NetKnow Corporate Blog

Renewable Steel Company spam

Posted by Dave Yadallee on Saturday, April 18. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Apr 2026 12:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wEA9I-00000000OAw-206Y

for dave@doctor.nl2k.ab.ca;

Sat, 18 Apr 2026 12:12:08 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Apr 2026 12:12:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from hwsrv-1323016.hostwindsdns.com ([23.254.231.82]:40563 helo=sad-kare.23-254-231-82.plesk.page)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wE8ro-00000000GlU-3dFe

for sales@nk.ca;

Sat, 18 Apr 2026 10:50:11 -0600

Received: from [154.127.53.220] (unknown [154.127.53.220])

by sad-kare.23-254-231-82.plesk.page (Postfix) with ESMTPSA id AC2F2AA7B5

for ; Sat, 18 Apr 2026 16:49:10 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=libraship.cam;

s=default; t=1776530951;

bh=029lsn//DYG7mBVWYqskoL8tgyraOhH8NA/LLokAl0I=; h=From:To:Subject;

b=ARKqQ+Fto/te1GOSW6KsV/hqmNOewuoBGj0LhMNQ7y2CoxEFoFLHzGpJBg3Ce+rdD

qZouMAweSTl4JQiI7LuDQyywRRFiwsM7fztLSVLss5pVMcFyMruxSoOgEGu1HiYLmY

iV84oHh916CzPvPgYKtmU8jyC2+ivuXkg/Uvjsse8IyQZpkQsKMePJryr1WDpD4NTx

cjju5M4HtuLFAPL8lgsUXcFq9zD+BFMyxtRislP/oK6BzuNRAPamxoN9zwhzdCX9gR

HM+DRmZZEwOEOea353nM3Gfmomv/qMCFb4WwD3yUlSbaKXJ3gh6bikdBhvNYxJc03+

H7Ui5fafrnTpQ==

Authentication-Results: sad-kare.23-254-231-82.plesk.page;

spf=pass (sender IP is 154.127.53.220) smtp.mailfrom=vvc@libraship.cam smtp.helo=[154.127.53.220]

Received-SPF: pass (sad-kare.23-254-231-82.plesk.page: connection is authenticated)

Reply-To: elena@symtowarcrane.com

From: Elena

To: sales@nk.ca

Subject: Catalogue needed

Date: 18 Apr 2026 09:49:09 -0700

Message-ID: <20260418090903.81F07795996936C3@libraship.cam>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Good day, My name is E Dominguez, and I am writing on behalf

of Renewable Steel Company, an importer of copper, Crane, power components

and a trading company based in Poland. We are currently sourcing these pro

[...]

Content analysis details: (7.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.127.53.220 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.127.53.220 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.127.53.220 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.127.53.220 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?} Catalogue needed

Good day,

My name is E Domingu=

ez, and I am writing on behalf of Renewable Steel Company, an importer of c=

opper, Crane, power components and a trading company based in Poland. We ar=

e currently sourcing these products for a valued clients and are interested=

in placing an order with your company.

Kindly forward your product c=

atalog to assist us in selecting the specific items required.

Please also confirm whether you are able to ship directly to Poland. If thi=

s is not possible, we can arrange a freight forwarder to handle the logisti=

cs.

Thank you for your prompt attention. We look forward to your resp=

onse.

Best regards,
E Dominguez
Renewable Steel Company
what=

sapp +905540117145
Email:elena@symtowarcrane.com

Renewable Steel Company Spam

Posted by Dave Yadallee on Saturday, April 18. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Apr 2026 06:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wE5AM-00000000DJ9-3Go8

for dave@doctor.nl2k.ab.ca;

Sat, 18 Apr 2026 06:52:54 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Apr 2026 06:52:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from hwsrv-1323016.hostwindsdns.com ([23.254.231.82]:36421 helo=sad-kare.23-254-231-82.plesk.page)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wE188-000000008yG-1czg

for sales@nk.ca;

Sat, 18 Apr 2026 02:34:31 -0600

Received: from [154.127.53.220] (unknown [154.127.53.220])

by sad-kare.23-254-231-82.plesk.page (Postfix) with ESMTPSA id A0D83AA784

for ; Sat, 18 Apr 2026 08:33:30 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=libraship.cam;

s=default; t=1776501211;

bh=029lsn//DYG7mBVWYqskoL8tgyraOhH8NA/LLokAl0I=; h=From:To:Subject;

b=ft1i5F55wZ9fEP+SSf+ZSwmFQyqAh5aG7XfxvoxvEJ5r3vf1gzRK6VXnkXTqxy7HR

VKyvBVks7K4SVsZ5XNkUKgIuECo/YpkDqo2lNVK6XexV02CKsiib6GFFCu9udstkcz

fs5JIzR+DbhWr4FKO/1ae8gg/lhD3XdDqF0QqVglbHxS7gzVntnODCpP0jSVeie6Cn

ErXMPb5E1pqgTeV519sTai4hvTWlqEH48hllwo3qCt46+S0VjXjP7+TGPjWXbO6+SA

+P825LxpJ3H+Mmmi0/nmhTfot9SngiAlSNWfcWUxWhtuF3zlJu9rpQ/qDt2eWvvuZL

JLh1oy46mIYjg==

Authentication-Results: sad-kare.23-254-231-82.plesk.page;

spf=pass (sender IP is 154.127.53.220) smtp.mailfrom=vvc@libraship.cam smtp.helo=[154.127.53.220]

Received-SPF: pass (sad-kare.23-254-231-82.plesk.page: connection is authenticated)

Reply-To: elena@symtowarcrane.com

From: Elena

To: sales@nk.ca

Subject: Catalogue needed

Date: 18 Apr 2026 01:33:29 -0700

Message-ID: <20260418013322.6DE6058A8950376F@libraship.cam>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Good day, My name is E Dominguez, and I am writing on behalf

of Renewable Steel Company, an importer of copper, Crane, power components

and a trading company based in Poland. We are currently sourcing these pro

[...]

Content analysis details: (7.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[23.254.231.82 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

[154.127.53.220 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.254.231.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.254.231.82 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.254.231.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.254.231.82 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[154.127.53.220 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

[23.254.231.82 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?} Catalogue needed

Good day,

Kindly forward your product c=

atalog to assist us in selecting the specific items required.

Please also confirm whether you are able to ship directly to Poland. If thi=

s is not possible, we can arrange a freight forwarder to handle the logisti=

cs.

Thank you for your prompt attention. We look forward to your resp=

onse.

Best regards,
E Dominguez
Renewable Steel Company
what=

sapp +905540117145
Email:elena@symtowarcrane.com

Selfridges spam

Posted by Dave Yadallee on Saturday, April 18. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 22:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDxWE-00000000Oqy-1otz

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 22:42:58 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 22:42:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.mergentrade.com ([136.243.21.223]:40134)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDvdh-00000000K1E-3XFO

for sales@nk.ca;

Fri, 17 Apr 2026 20:42:41 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.mergentrade.com (Postfix) with ESMTP id D6B0268C6B9;

Sat, 18 Apr 2026 05:33:02 +0300 (+03)

Received: from mail.mergentrade.com ([127.0.0.1])

by localhost (mail.mergentrade.com [127.0.0.1]) (amavis, port 10032)

with ESMTP id vmbnxSBWbHQu; Sat, 18 Apr 2026 05:33:02 +0300 (+03)

Received: from localhost (localhost [127.0.0.1])

by mail.mergentrade.com (Postfix) with ESMTP id 9F2CC68C6A1;

Sat, 18 Apr 2026 05:33:02 +0300 (+03)

X-Virus-Scanned: amavis at mergentrade.com

Received: from mail.mergentrade.com ([127.0.0.1])

by localhost (mail.mergentrade.com [127.0.0.1]) (amavis, port 10026)

with ESMTP id gxLnnTWfSI4A; Sat, 18 Apr 2026 05:33:02 +0300 (+03)

Received: from [192.168.43.25] (unknown [192.168.12.1])

by mail.mergentrade.com (Postfix) with ESMTP id 19A9B68C67B;

Sat, 18 Apr 2026 05:33:01 +0300 (+03)

Content-Type: multipart/alternative; boundary="===============1458601272=="

MIME-Version: 1.0

Subject: Head of Purchase and Marketing Department.

