xN2swYc456HwSMe1enJfEhxIPSpwKmtY48vN1vz?=

=?Windows-1252?Q?MgwXuDBYFmUACgra0DE7yAYQCfRghqsUzjWvH/8p4lKma7UJf9lf7AJj?=

=?Windows-1252?Q?6iXmwCZGVCOfef2iaVPIeTbRsJCFtI1Ep3mFsDPRc+hHj6ogaOmNnnoo?=

=?Windows-1252?Q?2pz0zSoJaaVulwYBHvaCOqGWfv+9nGCzdnMYOvkCv9OKszG1CKcoc43n?=

=?Windows-1252?Q?g7QvsEuBTRFlMNM8tyNZfFSAA9AyBjCbsX3ErZ4/QBUKLCWF+0GB6A/P?=

=?Windows-1252?Q?lvhRpk1nRugO+2g2pQMukP0BjiDaZV/RtUKxumL7va5ETlggoZPBnQSP?=

=?Windows-1252?Q?DeTchAjW6xe1aiszgQyJi8qDd3nNJ1DQ6oAvPNJWBp8tko0vwkJjHbpu?=

=?Windows-1252?Q?2HREhrQARYfJ6x13pcFWM/0JecKC0t2vTtydymIf3dXHReCGBAbNsCPr?=

=?Windows-1252?Q?530pGfxvXW8Gt0gdJeY+siZ5QoKn4iV+ZnFzlr81te1JrBkjR9WBL/st?=

=?Windows-1252?Q?rHw0JWyP/FuCunBcf3EVvp/n4Z+ZXuyKqkF2D0ETyhb+0WQJiF7xtS08?=

=?Windows-1252?Q?MpIQTCYb29XrBopcsLMhRbXkabfy2mFzmrcE9NX8OUPE9oUF2mjUH49v?=

=?Windows-1252?Q?/WG+szIOaxCaUd8aCJ+FbMY4Pn5V+uNVutdPgA/7l6GyK9+sMGoiZ0nK?=

=?Windows-1252?Q?q7HAuQRqC9ofUpWtTfmmhMCuNjAirG9AWpD0/dxjd21gkORY6vT+Pkts?=

=?Windows-1252?Q?rm5CsPeEvKAWuUgD4QvW2Rngx/yDEl1aiCl4bzAy5d/OT6UgHvaVfPpf?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?lwmhgHDuiKaKgiv2rPPo0sKOBBuNPuB61lSI1/AXPckk1SDScHqRNJNe?=

=?Windows-1252?Q?xmkVtXL27kt7IdJYlWxcKy71X4fWB6z4CmVGOUSRS8Gqp6/WX8G/WtEw?=

=?Windows-1252?Q?exkyuZjdQoE2vkA1FbIyq0bUZkpKj6AgHzbZjsvAnxCkYpOFLWyPgvi4?=

=?Windows-1252?Q?tvZjfULiVuB1EopRTVfpIHJVICs8q9CvVd94NXPKj/JAjYBFMnZGUgKQ?=

=?Windows-1252?Q?enoTA4AeqlLW6wLh1mNdA5VOTjLhv4U1x0WHhA3DLmJ3XaDDjKpeEPdX?=

=?Windows-1252?Q?1oQtRxu3dkw0Qr6t09JEZy0M15ObwhCriGW0c3Wu62JEq6EBk8rW1UWy?=

=?Windows-1252?Q?Ha8NtF+Fvhh+1maaQWajkUBlGpnpwcqaMvywXDJaQtNb/isA/wF7uv6Q?=

=?Windows-1252?Q?wAEXRS3dZ2EfK4SplPkMV1xScsdSOKJLDN2SRQZfzV6haXYgqp+PPKSN?=

=?Windows-1252?Q?zXVlnvSRR3g6kbWYQ8LmwgXSKwYu5MebO8p93EmxdCCQhQS4JKvrCswv?=

=?Windows-1252?Q?ZA3z/7+oAZ3+zGQmKTpNdA4NpmlREzQx3dAW47IEImOcAqdMxvuBKZUL?=

=?Windows-1252?Q?0zcH1N7B1epFps6GTGRzBLQlXq4AcW6d0wdYOEPhA+D7+pgB2MwaDVWb?=

=?Windows-1252?Q?D9zlm4xd5fMJ0ZZirgo7Mj42cZF2/bPTZXJsY+OlXz2cC7ThCfPH6h4U?=

=?Windows-1252?Q?NlxMGZ9a1bAl1y+r4qgFCS5Abxmu6mh0/5FF/WVDiqEsURXVw/xgs86z?=

=?Windows-1252?Q?UXJAsPDuCnscZzI06MR0eCGyxqJNsTXagIjHFGlEdBY/BjqPGUX9Tmqw?=

=?Windows-1252?Q?a5CLvmk/rfhx2/iFeGhnlvuHA4hCXpwlYn/UfVtJGLQFFfozIHnlYASD?=

=?Windows-1252?Q?rM4uybmxygZlOfec9O2YKrdsPoYQfsTBGmZNCw4Dqj+13F5vZj2EKsoX?=

=?Windows-1252?Q?161NAs8u04Lkc9x9De6f8Shq6NeMk3USKILudmQP1HLJn1Qgc5IiDrHY?=

=?Windows-1252?Q?6MlqgntPdlaFo0aYnAa5eAbwaJxtPP+DKSozRyFKT5BzUtrHQXeeeHmG?=

=?Windows-1252?Q?6fai0+GtT+3C4EbIsL/yp/4trEdVGu3e1jvvNLu/8it2KxDmo8aMpVIu?=

=?Windows-1252?Q?xgFYsL1XubqbF0T3SrOetwUHxVg+MYgGHBL6IfX5XS83QwHDEzJYFZtW?=

=?Windows-1252?Q?DHiPhHCmeTs8frvMKrbSC5ua/BjSePi8BJGOzMSqXcC3lMn9po8YhDSb?=

=?Windows-1252?Q?+8BzOU3zOvbvQor5weuTafMIBW/RlejSCZAONy2n372hdvYqFC5Ka2Uq?=

=?Windows-1252?Q?1hW3g3IAvuMgKwY9mYUZG7Rmz44Weeabxobl44edLxoiJKcj/OwwBz06?=

=?Windows-1252?Q?G75EOMdvAs2cYLz7B/zDMzUeO+k0LdwdOFDYIUez2xmFf7J7FOviMYTd?=

=?Windows-1252?Q?O95sdWQ5W8XqVkQ177Lo1mJAEBBZd9Ohxrh3o5CZb4X3LrqeoqLEKH0O?=

=?Windows-1252?Q?1TQMWboS4I/PmLsX618Juebs7oXpzYLTqV6ZiXQLJNIlOR/Jg3sy1Uyd?=

=?Windows-1252?Q?RcndzwhHzJgzsSBH?=

Content-Type: multipart/alternative;

boundary="_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-94596.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUVP216MB3367.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 922e429e-6d52-4ff2-5ebd-08df1966d63a

X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Sep 2026 11:35:58.1126

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB2066



--_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable





________________________________

From: ariaconnet plus

Sent: Wednesday, September 23, 2026 5:01 PM

To: ariaconnet plus

Subject: Re: Proposal with price=94?



Hi,



Good morning



I was going through your website & I personally saw a lot of potential in y=

our website & business.



