WEb/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dve@doctor.nl2k.ab.ca

Delivery-date: Thu, 04 Jun 2026 10:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVB3F-00000000Hwn-2ltK

for dve@doctor.nl2k.ab.ca;

Thu, 04 Jun 2026 10:36:13 -0600

Resent-From: The Doctor

Resent-Date: Thu, 4 Jun 2026 10:36:13 -0600

Resent-Message-ID:

Resent-To: dve@doctor.nl2k.ab.ca

Received: from mail-qt1-f207.google.com ([209.85.160.207]:42063)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wV6WB-00000000PIQ-3KZ1

for sales@nk.ca;

Thu, 04 Jun 2026 05:45:55 -0600

Received: by mail-qt1-f207.google.com with SMTP id d75a77b69052e-517582695d7so14440531cf.0

for ; Thu, 04 Jun 2026 04:45:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nextdigitalgrowth.com; s=google; t=1780573495; x=1781178295; darn=nk.ca;

h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=V9qg1O78Fi5OyPzhKgK4MTN5gXzQG2ADvUN6JX9HAnw=;

b=EddJ3aDL3i6IFCKzwsNdN+z7tvUb8texM0RJduDPNp/J10tz8g1RcI2yBM3RCjWgIF

H4EKXsbRwAXumIxAhgAEq/UoKplW3SjWR+dDmhm5u3EiW5739LCrTqsf5OYp13ZEIupi

KtmEhx/1c74E6sOAM82iq/wrUTXPGXAnAQM+tWbk6/rf4Q+cYT40Ilj3nsJykN0qWVi0

mSco2mm963W+3KsC5D4IVgMQb6xhvGP7A5Gl149LO5itOkOmoFBNbeLCNicVT7O2aROx

BsBKK28gpdfOpSi1r3YM3noG4Bnm+VCAbn9KzNjvBU7hXmYEP60JwsIJ8lqDtXkpqnql

zMQw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780573495; x=1781178295;

h=to:from:subject:date:message-id:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=V9qg1O78Fi5OyPzhKgK4MTN5gXzQG2ADvUN6JX9HAnw=;

b=Yt3TUQw36f9xq7sGZb9WprJ+hN0NkY2tPpOdidkxScAELgdbpTaHz9gS2Z/9hGWaON

Sb7WkYenvxF/OTfy1r/WowbYVSq0ChV1h3iMY9w48er6pYJ7gMWLfF8idl++TQJdeiIs

RXC5HgMLTEHf9Nas73VsqLliG8r6QwZ0mmGqwcLp/I8qvKZ0AZTXOo0ijGAMHSFYvYKp

Qtvss1BgRxTPaW9IT3jkJ4CqFvUDoCOyYSy2Vo90iV0R8/OQzVzkMcWd0p/H94wqbkUs

WCHtvm4+pbhimaYCpwKrUwO+D/smp4mdHRoPqTrRVbrn0fWV49KpKO+yaDH+VFL1EJJi

Uc9g==

X-Gm-Message-State: AOJu0YyHFMaX+jc/GuaDDqHDmSlSU3qoXqjiHOKwHCSXevVCt25KagI4

KrbqbM3ddh7WE/3UOXNXo0iP5jIMw2PSxU0iMz6CBWDpBlTirEv+K4r40VlvOrMRpQDNw5eMdlh

k6SGfbJ97M9g0DLwqQLJc6KJ+

MIME-Version: 1.0

X-Received: by 2002:a05:690e:488c:10b0:65e:73:ec64 with SMTP id

956f58d0204a3-660f12649c3mr1787735d50.45.1780573476638; Thu, 04 Jun 2026

04:44:36 -0700 (PDT)

Reply-To: Sales@nextdigitalgrowth.com

Message-ID:

Date: Thu, 04 Jun 2026 11:44:36 +0000

Subject: Re: www.nk.ca

From: jack@nextdigitalgrowth.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000092645c06536c117f"

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I hope you're doing well. I recently came across your

website, www.nk.ca, and I can see strong potential in what you're offering.

With a few strategic improvements, the site could significantly enhance user

experience, strengt [...]



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.207 listed in dnsbl.ahbl.org]

[209.85.160.207 listed in dnsbl.ahbl.org]

[209.85.160.207 listed in dnsbl.ahbl.org]

[209.85.160.207 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.207 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.207 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.207 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.207 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.207 listed in will-spam-for-food.eu.org]

[209.85.160.207 listed in will-spam-for-food.eu.org]

[209.85.160.207 listed in will-spam-for-food.eu.org]

[209.85.160.207 listed in will-spam-for-food.eu.org]

[209.85.160.207 listed in will-spam-for-food.eu.org]

[209.85.160.207 listed in will-spam-for-food.eu.org]

[209.85.160.207 listed in will-spam-for-food.eu.org]

[209.85.160.207 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: nextdigitalgrowth.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: nextdigitalgrowth.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.207 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.207 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.160.207 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: www.nk.ca



--00000000000092645c06536c117f

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SGksDQoNCkkgaG9wZSB5b3UncmUgZG9pbmcgd2VsbC4NCg0KSSByZWNlbnRseSBjYW1lIGFjcm9z

cyB5b3VyIHdlYnNpdGUsIHd3dy5uay5jYSwgYW5kIEkgY2FuIHNlZSBzdHJvbmcgIA0KcG90ZW50

aWFsIGluIHdoYXQgeW91J3JlIG9mZmVyaW5nLiBXaXRoIGEgZmV3IHN0cmF0ZWdpYyBpbXByb3Zl

bWVudHMsIHRoZSAgDQpzaXRlIGNvdWxkIHNpZ25pZmljYW50bHkgZW5oYW5jZSB1c2VyIGV4cGVy

aWVuY2UsIHN0cmVuZ3RoZW4geW91ciBicmFuZCAgDQppbWFnZSwgYW5kIGRyaXZlIGJldHRlciBy

ZXN1bHRzLg0KDQpJJ2QgbG92ZSB0byBzaGFyZSBzb21lIGlkZWFzIGFsb25nIHdpdGggcHJpY2lu

ZyBkZXRhaWxzIGZvciBhIG1vZGVybiAgDQp3ZWJzaXRlIHJlZGVzaWduIHRoYXQgY2FuIGhlbHAg

eW91IGF0dHJhY3QgbW9yZSB2aXNpdG9ycyBhbmQgaW1wcm92ZSAgDQplbmdhZ2VtZW50Lg0KDQpQ

bGVhc2UgbGV0IG1lIGtub3cgaWYgeW91J2QgYmUgb3BlbiB0byByZXZpZXdpbmcgdGhlIGRldGFp

bHPigJRJJ2QgYmUgaGFwcHkgIA0KdG8gc2VuZCB0aGVtIG92ZXIuDQoNCkkgbG9vayBmb3J3YXJk

IHRvIGhlYXJpbmcgZnJvbSB5b3UuDQoNClRoYW5rIFlvdSEhDQo=

--00000000000092645c06536c117f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

I hope you're doing well.

I recently came across your web=

site, www.nk.ca, and I can see strong potential in what you're offering. Wi=

th a few strategic improvements, the site could significantly enhance user =

experience, strengthen your brand image, and drive better results.

I=

=E2=80=99d love to share some ideas along with pricing details for a modern=

website redesign that can help you attract more visitors and improve engag=

ement.

Please let me know if you=E2=80=99d be open to reviewing the =

details=E2=80=94I=E2=80=99d be happy to send them over.

I look forwa=

rd to hearing from you.

Thank You!!


--00000000000092645c06536c117f--

WEb/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 04 Jun 2026 10:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVB3K-00000000Hwy-0J8R

for dave@doctor.nl2k.ab.ca;

Thu, 04 Jun 2026 10:36:18 -0600

Resent-From: The Doctor

Resent-Date: Thu, 4 Jun 2026 10:36:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yx1-f80.google.com ([74.125.224.80]:43178)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wV6Vt-00000000PIB-1PKo

for sales@nk.ca;