To: Recipients

From: SELFRIDGES

Date: Sat, 18 Apr 2026 03:32:58 +0100

Reply-To: margaretsmithselfridges@email.com

Message-Id: <20260418023301.19A9B68C67B@mail.mergentrade.com>

X-Spam_score: 10.5

X-Spam_score_int: 105

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Sir/Madam, We are interested in your products and partnering

with your company. We are a large wholesale and retail distributor with several

stores around the world, our shops are well patronized [...]

Content analysis details: (10.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[136.243.21.223 listed in dnsbl.ahbl.org]

[136.243.21.223 listed in dnsbl.ahbl.org]

[136.243.21.223 listed in dnsbl.ahbl.org]

[136.243.21.223 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[136.243.21.223 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[136.243.21.223 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[136.243.21.223 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[136.243.21.223 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

[136.243.21.223 listed in will-spam-for-food.eu.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[136.243.21.223 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[136.243.21.223 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[136.243.21.223 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[136.243.21.223 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 FROM_MISSP_SPF_FAIL No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 MIXED_HREF_CASE Has href in mixed case

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.5 TEQF_USR_POLITE To and from user nearly same + polite greeting

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

Subject: {SPAM?} Head of Purchase and Marketing Department.

You will not see this in a MIME-aware mail reader.

--===============1458601272==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Dear Sir/Madam, =

=

We are interested in your products and partnering with your company. We are=

a large wholesale and retail distributor with several stores around the wo=

rld, our shops are well patronized.

Kindly send us your Catalog to learn more about your products and price lis=

t along with stock availability. We hope that your products are of good qua=

lity as we look forward to a long-term partnership..

Kindly contact Mrs. Margaret Smith with the below email address for more di=

scussion.

Email: margaretsmithselfridges@email.com

Mrs. Margaret Smith our Representative.

www.selfridges.com

Regards Mr Frank Jonathan

--===============1458601272==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

=3Diso-8859-1"/>

Dear Sir/Madam,    &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;
We are interested in your products and partnering with your com=

pany. We are a large wholesale and retail distributor with several stores a=

round the world, our shops are well patronized.
Kindly send us your Cata=

log to learn more about your products and price list along with stock avail=

ability. We hope that your products are of good quality as we look forward =

to a long-term partnership..
Kindly contact Mrs. Margaret Smith with the=

below email address for more discussion.
Email:
margaretsmithselfridges@email.com">margaretsmithselfridges@email.com
>Mrs. Margaret Smith our Representative.

s.com/">www.selfridges.com
Regards  Mr Frank Jonathan=

--===============1458601272==--

Loan phish from Google Gmail Part 2

Posted by Dave Yadallee on Friday, April 17. 2026

0.3 LONGWORD BODY: Uses overlong words

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.53 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.53 listed in wl.mailspike.net]

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Kesef Marketing | Smarter Access to Business Loans

--===============0752570965773209863==

Content-Type: multipart/alternative; boundary="===============5319203018662024849=="

MIME-Version: 1.0

--===============5319203018662024849==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

**Hi Gurkirat,**

=20

**This is Stephanie Cabiao from Kesef Marketing.**

=20

**Welcome,I wanted to personally reach out and thank you for your interest =

in

business funding. We work with lenders across Canada to provide reliable

funding solutions that support growth, manage cash flow, and cover upcoming

expenses=E2=80=94while helping you access competitive interest rates.**

=20

**If you=E2=80=99re open to exploring your options, you can get started her=

e: =20

**[**Click here to start your

application**](https://form.jotform.com/260672364104452?lead_id=3Dlead_bqyN=

tSfmgPr9HEY1bFvoKaWRLZZxf887Qp2LC28qfuP&legalBusiness=3DN

K MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring)

=20

**Once submitted, our team will review your information and present the best

available funding options tailored to your needs.**

=20

**If you have any questions or would prefer to speak directly, feel free to

call me at +1-866-216-5475 or 715-641-4654**

=20

**Looking forward to connecting.**

=20

**Best regards, =20

Stephanie Cabiao ** =20

**Kesef Marketing**

To stop receiving these emails, click

[here](https://app.close.com/go/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9=

kHSKU8WElV6ueTPiF/sales%40nk.ca/GK6U1JDQJSfaf6

--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/)

--===============5319203018662024849==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Hi Gurkirat,

This is=

Stephanie Cabiao from Kesef Marketing.

<=

strong>Welcome,I wanted to personally reach out and thank you for your inte=

rest in business funding. We work with lenders across Canada to provide rel=

iable funding solutions that support growth, manage cash flow, and cover up=

coming expenses=E2=80=94while helping you access competitive interest rates=

.

If you=E2=80=99re open to explo=

ring your options, you can get started here:

/form.jotform.com/260672364104452?lead_id=3Dlead_bqyNtSfmgPr9HEY1bFvoKaWRLZ=

Zxf887Qp2LC28qfuP&legalBusiness=3DN K MAINTENANCE&fullName[first]=

=3DGurkirat&fullName[last]=3DWirring" rel=3D"noopener noreferrer nofoll=

ow">Click here to start your application

Once submitted, our team will review your information a=

nd present the best available funding options tailored to your needs.
ng>

If you have any questions or would pre=

fer to speak directly, feel free to call me at +1-866-216-5475 or 715-641-4=

654

Looking forward to connecting=

.

Best regards,
Stephanie Cabi=

ao
Kesef Marketing

erated=3D"unsubscribe-footer">

">To stop receiving these emails, click
/unsubscribe/orga_WJQdcK5MUUa02rLIty6GVDnil9kHSKU8WElV6ueTPiF/sales%40nk.ca=

/GK6U1JDQJSfaf6--tg9gajA9HdvShNSyH_DgbhmTyc8=3D/" target=3D"_blank" rel=3D"=

noopener noreferrer nofollow">here

ml.closeml.com/t/l8qiM7kO8nq36bKxGhEb1XPhoT61cDSK1lDTB1MTLQ3/YVFsbTnwSw.png=

" alt=3D"" width=3D"1" height=3D"1" />

--===============5319203018662024849==--

--===============0752570965773209863==--

Categories: Google Gmail Spam, Phish

0 Comments

Loan phish from Google Gmail Part 1
Posted by Dave Yadallee on Friday, April 17. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 12:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDnv2-00000000C31-0HOR

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 12:27:56 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 12:27:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f53.google.com ([209.85.216.53]:59550)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDmcj-000000008OG-2X1l

for sales@nk.ca;

Fri, 17 Apr 2026 11:05:05 -0600

Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-35fb16e56efso640313a91.2

for ; Fri, 17 Apr 2026 10:03:12 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1776445386; x=1777050186; darn=nk.ca;

h=references:list-unsubscribe-post:list-unsubscribe:message-id:date

:to:from:subject:mime-version:from:to:cc:subject:date:message-id

:reply-to;

bh=40qcRNZPmV3IeTEW2ymORfcCyYSuh720CR1tpRRFpwE=;

b=mDKgfEUSxMZ93nEsrzAY+jSGlDY/yTpb5F/A0zckrHbXbi25IksivUbLoPCtKANzxs

2R85BRSk3sFp0hNeoGmlU0OJemsgX9Q0UZKp2J8Z1gva6B3RhrkNO44uag/rPhgBhEe0

bf20YOg9Wptr+uySp88MxD4+qOzXFGdV09ty1VWLXDj0QxHWMbUI3Wj6eOCZTz+4yKId

kuqGKrywusS0Lr/P7odMv00KR+9qCoxS4zbX3OzXViKxFWwnjQ4WtK5CtVOT+jFGp2so

/tKx6h6Y90213M4hzcRy4+LWf4FVgl3Id1u4Jtw2m4DXsjaDmYRxzmvQMQu3omRBD+pQ

E1kA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776445386; x=1777050186;