I would like to send you a Proposal of your business website! You can get y=

our website on the 1st page of GOOGLE.



May I send you a Proposal with price=94?



Thank you,





--_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












yle=3D"font-size:11pt" color=3D"#000000">From: ariaconnet plus


Sent: Wednesday, September 23, 2026 5:01 PM


To: ariaconnet plus <ariaconnetplus@hotmail.com>


Subject: Re: Proposal with price=94?


 









nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

Hi,


 


Good morning


 


I was going through your website & I personally saw a lot of potential =

in your website & business.


 


I would like to send you a Proposal of your business website! You can get y=

our website on the 1st page of GOOGLE.


 



,255,0)">May I send you a Proposal with price=94?



 


Thank you,



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">














--_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Myj-00000000Pjv-3qfS

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:51370)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9LHC-000000003Wv-0KsT

for doctor@nk.ca;

Wed, 23 Sep 2026 05:36:47 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-8a35310148aso18909617b3.2

for ; Wed, 23 Sep 2026 04:35:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=iisponti.edu.it; s=google; t=1790163345; x=1790768145; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Qhg5F5utim/re2AKU7RfSLMQ6CE6t168Cy9l0Og8N4g=;

b=YNuDLcMBR/PP+gb+IB3uiJtCOhDNDWRr1RJaHfyeV7eIAppK8u9vNeAMzdCoPUzzym

0uilLHjApgbwEm45EizVmVnCabXJENYwZrQ8Sn2g8823Z/Ogj+Q89IIO9/3RjJBYUYWg

VNIHGIVyV1+BjXz1NU0qpyKg0AZn+65gYN8QS4U8x4rt+GKbylM8Ji4WGs7xwlV1envU

a/1N7Gxu/8xDjyeL3Tx7QMfDmq/W2HLPhO0rG+mnsU+F1xwlDkhWSeG2aQ40jFJlqjNE

2a/lDfnuRH7dA5mo1E6bLvpfNL7DEH0lFbRUST8WtmschCZ1jXtDYK7qt+yGr3HQVuwn

c2IQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790163345; x=1790768145;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Qhg5F5utim/re2AKU7RfSLMQ6CE6t168Cy9l0Og8N4g=;

b=PX/CHwfqhOyYosuTtaYB7gzW8+jG7O7aKMmY6PV+41MkHU5M3TNZPgFuLYfT8xsMVu

1FW1CG2UDTkD/Vb5QvutiBLT3Hu1Jul94xQYvmd7mF1ezZtWBW1bjO1talT0E1FVJ4Bj

Vap2AGFIEQo+M1oRvLaUFaFQ+TXnT181NOM9uaF6CdZAUuIoGKy0V8NrrQJWgI6wUmAu

EKitbMWFDr0OVVMC+U8107sMEZgZRFsK+dK5zuJLY//K8w88+MHieLDwoxeM9B8DKffa

7WChW6dVJMZsbArefp7vKXE2bgBXGwGwJBdqs/iRAdTYUnG4NF0wYP3SbuXegub8gUOZ

xkSw==

X-Gm-Message-State: AFuF++nNB8uRYYMqyC7BCPYtb+tDWWlxknD6HaOjUQ+DgvWsj0Ua4Hy1

/yfyr0Jui5Lw9XCwGI95SNZZFC/LYQ83BRAHfIFGaV4srYpxsbIpQyR/nDToYP+ifsBw/wrXvub

ROUHbq7nuIm/OnpmsFXVDKdY4

MIME-Version: 1.0

X-Received: by 2002:a53:c1d2:0:b0:672:a52c:daf9 with SMTP id

956f58d0204a3-672d599df01mr860866d50.108.1790162847346; Wed, 23 Sep 2026

04:27:27 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 11:27:27 +0000

Subject: =?UTF-8?Q?Check_in_1_minuut_of_uw_bedrijf_tot_=E2=82=AC_500_telecom=2D?=

=?UTF-8?Q?cashback_krijgt?=

From: Nationaal Telecom Onderzoek

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000009b462f065c24c411"

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Nationaal Telecom Onderzoek ZAKELIJK TELECOM ONDERZOEK Tot

€500 cashback op uw zakelijke telecom — betaalt u te veel?



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.197 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: businesssnap.xyz (xyz)]

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_JB BODY: Odd Letter Triples with JB

0.1 TW_IJ BODY: Odd Letter Triples with IJ

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.197 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Check_in_1_minuut_of_uw_bedrijf_tot_=E2=82=AC_500_telecom=2D?=

=?UTF-8?Q?cashback_krijgt?=



--0000000000009b462f065c24c411

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TmF0aW9uYWFsIFRlbGVjb20gT25kZXJ6b2VrDQoNCg0KWkFLRUxJSksgVEVMRUNPTSBPTkRFUlpP

RUsNCg0KVG90IOKCrDUwMCBjYXNoYmFjayBvcCB1dyB6YWtlbGlqa2UgdGVsZWNvbSDigJQgYmV0

YWFsdCB1IHRlIHZlZWw/DQoNCg0KDQpWZWVsIG9uZGVybmVtZXJzIHppdHRlbiBhbCBqYXJlbiB2

YXN0IGFhbiBoZXR6ZWxmZGUgdGVsZWNvbWNvbnRyYWN0IGVuICANCmJldGFsZW4gaG9uZGVyZGVu

IGV1cm8ncyBwZXIgamFhciB0ZSB2ZWVsLiBEb2UgbWVlIGFhbiBoZXQgb25kZXJ6b2VrIGVuIHUg

IA0KemlldCBpbiAxIG1pbnV1dCBvZiB1dyBiZWRyaWpmIHJlY2h0IGhlZWZ0IG9wIHRvdCDigqw1

MDAgdGVsZWNvbS1jYXNoYmFjay4gIA0KQWxzIGRlZWxuZW1lciBtYWFrdCB1IGJvdmVuZGllbiBr

YW5zIG9wIGVlbiBtb29pZSBwcmlqcy4NCg0KDQoNCk1BQUsgS0FOUyBPUDoNCg0KDQoNClNhbXN1

bmcgR2FsYXh5IFdhdGNoNw0KR2FsYXh5IFdhdGNoNw0KDQoNClBsYXlTdGF0aW9uIDUgU2xpbQ0K

UGxheVN0YXRpb24gNQ0KDQoNCkFwcGxlIGlQYWQNCkFwcGxlIGlQYWQNCg0KDQoNCg0KDQpTdGFy

dCBkZSB0ZWxlY29tY2hlY2sgwrsNCg0KDQpEdXVydCAxIG1pbnV1dCDCtyBncmF0aXMgwrcgZ2Vo

ZWVsIHZyaWpibGlqdmVuZA0KDQoNCg0KVSBvbnR2YW5ndCBkZXplIGUtbWFpbCBhbHMgemFrZWxp

amtlIHJlbGF0aWUgZGllIGludGVyZXNzZSB0b29uZGUgaW4gIA0Ka29zdGVuYmVzcGFyaW5nLiBD

YXNoYmFjayBlbiBhY3RpZXZvb3J3YWFyZGVuIHppam4gYWZoYW5rZWxpamsgdmFuIHV3ICANCnNp

dHVhdGllIGVuIGRlIGRlZWxuZW1lbmRlIGFhbmJpZWRlcnMuDQoNCkFmbWVsZGVuDQoNCg0KDQoN

Cg==

--0000000000009b462f065c24c411

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable








schemas-microsoft-com:office:office">









Zakelijke telecom-cashback






=3D"0" border=3D"0" style=3D"background:#0b1f3a;">






"0" border=3D"0" style=3D"width:600px;max-width:600px;font-family:Arial,Hel=

vetica,sans-serif;background:#ffffff;border-radius:16px;overflow:hidden;">












































1).png" alt=3D"Nationaal Telecom Onderzoek" width=3D"240" style=3D"display:=

block;width:240px;max-width:70%;height:auto;border:0;">




ze:12px;font-weight:bold;padding:6px 12px;border-radius:999px;">ZAKELIJK TE=

LECOM ONDERZOEK



a;font-weight:800;">Tot €500 cashback op uw zakelijke telecom — =

betaalt u te veel?