Thu, 04 Jun 2026 05:45:37 -0600

Received: by mail-yx1-f80.google.com with SMTP id 956f58d0204a3-660d7828f42so2962950d50.0

for ; Thu, 04 Jun 2026 04:44:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nextdigitalgrowth.com; s=google; t=1780573476; x=1781178276; darn=nk.ca;

h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=V9qg1O78Fi5OyPzhKgK4MTN5gXzQG2ADvUN6JX9HAnw=;

b=YLsUOJqoRXvv4Yjv0Nn0hdXyMSx98DyFnIEt+TYDt8srp8cAWV4lEARx41OkXkr8GC

4JOdeADAMjP6+QyVBiO58mNfFHTXTfdKWg7RhlL1jYANYzmsPt1QN4CWEe8jeEzyQVs3

Wyxq7EtY9y5RUVbDcN9atNVq+ZZqI11f19y5XltCONoW/ADxkfN69iqJZtqCXsGTq/m6

rrZlMwfwkcwTcxuND1UY0tzrD53mqmFbQMhdhJ5qDbKvIW8/y104PfQOerxlLE0GtyJ1

2AfOhAkm0BjsDa/kCHgGlcqTRaZN+FvaQCgCXQQZmh5Y9DBr9FCO053BMRaMuRdN73wC

uBBQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780573476; x=1781178276;

h=to:from:subject:date:message-id:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=V9qg1O78Fi5OyPzhKgK4MTN5gXzQG2ADvUN6JX9HAnw=;

b=RwH43uLof2htT+Xd3Ij1BFzd9VGn7K3ujxo8+HefFdGf3679TJrspmoN4MvK/yvuDg

2ramuGJYjCHz8ImxrFQiCIPgVZLfFdb02xyemkQ3ujPrFln8bY99mzbQ0O+gw91b/o8J

ohP6SfGyyZskpHIZ2E1v1jV/2mbxSWkeDbq2QMyVwTAQtMKXDcm6ToY15NarktnQrz+E

5hzFHjK+8J7HYwrO7sANmslU38Rq54G7x5G0oSUk0PeE8yeA08dAy99BCjVtfW5Ekuto

aqq2GfrS8SwQCn7qD6d5OkZxjdFuQfghctRHKca7RJlN+7lSpX2gpAXSW4qKJw7kyBw0

oXQg==

X-Gm-Message-State: AOJu0YwpladgQModMx4DUj4ay+QuUxgoCT/ZHSDxfsXBtQYuJp352jMX

S8poUt89AAgw4SNxsYJXs61z+rN/wsTGut1Mx/x6qZ/h7Ew2tzCMVc2zoqBpXOD9EuGKGeK3Zk2

7j+xexgtgkKHsPEGR6rFeM4Mi

MIME-Version: 1.0

X-Received: by 2002:a05:690e:488c:10b0:65e:73:ec64 with SMTP id

956f58d0204a3-660f12649c3mr1787735d50.45.1780573476638; Thu, 04 Jun 2026

04:44:36 -0700 (PDT)

Reply-To: Sales@nextdigitalgrowth.com

Message-ID:

Date: Thu, 04 Jun 2026 11:44:36 +0000

Subject: Re: www.nk.ca

From: jack@nextdigitalgrowth.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000092645c06536c117f"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I hope you're doing well. I recently came across your

website, www.nk.ca, and I can see strong potential in what you're offering.

With a few strategic improvements, the site could significantly enhance user

experience, strengt [...]



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.80 listed in dnsbl.ahbl.org]

[74.125.224.80 listed in dnsbl.ahbl.org]

[74.125.224.80 listed in dnsbl.ahbl.org]

[74.125.224.80 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.80 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.80 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.80 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.80 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.224.80 listed in will-spam-for-food.eu.org]

[74.125.224.80 listed in will-spam-for-food.eu.org]

[74.125.224.80 listed in will-spam-for-food.eu.org]

[74.125.224.80 listed in will-spam-for-food.eu.org]

[74.125.224.80 listed in will-spam-for-food.eu.org]

[74.125.224.80 listed in will-spam-for-food.eu.org]

[74.125.224.80 listed in will-spam-for-food.eu.org]

[74.125.224.80 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.80 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: nextdigitalgrowth.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: nextdigitalgrowth.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 SALES_REPLY Your parents named you sales?

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.80 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.224.80 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: www.nk.ca



--00000000000092645c06536c117f

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SGksDQoNCkkgaG9wZSB5b3UncmUgZG9pbmcgd2VsbC4NCg0KSSByZWNlbnRseSBjYW1lIGFjcm9z

cyB5b3VyIHdlYnNpdGUsIHd3dy5uay5jYSwgYW5kIEkgY2FuIHNlZSBzdHJvbmcgIA0KcG90ZW50

aWFsIGluIHdoYXQgeW91J3JlIG9mZmVyaW5nLiBXaXRoIGEgZmV3IHN0cmF0ZWdpYyBpbXByb3Zl

bWVudHMsIHRoZSAgDQpzaXRlIGNvdWxkIHNpZ25pZmljYW50bHkgZW5oYW5jZSB1c2VyIGV4cGVy

aWVuY2UsIHN0cmVuZ3RoZW4geW91ciBicmFuZCAgDQppbWFnZSwgYW5kIGRyaXZlIGJldHRlciBy

ZXN1bHRzLg0KDQpJJ2QgbG92ZSB0byBzaGFyZSBzb21lIGlkZWFzIGFsb25nIHdpdGggcHJpY2lu

ZyBkZXRhaWxzIGZvciBhIG1vZGVybiAgDQp3ZWJzaXRlIHJlZGVzaWduIHRoYXQgY2FuIGhlbHAg

eW91IGF0dHJhY3QgbW9yZSB2aXNpdG9ycyBhbmQgaW1wcm92ZSAgDQplbmdhZ2VtZW50Lg0KDQpQ

bGVhc2UgbGV0IG1lIGtub3cgaWYgeW91J2QgYmUgb3BlbiB0byByZXZpZXdpbmcgdGhlIGRldGFp

bHPigJRJJ2QgYmUgaGFwcHkgIA0KdG8gc2VuZCB0aGVtIG92ZXIuDQoNCkkgbG9vayBmb3J3YXJk

IHRvIGhlYXJpbmcgZnJvbSB5b3UuDQoNClRoYW5rIFlvdSEhDQo=

--00000000000092645c06536c117f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

I hope you're doing well.

I recently came across your web=

site, www.nk.ca, and I can see strong potential in what you're offering. Wi=

th a few strategic improvements, the site could significantly enhance user =

experience, strengthen your brand image, and drive better results.

I=

=E2=80=99d love to share some ideas along with pricing details for a modern=

website redesign that can help you attract more visitors and improve engag=

ement.

Please let me know if you=E2=80=99d be open to reviewing the =

details=E2=80=94I=E2=80=99d be happy to send them over.

I look forwa=

rd to hearing from you.

Thank You!!


--00000000000092645c06536c117f--

Web/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 04 Jun 2026 10:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVB34-00000000HwM-1b0C

for dave@doctor.nl2k.ab.ca;

Thu, 04 Jun 2026 10:36:02 -0600

Resent-From: The Doctor

Resent-Date: Thu, 4 Jun 2026 10:36:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f206.google.com ([209.85.160.206]:57522)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wV6MF-00000000Opg-3GT2

for root@nk.ca;

Thu, 04 Jun 2026 05:35:39 -0600

Received: by mail-qt1-f206.google.com with SMTP id d75a77b69052e-51771d41426so14040441cf.2

for ; Thu, 04 Jun 2026 04:34:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nextdigitalgrowth.com; s=google; t=1780572879; x=1781177679; darn=nk.ca;

h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=YfsFzzxTquIrSMH6IJpvleYW14L+8NcR2xrQ3slQkCk=;

b=RiqKhP7sbCU9XBPdGyF+bdtWRUJ5eGMr8jCJZokH57D/jdsM4ShuQpUOuyDvYPdrUN

86wfgUu2IgMT7T8TiYWum0+G0VDEpwtDELFGAdFbfTVJ1Q3j0G6MtRP2i9O47j9cqLaC

/YNV+OgcWMwzr+zaQIxhMUj8nwxDD4Xbeusrh+fZPw0szP3Rd6uJs4RLNwdzv62Z10JI

2ItPB7sui+QjeHuo5V2sMDuWzBZsWAjdw/5b/Ho4JDmpby4n8MPnU++RRHRrh1v5+YnF

2bT1xhCaz6/KZJNDsLD9OiwrIfJCsfYZXf2cyZQ9w+CfQB6xJyijpCl3Fzg0vDY4plvN

JJPQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780572879; x=1781177679;

h=to:from:subject:date:message-id:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=YfsFzzxTquIrSMH6IJpvleYW14L+8NcR2xrQ3slQkCk=;

b=hdJbpGCVjuIqy3ytnwWp47gcBKmcr5Vtc7Ky2CoTh4V1ipQLyOT5ghjFUGzWFvIWlY

67Xj0dMBLo7tvI+c7JcVz+0YiMFwjbGrClOIunKXjepp13QadD2yYb/7KNEt+SPsig9t

xHcXGYQkC0NOd17k+H3BXK8WqopGmXkWOj2wCd4Ce2NRNKinM76gJ2q2piwdjVJ6Bvyx

C/xM6bQMbR5n/TcUVQa7EX9OWDyGOBQlG8oStKxPBIsFKTjA4WXnnd5QHdo4B0GYqFPo

AC0Wc3cIlsjpPK4nk+9lCTCrGR9E+PNys2Hb8j9SZtk4qmlTdNGlkfm3KWnOBbH0EJnO

mGFA==

X-Gm-Message-State: AOJu0YxhWH7WI09pb0eVjbruXnDjDITSZ0EzxOMveODSWBbicb7co6q6

0WaeU4SILDF2sEFqir6Qv3DxlJC3hO5D7JnkII+gwiPAOSAVO3LyodVYHlp0uTw2X3ZI6o9+Cui

CUIFVVpNttnmgCrtlZffJwW+F

MIME-Version: 1.0

X-Received: by 2002:a05:690c:490e:b0:7db:e20c:2b24 with SMTP id

00721157ae682-7ea4b6f2c2amr70810737b3.45.1780572868032; Thu, 04 Jun 2026

04:34:28 -0700 (PDT)

Reply-To: Sales@nextdigitalgrowth.com

Message-ID:

Date: Thu, 04 Jun 2026 11:34:28 +0000

Subject: Re: www.nk.ca

From: alexisd@nextdigitalgrowth.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004bc61206536bed02"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I hope you're doing well. I reviewed your website www.nk.ca

and see strong potential to improve its design and overall user experience.