h=references:list-unsubscribe-post:list-unsubscribe:message-id:date

:to:from:subject:mime-version:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=40qcRNZPmV3IeTEW2ymORfcCyYSuh720CR1tpRRFpwE=;

b=XEMjfjs/YWCGle7jV5oCy0nvcBFElnPA2KvygG/sfz6enayKb5oLS2PZSUqR7FtecH

urgGjtU9sWMY7d0vl+Z/oOrKfnFduKAKifE8AV3BDP9XVi7R29pxP11rySL0qYSk/kKA

gXL2gLughQyPzXBmWUvg297irtNwWcVmA7n70CGZL75xJvdGn4iI/4dtFIXhHik6JJBB

h7WUz2bltWB2Kb5/UFkZVGhMlVQOGsod80mrDuLqCofzvt6fwVOgbf4o3UfOi0OI8hUV

onnXuPwxhzf1jrCfU89OG9UUEqjQ9vFsH30b14EkhKWe7AAKlQ8GY39g6pMMRgVlvOOj

1c8g==

X-Gm-Message-State: AOJu0YxaOwFuuG0CaGPLXkCU4DFSBH7TtMebO8q67GD7ek64y1bixITN

v0cMNzrevJQ2+PP/6Owcz4q9BsTMgA0D3vaennjCQ7n9V5Dnx5OlKbxIvTFJO+fsTHTswhOVMJS

zw8BrhUs=

X-Gm-Gg: AeBDievvExwN6uzhY2flWEdjhkEyTSoZ3HiMHSfbnAVlEgqjKsGkNTDg1bQTB+PUvWH

oIW1nLAl6aEK4/k1AExpnMbOhtc7IYwUJiN1I+5Iaig+oooxHoIyeT1qCFJaZA37CG43Xg8PunE

J1PdmLTzcxQX4R/ENYXB7plnE9OUDI0OUssB+z/P69sUJVGuib2pjnRVwSGRCDK+hW00MmdSI8P

Vb9fnEq6PXvUHXEK/w7GLdETyM9GgidvgHrCV+yUOiq+ubAAUneGF8Z3OG9I2+fZQ9TOlR5MJ0Z

ALDlknXrhSdICSoSQvfkR9hXOW5+k0SJtE6UckkAbQX8yAPRgQs1H6spetkFC5MYEYKIDsvQSqA

8L9KUrx2S9NDHupR0eWkzow12FnSyciy3Hni53g/aJ0dbP3NdiVrlcDmNv6XGLZXM0eccZOS41+

iSFe6Ly27YTXX52HAHcOGLXljWHsJRrH6msssKUOnVOlVNzCk2tzx0Xx5iWsL24IJkB5BwBAyXn

Bmqn7AjtyadTJih3iw=

X-Received: by 2002:a17:90b:3f84:b0:359:1130:1047 with SMTP id 98e67ed59e1d1-36140468c28mr4013219a91.17.1776445385838;

Fri, 17 Apr 2026 10:03:05 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-a0.close.com. [52.11.177.187])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-36141990bb6sm2704425a91.17.2026.04.17.10.03.03

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 17 Apr 2026 10:03:04 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============0752570965773209863=="

MIME-Version: 1.0

Subject: Kesef Marketing | Smarter Access to Business Loans

From: =?utf-8?q?Stephanie_Kesef_Marketing?=

To: =?utf-8?q?Gurkirat_Wirring?=

Date: Fri, 17 Apr 2026 17:03:03 +0000

Message-ID: <177644538269.7.7253266245741056513@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_l8qiM7kO8nq36bKxGhEb1XPhoT61cDSK1lDTB1MTLQ3

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

References: <177644538269.7.3986001924003818893@smtpgw.close.com>

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: **Hi Gurkirat,** **This is Stephanie Cabiao from Kesef Marketing.**

**Welcome,I wanted to personally reach out and thank you for your interest

in business funding. We work with lenders across Canada to provide reliable

funding solutions that support growth, manage cas [...]

Content analysis details: (6.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

[209.85.216.53 listed in dnsbl.ahbl.org]

[209.85.216.53 listed in dnsbl.ahbl.org]

[209.85.216.53 listed in dnsbl.ahbl.org]

[52.11.177.187 listed in dnsbl.ahbl.org]

[52.11.177.187 listed in dnsbl.ahbl.org]

[52.11.177.187 listed in dnsbl.ahbl.org]

[52.11.177.187 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.53 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[52.11.177.187 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

[209.85.216.53 listed in will-spam-for-food.eu.org]

Categories: Google Gmail Spam, Phish

0 Comments

Web/SEo/App spam
Posted by Dave Yadallee on Friday, April 17. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 10:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDmS3-000000007wP-0oC6

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 10:53:55 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 10:53:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from f5mail-147-121.rediffmail.com ([119.252.147.121]:45683)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDl6X-0000000043m-0e5t

for sales@nk.ca;

Fri, 17 Apr 2026 09:27:45 -0600

Received: from f5mail-224-106.rediffmail.com (unknown [10.50.252.5])

by f5mail-147-121.rediffmail.com (Postfix) with ESMTP id 570CF241E48

for ; Fri, 17 Apr 2026 20:37:43 +0530 (IST)

X-REDIFF-Delivered-Remotely-To: sales@nk.ca

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rediffmail.com;

s=mail; t=1776438730;

bh=QLdR+c3iTlyCWf44z+/KD/xv3AzZDmX2LxVOsmD/iwI=;

h=MIME-Version:From:Date:Message-ID:Subject:To;

b=FC7jcL6mu4iDEuO40k2bhBHBkmedVt8/DQ8HXg7+pdfP4c8F4JQObam+NdgVQ+Se9

XYmOE6NBJqvzruLo1L0cqdjwwjw4oAYWVQ8yKbU7ZgSsCCohT9EAOAQceZTU2K262r

to4MFSN5IjQITKR8wuC0L59yNjpAJlObbB3JEnNA=

Received: (qmail 3578 invoked by uid 510); 17 Apr 2026 15:12:10 -0000

x-m-msg: 5b78c3f67c9fe5a627a324586b999f93; a6da7d6asas6dasd77; 5dad65ad5sd;

X-OUT-VDRT-SpamState: 0\LEGIT

X-OUT-VDRT-SpamScore: 50

X-OUT-VDRT-SpamCause: "gggruggvucftvghtrhhoucdtuddrgeefuddrtddtucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecutffgfffkhffhnecuuegrihhlohhuthemuceftddtnecuogeurggujfhtmhhlqddqufhushhpvggtthdqfghntghlohhsvgguvfgrghdqsfculdehtddmnecujfgurhepffggvffkshfuhfgtsegrtderredttdejnecuhfhrohhmpedfofgrrhihfdcuoehsmhhithhhmhgrrhihtghsshesrhgvughifhhfmhgrihhlrdgtohhmqeenucggtffrrghtthgvrhhnpeeuuddttdefjeeggeefhfelkeduveegfeeljeffveeitdffgedtkeefgeejgfekueenucfkphepudehvddrheekrddufedvrddugeefnecuvehluhhsthgvrhfuihiivgepieenucfrrghrrghmpehmrghilhhfrhhomhepshhmihhthhhmrghrhigtshhssehrvgguihhffhhmrghilhdrtghomhdpnhgspghrtghpthhtohephedpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtoheprggshhhishhhvghkrdhkuhhmrghrrdgsihhgshhtohhnvghsvghosehgmhgrihhlrdgtohhmpdhrtghpthhtoheplffqjgeslffqjgffkfetpfetvffttegggffnrdevqffopdhrtghpthhtoheprghlihhsshhonhdrlhgvmhgrihhrvgesphgrthhiohgurhhumhhmohhnugdrtghomhdprhgtphhtthhopehinhhfohesthhhrhgvvghkihhnghhsshhpihhrihhtshdrtggrpdhrtghpthhtohepohhffhhitggvrggumhhinhesghhrrghnuggvrgh

irhhsohhluhhtihhonhhsrdgtohhm"

X-Dedup-Identifier: 1776438730_3577_3576_f5-224-106

Date: 17 Apr 2026 15:12:10 -0000

MIME-Version: 1.0

To: "abhishekkumarbigston seo "

Received: from unknown 152.58.132.143 by rediffmail.com via HTTP; 17 Apr 2026

15:12:10 -0000

Message-ID: <20260417204210.1776438730.3543@f5-224-106>

Sender: smithmarycss@rediffmail.com

Sensitivity:

Subject: =?utf-8?B?R29vZ2xlIGlzc3Vlcw==?=

From: "Mary"

Content-Type: multipart/alternative;

boundary="=_5c8857592c3d0fb6dff23e26940ec4d8"

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi I noticed a couple of issues on your website. Would it

help if I sent screenshots?