Veel ondernemers zitten al jaren vast aan hetzelfde telecomcontract en beta=

len honderden euro’s per jaar te veel. Doe mee aan het onderzoek en u=

ziet in 1 minuut of uw bedrijf recht heeft op tot €500 teleco=

m-cashback
. Als deelnemer maakt u bovendien kans op een mooie prij=

s.






;letter-spacing:.5px;">MAAK KANS OP:




=3D"0" border=3D"0">
















laxy-watch-7.webp" alt=3D"Samsung Galaxy Watch7" width=3D"90" style=3D"disp=

lay:block;width:90px;max-width:100%;height:auto;border:0;margin:0 auto 8px =

auto;">

Galaxy=

Watch7










n-5-slim.webp" alt=3D"PlayStation 5 Slim" width=3D"90" style=3D"display:blo=

ck;width:90px;max-width:100%;height:auto;border:0;margin:0 auto 8px auto;">

PlaySt=

ation 5










.webp" alt=3D"Apple iPad" width=3D"90" style=3D"display:block;width:90px;ma=

x-width:100%;height:auto;border:0;margin:0 auto 8px auto;">

Apple =

iPad














ground:#123a7a;border-radius:10px;color:#ffffff;display:block;max-width:460=

px;font-size:17px;font-weight:bold;line-height:20px;padding:17px 24px;text-=

align:center;text-decoration:none;box-sizing:border-box;margin:0 auto;">Sta=

rt de telecomcheck »






Duurt 1 minuut ·=

gratis · geheel vrijblijvend







U ontvangt deze e-mail als zakelijke relatie die interesse toonde in kosten=

besparing. Cashback en actievoorwaarden zijn afhankelijk van uw situatie en=

de deelnemende aanbieders.




r:#8a929b;text-decoration:underline;">Afmelden















height=3D"1" alt=3D"">

--0000000000009b462f065c24c411--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Mya-00000000PI3-0F5O

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:32 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f72.google.com ([209.85.219.72]:46308)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9K7u-00000000LiW-3o8p

for doctor@nk.ca;

Wed, 23 Sep 2026 04:23:07 -0600

Received: by mail-qv1-f72.google.com with SMTP id 6a1803df08f44-91213a1aa68so11282936d6.0

for ; Wed, 23 Sep 2026 03:22:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=hou.edu.vn; s=google; t=1790158924; x=1790763724; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=ILTsLtZlwNaWR50mXDlXiwY8uijCht65QsSROliqG5Q=;

b=g+/j+1EWd8fmTWcBBilegSoS/Xp0KfTD3AR3rpl308fYQgFxd/mQUEKxGmeSZ9VxmE

bma97uHcI8ibE1w8auhXapAD2O2d8gRKj+i/2SnwBYjWiL9WM3i5NED/NMA38ZF5C7Lt

lHys/k8t2gm2pkgxJJWtfb+Qb4G3hE/1C7awA=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790158924; x=1790763724;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=ILTsLtZlwNaWR50mXDlXiwY8uijCht65QsSROliqG5Q=;

b=Ni2cX80MipIE8uKJ5P5ziCUUHExp6RJHd0bJytO4BmiVeARCX0BufYSMeq1P/yWcDI

uS4J1/kklMGg+3asWZZSsrwedXRxIB+5iDeRAqlHTYjP7GRR1S4abgEjsbda0Yl4WZ4b

q19sl+3W+wFEv/uithTDhBfiRfRRo9dx3+okiIXULuXgYYK3hTtvUtK+mjv/XlC4i/+0

3frakktbth1IxAogK1H4x/GLi87kc7Hew/0YHrapgWvZ2uyRMAK/ZBanIEtP64V8ypnp

LLNv2n4Ht2bOcpeOSmrpwqGVUVzP0fUMgVfZhgALxbCUIfOFNAAv0fOTNuczqRtOtnlM

zWhA==

X-Gm-Message-State: AFuF++nYQg7gAQ1rNjoBYXSEx4sO1retpOXE3vrCGXcyiD5USEzxWGy/

OktpeyPkRdXoRR1uci/tZ3DqCHoizlSYw0mIOgmJN33XXkxHR4UM8m39eCogOWoxcD7gy1rqhgo

B72XYqwpT/vF5XwSLSpj2wz1I7zvMp0vQ6aUr3nhuxYUIF588lGF0g/Rr64JSisWB9Lt18DGGwG

j+sQWAuOO9sfWJnJOv5HM5yQtkI6kH+vAcQnLUxS9zpg==

MIME-Version: 1.0

X-Received: by 2002:ac8:7fc1:0:b0:532:d18f:bd57 with SMTP id

d75a77b69052e-532eabdd4b6mr36759731cf.18.1790158923816; Wed, 23 Sep 2026

03:22:03 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 10:22:03 +0000

Subject: Laatste kans: jouw gemeente zit bijna vol

From: Lisa van EnergieCheck

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000bef424065c23da4e"

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ⏳ Laatste kans – jouw gemeente zit bijna vol Steeds meer

huishoudens stappen over. Is er nog plek in jouw gemeente? Hoi, ik ben Lisa.

Veel mensen betalen nog altijd te veel voor stroom en gas, gewoon omdat overstappen

als gedoe voelt. Dat hoeft niet: met de gratis EnergieCheck zie je in een

minuut of jij goedkoper [...]



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.72 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.72 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.72 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.1 TW_IK BODY: Odd Letter Triples with IK

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Laatste kans: jouw gemeente zit bijna vol



--000000000000bef424065c23da4e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



