X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 25 Oct 2026 12:47:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xL3F8-00000000PxB-2W4S
for dave@doctor.nl2k.ab.ca;
Sun, 25 Oct 2026 12:46:54 -0600
Resent-From: The Doctor
Resent-Date: Sun, 25 Oct 2026 12:46:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj2-f10.google.com ([74.125.227.138]:38542)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKzYB-000000004QX-1CW7
for doctor@nk.ca;
Sun, 25 Oct 2026 08:50:21 -0600
Received: by mail-pj2-f10.google.com with SMTP id d9443c01a7336-2df921c1d0eso9489715ad.1
for ; Sun, 25 Oct 2026 07:49:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=horyna-cyou.20251104.gappssmtp.com; s=20251104; t=1792939760; x=1793544560; darn=nk.ca;
h=content-type:to:from:subject:date:message-id:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=QdqFM6ZDdtyPcpSiprzAQBWbdwCJS55b6qXXHMZNXBA=;
b=t0fiNbsfy5NUwxjJh9IbsFHeWyQFCeY8WFDiENShkkl3AXKkZFDrZrtx+363jTmNCn
bS2wIKfIvXLYEeXYrMhVNfKix7FCsmjSbWf4+JlKHpmCVIgv0JHFqVNEV8MMkrk+fhTl
cceBNPq5BXWGvCPC9YDw73NyJHunQV96ga4YEbyajt+vH3hAzgy228RYKvV7orK1lnZS
WqCiM35sBtvizFuPJmQF/XG9ZkDvmDolMsOuWJDOQdoBY8NvKRIXSX2DleusC1ptkyVz
WFjLEJxyvxPi6hdA/4X0jw+WTaQdPtRzbXEYO6mnknSvWojbm2bJC2TiQuw+S5oapOkD
5MyA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1792939760; x=1793544560;
h=content-type:to:from:subject:date:message-id:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=QdqFM6ZDdtyPcpSiprzAQBWbdwCJS55b6qXXHMZNXBA=;
b=sTTgNfEjSxt8kYHefAJn+uVQoufNeCFUlRCruLMGNm2hJ93j2IYXHuXFzIiNF2EuVV
fsfHVW/EsyOGGNy4iDE1FVUJUCjfnAk5gjhvQivifpzCW56y6s6fiAfBNWEACiXc8iB/
6p3NV7wov5foFL6/crKeNhN051XZ/asrKvVjEMIlEmdqGhAa/ACzsEUflMHT1dj2C4LR
I/LvQUznoroE/m9SdWV+gQNXoVr/aS43FAbxs13nRAwHdZikxnUFdj+MRN0yH1NvJrhp
rWUcORot7GAqCMfbQskY+VgFl8CatrZlbnMdKNEmJzIkkunsalkN+msUyqnE44hUjVZe
SiUA==
X-Gm-Message-State: AFq9FYIe3TvL9758dCh7+BnTWKCP7Fw7hkMd0FUs1a2YxFRDIP2cNzsR
NQLVE1BZTmzEoy+Rmg7UPx7fZA5cdXFp1MVPN2CUu+48bX91X9br0efxuoDnb/Z0Eg9r5r3w8qp
rV8Gm/qvsskovY1CLWBiBr7+3
MIME-Version: 1.0
X-Received: by 2002:a17:902:d481:b0:2e9:2a0e:aaaf with SMTP id
d9443c01a7336-2ea9c8bf120mr36871845ad.57.1792939759658; Sun, 25 Oct 2026
07:49:19 -0700 (PDT)
Message-ID:
Date: Sun, 25 Oct 2026 14:49:19 +0000
Subject: Zonnepanelen in 2026: terugverdientijd onder de 5 jaar
From: Zonnepanelen Advies NL
To: doctor@nk.ca
Content-Type: multipart/alternative; boundary="0000000000007a781d065eab511c"
X-Spam_score: 5.9
X-Spam_score_int: 59
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Zonnepanelen Advies Zonnepanelen zijn dit jaar goedkoper dan
ooit. De wachtlijsten zijn weg. De panelenprijzen zijn in twee jaar met meer
dan 40% gedaald. Tegelijk is de salderingsregeling verlengd: u levert stroom
terug aan het net en betaalt minder. Resultaat: een gemiddeld huishouden
verdi [...]
Content analysis details: (5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.227.138 listed in will-spam-for-food.eu.org]
[74.125.227.138 listed in will-spam-for-food.eu.org]
[74.125.227.138 listed in will-spam-for-food.eu.org]
[74.125.227.138 listed in will-spam-for-food.eu.org]
[74.125.227.138 listed in will-spam-for-food.eu.org]
[74.125.227.138 listed in will-spam-for-food.eu.org]
[74.125.227.138 listed in will-spam-for-food.eu.org]
[74.125.227.138 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.227.138 listed in dnsbl.ahbl.org]
[74.125.227.138 listed in dnsbl.ahbl.org]
[74.125.227.138 listed in dnsbl.ahbl.org]
[74.125.227.138 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.227.138 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.227.138 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.227.138 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.227.138 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.227.138 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.138 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.138 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.1 TW_UG BODY: Odd Letter Triples with UG
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
Subject: {SPAM?} Zonnepanelen in 2026: terugverdientijd onder de 5 jaar
--0000000000007a781d065eab511c
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Zonnepanelen Advies
Zonnepanelen zijn dit jaar goedkoper dan ooit. De wachtlijsten zijn weg.
De panelenprijzen zijn in twee jaar met meer dan 40% gedaald. Tegelijk is
de salderingsregeling verlengd: u levert stroom terug aan het net en
betaalt minder. Resultaat: een gemiddeld huishouden verdient de investering
in minder dan 5 jaar terug.
Daarna levert elk paneel 20 tot 25 jaar lang gratis stroom. Op een
gemiddeld dak bespaart u 600 tot 1.200 euro per jaar.
-40%
prijsdaling
5 jr
terugverdientijd
25 jr
levensduur
Bereken mijn besparing
U ontvangt dit bericht via Zonnepanelen Advies NL. Geen interesse meer?
Uitschrijven of permanent afmelden.
--0000000000007a781d065eab511c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
0">
Zonnepanelen
l,Helvetica,sans-serif;">
=3D"0" style=3D"background-color:#f7f9f4;">
"0" style=3D"max-width:560px;width:100%;background-color:#ffffff;border-rad=
ius:4px;">
|
|
t:0;">
ransform:uppercase;font-weight:bold;">Zonnepanelen Advies
|
:24px;line-height:1.3;color:#1a1a1a;font-weight:normal;">
Zonnepanelen zijn dit jaar goedkoper dan ooit. De wachtlijsten zijn weg.
|
De panelenprijzen zijn in twee jaar met meer dan 40% gedaald. Tegelijk is d=
e salderingsregeling verlengd: u levert stroom terug aan het net en betaalt=
minder. Resultaat: een gemiddeld huishouden verdient de investering in min=
der dan 5 jaar terug.
Daarna levert elk paneel 20 tot 25 jaar lang gratis stroom. Op een gemiddel=
d dak bespaart u 600 tot 1.200 euro per jaar.
|
=3D"0">
|
|
ter;border-radius:4px 0 0 4px;">
-40%
p>
prijsdaling
|
ter;border-left:2px solid #ffffff;border-right:2px solid #ffffff;">
5 jr
p>
terugverdientijd<=
/p>
|
ter;border-radius:0 4px 4px 0;">
25 jr<=
/p>
levensduur
y:inline-block;background-color:#2d6a1e;color:#ffffff;font-size:15px;font-w=
eight:bold;text-decoration:none;padding:14px 36px;border-radius:4px;">Berek=
en mijn besparing
|
U ontvangt dit bericht via Zonnepanelen Advies NL. Geen interesse meer?
href=3D"https://debrot.digital#t/u/6a22fa0b58764b61642f" style=3D"color:#99=
9999;">Uitschrijven of
764b61642f" style=3D"color:#999999;">permanent afmelden.
|
![](3D"https://debrot.digital/t/o/6a22fa0b58764b61642f")
ight=3D"1" alt=3D"">
--0000000000007a781d065eab511c--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 25 Oct 2026 05:14:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKwAj-00000000LNH-111b
for dave@doctor.nl2k.ab.ca;
Sun, 25 Oct 2026 05:13:53 -0600
Resent-From: The Doctor
Resent-Date: Sun, 25 Oct 2026 05:13:53 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f72.google.com ([209.85.216.72]:38373)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKrlr-00000000BwQ-0TBH
for doctor@nk.ca;
Sun, 25 Oct 2026 00:32:01 -0600
Received: by mail-pj1-f72.google.com with SMTP id 98e67ed59e1d1-3ab27c28489so737635a91.1
for ; Sat, 24 Oct 2026 23:31:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=iernestlluch.cat; s=google; t=1792909854; x=1793514654; darn=nk.ca;
h=content-type:to:from:subject:date:message-id:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=0JBdxN5qjxpet0dQAPlb9LLrJYnKfX1YrJCmLKxeS7E=;
b=UfWuAr6/JMiM4kxUcGWo0iij7Ie+Y421NjvzlfrUVf7R7aVmQgsxqVpwbH9ZfosFvh
EvYLNWZbj+YlqvZuqQ7OszQS1fB4Cdtm+JTYX9ze1iUnu6qEL+8lLB7BB2SII5FhLO5X
De6t7ir4kvzzULxd1jAMKqyPpeXPLQWmnRsUJB8UbUnuQYGH5A+IIZqZWeTqSnUk/bOF
oGYvZsJ48ThTWL+qFyWVfZYgs0tc82EAUQ+2qaDMpWtaJhJzs87Tcan53oU6JWkJUxTM
Sdz70IfsGhdJmYPdmgIV+PPUAfK+SfiPhywvNuaBtTycyHHqZk5eOGDGi6zbd1v7Yd/y
mGqQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1792909854; x=1793514654;
h=content-type:to:from:subject:date:message-id:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=0JBdxN5qjxpet0dQAPlb9LLrJYnKfX1YrJCmLKxeS7E=;
b=25pGR6InsIdfMJp7bVlilmEWiVOtFuyVqQmlJ6rv1yc0WuOFskBZHvW6S5VTZ8GKeN
83e1VEn/oTyLt4Gncs1nAaBeYxPyP3T6Q3BijiSmyZaeC13TEvqRFx4vOg2Sk6FuAKdY
iNt3iI+E8+ES6EHmOoAc3RgQe9xUE3jITrCigXZbIxpq6U4bkhhmVqWnxALkPTlGEW2k
llHGrcKitovOnDK8aWubPv+lysJVfs9b6DOrg5UGD7jB6m9hxv8RAwiVmUi8CBb6pPhz
Yz1j1797o1GxUWHr5k3iK/umqeNAUIoIWJ+9cWMFdgFZcot7beV574SThK1vc0x2L98j
192w==
X-Gm-Message-State: AFq9FYJ1PkSvcgOpRx1duAF2Nc+iQxRfJS/+nSPn6OBQWy46S7hgRZJh
jpyDZPhb02uBg8UE0BVmUDlG8wyi8vfhcXgk9xHHr1klcKEzCMz6i8/nOQYPjGXZEe+plADON2m
oH12uy7wcJVAc5zw3pSa4UtlI
MIME-Version: 1.0
X-Received: by 2002:a17:90b:1809:b0:3a0:c162:51af with SMTP id
98e67ed59e1d1-3ade9481ef8mr5454767a91.0.1792909854446; Sat, 24 Oct 2026
23:30:54 -0700 (PDT)
Message-ID:
Date: Sun, 25 Oct 2026 06:30:54 +0000
Subject: Uw oude bed is tot 1.500 euro waard bij inruil
From: Somnora Inruilactie
To: doctor@nk.ca
Content-Type: multipart/alternative; boundary="000000000000fd1c3e065ea45a2d"
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Somnora Inruilactie Uw oude bed inruilen voor een nieuw slaapsysteem?
Veel Nederlanders slapen op een matras die al lang vervangen had moeten worden.
Rugklachten, onrustige nachten en vermoeidheid overdag zijn het gevolg.