Content analysis details: (5.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[119.252.147.121 listed in dnsbl.ahbl.org]

[119.252.147.121 listed in dnsbl.ahbl.org]

[119.252.147.121 listed in dnsbl.ahbl.org]

[119.252.147.121 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[119.252.147.121 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[119.252.147.121 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[119.252.147.121 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[119.252.147.121 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

[119.252.147.121 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[smithmarycss(at)rediffmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?B?R29vZ2xlIGlzc3Vlcw==?=

--=_5c8857592c3d0fb6dff23e26940ec4d8

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=UTF-8

Hi

I noticed a couple of issues on your website.

Would it help if I sent screenshots?

Thanks,

Mary

--=_5c8857592c3d0fb6dff23e26940ec4d8

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8

=3D"background:white">
t-family:Calibri,sans-serif">
=3D"font-family:"Calibri Light",sans-serif">
#222222">Hi

=3D"background:white">
t-family:Calibri,sans-serif">
=3D"font-family:"Calibri Light",sans-serif">
#222222">I noticed a couple of issues on your website.=

=3D"background:white">
t-family:Calibri,sans-serif">
=3D"font-family:"Calibri Light",sans-serif">
#222222">Would it help if I sent screenshots?
span>

=3D"background:white">
t-family:Calibri,sans-serif">
=3D"font-family:"Calibri Light",sans-serif">
#222222">Thanks,

Mary

--=_5c8857592c3d0fb6dff23e26940ec4d8--

Categories: Spam and Phish

0 Comments

Oriental language spam from Microsoft Outlook
Posted by Dave Yadallee on Friday, April 17. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 10:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDmRv-000000007wG-2cqc

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 10:53:47 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 10:53:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazon11023101.outbound.protection.outlook.com ([40.107.44.101]:4059 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

id 1wDkkp-0000000039n-0waG

for root@nk.ca;

Fri, 17 Apr 2026 09:05:22 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=LOJSQrWgJaB6BuLxBTfT5rWKkB1I+xA4bZViE1oN9OxPPDZUxbMAb2D4UyPQRrpO7ausm0Njj1BQQsHgtdK5Xvjvvc62vkNN44WPlQcRY/S9+b+LKo0ZdcBK+Y/VwRvwfnsqo6bWe70T7EK0W8q3/Bj50pz75OmciCRqEoiPqH0P9wS3KAjM8Nf8sBMboogbMOGbteDHGuJMMIP9PR2mL646YhtZpA6BGjIj02NXUgTV24dw+oZ5D+JO1oX/cxL6fnuiA2n16BV4NKRt4RE2ymkW5ztU1jNeF4HVbmVGMTDQzi9V/dWzAtv22FzAs88VZjGhinrX+b7XNMbhjrOdVw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=7nmtEV+FMb+ri+GNaZNQ3ulnU4sw292O9S5fSJS9HAQ=;

b=pMqeU2ZsE5JCV/XzeXyTscK65c18Ekzq7AVd4LHWKPoIqAjD1gEbx3mpnWKo7tZqiygEUi1lylsoeSWlXGlBlIXo/EiqZRXZDBedRUCmOP8gTJHV+7dI+pzE+8hSmRMxlBNOt1ZEs0UwQNinQJb1a8pMnexZ0BiJ4gG7VnYwwGS9tXN+Qw8NU7Bx0MTn78HiXG/YczOkBYRBSgFxVwi86C2TkwNq4nuKFwAQ0c3b99sidvedjS+sC6ec11tsd/9xRrbNe+wOlR85jsxpVlUADpVSizYATQwbdZbeQ0/JBkfwofk5hLeTx7lgp5QBjRkB3IDkg78q9NicEBbuDpdkIw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=pass

action=none header.from=i2n.online; dkim=pass header.d=i2n.online; arc=none

Received: from SmtpServer.Submit by TYZPR03MB7845 with Microsoft SMTP Server

id 15.20.9818.25; Fri, 17 Apr 2026 15:03:15 +0000

MIME-Version: 1.0

To:

Sender: Microsoft Outlook

From: Microsoft Outlook

Message-ID:

Date: Fri, 17 Apr 2026 15:03:15 +0000

Subject: Notification: You're invited to share this calendar

X-MS-Exchange-Transport-Rules-Notification: 1

X-MS-Exchange-Transport-Rules-Loop: 1

Content-Type: multipart/alternative;

boundary="_d524eaef-3c55-4c17-939d-3662ba8a8e55_"

X-MS-Exchange-Parent-Message-Id:

Auto-Submitted: auto-generated

X-MS-Exchange-Generated-Message-Source: Transport Rule Agent

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: TYZPR03MB7845:EE_

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|786006|366016|61400799027|376014|8096899003|56012099003|16102099003|18002099003;

X-Microsoft-Antispam-Message-Info:

fWPvNA1612MZQrIMw50qpgkfgTqp4pOCHjvCl69jNnXJQuY/6zmovRBGCJwntEgd/IIAjBh2bRXZtyAEfkgK1JEkBLcN40mloMo3PqKq9oDh16q1KZkHSvcXb8UnzeD0KlcQEK56F7grlZRRsF4I3VKz2dGgNgKl1mg+xE7lgjaDp8tmMXBDIILB7S1Y6B4morRzZLxE9yXdjP2sqD/w19E6VAjzIxMW3QApQG1m2gn+mhoYgIXkzXEhnplVC/X20zimijMuL6/J+ZV6q9VD9Z1sV1nxxpOW+y0jUIpcq2QuhL39d6g4HHaMDLB4N20HN1lAM74QYfMCFhEH5aWz5hWU4d9DqbHsRQ1Z7mz2tE9UiGxpIrZ7buSGGDtv2hite0XlU2NtjQReV7NujK8VlxJHcOUQBh/+bs7ndFgEFF43nW81QJdNMqJAxzANPx69hb/d2VJih4VCiSTSEGENISZLXs6Aickp6Z3bnFV60KQunepkKHW4DL5mQwkCmwsMYMGhTSufzLphWYfgBZsJCC1CLbnaLF6HyDcfzlZjFqwj5HyIba5iCCzjxqlEoS5zdqGbbAIUMnu+6Xf3Y6TgEQUwOXtEA9aoL7AfEkbIOIWFFBNdk2tgIeVobwLcZHbeexls9rIca4ehPdo37n2Wiu0oodh04XGW1HpUhTY2Tv+7sMc0bESn65EGln37B/S39RXqysPyQ387TZK6key9Aku0wsvLu5M2DGvF0ent5+c=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:zh-cn;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:;PTR:;CAT:NONE;SFS:(13230040)(786006)(366016)(61400799027)(376014)(8096899003)(56012099003)(16102099003)(18002099003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

yLXl0cah2dLnVCrX2S40HLNTouPMj829zLd4Kgtzzvg5ZfPbHJDdnRVGEc0HRuzmLtduDLKjXHYgWeoYQ3w4szmT/Uzu1YttB9tW/02Npmc+GMEKqOJ2XtWLgL+db/4eWCw9ekaxXTkhJmjDRm8Mrx4jgAan/70WGEgvTkeb7LpfuoHdO5W0O1AkHh++WSp8AItFsexqy8QzPmrJNXJGuj4g32YW4/4AXBXT0FnosY4BO7M3ppiHNxvpcqkj/8QZX8yZ2tR4yQuB5cTSi+142k5diZPdbFKO47fSvwKbMvLaTYLQJ0zATwg+r815wy2tfOIcNGsBJ+GSHZe4ss5c3w==