4o+zIExhYXRzdGUga2FucyDigJMgam91dyBnZW1lZW50ZSB6aXQgYmlqbmEgdm9sDQoNCg0KDQpT

dGVlZHMgbWVlciBodWlzaG91ZGVucyBzdGFwcGVuIG92ZXIuIElzIGVyIG5vZyBwbGVrIGluIGpv

dXcgZ2VtZWVudGU/DQoNCg0KDQpIb2ksIGlrIGJlbiBMaXNhLiBWZWVsIG1lbnNlbiBiZXRhbGVu

IG5vZyBhbHRpamQgdGUgdmVlbCB2b29yIHN0cm9vbSBlbiAgDQpnYXMsIGdld29vbiBvbWRhdCBv

dmVyc3RhcHBlbiBhbHMgZ2Vkb2Ugdm9lbHQuIERhdCBob2VmdCBuaWV0OiBtZXQgZGUgIA0KZ3Jh

dGlzIEVuZXJnaWVDaGVjayB6aWUgamUgaW4gZWVuIG1pbnV1dCBvZiBqaWogZ29lZGtvcGVyIHVp

dCBiZW50IOKAkyB6b25kZXIgIA0Kb3ZlcnN0YXBzdHJlc3MuDQoNCg0KDQoNCg0KMS4gVnVsIGpl

IHBvc3Rjb2RlIGVuIGh1aWRpZ2Ugc2l0dWF0aWUgaW4NCg0KMi4gSmUgemlldCBkaXJlY3QgamUg

bW9nZWxpamtlIGJlc3BhcmluZyBwZXIgbWFhbmQNCg0KMy4gV2lqIHJlZ2VsZW4gZGUgb3ZlcnN0

YXAg4oCTIGppaiBkb2V0IG5pZXRzIGV4dHJhJ3MNCg0KDQoNCg0KDQpQZXIgZ2VtZWVudGUgaXMg

ZXIgZWVuIGJlcGVya3QgYWFudGFsIHBsZWtrZW4gYmlqIG9uemUgc2NoZXJwc3RlIHRhcmlldmVu

LiAgDQpaaXQgamlqIG5vZyB2YXN0IGFhbiBlZW4gZHV1ciBjb250cmFjdD8gQ2hlY2sgaGV0IG51

IGhldCBub2cga2FuLg0KDQoNCg0KDQpDaGVjayBtaWpuIGJlc3BhcmluZyDihpINCg0KDQoNCg0K

U2xpbSBiZXNwYXJlbiwNCkxpc2EgdmFuIEVuZXJnaWVDaGVjaw0KDQoNCg0KQmVzcGFyaW5nZW4g

emlqbiBpbmRpY2F0aWVmIGVuIGFmaGFua2VsaWprIHZhbiBqZSB2ZXJicnVpaywgaHVpZGlnZSAg

DQpjb250cmFjdCBlbiBiZXNjaGlrYmFyZSB0YXJpZXZlbi4gRGUgRW5lcmdpZUNoZWNrIGlzIGdy

YXRpcyBlbiB2cmlqYmxpanZlbmQuDQpBZm1lbGRlbg0KDQoNCg0KDQo=

--000000000000bef424065c23da4e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background-color:#eef2f3;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:100%;max-width:600px;background-color=

:#ffffff;font-family:'Segoe UI',Arial,Helvetica,sans-serif;">




















































fff;font-weight:700;text-align:center;letter-spacing:0.5px;">⏳ Laatst=

e kans – jouw gemeente zit bijna vol






3039;font-weight:800;">Steeds meer huishoudens stappen over. Is er nog plek=

in jouw gemeente?






54b;">Hoi, ik ben Lisa. Veel mensen betalen nog altijd te veel voor stroom =

en gas, gewoon omdat overstappen als gedoe voelt. Dat hoeft niet: met de gr=

atis EnergieCheck zie je in een minuut of jij goedkoper uit bent –
trong>zonder overstapstress.






ellspacing=3D"0" border=3D"0" style=3D"background-color:#f3f7f8;border-radi=

us:10px;">










px;color:#123039;">1.=

  Vul je postcode en huidige situatie in




px;color:#123039;">2.=

  Je ziet direct je mogelijke besparing per maand




r:#123039;">3.  =

Wij regelen de overstap – jij doet niets extra’s








a60;">Per gemeente is er een beperkt aantal plekken bij onze scherpste tari=

even. Zit jij nog vast aan een duur contract? Check het nu het nog kan.






" border=3D"0">




">


target=3D"_blank" style=3D"display:block;padding:16px 44px;font-family:'Seg=

oe UI',Arial,sans-serif;font-size:19px;font-weight:800;color:#ffffff;text-d=

ecoration:none;">Check mijn besparing →







a90;">Slim besparen,
Lisa van EnergieCheck






0a5;text-align:center;">Besparingen zijn indicatief en afhankelijk van je v=

erbruik, huidige contract en beschikbare tarieven. De EnergieCheck is grati=

s en vrijblijvend.

5df2" style=3D"color:#93a0a5;text-decoration:underline;">Afmelden










ght=3D"1" alt=3D"">

--000000000000bef424065c23da4e--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:25:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MyS-00000000Ow9-1V5I

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:24 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f72.google.com ([209.85.210.72]:56715)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9JfL-00000000Ifu-0Ig2

for doctor@nk.ca;

Wed, 23 Sep 2026 03:53:35 -0600

Received: by mail-ot1-f72.google.com with SMTP id 46e09a7af769-7f4f0a1f4f2so1403738a34.1

for ; Wed, 23 Sep 2026 02:52:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=insjonqueres-cat.20251104.gappssmtp.com; s=20251104; t=1790157152; x=1790761952; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=KKc8Z3P/0dkCvlbIEWzWgRLrkTCKH0LKjm5asiGOawg=;

b=JDRTQoUBRbn19sFY6BqQEIqJQosRS3NYespPsLtINdPSW4d/N1M3LTIy5z6B7IY97e

PMG0fWmAn6N0Kno4wzW6wUDIdXKKTnxJBD95PWlFz0W0Ah6dRKiPWxXiem0XwUjekDI9

QL9jhloytP74ypKAJVOf6ZL4U2tg8QJpIyF9+iPelx9aPUseXCO8/Qyn5Dkt+lgCgf3y

EIzL/1gb3rbaw7mvwvf89IVHzf74HilnT9bXcn9bCgPx+/H9TBgqolX4FUDIV6qb1PPx

ijxTR93U/rktEvfkYht1PPol7HhW9zzuNcPlweuuWkxzMrEbAAJc/vps2EHY/FjfE8dv

9u1Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790157152; x=1790761952;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=KKc8Z3P/0dkCvlbIEWzWgRLrkTCKH0LKjm5asiGOawg=;

b=qu7ktaceAyk3r/+zSK/wTRYbCMQIbct9fpVeUWyaYv5EBBQiWKtGo7CtYYor4QgRkT

kxCoXhc85WSCqEukiOoXEkHk5FXGwW3NZgHls/UiPge8NUimS5AB8u7k7Ytxo67Bl9++

0qSGgqBlp+gW1WOdqYNV9Ix2tCFgdW4/4y9EzK0Db/bFInyIau1aUEjgHNGH2VtrhOa6

0B5Qj4/JrACvSQdGsQnUGQ0Vl4N8kOi5E7ROSptFyozPRGVXUV6v+1xgABRMaJxjcGyI

q1KbR7nG2bXBt5kqdnvfYo8LGdUFcM0FP+w7shLf1eQLYMMmM86o2aCsM70HvfQ4YaXD

OVBQ==

X-Gm-Message-State: AFuF++lS9XK1ayvQ6QMpQP8tM/dtPdXJmCWdFcBpMkJpCyoH38mVumxm

CLq6Z/Wu+RbAuR8q9sZm1BwS2chndKaDhrs+XymTlxq93qUmDvI9hZ9/4o/0uRSSF2EXMJVbwiV

xtU8bwpMWwuZflMQmFNjDuQb9

MIME-Version: 1.0

X-Received: by 2002:a05:6820:208d:b0:6b7:83d6:2939 with SMTP id

006d021491bc7-6d2d262298amr1852404eaf.60.1790157151819; Wed, 23 Sep 2026

02:52:31 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 09:52:31 +0000

Subject: Saldering wordt afgebouwd: check nu of u zonder investering kunt starten

