Web/SEO/APP spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 05:37:30 -0600

Received: from mail-koreacentralazolkn19011025.outbound.protection.outlook.com ([52.103.74.25]:28563 helo=SLXP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9LHr-000000003ap-0QRV

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 05:37:29 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=T/oNhoCFUoIsmggSoZ2kpJ0wgjYr1+hp4U8r7uTDq/5a8XASwhVtRBir/A0CcrrmwnPg9bWSq4rH0gOCWFNwZArRiD9w/9qjsKLre8Czz3MKjazopq+x0H3H3Vu0nYyS6DuamFlEwAI83+tjKl7kJ3sDNIPbTnofBEo0/rtsiGycB6uhpj3C/hjGNLu65L5Yh0P4sDDHbvItjZ4Qpf4/lf75Ze3KvfGRHNNqVgXk3nl4tZrrre3m4lEu7WcW4ocWqlKZyn+asZBBOB3ezRa+JyebtP/7nDWcNmuvlduWhxjYDksptSuw7F0s+hojayH6ElZyntAs7X9u/FJK5rd6sQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=SbfesEQ4rCzfomwNi8vyoAuBx6HdDqhqWCqfffDNNfs=;

b=SAFUlwQ7x0UHtgoR8OeFtwE0dRq4kWgTWlmkIaPkNRFigI5aJ174eHi5rfpKQJWo5rVoh9RK12T0wYReC/N8Dfh55Wat3l4KTahDimyvmpjq9A4Dz9+lLNsQY84s/0uox+OW8NKF+pay0TgXqbF6jCru2ofhfEx7MNdneyqERcfzZnZvNeFPv2ICeB+hEb5lNLlAEVlsYS8Pqnizc1K0wMIpb3AYlZbmWDEX0i6cyWBJsG5gz3xeFokvuSicboC13mnm719V17n4hqq/1OQd9eKZIT2fs9YcZVqE8AkTzO2Us9EgagAXsisMK4bnkohuYg/ldTmALFQ+e7GS3dr4Zg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=SbfesEQ4rCzfomwNi8vyoAuBx6HdDqhqWCqfffDNNfs=;

b=aBMWUJplWBz/g8Q2hhtErx0xx2h58xbB3oLXKCGRoDGDi4nLVol1a1ZB7Hl+jJiExJJnR8X4yDL+difPy/ZB5fUObMb9f7cPA7RtLDjKoEyJfCiYB9ExuYyG9hmCk9uPnoZ5cSiSPaUk7HVNYDnw3n6zlrWv288EwvAJGm6WsWILoiZEDruoQu6J0t1JX+SmiOSmXVB7ArOd5wMMYlwcl4S1EswQdk83/Sco3YTXjAehUcP8D0igYboEPUWWYtDGpGIu+u1w9C3RPBejWg7VGh+r7vqZxvLmedGVH5M5S5+pt9kIUSUdZ+UBCKu55ueRC+CURxSFt9ZIZwOyCs+BtA==

Received: from PUVP216MB3367.KORP216.PROD.OUTLOOK.COM (2603:1096:301:168::14)

by SE1P216MB2066.KORP216.PROD.OUTLOOK.COM (2603:1096:101:15d::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.14; Wed, 23 Sep

2026 11:35:58 +0000

Received: from PUVP216MB3367.KORP216.PROD.OUTLOOK.COM

([fe80::b639:d2ef:8d24:2e60]) by PUVP216MB3367.KORP216.PROD.OUTLOOK.COM

([fe80::b639:d2ef:8d24:2e60%6]) with mapi id 15.21.0451.014; Wed, 23 Sep 2026

11:35:58 +0000

From: ariaconnet plus

To: ariaconnet plus

Subject: =?Windows-1252?Q?Re:_Proposal_with_price=94=3F?=

Thread-Topic: =?Windows-1252?Q?Proposal_with_price=94=3F?=

Thread-Index: AQHdSrK1wI/m8SwdHUybgZH2jHx+87bcCc1f

Date: Wed, 23 Sep 2026 11:35:58 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUVP216MB3367:EE_|SE1P216MB2066:EE_

x-ms-office365-filtering-correlation-id: 922e429e-6d52-4ff2-5ebd-08df1966d63a

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|15030799006|24121999003|37011999003|22091999003|55001999006|25010399006|704163111799003|2604032081799003|2604032031799003|45011099003|16051099003|51005399006|8062599012|8060799015|48001999003|19110799012|31061999003|40105399003|2607281247196008|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?JkZaXw+cV9wLgR6lUHR8JnNc3StzAisNB/5bAAwGQKQNb109SkPmqMhz?=

=?Windows-1252?Q?SMo+KMsab7gbgMGtF59Jy9kGDStqIsFeu5l41JsJKqGDAMbEimRrcBHq?=

=?Windows-1252?Q?ezZ845mxN8Sy1/x1VZMEys91G2xQVs2qqwCFesamqyiym/pJGZ+TvXO1?=

=?Windows-1252?Q?0dHm0BoXCfISldNgo1Djb6rgCWRsoeHj6yOQ79+zOvwr5t56C2QImbNA?=

=?Windows-1252?Q?jXWRjKOHnxDXqWwJ1S+bGzDYtsBbjZcMxNk+qzz5yi+vql+q8oW1JqV5?=

=?Windows-1252?Q?PG6/VsKoUg2E/iO48lcS8nt0E7wwMrWYOMZth+z0vBuOQUCM9OKJJfI3?=

=?Windows-1252?Q?S+DirY5dmohM+RpuRZD7N2JidMxUCxRWdmzkYSPAunvvWLNBtOdVFPfV?=

=?Windows-1252?Q?O7X3/Rqr1Ume3nxxGtTChrPYH2oyOXq+XMXuykOSNtfh4tBiC5/ipNle?=

=?Windows-1252?Q?DRvnic66C/utUy1sG5bjVUm672d6nwnsUfafrMLWf7jAzIN0miR+yfut?=

=?Windows-1252?Q?TmcpISC8TkyXNT2aph0092m/MIL0ShxanuRkWyIaYMAHxmOisZOfr8fK?=

=?Windows-1252?Q?u20+5x0sd7mg5dcL7xN2swYc456HwSMe1enJfEhxIPSpwKmtY48vN1vz?=

=?Windows-1252?Q?MgwXuDBYFmUACgra0DE7yAYQCfRghqsUzjWvH/8p4lKma7UJf9lf7AJj?=

=?Windows-1252?Q?6iXmwCZGVCOfef2iaVPIeTbRsJCFtI1Ep3mFsDPRc+hHj6ogaOmNnnoo?=

=?Windows-1252?Q?2pz0zSoJaaVulwYBHvaCOqGWfv+9nGCzdnMYOvkCv9OKszG1CKcoc43n?=

=?Windows-1252?Q?g7QvsEuBTRFlMNM8tyNZfFSAA9AyBjCbsX3ErZ4/QBUKLCWF+0GB6A/P?=

=?Windows-1252?Q?lvhRpk1nRugO+2g2pQMukP0BjiDaZV/RtUKxumL7va5ETlggoZPBnQSP?=

=?Windows-1252?Q?DeTchAjW6xe1aiszgQyJi8qDd3nNJ1DQ6oAvPNJWBp8tko0vwkJjHbpu?=

=?Windows-1252?Q?2HREhrQARYfJ6x13pcFWM/0JecKC0t2vTtydymIf3dXHReCGBAbNsCPr?=

=?Windows-1252?Q?530pGfxvXW8Gt0gdJeY+siZ5QoKn4iV+ZnFzlr81te1JrBkjR9WBL/st?=

=?Windows-1252?Q?rHw0JWyP/FuCunBcf3EVvp/n4Z+ZXuyKqkF2D0ETyhb+0WQJiF7xtS08?=

=?Windows-1252?Q?MpIQTCYb29XrBopcsLMhRbXkabfy2mFzmrcE9NX8OUPE9oUF2mjUH49v?=

=?Windows-1252?Q?/WG+szIOaxCaUd8aCJ+FbMY4Pn5V+uNVutdPgA/7l6GyK9+sMGoiZ0nK?=

=?Windows-1252?Q?q7HAuQRqC9ofUpWtTfmmhMCuNjAirG9AWpD0/dxjd21gkORY6vT+Pkts?=

=?Windows-1252?Q?rm5CsPeEvKAWuUgD4QvW2Rngx/yDEl1aiCl4bzAy5d/OT6UgHvaVfPpf?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?lwmhgHDuiKaKgiv2rPPo0sKOBBuNPuB61lSI1/AXPckk1SDScHqRNJNe?=

=?Windows-1252?Q?xmkVtXL27kt7IdJYlWxcKy71X4fWB6z4CmVGOUSRS8Gqp6/WX8G/WtEw?=

=?Windows-1252?Q?exkyuZjdQoE2vkA1FbIyq0bUZkpKj6AgHzbZjsvAnxCkYpOFLWyPgvi4?=

=?Windows-1252?Q?tvZjfULiVuB1EopRTVfpIHJVICs8q9CvVd94NXPKj/JAjYBFMnZGUgKQ?=

=?Windows-1252?Q?enoTA4AeqlLW6wLh1mNdA5VOTjLhv4U1x0WHhA3DLmJ3XaDDjKpeEPdX?=

=?Windows-1252?Q?1oQtRxu3dkw0Qr6t09JEZy0M15ObwhCriGW0c3Wu62JEq6EBk8rW1UWy?=

=?Windows-1252?Q?Ha8NtF+Fvhh+1maaQWajkUBlGpnpwcqaMvywXDJaQtNb/isA/wF7uv6Q?=

=?Windows-1252?Q?wAEXRS3dZ2EfK4SplPkMV1xScsdSOKJLDN2SRQZfzV6haXYgqp+PPKSN?=

=?Windows-1252?Q?zXVlnvSRR3g6kbWYQ8LmwgXSKwYu5MebO8p93EmxdCCQhQS4JKvrCswv?=

=?Windows-1252?Q?ZA3z/7+oAZ3+zGQmKTpNdA4NpmlREzQx3dAW47IEImOcAqdMxvuBKZUL?=

=?Windows-1252?Q?0zcH1N7B1epFps6GTGRzBLQlXq4AcW6d0wdYOEPhA+D7+pgB2MwaDVWb?=

=?Windows-1252?Q?D9zlm4xd5fMJ0ZZirgo7Mj42cZF2/bPTZXJsY+OlXz2cC7ThCfPH6h4U?=

=?Windows-1252?Q?NlxMGZ9a1bAl1y+r4qgFCS5Abxmu6mh0/5FF/WVDiqEsURXVw/xgs86z?=

=?Windows-1252?Q?UXJAsPDuCnscZzI06MR0eCGyxqJNsTXagIjHFGlEdBY/BjqPGUX9Tmqw?=

=?Windows-1252?Q?a5CLvmk/rfhx2/iFeGhnlvuHA4hCXpwlYn/UfVtJGLQFFfozIHnlYASD?=

=?Windows-1252?Q?rM4uybmxygZlOfec9O2YKrdsPoYQfsTBGmZNCw4Dqj+13F5vZj2EKsoX?=

=?Windows-1252?Q?161NAs8u04Lkc9x9De6f8Shq6NeMk3USKILudmQP1HLJn1Qgc5IiDrHY?=

=?Windows-1252?Q?6MlqgntPdlaFo0aYnAa5eAbwaJxtPP+DKSozRyFKT5BzUtrHQXeeeHmG?=

=?Windows-1252?Q?6fai0+GtT+3C4EbIsL/yp/4trEdVGu3e1jvvNLu/8it2KxDmo8aMpVIu?=

=?Windows-1252?Q?xgFYsL1XubqbF0T3SrOetwUHxVg+MYgGHBL6IfX5XS83QwHDEzJYFZtW?=

=?Windows-1252?Q?DHiPhHCmeTs8frvMKrbSC5ua/BjSePi8BJGOzMSqXcC3lMn9po8YhDSb?=

=?Windows-1252?Q?+8BzOU3zOvbvQor5weuTafMIBW/RlejSCZAONy2n372hdvYqFC5Ka2Uq?=

=?Windows-1252?Q?1hW3g3IAvuMgKwY9mYUZG7Rmz44Weeabxobl44edLxoiJKcj/OwwBz06?=

=?Windows-1252?Q?G75EOMdvAs2cYLz7B/zDMzUeO+k0LdwdOFDYIUez2xmFf7J7FOviMYTd?=

=?Windows-1252?Q?O95sdWQ5W8XqVkQ177Lo1mJAEBBZd9Ohxrh3o5CZb4X3LrqeoqLEKH0O?=

=?Windows-1252?Q?1TQMWboS4I/PmLsX618Juebs7oXpzYLTqV6ZiXQLJNIlOR/Jg3sy1Uyd?=

=?Windows-1252?Q?RcndzwhHzJgzsSBH?=

Content-Type: multipart/alternative;

boundary="_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-94596.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUVP216MB3367.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 922e429e-6d52-4ff2-5ebd-08df1966d63a

X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Sep 2026 11:35:58.1126

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB2066



--_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable





________________________________

From: ariaconnet plus

Sent: Wednesday, September 23, 2026 5:01 PM

To: ariaconnet plus

Subject: Re: Proposal with price=94?



Hi,



Good morning



I was going through your website & I personally saw a lot of potential in y=

our website & business.



I would like to send you a Proposal of your business website! You can get y=

our website on the 1st page of GOOGLE.



May I send you a Proposal with price=94?



Thank you,





--_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












yle=3D"font-size:11pt" color=3D"#000000">From: ariaconnet plus


Sent: Wednesday, September 23, 2026 5:01 PM


To: ariaconnet plus <ariaconnetplus@hotmail.com>


Subject: Re: Proposal with price=94?


 









nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

Hi,


 


Good morning


 


I was going through your website & I personally saw a lot of potential =

in your website & business.


 


I would like to send you a Proposal of your business website! You can get y=

our website on the 1st page of GOOGLE.


 



,255,0)">May I send you a Proposal with price=94?