X-OriginatorOrg: i2n.online

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Apr 2026 15:03:15.8108 (UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id:

1b0d7cef-6df4-4be4-fd8c-08de9c9273f9

X-MS-Exchange-CrossTenant-AuthSource: TYZPR03MB7845.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR03MB7845

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: å…¨å›½æ”¶å•RMBå…‘USD/HKD å’¨è¯¢å¾®ä¿¡ï¼šUSD254625 å…¨å›½æ”¶å•RMBå…‘USD/HKD

å’¨è¯¢å¾®ä¿¡ï¼šUSD254625

Content analysis details: (8.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.107.44.101 listed in dnsbl.ahbl.org]

[40.107.44.101 listed in dnsbl.ahbl.org]

[40.107.44.101 listed in dnsbl.ahbl.org]

[40.107.44.101 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.107.44.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.107.44.101 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.107.44.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.107.44.101 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

[40.107.44.101 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.44.101 listed in list.dnswl.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 FORGED_SPF_HELO No description available.

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.44.101 listed in wl.mailspike.net]

Subject: {SPAM?} Notification: You're invited to share this calendar

--_d524eaef-3c55-4c17-939d-3662ba8a8e55_

Content-Type: text/plain; charset="gb2312"

Content-Transfer-Encoding: quoted-printable

=C8=AB=B9=FA=CA=D5=B5=A5RMB=B6=D2USD/HKD =D7=C9=D1=AF=CE=A2=D0=C5=A3=BAUSD2=

54625

--_d524eaef-3c55-4c17-939d-3662ba8a8e55_

Content-Type: text/html; charset="gb2312"

Content-Transfer-Encoding: quoted-printable

=C8=AB=B9=FA=CA=D5=B5=A5RMB=B6=D2USD/HKD =D7=C9=D1=AF=CE=A2=D0=C5=A3=BAUSD2=

54625

--_d524eaef-3c55-4c17-939d-3662ba8a8e55_--

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Climate action spam from Google Gmail Part 2
Posted by Dave Yadallee on Friday, April 17. 2026

--0000000000004d16ea064fa8668a

Content-Type: text/plain; charset="UTF-8"

Hi ,

We are pleased to inform you that you are eligible to serve as a Climate

Ambassador and to access grant opportunities under the Climate Action

Programme, administered by the UN Climate Action Group, Your Participation

would significantly contribute to advancing global sustainability efforts.

I look forward to your positive response to provide you with further

details.

Regards.

Climate Grant Coordinator

climaterealityproject.org

--0000000000004d16ea064fa8668a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

border-style:none;border-color:currentcolor;font-style:inherit;font-weight:=

inherit;font-stretch:inherit;font-size:12pt;line-height:inherit;font-family=

:Aptos,Calibri,Helvetica,sans-serif;font-size-adjust:inherit;margin:0px;pad=

ding:0px;color:rgb(0,0,0);direction:ltr">Hi ,

der-width:0px;border-style:none;border-color:currentcolor;font-style:inheri=

t;font-weight:inherit;font-stretch:inherit;font-size:12pt;line-height:inher=

it;font-family:Aptos,Calibri,Helvetica,sans-serif;font-size-adjust:inherit;=

margin:0px;padding:0px;color:rgb(0,0,0);direction:ltr">

v style=3D"border-width:0px;border-style:none;border-color:currentcolor;fon=

t-style:inherit;font-weight:inherit;font-stretch:inherit;font-size:12pt;lin=

e-height:inherit;font-family:Aptos,Calibri,Helvetica,sans-serif;font-size-a=

djust:inherit;margin:0px;padding:0px;color:rgb(0,0,0);direction:ltr">We

are pleased to inform you that you are eligible to serve as a Climate=20

Ambassador and to access grant opportunities under the Climate Action=20

Programme, administered by the UN Climate Action Group, Your=20

Participation would significantly contribute to advancing global=20

sustainability efforts.=C2=A0

r-style:none;border-color:currentcolor;font-style:inherit;font-weight:inher=

it;font-stretch:inherit;font-size:12pt;line-height:inherit;font-family:Apto=

s,Calibri,Helvetica,sans-serif;font-size-adjust:inherit;margin:0px;padding:=

0px;color:rgb(0,0,0);direction:ltr">

idth:0px;border-style:none;border-color:currentcolor;font-style:inherit;fon=

t-weight:inherit;font-stretch:inherit;font-size:12pt;line-height:inherit;fo=

nt-family:Aptos,Calibri,Helvetica,sans-serif;font-size-adjust:inherit;margi=

n:0px;padding:0px;color:rgb(0,0,0);direction:ltr">I look forward to your=

positive response to provide you with further details.=C2=A0 =C2=A0
iv>

or;font-style:inherit;font-weight:inherit;font-stretch:inherit;font-size:12=

pt;line-height:inherit;font-family:Aptos,Calibri,Helvetica,sans-serif;font-=

size-adjust:inherit;margin:0px;padding:0px;color:rgb(0,0,0);direction:ltr">=

lor:currentcolor;font-style:inherit;font-weight:inherit;font-stretch:inheri=

t;font-size:12pt;line-height:inherit;font-family:Aptos,Calibri,Helvetica,sa=

ns-serif;font-size-adjust:inherit;margin:0px;padding:0px;color:rgb(0,0,0);d=

irection:ltr">

none;border-color:currentcolor;font-style:inherit;font-weight:inherit;font-=

stretch:inherit;font-size:12pt;line-height:inherit;font-family:Aptos,Calibr=

i,Helvetica,sans-serif;font-size-adjust:inherit;margin:0px;padding:0px;colo=

r:rgb(0,0,0);direction:ltr">Regards.

:0px;border-style:none;border-color:currentcolor;font-style:inherit;font-we=

ight:inherit;font-stretch:inherit;font-size:12pt;line-height:inherit;font-f=

amily:Aptos,Calibri,Helvetica,sans-serif;font-size-adjust:inherit;margin:0p=

x;padding:0px;color:rgb(0,0,0);direction:ltr">Climate Grant Coordinator<=

/b>

entcolor;font-style:inherit;font-weight:inherit;font-stretch:inherit;font-s=

ize:12pt;line-height:inherit;font-family:Aptos,Calibri,Helvetica,sans-serif=

;font-size-adjust:inherit;margin:0px;padding:0px;color:rgb(0,0,0);direction=

:ltr">
OWA32ceed42-b232-5fd1-4c35-cba9e56ef880" class=3D"gmail-ydp5ccc8785x_ydpdb2=