From: Landelijk Energieopslag Loket

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000002064cd065c2371d9"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Landelijk Energieopslag Loket âš Salderingsregeling wordt

vanaf 2027 afgebouwd Thuisbatterij voor opslag van zonne-energie



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

[209.85.210.72 listed in dnsbl.ahbl.org]

[209.85.210.72 listed in dnsbl.ahbl.org]

[209.85.210.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.72 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.72 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.72 listed in wl.mailspike.net]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: businesssnap.xyz (xyz)]

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_NK BODY: Odd Letter Triples with NK

0.1 TW_UW BODY: Odd Letter Triples with UW

0.1 TW_IK BODY: Odd Letter Triples with IK

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_JW BODY: Odd Letter Triples with JW

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Saldering wordt afgebouwd: check nu of u zonder investering kunt starten



--0000000000002064cd065c2371d9

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TGFuZGVsaWprIEVuZXJnaWVvcHNsYWcgTG9rZXQNCg0KDQrimqAgU2FsZGVyaW5nc3JlZ2VsaW5n

IHdvcmR0IHZhbmFmIDIwMjcgYWZnZWJvdXdkDQoNCg0KVGh1aXNiYXR0ZXJpaiB2b29yIG9wc2xh

ZyB2YW4gem9ubmUtZW5lcmdpZQ0KDQoNClNhbGRlcmluZyBzdG9wdCDigJQgem8gaG91ZHQgdSB0

w7NjaCB1dyB6b25uZXN0cm9vbQ0KDQpWb29yIGVsa2Uga1doIGRpZSB1dyBwYW5lbGVuIG92ZXJk

YWcgdGVydWdnZXZlbiwga3Jpamd0IHUgc3Ryw6FrcyBzdGVlZHMgIA0KbWluZGVyIHRlcnVnIOKA

lCB0ZXJ3aWpsIHUgJ3MgYXZvbmRzIG5vZyBkZSB2b2xsZSBwcmlqcyBiZXRhYWx0LiBXaWUgbmll

dHMgIA0KZG9ldCwgZ2VlZnQgaG9uZGVyZGVuIGV1cm8ncyBhYW4gem9ubmVzdHJvb20gdnJpandl

bCBncmF0aXMgd2VnLiBEZSAgDQpvcGxvc3Npbmc6IHNsYSB1dyBlaWdlbiBzdHJvb20gb3AgaW4g

ZWVuIHRodWlzYmF0dGVyaWouDQoNCg0KDQoNCuKckyBHZWJydWlrICdzIGF2b25kcyB1dyBlaWdl

biB6b25uZXN0cm9vbSBpbiBwbGFhdHMgdmFuIGR1cmUgbmV0c3Ryb29tDQoNCuKckyBHZWVuIGFh

bnNjaGFma29zdGVuIHZvb3JhZiB2aWEgZGUgbmlldXdlIGdlbWVlbnRlbGlqa2UgcmVnZWxpbmcN

Cg0K4pyTIEJpaiBzdHJvb211aXR2YWwgYmxpanZlbiB2ZXJsaWNodGluZyBlbiB3aWZpIHdlcmtl

biBkYW5remlqIHV3IGJhY2stdXANCg0K4pyTIEJlcGVya3QgYWFudGFsIHBsZWtrZW4gcGVyIGdl

bWVlbnRlIOKAlCBvcCB2b2xnb3JkZSB2YW4gYWFubWVsZGluZw0KDQoNCg0KDQoNCkNoZWNrIGJl

c2NoaWtiYWFyaGVpZCBpbiB1dyBwb3N0Y29kZSDihpINCg0KDQoNCg0KVnJpamJsaWp2ZW5kIMK3

IDIgbWludXRlbiDCtyBnZWVuIHZlcnBsaWNodGluZ2VuDQoNCg0KDQpCZXNjaGlrYmFhcmhlaWQs

IHZvb3J3YWFyZGVuIGVuIHBsYW5uaW5nIHZlcnNjaGlsbGVuIHBlciBnZW1lZW50ZS4gQWFuIGRl

emUgIA0KZS1tYWlsIGt1bm5lbiBnZWVuIHJlY2h0ZW4gd29yZGVuIG9udGxlZW5kLiBVIG9udHZh

bmd0IGRpdCBiZXJpY2h0IG9tZGF0IHUgIA0KemljaCB2aWEgZWVuIHZhbiBvbnplIHBhcnRuZXJz

IGhlZWZ0IGFhbmdlbWVsZC4NCkFmbWVsZGVuDQoNCg0KDQoNCg==

--0000000000002064cd065c2371d9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background:#eef3ee;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:600px;max-width:600px;background:#fff=

fff;font-family:Arial,Helvetica,sans-serif;border-radius:10px;overflow:hidd=

en;">




















































m/lel-logo-768x58-1.png" alt=3D"Landelijk Energieopslag Loket" width=3D"230=

" style=3D"display:block;max-width:100%;height:auto;border:0;">


px;">


ter-spacing:0.5px;">⚠ Salderingsregeling wordt vanaf 2027 afgebouwd
div>




m/lel-image.jpg" alt=3D"Thuisbatterij voor opslag van zonne-energie" width=

=3D"600" style=3D"display:block;width:100%;max-width:600px;height:auto;bord=

er:0;">




3a1e;font-weight:bold;">Saldering stopt — zo houdt u tóch uw z=

onnestroom




olor:#3c4a3f;">Voor elke kWh die uw panelen overdag teruggeven, krijgt u st=

ráks steeds minder terug — terwijl u 's avonds nog de volle pr=

ijs betaalt. Wie niets doet, geeft honderden euro's aan zonnestroom vrijwel=

gratis weg. De oplossing: sla uw eigen stroom op in een thuisbatte=

rij
.






ellspacing=3D"0" border=3D"0">










ine-height:1.5;">
span>  Gebruik 's avonds uw eigen zonnestroom in plaats van dure =

netstroom

ine-height:1.5;">
span>  Geen aanschafkosten vooraf via de nieuwe =

gemeentelijke regeling

ine-height:1.5;">
span>  Bij stroomuitval blijven verlichting en wifi werken dankzi=

j uw back-up

ine-height:1.5;">
span>  Beperkt aantal plekken per gemeente — op volgorde va=

n aanmelding





" border=3D"0">








dius:6px;">


629" style=3D"display:inline-block;padding:16px 34px;font-family:Arial,Helv=

etica,sans-serif;font-size:16px;font-weight:bold;color:#ffffff;text-decorat=

ion:none;border-radius:6px;">Check beschikbaarheid in uw postcode →
>





Vrijblijven=

d · 2 minuten · geen verplichtingen




f2ee;">


9e;">Beschikbaarheid, voorwaarden en planning verschillen per gemeente. Aan=

deze e-mail kunnen geen rechten worden ontleend. U ontvangt dit bericht om=

dat u zich via een van onze partners heeft aangemeld.