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.216.72 listed in will-spam-for-food.eu.org]
[209.85.216.72 listed in will-spam-for-food.eu.org]
[209.85.216.72 listed in will-spam-for-food.eu.org]
[209.85.216.72 listed in will-spam-for-food.eu.org]
[209.85.216.72 listed in will-spam-for-food.eu.org]
[209.85.216.72 listed in will-spam-for-food.eu.org]
[209.85.216.72 listed in will-spam-for-food.eu.org]
[209.85.216.72 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.216.72 listed in dnsbl.ahbl.org]
[209.85.216.72 listed in dnsbl.ahbl.org]
[209.85.216.72 listed in dnsbl.ahbl.org]
[209.85.216.72 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.216.72 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.216.72 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.216.72 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.216.72 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: craftbag.click]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.72 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: craftbag.click (click)]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.72 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.216.72 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} Uw oude bed is tot 1.500 euro waard bij inruil
--000000000000fd1c3e065ea45a2d
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Somnora Inruilactie
Uw oude bed inruilen voor een nieuw slaapsysteem?
Veel Nederlanders slapen op een matras die al lang vervangen had moeten
worden. Rugklachten, onrustige nachten en vermoeidheid overdag zijn het
gevolg.
Somnora biedt nu een inruilregeling waarmee uw oude bed tot 1.500 euro
waard is als korting op een nieuw slaapsysteem.
Tot 1.500,-
inruilkorting + 180 nachten slaapgarantie
Gratis ophaalservice Uw oude bed wordt kosteloos opgehaald
180 nachten proberen Niet tevreden? Volledige terugbetaling
Gratis thuisbezorging Inclusief installatie in uw slaapkamer
Bekijk mijn inruilwaarde
U ontvangt dit bericht via Somnora Inruilactie. Geen interesse meer?
Uitschrijven of permanent afmelden.
--000000000000fd1c3e065ea45a2d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
0">
Somnora
gia,'Times New Roman',serif;">
=3D"0" style=3D"background-color:#f7f3ef;">
"0" style=3D"max-width:560px;width:100%;background-color:#ffffff;border-rad=
ius:6px;">
|
-spacing:2px;color:#d4a574;text-transform:uppercase;">Somnora Inruilactie
span>
|
ght:normal;">
Uw oude bed inruilen voor een nieuw slaapsysteem?
|
Veel Nederlanders slapen op een matras die al lang vervangen had moeten wor=
den. Rugklachten, onrustige nachten en vermoeidheid overdag zijn het gevolg=
.
Somnora biedt nu een inruilregeling waarmee uw oude bed tot 1.500 euro waar=
d is als korting op een nieuw slaapsysteem.
|
=3D"0" style=3D"background-color:#faf6f2;border-radius:4px;">
|
:32px;font-weight:bold;color:#2c1810;">Tot 1.500,-
inruilkorting + 180 nac=
hten slaapgarantie
|
=3D"0">
|
Gratis ophaa=
lservice
=
Uw oude bed wordt kosteloos opgehaald
|
180 nachten =
proberen
=
Niet tevreden? Volledige terugbetaling
|
Gratis thuis=
bezorging
=
Inclusief installatie in uw slaapkamer
|
y:inline-block;background-color:#2c1810;color:#ffffff;font-family:Arial,Hel=
vetica,sans-serif;font-size:15px;font-weight:bold;text-decoration:none;padd=
ing:14px 36px;border-radius:4px;">Bekijk mijn inruilwaarde
|
|
0 6px 6px;">
line-height:1.6;color:#999999;">
U ontvangt dit bericht via Somnora Inruilactie. Geen interesse meer?
f=3D"https://craftbag.click#t/u/c9b79a5fca43f2cd5102" style=3D"color:#99999=
9;">Uitschrijven of
2cd5102" style=3D"color:#999999;">permanent afmelden.
![](3D"https://craftbag.click/t/o/c9b79a5fca43f2cd5102")
ight=3D"1" alt=3D"">
--000000000000fd1c3e065ea45a2d--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 25 Oct 2026 05:11:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKw8b-00000000FUg-26yS
for dave@doctor.nl2k.ab.ca;
Sun, 25 Oct 2026 05:11:41 -0600
Resent-From: The Doctor
Resent-Date: Sun, 25 Oct 2026 05:11:41 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-proxy49134.mail.163.com ([45.254.49.134]:1362)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKs5U-00000000DmN-0nDl
for doctor@nl2k.ab.ca;
Sun, 25 Oct 2026 00:52:15 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com;
s=s110527; h=Date:From:To:Subject:Content-Type:MIME-Version:
Message-ID; bh=s4unlsvETmlwa6lWqXf88wxWWHg+g5Po5N+ROiagKU4=; b=C
T8Fz+PUmfiyyfY4wc4sv97JPkbyrgC4QbkjkYB4Ewxn1BOR4Q/KsOfn31jsDlbhb
fM+jyGRLO0zuNbzY0OOWNNUTHvC2lydQ/RxqJiDdvyCaw4OfjEcWqRVs+AwFDipY
FC6Te/PZst5WoJ/QnZu6Qq3kIIgDgi5N8huKJWYYks=
Received: from chinesesupplierlee$163.com (
[240e:388:9939:4301:1121:41ac:96e8:5e5a] ) by ajax-webmail-wmsvr-40-110
(Coremail) ; Sun, 25 Oct 2026 08:21:49 +0800 (CST)
X-Originating-IP: [240e:388:9939:4301:1121:41ac:96e8:5e5a]
Date: Sun, 25 Oct 2026 08:21:49 +0800 (CST)
From: "Mr Lee"
To: doctor@nl2k.ab.ca
Subject: We are seeking customers who are committed to only a long-term
collaboration, Would you be interested ?
X-Priority: 3
X-Mailer: Coremail Webmail Server Version 2023.4-cmXT build
20260511(2e539873) Copyright (c) 2002-2026 www.mailtech.cn 163com
Disposition-Notification-To: chinesesupplierlee@163.com
X-CM-CTRLMSGS: 0fN1unBsdXM9MTc5Mjg4NzcwOTUxMV83MTYzNDhhYWRhNjhjNzFkMjhhMDQ3N
GYzMDgyN2RmZQ==
X-NTES-SC: AL_Qu2SAPSTuE8r7yaYbOkfmUYRjuc7UMK0uP0j2odWPpt4jCfp/hwZRllFHlT87PikLg+pgDmdXAVf9/ZGe7ZIf5o0gnxaocTa2gVYVaodJ2159w==
Content-Type: multipart/alternative;
boundary="----=_Part_1778_1724119065.1792887709619"
MIME-Version: 1.0
Message-ID:
X-Coremail-Locale: zh_CN
X-CM-TRANSID:bigvCgD3_16dS91qm59fAA--.3583W
X-CM-SenderInfo: xfkl0vpvhv31psolv2xohhqiywtou0bp/xtbC6h0Mr2rdS512rQAA
3u
X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU==
X-Spam_score: 13.5
X-Spam_score_int: 135
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi there, We are a Chinese garment Manufacturer, We operate
our own factory. The only purpose of writing you this lengthy letter is to
provide you with more about our business and how we wish to collaborate with
you. Should you be in the same business field, please continue re [...]
Content analysis details: (13.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[45.254.49.134 listed in dnsbl.ahbl.org]
[45.254.49.134 listed in dnsbl.ahbl.org]
[45.254.49.134 listed in dnsbl.ahbl.org]
[45.254.49.134 listed in dnsbl.ahbl.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[dnsbl.ahbl.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[dnsbl.ahbl.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[dnsbl.ahbl.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[45.254.49.134 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[45.254.49.134 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[45.254.49.134 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[45.254.49.134 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[zen.spamhaus.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[45.254.49.134 listed in bl.score.senderscore.com]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[will-spam-for-food.eu.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[will-spam-for-food.eu.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[will-spam-for-food.eu.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[will-spam-for-food.eu.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[will-spam-for-food.eu.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[will-spam-for-food.eu.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[will-spam-for-food.eu.org]
[240e:388:9939:4301:1121:41ac:96e8:5e5a listed in]
[will-spam-for-food.eu.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[chinesesupplierlee(at)163.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
1.0 FREEMAIL_REPLY From and body contain different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
Subject: {SPAM?} We are seeking customers who are committed to only a long-term
collaboration, Would you be interested ?
Hi there,
We are a Chinese garment Manufacturer, We operate our own factory.
The only purpose of writing you this lengthy letter is to provide you with more about our business and how we wish to
collaborate with you. Should you be in the same business field, please continue reading, I believe it's a great opportunity
for us to become acquainted. However, if not, please feel free to delete this email directly or inform me so that I can
remove your email from our mailing list.
The products we manufacture include:
T-shirts/Polos, Dress shirts, Hoodies, Sweat shirts, Pants/ Trousers, Coats & Jackets, Blazers, Dresses, Skirts,
Uniforms, Nurse Scrubs, Work wear, Safety wear, etc.
We also supply fabrics, scarves/Shawls, beanies, Caps,women's bags, sweaters, etc., but these are outsourced.
Regarding myself: I am Mr. Lee, the sales manager. I am known for my quick temper. I anticipate prompt responses from
my customers and, in turn, I ensure that I never keep them waiting. I understand that when you email me for any matter,
you would also desire a swift response. I will not let you wait; I always respond to my customers' emails promptly. Even when
I am very busy, I will send a brief message to confirm receipt of your email and inform you of when I will reply. That is the way
I communicate with my customers and everyone else.
In addition, I usually reply your inquiries with my work email, if you emailed me but didn't get my response in 1 day, Please check
your junk box, my email might be there because I will always answer your emails promptly no matter it's weekends or holidays.
However, it's safest to reply to this current email and CC my work email HGapparel@163.com the same time, by doing this, I think
I will never miss your emails.
We are quite different from other Chinese suppliers. After much interaction with me. you will realize how I treat my customers,
how we cooperate on my end and how I consider matters from your perspective. I know clearly what my customers expect from
us. I don't think other suppliers can do the same as I do. I prefer a long-term business partnership even if the profit is not
substantial. We aspire to be not only your supplier but also a reliable partner. Are you interested in collaborating with someone
like me ?
If you are genuinely seeking a trusted supplier who can offer the best support for your business, we assure you that you have
found the right one you can rely on. It is us. If you are interested, I suggest we start with extensive communication, which will
help us understand each other better, deepen our impressions, gradually develop a good relationship, and lay the groundwork for
our future collaboration. It is too late to find a reliable supplier when you truly need one. Therefore, upon receiving my email, I
would be very grateful for a response. Keeping silence will block the way to knowing each other, does that make sense ?
I understand you may hesitate considering moving to a new factory. it's not an easy decision, with so many uncertainties,
especially before you know the new suppliers quite well. I understand this very much. If you are now satisfied with your current
suppliers, I sincerely hope you can maintain the business relationship indefinitely. ONLY WHEN you are dissatisfied with them
and you need to find a new, better supplier or wish to have an additional one as a backup. Please feel free to contact us for more
info. I firmly believe you'll enjoy doing business with us, I am extremely confident.
We eagerly look forward to the opportunity to work with you. If possible, we welcome you to visit our factory in person.
What we value most is just a long-term business relationship not a quick order or big orders.
By the way, our work email is HGapparel@163.com, it's mainly used for handling all business-related correspondences.
It's likely to be useful to you, so please keep it.
I'm fortunate that you've made it to the end of my long email, you are in luck !
Your prompt response would be greatly appreciated.