6ea5fx_ydpc2cf344dyiv9119822325ydpa0dc503yiv6263057360ydpd031332eyiv2372102=

841ydp7a7edbb8yiv2463149482 gmail-ydp5ccc8785x_ydpdb26ea5fx_ydpc2cf344dyiv9=

119822325OWAAutoLink" title=3D"http://climaterealityproject.org/" style=3D"=

border-width:0px;border-style:none;border-color:currentcolor;font-style:inh=

erit;font-weight:inherit;font-stretch:inherit;font-size:inherit;line-height=

:inherit;font-family:inherit;font-size-adjust:inherit;margin:0px;padding:0p=

x" rel=3D"nofollow" target=3D"_blank">climaterealityproject.org<=

/div>

olor;font-style:inherit;font-weight:inherit;font-stretch:inherit;font-size:=

12pt;line-height:inherit;font-family:Aptos,Calibri,Helvetica,sans-serif;fon=

t-size-adjust:inherit;margin:0px;padding:0px;color:rgb(0,0,0);direction:ltr=

" dir=3D"ltr">

tica,sans-serif;font-size:16px;font-style:normal;font-weight:400;letter-spa=

cing:normal;text-indent:0px;text-transform:none;word-spacing:0px;background=

-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color=

:initial">

gmail-ydp42d0ab8cTHa4i gmail-ydp42d0ab8cpinIo" style=3D"border-width:0px;bo=

rder-style:none;border-color:currentcolor;font-style:inherit;font-weight:in=

herit;font-stretch:inherit;font-size:inherit;line-height:inherit;font-famil=

y:inherit;font-size-adjust:inherit;margin:8px 3px 8px 2px;padding:0px;color=

:inherit;background-color:rgb(255,255,255);border-radius:4px;min-height:44p=

x">

0ab8callowTextSelection" style=3D"border-width:0px;border-style:none;border=

-color:currentcolor;font-style:inherit;font-weight:600;font-stretch:inherit=

;font-size:16px;line-height:inherit;font-family:inherit;font-size-adjust:in=

herit;margin:0px;padding:0px;color:rgb(36,36,36);display:inline;width:906.7=

47px">

"border-width:0px;border-style:none;border-color:currentcolor;font-style:in=

herit;font-weight:inherit;font-stretch:inherit;font-size:inherit;line-heigh=

t:inherit;font-family:inherit;font-size-adjust:inherit;margin:0px;padding:6=

px 12px 6px 10px;color:inherit;border-radius:4px;display:inline-block;width=

:906.747px;min-height:44px;background-color:rgb(255,255,255)">

"gmail-ydp42d0ab8cUUCdJ gmail-ydp42d0ab8cPKstT" style=3D"border-width:0px;b=

order-style:none;border-color:currentcolor;font-style:inherit;font-weight:i=

nherit;font-stretch:inherit;font-size:inherit;line-height:inherit;font-fami=

ly:inherit;font-size-adjust:inherit;margin:0px;padding:0px;color:inherit;mi=

n-height:32px">

0px;border-style:none;border-color:currentcolor;font-style:inherit;font-wei=

ght:inherit;font-stretch:inherit;font-size:inherit;line-height:inherit;font=

-family:inherit;font-size-adjust:inherit;margin:5px 0px;padding:0px;color:i=

nherit">

--0000000000004d16ea064fa8668a--

Categories: Google Gmail Spam

0 Comments

Climate action spam from Google Gmail Part 1
Posted by Dave Yadallee on Friday, April 17. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 10:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDmRU-000000007v8-3pEd

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 10:53:20 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 10:53:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f50.google.com ([209.85.167.50]:43229)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDjo0-00000000Pfl-3UAS

for sales@nk.ca;

Fri, 17 Apr 2026 08:04:33 -0600

Received: by mail-lf1-f50.google.com with SMTP id 2adb3069b0e04-5a3be187ffbso1731356e87.0

for ; Fri, 17 Apr 2026 07:02:37 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1776434550; cv=none;

d=google.com; s=arc-20240605;

b=LfPg6H3Uul151fsI2ehFIyVuliZaKdSO5pdYptJjjacDadbNNFUrvOvESYGfWp39qK

HcbOrd8d6viXBGXZc1HFmzxTUdBDDVB1lN5ednH6IqSCnWXIRMRdmYcDDK0b5QEuNiOU

ml54+orIlUCs/wiDy0xOG9flRmE5VdREg6qAfyazrkJYtBYzCZ34hKUeL4mjZLLJ/r/b

WvReptumKRxUnYFIq4OfASn3p203GUAXSj2IL0X+seyuZOGLnssKDP3ppU83AW5T3JYl

iYG196DCY7xl/NnGSDnmH5q2GauXErsHPCwchforwgfmhyK+FBpazcfc6IVeBcpclexy

YT3g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=6jI4xCt+KmmMDEyn9RI4DmMHqO9acotEQawdqovzr3g=;

fh=E9681JC2OZOiuH4EuPTHCgUEdD0aROYjM7ET9f4CMQQ=;

b=lDELl6b1joesS8Tnij1jksrFmEJQp5ZgLIUGKbx/K6Ln6tLt4WAdX/PfFT5e9MyY6E

V98Sb2ZNMlkcQTSSSsfF/33p0hlxCXtlPDSd08NqfWIFAEUWGasL2gnK6Jz1SD/Mngbx

13LZYWnb7QXS3RlEn58fZo4xAS5ntIO9huiiX3YBTTv2oOE4mfoRQw6W55AGz4C/Bup0

X/Ij75vrofd9pXJmKhhOhweUmmojpGtYk1I/A1MRozBzsUxMFjOnCZxsaXjt8J1U5RCC

NmAb5mmYHOZjQLIJa6s5RWKgm2sj7kfytxyi/2oBH8JJAbBeRLF7KSld08CR36Sl8Io/

so+A==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1776434550; x=1777039350; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=6jI4xCt+KmmMDEyn9RI4DmMHqO9acotEQawdqovzr3g=;

b=Yog2Yq9DCSgCI7mcVXmKwDf5I/5/VYV6s3nFm7gEF410So63XrUA4o5goxpETEXlP0

JkWqHMo5AF9E2EQLjAvodLNV7fPcdIAXat7diyJSqEhovzgNznEwvqPgYGpdSogqnu/0

B0ho460x9NBqkAjTjtjwUvJM9Q5Z6BZL4y8YIXP9r4vsDvVaekncgGqidoKwQhUgpuI9

aRraQ9BCeqz9LDfRMa8CnQQVc+ilqC/9p1EkghkYSDCZfN5LO6Vb9JVYqQcKDY+EGB/i

ZfYjnsdOEWbWDMZvhqq43ccOnQ94JeRx2C9vrqDOiZ9PtVLVsTcxImdf6/F/TIITwqy5

c/Zw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776434550; x=1777039350;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=6jI4xCt+KmmMDEyn9RI4DmMHqO9acotEQawdqovzr3g=;

b=kTmGcrasi5l0U6vO/iBYuiFgOhcGssKdXtj0NYhRMzKYHE9PSLVSpFF9ZJG3Vm4mXi

ZiMZafQWr8u9O7F3HnjIZ3fTlFb6YwfyMBOHuXlBayDnMSSsUu8Rfni6yHYVgXMeRyN7

pgdgq4uIfuyX0d/hbk37iFiUjAKoAfD7fN9g1/B0aDNODiLnlbS4L96c14EqXMmjCZT+

9FITV3LW/lHWBj7Q5Ra7wkQZr8Q8B+yXJrQP7+bZcssyz+bPVZietVkbhs4usZfn9z4w

FYkGaekyjPcnblVt/QwgISEd3sHJA37LbvD6/uog0n8uuAFbymTDY69U6+nLkO1Usv0V

wkkw==

X-Forwarded-Encrypted: i=1; AFNElJ81wWaUnGPRHZ1f2Y1OyjU/aS9HoIlsosjeYgVtKBUMNhGnieFpe3/qRiL6gSX7qqoCJVmkGg==@nk.ca

X-Gm-Message-State: AOJu0Ywo9ATiKq86cWFiEmMVnfgB+2JloNfvKnFUtxz6Ibvu0afkLQnv

iI0s0+sxSbUW2wL5GNrIoY3l4KGkgcF+UfmNwquaoPPZRQv9Z2qH2gkgpzVgeuYjQ0DLPHIuXDO

kx03/33U0Gkh/iL5lj7YP2rA8Ez5aa44=

X-Gm-Gg: AeBDieuTjGXtrMcpbdzRgj4DKs1kGOO8NwKOpAaDVqAipaNJJ4Y22e429+UTNo0y+j2

RnRYTmHyUDxQY1iHeSG9xiC9LYXKCvUKdZEJLeN/INtyIEOhN5XJb6tgRzzSrlFztFL24/AMoFX

WKvtfXthJ2XWJecWifVlo/wwvhkevucF277gVfp7bWfl3VvR5o3LFq7zJ3Vek8ASIAnWjH92+RP

dwjzFelofHLboAr17Vd07rNLjGXKxUsIUwVSr58PP6vXmHo1q7t4wpGTY+4CD7MZ9mdOG4hK3xf

qJbs0IoGi4ZRksyT0sHGyA==

X-Received: by 2002:a05:6512:3d9e:b0:5a4:7ec:143f with SMTP id

2adb3069b0e04-5a4172a9c55mr891541e87.21.1776434549690; Fri, 17 Apr 2026

07:02:29 -0700 (PDT)

MIME-Version: 1.0

Reply-To: cag@cag-consult.com

From: Climate Action Group

Date: Fri, 17 Apr 2026 07:02:17 -0700

X-Gm-Features: AQROBzCe7VYXsvLCeuqMu1NCqOOtdIHW7QriejufsR-a07lx3dECJ1mq_93QDpo

Message-ID:

Subject: Re: Climate Ambassador

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000004d16ea064fa8668a"

Bcc: sales@nk.ca

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi , *We are pleased to inform you that you are eligible

to serve as a Climate Ambassador and to access grant opportunities under

the Climate Action Programme, administered by the UN Climate Action Group,

[...]