/businesssnap.xyz/t/u/885829da110f9470b629" style=3D"color:#9aa69e;text-dec=

oration:underline;">Afmelden










height=3D"1" alt=3D"">

--0000000000002064cd065c2371d9--

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:25:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MyK-00000000OYR-0znn

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:16 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out21-137.dm.aliyun.com ([115.124.21.137]:40237)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9J9n-00000000FGj-2lga

for root@nk.ca;

Wed, 23 Sep 2026 03:21:04 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.cinclinepower.ltd:alibabak_WebBatch:483342

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.cinclinepower.ltd; s=aliyun-cn-hangzhou;

t=1790155193; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=5V2JnyW85OO3RZ4Hh+5wdnjL0VQhxq4EGwz/k3fswZA=;

b=ApDnX3to/Pxq2qk1FgK9ASIclt8Y5gZXDrXerTWjDZS6bbPknAzWR4c5pxn9kmeOSjssBTFLuXhna8GflRi4BLz8R/RHeyA0S6l3afcJHNt3dUh3M53i2DtlwWaCCe/fSArr/OsVWNbK4tK3uLTNKUD7Yg6u449Hc3KgA11WdFU=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1790155193; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=5V2JnyW85OO3RZ4Hh+5wdnjL0VQhxq4EGwz/k3fswZA=;

b=FTplwNGAf2f478ILNosLKOj2R3xtXdGo9VRQY+5kNtpW7gBQSK93uJeAa8iKA6yK4SPI7Gty7+kWlViSIHMaIVQ2momEoDEX9DVSQ1hujGdDunMg17Jhv+0ipMn+VDEZFw3OphcqdO8VnkQL6QjvJBDl1pNAZFPQZDe5XLWW9oY=

Received: from chitu-hsf(mailfrom:vip@vip.cinclinepower.ltd fp:ma_600000357339456587 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Wed, 23 Sep 2026 17:17:13 +0800

Date: Wed, 23 Sep 2026 17:17:13 +0800

From: "Yonit"

To:

Reply-To:

Message-ID: <2c21849d-7a3f-4d56-b40b-2c33e600d5ba@alibaba.com>

Subject: =?UTF-8?B?RWxlY3RyaWMgVHJhbnNmb3JtZXIgTWFudWZhY3R1cmluZyBTb2x1dGlvbnM=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000357339456588

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir or Madam, I am writing to introduce Qianchuan Electric

as a manufacturer of power and distribution transformers for international

markets.



Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

[115.124.21.137 listed in dnsbl.ahbl.org]

[115.124.21.137 listed in dnsbl.ahbl.org]

[115.124.21.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.124.21.137 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[115.124.21.137 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[115.124.21.137 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?RWxlY3RyaWMgVHJhbnNmb3JtZXIgTWFudWZhY3R1cmluZyBTb2x1dGlvbnM=?=



Dear Sir or Madam,

I =

am writing to introduce Qianchuan Electric as a manufacturer of power and dist=

ribution transformers for international markets.


>Qianchuan provides oil-immersed power transformers up to 220 kV, dry-type tra=

nsformers up to 110 kV, American-style transformers, prefabricated substations=

, and medium- and low-voltage switchgear. Our products are designed for applic=

ations including power transmission and distribution, renewable energy, indust=

rial facilities, substations, and new energy projects.


edEnd">Our approximately 69,000 m=C2=B2 production base is supported by 326 em=

ployees, including 69 R&D personnel, with dedicated manufacturing and test=

ing facilities. We have established a comprehensive quality and certification =

system and have obtained more than 100 qualifications, certifications, and rel=

ated technical credentials.

With integrated capa=

bilities covering product design, core processing, winding, assembly, testing,=

and quality control, Qianchuan can support both standard products and project=

-specific technical requirements. We also have experience supplying power equi=

pment to international markets and working with different project specificatio=

ns and standards.

If your company is sourcing el=

ectric transformers or evaluating new manufacturing partners, we would be plea=

sed to learn about your current product requirements and discuss suitable tran=

sformer solutions.

Best regards,

Yonit

>Qianchuan Electric


ransformer-Manufacturing.jpg" _src=3D"https://i.postimg.cc/4JtQ26S8/Electric-T=

ransformer-Manufacturing.jpg" referrerpolicy=3D"no-referrer"/>



Bitcoin phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:25:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9My5-00000000Ntx-3D9m

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:01 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cpanel07wh.bkk1.cloud.z.com ([163.44.198.52]:48355)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9HyG-000000006gy-1yxd

for root@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 02:05:00 -0600

Received: from [127.0.0.1] (port=48789 helo=i-tree.co.th)

by cpanel07wh.bkk1.cloud.z.com with esmtp (Exim 4.96.2)

(envelope-from )

id 1x9HwO-002mn4-1p

for root@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 15:02:56 +0700

MIME-Version: 1.0

Date: Wed, 23 Sep 2026 15:02:55 +0700

From: Bit Fore

Subject: Your Portfolio

X-Priority: 1

X-MSMail-Priority: High

Importance: High

X-Mailer: MailChimp Mailer

Message-Id:

Content-Type: multipart/alternative; boundary="Part-056811-2535692974141613131"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - cpanel07wh.bkk1.cloud.z.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - i-tree.co.th

X-Get-Message-Sender-Via: cpanel07wh.bkk1.cloud.z.com: mailgid no entry from get_recent_authed_mail_ips_entry

X-Authenticated-Sender: cpanel07wh.bkk1.cloud.z.com:

X-From-Rewrite: unmodified, no actual sender determined from check mail permissions

X-Spam_score: 29.1

X-Spam_score_int: 291

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Shawn,Your investment has been successfully processed.

Your portfolio currently holds 26.2 Bitcoin as requested on www.gullcoin.netHere

are your Access Codes:Customer ID: cte3018Password: pd8049P [...]



Content analysis details: (29.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

[163.44.198.52 listed in dnsbl.ahbl.org]

[163.44.198.52 listed in dnsbl.ahbl.org]

[163.44.198.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: gullcoin.net]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[163.44.198.52 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[163.44.198.52 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

15 GR_DOMAIN_CHIMP1 X-Mailer spammer tool signature (monkey)

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_54 BODY: 5alpha-pock-4alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

2.5 BITCOIN_XPRIO Bitcoin + priority

2.5 AC_FROM_MANY_DOTS Multiple periods in From user name

Subject: {SPAM?} Your Portfolio



--Part-056811-2535692974141613131

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Dear Shawn,Your investment has been successfully processed. Your portfolio =

currently holds 26.2 Bitcoin as requested on www.gullcoin.netHere are your =

Access Codes:Customer ID: cte3018Password: pd8049Please log in to confirm y=

our balance.Best regards,Portfolio Management



--Part-056811-2535692974141613131

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable















Dear Shawn,

Your investment has been successfully processed. Yo=

ur portfolio currently holds 26.2 Bitcoin as requested on

www.gullc=

oin.net

Here are your Access Codes:

Customer ID: cte3018
P=

assword: pd8049

Please log in to confirm your balance.