 


Thank you,



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">














--_000_PUVP216MB33672EED39CD7DF881120B50D3822PUVP216MB3367KORP_--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Myj-00000000Pjv-3qfS

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:51370)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9LHC-000000003Wv-0KsT

for doctor@nk.ca;

Wed, 23 Sep 2026 05:36:47 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-8a35310148aso18909617b3.2

for ; Wed, 23 Sep 2026 04:35:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=iisponti.edu.it; s=google; t=1790163345; x=1790768145; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Qhg5F5utim/re2AKU7RfSLMQ6CE6t168Cy9l0Og8N4g=;

b=YNuDLcMBR/PP+gb+IB3uiJtCOhDNDWRr1RJaHfyeV7eIAppK8u9vNeAMzdCoPUzzym

0uilLHjApgbwEm45EizVmVnCabXJENYwZrQ8Sn2g8823Z/Ogj+Q89IIO9/3RjJBYUYWg

VNIHGIVyV1+BjXz1NU0qpyKg0AZn+65gYN8QS4U8x4rt+GKbylM8Ji4WGs7xwlV1envU

a/1N7Gxu/8xDjyeL3Tx7QMfDmq/W2HLPhO0rG+mnsU+F1xwlDkhWSeG2aQ40jFJlqjNE

2a/lDfnuRH7dA5mo1E6bLvpfNL7DEH0lFbRUST8WtmschCZ1jXtDYK7qt+yGr3HQVuwn

c2IQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790163345; x=1790768145;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Qhg5F5utim/re2AKU7RfSLMQ6CE6t168Cy9l0Og8N4g=;

b=PX/CHwfqhOyYosuTtaYB7gzW8+jG7O7aKMmY6PV+41MkHU5M3TNZPgFuLYfT8xsMVu

1FW1CG2UDTkD/Vb5QvutiBLT3Hu1Jul94xQYvmd7mF1ezZtWBW1bjO1talT0E1FVJ4Bj

Vap2AGFIEQo+M1oRvLaUFaFQ+TXnT181NOM9uaF6CdZAUuIoGKy0V8NrrQJWgI6wUmAu

EKitbMWFDr0OVVMC+U8107sMEZgZRFsK+dK5zuJLY//K8w88+MHieLDwoxeM9B8DKffa

7WChW6dVJMZsbArefp7vKXE2bgBXGwGwJBdqs/iRAdTYUnG4NF0wYP3SbuXegub8gUOZ

xkSw==

X-Gm-Message-State: AFuF++nNB8uRYYMqyC7BCPYtb+tDWWlxknD6HaOjUQ+DgvWsj0Ua4Hy1

/yfyr0Jui5Lw9XCwGI95SNZZFC/LYQ83BRAHfIFGaV4srYpxsbIpQyR/nDToYP+ifsBw/wrXvub

ROUHbq7nuIm/OnpmsFXVDKdY4

MIME-Version: 1.0

X-Received: by 2002:a53:c1d2:0:b0:672:a52c:daf9 with SMTP id

956f58d0204a3-672d599df01mr860866d50.108.1790162847346; Wed, 23 Sep 2026

04:27:27 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 11:27:27 +0000

Subject: =?UTF-8?Q?Check_in_1_minuut_of_uw_bedrijf_tot_=E2=82=AC_500_telecom=2D?=

=?UTF-8?Q?cashback_krijgt?=

From: Nationaal Telecom Onderzoek

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000009b462f065c24c411"

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Nationaal Telecom Onderzoek ZAKELIJK TELECOM ONDERZOEK Tot

€500 cashback op uw zakelijke telecom — betaalt u te veel?



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.197 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: businesssnap.xyz (xyz)]

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_JB BODY: Odd Letter Triples with JB

0.1 TW_IJ BODY: Odd Letter Triples with IJ

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.197 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Check_in_1_minuut_of_uw_bedrijf_tot_=E2=82=AC_500_telecom=2D?=

=?UTF-8?Q?cashback_krijgt?=



--0000000000009b462f065c24c411

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TmF0aW9uYWFsIFRlbGVjb20gT25kZXJ6b2VrDQoNCg0KWkFLRUxJSksgVEVMRUNPTSBPTkRFUlpP

RUsNCg0KVG90IOKCrDUwMCBjYXNoYmFjayBvcCB1dyB6YWtlbGlqa2UgdGVsZWNvbSDigJQgYmV0

YWFsdCB1IHRlIHZlZWw/DQoNCg0KDQpWZWVsIG9uZGVybmVtZXJzIHppdHRlbiBhbCBqYXJlbiB2

YXN0IGFhbiBoZXR6ZWxmZGUgdGVsZWNvbWNvbnRyYWN0IGVuICANCmJldGFsZW4gaG9uZGVyZGVu

IGV1cm8ncyBwZXIgamFhciB0ZSB2ZWVsLiBEb2UgbWVlIGFhbiBoZXQgb25kZXJ6b2VrIGVuIHUg

IA0KemlldCBpbiAxIG1pbnV1dCBvZiB1dyBiZWRyaWpmIHJlY2h0IGhlZWZ0IG9wIHRvdCDigqw1

MDAgdGVsZWNvbS1jYXNoYmFjay4gIA0KQWxzIGRlZWxuZW1lciBtYWFrdCB1IGJvdmVuZGllbiBr

YW5zIG9wIGVlbiBtb29pZSBwcmlqcy4NCg0KDQoNCk1BQUsgS0FOUyBPUDoNCg0KDQoNClNhbXN1

bmcgR2FsYXh5IFdhdGNoNw0KR2FsYXh5IFdhdGNoNw0KDQoNClBsYXlTdGF0aW9uIDUgU2xpbQ0K

UGxheVN0YXRpb24gNQ0KDQoNCkFwcGxlIGlQYWQNCkFwcGxlIGlQYWQNCg0KDQoNCg0KDQpTdGFy

dCBkZSB0ZWxlY29tY2hlY2sgwrsNCg0KDQpEdXVydCAxIG1pbnV1dCDCtyBncmF0aXMgwrcgZ2Vo

ZWVsIHZyaWpibGlqdmVuZA0KDQoNCg0KVSBvbnR2YW5ndCBkZXplIGUtbWFpbCBhbHMgemFrZWxp

amtlIHJlbGF0aWUgZGllIGludGVyZXNzZSB0b29uZGUgaW4gIA0Ka29zdGVuYmVzcGFyaW5nLiBD

YXNoYmFjayBlbiBhY3RpZXZvb3J3YWFyZGVuIHppam4gYWZoYW5rZWxpamsgdmFuIHV3ICANCnNp

dHVhdGllIGVuIGRlIGRlZWxuZW1lbmRlIGFhbmJpZWRlcnMuDQoNCkFmbWVsZGVuDQoNCg0KDQoN

Cg==

--0000000000009b462f065c24c411

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable








schemas-microsoft-com:office:office">









Zakelijke telecom-cashback






=3D"0" border=3D"0" style=3D"background:#0b1f3a;">






"0" border=3D"0" style=3D"width:600px;max-width:600px;font-family:Arial,Hel=

vetica,sans-serif;background:#ffffff;border-radius:16px;overflow:hidden;">












































1).png" alt=3D"Nationaal Telecom Onderzoek" width=3D"240" style=3D"display:=

block;width:240px;max-width:70%;height:auto;border:0;">




ze:12px;font-weight:bold;padding:6px 12px;border-radius:999px;">ZAKELIJK TE=

LECOM ONDERZOEK



a;font-weight:800;">Tot €500 cashback op uw zakelijke telecom — =

betaalt u te veel?







Veel ondernemers zitten al jaren vast aan hetzelfde telecomcontract en beta=

len honderden euro’s per jaar te veel. Doe mee aan het onderzoek en u=

ziet in 1 minuut of uw bedrijf recht heeft op tot €500 teleco=

m-cashback
. Als deelnemer maakt u bovendien kans op een mooie prij=

s.






;letter-spacing:.5px;">MAAK KANS OP:




=3D"0" border=3D"0">
















laxy-watch-7.webp" alt=3D"Samsung Galaxy Watch7" width=3D"90" style=3D"disp=

lay:block;width:90px;max-width:100%;height:auto;border:0;margin:0 auto 8px =

auto;">

Galaxy=

Watch7










n-5-slim.webp" alt=3D"PlayStation 5 Slim" width=3D"90" style=3D"display:blo=

ck;width:90px;max-width:100%;height:auto;border:0;margin:0 auto 8px auto;">

PlaySt=

ation 5










.webp" alt=3D"Apple iPad" width=3D"90" style=3D"display:block;width:90px;ma=

x-width:100%;height:auto;border:0;margin:0 auto 8px auto;">

Apple =

iPad














ground:#123a7a;border-radius:10px;color:#ffffff;display:block;max-width:460=

px;font-size:17px;font-weight:bold;line-height:20px;padding:17px 24px;text-=

align:center;text-decoration:none;box-sizing:border-box;margin:0 auto;">Sta=

rt de telecomcheck »






Duurt 1 minuut ·=

gratis · geheel vrijblijvend







U ontvangt deze e-mail als zakelijke relatie die interesse toonde in kosten=

besparing. Cashback en actievoorwaarden zijn afhankelijk van uw situatie en=

de deelnemende aanbieders.




r:#8a929b;text-decoration:underline;">Afmelden















height=3D"1" alt=3D"">

--0000000000009b462f065c24c411--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9Mya-00000000PI3-0F5O

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:32 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f72.google.com ([209.85.219.72]:46308)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9K7u-00000000LiW-3o8p

for doctor@nk.ca;

Wed, 23 Sep 2026 04:23:07 -0600

Received: by mail-qv1-f72.google.com with SMTP id 6a1803df08f44-91213a1aa68so11282936d6.0

for ; Wed, 23 Sep 2026 03:22:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=hou.edu.vn; s=google; t=1790158924; x=1790763724; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=ILTsLtZlwNaWR50mXDlXiwY8uijCht65QsSROliqG5Q=;

b=g+/j+1EWd8fmTWcBBilegSoS/Xp0KfTD3AR3rpl308fYQgFxd/mQUEKxGmeSZ9VxmE

bma97uHcI8ibE1w8auhXapAD2O2d8gRKj+i/2SnwBYjWiL9WM3i5NED/NMA38ZF5C7Lt

lHys/k8t2gm2pkgxJJWtfb+Qb4G3hE/1C7awA=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790158924; x=1790763724;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=ILTsLtZlwNaWR50mXDlXiwY8uijCht65QsSROliqG5Q=;

b=Ni2cX80MipIE8uKJ5P5ziCUUHExp6RJHd0bJytO4BmiVeARCX0BufYSMeq1P/yWcDI

uS4J1/kklMGg+3asWZZSsrwedXRxIB+5iDeRAqlHTYjP7GRR1S4abgEjsbda0Yl4WZ4b

q19sl+3W+wFEv/uithTDhBfiRfRRo9dx3+okiIXULuXgYYK3hTtvUtK+mjv/XlC4i/+0

3frakktbth1IxAogK1H4x/GLi87kc7Hew/0YHrapgWvZ2uyRMAK/ZBanIEtP64V8ypnp

LLNv2n4Ht2bOcpeOSmrpwqGVUVzP0fUMgVfZhgALxbCUIfOFNAAv0fOTNuczqRtOtnlM

zWhA==

X-Gm-Message-State: AFuF++nYQg7gAQ1rNjoBYXSEx4sO1retpOXE3vrCGXcyiD5USEzxWGy/

OktpeyPkRdXoRR1uci/tZ3DqCHoizlSYw0mIOgmJN33XXkxHR4UM8m39eCogOWoxcD7gy1rqhgo

B72XYqwpT/vF5XwSLSpj2wz1I7zvMp0vQ6aUr3nhuxYUIF588lGF0g/Rr64JSisWB9Lt18DGGwG

j+sQWAuOO9sfWJnJOv5HM5yQtkI6kH+vAcQnLUxS9zpg==

MIME-Version: 1.0

X-Received: by 2002:ac8:7fc1:0:b0:532:d18f:bd57 with SMTP id

d75a77b69052e-532eabdd4b6mr36759731cf.18.1790158923816; Wed, 23 Sep 2026

03:22:03 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 10:22:03 +0000

Subject: Laatste kans: jouw gemeente zit bijna vol

From: Lisa van EnergieCheck

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000bef424065c23da4e"

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ⏳ Laatste kans – jouw gemeente zit bijna vol Steeds meer

huishoudens stappen over. Is er nog plek in jouw gemeente? Hoi, ik ben Lisa.

Veel mensen betalen nog altijd te veel voor stroom en gas, gewoon omdat overstappen

als gedoe voelt. Dat hoeft niet: met de gratis EnergieCheck zie je in een

minuut of jij goedkoper [...]



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.72 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.72 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.72 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.1 TW_IK BODY: Odd Letter Triples with IK

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Laatste kans: jouw gemeente zit bijna vol



--000000000000bef424065c23da4e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



4o+zIExhYXRzdGUga2FucyDigJMgam91dyBnZW1lZW50ZSB6aXQgYmlqbmEgdm9sDQoNCg0KDQpT

dGVlZHMgbWVlciBodWlzaG91ZGVucyBzdGFwcGVuIG92ZXIuIElzIGVyIG5vZyBwbGVrIGluIGpv

dXcgZ2VtZWVudGU/DQoNCg0KDQpIb2ksIGlrIGJlbiBMaXNhLiBWZWVsIG1lbnNlbiBiZXRhbGVu

IG5vZyBhbHRpamQgdGUgdmVlbCB2b29yIHN0cm9vbSBlbiAgDQpnYXMsIGdld29vbiBvbWRhdCBv

dmVyc3RhcHBlbiBhbHMgZ2Vkb2Ugdm9lbHQuIERhdCBob2VmdCBuaWV0OiBtZXQgZGUgIA0KZ3Jh

dGlzIEVuZXJnaWVDaGVjayB6aWUgamUgaW4gZWVuIG1pbnV1dCBvZiBqaWogZ29lZGtvcGVyIHVp

dCBiZW50IOKAkyB6b25kZXIgIA0Kb3ZlcnN0YXBzdHJlc3MuDQoNCg0KDQoNCg0KMS4gVnVsIGpl

IHBvc3Rjb2RlIGVuIGh1aWRpZ2Ugc2l0dWF0aWUgaW4NCg0KMi4gSmUgemlldCBkaXJlY3QgamUg

bW9nZWxpamtlIGJlc3BhcmluZyBwZXIgbWFhbmQNCg0KMy4gV2lqIHJlZ2VsZW4gZGUgb3ZlcnN0

YXAg4oCTIGppaiBkb2V0IG5pZXRzIGV4dHJhJ3MNCg0KDQoNCg0KDQpQZXIgZ2VtZWVudGUgaXMg

ZXIgZWVuIGJlcGVya3QgYWFudGFsIHBsZWtrZW4gYmlqIG9uemUgc2NoZXJwc3RlIHRhcmlldmVu

LiAgDQpaaXQgamlqIG5vZyB2YXN0IGFhbiBlZW4gZHV1ciBjb250cmFjdD8gQ2hlY2sgaGV0IG51

IGhldCBub2cga2FuLg0KDQoNCg0KDQpDaGVjayBtaWpuIGJlc3BhcmluZyDihpINCg0KDQoNCg0K

U2xpbSBiZXNwYXJlbiwNCkxpc2EgdmFuIEVuZXJnaWVDaGVjaw0KDQoNCg0KQmVzcGFyaW5nZW4g

emlqbiBpbmRpY2F0aWVmIGVuIGFmaGFua2VsaWprIHZhbiBqZSB2ZXJicnVpaywgaHVpZGlnZSAg

DQpjb250cmFjdCBlbiBiZXNjaGlrYmFyZSB0YXJpZXZlbi4gRGUgRW5lcmdpZUNoZWNrIGlzIGdy

YXRpcyBlbiB2cmlqYmxpanZlbmQuDQpBZm1lbGRlbg0KDQoNCg0KDQo=

--000000000000bef424065c23da4e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background-color:#eef2f3;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:100%;max-width:600px;background-color=

:#ffffff;font-family:'Segoe UI',Arial,Helvetica,sans-serif;">




















































fff;font-weight:700;text-align:center;letter-spacing:0.5px;">⏳ Laatst=

e kans – jouw gemeente zit bijna vol






3039;font-weight:800;">Steeds meer huishoudens stappen over. Is er nog plek=

in jouw gemeente?