Thank you
Mr. lee
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path: <>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 19:39:59 -0600
Received: from [130.49.219.81] (port=49265 helo=stonehaven.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xKnCt-000000009cW-1Njv
for dave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 19:39:33 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=doctor.nl2k.ab.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=dave@doctor.nl2k.ab.ca;
bh=t5Mte3Q0WUeWJ4PoiuRWPUpGxAw=;
b=FF7P7q9ZGrZr9Ndy/O4jSuWkR6cCn4iVsoG+ZtTcemPC2yeG2/ShAr+trPC7Li7y6zk42bQgeUb2
+/ndJ5p5MfUoGTyZRRmsb4Gw/z540ZI6S9oLn45w66vRDVQ+FWFws23xdvJ19Q1tMzXgzJvsxZc7
z2GNqWt+Xysa5CWNEQk=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=doctor.nl2k.ab.ca;
b=Y33tym69sct4MkmWbO5EcAGZnR4OFpFwZimyoZhBT5pvl3YHXadxkwbIkYeqCkorKwit1u8dvbga
in6b6D2KToOMqRDhq3/riRYXH5hVtc8QnutTwUqzvgehFg847R1ASafe2n+VXeNaQnvo9/LWhCGj
9F3twUlJFjku855Teg0=;
Date: 10-25-2026
From: McAfee Protection
To: dave@doctor.nl2k.ab.ca
Cc: dave@doctor.nl2k.ab.ca
Subject: Your antivirus protection has expired!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Spam_score: 14.9
X-Spam_score_int: 149
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: McAfee Subscription Expired McAfeeâ„¢
Content analysis details: (14.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: keymart.net]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: keymart.net]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: keymart.net]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: keymart.net]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[130.49.219.81 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
Subject: {SPAM?} Your antivirus protection has expired!
X-Antivirus: AVG (VPS 261024-6, 10/24/2026), Inbound message
X-Antivirus-Status: Clean
McAfee Subscription Expired
Your McAfee Security subscription has expired!
Your McAfee subscription expired on Oct 20, 2026.
After the expiry date Your Device will become susceptible to many different virus threats.
Your Device might be unprotected, it can be exposed to viruses and other malware...
You are eligible for discount: 62% 1yr Renewal Discount
Offer will expire at: 10-27-2026 23:59
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path: <>
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 19:39:59 -0600
Received: from [130.49.219.81] (port=52903 helo=stonehaven.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xKnD6-000000009cX-36AE
for dave@nl2k.ab.ca;
Sat, 24 Oct 2026 19:39:42 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=dave@nl2k.ab.ca;
bh=CxlGzw0w27nL3mSd69RGPnqOuNQ=;
b=Jpz2I6pPPh/7BCUt7NihOhDXzQrc8oe0RLu4Iu2t5owVWhhUcSKtWypr7xSBi0raLRzU7a98PvRV
ffNe/nty0XYQK1NEQq+wk7boi81sXr3YkjpEFTeITTHy/YQPo5jCgFqyd+uznR6DEP30Z/UqOP3Z
UTdj+ZsI33q3WM1Lj8M=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;
b=bvsD+Llwi95KIm11fFvU1UIGVnQYHlJpmPpFjZdfnh0ERIotpsgvdpNIBNlNTva91P0Ewk/S38zs
BLQSf7bB+wlny5+dQRwx5DUJ7fSvwZMpfIgVhsuGdXZrNBstkBKU/ETg+HpGowRhYfrxQ072oHi8
utlKUJs+2jFjB9viS4E=;
Date: 10-25-2026
From: McAfee Protection
To: dave@nl2k.ab.ca
Cc: dave@nl2k.ab.ca
Subject: Your antivirus protection has expired!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Spam_score: 14.9
X-Spam_score_int: 149
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: McAfee Subscription Expired McAfeeâ„¢
Content analysis details: (14.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[130.49.219.81 listed in bl.score.senderscore.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: keymart.net]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: keymart.net]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: keymart.net]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: keymart.net]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
Subject: {SPAM?} Your antivirus protection has expired!
X-Antivirus: AVG (VPS 261024-6, 10/24/2026), Inbound message
X-Antivirus-Status: Clean
McAfee Subscription Expired
Your McAfee Security subscription has expired!
Your McAfee subscription expired on Oct 20, 2026.
After the expiry date Your Device will become susceptible to many different virus threats.
Your Device might be unprotected, it can be exposed to viruses and other malware...
You are eligible for discount: 62% 1yr Renewal Discount
Offer will expire at: 10-27-2026 23:59
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 20:52:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKoLa-00000000GEE-1V0b
for dave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 20:52:34 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Oct 2026 20:52:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [130.49.219.81] (port=45411 helo=stonehaven.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xKnDX-000000009eo-0OOM
for root@mail.nl2k.ab.ca;
Sat, 24 Oct 2026 19:40:09 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=mail.nl2k.ab.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=root@mail.nl2k.ab.ca;
bh=y8kkEuyGtgm5mTsX8sS4u5FRmeI=;
b=nqDft+o+dnRYV/VUvGPviEpRTlwMqaG/QVnvIvuPu6kzkQXuTPTG1bXD2fAVEohWtxwDzLBlAAo2
J1pRqUo+ErvkzLC9eLbl1izQhZK1WYKSxoj/m9zoTQ3x2E4eI1B6ZNBWDu76xQ4MMZlMm0aItDu0
JdxYDKMSQPJm7W2d8wY=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=mail.nl2k.ab.ca;
b=MtyRVjp0YZeMMa7fd2pQ0nbqke3HNpEzkpHeGXPRkioiN77Hs81k3nAjTugbPFyFL/ept/uRvpue
ri2+mXKvn/KfTt7G8Co5rhRLGnIPmM6XS/woAhOCc+tCjxdocXN8ggZsq2LQxlRh+bm8ruJ1SnVQ
TdDKKrmqRA33mM2cQq4=;
Date: 10-25-2026
From: McAfee Protection
To: root@mail.nl2k.ab.ca
Cc: root@mail.nl2k.ab.ca
Subject: Your antivirus protection has expired!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Spam_score: 14.9
X-Spam_score_int: 149
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: McAfee Subscription Expired McAfeeâ„¢
Content analysis details: (14.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[130.49.219.81 listed in bl.score.senderscore.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: keymart.net]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: keymart.net]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: keymart.net]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: keymart.net]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
Subject: {SPAM?} Your antivirus protection has expired!
X-Antivirus: AVG (VPS 261024-6, 10/24/2026), Inbound message
X-Antivirus-Status: Clean
McAfee Subscription Expired
Your McAfee Security subscription has expired!
Your McAfee subscription expired on Oct 20, 2026.
After the expiry date Your Device will become susceptible to many different virus threats.
Your Device might be unprotected, it can be exposed to viruses and other malware...
You are eligible for discount: 62% 1yr Renewal Discount
Offer will expire at: 10-27-2026 23:59
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 20:52:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKoLX-00000000GDn-0zCo
for dave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 20:52:31 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Oct 2026 20:52:31 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [130.49.219.81] (port=46819 helo=stonehaven.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xKnDO-000000009f9-3p9v
for support@nk.ca;
Sat, 24 Oct 2026 19:40:04 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nk.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=support@nk.ca;
bh=3oH/t4vxz4Q+dG2c5VPb9FY3n+g=;
b=PtGzjUKcm96Q3OU+Ib4WmNOPJaeadPHrX9nQJPqpB+BO6MAlGJY4/7yQ+jKHIQMZgzs0Vzx2CBBW
+8NKIB0+xbuu9EqgQs3Cn0dE3WUFZsss0G8lUYCSsVfQmApEpBNrfCZecdgPK0C1liq9F/ohiqDJ
EUncU3XCT5WaP/5iM1k=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nk.ca;
b=jADM42Q25YWTUmRNTHLe8kqDsmwsN6geb3bpIfHAIquhUInSGQElM5WZVjNV6mR3tXopVMuc1jfY
I1PmMa3wqqk989rYaB5dGC82pzqv81elkKTa2NDmD0tNBgDqdUMpjFvHwLA5xWSpxwcda3ZzPlgr
VvOQOZge5U693M7760I=;
Date: 10-25-2026
From: McAfee Protection
To: support@nk.ca
Cc: support@nk.ca
Subject: Your antivirus protection has expired!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Spam_score: 14.9
X-Spam_score_int: 149
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: McAfee Subscription Expired McAfeeâ„¢
Content analysis details: (14.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: keymart.net]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: keymart.net]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: keymart.net]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: keymart.net]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[130.49.219.81 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
Subject: {SPAM?} Your antivirus protection has expired!
X-Antivirus: AVG (VPS 261024-6, 10/24/2026), Inbound message
X-Antivirus-Status: Clean
McAfee Subscription Expired
Your McAfee Security subscription has expired!
Your McAfee subscription expired on Oct 20, 2026.
After the expiry date Your Device will become susceptible to many different virus threats.
Your Device might be unprotected, it can be exposed to viruses and other malware...
You are eligible for discount: 62% 1yr Renewal Discount
Offer will expire at: 10-27-2026 23:59
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 20:52:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKoLP-00000000GD7-3P98
for dave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 20:52:23 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Oct 2026 20:52:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [130.49.219.81] (port=52903 helo=stonehaven.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xKnD1-000000009cX-3SI7
for root@nl2k.ab.ca;
Sat, 24 Oct 2026 19:39:38 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=root@nl2k.ab.ca;
bh=xaHOJEWxJAie9bOxGpbs4Cn+5Uw=;
b=wXg9ltb/1DVuf0B2HKOFgSIXStHuzz1OAOQZg025Bbp/KNWzWwaHrd3BZfhjY6XsF5BWMg641ocp
x45vF91Ty6D2M+HQdwoCw61obFwPjC6ro1Uzc2H1xclpTCQNzqPti4OJa9dsyVZP9pi+VrLyGaxP
PPOROx7zTP7U1To+vkE=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;
b=lXns7UWbDe68hqeEfCN/vXI4M+PSJvJPcOP5dLlHRukLKizsBf+mIbSOkhsfxm3OgpAQMWz9ZHZt
0ghgdP7v4TrUgx6aWr6WWBmYwXP6pgT3UO6fCNdBcjN/CQVeY3GtMWEs3wtBFk6Mj7lyI/aT8lOQ
LwHWW7oq79+p/CuwkLw=;
Date: 10-25-2026
From: McAfee Protection
To: root@nl2k.ab.ca
Cc: root@nl2k.ab.ca
Subject: Your antivirus protection has expired!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Spam_score: 14.9
X-Spam_score_int: 149
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: McAfee Subscription Expired McAfeeâ„¢
Content analysis details: (14.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[130.49.219.81 listed in bl.score.senderscore.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: keymart.net]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: keymart.net]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: keymart.net]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: keymart.net]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
Subject: {SPAM?} Your antivirus protection has expired!
X-Antivirus: AVG (VPS 261024-6, 10/24/2026), Inbound message
X-Antivirus-Status: Clean
McAfee Subscription Expired
Your McAfee Security subscription has expired!
Your McAfee subscription expired on Oct 20, 2026.
After the expiry date Your Device will become susceptible to many different virus threats.
Your Device might be unprotected, it can be exposed to viruses and other malware...
You are eligible for discount: 62% 1yr Renewal Discount
Offer will expire at: 10-27-2026 23:59
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 20:52:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKoLM-00000000GBk-1DmZ
for dave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 20:52:20 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Oct 2026 20:52:20 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [130.49.219.81] (port=52903 helo=stonehaven.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xKnCt-000000009cX-1NmM
for games@nl2k.ab.ca;
Sat, 24 Oct 2026 19:39:33 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=games@nl2k.ab.ca;
bh=nxAIbFaK48cVbbxt7nuRShJR/H4=;
b=wdfH7J+S/ppgwcfQY+ig8oWLMM9x9QOc+TfGMDMqGvic0Uxf2mzB+vyRsGeIH1BJcf0GepFU0rxD
6ui6YyNa3kilxkJuBA4H/hQ3vMTqYj3txxDQJ3AUiz4Ry2vt3OeiR9sIXgcl7eWala8kWq3HS/Lz
CJMIk5DvTwF5Ojz42Lk=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;
b=OmxlBccyOUQWkFPVJ9S7E+kVYP8ZmdkO6lOGcenk98PaLjrAjDwzzBG46TwgLDnCMEIzuQDgDA0L
1UOuOpgiDU43ZjCJ16B25+P8rW0MItEo6rmLBYpZbRRLqZYKYtU8BkmKhjMFziLvzItiPr9Ro0i3
KINBOtnhB1K99uLXIH0=;
Date: 10-25-2026
From: McAfee Protection
To: games@nl2k.ab.ca
Cc: games@nl2k.ab.ca
Subject: Your antivirus protection has expired!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Spam_score: 14.9
X-Spam_score_int: 149
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: McAfee Subscription Expired McAfeeâ„¢
Content analysis details: (14.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: keymart.net]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: keymart.net]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: keymart.net]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: keymart.net]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[130.49.219.81 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 GB_CUSTOM_HTM_URI Custom html uri
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
Subject: {SPAM?} Your antivirus protection has expired!