Best r=

egards,
Portfolio Management










--Part-056811-2535692974141613131--



Customer negative feedback phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 17:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9A4X-000000004sX-42L3

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 17:38:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 17:38:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-253-214-77.smtp-out.sparkpostmail.com ([147.253.214.77]:3089)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x97Zy-000000006zf-2EpE

for sales@nk.ca;

Tue, 22 Sep 2026 14:59:15 -0600

X-MSFBL: gEFcuK6E9LC2Hx8s0LGSUNDe5a90/2YQ9UNNAXZMIBY=|eyJyIjoic2FsZXNAbms

uY2EiLCJ0ZW5hbnRfaWQiOiJzcGMiLCJzdWJhY2NvdW50X2lkIjoiMjIzODkiLCJ

jdXN0b21lcl9pZCI6IjQ1ODAzOCIsIm1lc3NhZ2VfaWQiOiI2YWIzZTVlYmIyNmE

xOWU5NTg3NyJ9

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gramadoviagem.com.br; s=bird-889-0926; t=1790110693;

i=@gramadoviagem.com.br;

bh=v/k4A9gCNThW7hEg5FQWq7clcB6kq7KKeof81KOXUMQ=;

h=To:Content-Type:Date:From:Subject:Message-Id:From:To:Cc:Subject:

Feedback-Id;

b=QnGgMWAOoldJvQ/hZDfjqdlMZ1B1AkuQTRGKdXx3+2QKJvlMCa2gT6kSFzgN6phC2

JTKevMF0efUAhQXgvOA80/Yk/l9ZAL115Y9l1JC7rqRMLy7hnQNB/glZPCA0a3LPpQ

FbBV5bXi+d9lOuZjtc//Kn1dEpt/ZO9s90KQWa9XJ2q9Xsr0/rkQxVfAeNMA4KMokB

dOLvzgh1rjOvtuYOIFrvtsvuT55d3W76RUSX7hTogqCvEjMjmcRhB8qVcNhM431EDU

Y078V4Erjzx/Zp27oUWXYETME2yQhbmK+ngwFgUFlqW6x5v5HOdDFWf+ctK1dgbqvN

F13TR2Z1Y2WNg==

Received: from [10.90.29.137] ([10.90.29.137])

by i-0505b2d270d2200a3.mta1vrest.sd.prd.sparkpost (ecelerity 5.3.0.76429 r(msys-ecelerity:tags/5.3.0.18)) with REST

id 77/8D-02855-5EBE2BA6; Tue, 22 Sep 2026 20:58:13 +0000

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6"

MIME-Version: 1.0

Date: Tue, 22 Sep 2026 20:58:12 +0000

From: "QBO Team"

Subject: A Client Has Raised Concerns About Their Experience

Message-Id: <9cea9a7c-418c-7506-d2a6-9bbe84426fb5@gramadoviagem.com.br>

X-Spam_score: 25.1

X-Spam_score_int: 251

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your customer just left negative feedback Hello, A customer

left negative feedback about your business. They mentioned wait time and

service quality.



Content analysis details: (25.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

[147.253.214.77 listed in dnsbl.ahbl.org]

[147.253.214.77 listed in dnsbl.ahbl.org]

[147.253.214.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: dogwooddvmswwa.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SPARKP1 Received contains spammer id (sparkp)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[147.253.214.77 listed in bl.score.senderscore.com]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} A Client Has Raised Concerns About Their Experience



--_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset="UTF-8"



Your customer just left negative feedback



Hello,



A customer left negative feedback about your business. They mentioned wait time and service quality.



Sign in to QuickBooks to read the feedback and respond ( https://dogwooddvmswwa.com/iioni )



Thank you,

Intuit QuickBooks Team

--_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"







































































Intuit QuickBooks




































 






































Your customer just left negative feedback


































 


Hello,




A customer left negative feedback about your business. They mentioned wait time and service quality.





Sign in to QuickBooks to read the feedback and respond





Thank you,


Intuit QuickBooks Team










 







--_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6--



Etihad vendor registration spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 14:05:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x96jc-000000001Xh-2wRy

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 14:05:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 14:05:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f103.google.com ([209.85.128.103]:49327)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x93nV-00000000A3T-2whF

for root@nk.ca;

Tue, 22 Sep 2026 10:56:58 -0600

Received: by mail-wm1-f103.google.com with SMTP id 5b1f17b1804b1-49e62c717e6so14015685e9.2

for ; Tue, 22 Sep 2026 09:56:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kashkeesh.com; s=google; t=1790096154; x=1790700954; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=YTx6dcGd2G9Q5XLoV3eu85JeLujjHDA17uaS+JWFiSo=;

b=i8aUNdM+25ePxLmjNU/lIkUjtjlIHrt4usUXFZTNZfeOVMCzXq5XPQTz3guf/5VjjY

2ZDaxv1mpffkze9HJGZBBOhfCDe5r23bXDogHMV8QHs+3QMxDY92uvlncXYqcZSns05h

X4+9OucauLZ8SlkPXoLMNg7cRSqoUqFCsL9bQs3lWhPbKNa1E0tauB4PsB8ozSqKllfP

r9J9vTzLwKiL8AEUBTp/an+VsZYnGgHCic7TZRf+tDiauOU8QaAQBMlZOel1oHCPCLjf

t98kKBH8T/5YJFMybpFWcJidJWe/Dej+e9PBQ45mdFLKIy0nktvkqQy0TDb7B/giwrMc

1W5Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790096154; x=1790700954;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=YTx6dcGd2G9Q5XLoV3eu85JeLujjHDA17uaS+JWFiSo=;

b=OzkPn7Z2NQThd3DlxDBvkkJr66Usvpr7u4HabLFcCRzPLVpX5ci9AeUTtvFEcIYXvz

vKdkZVdFA/f+PFbt1OAqbr+74dyi2FAYQ/pcfZ42y3O4EkAeKwmdFUaEKjPeToejR4Sh

QuAl1Exf/NVAbWi4dxrfhRviOAb69XmFokw/LRXa1V0a9yTXH/MrKxVVaQ/morxDS8lE

wohExlyCLfyxN5uc2LgtogVzPx9x3lpmneszukU+24hCPSDmIrYKsxsDgcES1N4GzlCF

ORfCHHt1xr8nsVNO7e1Zk202PW/Ot9CRupr3cSmNIlvgEoeC9q8XxNRDjTbayCSECLpm

mI1w==

X-Gm-Message-State: AFuF++l7tt2Met0806zBb4NPYJx73D6XLUSS+zSxwJUzRyulWfl99uGS

T+kPjtg0/puqxixVREYu4eDSo6oH68s+OxXt3qi1uE5+SnVzlhr7AM5umtXFbQsJomrp9fBniBt

s02TvlhkJOm/un8QzCK0Dq+y3cL4PAUPNw1NXQoVbJ/AjZE4=

X-Gm-Gg: AYBFou2kIY7ml1tytJRzztVu4iTZxx5SvulCCvOxNhxT8PG4bxBD/plUZH9eZXC3GXN

06Ent6KtucGpoa7q2OgZTizNTgwFBu+SI41Ytn5nAYPrvPohS2fWUw6p2L8Y754XZQ0qpmqdgft

SDCveUyf2l3CKdpXeGPI4mZAIMAaf7rdXukwLpBHsK3U2G+DjJ1Dchqdvt0qKIN2JNrt0vHs6hF

NziXGHp0u75Jb6CZS6QWkb8pJWbENPQV5MBOimI3iW9ri6WeXDLEFcbM4TZOGOL3r8AJvwu/BM3

tG2lgJnGAPXQ4udLQ025wuYkFwYyzCc20qswL16g9U8MX2Xbw9J2YTplk1mtnkMnsVToK5WEUX+

DDhPgt+OY

X-Received: by 2002:a05:600c:c1c8:10b0:49e:81a7:9fbc with SMTP id 5b1f17b1804b1-49fc574aacbmr152445755e9.24.1790096154265;

Tue, 22 Sep 2026 09:55:54 -0700 (PDT)