54b;">Hoi, ik ben Lisa. Veel mensen betalen nog altijd te veel voor stroom =

en gas, gewoon omdat overstappen als gedoe voelt. Dat hoeft niet: met de gr=

atis EnergieCheck zie je in een minuut of jij goedkoper uit bent –
trong>zonder overstapstress.






ellspacing=3D"0" border=3D"0" style=3D"background-color:#f3f7f8;border-radi=

us:10px;">










px;color:#123039;">1.=

  Vul je postcode en huidige situatie in




px;color:#123039;">2.=

  Je ziet direct je mogelijke besparing per maand




r:#123039;">3.  =

Wij regelen de overstap – jij doet niets extra’s








a60;">Per gemeente is er een beperkt aantal plekken bij onze scherpste tari=

even. Zit jij nog vast aan een duur contract? Check het nu het nog kan.






" border=3D"0">




">


target=3D"_blank" style=3D"display:block;padding:16px 44px;font-family:'Seg=

oe UI',Arial,sans-serif;font-size:19px;font-weight:800;color:#ffffff;text-d=

ecoration:none;">Check mijn besparing →







a90;">Slim besparen,
Lisa van EnergieCheck






0a5;text-align:center;">Besparingen zijn indicatief en afhankelijk van je v=

erbruik, huidige contract en beschikbare tarieven. De EnergieCheck is grati=

s en vrijblijvend.

5df2" style=3D"color:#93a0a5;text-decoration:underline;">Afmelden










ght=3D"1" alt=3D"">

--000000000000bef424065c23da4e--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:25:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MyS-00000000Ow9-1V5I

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:24 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f72.google.com ([209.85.210.72]:56715)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9JfL-00000000Ifu-0Ig2

for doctor@nk.ca;

Wed, 23 Sep 2026 03:53:35 -0600

Received: by mail-ot1-f72.google.com with SMTP id 46e09a7af769-7f4f0a1f4f2so1403738a34.1

for ; Wed, 23 Sep 2026 02:52:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=insjonqueres-cat.20251104.gappssmtp.com; s=20251104; t=1790157152; x=1790761952; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=KKc8Z3P/0dkCvlbIEWzWgRLrkTCKH0LKjm5asiGOawg=;

b=JDRTQoUBRbn19sFY6BqQEIqJQosRS3NYespPsLtINdPSW4d/N1M3LTIy5z6B7IY97e

PMG0fWmAn6N0Kno4wzW6wUDIdXKKTnxJBD95PWlFz0W0Ah6dRKiPWxXiem0XwUjekDI9

QL9jhloytP74ypKAJVOf6ZL4U2tg8QJpIyF9+iPelx9aPUseXCO8/Qyn5Dkt+lgCgf3y

EIzL/1gb3rbaw7mvwvf89IVHzf74HilnT9bXcn9bCgPx+/H9TBgqolX4FUDIV6qb1PPx

ijxTR93U/rktEvfkYht1PPol7HhW9zzuNcPlweuuWkxzMrEbAAJc/vps2EHY/FjfE8dv

9u1Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790157152; x=1790761952;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=KKc8Z3P/0dkCvlbIEWzWgRLrkTCKH0LKjm5asiGOawg=;

b=qu7ktaceAyk3r/+zSK/wTRYbCMQIbct9fpVeUWyaYv5EBBQiWKtGo7CtYYor4QgRkT

kxCoXhc85WSCqEukiOoXEkHk5FXGwW3NZgHls/UiPge8NUimS5AB8u7k7Ytxo67Bl9++

0qSGgqBlp+gW1WOdqYNV9Ix2tCFgdW4/4y9EzK0Db/bFInyIau1aUEjgHNGH2VtrhOa6

0B5Qj4/JrACvSQdGsQnUGQ0Vl4N8kOi5E7ROSptFyozPRGVXUV6v+1xgABRMaJxjcGyI

q1KbR7nG2bXBt5kqdnvfYo8LGdUFcM0FP+w7shLf1eQLYMMmM86o2aCsM70HvfQ4YaXD

OVBQ==

X-Gm-Message-State: AFuF++lS9XK1ayvQ6QMpQP8tM/dtPdXJmCWdFcBpMkJpCyoH38mVumxm

CLq6Z/Wu+RbAuR8q9sZm1BwS2chndKaDhrs+XymTlxq93qUmDvI9hZ9/4o/0uRSSF2EXMJVbwiV

xtU8bwpMWwuZflMQmFNjDuQb9

MIME-Version: 1.0

X-Received: by 2002:a05:6820:208d:b0:6b7:83d6:2939 with SMTP id

006d021491bc7-6d2d262298amr1852404eaf.60.1790157151819; Wed, 23 Sep 2026

02:52:31 -0700 (PDT)

Message-ID:

Date: Wed, 23 Sep 2026 09:52:31 +0000

Subject: Saldering wordt afgebouwd: check nu of u zonder investering kunt starten

From: Landelijk Energieopslag Loket

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000002064cd065c2371d9"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Landelijk Energieopslag Loket âš Salderingsregeling wordt

vanaf 2027 afgebouwd Thuisbatterij voor opslag van zonne-energie



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

[209.85.210.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

[209.85.210.72 listed in dnsbl.ahbl.org]

[209.85.210.72 listed in dnsbl.ahbl.org]

[209.85.210.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.72 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.72 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.72 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.72 listed in wl.mailspike.net]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: businesssnap.xyz (xyz)]

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_NK BODY: Odd Letter Triples with NK

0.1 TW_UW BODY: Odd Letter Triples with UW

0.1 TW_IK BODY: Odd Letter Triples with IK

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_JW BODY: Odd Letter Triples with JW

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Saldering wordt afgebouwd: check nu of u zonder investering kunt starten



--0000000000002064cd065c2371d9

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TGFuZGVsaWprIEVuZXJnaWVvcHNsYWcgTG9rZXQNCg0KDQrimqAgU2FsZGVyaW5nc3JlZ2VsaW5n

IHdvcmR0IHZhbmFmIDIwMjcgYWZnZWJvdXdkDQoNCg0KVGh1aXNiYXR0ZXJpaiB2b29yIG9wc2xh

ZyB2YW4gem9ubmUtZW5lcmdpZQ0KDQoNClNhbGRlcmluZyBzdG9wdCDigJQgem8gaG91ZHQgdSB0

w7NjaCB1dyB6b25uZXN0cm9vbQ0KDQpWb29yIGVsa2Uga1doIGRpZSB1dyBwYW5lbGVuIG92ZXJk

YWcgdGVydWdnZXZlbiwga3Jpamd0IHUgc3Ryw6FrcyBzdGVlZHMgIA0KbWluZGVyIHRlcnVnIOKA

lCB0ZXJ3aWpsIHUgJ3MgYXZvbmRzIG5vZyBkZSB2b2xsZSBwcmlqcyBiZXRhYWx0LiBXaWUgbmll

dHMgIA0KZG9ldCwgZ2VlZnQgaG9uZGVyZGVuIGV1cm8ncyBhYW4gem9ubmVzdHJvb20gdnJpandl

bCBncmF0aXMgd2VnLiBEZSAgDQpvcGxvc3Npbmc6IHNsYSB1dyBlaWdlbiBzdHJvb20gb3AgaW4g

ZWVuIHRodWlzYmF0dGVyaWouDQoNCg0KDQoNCuKckyBHZWJydWlrICdzIGF2b25kcyB1dyBlaWdl

biB6b25uZXN0cm9vbSBpbiBwbGFhdHMgdmFuIGR1cmUgbmV0c3Ryb29tDQoNCuKckyBHZWVuIGFh

bnNjaGFma29zdGVuIHZvb3JhZiB2aWEgZGUgbmlldXdlIGdlbWVlbnRlbGlqa2UgcmVnZWxpbmcN

Cg0K4pyTIEJpaiBzdHJvb211aXR2YWwgYmxpanZlbiB2ZXJsaWNodGluZyBlbiB3aWZpIHdlcmtl

biBkYW5remlqIHV3IGJhY2stdXANCg0K4pyTIEJlcGVya3QgYWFudGFsIHBsZWtrZW4gcGVyIGdl

bWVlbnRlIOKAlCBvcCB2b2xnb3JkZSB2YW4gYWFubWVsZGluZw0KDQoNCg0KDQoNCkNoZWNrIGJl

c2NoaWtiYWFyaGVpZCBpbiB1dyBwb3N0Y29kZSDihpINCg0KDQoNCg0KVnJpamJsaWp2ZW5kIMK3

IDIgbWludXRlbiDCtyBnZWVuIHZlcnBsaWNodGluZ2VuDQoNCg0KDQpCZXNjaGlrYmFhcmhlaWQs

IHZvb3J3YWFyZGVuIGVuIHBsYW5uaW5nIHZlcnNjaGlsbGVuIHBlciBnZW1lZW50ZS4gQWFuIGRl

emUgIA0KZS1tYWlsIGt1bm5lbiBnZWVuIHJlY2h0ZW4gd29yZGVuIG9udGxlZW5kLiBVIG9udHZh

bmd0IGRpdCBiZXJpY2h0IG9tZGF0IHUgIA0KemljaCB2aWEgZWVuIHZhbiBvbnplIHBhcnRuZXJz

IGhlZWZ0IGFhbmdlbWVsZC4NCkFmbWVsZGVuDQoNCg0KDQoNCg==

--0000000000002064cd065c2371d9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"background:#eef3ee;margin:0;padding:0;">










ing=3D"0" border=3D"0" style=3D"width:600px;max-width:600px;background:#fff=

fff;font-family:Arial,Helvetica,sans-serif;border-radius:10px;overflow:hidd=

en;">




















































m/lel-logo-768x58-1.png" alt=3D"Landelijk Energieopslag Loket" width=3D"230=

" style=3D"display:block;max-width:100%;height:auto;border:0;">


px;">


ter-spacing:0.5px;">⚠ Salderingsregeling wordt vanaf 2027 afgebouwd
div>




m/lel-image.jpg" alt=3D"Thuisbatterij voor opslag van zonne-energie" width=

=3D"600" style=3D"display:block;width:100%;max-width:600px;height:auto;bord=

er:0;">




3a1e;font-weight:bold;">Saldering stopt — zo houdt u tóch uw z=

onnestroom




olor:#3c4a3f;">Voor elke kWh die uw panelen overdag teruggeven, krijgt u st=

ráks steeds minder terug — terwijl u 's avonds nog de volle pr=

ijs betaalt. Wie niets doet, geeft honderden euro's aan zonnestroom vrijwel=

gratis weg. De oplossing: sla uw eigen stroom op in een thuisbatte=

rij
.






ellspacing=3D"0" border=3D"0">










ine-height:1.5;">
span>  Gebruik 's avonds uw eigen zonnestroom in plaats van dure =

netstroom

ine-height:1.5;">
span>  Geen aanschafkosten vooraf via de nieuwe =

gemeentelijke regeling

ine-height:1.5;">
span>  Bij stroomuitval blijven verlichting en wifi werken dankzi=

j uw back-up

ine-height:1.5;">
span>  Beperkt aantal plekken per gemeente — op volgorde va=

n aanmelding





" border=3D"0">








dius:6px;">


629" style=3D"display:inline-block;padding:16px 34px;font-family:Arial,Helv=

etica,sans-serif;font-size:16px;font-weight:bold;color:#ffffff;text-decorat=

ion:none;border-radius:6px;">Check beschikbaarheid in uw postcode →
>





Vrijblijven=

d · 2 minuten · geen verplichtingen




f2ee;">


9e;">Beschikbaarheid, voorwaarden en planning verschillen per gemeente. Aan=

deze e-mail kunnen geen rechten worden ontleend. U ontvangt dit bericht om=

dat u zich via een van onze partners heeft aangemeld.