A modern, responsive, and professional website can help you attract more

visitors and incr [...]



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.206 listed in dnsbl.ahbl.org]

[209.85.160.206 listed in dnsbl.ahbl.org]

[209.85.160.206 listed in dnsbl.ahbl.org]

[209.85.160.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.206 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.206 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.206 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.206 listed in will-spam-for-food.eu.org]

[209.85.160.206 listed in will-spam-for-food.eu.org]

[209.85.160.206 listed in will-spam-for-food.eu.org]

[209.85.160.206 listed in will-spam-for-food.eu.org]

[209.85.160.206 listed in will-spam-for-food.eu.org]

[209.85.160.206 listed in will-spam-for-food.eu.org]

[209.85.160.206 listed in will-spam-for-food.eu.org]

[209.85.160.206 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: nextdigitalgrowth.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: nextdigitalgrowth.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.206 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.206 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.206 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Re: www.nk.ca



--0000000000004bc61206536bed02

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



I hope you're doing well.



I reviewed your website www.nk.ca and see strong potential to improve its

design and overall user experience. A modern, responsive, and professional

website can help you attract more visitors and increase conversions.



We provide complete website design services, including custom design,

mobile-friendly layouts, and optimized pages to support your business

growth.



May I share more details about our services?



Kindly share your requirements and contact details, and let me know a

convenient time for a quick meeting.



Thank you!!



--0000000000004bc61206536bed02

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

I hope you're doing well.

I reviewed your website www.nk.=

ca and see strong potential to improve its design and overall user experien=

ce. A modern, responsive, and professional website can help you attract mor=

e visitors and increase conversions.

We provide complete website des=

ign services, including custom design, mobile-friendly layouts, and optimiz=

ed pages to support your business growth.

May I share more details a=

bout our services?

Kindly share your requirements and contact detail=

s, and let me know a convenient time for a quick meeting.

Thank you!=

!


--0000000000004bc61206536bed02--

Web/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 04 Jun 2026 10:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVB38-00000000HwX-388X

for dave@doctor.nl2k.ab.ca;

Thu, 04 Jun 2026 10:36:06 -0600

Resent-From: The Doctor

Resent-Date: Thu, 4 Jun 2026 10:36:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f207.google.com ([209.85.128.207]:57842)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wV6M5-00000000Oov-0M2M

for root@nk.ca;

Thu, 04 Jun 2026 05:35:28 -0600

Received: by mail-yw1-f207.google.com with SMTP id 00721157ae682-7e964b7361aso6766397b3.3

for ; Thu, 04 Jun 2026 04:34:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nextdigitalgrowth.com; s=google; t=1780572868; x=1781177668; darn=nk.ca;

h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=YfsFzzxTquIrSMH6IJpvleYW14L+8NcR2xrQ3slQkCk=;

b=anKymELfSoYvYSn6HfzC+gislq6O6FHByKVRrLQqqw7xpDCQCZR0O3C30Cwvkoj0rx

YpR82DOaIh8ffLfm57c9wPb1Eb29W+Rg4gbzGJPq6ecGVVVAOaFv6S7z88YRprOIbXNR

CYpIl3r9MPSsbQuVrxgMt9O2VtAX99OftQ3A6d6ox5zWb98LH+EpljTw71Qq2BShnTj7

7DY2vaG2ANxhsGFViKMAm6dYKqZ5c+AoYkMsShJ/uYWA//EC0Cz2Z0cHosMCcy4vq4yr

J0UgCmxmdOzEjPhuIs/UemdLwB8sOFJZ19DTtqrB4OC3xPStw+ZE17TgGpoR4sNzpB/i

aTuA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780572868; x=1781177668;

h=to:from:subject:date:message-id:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=YfsFzzxTquIrSMH6IJpvleYW14L+8NcR2xrQ3slQkCk=;

b=doch5Vsa7CvVVkIjBdB9R3mfJvDj1lL1gx+WtxPOB0fCRg/lAFwfPcaRfl+/Qpfp1o

xpAG70HoUrAFKA6vEqv23ewRE21Ax9RbFSPfbe6uGTtkV3B+RVJP2q0QSQVlYOZF9cez

jqJpiJwss2nnwGNkG7kZq/bkorHR1xLr2xBn0msfV594NloWGzAO0tEVE6pJcOaxKDlM

Mt/m8FsxmgWDciLXEMemZ3l+C/uKkNtaIEbaudY9gxx1Kd5uJHM51+Q9Kq7CRwF2H0Ke

rQ3ninhgx3x50zuZYrMiIR1LDaYyfptOkJ2PJiqsBhj3Mn04KuNMjGiP1wmkC+Ot7RU/

05Ug==

X-Gm-Message-State: AOJu0YwAtwbjkjZAUko1ZV6RMfH9YLZ6l1vIdwdScDzCZUwpxEQdrYdn

etxjMZ83GpuuFOjk6b/FT9Y9f1knCOj/v9WPN9NLSD9hbECXd0ZGtKRUFaW6wuuwM/K9F7mRIuK

25ybZspDm59g08YARHQxsqyYu

MIME-Version: 1.0

X-Received: by 2002:a05:690c:490e:b0:7db:e20c:2b24 with SMTP id

00721157ae682-7ea4b6f2c2amr70810737b3.45.1780572868032; Thu, 04 Jun 2026

04:34:28 -0700 (PDT)

Reply-To: Sales@nextdigitalgrowth.com

Message-ID:

Date: Thu, 04 Jun 2026 11:34:28 +0000

Subject: Re: www.nk.ca

From: alexisd@nextdigitalgrowth.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004bc61206536bed02"

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I hope you're doing well. I reviewed your website www.nk.ca

and see strong potential to improve its design and overall user experience.

A modern, responsive, and professional website can help you attract more

visitors and incr [...]



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.207 listed in dnsbl.ahbl.org]

[209.85.128.207 listed in dnsbl.ahbl.org]

[209.85.128.207 listed in dnsbl.ahbl.org]

[209.85.128.207 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.207 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.207 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.207 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.207 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.207 listed in will-spam-for-food.eu.org]

[209.85.128.207 listed in will-spam-for-food.eu.org]

[209.85.128.207 listed in will-spam-for-food.eu.org]

[209.85.128.207 listed in will-spam-for-food.eu.org]

[209.85.128.207 listed in will-spam-for-food.eu.org]

[209.85.128.207 listed in will-spam-for-food.eu.org]

[209.85.128.207 listed in will-spam-for-food.eu.org]

[209.85.128.207 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: nextdigitalgrowth.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: nextdigitalgrowth.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.207 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.207 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.207 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Re: www.nk.ca



--0000000000004bc61206536bed02

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



I hope you're doing well.



I reviewed your website www.nk.ca and see strong potential to improve its

design and overall user experience. A modern, responsive, and professional

website can help you attract more visitors and increase conversions.



We provide complete website design services, including custom design,

mobile-friendly layouts, and optimized pages to support your business

growth.



May I share more details about our services?



Kindly share your requirements and contact details, and let me know a

convenient time for a quick meeting.



Thank you!!



--0000000000004bc61206536bed02

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

I hope you're doing well.

I reviewed your website www.nk.=

ca and see strong potential to improve its design and overall user experien=

ce. A modern, responsive, and professional website can help you attract mor=

e visitors and increase conversions.

We provide complete website des=

ign services, including custom design, mobile-friendly layouts, and optimiz=

ed pages to support your business growth.

May I share more details a=

bout our services?

Kindly share your requirements and contact detail=

s, and let me know a convenient time for a quick meeting.

Thank you!=

!