X-Antivirus: AVG (VPS 261024-6, 10/24/2026), Inbound message
X-Antivirus-Status: Clean
McAfee Subscription Expired
Your McAfee Security subscription has expired!
Your McAfee subscription expired on Oct 20, 2026.
After the expiry date Your Device will become susceptible to many different virus threats.
Your Device might be unprotected, it can be exposed to viruses and other malware...
You are eligible for discount: 62% 1yr Renewal Discount
Offer will expire at: 10-27-2026 23:59
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: ddave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 20:52:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKoLT-00000000GDP-1oEJ
for ddave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 20:52:27 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Oct 2026 20:52:27 -0600
Resent-Message-ID:
Resent-To: ddave@doctor.nl2k.ab.ca
Received: from [130.49.219.81] (port=45411 helo=stonehaven.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
id 1xKnDO-000000009eo-3pHK
for doctor@mail.nl2k.ab.ca;
Sat, 24 Oct 2026 19:40:04 -0600
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=mail.nl2k.ab.ca;
h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=doctor@mail.nl2k.ab.ca;
bh=+XFZWxO7ViNlOmQdaCgMVhnLb7E=;
b=gNnu30GaorPDKpQIgJB7gQrvfMvLx7PQC2A0bEtTii0qeLsas4G6luI4q7VVaS45ukgGC0nHRcMH
vLrC3u/UEJtldosHARlCBoyU2yc4Y6LoUKk21a20UsTJiWT+U1diRDcdUlF3SYyox4T6DJ/NXaRU
w6OGX36PszswEAm4flc=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=mail.nl2k.ab.ca;
b=TDYCtGfe0s6JPUPGZ7Ux0MAx8Er1b3b7Jb5QBm+NDATQI6jmYmIGRsu8zlCGHmYJKgntf/Qe32vJ
noDfW6k9DvEgl/DecFCRE/H3yXMfao24h6uqfR6ChvRd9j2Nmef1fwTwgBbgFidYTc4JooQS2eCy
9H2g2TZBtrv6HsypxMY=;
Date: 10-25-2026
From: McAfee Protection
To: doctor@mail.nl2k.ab.ca
Cc: doctor@mail.nl2k.ab.ca
Subject: Your antivirus protection has expired!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Spam_score: 14.9
X-Spam_score_int: 149
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: McAfee Subscription Expired McAfeeâ„¢
Content analysis details: (14.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
[130.49.219.81 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
[130.49.219.81 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[130.49.219.81 listed in dnsbl.ahbl.org]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: keymart.net]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: keymart.net]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: keymart.net]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: keymart.net]
0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)
1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[130.49.219.81 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX
0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
Subject: {SPAM?} Your antivirus protection has expired!
X-Antivirus: AVG (VPS 261024-6, 10/24/2026), Inbound message
X-Antivirus-Status: Clean
McAfee Subscription Expired
Your McAfee Security subscription has expired!
Your McAfee subscription expired on Oct 20, 2026.
After the expiry date Your Device will become susceptible to many different virus threats.
Your Device might be unprotected, it can be exposed to viruses and other malware...
You are eligible for discount: 62% 1yr Renewal Discount
Offer will expire at: 10-27-2026 23:59
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 10:00:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKeAm-00000000CjB-3ksd
for dave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 10:00:44 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Oct 2026 10:00:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from out12-14.antispamcloud.com ([185.201.16.14]:33836)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKcRz-00000000MIV-0lzn
for root@nk.ca;
Sat, 24 Oct 2026 08:10:35 -0600
Received: from [103.16.79.227] (helo=zmta1.mahkamahagung.go.id)
by mx297.antispamcloud.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.94.2)
(envelope-from )
id 1xKcNa-006rIf-1X; Sat, 24 Oct 2026 16:05:53 +0200
Received: from localhost (localhost [127.0.0.1])
by zmta1.mahkamahagung.go.id (Postfix) with ESMTP id 49CB06345084;
Sat, 24 Oct 2026 21:05:17 +0700 (WIB)
Received: from zmta1.mahkamahagung.go.id ([127.0.0.1])
by localhost (zmta1.mahkamahagung.go.id [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id r0cS1ui_uxgv; Sat, 24 Oct 2026 21:05:11 +0700 (WIB)
Received: from localhost (localhost [127.0.0.1])
by zmta1.mahkamahagung.go.id (Postfix) with ESMTP id 23B8C63412DC;
Sat, 24 Oct 2026 20:52:17 +0700 (WIB)
DKIM-Filter: OpenDKIM Filter v2.10.3 zmta1.mahkamahagung.go.id 23B8C63412DC
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mahkamahagung.go.id;
s=4D836520-7DC5-11EC-BCEE-C2064D5E8D39; t=1792849937;
bh=1wHmw3w29TvUvZ/smmD9LGQjqHwVWvzr7E3JaRa2qFg=;
h=Date:From:Message-ID:MIME-Version;
b=O+tu22QjEvWDkzSKzqfbzC1jkWVmFN+sZv/0RBYvFUqF2LdnSWD5sx573+BOs8pzc
Pgp4GQ1DblgWjiXqWHm4HJAYxonH2AaGuKMBR9BTl06SOlQsoRcJDv1YD2INRH9RUR
/DtGQxIDj8DBdOWTeykFNW2zRav7A1wKdcmY/3ks=
X-Virus-Scanned: amavisd-new at
Received: from zmta1.mahkamahagung.go.id ([127.0.0.1])
by localhost (zmta1.mahkamahagung.go.id [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id FM3j2IdVMc-U; Sat, 24 Oct 2026 20:52:14 +0700 (WIB)
Received: from zmta3.mahkamahagung.go.id (zmta3.mahkamahagung.go.id [192.168.112.39])
by zmta1.mahkamahagung.go.id (Postfix) with ESMTPS id 4051363412E3;
Sat, 24 Oct 2026 20:40:45 +0700 (WIB)
Received: from localhost (localhost [127.0.0.1])
by zmta3.mahkamahagung.go.id (Postfix) with ESMTP id D50A26435280;
Sat, 24 Oct 2026 20:40:44 +0700 (WIB)
Received: from zmta3.mahkamahagung.go.id ([127.0.0.1])
by localhost (zmta3.mahkamahagung.go.id [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id hkXmrn0jjk2s; Sat, 24 Oct 2026 20:40:44 +0700 (WIB)
Received: from localhost (localhost [127.0.0.1])
by zmta3.mahkamahagung.go.id (Postfix) with ESMTP id 471B1643528B;
Sat, 24 Oct 2026 20:40:44 +0700 (WIB)
DKIM-Filter: OpenDKIM Filter v2.10.3 zmta3.mahkamahagung.go.id 471B1643528B
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mahkamahagung.go.id;
s=4D836520-7DC5-11EC-BCEE-C2064D5E8D39; t=1792849244;
bh=1wHmw3w29TvUvZ/smmD9LGQjqHwVWvzr7E3JaRa2qFg=;
h=Date:From:Message-ID:MIME-Version;
b=tfv2s1tkS5ygU1ICDI+oPr2PtHcUleC5dnyY4+1cxwb8hRSXuUYijS8zvwbLn2oQi
k9qoHQmSgQqwyXPo9Rz3CG2vWfV7B22O0loSY7FvjZ/Afkc0/K7j4zgBu65bU9oR/a
aUfzHAeBLmQm85SpQVLKO5e/hvMpvOGEkIvxU4nY=
X-Virus-Scanned: amavisd-new at
Received: from zmta3.mahkamahagung.go.id ([127.0.0.1])
by localhost (zmta3.mahkamahagung.go.id [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id cD9AweCJHmrq; Sat, 24 Oct 2026 20:40:44 +0700 (WIB)
Received: from zmailbox1.mahkamahagung.go.id (zmailbox1.mahkamahagung.go.id [192.168.112.43])
by zmta3.mahkamahagung.go.id (Postfix) with ESMTP id F346D6435280;
Sat, 24 Oct 2026 20:40:41 +0700 (WIB)
Date: Sat, 24 Oct 2026 20:40:41 +0700 (WIB)
From: Abdul Rahman Consultancy Firm
Reply-To: sulimanconsultancyfirm4@gmail.com
Message-ID: <1000919325.897921.1792849241976.JavaMail.zimbra@mahkamahagung.go.id>
Subject: Dept Finance Partner
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_3f79b26b-8ef3-4281-aea3-d0a5befdaf41"
X-Originating-IP: [192.168.112.42]
X-Mailer: Zimbra 8.8.15_GA_4372 (ZimbraWebClient - FF158 (Win)/8.8.15_GA_4372)
Thread-Index: SEjRckW2j6bpvM7X2Fpx9UlHzWo8RA==
Thread-Topic: Dept Finance Partner
X-Originating-IP: 103.16.79.227
X-PT.TaffetaForaSistem-Domain: mahkamahagung.go.id
X-PT.TaffetaForaSistem-Username: 103.16.79.227
Authentication-Results: antispamcloud.com; auth=pass smtp.auth=103.16.79.227@mahkamahagung.go.id
X-PT.TaffetaForaSistem-Outgoing-Class: unsure
X-PT.TaffetaForaSistem-Outgoing-Evidence: Combined (0.80)
X-Recommended-Action: accept
X-Filter-ID: 9kzQTOBWQUFZTohSKvQbgI7ZDo5ubYELi59AwcWUnuVxKIol4QmqlvK7gMgtU31e3MnLNHEed/eU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X-Report-Abuse-To: spam@quarantine16.antispamcloud.com
X-Complaints-To: abuse@master.antispamcloud.com
X-Spam_score: 7.4
X-Spam_score_int: 74
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day, I am a consultant for a regulated Kuwait-based
investment group that specializes in structured debt financing. The group
offers competitive facilities at fixed rates of 3.5-4.5% to support business
gr [...]
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.16.79.227 listed in will-spam-for-food.eu.org]
[103.16.79.227 listed in will-spam-for-food.eu.org]
[103.16.79.227 listed in will-spam-for-food.eu.org]
[103.16.79.227 listed in will-spam-for-food.eu.org]
[103.16.79.227 listed in will-spam-for-food.eu.org]
[103.16.79.227 listed in will-spam-for-food.eu.org]
[103.16.79.227 listed in will-spam-for-food.eu.org]
[103.16.79.227 listed in will-spam-for-food.eu.org]
[185.201.16.14 listed in will-spam-for-food.eu.org]
[185.201.16.14 listed in will-spam-for-food.eu.org]
[185.201.16.14 listed in will-spam-for-food.eu.org]
[185.201.16.14 listed in will-spam-for-food.eu.org]
[185.201.16.14 listed in will-spam-for-food.eu.org]
[185.201.16.14 listed in will-spam-for-food.eu.org]
[185.201.16.14 listed in will-spam-for-food.eu.org]
[185.201.16.14 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[185.201.16.14 listed in dnsbl.ahbl.org]
[185.201.16.14 listed in dnsbl.ahbl.org]
[185.201.16.14 listed in dnsbl.ahbl.org]
[185.201.16.14 listed in dnsbl.ahbl.org]
[103.16.79.227 listed in dnsbl.ahbl.org]
[103.16.79.227 listed in dnsbl.ahbl.org]
[103.16.79.227 listed in dnsbl.ahbl.org]
[103.16.79.227 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[185.201.16.14 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[185.201.16.14 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[185.201.16.14 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[185.201.16.14 listed in dnsbl.ahbl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[185.201.16.14 listed in list.dnswl.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[185.201.16.14 listed in bl.score.senderscore.com]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.2 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[sulimanconsultancyfirm4(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 MXG_THREAD_INDEX_BAD Invalid Thread-Index header
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} Dept Finance Partner
X-Antivirus: AVG (VPS 261024-2, 10/24/2026), Inbound message
X-Antivirus-Status: Clean
--=_3f79b26b-8ef3-4281-aea3-d0a5befdaf41
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Good day,
I am a consultant for a regulated Kuwait-based investment group that specializes in structured debt financing. The group offers competitive facilities at fixed rates of 3.5-4.5% to support business growth, acquisitions, and streamlined closing timeline of approximately 30 days.