/businesssnap.xyz/t/u/885829da110f9470b629" style=3D"color:#9aa69e;text-dec=

oration:underline;">Afmelden










height=3D"1" alt=3D"">

--0000000000002064cd065c2371d9--

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:25:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9MyK-00000000OYR-0znn

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:16 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out21-137.dm.aliyun.com ([115.124.21.137]:40237)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9J9n-00000000FGj-2lga

for root@nk.ca;

Wed, 23 Sep 2026 03:21:04 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.cinclinepower.ltd:alibabak_WebBatch:483342

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.cinclinepower.ltd; s=aliyun-cn-hangzhou;

t=1790155193; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=5V2JnyW85OO3RZ4Hh+5wdnjL0VQhxq4EGwz/k3fswZA=;

b=ApDnX3to/Pxq2qk1FgK9ASIclt8Y5gZXDrXerTWjDZS6bbPknAzWR4c5pxn9kmeOSjssBTFLuXhna8GflRi4BLz8R/RHeyA0S6l3afcJHNt3dUh3M53i2DtlwWaCCe/fSArr/OsVWNbK4tK3uLTNKUD7Yg6u449Hc3KgA11WdFU=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1790155193; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=5V2JnyW85OO3RZ4Hh+5wdnjL0VQhxq4EGwz/k3fswZA=;

b=FTplwNGAf2f478ILNosLKOj2R3xtXdGo9VRQY+5kNtpW7gBQSK93uJeAa8iKA6yK4SPI7Gty7+kWlViSIHMaIVQ2momEoDEX9DVSQ1hujGdDunMg17Jhv+0ipMn+VDEZFw3OphcqdO8VnkQL6QjvJBDl1pNAZFPQZDe5XLWW9oY=

Received: from chitu-hsf(mailfrom:vip@vip.cinclinepower.ltd fp:ma_600000357339456587 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Wed, 23 Sep 2026 17:17:13 +0800

Date: Wed, 23 Sep 2026 17:17:13 +0800

From: "Yonit"

To:

Reply-To:

Message-ID: <2c21849d-7a3f-4d56-b40b-2c33e600d5ba@alibaba.com>

Subject: =?UTF-8?B?RWxlY3RyaWMgVHJhbnNmb3JtZXIgTWFudWZhY3R1cmluZyBTb2x1dGlvbnM=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000357339456588

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir or Madam, I am writing to introduce Qianchuan Electric

as a manufacturer of power and distribution transformers for international

markets.



Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

[115.124.21.137 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

[115.124.21.137 listed in dnsbl.ahbl.org]

[115.124.21.137 listed in dnsbl.ahbl.org]

[115.124.21.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.124.21.137 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.124.21.137 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[115.124.21.137 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[115.124.21.137 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?RWxlY3RyaWMgVHJhbnNmb3JtZXIgTWFudWZhY3R1cmluZyBTb2x1dGlvbnM=?=



Dear Sir or Madam,

I =

am writing to introduce Qianchuan Electric as a manufacturer of power and dist=

ribution transformers for international markets.


>Qianchuan provides oil-immersed power transformers up to 220 kV, dry-type tra=

nsformers up to 110 kV, American-style transformers, prefabricated substations=

, and medium- and low-voltage switchgear. Our products are designed for applic=

ations including power transmission and distribution, renewable energy, indust=

rial facilities, substations, and new energy projects.


edEnd">Our approximately 69,000 m=C2=B2 production base is supported by 326 em=

ployees, including 69 R&D personnel, with dedicated manufacturing and test=

ing facilities. We have established a comprehensive quality and certification =

system and have obtained more than 100 qualifications, certifications, and rel=

ated technical credentials.

With integrated capa=

bilities covering product design, core processing, winding, assembly, testing,=

and quality control, Qianchuan can support both standard products and project=

-specific technical requirements. We also have experience supplying power equi=

pment to international markets and working with different project specificatio=

ns and standards.

If your company is sourcing el=

ectric transformers or evaluating new manufacturing partners, we would be plea=

sed to learn about your current product requirements and discuss suitable tran=

sformer solutions.

Best regards,

Yonit

>Qianchuan Electric


ransformer-Manufacturing.jpg" _src=3D"https://i.postimg.cc/4JtQ26S8/Electric-T=

ransformer-Manufacturing.jpg" referrerpolicy=3D"no-referrer"/>



Bitcoin phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Sep 2026 07:25:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9My5-00000000Ntx-3D9m

for dave@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 07:25:01 -0600

Resent-From: The Doctor

Resent-Date: Wed, 23 Sep 2026 07:25:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cpanel07wh.bkk1.cloud.z.com ([163.44.198.52]:48355)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9HyG-000000006gy-1yxd

for root@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 02:05:00 -0600

Received: from [127.0.0.1] (port=48789 helo=i-tree.co.th)

by cpanel07wh.bkk1.cloud.z.com with esmtp (Exim 4.96.2)

(envelope-from )

id 1x9HwO-002mn4-1p

for root@doctor.nl2k.ab.ca;

Wed, 23 Sep 2026 15:02:56 +0700

MIME-Version: 1.0

Date: Wed, 23 Sep 2026 15:02:55 +0700

From: Bit Fore

Subject: Your Portfolio

X-Priority: 1

X-MSMail-Priority: High

Importance: High

X-Mailer: MailChimp Mailer

Message-Id:

Content-Type: multipart/alternative; boundary="Part-056811-2535692974141613131"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - cpanel07wh.bkk1.cloud.z.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - i-tree.co.th

X-Get-Message-Sender-Via: cpanel07wh.bkk1.cloud.z.com: mailgid no entry from get_recent_authed_mail_ips_entry

X-Authenticated-Sender: cpanel07wh.bkk1.cloud.z.com:

X-From-Rewrite: unmodified, no actual sender determined from check mail permissions

X-Spam_score: 29.1

X-Spam_score_int: 291

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Shawn,Your investment has been successfully processed.

Your portfolio currently holds 26.2 Bitcoin as requested on www.gullcoin.netHere

are your Access Codes:Customer ID: cte3018Password: pd8049P [...]



Content analysis details: (29.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

[163.44.198.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

[163.44.198.52 listed in dnsbl.ahbl.org]

[163.44.198.52 listed in dnsbl.ahbl.org]

[163.44.198.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.44.198.52 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: gullcoin.net]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[163.44.198.52 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[163.44.198.52 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

15 GR_DOMAIN_CHIMP1 X-Mailer spammer tool signature (monkey)

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_54 BODY: 5alpha-pock-4alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

2.5 BITCOIN_XPRIO Bitcoin + priority

2.5 AC_FROM_MANY_DOTS Multiple periods in From user name

Subject: {SPAM?} Your Portfolio



--Part-056811-2535692974141613131

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Dear Shawn,Your investment has been successfully processed. Your portfolio =

currently holds 26.2 Bitcoin as requested on www.gullcoin.netHere are your =

Access Codes:Customer ID: cte3018Password: pd8049Please log in to confirm y=

our balance.Best regards,Portfolio Management



--Part-056811-2535692974141613131

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable















Dear Shawn,

Your investment has been successfully processed. Yo=

ur portfolio currently holds 26.2 Bitcoin as requested on

www.gullc=

oin.net

Here are your Access Codes:

Customer ID: cte3018
P=

assword: pd8049

Please log in to confirm your balance.

Best r=

egards,
Portfolio Management










--Part-056811-2535692974141613131--



Customer negative feedback phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 17:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x9A4X-000000004sX-42L3

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 17:38:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 17:38:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-253-214-77.smtp-out.sparkpostmail.com ([147.253.214.77]:3089)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x97Zy-000000006zf-2EpE

for sales@nk.ca;

Tue, 22 Sep 2026 14:59:15 -0600

X-MSFBL: gEFcuK6E9LC2Hx8s0LGSUNDe5a90/2YQ9UNNAXZMIBY=|eyJyIjoic2FsZXNAbms

uY2EiLCJ0ZW5hbnRfaWQiOiJzcGMiLCJzdWJhY2NvdW50X2lkIjoiMjIzODkiLCJ

jdXN0b21lcl9pZCI6IjQ1ODAzOCIsIm1lc3NhZ2VfaWQiOiI2YWIzZTVlYmIyNmE

xOWU5NTg3NyJ9

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gramadoviagem.com.br; s=bird-889-0926; t=1790110693;

i=@gramadoviagem.com.br;

bh=v/k4A9gCNThW7hEg5FQWq7clcB6kq7KKeof81KOXUMQ=;

h=To:Content-Type:Date:From:Subject:Message-Id:From:To:Cc:Subject:

Feedback-Id;

b=QnGgMWAOoldJvQ/hZDfjqdlMZ1B1AkuQTRGKdXx3+2QKJvlMCa2gT6kSFzgN6phC2

JTKevMF0efUAhQXgvOA80/Yk/l9ZAL115Y9l1JC7rqRMLy7hnQNB/glZPCA0a3LPpQ

FbBV5bXi+d9lOuZjtc//Kn1dEpt/ZO9s90KQWa9XJ2q9Xsr0/rkQxVfAeNMA4KMokB

dOLvzgh1rjOvtuYOIFrvtsvuT55d3W76RUSX7hTogqCvEjMjmcRhB8qVcNhM431EDU

Y078V4Erjzx/Zp27oUWXYETME2yQhbmK+ngwFgUFlqW6x5v5HOdDFWf+ctK1dgbqvN

F13TR2Z1Y2WNg==

Received: from [10.90.29.137] ([10.90.29.137])

by i-0505b2d270d2200a3.mta1vrest.sd.prd.sparkpost (ecelerity 5.3.0.76429 r(msys-ecelerity:tags/5.3.0.18)) with REST

id 77/8D-02855-5EBE2BA6; Tue, 22 Sep 2026 20:58:13 +0000

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6"

MIME-Version: 1.0

Date: Tue, 22 Sep 2026 20:58:12 +0000

From: "QBO Team"

Subject: A Client Has Raised Concerns About Their Experience

Message-Id: <9cea9a7c-418c-7506-d2a6-9bbe84426fb5@gramadoviagem.com.br>

X-Spam_score: 25.1

X-Spam_score_int: 251

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your customer just left negative feedback Hello, A customer

left negative feedback about your business. They mentioned wait time and

service quality.



Content analysis details: (25.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

[147.253.214.77 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

[147.253.214.77 listed in dnsbl.ahbl.org]

[147.253.214.77 listed in dnsbl.ahbl.org]

[147.253.214.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[147.253.214.77 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: dogwooddvmswwa.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SPARKP1 Received contains spammer id (sparkp)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[147.253.214.77 listed in bl.score.senderscore.com]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} A Client Has Raised Concerns About Their Experience



--_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset="UTF-8"



Your customer just left negative feedback



Hello,



A customer left negative feedback about your business. They mentioned wait time and service quality.



Sign in to QuickBooks to read the feedback and respond ( https://dogwooddvmswwa.com/iioni )



Thank you,

Intuit QuickBooks Team

--_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"







































































Intuit QuickBooks




































 






































Your customer just left negative feedback


































 


Hello,




A customer left negative feedback about your business. They mentioned wait time and service quality.





Sign in to QuickBooks to read the feedback and respond





Thank you,


Intuit QuickBooks Team










 







--_----+LafVxu33v60/NiiKQYdKw===_37/8D-02855-5EBE2BA6--



Etihad vendor registration spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 14:05:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x96jc-000000001Xh-2wRy

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 14:05:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 14:05:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f103.google.com ([209.85.128.103]:49327)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x93nV-00000000A3T-2whF

for root@nk.ca;

Tue, 22 Sep 2026 10:56:58 -0600

Received: by mail-wm1-f103.google.com with SMTP id 5b1f17b1804b1-49e62c717e6so14015685e9.2

for ; Tue, 22 Sep 2026 09:56:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kashkeesh.com; s=google; t=1790096154; x=1790700954; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=YTx6dcGd2G9Q5XLoV3eu85JeLujjHDA17uaS+JWFiSo=;

b=i8aUNdM+25ePxLmjNU/lIkUjtjlIHrt4usUXFZTNZfeOVMCzXq5XPQTz3guf/5VjjY

2ZDaxv1mpffkze9HJGZBBOhfCDe5r23bXDogHMV8QHs+3QMxDY92uvlncXYqcZSns05h

X4+9OucauLZ8SlkPXoLMNg7cRSqoUqFCsL9bQs3lWhPbKNa1E0tauB4PsB8ozSqKllfP

r9J9vTzLwKiL8AEUBTp/an+VsZYnGgHCic7TZRf+tDiauOU8QaAQBMlZOel1oHCPCLjf

t98kKBH8T/5YJFMybpFWcJidJWe/Dej+e9PBQ45mdFLKIy0nktvkqQy0TDb7B/giwrMc

1W5Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790096154; x=1790700954;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=YTx6dcGd2G9Q5XLoV3eu85JeLujjHDA17uaS+JWFiSo=;

b=OzkPn7Z2NQThd3DlxDBvkkJr66Usvpr7u4HabLFcCRzPLVpX5ci9AeUTtvFEcIYXvz

vKdkZVdFA/f+PFbt1OAqbr+74dyi2FAYQ/pcfZ42y3O4EkAeKwmdFUaEKjPeToejR4Sh

QuAl1Exf/NVAbWi4dxrfhRviOAb69XmFokw/LRXa1V0a9yTXH/MrKxVVaQ/morxDS8lE

wohExlyCLfyxN5uc2LgtogVzPx9x3lpmneszukU+24hCPSDmIrYKsxsDgcES1N4GzlCF

ORfCHHt1xr8nsVNO7e1Zk202PW/Ot9CRupr3cSmNIlvgEoeC9q8XxNRDjTbayCSECLpm

mI1w==

X-Gm-Message-State: AFuF++l7tt2Met0806zBb4NPYJx73D6XLUSS+zSxwJUzRyulWfl99uGS

T+kPjtg0/puqxixVREYu4eDSo6oH68s+OxXt3qi1uE5+SnVzlhr7AM5umtXFbQsJomrp9fBniBt

s02TvlhkJOm/un8QzCK0Dq+y3cL4PAUPNw1NXQoVbJ/AjZE4=

X-Gm-Gg: AYBFou2kIY7ml1tytJRzztVu4iTZxx5SvulCCvOxNhxT8PG4bxBD/plUZH9eZXC3GXN

06Ent6KtucGpoa7q2OgZTizNTgwFBu+SI41Ytn5nAYPrvPohS2fWUw6p2L8Y754XZQ0qpmqdgft

SDCveUyf2l3CKdpXeGPI4mZAIMAaf7rdXukwLpBHsK3U2G+DjJ1Dchqdvt0qKIN2JNrt0vHs6hF

NziXGHp0u75Jb6CZS6QWkb8pJWbENPQV5MBOimI3iW9ri6WeXDLEFcbM4TZOGOL3r8AJvwu/BM3

tG2lgJnGAPXQ4udLQ025wuYkFwYyzCc20qswL16g9U8MX2Xbw9J2YTplk1mtnkMnsVToK5WEUX+

DDhPgt+OY

X-Received: by 2002:a05:600c:c1c8:10b0:49e:81a7:9fbc with SMTP id 5b1f17b1804b1-49fc574aacbmr152445755e9.24.1790096154265;

Tue, 22 Sep 2026 09:55:54 -0700 (PDT)

Received: from kashkeesh.com ([77.83.39.2])

by smtp-relay.gmail.com with ESMTPS id 5b1f17b1804b1-49fde13bbc4sm642385e9.16.2026.09.22.09.55.54

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 22 Sep 2026 09:55:54 -0700 (PDT)

X-Relaying-Domain: kashkeesh.com

Reply-To: registrations@etihadaviation-ae.com

From: ''Etihad Aviation Group PJSC''

To: root@nk.ca

Subject: Invitation: Etihad Vendor Registration Program

Date: 22 Sep 2026 09:55:54 -0700

Message-ID: <20260922095554.57B7162FB0305B47@kashkeesh.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Etihad Aviation Group - Vendor Opportunity ✈️ Etihad

Aviation Group



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

[209.85.128.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

[209.85.128.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.83.39.2 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.103 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.103 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.103 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[77.83.39.2 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[77.83.39.2 listed in zen.spamhaus.org]

Subject: {SPAM?} Invitation: Etihad Vendor Registration Program












=3D1.0">

Etihad Aviation Group - Vendor Opportunity






padding: 0;

background-color: #f4f4f4;

font-family: Arial, Helvetica, sans-serif">




margin: 20px auto;

background-color: #ffffff;

border-radius: 8px;

box-shadow: 0 4px 12px rgba(0,0,0,0.1);

overflow: hidden" class=3D"email-container">






padding: 20px 30px;

text-align: center" class=3D"header">


font-size: 22px;

margin: 0;

font-weight: 300;

letter-spacing: 1px">✈️ Etihad Aviation Group

=










color: #333333;

line-height: 1.6" class=3D"content">






margin-bottom: 20px" class=3D"greeting">

Dear


=3D"0" style=3D"display:inline-block; vertical-align:middle;">








8px; border-radius:3px; font-weight:bold; color:#1a3c6e; font-size:15px;">

root

,







Unlock a world of opportun=

ity with Etihad Aviation Group.








