Investment spam from Google Gmail Part 2

Posted by Dave Yadallee on
Content preview: Greetings, I hope this email finds you well. I am writing

to establish a direct line of communication with a view to exploring potential

business partnerships and investment opportunities within your country's

e [...]



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.180 listed in will-spam-for-food.eu.org]

[209.85.160.180 listed in will-spam-for-food.eu.org]

[209.85.160.180 listed in will-spam-for-food.eu.org]

[209.85.160.180 listed in will-spam-for-food.eu.org]

[209.85.160.180 listed in will-spam-for-food.eu.org]

[209.85.160.180 listed in will-spam-for-food.eu.org]

[209.85.160.180 listed in will-spam-for-food.eu.org]

[209.85.160.180 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.180 listed in dnsbl.ahbl.org]

[209.85.160.180 listed in dnsbl.ahbl.org]

[209.85.160.180 listed in dnsbl.ahbl.org]

[209.85.160.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.180 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.180 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.180 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[oleksandrrenikki(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.180 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} HELLO IS THIS EMAIL STILL ACTIVE



--000000000000a1f65a064c5eddda

Content-Type: text/plain; charset="UTF-8"



Greetings,



I hope this email finds you well. I am writing to establish a direct line

of communication with a view to exploring potential business partnerships

and investment opportunities within your country's economic Sectors, if

applicable. The UBA Group is actively seeking collaboration, and we

believe there may be strong mutual benefits to be discussed.I look forward

to hearing from you soon regarding this matter. Please let me know if you

have any questions or require any further information.



Sincerely,



UBA Consultant



Williams Graham



--000000000000a1f65a064c5eddda

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




ont-size:12px;margin:0px">
;,"sans-serif";font-size:large;color:rgb(10,10,10)">Greetings,=C2=

=A0


-size:12px;margin:0px">
quot;sans-serif";font-size:large;color:rgb(10,10,10)">I hope this emai=

l finds you well.=C2=A0 =C2=A0I am writing to establish a direct line of co=

mmunication with a view to exploring potential business partnerships and in=

vestment opportunities within your country's economic=C2=A0Sectors, if =

applicable.=C2=A0=C2=A0The UBA Group is actively seeking collaboration, and=

we believe there may be strong mutual benefits to be discussed.I look forw=

ard to hearing from you soon regarding this matter. Please let me know if y=

ou have any questions or require any further information.


e=3D"font-family:"Segoe UI",Inter,Arial;font-size:12px;margin:0px=

">
;font-size:large;color:rgb(10,10,10)">Sincerely,


-family:"Segoe UI",Inter,Arial;font-size:12px;margin:0px">
tyle=3D"font-family:"arial black","sans-serif";font-siz=

e:large;color:rgb(10,10,10)">UBA Consultant


ly:"Segoe UI",Inter,Arial;font-size:12px;margin:0px">
=3D"font-family:"arial black","sans-serif";font-size:la=

rge;color:rgb(10,10,10)">Williams Graham





--000000000000a1f65a064c5eddda--

Investment spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Mar 2026 15:37:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vydmH-00000000IwU-0Rj2

for dave@doctor.nl2k.ab.ca;

Fri, 06 Mar 2026 15:36:13 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Mar 2026 15:36:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f180.google.com ([209.85.160.180]:48244)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyZWt-00000000P1D-34QD

for doctor@mail.nl2k.ab.ca;

Fri, 06 Mar 2026 11:04:14 -0700

Received: by mail-qt1-f180.google.com with SMTP id d75a77b69052e-509006c070eso697231cf.0

for ; Fri, 06 Mar 2026 10:03:16 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1772820190; cv=none;

d=google.com; s=arc-20240605;

b=HF57etD4YH0vSh4Um2z8zBZwPLmQ/yap00QQZz0XAJdRK+Qa8SERnvLsmQ5McFnVrJ

3ZsE7pBrmrK21ui4cUmpWDUmm3fErlBRlBywvzyWf2F1Oh/KSHsmlvkfzwDJVkbfU6JT

nFigtTt/KU5LDsfbG/JU/EMf0GD4NmrpyWgkEbn3EPOJShvNhOJRU6Iab3kGwVnHUrXA

vmo5wV7w9DzX81hb0nbPF5jmxYNakeI//w+t38VpTDo+PN/IaJiu/N5DrStlnj3AjExF

5qnfXM9cADyzFmUoAX8Xy0qWivDX59+UqJ3iGdABQxyFprced/Q3FZhigBEPqPNfcEk+

i+qA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=K7ysYzj/O/x3d7aJG6Gka6yitVil4JuTqYLuHIpXWdI=;