Would you be open to a brief, no-obligation introductory call to explore whether their financing solution could align with your objectives?
We also welcome any referrals you may have.
Best Regards,
Abdul Rahman Consultancy firm
Marina Mall
Salem Mubarak Street
Arabian Gulf St
kuwait
--=_3f79b26b-8ef3-4281-aea3-d0a5befdaf41
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
Good day,
I am a consultant for a regulated Kuwait-based investment group that specializes in structured debt financing. The group offers competitive facilities at fixed rates of 3.5-4.5% to support business growth, acquisitions, and streamlined closing timeline of approximately 30 days.
Would you be open to a brief, no-obligation introductory call to explore whether their financing solution could align with your objectives?
We also welcome any referrals you may have.
Best Regards,
Abdul Rahman Consultancy firm
Marina Mall
Salem Mubarak Street
Arabian Gulf St
kuwait
--=_3f79b26b-8ef3-4281-aea3-d0a5befdaf41--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 06:37:00 -0600
Received: from mail-westcentralusazon11023117.outbound.protection.outlook.com ([40.93.201.117]:61475 helo=CY3PR05CU001.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKazH-00000000Aqa-0A8O
for dave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 06:36:43 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=MA1xuGOo1ov6EyLGeD6ZxXBaKtZFlYvziZYr15ievFBXB7jo+o27554TChF8GdD0q/vuEmX+VjhaSlKNR8yodQ42w5xxXLx7RytnzcHccF1hA5IWm0aD5TOyLZzXBnTVvTCs2XUDddNpaOmiTtBbMAT3mcyW1ez5Ar/SA9taatpDutHooJtnwGNWuuKOHAsTBJRsOVpb0Nn54Ux3NJopSWc9Pb2rYxYjCovjQI0B5HMEzPBsjlCm7eKW/gx4/Y3/lGrMTfmfX3d2UP2w4PAfgs5WM1WEGmXU8P0sYeLZsKdBuf2XuNrYGL1/57mSvORt78WHNjjNtjD+KloQvFwWHA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=+6zcXMRrdhoEOyd4NwiQ1/DpeB5iab4SykT+JoxH7AE=;
b=tN+m++CfguInucu1gjYArSVxF9nW4nodGoeOlOd+pSyTBTSudg3CY3mgTpWe820qDSh57EVmPXosRe/qjbDObIheMGE+6F2GPKOXkykgEbvkx5UGWB6dLMUPSac2UOX7RQYWTRVSM5PU4b57l1ZOj489/hwWWMSOAzt4zxenvWv/o70VRs33smHB5+Qj+tvdHUzrb6K3uTScHPAt9T21omebL6g0BEpqgPqvgSF4mptXCznCwxSYUWdr/xs/gvFyLkWvqHIk9essomqpmqKYdaxIDNsZVwwiSacKH4JuL0ChBQMe5LFzGZZgLvl97HeIp4gNYEDr17Bszq6X50/o0g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=inacapmail.cl; dmarc=pass action=none
header.from=inacapmail.cl; dkim=pass header.d=inacapmail.cl; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=inacapmail.cl;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=+6zcXMRrdhoEOyd4NwiQ1/DpeB5iab4SykT+JoxH7AE=;
b=D2MYWxcYd96s4m3LJ4+GNJRiNqS/Bxdu2NOaSe/24XOqbhRqpJLFvRULML+cU2xqwPQ7K7g4OYKHTuK7uI1d4jfFQuQgYD2rdI/VlzdEmUgfNkq9OAr++R4Iuo0nxR8seX1Ts592+h+mxi6xOyZmWM+yyAlkc3u2m8+y3JB7XSk=
Received: from DS0PR02MB9197.namprd02.prod.outlook.com (2603:10b6:8:13e::9) by
PH0PR02MB7814.namprd02.prod.outlook.com (2603:10b6:510:58::20) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.21.546.19; Sat, 24 Oct 2026 12:35:34 +0000
Received: from DS0PR02MB9197.namprd02.prod.outlook.com
([fe80::d5b6:c39c:5293:54f8]) by DS0PR02MB9197.namprd02.prod.outlook.com
([fe80::d5b6:c39c:5293:54f8%4]) with mapi id 15.21.0522.016; Sat, 24 Oct 2026
12:35:34 +0000
From: PABLO GUILLERMO AVALOS JARA
To: "actu@actu.ca"
Subject:
=?Windows-1252?Q?Paiement_de_votre_facture_de_d=E9neigement_/2026_-_2027?=
Thread-Topic:
=?Windows-1252?Q?Paiement_de_votre_facture_de_d=E9neigement_/2026_-_2027?=
Thread-Index: AQHdY7QqSc9VI7x3EUG+Hz+gC5UIDQ==
Date: Sat, 24 Oct 2026 12:35:34 +0000
Message-ID:
Accept-Language: es-ES, en-US
Content-Language: es-ES
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: mx.microsoft.com 1; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=inacapmail.cl;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DS0PR02MB9197:EE_|PH0PR02MB7814:EE_
x-ms-office365-filtering-correlation-id: df76f226-4083-43b0-f234-08df31cb4cd5
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam:
BCL:0;ARA:13230040|786006|23010399003|7416014|376014|1800799024|366016|19033499003|261022113327099003|261022105027099003|261022075727099003|261021121427099003|10067099003|56012099006|8096899003|18002099003|3613699012|5023799004|11063799006|38070700021;
x-microsoft-antispam-message-info:
HIFzmd0tNqn6iqxnRj/yQn3Dd35edS3LWkDJOM1HzpRntjhHGk4zGe9UlJRxtOXVS7fShPNZTrY1L3SQo6aVmNQQHIxV+Y1nh/mqqBnpcDHc8zBd6+YjLhPTi6II1vwP8LseBVUztCPh0cxVQ3IofXltFN1ph8FzeZdI5wKvcpyzja1nZoL6H+7cckpunnHAQ4mLPiZPgmx0iQzk4N/lhB5bbe4rBBU49o+I+PgnHn0HiLMFqfWVVas1UB0H64yKfkY2N4kJ1oDS4RQYTQCwbdk58hH5hW9z+5cORCoclydC0z4mmUwhyKqnbxEdEoSyJHMEjDGpEsVm7uIKhAzk7C7ozVPGODDBfACYeVzoOJHaQMt1LLTb6Ksx/VqYY4BbHXfdQnFFPjU2N2LghZOYWYtywUoO10pXGM/GpGfmIkNiUOdtWfMJyJ2K0IXIcmjQjEh8gulhiMGs3G3mDkQWt/Pw9mKZ3zKiMoSYVnT8EYpKXp7T3CGFitS1rZV0KsrTiHoIMXqIOJ79xLi1C0zgGOma2A2eKATZin0b//MOq99VEoMe71GBThLvgfInRKv0n1rFwRvOXPGVYw8I3YRbVN58gR392Mzoescq21RrxqIZOd5K+u742CiEGA2Kra71aFaHYncCaTOutx1AG8NixOiZDpIpeYfdLYLJCzcLc30UNy4sbliM03vPXiUDA9fUijQwz539zDxemyLoizBNJYnQbpNjBZB9eLYDt7mo70BRrY4/Cy0QHjoPo6R9+piX
x-forefront-antispam-report:
CIP:255.255.255.255;CTRY:;LANG:fr;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DS0PR02MB9197.namprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(786006)(23010399003)(7416014)(376014)(1800799024)(366016)(19033499003)(261022113327099003)(261022105027099003)(261022075727099003)(261021121427099003)(10067099003)(56012099006)(8096899003)(18002099003)(3613699012)(5023799004)(11063799006)(38070700021);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?Windows-1252?Q?2Ff86UopeG3T2FW3BpuWEtQy5yB/oxwlAgFPit6AuybbnLtAsp0AyCWX?=
=?Windows-1252?Q?OLvCup3ljxzh8hV5uuMY4fpAZI4AAIVyuwr+6w6MHHE7gY2l45K4+2EP?=
=?Windows-1252?Q?xX931LpCw7qzASVY+FTpnSIlZaJV9/wI0OlJj+rKfQY40LkFuWyUtRkD?=
=?Windows-1252?Q?6IDuv7G0++AkArENAyU2eNouKmGlDPGZWjs9xR4mzQKi2jnKxEsXHn89?=
=?Windows-1252?Q?EU3cGPznfTgEfLqYO5nLg2Fdv+WRd+FF50HnhTtMvYEQaYEAB709RFE6?=
=?Windows-1252?Q?svBs7SyaoWwi8C8N1AbT2fmmHQDEyimfZVjcoS00XJ9WEJrTrauA6M1p?=
=?Windows-1252?Q?OF+jmiStfGy6Ou4vt9wrxqdjouFTEE+Q5zRKvjHKMl5qk1Mq0sZr7LJv?=
=?Windows-1252?Q?b+iCwfHgCMAbiN4IT7O/hFJojYR7QfshO81wrLwBVaHFkhik+bX1oEG0?=
=?Windows-1252?Q?WMFY+iXGpOzviNIElvciogTKXdwV9C8HRi2d+vbQs4/4D/YuOufYpSQe?=
=?Windows-1252?Q?DHyFPaUeHtFhydW0mJ3mcmSKGnxGRGkpMN5YArw1RUly0xAZoAImagI4?=
=?Windows-1252?Q?kFcFQz/9Txm7rHfPBY62kpMct36gn3UX10OkrS+hXcx9SdBCUlZD7J56?=
=?Windows-1252?Q?fsp+m/L3CADJH3fNg5J3/UgHQHI6t+XYfAIXHBHHMTjFtd0k5A0rbOtz?=
=?Windows-1252?Q?LO7qzXQhhUBCRQg4LptQNCorr4Zy1RAltsbw4JQHdDULBIivzy/gM1ye?=
=?Windows-1252?Q?cpTzLw+NGsPKw60nMQsNS7Hn/Zwt5a8H45t5THcPstrxmf1UVL5zoIHz?=
=?Windows-1252?Q?RaTzdn2av9BtIgm/zNXv9og8sakAq/aNDzbqpdIrddJVJuuWUYHpPl9+?=
=?Windows-1252?Q?/+nJL4mTA/iRerr3qZJjlgnQtxVVGn3lGnzJ/KsLLmgGzvyaCVYnC4PD?=
=?Windows-1252?Q?Z0Y3it/xoOtTC3nxkOYLXqF834fuEBBC51B1QyXjoapaOxHdaE+52LhK?=
=?Windows-1252?Q?A42YSYOBSqkm3FoFgzbC+mkrN6ER5NML9onvxrsQbZy6cy8oj/X32tFp?=
=?Windows-1252?Q?tmuFSNjievMqIGOgTFOAH/6iCTAPlmLwpNG5PdipBpRjhH8qvU6UHt3V?=
=?Windows-1252?Q?VWCFyPsVO2vSo05qM29Tt5gTNqTA6u+tGEWhOUM56UJ3C55HbHX+oJwZ?=
=?Windows-1252?Q?tdjje3DjDaIAgQu2I3lKnJZ9Y3mi7PwpjLO77E+YqLPJ3PuwOXsMolCG?=
=?Windows-1252?Q?fnSyJkzNkIkRpJQ6PzwemlBA2b7YpMjqgsAdVaXiHx0J7vC/I+h0iw5t?=
=?Windows-1252?Q?po08eG2WMRIlpaVOrLpCvr+6zBENx5Z8mAhlPhtUyhB4MK7eX5wP8wZA?=
=?Windows-1252?Q?WNN/6m1vOJp+v3MCSs2InYc/gSxruEx/DuaaNYU1rZPFvZdgNkL50agb?=
=?Windows-1252?Q?sLj1PxzbOnYkW4tTqJqzRfifCBXM0/9CQ73nPEhdFYdT7YVlYFZ3nnlU?=
=?Windows-1252?Q?Eme2ooCemgvUtr5/PcwD6BG+syBc14GjqmZvvIuv7Fq7smHGTbGyweVx?=
=?Windows-1252?Q?+WPYz8kwKg8E+AHEtboXmbVhF4ZekGG6H3pVhZwUyNvPjb37gFMC/4Dj?=
=?Windows-1252?Q?5MFMNHvZsVwITBhnkUwupMRRgiOnsBawQo2yO084n4jWT/IU9TfNmfg6?=
=?Windows-1252?Q?jT8YiryCBXsto7pXCrmcoqCSSSDU/EmoFsI6JmmEMkMTWlBEmBxFaOFg?=
=?Windows-1252?Q?oZYDfyeuhnIcRTwmBMrsghmjv68LFywXpwdhXuo0FAhX32+Src+e3NiF?=
=?Windows-1252?Q?LZptbud2CEO+KSoUeYXsdRl/zSjfHcz+PHsnBThZ+wfIn8Y1PfryEOvo?=
=?Windows-1252?Q?s40Y0Dq58R67iQ=3D=3D?=
Content-Type: multipart/alternative;
boundary="_000_DS0PR02MB9197E8C4A6137124122147749B632DS0PR02MB9197namp_"
MIME-Version: 1.0
X-OriginatorOrg: inacapmail.cl
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DS0PR02MB9197.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: df76f226-4083-43b0-f234-08df31cb4cd5
X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2026 12:35:34.6387
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 38a1e0a1-b6b1-42e9-b3a9-597626670b17
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: +YNaVzTwicwLkOgkLsrmQciPYnYVPddwVUojytXU/CZdLlgd0INGnqqew3iR08SdHw1oaZ47VOav2ZbwR9L4e0JvstR9zci+52JO6S5HuzM=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR02MB7814
X-Antivirus: AVG (VPS 261024-0, 10/23/2026), Inbound message
X-Antivirus-Status: Clean
--_000_DS0PR02MB9197E8C4A6137124122147749B632DS0PR02MB9197namp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Madame, Monsieur,
Votre facture
R=E9f=E9rence : IRL-D=C9NEIGEMENT N=B02026-10
Titre : LANCEMENT DE LA CAMPAGNE DE LA MISE =C0 JOUR POUR LES D=C9NEIGEMEN=
T .