We're inviting select companies to join our
=3D"color: #1a3c6e">Vendor Registration Program
— your gatew=

ay to future procurement and supply chain partnerships with a global aviati=

on leader.






border-left: 4px solid #1a3c6e;

padding: 15px 20px;

margin: 22px 0;

border-radius: 4px" class=3D"cta-box">



Interested? Simply reply to this email=

=2E We'll send you the Vendor Questionnaire and Ex=

pression of Interest (EOI)
forms to get started.









Let's explore how we can grow together. We look forward to =

hearing from you.








padding-top: 20px;

border-top: 1px solid #eaeaea" class=3D"signature">

Yours sincerely,




font-size: 16px;

color: #1a3c6e" class=3D"name">Engr. Ibrahim Khalid



color: #555" class=3D"title">Senior Vice President – Supp=

ly Chain Management



color: #555;

margin-top: 2px" class=3D"company">Etihad Aviation Group PJSC
div>


color: #888;

margin-top: 2px" class=3D"location">Dubai, United Arab Emirates=












background-color: #1a3c6e;

color: #ffffff;

padding: 12px 28px;

border-radius: 4px;

text-decoration: none;

font-weight: bold;

font-size: 15px;

margin-top: 5px" href=3D"mailto:registrations@etihadaviation-ae=

=2Ecom?subject=3DVendor%20Registration%20Interest%20-%20[{Email}]&body=

=3DDear%20Etihad%20Aviation%20Group%20Team%2C%0D%0A%0D%0AI%20am%20writing%2=

0to%20express%20our%20organization's%20interest%20in%20joining%20the%20Etih=

ad%20Aviation%20Group%20Vendor%20Registration%20Program.%0D%0A%0D%0APlease%=

20send%20us%20the%20Vendor%20Questionnaire%20and%20Expression%20of%20Intere=

st%20(EOI)%20documents%20for%20completion%20and%20review.%0D%0A%0D%0ACompan=

y%20Name%3A%20%0D%0AContact%20Person%3A%20%0D%0APhone%20Number%3A%20%0D%0AE=

mail%20Address%3A%20[{Email}]%0D%0A%0D%0AWe%20look%20forward%20to%20the%20o=

pportunity%20to%20work%20with%20your%20organization.%0D%0A%0D%0ABest%20rega=

rds%2C%0D%0A%5BYour%20Full%20Name%5D%0D%0A%5BYour%20Job%20Title%5D%0D%0A%5B=

Your%20Company%5D" class=3D"btn" target=3D"_blank">

�� Reply to Express Interest








13px; color: #888;">


; border-radius: 3px;">

⚡ Reply directly to: registrations@etihad=

aviation-ae.com















padding: 15px 30px;

text-align: center;

font-size: 12px;

color: #999;

border-top: 1px solid #eaeaea" class=3D"footer">

© 2026 Etihad Aviation Group PJSC • All rights reserv=

ed.




This message was sent to


=3D"0" style=3D"display:inline-block; vertical-align:middle;">








8px; border-radius:3px; font-weight:bold; color:#1a3c6e; font-size:11px;">

root



and contains confidential information.















Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 14:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x96jU-000000001W6-0162

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 14:04:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 14:04:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ns.dccomp.cz ([82.142.82.201]:40872 helo=server2.dccomp.cz)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x93bK-000000008ts-1VCx

for sales@nk.ca;

Tue, 22 Sep 2026 10:44:32 -0600

Received: from mailserver.dccomp.cz (unknown [10.10.11.25])

by server2.dccomp.cz (Postfix) with ESMTP id 0392E802536

for ; Tue, 22 Sep 2026 18:43:18 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.11.0 server2.dccomp.cz 0392E802536

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=stredniskoladrtinova.cz; s=default; t=1790095398;

bh=rqSeeQY2fGMU1mZgtnWFiMCZQDy+J/uELnYijc/QtkI=;

h=From:Date:Subject:To:Reply-To:From;

b=rzTUOcrGQsLZh7M9gWmPiuBvf+whjwiBwOGIB1gWwtHVPMVhi8LQ4aJbjVmFGcD3E

kHPZFgtHuM1UEDFVGrDW0/A3rwg7/v0CRkUsTKEiuffiRY0WM9Bd8+5SFTGr6780xv

ln+bHoy3s6+leZKk9aEkKeCApTl7qrvcwdrf7NnE=

Received: from 172 (unknown [172.93.220.36])

by mailserver.dccomp.cz (Postfix) with ESMTPSA id 786285C0071

for ; Tue, 22 Sep 2026 18:43:17 +0200 (CEST)

From: Richard Cooks

Date: Tue, 22 Sep 2026 18:43:17 +0200

Subject: Heritage Fund Correspondence

Message-Id:

Priority: urgent

To: sales@nk.ca

Reply-To: richardcooks02@gmail.com

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day: My name is Richards Cooks, and I am writing from

the United Kingdom in connection with financial matters relating to your

family heritage.



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[172.93.220.36 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

[82.142.82.201 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

[172.93.220.36 listed in dnsbl.ahbl.org]

[172.93.220.36 listed in dnsbl.ahbl.org]

[172.93.220.36 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

[82.142.82.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.93.220.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[172.93.220.36 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[82.142.82.201 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[richardcooks02(at)gmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Heritage Fund Correspondence



Good day:



My name is Richards Cooks, and I am writing from the United Kingdom in connection with financial matters relating to your family heritage.



To ensure that this correspondence is directed to the correct recipient, I kindly request that you confirm your full name together with your current residential address and contact information.



I would be grateful to receive your response at your earliest convenience.



Thank you in advance for your cooperation.



Yours sincerely,



Richards Cooks





Business networking spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 14:04:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x96j6-000000001TJ-1rsh

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 14:04:28 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 14:04:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f43.google.com ([74.125.227.171]:44447)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x92bb-000000003WQ-1h0D

for sales@nk.ca;

Tue, 22 Sep 2026 09:40:37 -0600

Received: by mail-pj2-f43.google.com with SMTP id 98e67ed59e1d1-39b2ad861b1so2284a91.1

for ; Tue, 22 Sep 2026 08:39:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=leadzenixb2b-com.20251104.gappssmtp.com; s=20251104; t=1790091573; x=1790696373; darn=nk.ca;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:in-reply-to

:references:to:from:return-receipt-to:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=b9015+12ZauRZKSSi3x1NglbwO/I6fsz/cyG60wmHyw=;

b=XeMfcRbRtGuCu/TSXv+i445tpvI/4jyMXvWPqoM8JMZanPe++nYQ0+QVH5deQgf8sh

TR11UmJzl2FRTWd9QdiEvjj0vqaAuxwXVItAAyd1yw9wiWvABJRaJJkh6cDJ4knDJCaQ

01hAS9DkVcFaAEr3I5O+rszLJQFND/BhRSQVYeqi6Eoz3ZnagMUW6FyVywfvhk9ZvzxZ

l+2uHBxZA/74qj5HK1nYQd+8G//kMDEKGeYDy8UfTi3hEWXU1g6ZjDx+IHK2rH7LjAa+

IvMdGvNd7kul21fcV+QIBYtbdCCrCqOuq7pAyFkgvHcK9WBz3OHbyJcjhP6/FwbSuUS2

v/yw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790091573; x=1790696373;

h=disposition-notification-to:content-language:thread-index

:content-type:mime-version:message-id:date:subject:in-reply-to

:references:to:from:return-receipt-to:x-gm-gg:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=b9015+12ZauRZKSSi3x1NglbwO/I6fsz/cyG60wmHyw=;

b=fZameJfv1e45Xon6D3kv/KuyTI8SZwbtqC2zkNzuCHMhAMZsZR8v6ETxXO0SAxqysx

pS3iZd307vSJ+WSiT8JhbgtceqPFQ2XqoBuV6dqn9ZfzP6t/K7UleUVDvjuL/DY0SJqz

xzIYPQysfiLRQp6gGm7JMcqG/jc8mYJmZxt35xpYRg0uyzeEKue+84jkac3HlhkrJenb

m8jmlXyYHAW3AZLAs9Inne8VbvW+EiQuvOQl7fsEMKxojgoQcsbKLS5oCIr/iKMeSRK5

fNDi8GGbKETe+T/FfFhM6CWWp96CavLKuZqhEIlle4o22KTtsw3MrmkJt3lt6UpGB9ON

WE9g==

X-Gm-Message-State: AFuF++nIYCFpgPGoy8qPwpsgwznHAzyFrdzhVrtGEXal5NweRX1TrweV

Iz/vOK9NZAdkxLvLWaZWmsJSHjn663hflItIPrlxeygj+vTx9U2x7csFyiYJHbxzNWK4Ey+EDhd

iedOzIQM=

X-Gm-Gg: AYBFou1W+Fi/pz8JXk+SafA8qtIhRYQdhRFTEiWL5KXPzlvxFI7i+L8JozffhCq2hCe

+K0DSw/iwIOnaFYiUb0pO23RXE0LNQgRAnhrQkN3aA6+9YnMx621iSqx46ARbaXBWczqKfu/GPq

Nf1d8XbAAePAbFBNFUUL1lk4dgBXZ6kqeyZhV3XyP+rAOm2pjCq0Qe9m7pjMRDeGPWuGxC6qfgE

EVx8hTkwdzU9uv06o2JH5GEwRf8W9JFMZIO+bqzcMnHjrKHHMeeIyd3qlfvCN6X1l9Hf+dTriyB

qDnwWxLlNDqBIEHfhzoa6T0EdbATnYtPsOQUxw13M97k++ukK/lmA89gWmeRGqioxm2EYONXB1I

AxfXRjHy8grlS0wjVEH6UHNHJUwnGJYd7Sb/pYMSnVQ/KPDX0aCSaWTGxEfLuoSTP/zMrnF1iqL

mXHOK5oSpvYV5CMBgZti/XWXS8AcbUJAzlRtW2DEABVWNjvD/U0ZKFHrwJHZHVd3Aem2MEJmO4z

KLquOIrNKw/kHdgUpAWQfl/+A==

X-Received: by 2002:a17:90b:570e:b0:3a0:60c0:7f8f with SMTP id 98e67ed59e1d1-3a072ea8b51mr2802426a91.0.1790091573322;

Tue, 22 Sep 2026 08:39:33 -0700 (PDT)

Received: from DESKTOP9OFI8GB ([49.207.135.0])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-33e6d73cd86sm92023eec.12.2026.09.22.08.39.31

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 22 Sep 2026 08:39:32 -0700 (PDT)

Return-Receipt-To: "Emily Parker"

From: "Emily Parker"

To:

References:

In-Reply-To:

Subject: RE: Reach Companies Using Hosting and CMS Technologies

Date: Tue, 22 Sep 2026 11:39:02 -0400

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_06D1_01DD4A87.0907CF10"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0PrNUVUUVelT7uSZCVxTIJqicpMg6+6G2w

Content-Language: en-gb

Disposition-Notification-To: "Emily Parker"



This is a multipart message in MIME format.



------=_NextPart_000_06D1_01DD4A87.0907CF10

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







Just following up to see if you had a chance to review my email below.







Looking forward to your response!







Regards,



Emily







From: Emily Parker

Sent: 09 July 2026 10:12 AM

To: 'sales@nk.ca'

Subject: Reach Companies Using Hosting and CMS Technologies







Hi, hope you're doing well!







Would you be interested in reaching Decision-makers at companies using

Hosting infrastructure and CMS technologies across the USA and Canada?







Technologies users included:



. cPanel



. Plesk



. WHMCS



. Cloud Linux



. LiteSpeed



. VMware



. WordPress



. Drupal



. Joomla and more







If this sounds useful, we can share details along with counts and rates

based on your target criteria.







Just let us know your preferred technology, geography, and job titles.







Please let me know your thoughts.