Received: from kashkeesh.com ([77.83.39.2])

by smtp-relay.gmail.com with ESMTPS id 5b1f17b1804b1-49fde13bbc4sm642385e9.16.2026.09.22.09.55.54

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 22 Sep 2026 09:55:54 -0700 (PDT)

X-Relaying-Domain: kashkeesh.com

Reply-To: registrations@etihadaviation-ae.com

From: ''Etihad Aviation Group PJSC''

To: root@nk.ca

Subject: Invitation: Etihad Vendor Registration Program

Date: 22 Sep 2026 09:55:54 -0700

Message-ID: <20260922095554.57B7162FB0305B47@kashkeesh.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Etihad Aviation Group - Vendor Opportunity ✈️ Etihad

Aviation Group



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.103 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.103 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.103 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[77.83.39.2 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[77.83.39.2 listed in zen.spamhaus.org]

Subject: {SPAM?} Invitation: Etihad Vendor Registration Program












=3D1.0">

Etihad Aviation Group - Vendor Opportunity






padding: 0;

background-color: #f4f4f4;

font-family: Arial, Helvetica, sans-serif">




margin: 20px auto;

background-color: #ffffff;

border-radius: 8px;

box-shadow: 0 4px 12px rgba(0,0,0,0.1);

overflow: hidden" class=3D"email-container">






padding: 20px 30px;

text-align: center" class=3D"header">


font-size: 22px;

margin: 0;

font-weight: 300;

letter-spacing: 1px">✈️ Etihad Aviation Group

=










color: #333333;

line-height: 1.6" class=3D"content">






margin-bottom: 20px" class=3D"greeting">

Dear


=3D"0" style=3D"display:inline-block; vertical-align:middle;">








8px; border-radius:3px; font-weight:bold; color:#1a3c6e; font-size:15px;">

root

,







Unlock a world of opportun=

ity with Etihad Aviation Group.








We're inviting select companies to join our
=3D"color: #1a3c6e">Vendor Registration Program
— your gatew=

ay to future procurement and supply chain partnerships with a global aviati=

on leader.






border-left: 4px solid #1a3c6e;

padding: 15px 20px;

margin: 22px 0;

border-radius: 4px" class=3D"cta-box">



Interested? Simply reply to this email=

=2E We'll send you the Vendor Questionnaire and Ex=

pression of Interest (EOI)
forms to get started.









Let's explore how we can grow together. We look forward to =

hearing from you.








padding-top: 20px;

border-top: 1px solid #eaeaea" class=3D"signature">

Yours sincerely,




font-size: 16px;

color: #1a3c6e" class=3D"name">Engr. Ibrahim Khalid



color: #555" class=3D"title">Senior Vice President – Supp=

ly Chain Management



color: #555;

margin-top: 2px" class=3D"company">Etihad Aviation Group PJSC
div>


color: #888;

margin-top: 2px" class=3D"location">Dubai, United Arab Emirates=












background-color: #1a3c6e;

color: #ffffff;

padding: 12px 28px;

border-radius: 4px;

text-decoration: none;

font-weight: bold;

font-size: 15px;

margin-top: 5px" href=3D"mailto:registrations@etihadaviation-ae=

=2Ecom?subject=3DVendor%20Registration%20Interest%20-%20[{Email}]&body=

=3DDear%20Etihad%20Aviation%20Group%20Team%2C%0D%0A%0D%0AI%20am%20writing%2=

0to%20express%20our%20organization's%20interest%20in%20joining%20the%20Etih=

ad%20Aviation%20Group%20Vendor%20Registration%20Program.%0D%0A%0D%0APlease%=

20send%20us%20the%20Vendor%20Questionnaire%20and%20Expression%20of%20Intere=

st%20(EOI)%20documents%20for%20completion%20and%20review.%0D%0A%0D%0ACompan=

y%20Name%3A%20%0D%0AContact%20Person%3A%20%0D%0APhone%20Number%3A%20%0D%0AE=

mail%20Address%3A%20[{Email}]%0D%0A%0D%0AWe%20look%20forward%20to%20the%20o=

pportunity%20to%20work%20with%20your%20organization.%0D%0A%0D%0ABest%20rega=

rds%2C%0D%0A%5BYour%20Full%20Name%5D%0D%0A%5BYour%20Job%20Title%5D%0D%0A%5B=

Your%20Company%5D" class=3D"btn" target=3D"_blank">

�� Reply to Express Interest








13px; color: #888;">


; border-radius: 3px;">

⚡ Reply directly to: registrations@etihad=

aviation-ae.com















padding: 15px 30px;

text-align: center;

font-size: 12px;

color: #999;

border-top: 1px solid #eaeaea" class=3D"footer">

© 2026 Etihad Aviation Group PJSC • All rights reserv=

ed.




This message was sent to


=3D"0" style=3D"display:inline-block; vertical-align:middle;">








8px; border-radius:3px; font-weight:bold; color:#1a3c6e; font-size:11px;">

root



and contains confidential information.















Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 14:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x96jU-000000001W6-0162

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 14:04:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 14:04:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ns.dccomp.cz ([82.142.82.201]:40872 helo=server2.dccomp.cz)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x93bK-000000008ts-1VCx

for sales@nk.ca;

Tue, 22 Sep 2026 10:44:32 -0600

Received: from mailserver.dccomp.cz (unknown [10.10.11.25])

by server2.dccomp.cz (Postfix) with ESMTP id 0392E802536

for ; Tue, 22 Sep 2026 18:43:18 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.11.0 server2.dccomp.cz 0392E802536

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=stredniskoladrtinova.cz; s=default; t=1790095398;

bh=rqSeeQY2fGMU1mZgtnWFiMCZQDy+J/uELnYijc/QtkI=;

h=From:Date:Subject:To:Reply-To:From;

b=rzTUOcrGQsLZh7M9gWmPiuBvf+whjwiBwOGIB1gWwtHVPMVhi8LQ4aJbjVmFGcD3E

kHPZFgtHuM1UEDFVGrDW0/A3rwg7/v0CRkUsTKEiuffiRY0WM9Bd8+5SFTGr6780xv

ln+bHoy3s6+leZKk9aEkKeCApTl7qrvcwdrf7NnE=

Received: from 172 (unknown [172.93.220.36])

by mailserver.dccomp.cz (Postfix) with ESMTPSA id 786285C0071

for ; Tue, 22 Sep 2026 18:43:17 +0200 (CEST)

From: Richard Cooks

Date: Tue, 22 Sep 2026 18:43:17 +0200

Subject: Heritage Fund Correspondence

Message-Id:

Priority: urgent

To: sales@nk.ca

Reply-To: richardcooks02@gmail.com

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day: My name is Richards Cooks, and I am writing from

the United Kingdom in connection with financial matters relating to your

family heritage.



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

[172.93.220.36 listed in dnsbl.ahbl.org]

[172.93.220.36 listed in dnsbl.ahbl.org]

[172.93.220.36 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[172.93.220.36 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[82.142.82.201 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[richardcooks02(at)gmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Heritage Fund Correspondence



Good day:



My name is Richards Cooks, and I am writing from the United Kingdom in connection with financial matters relating to your family heritage.



To ensure that this correspondence is directed to the correct recipient, I kindly request that you confirm your full name together with your current residential address and contact information.



I would be grateful to receive your response at your earliest convenience.



Thank you in advance for your cooperation.



Yours sincerely,



Richards Cooks