Nous tenons =E0 vous rappeler que la date limite pour la r=E9ception de vot=
re facture de d=E9neigement pour l'ann=E9e 2026-2027 a =E9t=E9 d=E9pass=E9e=
.
Selon nos nouvelles m=E9thodes de paiement, il est imp=E9ratif de proc=E9de=
r au r=E8glement en utilisant uniquement le virement Interac.
Veuillez noter que les paiements par ch=E8que, d=E9bit pr=E9autoris=E9 ou c=
arte de cr=E9dit ne peuvent plus =EAtre effectu=E9s =E0 partir de maintenan=
t.
Nous vous remercions de bien vouloir proc=E9der au paiement dans les plus b=
refs d=E9lais afin d'=E9viter l'application de frais de retard.
Coordonn=E9es pour le virement INTERAC :
Adresse Interac :
bureau.property@hotmail.com
Question : Deneigement
R=E9ponse : 2026
Nous vous serions reconnaissants de bien vouloir nous confirmer une fois le=
virement effectu=E9 en nous renvoyant un courrier.
Cordialement,
L'=E9quipe de Groupe d=E9neigement C.D
...........................................................................=
...........................................................................=
...........................................................................=
.......................................
Dear Sir or Madam,
Your Invoice
Reference: IRL-SNOW REMOVAL No. 2026-10
Subject: LAUNCH OF THE SNOW REMOVAL UPDATE CAMPAIGN.
We would like to remind you that the deadline for receiving your snow remov=
al invoice for the 2026=962027 season has passed.
Under our new payment methods, payment must be made exclusively via Interac=
e-Transfer.
Please note that payments by check, pre-authorized debit, or credit card ar=
e no longer accepted.
We kindly ask that you make your payment as soon as possible to avoid late =
fees.
Interac Transfer Details:
Interac Address:
Bureau.property@hotmail.com
Question: Snow Removal
Answer: 2026
We would appreciate it if you could confirm once the transfer has been made=
by sending us an email.
Sincerely, The C.D. Snow Removal Group Team
--_000_DS0PR02MB9197E8C4A6137124122147749B632DS0PR02MB9197namp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
252">
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
Madame, Monsieur,
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Votre facture
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
R=E9f=E9rence : IRL-D=C9NEIGEMENT =
; N=B02026-10
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
Titre : LANCEMENT DE LA CAMPAGNE DE LA=
MISE =C0 JOUR POUR LES D=C9NEIGEMENT .
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
Nous tenons =E0 vous rappeler que la d=
ate limite pour la r=E9ception de votre facture de d=E9neigement pour l'ann=
=E9e 2026-2027 a =E9t=E9 d=E9pass=E9e.
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
Selon nos nouvelles m=E9thodes de paie=
ment, il est imp=E9ratif de proc=E9der au r=E8glement en utilisant uniqueme=
nt le virement Interac.
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
Veuillez noter que les paiements par c=
h=E8que, d=E9bit pr=E9autoris=E9 ou carte de cr=E9dit ne peuvent plus =EAtr=
e effectu=E9s =E0 partir de maintenant.
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
Nous vous remercions de bien vouloir p=
roc=E9der au paiement dans les plus brefs d=E9lais afin d'=E9viter l'applic=
ation de frais de retard.
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
Coordonn=E9es pour le virement INTERAC=
:
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
Adresse Interac :
div>
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
;" class=3D"elementToProof">
doramail.com" id=3D"OWA1fa3289d-8773-5a6e-2c6f-16d082138f43" class=3D"x_x_x=
_OWAAutoLink" title=3D"mailto:bureau_property@doramail.com" data-linkindex=
=3D"0" style=3D"margin: 0px;">bureau.property@hotmail.com=
Question : Deneigement=
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
R=E9ponse : 2026
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
Nous vous serions reconnaissants de bien vouloir nous confirmer une fois le=
virement effectu=E9 en nous renvoyant un courrier.
Cordialement,
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
L'=E9quipe de Groupe d=E9neigement C.D=
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
......................................=
...........................................................................=
...........................................................................=
...........................................................................=
.
d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=
dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=
; color: rgb(0, 0, 0);" class=3D"elementToProof">
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Dear Sir or Madam,
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Your Invoice
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Reference: IRL-SNOW REMOVAL No. 2026-1=
0
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Subject: LAUNCH OF THE SNOW REMOVAL UP=
DATE CAMPAIGN.
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
We would like to remind you that the d=
eadline for receiving your snow removal invoice for the 2026=962027 season =
has passed.
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Under our new payment methods, payment=
must be made exclusively via Interac e-Transfer.
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Please note that payments by check, pr=
e-authorized debit, or credit card are no longer accepted.
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
We kindly ask that you make your payme=
nt as soon as possible to avoid late fees.
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Interac Transfer Details:
=3D"elementToProof">
px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=
elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Interac Address:
px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=
elvetica, sans-serif; font-size: 12pt; color: rgb(17, 85, 204);">
-fc5f-e7cdd1f2c3d4" class=3D"x_x_x_OWAAutoLink" title=3D"mailto:bureau_prop=
erty@doramail.com" data-linkindex=3D"1" style=3D"margin: 0px;">Bureau=
.property@hotmail.com
px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=
elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=
elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Question: Snow Removal
em 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibr=
i, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Answer: 2026
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
We would appreciate it if you could co=
nfirm once the transfer has been made by sending us an email.
d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=
eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =
12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Sincerely, The C.D. Snow Removal Group=
Team
--_000_DS0PR02MB9197E8C4A6137124122147749B632DS0PR02MB9197namp_--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 07:05:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKbRV-00000000O6v-1RVw
for dave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 07:05:49 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Oct 2026 07:05:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f52.google.com ([209.85.128.52]:57633)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKaA8-000000005hz-3COO
for doctor@mail.nl2k.ab.ca;
Sat, 24 Oct 2026 05:43:52 -0600
Received: by mail-wm1-f52.google.com with SMTP id 5b1f17b1804b1-49d0da752ffso14438115e9.3
for ; Sat, 24 Oct 2026 04:42:53 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1792842167; cv=none;
d=google.com; s=arc-20260327;
b=f3pLEKLvB8oAVjEFf5Bz2WOEyABU6Nd9iR7XK8L1Y5rZcrUyD8lAVbttd4JbmkE2qv
L7ZCJMiAkbnc5P6TTR2BmmfuiWMT1S6rlkGjBC8w7T+ji4xsl8NVcr1vUGX4DEZ1cO0J
lIFovJygLsz+X2YFWNRP1QOcEawafRMZ3hkxe2KOrwxUV8nrRm1SAa4EzCRO8SCemFpD
2WNy75ihTNhtoG0QT3UWhfV1n7RF005nlf6BD0BMPaFBEU6Kh4fqCJ7MPxaZgVYF+YYx
/b4XAgS6juEbPer+lqQfJfrciCISFs8moCVBaa/P0QD2NZT+FHUoGaFnrPSLeOnA1PQP
EUJQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:reply-to:mime-version
:dkim-signature;
bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;
fh=40tEnhC7lt6WZEpLOc/9iys9wOYzz9RZUtwhWluMo+4=;
b=HocgkgHIHaTUkI4kXBe+KBv227QlZTK9XQ27i6OBQlNMJxcynDX+ZlnXroLImhnWrs
l50oafsHRyON2q4dX+Op8fqDYEdpto9uJ7SLanw00a8KqNZZrCFyLs/zR6vb6b/h1uaH
Ru25PR5Eyv4BiD83s1yQ/JGGrQxD4w3uk4TeKlCBslSlK3qgiT3OpzmkZNfSyqtaRtEm
ue4+zrgPmJ9yS+VkLBuuyX+b5cIXTKEZH6l08gKjGZDQJ47XbDqgqy+WE1hzmsFiIKBR
z5rcIxhTUEJfpuubK49Mu0XWVjlvzJtGEGAM0km7dMYkelx6GlyNhIdiR97h00vP1vt+
c8vg==;
darn=mail.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1792842167; x=1793446967; darn=mail.nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:reply-to:mime-version
:from:to:cc:subject:date:message-id:reply-to:content-type;
bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;
b=YB4HR+cgvOb21epgnrDA9ouE4tJQDzjJeNiV8NL86KeoBgF6Dmgcb6SQnAhN3JLqNG
QDXE4WPiU3oObmyWt5rlFXwjVLS1tqBD5dBX55Uj7xTZMgYk9swJ5AIfRljVMR0rgA71
oYj3M5GLFxUqhFYZmHpOskzx7gloDTHSKBGZiYEmh4VGauCG0lnVfGl1xZpehmf1LNAs
2Qbs009o4epudEXuu1aTZ1RrgKKqeZobSxLeMwr7kfT687KK0ulc7qeZMHk76SJ1jhsQ
w2nuBLkdQAXiq1u81jx67C2gwvdJjBfWG4zGsGa7Pe+lxJqOwi/1QApH1DEkUBgmB+gg
aX+g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1792842167; x=1793446967;
h=content-type:to:subject:message-id:date:from:reply-to:mime-version
:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to:content-type;
bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;
b=jaU+na/r5M8IYqRiNuGE/fsk3gOMwiIhGF2GlHXM3++WdziCLSqWYUiiazGGsoQnIT
NvyaW4D81DeLKRTyMUg4tWnC5aq4+VfgqZEEzcYFnGy97PFkj27vjzVQ74YAPwTmTKKg
mVc7/0qK3sw1RY2IZFji45pe6N2uBiA820FcBIKBA3uFCVdBg/NyJ1M9aa3bMLTmzphZ
prEbmnv8fo1LH58Nv7dXGckJrDW18PDR3FDOX1ownv4c7uXENA2j0XEKe+oR5/sC9fXV
3Q1WkhD5ogXafHqK6ZtEDEZw4jLqbC4jfb/FhDVhKsfIwcsmSR5YpW5yC6SmFTS2BJLP
H8qQ==
X-Forwarded-Encrypted: i=1; AKwUvBxNG98LMeg38oGSFQehGHMWa8tY9sz7M9IVSu22sNrb0r1ESkdJ6JkhDeviot+xQoPJhFd5bUA=@mail.nl2k.ab.ca
X-Gm-Message-State: AFq9FYL2+MDXPk00SJ3LmHf8crOfesOrtFDnw5Xb3gd9TiTKPZGu6SYl
WKzUaubCSqr2sYSOYv5aoAN/kNgJn8NDU9DU3v80Y5KHilcKjHWrood3PWx5/aBkHOKEouQK7NC
/sBA0fZPyBQG7B88CGzO7aPaD8ZRI+/o=
X-Gm-Gg: AYBFou2sYebqEdkquTaEv7kz9nBsa9DTDkF3E/StGKG0T5A7BznkrbJOJ0IwyJ+iW9W
aT6FY5JDPeB2DtSYRuLPygsVrEC5LfjNgGQ5G3dDpl0GsCAleNDPPDZ0cKaVAV6N9iQaj8ZTYH4
OLD37+tziJ+9AJPvpraEC+gs2za1do1iL+Fd+nsTcuKwRMKas3EKcX/GBUNbkvFGzI+0unr+iMO
gMgI3y3pcfsZDyromhVICA6S5AXxZEwoZRkcWBdpviRp/e0n1FTAQ6mYowM9D7/9XhvdV6RUqsm
d49oWGKNmDrkSyOIfsr9lrrbfZqGIW/NqqB3LjrNviDTyRlz9CyXnXBhmLotkGESHVpZ2gSXNL5
I52gumCzyAdRJZjzX10wiS2q72qjNWuaVRwCI
X-Received: by 2002:a05:600c:8488:b0:4a1:e0d5:293e with SMTP id
5b1f17b1804b1-4a35aca1366mr24733935e9.21.1792842166335; Sat, 24 Oct 2026
04:42:46 -0700 (PDT)
MIME-Version: 1.0
Reply-To: colemanperry334@gmail.com
From: COLEMAN PERRY
Date: Sat, 24 Oct 2026 04:42:33 -0700
X-Gm-Features: AclHuK_isFblrXeZTIpHcvbbgB63ZIyeTSzJhr_V3YD7q9a-qu11MK6Zf1WsTSA
Message-ID:
Subject: Request for cooperation
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000767b8d065e9498c4"
Bcc: doctor@mail.nl2k.ab.ca
X-Spam_score: 7.3
X-Spam_score_int: 73
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day, I hope this email finds you well and is given rapt
attention . I am an employee of a British pharmaceutical company and would
like to present a promising business opportunity related to the supply of
[...]