Best Regards,



Emily Parker | Business Development Executive



If you would like to no longer receive emails, reply "remove"





------=_NextPart_000_06D1_01DD4A87.0907CF10

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
link=3D"#0563C1" vlink=3D"#954F72" style=3D'word-wrap:break-word'>

class=3DWordSection1>


style=3D'font-size:11.0pt'>Hi,

style=3D'font-size:11.0pt;mso-ligatures:none'>


class=3DMsoNoSpacing>
style=3D'font-size:11.0pt'> 


class=3DMsoNoSpacing>Just following up =

to see if you had a chance to review my email =

below.


style=3D'font-size:11.0pt'> 


class=3DMsoNoSpacing>Looking forward to =

your response!


style=3D'font-size:11.0pt'> 


class=3DMsoNoSpacing>
style=3D'font-size:11.0pt'>Regards,


class=3DMsoNormal>Emily


class=3DMsoNormal> 


style=3D'border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm =

0cm 0cm'>


style=3D'mso-ligatures:none;mso-fareast-language:EN-GB'>From:
<=

span lang=3DEN-US =

style=3D'mso-ligatures:none;mso-fareast-language:EN-GB'> Emily Parker =

<emily.parker@leadzenixb2b.com>
Sent: 09 July 2026 =

10:12 AM
To: 'sales@nk.ca' =

<sales@nk.ca>
Subject: Reach Companies Using Hosting and =

CMS Technologies


class=3DMsoNormal> 


style=3D'color:black'>Hi, hope you’re doing well! =


style=3D'color:black'> 


class=3DMsoNormal>Would you be interested in =

reaching Decision-makers at companies using Hosting infrastructure =

and CMS technologies across the USA and =

Canada?


style=3D'color:black'> 


class=3DMsoNormal>Technologies users =

included:


style=3D'color:black'>·       &=

nbsp; cPanel


style=3D'color:black'>·       &=

nbsp; Plesk


style=3D'color:black'>·       &=

nbsp; WHMCS


style=3D'color:black'>·       &=

nbsp; Cloud Linux


style=3D'color:black'>·       &=

nbsp; LiteSpeed


style=3D'color:black'>·       &=

nbsp; VMware


style=3D'color:black'>·       &=

nbsp; WordPress


style=3D'color:black'>·       &=

nbsp; Drupal


style=3D'color:black'>·       &=

nbsp; Joomla and more


style=3D'color:black'> 


class=3DMsoNormal>If this sounds useful, we =

can share details along with counts and rates based on your =

target criteria.


style=3D'color:black'> 


class=3DMsoNormal>Just let us know your =

preferred technology, geography, and job =

titles.


style=3D'color:black'> 


class=3DMsoNormal>Please let me know your =

thoughts.

style=3D'mso-ligatures:none'>


class=3DMsoNormal>
style=3D'mso-ligatures:none'> 


class=3DMsoNormal>
style=3D'font-size:11.5pt;mso-ligatures:none'>Best Regards, =


style=3D'font-size:11.5pt;mso-ligatures:none'>Emily Parker | Business =

Development Executive


class=3DMsoNormal>If =

you would like to no longer receive emails, reply =

“remove”



------=_NextPart_000_06D1_01DD4A87.0907CF10--



Paypal phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 08:11:31 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x91DR-00000000KYc-35a9

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 08:11:25 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 08:11:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f42.google.com ([74.125.227.170]:34665)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x90cJ-00000000Fms-3OFD

for doctor@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 07:33:14 -0600

Received: by mail-pj2-f42.google.com with SMTP id 98e67ed59e1d1-39d654f02baso3498887a91.3

for ; Tue, 22 Sep 2026 06:32:16 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1790083931; x=1790688731; darn=doctor.nl2k.ab.ca;

h=subject:to:from:date:message-id:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=kmB8zsq4kfsLr5DtPy9IfZaXU42g3TTX83mvG7srCm8=;

b=Sd8C4JdLEBp6H+E9AEq471xHEcfbJ15Rj+yXUD/UPIRy8zVCQjBwRAp/Md1lFUXJ17

YfEQCnSPkgoqgiSXmfCRV6wqngLmLBzw/zVkCibInPFR5KMlF/ybH6UocGSrAT57Z7IR

7N8zheRzL6rj2tdEs2bwABDu5JEgvwmJLiYjAiWKUG41qsdJVnUlXw3mndEu3P1kmT67

tCu/3a2oqIA4bg3Pp3y3NMZLvePkBakBFt46uS4KtQ33Log3Dn8YkDIKUc3LOSijDvgB

Zx6T+pQztG6w4NEp0AdFU+Tams+ZAyLjtLZSzfUCek/GfxwYWBGXyQ/0+spLN2mtdgWQ

tLYA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790083931; x=1790688731;

h=subject:to:from:date:message-id:x-gm-gg:x-gm-message-state:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=kmB8zsq4kfsLr5DtPy9IfZaXU42g3TTX83mvG7srCm8=;

b=2rB0NqES2KcMfcKHzhgvbnTdxhma3xwiznA4lL9gMclNkCjIpwu/2pCesUqtm/IJ8F

PL6iuMXf6Lwsr6DsB+/oqav2M4GnAeo5xsN4EHaQVAEo0aUo/7/qTxjB3RY7oibJaEPR

2KISR3A1qG4/pL2svk2zoHJTliLXxoA+KXl4/iAgMbsvjJIKi0MSGD3c0Hq/cM9NRhqG

McoKd1f8/IexVoBx2spk2N7YL/HUW0Xl3XzFwcThkYXi7mNk8+8noy+JsSIQl5FrhBwL

ntYX/oUKvkJRoavTdA91PJUsizBDTS/z8Wt16lltzM7CbWccEPt0Jz/JQZAobSZ+aHP0

FPLA==

X-Gm-Message-State: AFuF++kjgp3M1doldiIo4PmywRO4GU2tK+IIUTXtB0nok17hC9dR9QSD

Kpem6fxRnPhPSTR6PtyHhCpexuC4dMc2j2+gI8x6TGgVCRte2BlCEpRvWmojsHZY

X-Gm-Gg: AYBFou1TUf5DCfvRB/9am1Wi94cicBocZzS/tnbScj13fL4wSxQskI2x5e0FmRsu7RY

BFrhDxqJtVkWqNiancTp7X0PNCDK1WrGxOS3+TsH4MvluxYRywuIe5nkzUsod0lkTduNxbLqsQO

hZSKkWSL77jGoDwmLcF5o30sC2VNee/BP0LyvZDJKq8Unk9wtQ9hNCi5sYLFF4jZDwjPTLcnSry

FjZPRoeQaVWy3d9ElRF8A8gFz2UZZhmy1/TkqbCeZ45MxFedzpfw9HX4F+jtow9tfWdliXqX0fF

j/1bwOJ1vJmrzSGSg4rAfI5FjTrqEDFhBllgOriixG46QP4QRa4juqNwpi6m3m0ueoJPZd+zphe

rb67sWSAi2AR/QlY+PSlv6Et07XSGdyH5AvDfCJSNaAWASKbkHjVvoVWujYJmAYyMQZxbUEmwea

J/rXaHgCeQJuwBeElP/D5CHxeUMPPbKLoa/A2MLFmckJTthIdnfc45YYyK1EoHHgOhhsBviYHB1

djAC8AQryu/rp3XQsql9cY=

X-Received: by 2002:a17:90b:4d8f:b0:39e:6a81:5a95 with SMTP id 98e67ed59e1d1-3a0732959afmr1424604a91.41.1790083930828;

Tue, 22 Sep 2026 06:32:10 -0700 (PDT)

Received: from localhost ([124.156.247.147])

by smtp.gmail.com with UTF8SMTPSA id 98e67ed59e1d1-3a06cc3600bsm1095432a91.4.2026.09.22.06.32.08

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 22 Sep 2026 06:32:09 -0700 (PDT)

Message-ID: <6ab28359.18304b58.396882.b9cf@mx.google.com>

Date: Tue, 22 Sep 2026 06:32:09 -0700 (PDT)

From: andiaruna467@gmail.com

X-Google-Original-From: PayPal

To: doctor@doctor.nl2k.ab.ca

Subject: Payment Confirmation | $217.42 | Ref: I-3ETAGDP3JI3WMZ



Subject: Your PayPal Renewal



Hi Coustomer,



Thanks for being part of PayPal! Your 1-year membership renewed automatically at our special anniversary rate.



Renewal Details:



Service: Online Privacy & Security



Customer: Coustomer (ID: UID416430)



Amount: 217.42 USD



Need help? C_ontact u_s: 805-979-6494



Best,

PayPal

805-979-6494

Etihad Vendor Registration spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 08:11:31 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x91DH-00000000KXZ-1o4M

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 08:11:15 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 08:11:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f103.google.com ([209.85.208.103]:56641)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x90Zf-00000000FWV-3WmR

for root@nk.ca;

Tue, 22 Sep 2026 07:30:29 -0600

Received: by mail-ed1-f103.google.com with SMTP id 4fb4d7f45d1cf-6a051b737d8so933981a12.1

for ; Tue, 22 Sep 2026 06:29:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kashkeesh.com; s=google; t=1790083766; x=1790688566; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=YTx6dcGd2G9Q5XLoV3eu85JeLujjHDA17uaS+JWFiSo=;

b=SMDQGqNjDyHtYba/FU7pW4khN1hvbTL4GWMeXgzsuWQMDVZVjqD3SRuEfdDen3bFUC

BrhctRp0Gb3U9men1o8pOnAPKSFhM0eGhlW7KqTOXoW41fkQZ2i9xzOPwThIanEwDxqb

rxQ6dSSSqPskJe+s4Sudvi7mmVuDQ9C0q6ldw3AKRnn+FPJzBXvHmYRXR3EjSBY59Dco

wyFXBKPC0P1e18+o/EURG+pNuMQSakYXKdQ9QCWXXJ9/prYFM+6Di8yeij1zWzzBwNdk

Yo5kT1+FsGBOukjudxGvXStGlHq2xNdxqkX/Qb9wLtF87B4L1RtjugKSThL742/l/W+q

HpHQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790083766; x=1790688566;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=YTx6dcGd2G9Q5XLoV3eu85JeLujjHDA17uaS+JWFiSo=;

b=zZ/LGio4KNcG+XrkoSrAvTKeFS8Hs6SVeA4jgy/+d9bguw4Y8d5QpSV4q91FCXIZSn

yqW28hHvN1ALy+BvwH7CJUbuvm5jjm6iv8bWzY9gCbrtnxAxjfGnZAWxGeuQ95LjwlTC

kM9SFlXrIibTKbzwg9JTx7Pp8bIqy+KjgZ0ql+/g1ORVONtgtMkZaMfWDSnPrPdl2jxv

77WWCNJlC3EN0XiAqaJJ4jVKW7H37EOHjNU2Ok3PpEVUQNcLO43LQt43QgsOEaPgjaeQ

pp3K9oL5Lc2D/I8F7mPCgy7brByQnxRM/dT2H29R3f7NScwzG/F3QKOCB33F7eO5doR3

bbpg==

X-Gm-Message-State: AFuF++nxzo5AHNlvkr58O5mxb5AMujrIBO/CzAr5c16v4HB3V/+x6BSu

MSpKnmgrMrx5pyDWzg9wxZAEkLXOjKeWPRBzFK10MF/PsystafFN+kjYzNTM4V+xZ4lW5JPz6je

2dbQPpw8y9W02ymIuKKBw4IPy5VJpS8kvJj/pYoQN8aKPqgU=

X-Gm-Gg: AYBFou3xqtm3DyvbkLQUn2qPafANPfiBdx5i6BDH9hXbcKf8WBfRi2YQpq08f7sbw4q

E/NWvG2enDcIkco6RHiNiFousVBfVX/9OhiaHhpT7FyxUm3NeZdQXqsrY2kV1IVc8uWJm0zEXR5

KCFYScqEixITHDXKzCyLYX1Sb1Kx1KolhLdBgA1SclDDAkHtzMjC8Qpp3+yy32FjyyqX9yxcVIH

RqOUcvwA3m/YQSRTWjT8K5QGN65+Qi9dLFlcdPIzHZvS/AVNeFRPt/dDTLZeqbgSA+qSJRJ9ZNu

Qb6KOQAMrmyrpCeJWy1leXRjlg8dXURRMNXSXzuQMHCObMAiFbsThxXqeETecZI41IU2lo+bwMS

N6hHeB03L

X-Received: by 2002:a05:6402:52c4:b0:6a9:adea:42e2 with SMTP id 4fb4d7f45d1cf-6aa531dcb09mr9820855a12.39.1790083765918;

Tue, 22 Sep 2026 06:29:25 -0700 (PDT)

Received: from kashkeesh.com ([77.83.39.2])

by smtp-relay.gmail.com with ESMTPS id 4fb4d7f45d1cf-6aaa446a6a1sm871914a12.7.2026.09.22.06.29.25

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 22 Sep 2026 06:29:25 -0700 (PDT)

X-Relaying-Domain: kashkeesh.com

Reply-To: registrations@etihadaviation-ae.com

From: ''Etihad Aviation Group PJSC''

To: root@nk.ca

Subject: Invitation: Etihad Vendor Registration Program

Date: 22 Sep 2026 06:29:25 -0700

Message-ID: <20260922062925.E55B8F45545DCBBA@kashkeesh.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Etihad Aviation Group - Vendor Opportunity ✈️ Etihad

Aviation Group



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[77.83.39.2 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

[209.85.208.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

[209.85.208.103 listed in dnsbl.ahbl.org]

[209.85.208.103 listed in dnsbl.ahbl.org]

[209.85.208.103 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

[77.83.39.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.103 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[77.83.39.2 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[77.83.39.2 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

[77.83.39.2 listed in sbl-xbl.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.103 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.103 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.103 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Invitation: Etihad Vendor Registration Program












=3D1.0">

Etihad Aviation Group - Vendor Opportunity






padding: 0;

background-color: #f4f4f4;

font-family: Arial, Helvetica, sans-serif">




margin: 20px auto;

background-color: #ffffff;

border-radius: 8px;

box-shadow: 0 4px 12px rgba(0,0,0,0.1);

overflow: hidden" class=3D"email-container">






padding: 20px 30px;

text-align: center" class=3D"header">


font-size: 22px;

margin: 0;

font-weight: 300;

letter-spacing: 1px">✈️ Etihad Aviation Group

=










color: #333333;

line-height: 1.6" class=3D"content">






margin-bottom: 20px" class=3D"greeting">

Dear


=3D"0" style=3D"display:inline-block; vertical-align:middle;">








8px; border-radius:3px; font-weight:bold; color:#1a3c6e; font-size:15px;">

root

,







Unlock a world of opportun=

ity with Etihad Aviation Group.








We're inviting select companies to join our
=3D"color: #1a3c6e">Vendor Registration Program
— your gatew=

ay to future procurement and supply chain partnerships with a global aviati=

on leader.






border-left: 4px solid #1a3c6e;

padding: 15px 20px;

margin: 22px 0;

border-radius: 4px" class=3D"cta-box">



Interested? Simply reply to this email=

=2E We'll send you the Vendor Questionnaire and Ex=

pression of Interest (EOI)
forms to get started.