--0000000000004bc61206536bed02--

Urgent Business Proposal Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 04 Jun 2026 10:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wVB2w-00000000Hvi-3gws

for dave@doctor.nl2k.ab.ca;

Thu, 04 Jun 2026 10:35:54 -0600

Resent-From: The Doctor

Resent-Date: Thu, 4 Jun 2026 10:35:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yx1-f45.google.com ([74.125.224.45]:54567)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wV6JC-00000000Obx-4BAz

for root@nk.ca;

Thu, 04 Jun 2026 05:32:32 -0600

Received: by mail-yx1-f45.google.com with SMTP id 956f58d0204a3-660e9fef1d4so706939d50.1

for ; Thu, 04 Jun 2026 04:31:35 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1780572689; cv=none;

d=google.com; s=arc-20240605;

b=UqnbvQDokhGMUP++Uw13+nq605rOZ1qfFMIjJNKuszHacV4rPyAyK2bn/NgcfxsHpC

QUFxvfVzF0WoWerJXeVZUg2wXYZy3FKBz7Qv4ktPdLNVQ8DF4fhjpTLUqGSrXuKV5jaC

jxCJmAYfw0qPiHPq1unmCURQOqR83ZRCaTaRGHn65W02bSLhuCiN6tNfmW43hyFS14ll

FJlUgByYmc2pYOIzMVsQiCFJMCwM9k+OOPV6ry/kH8JS4lxDwqjXJoP86TdaQ00/+5st

F2QxK9ahd7pwStiMqGLtmxwESupZvq7m1dk3ZREXZQk4BUp0j+69OGRsepFDtNvxT9+B

gyrw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=BcU75yWyG3SNDPo+2Pd1iQbUbE/lH0aD4X3nZlTJ2vY=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=NXLf4YdA3YtbJidNrvWWVOQH4EahT43gqM0ciJVGskjoOPYQP131Z3ocHXfFQFXZum

6c4m+TPMC8vSXGAq4Jq3upZSw5Ot6+t9l8wuc7qObm2TfAzgavPPSd3lTZ1ejfQen+WE

fsPjsTKhvI4u0zmy3b4F3LGnq0LFN+IzvfWiDfnRmJ8w8038VAG6G2aIhP/F5jcsNhSm

rT85yiW+dhXaNFq/SmUZI4WB7BMxws0HbV4sssbtJSlbVb2SNNxkjQujF3JAmtJkO3DZ

9+spw9ZnwjqZi00XpTLOxttgguXTNDZ90fSY1WWgfn+Zq+hvDGV2PcxOXCslgImMhCyZ

+Y+Q==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1780572689; x=1781177489; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=BcU75yWyG3SNDPo+2Pd1iQbUbE/lH0aD4X3nZlTJ2vY=;

b=fHa5HZvRXrhBbe135IKIXrPSKPDq+Vr0l3zHUhdkWD1G3V07rglpeCjlkhToEDmdUv

Mq/z+zs0ZQoUjkw0Lbs2yeOcuMcrxZcAS9pqf6+qprgNl6RT4MIb3wGct+BbCRo8on1a

WKxzRe8ZhEQCvMU3eWK7ogk/aV9YKeLStdh1LE8YL0EDfQ5arZofHnkex+akzn4lJrVy

ImbjUEuJ+SRW/iT2U152y0bZ+qUStCu9B3POPAjrxH7P9kjMZrlFiBorC+c4pPXWJdOs

OpbqalwnVMSFC5CPorSLvtcf15+gL1npJdmMtW93PwOr6aHqrLld5gDSSMUBPji+fyov

a54g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1780572689; x=1781177489;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=BcU75yWyG3SNDPo+2Pd1iQbUbE/lH0aD4X3nZlTJ2vY=;

b=j1AkvR2FguoKFUZfaXtcCyb4mYnbnRNfBn0g6wopsBgWNMgDnMVp4dGMkM/8d0btIA

2Tk+fUmG7FgaTQpyPibGtRsepC+z9sAF1rf7CQu21mafOrn39twUT2D5fDvFadUYVRXf

kHV4Q5lnmXQjc3E8BoLoV252ZKkfaU0vYY+mO4XK77l0qsJ/3c4DWT716buomAeoolJA

zxOPxZECU39C1kOHVjlui4/No3vWkdsL/yCgcPSSIq5AjbpMp6hKEaAVP2vdA1jy6se6

lAH4cyfY5en93twh6Yed2Vi76LLhRRi92+llp+LEwTPptT4W1oKNy9eft69i0NR/3EYM

pmOQ==

X-Gm-Message-State: AOJu0YwIXF20+hOjg0QJBc7WsLk+a6SkxQI8fTcSGvEp+DiMbJd5/QEu

61sSMOtsJsSPA5+C3HsGapkd8peYuDHSGuzeTUEiXdkqsNk5dG8rbI5chJiGg4NT/RC/ZTLpw2n

uVt2DGVCKLBiIK3WSeEkUYn5JqLo1PpInaYPSum2GFw==

X-Gm-Gg: Acq92OHZ/L+arPf5VwP0miepEPOUfDMcIH5FnYCVWcpRBlvs4mGZWySqxXsbe9NbtVt

iZDV0MAoHGujkxWS23gN/gR9rAnrMaLa2+XbFK/fnRb/QWp+bXCC4L9Jyvi2rrrpCEx8Kabmcg7

eg02QoY3YGvIrILLiIpn/qn/q/YfYSO+qaPk+vdhhONGsfYP4YZHsm6mH33diYduupbGx1nt+l7

mQjGQmX4A6MnnJyAM6ypid8JpBtQYp2qM3wz+aGWIWRKIUAchnmr2O6ORFMObgMj0ajUeSA/cbV

OH0NAAjmVucPfb/Wqxs9qnzYy6OC2Uk0n30Vk+jJekUxXLiwwJot0e9RAJixSsfXAbYKJ+trmQe

dQCw=

X-Received: by 2002:a05:690e:4806:b0:660:5ce2:58e6 with SMTP id

956f58d0204a3-660dbe7bcc5mr4248349d50.21.1780572688132; Thu, 04 Jun 2026

04:31:28 -0700 (PDT)

MIME-Version: 1.0

From: Onur Genc

Date: Thu, 4 Jun 2026 12:31:15 +0100

X-Gm-Features: AVHnY4LndwfgGgBMTKN-SHBMrbBkjKxCSyAMD87umm6linh0EXYSuA64zdSonE4

Message-ID:

Subject: Project Collaboration

To: root@nk.ca

Content-Type: multipart/alternative; boundary="00000000000092ad1206536be2f3"



--00000000000092ad1206536be2f3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



Please let me know whether it would be acceptable to send information

regarding a work-related proposal to this email address. I came across your

contact information on LinkedIn.






Many thanks,

Mr. Onur Gen=C3=A7...



*External Email: *Treat links and attachments with caution.







*Confidentiality Notice*: The information contained in this email is

privileged, private, and confidential, including all attachments. It is

intended for the use of the recipients or entities named above. Any use,

including but not limited to, reading, disclosing, dissemination,

distribution, reproduction, and transmission is strictly prohibited. If you

are not the intended recipient of this message, or if this email message

has been either addressed incorrectly, or sent to you in error, please

notify sender by replying to this email and then delete and destroy this

email message and all attachments. Your cooperation is

appreciated.............



--00000000000092ad1206536be2f3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





r=3D"ltr" class=3D"gmail_signature" data-smartmail=3D"gmail_signature">
dir=3D"ltr">


ont dir=3D"auto" face=3D"verdana, sans-serif" color=3D"#000000" style=3D"ve=

rtical-align:inherit">Hello,


style=3D"vertical-align:inherit">
erif" color=3D"#000000" style=3D"vertical-align:inherit">Please let me k=

now whether it would be acceptable to send information regarding a work-rel=

ated proposal to this email address. I came across your contact information=

on LinkedIn.


align:inherit">
0000" style=3D"vertical-align:inherit">

<=

div>
Many thanks,

color=3D"#000000">Mr. Onur Gen=C3=A7...

r=3D"#000000">

)">External Ema=

il:=C2=A0
Treat links and att=

achments with caution.

style=3D"font-size:10pt">

)">

34,34,34)">

lor:rgb(34,34,34)">
1" style=3D"font-family:garamond,"times new roman",serif;color:rg=

b(153,153,153)">Confidentiality Notice:=C2=A0The information contain=

ed in this email is privileged, private, and confidential, including all at=

tachments. It=C2=A0 is intended for the use of the recipients or entities n=

amed above. Any use, including but not limited to, reading, disclosing, dis=

semination, distribution, reproduction, and transmission is strictly prohib=

ited. If you are not the intended recipient of this message, or if this ema=

il message has been either addressed incorrectly, or sent to you in error, =

please notify sender by replying to this email and then delete and destroy =

this email message and all attachments. Your cooperation is appreciated....=

.........