Content analysis details: (7.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.52 listed in dnsbl.ahbl.org]
[209.85.128.52 listed in dnsbl.ahbl.org]
[209.85.128.52 listed in dnsbl.ahbl.org]
[209.85.128.52 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.52 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.52 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.52 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.52 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.52 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.52 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[williamsgraham202020(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[williamsgraham202020(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[colemanperry334(at)gmail.com]
0.3 OFFER BODY: Offers you Something
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.52 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
Subject: {SPAM?} Request for cooperation
X-Antivirus: AVG (VPS 261024-0, 10/23/2026), Inbound message
X-Antivirus-Status: Clean
--000000000000767b8d065e9498c4
Content-Type: text/plain; charset="UTF-8"
Good day,
I hope this email finds you well and is given rapt attention . I am an
employee of a British pharmaceutical company and would like to present a
promising business opportunity related to the supply of key raw materials
for the production of human pharmaceuticals. No special professional
qualifications are required for this initiative.
Upon conclusion of a supply agreement, my company is willing to pay a
deposit of 70% to 100% of the product value.
Please contact me for further information about this offer.
Thank you for your time and interest.
Mr. Perry Coleman
191 High St, Barnet,
Greater London,
EN5 5SU
--000000000000767b8d065e9498c4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
rif;font-size:large">Good day,
lack",sans-serif;font-size:large">
black",sans-serif;font-size:large">
rial black",sans-serif;font-size:large">I hope this email finds you we=
ll and is given rapt attention . I am an employee of a =C2=A0British pharma=
ceutical company and would like to present a promising business opportunity=
related to the supply of key raw materials for the production of human pha=
rmaceuticals. No special professional qualifications are required for this =
initiative.
if;font-size:large">
erif;font-size:large">
ns-serif;font-size:large">Upon conclusion of a supply agreement, my company=
is willing to pay a deposit of 70% to 100% of the product value.
style=3D"font-family:"arial black",sans-serif;font-size:large"><=
br style=3D"font-family:"arial black",sans-serif;font-size:large"=
>
rge">Please contact me for further information about this offer.
style=3D"font-family:"arial black",sans-serif;font-size:large">
r style=3D"font-family:"arial black",sans-serif;font-size:large">=
ge">Thank you for your time and interest.
uot;arial black",sans-serif;font-size:large">
"arial black",sans-serif;font-size:large">
ily:"arial black",sans-serif;font-size:large">Mr. Perry Coleman
span>
large">
ize:large">191 High St, Barnet,
black",sans-serif;font-size:large">
ial black",sans-serif;font-size:large">Greater London,
=3D"font-family:"arial black",sans-serif;font-size:large">
tyle=3D"font-family:"arial black",sans-serif;font-size:large">EN5=
5SU
--000000000000767b8d065e9498c4--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 07:05:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKbRZ-00000000OKx-2hti
for dave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 07:05:53 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Oct 2026 07:05:53 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f49.google.com ([209.85.128.49]:57482)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKaA8-000000005i0-3BBc
for doctor@nl2k.ab.ca;
Sat, 24 Oct 2026 05:43:52 -0600
Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-4a3517554f7so5984945e9.2
for ; Sat, 24 Oct 2026 04:42:53 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1792842167; cv=none;
d=google.com; s=arc-20260327;
b=of7KX5O+oy2G0ioH9wfRXIab6ZvRF4Pmvnpy9e2Gn36krfnLE7EwCq4urTeUBA3wTc
lPhsucNHIuE5uxRULpur9GouC9KcNMAZfiucm3oiJYD3T3/7zfTDRh6/y05D+tTVkAFi
Sy32v4fmT2weXT3gaNZVv/r/ABBEdOMQk8yTonHw7/83AzXI8v+5dp3YxtXgtYPEhcdA
m9+Wjt16IToCNkKglIeCX1yVSM6fuNx2KO4OHMFGcwfFMCugoZfJeGywFsYxKjnJ+zhQ
V5/o+lh4VPRpfwHfn3GjAXhFfO7efJyVOmcCIMvDFAf7CzsQAM9Im6kar2cErARLQQH2
txGA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:reply-to:mime-version
:dkim-signature;
bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;
fh=lP6rwSERjIFxv1b6i8YXaCO5TwUgGj6DHUcItOQxoGs=;
b=hWqhHOjgQXG1uVwDInJZB2D9PazXeFdZTkCOiFtNZyeAB89wEbfXKpcpGH/+ok2m7X
8wQlwAP2nOcAN1L43hQPPmbPCmLKiyRSOz4lacnX2yq/dvhZTk3M75aaaLULt8VvU7gt
VOzaPXpLr1B8dHE8hzpAFQ67WIYGDJ8PviNfL9aWBr3i4uy0hthtu+HjcgnYBpkWVlzt
P1RIo6I738+eots1rM1n7hZyx+yeJd9krHpbRoa0O8wXuGgMUPEuTyKsFyBSEHoEjgjg
kSMlmFJDPLoEjmGLM97wIV2g8wajkWEADbq+XwWYA5C3d7H+MSahZ9w/FW+fnWlFiS70
qx/Q==;
darn=nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1792842167; x=1793446967; darn=nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:reply-to:mime-version
:from:to:cc:subject:date:message-id:reply-to:content-type;
bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;
b=T4cuivqytedfuT7mAkF8XA3KPkZb3W54jXge9PHB6sswfXqZZdRcspmJEbs0gIgbaW
Pn5eKn6CTCQiLlep7G+73TKU5IC1h+coZScuDkbBgCoJK0/b3+hjKtFOANaeu8DGWt7g
bajZ9yMcITIQ9+PJTFI/NXkhsdUP74IAHisGEHMr6r5whNjF+pL7XvlEigVgqU1+lb38
/OMLdBljLGvfGjY2TEZOyYk1vqVxbL8Otn8gayxWsOcxND5FfcLO4YkHR1ajjoIvglxy
Lxhs6wyr/OOjD14RmqqJvYWz5U5Abooj0Tf2z9/uuAajIIqssR1xvzKwLfBa1lcCIuXn
lEQA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1792842167; x=1793446967;
h=content-type:to:subject:message-id:date:from:reply-to:mime-version
:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to:content-type;
bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;
b=Ba4664beykuIPruLfXIeMZ1hrrm9ehgRzzY8kPWvZD04DsUb/klcXEC/5VFyOQpy6y
Y03vPLO1+Vu71fHIRykXu4bwQx9CuAVkC7JhcpInK8eRmYs7hfFTyHo+SHMNHB2jJZRn
eKNSPuIUSpkrjQu09DwZ96DpuF72iRMI4fDVb++eoeOXVDFZUPNRPdFv8I13DiK+sp13
AuwuMh7teNSUWFar45qHkVBNuPXdzkulUSocPA8K6xoDLq6h2721C+LyZ/WA6zzDHlen
+ny+KyacrgzZkyoK0BYJ3t/NdmQf6GKfbQkOYa5pGRGOQI0Ub3C3GVvATmFaSdDhFRbK
V0gg==
X-Forwarded-Encrypted: i=1; AKwUvBwHStBNFoEPcov1BxpE8WmKA9/UaEEGu10wSDsmz8TFOYsSw0szkJAZQiFmUkuTPHv/HhOzIOs=@nl2k.ab.ca
X-Gm-Message-State: AFq9FYKH2pmvC5ctZ4kHi+/389lPCYa1wJxV0Vvl88PWkwN1a7ZDzIwb
epzNPM4yl922erGnMMGq59qnK24M3qkQWZRMo1AyE22MqnM1H0OOBXnWRWIGQGNOD18VKBo3oGq
DUjE6kMVv1fqGb3mpE1InTnwvKpJ2pnY=
X-Gm-Gg: AYBFou0rDf/MuZX9AkafIMRZDyemWstBgd2ko6ZO1Fms9l1WtPjKWvSPdGd/J+McSrJ
cp/5NlKvzT2JZXYDx2I1M3fu8Hfwp7TvIGrlIG3NHoCHBHZEzVNThVcBLrkNsyC6rEc0QQlOZVt
4Xla20DEA2HIN7iTD8dPENLFQq7+9hPX38+zBsxWKiewZODJKL3wr/d7TeqyOPyDSNRDoMGlEDj
nkEAXJ9uG4Dzd07VvqDdRWU8LxfHcN1/FAV8yDZBSDx9doAb1lHOa3N3sJWtCxmk57NgoxI/KH7
HkY90+MEpRP49fY77lVgGrpt5bUSmOHqn319NB3YgLnPPx9AK4CDsyL1if2e/i/p3qW2BIYZsWk
Q1PZMhksSbVkJtCl6qUsQJ+Bt6cOfYFbs2VF/
X-Received: by 2002:a05:600c:8488:b0:4a1:e0d5:293e with SMTP id
5b1f17b1804b1-4a35aca1366mr24733935e9.21.1792842166335; Sat, 24 Oct 2026
04:42:46 -0700 (PDT)
MIME-Version: 1.0
Reply-To: colemanperry334@gmail.com
From: COLEMAN PERRY
Date: Sat, 24 Oct 2026 04:42:33 -0700
X-Gm-Features: AclHuK_isFblrXeZTIpHcvbbgB63ZIyeTSzJhr_V3YD7q9a-qu11MK6Zf1WsTSA
Message-ID:
Subject: Request for cooperation
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000767b8d065e9498c4"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 7.3
X-Spam_score_int: 73
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day, I hope this email finds you well and is given rapt
attention . I am an employee of a British pharmaceutical company and would
like to present a promising business opportunity related to the supply of
[...]