Content analysis details: (6.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

[209.85.167.50 listed in dnsbl.ahbl.org]

[209.85.167.50 listed in dnsbl.ahbl.org]

[209.85.167.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.50 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sarwardrrabia(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.50 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: Climate Ambassador

Categories: Google Gmail Spam

0 Comments

Web/SEo/App Spam from Google Gmail
Posted by Dave Yadallee on Friday, April 17. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 10:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDmQX-000000007mU-3Ldi

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 10:52:21 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 10:52:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f200.google.com ([209.85.128.200]:48337)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDijB-00000000MFm-3Lwh

for root@nk.ca;

Fri, 17 Apr 2026 06:55:31 -0600

Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-7aa1e8734d4so11107797b3.0

for ; Fri, 17 Apr 2026 05:53:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1776430417; x=1777035217; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=7CYNZDAZ3gQAtbenLqaJb0spCarf5uC5jbSwGXN8EJY=;

b=C+8SA090BjMn9x634PjPgml9ImhecmxwliFCisnCGQSIhQ9SmnlEZwgnvDGP7HZpUo

j+FN0EHx78QlZRYe2lgp0aITM9Dz7TdxingAd2R04u4+dNH/bHsVXQ/O4o5x+qrsllmO

5FTTH1VPHDEBoWecftccQki/esYLYhoedJQV3qH/XvKSAJvf2406lXVJsEZdxnC7pk3z

NxEX0BYmP2tTL9Xmm6wcBh0t1xXxFi0Sw5bZgheXWwmfo5/rduD7+0SjKqujFFSOfhFZ

L30SBGPj1iOI6xqS8jXu19n/jg+r8iEyY4GxUK01KfAp2uTRCZJVKoK+0xjdVf+KbBI3

EhtQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776430417; x=1777035217;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=7CYNZDAZ3gQAtbenLqaJb0spCarf5uC5jbSwGXN8EJY=;

b=sM32k8Ae+95ZL5kl1Gd4BYR1O/2lHcqDBFIL63vYRJDLzXK9udnN+GZ7WYe/yrnHG5

tw/4+rj3AF9+jPccsmpeiF/tSVVt1ESnFDDz1vjm93wblAsTapQ6HZPTQU5U42XpZ4I4

Q4EvxX+in3wrz0goM9qcBfPpi11jNGpc32bR2XJ7DJDbtyHyb490pPynL/ejcyXlpktk

QIESZTARZ/Dv6MMDaiBjhsjpH9HD56NmwWQBpz3WVd6jx0K+T1RFANM3AlDfCm6YShAc

SpZrOsZcM23rnW1Zk0YroW/mVPC1XM2MoogyNWubS5SgxtdOw6CB451LAn2lO+7GiOMj

Mx1g==

X-Gm-Message-State: AOJu0Yz1Uni1Yjf+CpMjf6A1AljmHCqKbIGrQyGW9arkfx9mP+/rzqk5

2moR82BZ6z/ajQkA0rQTRY5rzLCkspM8X8yYWtP7wNo4yGA8UuXxMnifSkDvaJ0dRzL4BrsqGuk

Cq4vMhQ==

MIME-Version: 1.0

X-Received: by 2002:a05:690c:60c3:b0:79d:d23b:4c14 with SMTP id

00721157ae682-7b9ed00b3a9mr26143057b3.47.1776430417330; Fri, 17 Apr 2026

05:53:37 -0700 (PDT)

Message-ID:

Date: Fri, 17 Apr 2026 12:53:37 +0000

Subject: Growth idea root@nk.ca

From: rahan.lee3149@gmail.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000fe4996064fa76f64"

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello,root@nk.ca I checked your site â€” looks good. Saw a

couple of SEO areas that could be improved.

Content analysis details: (7.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rahan.lee3149(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[rahan.lee3149(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.200 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.200 listed in wl.mailspike.net]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Growth idea root@nk.ca

--000000000000fe4996064fa76f64

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

SGVsbG8scm9vdEBuay5jYQ0KDQpJIGNoZWNrZWQgeW91ciBzaXRlIOKAlCBsb29rcyBnb29kLg0K

DQpTYXcgYSBjb3VwbGUgb2YgU0VPIGFyZWFzIHRoYXQgY291bGQgYmUgaW1wcm92ZWQuDQoNCldo

YXQgYXJlIHlvdSBtYWlubHkgdHJ5aW5nIHRvIGdyb3cgcmlnaHQgbm93IOKAlCB0cmFmZmljIG9y

IGxlYWRzPw0KDQrigJMgUmVoYW4NCg==

--000000000000fe4996064fa76f64

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,root@nk.ca

I checked your site =E2=80=94 looks good.

S=

aw a couple of SEO areas that could be improved.

What are you mainly=

trying to grow right now =E2=80=94 traffic or leads?

=E2=80=93 Reha=

n

--000000000000fe4996064fa76f64--

Categories: Google Gmail Spam

0 Comments

Anti speed trap spam Part 3
Posted by Dave Yadallee on Friday, April 17. 2026

style="margin:0; font-family:Georgia,'Times New Roman',serif; font-size:24px; line-height:32px; color:#1a1a1a; font-weight:bold;">

Protect Your License and Save $500 per Year with This Revolutionary Device

style="font-family:Arial,sans-serif; font-size:13px; color:#c0392b; font-weight:bold; text-decoration:none; border-bottom:2px solid #c0392b; padding-bottom:2px;">

Limited Time Sale: 75% off the Speeder Pro Car Radar

Written By John Murray

on Lifestyle and Tech

style="margin:0 0 14px 0; font-family:Georgia,'Times New Roman',serif; font-size:15px; line-height:25px; color:#333333;">

Over

30 million drivers around the world lose their licenses each year.

In many cases, it's for something as simple as several speeding cases. You don't

think it'll happen to you... until it does.

style="margin:0 0 14px 0; font-family:Georgia,'Times New Roman',serif; font-size:15px; line-height:25px; color:#333333;">

I was headed into the mountains with my family when red and blue lights flashed in

my rearview. I hadn't even noticed the speed limit changed - the sign was partially

hidden by overgrown trees. And not far beyond it lurked the patrol car, waiting in

the shadows.

style="margin:0 0 14px 0; font-family:Georgia,'Times New Roman',serif; font-size:15px; line-height:25px; color:#333333;">

$370 fine. Points on my license. And since it wasn't my first

ticket that year, I was warned: one more and I could lose my license. Worse, my

insurance company hiked my premium almost immediately.

style="margin:0 0 14px 0; font-family:Georgia,'Times New Roman',serif; font-size:15px; line-height:25px; color:#333333;">

I wasn't driving dangerously. I wasn't trying to cheat the system. I was simply

driving like anyone else and got caught in the wrong place at the wrong time.

style="margin:0 0 14px 0; font-family:Georgia,'Times New Roman',serif; font-size:15px; line-height:25px; color:#333333;">

After that trip, I started researching radar detectors. Most were bulky, expensive,

or overloaded with features I didn't need. Then I found Speeder Pro

- compact, clean, and incredibly easy to use. Just plug it in and go.

style="margin:0 0 14px 0; font-family:Georgia,'Times New Roman',serif; font-size:15px; line-height:25px; color:#333333;">

What impressed me most was the range -

360-degree detection, real-time voice alerts, and coverage up to 500 meters.