Let's explore how we can grow together. We look forward to =

hearing from you.








padding-top: 20px;

border-top: 1px solid #eaeaea" class=3D"signature">

Yours sincerely,




font-size: 16px;

color: #1a3c6e" class=3D"name">Engr. Ibrahim Khalid



color: #555" class=3D"title">Senior Vice President – Supp=

ly Chain Management



color: #555;

margin-top: 2px" class=3D"company">Etihad Aviation Group PJSC
div>


color: #888;

margin-top: 2px" class=3D"location">Dubai, United Arab Emirates=












background-color: #1a3c6e;

color: #ffffff;

padding: 12px 28px;

border-radius: 4px;

text-decoration: none;

font-weight: bold;

font-size: 15px;

margin-top: 5px" href=3D"mailto:registrations@etihadaviation-ae=

=2Ecom?subject=3DVendor%20Registration%20Interest%20-%20[{Email}]&body=

=3DDear%20Etihad%20Aviation%20Group%20Team%2C%0D%0A%0D%0AI%20am%20writing%2=

0to%20express%20our%20organization's%20interest%20in%20joining%20the%20Etih=

ad%20Aviation%20Group%20Vendor%20Registration%20Program.%0D%0A%0D%0APlease%=

20send%20us%20the%20Vendor%20Questionnaire%20and%20Expression%20of%20Intere=

st%20(EOI)%20documents%20for%20completion%20and%20review.%0D%0A%0D%0ACompan=

y%20Name%3A%20%0D%0AContact%20Person%3A%20%0D%0APhone%20Number%3A%20%0D%0AE=

mail%20Address%3A%20[{Email}]%0D%0A%0D%0AWe%20look%20forward%20to%20the%20o=

pportunity%20to%20work%20with%20your%20organization.%0D%0A%0D%0ABest%20rega=

rds%2C%0D%0A%5BYour%20Full%20Name%5D%0D%0A%5BYour%20Job%20Title%5D%0D%0A%5B=

Your%20Company%5D" class=3D"btn" target=3D"_blank">

�� Reply to Express Interest








13px; color: #888;">


; border-radius: 3px;">

⚡ Reply directly to: registrations@etihad=

aviation-ae.com















padding: 15px 30px;

text-align: center;

font-size: 12px;

color: #999;

border-top: 1px solid #eaeaea" class=3D"footer">

© 2026 Etihad Aviation Group PJSC • All rights reserv=

ed.




This message was sent to


=3D"0" style=3D"display:inline-block; vertical-align:middle;">








8px; border-radius:3px; font-weight:bold; color:#1a3c6e; font-size:11px;">

root



and contains confidential information.















finnish language spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 22 Sep 2026 06:28:30 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x8zbg-000000000wg-3oys

for dave@doctor.nl2k.ab.ca;

Tue, 22 Sep 2026 06:28:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 22 Sep 2026 06:28:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f71.google.com ([209.85.216.71]:50570)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x8uiK-00000000KzO-2YzV

for doctor@nk.ca;

Tue, 22 Sep 2026 01:15:00 -0600

Received: by mail-pj1-f71.google.com with SMTP id 98e67ed59e1d1-38f57e31b6eso3576494a91.1

for ; Tue, 22 Sep 2026 00:13:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=idepro-pe.20251104.gappssmtp.com; s=20251104; t=1790061209; x=1790666009; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=kmwcJBAObgYNtFi1M0QfXmcD+H8QOJOK2wv2KZAieas=;

b=UrZgactg03rDIjPA6/D7lj7Ofblwk/7e1vD6WB50n3TDFs7dgmsWKEhgb+ELz0XD4h

HjfMffi4HrmXwl4e+CYN276pVy/Gedv5MzFKEMVztq2jWfTz/2Pe0Ot4cTKUNIkRYmkD

jYu/bk49k7wS/P9WoVbBRRXHjnSQ7QDgG/LYg1U2YPV+W4Nz7pd7yZU75wfk4YY2Fwph

PtIptXVE3tgIKsBvh/QXfaXPTR/r42J9BV6NZVtFvjHgpHFeYw8+5+kardj/Tm8vLjIH

N1Rw8GgIxn0+j/rCHWtTkYsppMcxxgo+qMianZuuFsz7abHeF+Sj7LUTfwArm81WLwNJ

Wukg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790061209; x=1790666009;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=kmwcJBAObgYNtFi1M0QfXmcD+H8QOJOK2wv2KZAieas=;

b=jftzFpDuvqJPPkOdyE0p8qx2W3S+3brMpCqiSi18FnuvQ5V62cRSdvkE0x2Hq/9wNT

NQ990gcW8xX9TPQc3hqt3jE/iVz+h3pKPBqy4GNzyXBhzJO9eu89uTsd4lwuaUlf/u4h

hseCCDZHkp3kFFPeagWjZQBml3dQj8qbETOaihyxBhi9HAxjqcrIjXh4622MLmcWrI4y

NaszOjyp4YdCDk94pWf1tPqd1qJLFwy6kLLotYN0Y2wVCenah9JSs+0nTb/lGlff+Lpr

ot3uBN4jj5M4n8a9iTvsbK30Ey7G0Im+gaXMSe44OjIlrOtxc+VWoN9XN4ax80f5slhV

auNg==

X-Gm-Message-State: AFuF++l7cr4m/fTvUn0Zl3MBRZGIJw+belMAAjp89Gdfvc+znrB2Hp+3

Q1tjSJmrfkqlEj+nUCiL7MHQg49NJzMlokRBqGETopns9LkqbzGtYkKO1Q41s57UXzde80JnrsH

tvRrfJjkgoxEvxUVutdVq1Q==

MIME-Version: 1.0

X-Received: by 2002:a17:90b:48c9:b0:39e:6a7e:ee1a with SMTP id

98e67ed59e1d1-3a0732025efmr255888a91.38.1790061208827; Tue, 22 Sep 2026

00:13:28 -0700 (PDT)

Message-ID:

Date: Tue, 22 Sep 2026 07:13:28 +0000

Subject: Uw mening kan iets opleveren

From: =?UTF-8?Q?Klantenenqu=C3=AAte?=

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000007a8eaf065c0d1a15"



--0000000000007a8eaf065c0d1a15

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RGVlbCB1dyByaWplcnZhcmluZyBlbiBiZWtpamsgZGUgYXV0b2tvZWxib3gtYWFuYmllZGluZyBl

biBkZSB2b29yd2FhcmRlbi4NCg0KDQoNClVXIFJJSkVSVkFSSU5HIElTIElFVFMgV0FBUkQNCg0K

T25hZmhhbmtlbGlqa2UgcHJvbW90aWUNCg0KDQoNCg0KDQpERSBBVVRPS09FTEJPWC1BQ1RJRQ0K

DQpVdyBtZW5pbmcNCmthbiBpZXRzIG9wbGV2ZXJlbi4NCg0KDQpBdXRva29lbGJveCB1aXQgZGUg

YWFuYmllZGluZw0KDQoNCg0KVSBERUVMVCBVdyByaWplcnZhcmluZw0KDQpVIE9OVERFS1QgRGUg

YWFuYmllZGluZw0KDQoNCkJlYW50d29vcmQgZW5rZWxlIGtvcnRlIHZyYWdlbiBvdmVyIHV3IHJp

amVydmFyaW5nIGVuIHZlcmtlZXJzdmVpbGlnaGVpZC4gIA0KQmVraWprIGRhYXJuYSBkZSBhdXRv

a29lbGJveC1hYW5iaWVkaW5nIGVuIGRlIHZvb3J3YWFyZGVuLg0KDQpCZWtpamsgZGUgZW5xdcOq

dGUg4oaSDQoNCg0KDQoNCg0KDQoNCk9uYWZoYW5rZWxpamtlIHByb21vdGllLCBuaWV0IHZlcmJv

bmRlbiBhYW4gb2YgZ29lZGdla2V1cmQgZG9vciBBTldCLiAgDQpEZWVsbmFtZSBpcyB2cmlqd2ls

bGlnIGVuIGdhcmFuZGVlcnQgZ2VlbiBwcm9kdWN0IG9mIGJlbG9uaW5nLiBMZWVzIHZvb3JhZiAg

DQpkZSBhY3RpZXZvb3J3YWFyZGVuIGVuIGV2ZW50dWVsZSBrb3N0ZW4uDQoNCg0KDQoNCktsYW50

ZW5lbnF1w6p0ZSDCtyBBZHZlcnRlbnRpZQ0KVWl0c2NocmlqdmVuIMK3IEdlZW4gYWFuYmllZGlu

Z2VuIG1lZXINCg0KDQoNCg0K

--0000000000007a8eaf065c0d1a15

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






schemas-microsoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:o=

ffice:word">




idth,initial-scale=3D1">


tection" content=3D"telephone=3Dno,address=3Dno,email=3Dno,date=3Dno,url=3D=

no">



Uw mening kan iets opleveren








>


idth:0;opacity:0;overflow:hidden;mso-hide:all;">Deel uw rijervaring en beki=

jk de autokoelbox-aanbieding en de voorwaarden.



g kan iets opleveren" lang=3D"nl">


0" width=3D"100%" bgcolor=3D"#f3f6fa" class=3D"page" style=3D"background-co=

lor:#f3f6fa;">

x 16px;">




0" width=3D"100%" style=3D"max-width:560px;margin:0 auto;">





0" width=3D"100%" bgcolor=3D"#f4b400">




border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" style=3D"ta=

ble-layout:fixed;">
d width=3D"5%" height=3D"15" bgcolor=3D"#f4b400" style=3D"height:15px;line-=

height:15px;font-size:1px;"> 
<=

td width=3D"5%" height=3D"15" bgcolor=3D"#003f8f" style=3D"height:15px;line=

-height:15px;font-size:1px;"> 

tyle=3D"height:15px;line-height:15px;font-size:1px;"> 

=3D"5%" height=3D"15" bgcolor=3D"#f4b400" style=3D"height:15px;line-height:=

15px;font-size:1px;"> 

003f8f" style=3D"height:15px;line-height:15px;font-size:1px;"> 

or=3D"#003f8f" style=3D"height:15px;line-height:15px;font-size:1px;"> =


x;line-height:15px;font-size:1px;"> 

" bgcolor=3D"#003f8f" style=3D"height:15px;line-height:15px;font-size:1px;"=


ght:15px;line-height:15px;font-size:1px;"> 

t=3D"15" bgcolor=3D"#003f8f" style=3D"height:15px;line-height:15px;font-siz=

e:1px;"> 

=3D"height:15px;line-height:15px;font-size:1px;"> 

" height=3D"15" bgcolor=3D"#003f8f" style=3D"height:15px;line-height:15px;f=

ont-size:1px;"> 

" style=3D"height:15px;line-height:15px;font-size:1px;"> 

h=3D"5%" height=3D"15" bgcolor=3D"#003f8f" style=3D"height:15px;line-height=

:15px;font-size:1px;"> 

#f4b400" style=3D"height:15px;line-height:15px;font-size:1px;"> 

lor=3D"#f4b400" style=3D"height:15px;line-height:15px;font-size:1px;"> =

;

px;line-height:15px;font-size:1px;"> 

5" bgcolor=3D"#f4b400" style=3D"height:15px;line-height:15px;font-size:1px;=

"> 

ight:15px;line-height:15px;font-size:1px;"> 

ht=3D"15" bgcolor=3D"#f4b400" style=3D"height:15px;line-height:15px;font-si=

ze:1px;"> 


yle=3D"margin:0;font:700 11px/18px Arial,Helvetica,sans-serif;letter-spacin=

g:1.5px;color:#122c52;">UW RIJERVARING IS IETS WAARD


=3D"margin:5px 0 0;font:12px/19px Arial,Helvetica,sans-serif;color:#263d59;=

">Onafhankelijke promotie




0" width=3D"100%" bgcolor=3D"#ffffff" style=3D"background:#ffffff;border:1p=

x solid #ced8e3;border-radius:35px 35px 2px 2px;">








=3D"true" style=3D"width:18px;height:18px;background:#f4b400;border:1px sol=

id #b18a16;border-radius:50%;"> 



ans-serif;letter-spacing:1.5px;color:#003f8f;">DE AUTOKOELBOX-ACTIE




,sans-serif;letter-spacing:-1px;color:#003f8f;">Uw mening
kan iets oplev=

eren.




://zaozernoe.org/t/c/084513b93e08e6086f80">
m/image/52ae3bf27ade8ce3/image-1.png" alt=3D"Autokoelbox uit de aanbieding"=

width=3D"288" style=3D"display:block;width:100%;max-width:288px;height:aut=

o;">



0" width=3D"100%" style=3D"border-top:2px solid #003f8f;border-bottom:1px s=

olid #cbd8e6;">

vetica,sans-serif;color:#003f8f;">U DEELT

padding:11px 0;font:14px/20px Arial,Helvetica,sans-serif;color:#334d68;">Uw=

rijervaring

Arial,Helvetica,sans-serif;color:#003f8f;">U ONTDEKT

" style=3D"padding:0 0 11px;font:14px/20px Arial,Helvetica,sans-serif;color=

:#334d68;">De aanbieding



ns-serif;color:#526477;">Beantwoord enkele korte vragen over uw rijervaring=

en verkeersveiligheid. Bekijk daarna de autokoelbox-aanbieding en de voorw=

aarden.








0" cellspacing=3D"0" width=3D"100%" style=3D"table-layout:fixed;"><=

td width=3D"5%" height=3D"15" bgcolor=3D"#f4b400" style=3D"height:15px;line=

-height:15px;font-size:1px;"> 
table>

idth=3D"5%" height=3D"15" bgcolor=3D"#003f8f" style=3D"height:15px;line-hei=

ght:15px;font-size:1px;"> 

=3D"#f4b400" style=3D"height:15px;line-height:15px;font-size:1px;"> 
td>

line-height:15px;font-size:1px;"> 

bgcolor=3D"#f4b400" style=3D"height:15px;line-height:15px;font-size:1px;">&=

nbsp;

t:15px;line-height:15px;font-size:1px;"> 

=3D"15" bgcolor=3D"#f4b400" style=3D"height:15px;line-height:15px;font-size=

:1px;"> 

=3D"height:15px;line-height:15px;font-size:1px;"> 

" height=3D"15" bgcolor=3D"#f4b400" style=3D"height:15px;line-height:15px;f=

ont-size:1px;"> 

" style=3D"height:15px;line-height:15px;font-size:1px;"> 

h=3D"5%" height=3D"15" bgcolor=3D"#f4b400" style=3D"height:15px;line-height=

:15px;font-size:1px;"> 

#003f8f" style=3D"height:15px;line-height:15px;font-size:1px;"> 

lor=3D"#003f8f" style=3D"height:15px;line-height:15px;font-size:1px;"> =

;

px;line-height:15px;font-size:1px;"> 

5" bgcolor=3D"#003f8f" style=3D"height:15px;line-height:15px;font-size:1px;=

"> 

ight:15px;line-height:15px;font-size:1px;"> 

ht=3D"15" bgcolor=3D"#003f8f" style=3D"height:15px;line-height:15px;font-si=

ze:1px;"> 

e=3D"height:15px;line-height:15px;font-size:1px;"> 

%" height=3D"15" bgcolor=3D"#003f8f" style=3D"height:15px;line-height:15px;=

font-size:1px;"> 

0" style=3D"height:15px;line-height:15px;font-size:1px;"> 

ng=3D"0" cellspacing=3D"0" width=3D"100%">
le>

x 0;">


erif;color:#526477;">Onafhankelijke promotie, niet verbonden aan of goedgek=

eurd door ANWB. Deelname is vrijwillig en garandeert geen product of beloni=

ng. Lees vooraf de actievoorwaarden en eventuele kosten.