--00000000000092ad1206536be2f3--

Chinese phish spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 04 Jun 2026 04:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wV5SM-00000000LDJ-2eUH

for dave@doctor.nl2k.ab.ca;

Thu, 04 Jun 2026 04:37:46 -0600

Resent-From: The Doctor

Resent-Date: Thu, 4 Jun 2026 04:37:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp74-185.mmglsmd.net ([160.124.74.185]:52094)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wV4ij-000000006oF-2fdG

for root@nk.ca;

Thu, 04 Jun 2026 03:50:45 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1780566587; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=67VXqlvfNKWLMEAGoBZuCn+/MeFUKLuRO4m909COOXU=;

b=UynAODT74N7Di49xPzytKS7kjm56eknP5QAT8s32PdGD0GfXlwd1mOnb

2eZbxl4blS68sImjQhxhXuZrhZlPtpZzxkAntfIdrCnV9Qt4ulOQ/qsdbY

BwKgaiJ6VoklBB0yc1IRICQXndpKqSCJFYgkJgsOkKtSBTxXlQvJ0kVgE=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id YdXIZeEqTmBH

for ; Thu, 04 Jun 2026 17:46:44 +0800

Content-Type: multipart/mixed; boundary="===============5422080299324320726=="

MIME-Version: 1.0

Message-Id: <20260604174644.32838-{13453:20260604173836-13453-48}-0073564@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?q?Re=3A_AS/NZS_1163_=26_API_5L_Steel_Pipes_=E2=80=93_Serving_more?=

=?utf-8?q?_than_30years?=

From: Sophia-Threewaysteel

To: "www.nk.ca"

Date: Thu, 04 Jun 2026 17:46:44 +0800

Mail-ID: 6a2147d5e1382308ac82c176

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, This is Sophia from Threeway Steel.





Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.74.185 listed in dnsbl.ahbl.org]

[160.124.74.185 listed in dnsbl.ahbl.org]

[160.124.74.185 listed in dnsbl.ahbl.org]

[160.124.74.185 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.74.185 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.74.185 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.74.185 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.74.185 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.74.185 listed in will-spam-for-food.eu.org]

[160.124.74.185 listed in will-spam-for-food.eu.org]

[160.124.74.185 listed in will-spam-for-food.eu.org]

[160.124.74.185 listed in will-spam-for-food.eu.org]

[160.124.74.185 listed in will-spam-for-food.eu.org]

[160.124.74.185 listed in will-spam-for-food.eu.org]

[160.124.74.185 listed in will-spam-for-food.eu.org]

[160.124.74.185 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: count.shinestarsteel.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shinestarsteel.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ns17.xincache.com/112.80.181.45]

-0.0 SPF_PASS SPF: sender matches SPF record

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Re=3A_AS/NZS_1163_=26_API_5L_Steel_Pipes_=E2=80=93_Serving_more?=

=?utf-8?q?_than_30years?=







Dear Purchasing Manager,



This is Sophia from Threeway Steel.



Threeway Steel – 33 years of experience, exports to over 150 countries. We are a manufacturer focusing on one-stop service supply of steel and processing.



From raw steel (plate, tube, section) to custom fabrication – cutting, bending, welding, machining, painting, and assembly. We deliver finished parts like:



Equipment frames / housings



Mining machinery parts



Pressure vessel frames



Industrial cabinets & non-standard structures



Advantages:



One-stop – Save 30-50% sourcing & logistics cost vs. multiple vendors



Certified material – ASTM, EN, BS, GOST, SABS available upon request



Factory direct – Trial order welcome. Small quantity acceptable.



We have shipped to South Africa, Nigeria, Kenya, Tanzania, Ghana, and other African countries.



If you have any pending steel component outsourcing, please share drawings or specs. Quotation within 24 hours.



Best regards,















Sophia Zeng

Sales Manager | Industrial Pipe Division



Threeway Steel Co.,Ltd

Tel:+86-731-88736283 Fax:+86-731-88896236

Mobile : +86-13544036536

Email: sophia@threewaysteel.com

Website: www.threewaysteel.com

Skype: zeng.sophia1 Wechat:meiping77



Hunan Steel Industrial Zone, Tianxin Special District,

Changsha City,China

nigerian spam from Italy

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 04 Jun 2026 04:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wV5Mo-000000006MH-1BFP

for dave@doctor.nl2k.ab.ca;

Thu, 04 Jun 2026 04:32:02 -0600

Resent-From: The Doctor

Resent-Date: Thu, 4 Jun 2026 04:32:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.aquila.infn.it ([192.84.154.21]:56294)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wV1Bu-00000000MEF-3uSJ

for sales@nk.ca;

Thu, 04 Jun 2026 00:04:41 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.aquila.infn.it (Postfix) with ESMTP id 3A9849C62C239

for ; Thu, 4 Jun 2026 08:03:43 +0200 (CEST)

Received: from mail.aquila.infn.it ([127.0.0.1])

by localhost (mail.aquila.infn.it [127.0.0.1]) (amavis, port 10032)

with ESMTP id KYv4eynH-QKc for ;

Thu, 4 Jun 2026 08:03:43 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by mail.aquila.infn.it (Postfix) with ESMTP id 223699C62C23C

for ; Thu, 4 Jun 2026 08:03:43 +0200 (CEST)

X-Virus-Scanned: amavis at aquila.infn.it

Received: from mail.aquila.infn.it ([127.0.0.1])

by localhost (mail.aquila.infn.it [127.0.0.1]) (amavis, port 10026)

with ESMTP id rm87t60teSBi for ;

Thu, 4 Jun 2026 08:03:43 +0200 (CEST)

Received: from [14.192.212.45] (unknown [14.192.212.45])

by mail.aquila.infn.it (Postfix) with ESMTPSA id 7DD3A9C62C239

for ; Thu, 4 Jun 2026 08:03:42 +0200 (CEST)

Reply-To: angela.chow8299@abnakh.com

From: "Angela Chow"

To: sales@nk.ca

Subject: Dear Beloved, How are you today?

Date: 4 Jun 2026 01:03:39 -0500

Message-ID: <20260604010338.7B757B2864F5A7FF@aquila.infn.it>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beloved, How are you today? I hope this email finds

you well.



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[14.192.212.45 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

[192.84.154.21 listed in dnsbl.ahbl.org]

[192.84.154.21 listed in dnsbl.ahbl.org]

[192.84.154.21 listed in dnsbl.ahbl.org]

[192.84.154.21 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[14.192.212.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[14.192.212.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[14.192.212.45 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[14.192.212.45 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[192.84.154.21 listed in list.dnswl.org]

2.5 MILLION_USD BODY: Talks about millions of dollars

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[192.84.154.21 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 FROM_MISSPACED From: missing whitespace

0.0 MONEY_FROM_MISSP Lots of money and misspaced From

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dear Beloved, How are you today?










;">


=3D"font-family: Verdana;">Dear Be=

loved,

ont-family: verdana,sans-serif;">

an style=3D"font-family: verdana,sans-serif;">
erdana;">How are you today? I hope=

this email finds you well.




style=3D"font-family: Verdana;">I=



am Mrs Angela Chow, an aging widow suffering

from a long illness. I have some funds I inherited from my late=20

husband, the sum of $7.4 Million United States Dollars and I am seeking=20

for a very honest & God fearing individual that will use the fund=20

for God's work, I found=20

your email address from the internet and decided to contact you - Please

=20

if you would be able to use the funds for the God's work, kindly contact

me : angela.chow8299@abnakh.=

com

font-family: verdana,sans-serif;">

pan style=3D"font-family: verdana,sans-serif;">
Verdana;">God Bless You !=


dana,sans-serif;">


<=

span style=3D"font-family: Verdana;">Mrs A=

ngela 

rif;">
">Chow

>.
span>





style=3D"font-size: 10pt;">




Cutch Lottery Phish from Gogole User

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 04 Jun 2026 04:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wV5Ir-00000000KmV-24iE

for dave@doctor.nl2k.ab.ca;

Thu, 04 Jun 2026 04:27:57 -0600

Resent-From: The Doctor

Resent-Date: Thu, 4 Jun 2026 04:27:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 137.14.147.34.bc.googleusercontent.com ([34.147.14.137]:53818 helo=googleusercontent.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUxfU-00000000A7F-2EgK

for doctor@netknow.ca;

Wed, 03 Jun 2026 20:18:56 -0600

Received: by googleusercontent.com (Postfix, from userid 1000)

id BB30F249777; Thu, 4 Jun 2026 02:15:44 +0000 (UTC)

To: doctor@netknow.ca

From:=?UTF-8?B?UG9zdGNvZGUgQ2hlY2sgRW5lcmdpZQ==?=

Subject:=?UTF-8?B?Q2hlY2sgdXcgcG9zdGNvZGUgdm9vciDigqwxLjQwMCBiZXNwYXJpbmc=?=

MIME-Version: 1.0

Reply-To: =?UTF-8?B?cmVwbHk=?=

Content-Transfer-Encoding: base64

Content-Type: text/html; charset=utf-8

Message-Id: <20260604021732.BB30F249777@googleusercontent.com>

Date: Thu, 4 Jun 2026 02:15:44 +0000 (UTC)

X-Spam_score: 10.6

X-Spam_score_int: 106

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Thuisbatterij zonder eigen inleg — check uw postcode

Controleer of er nog een plek beschikbaar is in uw gemeente. Subsidie, BTW

en installatie volledig geregeld. €0 eigen inleg. ‌ ‌ ‌ ‌ ‌ ‌

‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ [...]