Content analysis details: (7.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.49 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.49 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.49 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.49 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.49 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.49 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[williamsgraham202020(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[williamsgraham202020(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[colemanperry334(at)gmail.com]
0.3 OFFER BODY: Offers you Something
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.49 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
Subject: {SPAM?} Request for cooperation
X-Antivirus: AVG (VPS 261024-0, 10/23/2026), Inbound message
X-Antivirus-Status: Clean
--000000000000767b8d065e9498c4
Content-Type: text/plain; charset="UTF-8"
Good day,
I hope this email finds you well and is given rapt attention . I am an
employee of a British pharmaceutical company and would like to present a
promising business opportunity related to the supply of key raw materials
for the production of human pharmaceuticals. No special professional
qualifications are required for this initiative.
Upon conclusion of a supply agreement, my company is willing to pay a
deposit of 70% to 100% of the product value.
Please contact me for further information about this offer.
Thank you for your time and interest.
Mr. Perry Coleman
191 High St, Barnet,
Greater London,
EN5 5SU
--000000000000767b8d065e9498c4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
rif;font-size:large">Good day,
lack",sans-serif;font-size:large">
black",sans-serif;font-size:large">
rial black",sans-serif;font-size:large">I hope this email finds you we=
ll and is given rapt attention . I am an employee of a =C2=A0British pharma=
ceutical company and would like to present a promising business opportunity=
related to the supply of key raw materials for the production of human pha=
rmaceuticals. No special professional qualifications are required for this =
initiative.
if;font-size:large">
erif;font-size:large">
ns-serif;font-size:large">Upon conclusion of a supply agreement, my company=
is willing to pay a deposit of 70% to 100% of the product value.
style=3D"font-family:"arial black",sans-serif;font-size:large"><=
br style=3D"font-family:"arial black",sans-serif;font-size:large"=
>
rge">Please contact me for further information about this offer.
style=3D"font-family:"arial black",sans-serif;font-size:large">
r style=3D"font-family:"arial black",sans-serif;font-size:large">=
ge">Thank you for your time and interest.
uot;arial black",sans-serif;font-size:large">
"arial black",sans-serif;font-size:large">
ily:"arial black",sans-serif;font-size:large">Mr. Perry Coleman
span>
large">
ize:large">191 High St, Barnet,
black",sans-serif;font-size:large">
ial black",sans-serif;font-size:large">Greater London,
=3D"font-family:"arial black",sans-serif;font-size:large">
tyle=3D"font-family:"arial black",sans-serif;font-size:large">EN5=
5SU
--000000000000767b8d065e9498c4--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Oct 2026 07:05:59 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKbRZ-00000000OKx-2hti
for dave@doctor.nl2k.ab.ca;
Sat, 24 Oct 2026 07:05:53 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Oct 2026 07:05:53 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f49.google.com ([209.85.128.49]:57482)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1xKaA8-000000005i0-3BBc
for doctor@nl2k.ab.ca;
Sat, 24 Oct 2026 05:43:52 -0600
Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-4a3517554f7so5984945e9.2
for ; Sat, 24 Oct 2026 04:42:53 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1792842167; cv=none;
d=google.com; s=arc-20260327;
b=of7KX5O+oy2G0ioH9wfRXIab6ZvRF4Pmvnpy9e2Gn36krfnLE7EwCq4urTeUBA3wTc
lPhsucNHIuE5uxRULpur9GouC9KcNMAZfiucm3oiJYD3T3/7zfTDRh6/y05D+tTVkAFi
Sy32v4fmT2weXT3gaNZVv/r/ABBEdOMQk8yTonHw7/83AzXI8v+5dp3YxtXgtYPEhcdA
m9+Wjt16IToCNkKglIeCX1yVSM6fuNx2KO4OHMFGcwfFMCugoZfJeGywFsYxKjnJ+zhQ
V5/o+lh4VPRpfwHfn3GjAXhFfO7efJyVOmcCIMvDFAf7CzsQAM9Im6kar2cErARLQQH2
txGA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:reply-to:mime-version
:dkim-signature;
bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;
fh=lP6rwSERjIFxv1b6i8YXaCO5TwUgGj6DHUcItOQxoGs=;
b=hWqhHOjgQXG1uVwDInJZB2D9PazXeFdZTkCOiFtNZyeAB89wEbfXKpcpGH/+ok2m7X
8wQlwAP2nOcAN1L43hQPPmbPCmLKiyRSOz4lacnX2yq/dvhZTk3M75aaaLULt8VvU7gt
VOzaPXpLr1B8dHE8hzpAFQ67WIYGDJ8PviNfL9aWBr3i4uy0hthtu+HjcgnYBpkWVlzt
P1RIo6I738+eots1rM1n7hZyx+yeJd9krHpbRoa0O8wXuGgMUPEuTyKsFyBSEHoEjgjg
kSMlmFJDPLoEjmGLM97wIV2g8wajkWEADbq+XwWYA5C3d7H+MSahZ9w/FW+fnWlFiS70
qx/Q==;
darn=nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1792842167; x=1793446967; darn=nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:reply-to:mime-version
:from:to:cc:subject:date:message-id:reply-to:content-type;
bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;
b=T4cuivqytedfuT7mAkF8XA3KPkZb3W54jXge9PHB6sswfXqZZdRcspmJEbs0gIgbaW
Pn5eKn6CTCQiLlep7G+73TKU5IC1h+coZScuDkbBgCoJK0/b3+hjKtFOANaeu8DGWt7g
bajZ9yMcITIQ9+PJTFI/NXkhsdUP74IAHisGEHMr6r5whNjF+pL7XvlEigVgqU1+lb38
/OMLdBljLGvfGjY2TEZOyYk1vqVxbL8Otn8gayxWsOcxND5FfcLO4YkHR1ajjoIvglxy
Lxhs6wyr/OOjD14RmqqJvYWz5U5Abooj0Tf2z9/uuAajIIqssR1xvzKwLfBa1lcCIuXn
lEQA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1792842167; x=1793446967;
h=content-type:to:subject:message-id:date:from:reply-to:mime-version
:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to:content-type;
bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;
b=Ba4664beykuIPruLfXIeMZ1hrrm9ehgRzzY8kPWvZD04DsUb/klcXEC/5VFyOQpy6y
Y03vPLO1+Vu71fHIRykXu4bwQx9CuAVkC7JhcpInK8eRmYs7hfFTyHo+SHMNHB2jJZRn
eKNSPuIUSpkrjQu09DwZ96DpuF72iRMI4fDVb++eoeOXVDFZUPNRPdFv8I13DiK+sp13
AuwuMh7teNSUWFar45qHkVBNuPXdzkulUSocPA8K6xoDLq6h2721C+LyZ/WA6zzDHlen
+ny+KyacrgzZkyoK0BYJ3t/NdmQf6GKfbQkOYa5pGRGOQI0Ub3C3GVvATmFaSdDhFRbK
V0gg==
X-Forwarded-Encrypted: i=1; AKwUvBwHStBNFoEPcov1BxpE8WmKA9/UaEEGu10wSDsmz8TFOYsSw0szkJAZQiFmUkuTPHv/HhOzIOs=@nl2k.ab.ca
X-Gm-Message-State: AFq9FYKH2pmvC5ctZ4kHi+/389lPCYa1wJxV0Vvl88PWkwN1a7ZDzIwb
epzNPM4yl922erGnMMGq59qnK24M3qkQWZRMo1AyE22MqnM1H0OOBXnWRWIGQGNOD18VKBo3oGq
DUjE6kMVv1fqGb3mpE1InTnwvKpJ2pnY=
X-Gm-Gg: AYBFou0rDf/MuZX9AkafIMRZDyemWstBgd2ko6ZO1Fms9l1WtPjKWvSPdGd/J+McSrJ
cp/5NlKvzT2JZXYDx2I1M3fu8Hfwp7TvIGrlIG3NHoCHBHZEzVNThVcBLrkNsyC6rEc0QQlOZVt
4Xla20DEA2HIN7iTD8dPENLFQq7+9hPX38+zBsxWKiewZODJKL3wr/d7TeqyOPyDSNRDoMGlEDj
nkEAXJ9uG4Dzd07VvqDdRWU8LxfHcN1/FAV8yDZBSDx9doAb1lHOa3N3sJWtCxmk57NgoxI/KH7
HkY90+MEpRP49fY77lVgGrpt5bUSmOHqn319NB3YgLnPPx9AK4CDsyL1if2e/i/p3qW2BIYZsWk
Q1PZMhksSbVkJtCl6qUsQJ+Bt6cOfYFbs2VF/
X-Received: by 2002:a05:600c:8488:b0:4a1:e0d5:293e with SMTP id
5b1f17b1804b1-4a35aca1366mr24733935e9.21.1792842166335; Sat, 24 Oct 2026
04:42:46 -0700 (PDT)
MIME-Version: 1.0
Reply-To: colemanperry334@gmail.com
From: COLEMAN PERRY
Date: Sat, 24 Oct 2026 04:42:33 -0700
X-Gm-Features: AclHuK_isFblrXeZTIpHcvbbgB63ZIyeTSzJhr_V3YD7q9a-qu11MK6Zf1WsTSA
Message-ID:
Subject: Request for cooperation
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000767b8d065e9498c4"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 7.3
X-Spam_score_int: 73
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day, I hope this email finds you well and is given rapt
attention . I am an employee of a British pharmaceutical company and would
like to present a promising business opportunity related to the supply of
[...]
Content analysis details: (7.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
[209.85.128.49 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.49 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.49 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.49 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.49 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.49 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.49 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[williamsgraham202020(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[williamsgraham202020(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[colemanperry334(at)gmail.com]
0.3 OFFER BODY: Offers you Something
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.49 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
[209.85.128.49 listed in will-spam-for-food.eu.org]
Subject: {SPAM?} Request for cooperation
X-Antivirus: AVG (VPS 261024-0, 10/23/2026), Inbound message
X-Antivirus-Status: Clean
--000000000000767b8d065e9498c4
Content-Type: text/plain; charset="UTF-8"
Good day,
I hope this email finds you well and is given rapt attention . I am an
employee of a British pharmaceutical company and would like to present a
promising business opportunity related to the supply of key raw materials
for the production of human pharmaceuticals. No special professional
qualifications are required for this initiative.
Upon conclusion of a supply agreement, my company is willing to pay a
deposit of 70% to 100% of the product value.
Please contact me for further information about this offer.
Thank you for your time and interest.
Mr. Perry Coleman
191 High St, Barnet,
Greater London,
EN5 5SU
--000000000000767b8d065e9498c4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
rif;font-size:large">Good day,
lack",sans-serif;font-size:large">
black",sans-serif;font-size:large">
rial black",sans-serif;font-size:large">I hope this email finds you we=
ll and is given rapt attention . I am an employee of a =C2=A0British pharma=
ceutical company and would like to present a promising business opportunity=
related to the supply of key raw materials for the production of human pha=
rmaceuticals. No special professional qualifications are required for this =
initiative.
if;font-size:large">
erif;font-size:large">
ns-serif;font-size:large">Upon conclusion of a supply agreement, my company=
is willing to pay a deposit of 70% to 100% of the product value.
style=3D"font-family:"arial black",sans-serif;font-size:large"><=
br style=3D"font-family:"arial black",sans-serif;font-size:large"=
>
rge">Please contact me for further information about this offer.
style=3D"font-family:"arial black",sans-serif;font-size:large">
r style=3D"font-family:"arial black",sans-serif;font-size:large">=
ge">Thank you for your time and interest.
uot;arial black",sans-serif;font-size:large">
"arial black",sans-serif;font-size:large">
ily:"arial black",sans-serif;font-size:large">Mr. Perry Coleman
span>
large">
ize:large">191 High St, Barnet,
black",sans-serif;font-size:large">
ial black",sans-serif;font-size:large">Greater London,
=3D"font-family:"arial black",sans-serif;font-size:large">
tyle=3D"font-family:"arial black",sans-serif;font-size:large">EN5=
5SU
--000000000000767b8d065e9498c4--