=3D"0" width=3D"100%">

px;font-family:Arial,Helvetica,sans-serif;font-size:12px;line-height:20px;c=

olor:#526477;" class=3D"muted">

Klantenenqu=C3=AAte =C2=B7 Advertentie

t/u/084513b93e08e6086f80" style=3D"display:inline-block;padding:10px 5px;co=

lor:#526477;text-decoration:underline;" class=3D"muted">Uitschrijven
&n=

bsp;=C2=B7 
style=3D"display:inline-block;padding:10px 5px;color:#526477;text-decorati=

on:underline;" class=3D"muted">Geen aanbiedingen meer













ght=3D"1" alt=3D"">

--0000000000007a8eaf065c0d1a15--

chinese Products spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Sep 2026 22:36:00 -0600

Received: from mail-pj2-f11.google.com ([74.125.227.139]:47758)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x8sE9-000000005ha-3tcY

for dave@doctor.nl2k.ab.ca;

Mon, 21 Sep 2026 22:35:44 -0600

Received: by mail-pj2-f11.google.com with SMTP id 98e67ed59e1d1-39569e136f9so3025791a91.0

for ; Mon, 21 Sep 2026 21:34:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1790051681; x=1790656481; darn=doctor.nl2k.ab.ca;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=lgrIXQcdQpbxVRmKXc5szNHYmsigJ7UGvcHW5Trx4z/G6nnWsu5YkSoU6f8RqveN2V

GX3NGxhuvJC81Bc9wJIoFbkh8prkT/Fhitri5XvTfxKA/fHQak53OzNnibnr2M4M4Dg2

Ybs3Ki4/iUHXb4YsSnb1lcnMfG3fr93Fa61xo=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790051681; x=1790656481;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=pzQE8sFuaDGxE5IWSQ78WDgofg/+ZuYMMdLByn7mW02vaGPeIYcVwFYofz/ohOBOHD

dRDAT2GwfisY5YJwJ2Oc9lSyMBHeCosqQnVH6vMo5X6uyUi4MULla0kUzTpgZi4s/DnI

oMf3TQbPGyNU2XRZkvoAaY6C6CHV5gb/8yQIdgacEmKQe9FW1gUiQf1L+s2gbDWqLKCz

QSJfdGSf08f4ufT1TE9BK0stQA+ZFC/eR9kkF08VC+PeRecAyltrwBQoIpaS75fddFPj

a0aHo1D+AwsklHSkRWZbdKo2oufqmAqt97H8e/WH/S7hcVN0ML2IXTM/Omik/WQWzSJN

Ir2A==

X-Gm-Message-State: AFuF++mYsD2LFX0U4v1x5VK8M5rcQU49ehHSp3PQYQX5oKQoFaEJ7GM8

UUihBnn1ddz96jvWo5FGMsQ4v0IYKhtJrhdxLro45nJNsvCygvPj+n/bW/GwD2RJDKJusSdZ10C

7G9g8dhI=

X-Gm-Gg: AYBFou2CHhIa0654ZdNUxHxGdmZwTskvr7K8w1+aI63QHluNdTYlpqlCRm1lTCDgtAE

QZI095mHwarDr9WudGREpZuEANb1E4XoPqrhb9Iw51nnnGF05EBGaem9QxzC1y4amD4RWgZBHY5

YaTqF6uqFvwe3+RJH8mcNteO6aFtEd63CDu5Giivj/H6JXyssj9j6yS/gJ869uRHVNl0S8K4n1E

DSXofSvFM+fUgmWIzgwQ6EaMBzKJJpokvfinsWQpnKnATarMmkdp+5l6K9L6nAMCmhl13yYPJRy

YWd1AQBWz2/+9XqQa4lUQa4dRu0e2NJJooBQxOhIdVvuNxq7ca/nyAm6CwllaUgk97wRVrmcyKn

pnAMctiZFt+2Jod0fdId3fCkPp3Se3jStWRPlnyCPlXy2xtItNdKKZYoyqwXrqE1JLKMFXAJ/KA

zGedgreLRnwuaTW+kwY+Mw2ITogC6kfXDs5Clp07QZHgtVJWgjcnT32KZoZksvUZEMo9FbPd3LW

FDgZ1ss

X-Received: by 2002:a17:90b:380c:b0:39e:6c69:34d6 with SMTP id 98e67ed59e1d1-3a06afaae1cmr1241968a91.58.1790051680585;

Mon, 21 Sep 2026 21:34:40 -0700 (PDT)

Received: from eemqpx ([203.88.114.137])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a066d9e41csm2419240a91.0.2026.09.21.21.34.38

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Mon, 21 Sep 2026 21:34:40 -0700 (PDT)

From: "bella@sanmeng-mould.com"

X-Google-Original-From: "bella@sanmeng-mould.com"

Reply-To:

Message-ID: <885106B44AA3F2CF201BECC7980F44DD@eemqpx>

To:

Subject: Re: plastic injection and die casting molds and moldings

Date: Tue, 22 Sep 2026 12:33:57 +0800

MIME-Version: 1.0

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: bella@sanmeng-mould.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear , We provide:



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.139 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sanmeng-mould.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: sanmeng-mould.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.139 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: lxu.idcease.net/96.44.182.133]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: lxu.idcease.net/96.44.182.133]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.139 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 FAKE_REPLY_C No description available.

Subject: {SPAM?} Re: plastic injection and die casting molds and moldings



Dear ,



We provide:



plastic injection and die casting molds and moldings.



thermoplastic injection molding, overmolding, 2K molding, aluminum & zinc die casting etc.



Competitive prices for exported mold and mass production of production mold.



Excellent services involving mould design to mould fabrication, from parts to part assembly.



Professional engineering analysis.



Excellent quality maintained through top-ranking testing machines.



Careful packaging.



ISO certificate





We value every customer and will respond to any question quickly.



For details information pls check our website: www.sanmeng-mould.com



Looking forward to your soon reply.



Welcome to visit our factory anytime!



Thank you!



--------------------------------------------------------------------------------

Best regards,



Bella

SanMeng Mould Co.,Ltd



Wechat/ WhatsApp: +86-13242975530

Email: bella@sanmeng-mould.com

Website: www.sanmeng-mould.com

Add: NO.45, Jinghai East Rd, Shatou Community, Changan town, Dongguan City, Guangdong Province, 523863, China

Partnership offer spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Sep 2026 22:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x8rus-00000000435-2v0f

for dave@doctor.nl2k.ab.ca;

Mon, 21 Sep 2026 22:15:38 -0600

Resent-From: The Doctor

Resent-Date: Mon, 21 Sep 2026 22:15:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f100.google.com ([209.85.208.100]:42071)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1x8rGX-0000000004A-1dIC

for sales@nk.ca;

Mon, 21 Sep 2026 21:34:19 -0600

Received: by mail-ed1-f100.google.com with SMTP id 4fb4d7f45d1cf-6aa8d04fcddso1023736a12.0

for ; Mon, 21 Sep 2026 20:33:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nextgenerationvt-com.20251104.gappssmtp.com; s=20251104; t=1790047983; x=1790652783; darn=nk.ca;

h=message-id:date:reply-to:mime-version:content-type:to:subject:from

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=SGVEW440ra4VCVPOXt2wSrJltdPE4TuX6e55ZFFqMhE=;

b=Qwu3v8mxu3JgPJ2BOPJy3D2dQgib6ubX1u4xiWZMM0qW4SMYVgP8erQ0tv9affPFL9

AnmB0Jj0DjQSf0kyQ8qjkr6WqZfKupjmysl4lUeu/fGQDzhGbnsVw8tX3qwhoCjj9UvJ

ckJ2N2P/QFyGnt34DBv9w0TyYHGSnMHa3F6XB/HqR8l73dqnbjbSeFY3u0NhZqxHQ8uL

mbk5YJRn9IKniLlOdrEbyksOnhqOjCZKc2Y+Nn++nFQ7ExL+mWkcwC1zrczZ4y3o7KqD

0IUCVNsschf/YYasmHT4rMrzbPIrwAb6Zz2GVXPVhSmprCg3cW51STvYQLAIsrlxc+i3

e9rg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1790047983; x=1790652783;

h=message-id:date:reply-to:mime-version:content-type:to:subject:from

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=SGVEW440ra4VCVPOXt2wSrJltdPE4TuX6e55ZFFqMhE=;

b=Ozcier9tL+p8OFj2wJkDHix5EdXKYsAa+lVwzXCH7TE+PeUSSjZy+fOyvlM283J8PI

c4+WIAIPicDnYOZP1tuqj8LowGN9uQIlvgXlOp5ESkfzk6prNMprqgRfh17MOKJEwy4M

BfxeKEQN9Ea+iyHPgmG7dj/oC7fO9Z5Uny7xqImKE8OUjVhyk9RTFl5DtkLeQBwyuS4s

7bGCy2LaPx5VYQGblNWTvn/CZyc49NMZbLAbDjDtRULZuJpnp72hDB1qxvtN0j/D5R0p

Gqr3NFBPET9NBlbz8kyBG9Xe/OD6AHUMxX6frCagLgx0SFypoAW2qydlnYRK1MU5DC/k

JCWg==

X-Gm-Message-State: AFuF++nieAXIINQGr3DMledH6roM8gGT+zJKJWPEl2tIY9eG6ye5aP5h

ThtyXMsvlmAMqYKiSA2YeibIHg67tpTaIqMrApr0J3Yvckb55m8TqWp7CjGAp18aWGv89efUy3w

yZ2e4JNSYs+QVDgQd74xbNwYBxWDqLfVgs5IjArWoMmRA

X-Gm-Gg: AYBFou3OPfBH1EuapfyHCvRzEPQ/Qa3zoLAsaLb+RyzIOEEgMSHbw/IlQZvWNOYF/AQ

NaSOxXGUcdI3elXmIIYjQwwERWXM5v2UI4ZnjfX8zWZXpuQyX7cnHhGOSVAjFuZok2UVPUG88N0

mnrnY4btbojQSDeV/5vnzrAde/BYvKttsOyIpiBXXrdbVIWwo2vlpALDCgb/sy1meko2ziaSP6p

nIbrg7QjqrvLlV6gjBb19ymiPX8b3RiBGqb1SFZ0O2hlMI2MoeFqPIJNa+Q/b4VA/X/sfSts831

q7x7XfOGXrWJDQwuz6niqsO613ZaDESZj7th0SHneEhMyieBcLCX1HHvqvvC07srACqAN9xdU5w

PgxWz+KWUjyybw/KbCZ6s1CQpSzo=

X-Received: by 2002:aa7:d351:0:b0:6a6:92d6:daad with SMTP id 4fb4d7f45d1cf-6aa9fef4d33mr864037a12.10.1790047978105;

Mon, 21 Sep 2026 20:32:58 -0700 (PDT)

Received: from VPS-397794 ([185.212.47.14])

by smtp-relay.gmail.com with ESMTPS id 4fb4d7f45d1cf-6aaa446bd8fsm171354a12.8.2026.09.21.20.32.56

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 21 Sep 2026 20:32:58 -0700 (PDT)

X-Relaying-Domain: nextgenerationvt.com

From: "Brian Williams"

Subject: Enquiry

To:

Content-Type: multipart/mixed; boundary="i=_YWlek7ao7oguBQwCVK6CjmrjZ3U1sQJ"

MIME-Version: 1.0

Reply-To:

Date: Tue, 22 Sep 2026 03:32:56 +0000

Message-Id: <225620260932038BEAA71DE5$1E621490E3@VPS>



This is a multi-part message in MIME format



--i=_YWlek7ao7oguBQwCVK6CjmrjZ3U1sQJ

Content-Type: multipart/alternative;

boundary="qBI=_uW4m07qk34aRV0YUosQquvbwtYInx"



--qBI=_uW4m07qk34aRV0YUosQquvbwtYInx

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Good afternoon,



I came across your LinkedIn profile and was impressed by your backgrou=

nd. I would love the opportunity to discuss a potential business colla=

boration with you.



If you are available, I would appreciate the chance to schedule a brie=

f Zoom call at a time that's convenient for you. It would be a great o=

pportunity to introduce myself, discuss the opportunity, and explore w=

hether there may be a good fit for us to work together.



Please let me know your availability, and I'll be happy to arrange the=

meeting at a time that works best for you.



Thank you for your time and consideration. I look forward to hearing f=

rom you.



Kind regards,



--qBI=_uW4m07qk34aRV0YUosQquvbwtYInx

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


t=3D"width=3Ddevice-width, initial-scale=3D1">
ection content=3Dtelephone=3Dno> Enquiry



Good =

afternoon,

I came across your LinkedIn profile and was impressed=

by your background. I would love the opportunity to discuss a potenti=

al business collaboration with you.

If you are available, I woul=

d appreciate the chance to schedule a brief Zoom call at a time that's=

convenient for you. It would be a great opportunity to introduce myse=

lf, discuss the opportunity, and explore whether there may be a good f=

it for us to work together.

Please let me know your availability=

, and I'll be happy to arrange the meeting at a time that works best f=

or you.

Thank you for your time and consideration. I look forwar=

d to hearing from you.

Kind regards,







--qBI=_uW4m07qk34aRV0YUosQquvbwtYInx--



--i=_YWlek7ao7oguBQwCVK6CjmrjZ3U1sQJ

Content-Type: text/plain;

name="caa.txt"

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

filename="caa.txt"







...



--i=_YWlek7ao7oguBQwCVK6CjmrjZ3U1sQJ--