Content analysis details: (10.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.147.14.137 listed in dnsbl.ahbl.org]

[34.147.14.137 listed in dnsbl.ahbl.org]

[34.147.14.137 listed in dnsbl.ahbl.org]

[34.147.14.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.147.14.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.147.14.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.147.14.137 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.147.14.137 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.147.14.137 listed in will-spam-for-food.eu.org]

[34.147.14.137 listed in will-spam-for-food.eu.org]

[34.147.14.137 listed in will-spam-for-food.eu.org]

[34.147.14.137 listed in will-spam-for-food.eu.org]

[34.147.14.137 listed in will-spam-for-food.eu.org]

[34.147.14.137 listed in will-spam-for-food.eu.org]

[34.147.14.137 listed in will-spam-for-food.eu.org]

[34.147.14.137 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[34.147.14.137 listed in bb.barracudacentral.org]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[34.147.14.137 listed in psbl.surriel.com]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral)

0.0 TVD_RCVD_IP Message was received from an IP address

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_JF BODY: Odd Letter Triples with JF

0.1 TW_IK BODY: Odd Letter Triples with IK

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_JB BODY: Odd Letter Triples with JB

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[34.147.14.137 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.0 HDRS_MISSP Misspaced headers

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?B?Q2hlY2sgdXcgcG9zdGNvZGUgdm9vciDigqwxLjQwMCBiZXNwYXJpbmc=?=







Verdien Duurzaam ⚡ Subsidie beperkt beschikbaar



⏰ Nog maar een beperkt aantal plekken beschikbaar in uw regio — wacht niet te lang

Thuisbatterij installatie

Uw energierekening omlaag — zonder eigen inleg. Kijk hoe uw buren het doen.



Duizenden huishoudens profiteren al. Check nu of er nog een plek voor u is.

→ Controleer uw postcode — gratis en vrijblijvend ←



Geen verplichtingen · Geen kosten · 2 minuten

✓ €0 eigen inleg

✓ Subsidie geregeld

✓ 4.8 ★ door 2.400+ klanten

Energieprijzen schieten alle kanten op — en u staat er alleen voor



Energieprijzen schieten tegenwoordig alle kanten op. De ene dag betaal je een redelijke prijs, de volgende dag ineens het dubbele. Veel huishoudens hebben het gevoel dat ze geen controle meer hebben over hun energierekening — en ondertussen blijft alles maar duurder worden.



Steeds meer mensen kiezen er daarom voor om het heft weer in eigen hand te nemen. Niet omdat het een “linkse hobby” zou zijn, maar omdat ze simpelweg minder afhankelijk willen zijn van een energiemarkt die steeds onvoorspelbaarder wordt.



Met een thuisbatterij speel je slim in op die prijsschommelingen. Het systeem slaat stroom op wanneer deze goedkoop is en gebruikt die wanneer de prijs hoger ligt. Dat werkt met zonnepanelen, maar ook zonder. Het resultaat: een lagere energierekening en een woning die vaak meer waard wordt.



Op dit moment is er een regeling waardoor installatie mogelijk is zonder eigen investering.



Subsidie, BTW en installatie worden volledig geregeld. U hoeft alleen te controleren of u nog in aanmerking komt.

» Check nu «



Maar let op: het aantal beschikbare plekken per gemeente is beperkt. Wie nu controleert heeft nog de keuze — wie wacht, mist mogelijk zijn kans.



Dit krijgt u



Lagere energierekening — gebruik uw eigen goedkope stroom in plaats van dure netspanning.



Woning meer waard — een thuisbatterij verhoogt direct de waarde van uw huis.



€0 eigen inleg — subsidie, BTW en installatie volledig geregeld. U betaalt niks vooraf.



Onafhankelijker van het net — minder last van prijspieken en netcongestie.



⚠ Subsidie beperkt beschikbaar



Zodra het maximum aantal deelnemers in uw gemeente is bereikt, sluit de regeling. Wie nu controleert heeft nog de keuze — wie wacht niet.



Kom nu in aanmerking — voordat de regeling sluit



Gratis check. Geen verplichtingen. Resultaat in 2 minuten.

→ Vraag nu uw gratis check aan ←



€0 eigen inleg · Subsidie geregeld · 4.8 ★ door 2.400+ klanten



© 2026 Verdien Duurzaam



Uitschrijven · Privacybeleid

Telent Communications phish Part 2








>

le=3D"font-family: verdana,geneva,sans-serif; font-size: 10pt;">Dear Telnet=

Customer,

We detected a recent sign-in to your Telnet email account=

=2E



or: rgb(35, 111, 161);">
sans-serif; font-size: 10pt;">Login Attempt :



t-family: verdana,geneva,sans-serif; font-size: 10pt;">Date    &n=

bsp;    :    June 3, 2026, 02:49 PM
>Location    :    Moscow, Russia

pan style=3D"font-family: Verdana;">Device
      :&nbs=

p;   Samsung Galaxy S24 Android 14



t-family: verdana,geneva,sans-serif; font-size: 10pt;">
family: Verdana;">If you don't recognize this activity,

style=3D"font-family: Verdana;">



secure-adm.netlify.app/" target=3D"_blank" rel=3D"noopener noreferrer" data=

-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://telnet-secure-ad=

m.netlify.app/&source=3Dgmail&ust=3D1780564954225000&usg=3DAOvV=

aw0NAl2CwoZWs8_a2fuWU_LT">
yle=3D"font-family: Verdana;">CLICK HERE

yle=3D"font-family: Verdana;"> to secure your account.



px;">



adding: 4px 10px; border-radius: 3.01px; border: 1px solid transparent; bor=

der-image: none; color: rgb(255, 255, 255); line-height: 1.4286; font-size:=

14px; font-weight: 600; vertical-align: baseline; display: inline-block; m=

in-height: 1.42em; background-color: rgb(0, 82, 204); text-decoration-color=

: currentcolor; text-decoration-line: none; text-decoration-style: solid;" =

href=3D"https://telnet-secure-adm.netlify.app/"=20

target=3D"_blank" rel=3D"noopener noreferrer" data-saferedirecturl=3D"https=

://www.google.com/url?q=3Dhttps://telnet-secure-adm.netlify.app/&source=

=3Dgmail&ust=3D1780564954225000&usg=3DAOvVaw0NAl2CwoZWs8_a2fuWU_LT"=

>SECURE YOUR EMAIL ACCOUNT HERE


erdana;">=



style=3D"font-family: verdana,geneva,sans-serif;">


mily: Rockwell Condensed;">
le=3D"font-family: Verdana;">
"font-size: 10pt;">If this was you :

=


style=3D"font-size: 10pt;">

: Rockwell Condensed;">


e=3D"color: rgb(196, 71, 59);">
style=3D"font-size: 9pt;">You can ignore t=

his message. There's no need to take any action.

>

isplay: inline-block; min-height: 0px;">

>










">

ackground-color: rgb(153, 153, 153);">
font-size: small;">
Teln=

et Communications




communications.com/" target=3D"_blank" rel=3D"noopener noreferrer" data-saf=

eredirecturl=3D"https://www.google.com/url?q=3Dhttp://www.telnetcommunicati=

ons.com/&source=3Dgmail&ust=3D1780564954225000&usg=3DAOvVaw2xam=

5Ldpo0NAVHX6OS6Jwj">
nt-size: 11pt;">
11pt;">http://www.

telnetcommunications.com/



ly: Verdana;">
pt;">
n style=3D"font-size: 9pt;">605 Boxwo=

od Drive


"font-family: Verdana;">
t-size: 10pt;">


e=3D"font-family: Verdana;">Cambridge, ON

>


t-size: 11pt;">
1pt;">
n style=3D"font-family: Verdana;">Canada  N3E 1A5
=






1pt;">
an style=3D"font-size: 10pt;">
style=3D"color: rgb(52, 52, 52);">1-=

855-TELNET1 (835-6381)

span>




Telent Communications phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Jun 2026 20:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUxXK-000000009Sw-2hq2

for dave@doctor.nl2k.ab.ca;

Wed, 03 Jun 2026 20:10:22 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Jun 2026 20:10:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.84.154.21] (port=51550 helo=mail.aquila.infn.it)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUx51-0000000064d-0t3n

for sales@nk.ca;

Wed, 03 Jun 2026 19:41:15 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.aquila.infn.it (Postfix) with ESMTP id 60BC8963D01A1

for ; Thu, 4 Jun 2026 03:40:12 +0200 (CEST)

Received: from mail.aquila.infn.it ([127.0.0.1])

by localhost (mail.aquila.infn.it [127.0.0.1]) (amavis, port 10032)

with ESMTP id uBo3tUtET2Ub for ;

Thu, 4 Jun 2026 03:40:12 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by mail.aquila.infn.it (Postfix) with ESMTP id 47C67963D01A0

for ; Thu, 4 Jun 2026 03:40:12 +0200 (CEST)

X-Virus-Scanned: amavis at aquila.infn.it

Received: from mail.aquila.infn.it ([127.0.0.1])

by localhost (mail.aquila.infn.it [127.0.0.1]) (amavis, port 10026)

with ESMTP id Mw_z46Mvh2Fy for ;