All in something that sits quietly on the dash and doesn't get in the way. It wasn't

flashy. It was smart.

style="margin:0 0 4px 0; font-family:Georgia,'Times New Roman',serif; font-size:15px; line-height:25px; color:#333333;">

Whether it's a hidden speed trap, a patrol car tucked off the shoulder, or a

roadside camera - it gives you early, reliable alerts. The device supports multiple

radar bands, including X, K, Ka, and even modern AI-enhanced enforcement systems. No

subscriptions, no complicated setup. You simply plug it in, and it starts working.

style="display:block; font-family:Arial,sans-serif; font-size:16px; font-weight:bold; color:#ffffff; padding:14px 20px; text-decoration:none; text-align:center;">

Continue Reading the Full Article

Categories: Spam and Phish

0 Comments

Anti speed trap spam Part 4
Posted by Dave Yadallee on Friday, April 17. 2026

style="margin:0 0 14px 0; font-family:Georgia,'Times New Roman',serif; font-size:15px; line-height:25px; color:#333333;">

Unexpected speed traps can be stressful, especially for drivers who commute long

distances or take road trips. Speeder Pro provides early warnings so you can adjust

before enforcement zones catch you off guard. It's especially useful in unfamiliar

areas where speed limits change suddenly.

style="margin:0 0 4px 0; font-family:Georgia,'Times New Roman',serif; font-size:15px; line-height:25px; color:#333333;">

And finally, I could drive without feeling like I had to be on high alert every

second. One purchase, no added costs - Speeder Pro gives you full access for a

lifetime.

style="display:block; font-family:Arial,sans-serif; font-size:16px; font-weight:bold; color:#ffffff; padding:14px 20px; text-decoration:none; text-align:center;">

See Why 30,000+ Drivers Made the Switch

style="margin:0; font-family:Arial,sans-serif; font-size:11px; color:#aaaaaa; text-transform:uppercase; letter-spacing:1px;">

What drivers are saying

style="margin:0; font-family:Arial,sans-serif; font-size:13px; line-height:20px; color:#555555;">

Aidan H. - "Finally got the

Speeder Pro, and I don't know how I drove without it! This thing is the

real deal."

style="margin:0; font-family:Arial,sans-serif; font-size:13px; line-height:20px; color:#555555;">

Lily S. - "It lets me know way

ahead so I can avoid those sudden brake checks. Haven't had a ticket

since!"

style="display:block; font-family:Arial,sans-serif; font-size:15px; font-weight:bold; color:#ffffff; padding:13px 20px; text-decoration:none; text-align:center;">

Read the Full Story - See How It Works

style="margin:0; font-family:Arial,sans-serif; font-size:11px; color:#999999; line-height:17px;">

You are receiving this email because you subscribed to our mailing list.

If you no longer wish to receive these emails, you can

style="color:#999999; text-decoration:underline;">unsubscribe here.

Categories: Spam and Phish

0 Comments

Anti speed trap spam Part 2
Posted by Dave Yadallee on Friday, April 17. 2026

table,

td {

mso-table-lspace: 0pt;

mso-table-rspace: 0pt;

}

img {

-ms-interpolation-mode: bicubic;

border: 0;

height: auto;

line-height: 100%;

outline: none;

text-decoration: none;

}

body {

margin: 0 !important;

padding: 0 !important;

width: 100% !important;

background-color: #f4f4f4;

}

a {

text-decoration: none;

}

@media screen and (max-width: 620px) {

.email-container {

width: 100% !important;

}

.fluid {

width: 100% !important;

max-width: 100% !important;

height: auto !important;

}

.pad-m {

padding-left: 16px !important;

padding-right: 16px !important;

}

.img-shrink {

width: 100% !important;

height: auto !important;

}

}

style="background-color:#f4f4f4;">

style="display:none; font-size:1px; color:#f4f4f4; line-height:1px; max-height:0px; max-width:0px; opacity:0; overflow:hidden;">

A $370 fine for a hidden speed sign. Here's the device that changed everything for one Canadian

driver.

class="email-container" style="background-color:#ffffff;">

Categories: Spam and Phish

0 Comments

Anti speed trap spam Part 1
Posted by Dave Yadallee on Friday, April 17. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Apr 2026 04:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDgKR-00000000DhI-1ypC

for dave@doctor.nl2k.ab.ca;

Fri, 17 Apr 2026 04:21:39 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Apr 2026 04:21:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from pmta5.mailwhizz.co.uk ([213.165.90.173]:54989)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDZWL-00000000H2f-1htl

for doctor@nk.ca;

Thu, 16 Apr 2026 21:05:37 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=key5; d=pmta5.mailwhizz.co.uk;

h=Date:To:From:Subject:Message-Id:List-Unsubscribe:Content-Transfer-Encoding:

Content-Type:Mime-Version; i=return@pmta5.mailwhizz.co.uk;

bh=mqDl3PIDvHgsKo5cmcOTk/QmBIKK8bFiTUX9a/cYecM=;

b=UnDJM2spzd7KApwlghnUIctZ2h44GUvuIHlpW6ZrocN2K5LGhwM1knanNtDMVJ3iRqnxqbNLfW1v

CbWM35j7NATWO+4GrMfgYMsiTrKt3H1dMFBiPtpB/SwTVFiwP0q9+TBfWR8nAWKJB2weGcYq9f/h

t/+bRbdcfaiNW/T8d8lb5SehDwLhXR9eLXIvRfYgkuhnxAsJUSPQQsNf+RdUYXN21tp1ux8WzyWg

LFOsgNmSzaTrDpYbgrKTsIfvyRjU4qIxF5Qb65Sz075MoTi/BAbb3Ios4HMfo4T1JlW5P9V+78qh

zZ/nNoAgki1nM+Jxa2SFYYwhGoKqBXFjYpdtyw==

Date: 2026-04-16 02:07:09

X-Mailer: 5tlgv 83

X-tvfulyp-nfogre: 62d2b7bb1f4ba767

To: doctor@nk.ca

X-sender: return@ohagichan.shop

X-receiver: doctor@nk.ca

From: Auto Tech Insider

Subject: Avoid surprise speed traps with one simple device

Message-Id: <75247h54.j940307.6621.390819@atB.xt.local>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Precedence: bulk

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset=uft-8

Mime-Version: 1.0

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Protect Your License and Save $500/Year A $370 fine for a

hidden speed sign. Here's the device that changed everything for one Canadian

driver. Advertorial TopConsumer / Speeder Pro Trending in

Content analysis details: (11.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[213.165.90.173 listed in dnsbl.ahbl.org]

[213.165.90.173 listed in dnsbl.ahbl.org]

[213.165.90.173 listed in dnsbl.ahbl.org]

[213.165.90.173 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[213.165.90.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[213.165.90.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[213.165.90.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[213.165.90.173 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[213.165.90.173 listed in will-spam-for-food.eu.org]

[213.165.90.173 listed in will-spam-for-food.eu.org]

[213.165.90.173 listed in will-spam-for-food.eu.org]

[213.165.90.173 listed in will-spam-for-food.eu.org]

[213.165.90.173 listed in will-spam-for-food.eu.org]

[213.165.90.173 listed in will-spam-for-food.eu.org]

[213.165.90.173 listed in will-spam-for-food.eu.org]

[213.165.90.173 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: get-speederpro.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: get-speederpro.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Avoid surprise speed traps with one simple device

xmlns:o="urn:schemas-microsoft-com:office:office">

Protect Your License and Save $500/Year

style="font-family:Arial,sans-serif; font-size:11px; color:#888888;">

Advertorial

TopConsumer

/

Speeder Pro

Trending in

style="margin:0; font-family:Arial,sans-serif; font-size:12px; line-height:18px; color:#7a6520;">

UPDATE - Speeder Pro is currently sold out in retail stores

nationwide. However, they may still be available on their
target="_blank"

style="color:#7a6520; text-decoration:underline; font-weight:bold;">website

HERE.