Thu, 4 Jun 2026 03:40:12 +0200 (CEST)

Received: from [14.192.212.45] (unknown [14.192.212.45])

by mail.aquila.infn.it (Postfix) with ESMTPSA id 9D252963D01A1

for ; Thu, 4 Jun 2026 03:40:11 +0200 (CEST)

From: "=?UTF-8?B?VGVsbmV0IENvbW11bmljYXRpb25zIMKu?="

To: sales@nk.ca

Subject: =?UTF-8?B?4oCiIFNFQ1VSSVRZIEFMRVJUOiBQcm90ZWN0IHlvdXIgVGVsbmV0IEFjY291bnQ=?=

Date: 3 Jun 2026 20:40:08 -0500

Message-ID: <20260603204008.F9D3F61B41D27029@aquila.infn.it>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Telnet Customer, We detected a recent sign-in to your

Telnet email account. Login Attempt :



Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.84.154.21 listed in dnsbl.ahbl.org]

[192.84.154.21 listed in dnsbl.ahbl.org]

[192.84.154.21 listed in dnsbl.ahbl.org]

[192.84.154.21 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

[14.192.212.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.84.154.21 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.84.154.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.84.154.21 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.84.154.21 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[192.84.154.21 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

[14.192.212.45 listed in will-spam-for-food.eu.org]

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[192.84.154.21 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[192.84.154.21 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[192.84.154.21 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 PDS_DBL_URL_TNB_RUNON Double-url and To no arrows, from runon

1.5 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

1.5 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

Subject: {SPAM?} =?UTF-8?B?4oCiIFNFQ1VSSVRZIEFMRVJUOiBQcm90ZWN0IHlvdXIgVGVsbmV0IEFjY291bnQ=?=

Nigerian Phish Part 2

You will not see this in a MIME-aware mail reader.

--===============1359163047==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



=



Dear Sir/Madam,

My Warmest Greetings.

With due respect and humility, I was forced to write to you about your huma=

nitarian aid. I am Mrs. Antonia Atlasik a widow, who is aging long term il=

lness (cancer).

I am currently admitted to a private hospital.

I have some assets that I inherited from my late husband. When my husband w=

as alive, He made a deposit of ($11 MILLION DOLLARS).Currently this money i=

s still in the Bank.The doctor told me that I will not last for more than =

one month due to cancer problems.

I need someone who is a very capable, honest, healthy or wealthy person or =

an organization that can spend these funds on God=2019s work to help the po=

or and the needy. My late husband taught that this fund should be used for =

charitable purposes like advancing Chief Executive Officer (CEOS).

health, education, religion, culture or social or public welfare such as b=

uilding schools, houses, orphanages, hospitals, etc. This also will help in=

promoting or protecting human rights, and other purposes beneficial to the=

public.I made that decision because I don't have any child that will inher=

it this fund and want God to have mercy on me and receive my soul. With God=

all things are possible. Please, please, if you can use this fund for God'=

s work, please get back to me.

I want you to send me the following information listed below:

Your full name

Your country

Your address

Your age

Your occupation

Your phone number

I understand that I don't know you in person but I have been directed to do=

this by God Almighty. If you are interested in carrying out this task, get=

back to me for more details on this noble project of mine.

I hope to receive your reply Immediately. And please send your reply to thi=

s below private e-mail address: aatlasik405@gmail.com

Stay blessed in the Lord.

Thank you.

Yours Faithfully,

Mrs.Antonia Atlasik.





--===============1359163047==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Dutf-8"/>

 
Dear Sir/Madam,
My Warmest Greeting=

s.
With due respect and humility, I was forced to write to you about you=

r humanitarian aid. I am  Mrs. Antonia Atlasik a widow, who is aging l=

ong term illness (cancer).
I am currently admitted to a private hospital=

.
I have some assets that I inherited from my late husband. When my husb=

and was alive, He made a deposit of ($11 MILLION DOLLARS).Currently this mo=

ney is still in the  Bank.The doctor told me that I will not last=

for more than one month due to cancer problems.
I need someone who is a=

very capable, honest, healthy or wealthy person or an organization that ca=

n spend these funds on God=E2=80=99s work to help the poor and the needy. M=

y late husband taught that this fund should be used for charitable purposes=

like advancing Chief Executive Officer (CEOS).
 health, education,=

religion, culture or social or public welfare such as building schools, ho=

uses, orphanages, hospitals, etc. This also will help in promoting or prote=

cting human rights, and other purposes beneficial to the public.I made that=

decision because I don't have any child that will inherit this fund and wa=

nt God to have mercy on me and receive my soul. With God all things are pos=

sible. Please, please, if you can use this fund for God's work, please get =

back to me.
I want you to send me the following information listed below=

:
Your full name
Your country
Your address
Your age
Your occ=

upation
Your phone number
I understand that I don't know you in perso=

n but I have been directed to do this by God Almighty. If you are intereste=

d in carrying out this task, get back to me for more details on this noble =

project of mine.
I hope to receive your reply Immediately. And please se=

nd your reply to this below private e-mail address:
sik405@gmail.com">aatlasik405@gmail.com

Stay blessed in the Lord.
>Thank you.
Yours Faithfully,
Mrs.Antonia Atlasik.


ML>

--===============1359163047==--

Nigerian Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Jun 2026 18:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUw0V-000000000T6-14MT

for dave@doctor.nl2k.ab.ca;

Wed, 03 Jun 2026 18:32:23 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Jun 2026 18:32:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.sibotec.com.ar ([138.219.41.184]:42646)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUvTy-00000000NIs-0WjX

for sales@nk.ca;

Wed, 03 Jun 2026 17:58:55 -0600

Content-Type: multipart/alternative; boundary="===============1359163047=="

MIME-Version: 1.0

Subject: Please Read And Reply At Once!

To: Recipients

From: atlasikantonia0@gmail.com

Date: Thu, 04 Jun 2026 01:57:34 +0200

X-Spam_score: 17.2

X-Spam_score_int: 172

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, My Warmest Greetings. With due respect and

humility, I was forced to write to you about your humanitarian aid. I am

Mrs. Antonia Atlasik a widow, who is aging long term illness (cance [...]



Content analysis details: (17.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[138.219.41.184 listed in dnsbl.ahbl.org]

[138.219.41.184 listed in dnsbl.ahbl.org]

[138.219.41.184 listed in dnsbl.ahbl.org]

[138.219.41.184 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[138.219.41.184 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[138.219.41.184 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[138.219.41.184 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[138.219.41.184 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[138.219.41.184 listed in will-spam-for-food.eu.org]

[138.219.41.184 listed in will-spam-for-food.eu.org]

[138.219.41.184 listed in will-spam-for-food.eu.org]

[138.219.41.184 listed in will-spam-for-food.eu.org]

[138.219.41.184 listed in will-spam-for-food.eu.org]

[138.219.41.184 listed in will-spam-for-food.eu.org]

[138.219.41.184 listed in will-spam-for-food.eu.org]

[138.219.41.184 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[atlasikantonia0(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[atlasikantonia0(at)gmail.com]

1.5 BILLION_DOLLARS BODY: Talks about lots of money

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[138.219.41.184 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 MIXED_HREF_CASE Has href in mixed case

0.0 LOTS_OF_MONEY Huge... sums of money

0.9 TEQF_USR_POLITE To and from user nearly same + polite greeting

1.0 FREEMAIL_REPLY From and body contain different freemails

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.7 SPOOFED_FREEMAIL No description available.

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

0.9 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} Please Read And Reply At Once!

German language spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Jun 2026 17:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUvPi-00000000JcZ-1epd

for dave@doctor.nl2k.ab.ca;

Wed, 03 Jun 2026 17:54:22 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Jun 2026 17:54:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.sarpi-dz.com ([41.111.186.158]:30024)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUuHa-00000000Osg-3gAJ

for doctor@doctor.nl2k.ab.ca;

Wed, 03 Jun 2026 16:42:03 -0600

From: Abdessamed MANAA

Subject: wir haben versucht, Sie zu erreichen.

Thread-Topic: wir haben versucht, Sie zu erreichen.

Thread-Index: Adzzm0yYL3ObFSIIQKWtyq5+oJP2SwAC1cYAAABBwGAAAAAGYAAAAApQ

Date: Wed, 3 Jun 2026 22:33:39 +0000

Message-ID: <99476e27694145baa2788b46499b90df@sarpi-dz.com>

Reply-To: Frau Maria Elisabeth Schaeffler



Accept-Language: fr-FR, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

Content-Type: multipart/alternative;

boundary="_000_99476e27694145baa2788b46499b90dfsarpidzcom_"

MIME-Version: 1.0

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; d=sarpi-dz.com; s=Sarpi_Key; c=relaxed/relaxed;

h=from:subject:date:message-id:reply-to:content-type:mime-version;

bh=lgg67GjF1lTHLUgZ5DoZvjAXEzFE8Nl1BPVBLx87PZI=;

b=GenEmXI6qhSvfU7zMxa4LSb5NgffgHMkrGmKaHTGs2YU+QwHrZCsQJrpIdZ+dgc5PFa426KuoUI2

phBYmCjAnmKvmwmm54Sh2DU5ouJP6gVEecrjKsuxlOF7tIbWy+rkJ4dnXM1srttlNCEmBlGcF+MT

nXygDzWlxIEQofOR65Z/vxlbnvMx1M+9YEIH7ZxfxhOpyCwD5JSzopojNfj4qQEsnDUW7yC304mW

fheFJmikUwLeDQWjMKE0Tg9knsjtrczNLu9GPeQic9apd/gxN3EC8d0T42XLxNbI3kY5iBlLJSRH

VyAOpyHkYhubvyVDq1G2WBYuBiHkRB6T19aJRA==

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hallo, wir haben versucht, Sie zu erreichen. Ich habe mich

entschlossen, Ihnen 1 Million Euro zu spenden. Sollten Sie an meiner Spende

interessiert sein, kontaktieren Sie mich bitte für weitere Informatione

[...]



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.111.186.158 listed in dnsbl.ahbl.org]

[41.111.186.158 listed in dnsbl.ahbl.org]

[41.111.186.158 listed in dnsbl.ahbl.org]

[41.111.186.158 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.111.186.158 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.111.186.158 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.111.186.158 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.111.186.158 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[41.111.186.158 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[41.111.186.158 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.7 MONEY_FROM_41 Lots of money from Africa

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} wir haben versucht, Sie zu erreichen.



--_000_99476e27694145baa2788b46499b90dfsarpidzcom_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hallo,



wir haben versucht, Sie zu erreichen. Ich habe mich entschlossen, Ihnen 1 M=

illion Euro zu spenden. Sollten Sie an meiner Spende interessiert sein, kon=

taktieren Sie mich bitte f=FCr weitere Informationen.



Ich w=FCrde mich =FCber eine baldige Antwort freuen.



Mit freundlichen Gr=FC=DFen,



Frau Maria Elisabeth Schaeffler.



--_000_99476e27694145baa2788b46499b90dfsarpidzcom_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




1">











Hallo,



 



wir haben versucht, Sie zu erreichen. Ich habe mich =

entschlossen, Ihnen 1 Million Euro zu spenden. Sollten Sie an meiner Spende=

interessiert sein, kontaktieren Sie mich bitte f=FCr weitere Informationen=

.



 



Ich w=FCrde mich =FCber eine baldige Antwort freuen.=



 



Mit freundlichen Gr=FC=DFen,



 



Frau Maria Elisabeth Schaeffler.











--_000_99476e27694145baa2788b46499b90dfsarpidzcom_--

German language spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Jun 2026 16:58:00 -0600

Received: from mail.sarpi-dz.com ([41.111.186.158]:32506)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wUuW5-000000006t7-17x4

for dave@doctor.nl2k.ab.ca;

Wed, 03 Jun 2026 16:57:01 -0600

From: Abdessamed MANAA

Subject: wir haben versucht, Sie zu erreichen.

Thread-Topic: wir haben versucht, Sie zu erreichen.

Thread-Index: Adzzm0yYL3ObFSIIQKWtyq5+oJP2SwAC1cYAAABBwGAAAAAGYAAAAApQAAAAC7AAAAAJEA==

Date: Wed, 3 Jun 2026 22:33:27 +0000

Message-ID:

Reply-To: Frau Maria Elisabeth Schaeffler



Accept-Language: fr-FR, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

Content-Type: multipart/alternative;

boundary="_000_b2106956d937470c9cd9e2d9d4261b3bsarpidzcom_"

MIME-Version: 1.0

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; d=sarpi-dz.com; s=Sarpi_Key; c=relaxed/relaxed;

h=from:subject:date:message-id:reply-to:content-type:mime-version;

bh=870dS3rRTaRuYmzfO1T5V9a17nMg/Zq+XUSVmRoTkgA=;

b=tquxWpoVQ9a8lbN04v2r7npRedV56JtmssxI9ORXwXujBv0QAy4LQZjXYcynP8bAB284woGfsZkn

VksifoSXG9/xaWrFY7mFTg+uzRiYCh0qVoZfR4pNJtX61o4BsCTXnvN2EEIySVQ9qjSJl4Cm8/jo

tRh6c/9sZtPDICuNi1Eq6ctgrqQkSHYGx7RoHuhQ5rr0/mxBrnkErVQnOxFIUTyfeZ3r1bjQ1P49

CmZ1rnfc46n1lRPx/qppYj0HU6eHWfugwpeeAtjDjaDpekJLJ16LsADplf/ZPa63E2XhKAiqzuR6

1XqXMjQf03stBkWoHsUHPz+MxU8n2c+AM9bgiA==

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hallo, wir haben versucht, Sie zu erreichen. Ich habe mich

entschlossen, Ihnen 1 Million Euro zu spenden. Sollten Sie an meiner Spende

interessiert sein, kontaktieren Sie mich bitte für weitere Informatione

[...]



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.111.186.158 listed in dnsbl.ahbl.org]

[41.111.186.158 listed in dnsbl.ahbl.org]

[41.111.186.158 listed in dnsbl.ahbl.org]

[41.111.186.158 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.111.186.158 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.111.186.158 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.111.186.158 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.111.186.158 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

[41.111.186.158 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[41.111.186.158 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[41.111.186.158 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.7 MONEY_FROM_41 Lots of money from Africa

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} wir haben versucht, Sie zu erreichen.



--_000_b2106956d937470c9cd9e2d9d4261b3bsarpidzcom_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hallo,



wir haben versucht, Sie zu erreichen. Ich habe mich entschlossen, Ihnen 1 M=

illion Euro zu spenden. Sollten Sie an meiner Spende interessiert sein, kon=

taktieren Sie mich bitte f=FCr weitere Informationen.



Ich w=FCrde mich =FCber eine baldige Antwort freuen.



Mit freundlichen Gr=FC=DFen,



Frau Maria Elisabeth Schaeffler.



--_000_b2106956d937470c9cd9e2d9d4261b3bsarpidzcom_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




1">











Hallo,



 



wir haben versucht, Sie zu erreichen. Ich habe mich =

entschlossen, Ihnen 1 Million Euro zu spenden. Sollten Sie an meiner Spende=

interessiert sein, kontaktieren Sie mich bitte f=FCr weitere Informationen=

.



 



Ich w=FCrde mich =FCber eine baldige Antwort freuen.=



 



Mit freundlichen Gr=FC=DFen,



 



Frau Maria Elisabeth Schaeffler.











--_000_b2106956d937470c9cd9e2d9d4261b3bsarpidzcom_--

Docusign phish from Google User Part 3
















, "Sans Serif", serif, EmojiFont; font-weight: bold; line-height:=

18px; font-size: 15px; color: rgb(51, 51, 51);">Sec‍ure Docu‍ment =

sent to:





Helvetica, Arial, "Sans Serif", serif, EmojiFont; line-height: =

18px; font-size: 15px; color: rgb(102, 102, 102);">sales@nk.ca







Helvetica, Arial, "Sans Serif"; line-height: 20px;">Kindly =

l‍og in with the link ab‍ove to view your completed docu‍ment.=




Thank you,





 






Helvetica, Arial, "Sans Serif"; line-height: 20px;">This =

sec‍ure li‍nk expires by undefined (CST).





The Nagindas Khandwala College =

Doc‍s Te‍am










255); font-family: Helvetica, Arial, "Sans Serif"; font-size: =

11px; color: rgb(102, 102, 102);">


cellpadding=3D"0" cellspacing=3D"0">














Serif"; font-size: 11px; color: rgb(102, 102, 102); vertical-align: =

top;" valign=3D"top">


style=3D"font-family: Helvetica, Arial, "Sans Serif", serif, =

EmojiFont; font-size: 11px; color: rgb(102, 102, 102); padding: 2px 5px 0px=

0px;">Powered by 
51); font-size: 12px;">DocuSi‍gn for
Nagindas Khandwala =

College

font-size: 12px;">.


 









rgb(234, 234, 234);">


Helvetica, Arial, "Sans Serif"; font-size: 13px; color: rgb(234, =

234, 234); line-height: 18px;">dbf3a246727cc4920b409e6b0427bb0e






"Sans Serif"; font-size: 13px; color: rgb(102, 102, 102); =

line-height: 18px;">Do Not Share This Email


This email contains a sec‍ure link to DocuS‍ign. Please do =

not share or forward this email, li‍nk, or access co‍de with others=

.


 






font-family: Helvetica, Arial, "Sans Serif"; font-size: 13px; =

color: rgb(102, 102, 102); line-height: 18px;">About =

DocuS‍ign



Sign do‍cuments electronically in just =

minutes. It's safe, secure, and legally binding. Whether you're in =

an office, at home, on-the-go -- or even across the globe -- Do‍cuSign =

provides a professional trusted solution for Digital Transactions .



ib2Ieukr