fh=07UgjUqN8HPXKebxME/K6TVerZOrMrqjG7FHmCRlCbI=;

b=eqh7eF4JbMfSH/HhXq2J0KtZKdFnqUQgOcNFDqvES/8w8yKld9VElRJqY6nCS1j6Gq

llsGc8OqWrZxOnO6A0ds8neeKBEopmdJcoCHanSn9/TnaJ7SnpifTNxU5w78HkSvY7ap

7QpP/u9F7VQGjEaTtKfKRSac8gE4kRjpetWKlWe9V4Sk9TcldGi6Pee44prir8vMBQNY

V751GJ9GXomBE6ofC0Sia+qiseRouUuRQjRLE3KG/CCC+uL6wA0KDiV/oY1mWDp0RVCN

v1xZDa1N3bxejAunMkLgjhi5cK2/d30jIrWDH2sJl2OJ/WIa0mH/r2Rp5sJ9IZ28YNCs

jxlw==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772820190; x=1773424990; darn=mail.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=K7ysYzj/O/x3d7aJG6Gka6yitVil4JuTqYLuHIpXWdI=;

b=MRO3iOd47FULkKEPaEJBFgRH+8k+80DPBIpz0w+TitITKYvby7uyUIBhDZk8nW/p0D

0EKWCwApYIwEdJzGuQeyWpBAhwThPCSgWqO85jhO/lJw05OopdWXWon6+zkHxd7MWO8q

/wtMj+llpNYcdqrRosHupBRy5785Q9txAsp8a55js4lV7hkFsLcILcWjrL471K1ILcAQ

iu1s9w1NxfNmeQhIpV/2A9ASvtMOx9gTfXuwUfE9P/6ZB4g0gXPiprL239N5+pcxQ5QM

3ZuO2qGjAr7q8iVhaSHopOqV/P0W/MhDSjASw3LpWCfHm+WBQBsSMtjmwY1IpU3HyI/E

AF/A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772820190; x=1773424990;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=K7ysYzj/O/x3d7aJG6Gka6yitVil4JuTqYLuHIpXWdI=;

b=rlJNszyngVEdXaOpCyyeEyVwGbqEU+wi3sOiPn03YyFnKV3eOm6FOBcJRsgf4fRvXI

wCD7JbFyUWbiaQV1vpuXzkOgBlWeaBGU9Q9FOTz1HvIWgbY1QvM/uy9GMUzJEUQa973M

JZtwADiGo5y2P5QGDlw9Ia2VTi9FQCeFDjjPV0RMnTgDPdsfDHidWM5CVkggGsavKOlB

G/Fo//imyI3PzLoEZGkdWqrOIZmTByWt0NM08Vzb1MBIaq9vO0gvWRy8i4aE/siGcYk4

XRTlu1dFc+RiF2euWGQMvqSvMUT4d0aBwsWdgIkH0YHTJDua0XHAaEFcqFN4yHKfu8zD

KMkw==

X-Forwarded-Encrypted: i=1; AJvYcCXTvPKS+GFWqvHfzsrxnSkkHcL5k3urDftsLXs9ZyAphS9QlI4lirpoXA79DRUvYohcfgCR9cY=@mail.nl2k.ab.ca

X-Gm-Message-State: AOJu0YzhNUJla/fUadSERDCHfZY+tyf1NVQ/Yu9+NN+FtUIctzq6RcST

zdUcEVUKJgDpL9AGpFNRCWBCvUzqFs7TMHvH6bc/wPgRS9iBmYSShibE558PCY0LaLv3dGXGYOu

by6UdSGSyOESjdFV7pjFFLsrNU2NZtjk=

X-Gm-Gg: ATEYQzzHIOlRFzIrB0sygJvFUj+PR1lGscH3x8zxe2V4w+keuMf5rkg/h0Qmy5OXy1+

WtY7fDKeRVB/9x8A2+GUm91SbZ3zV3eP24fnvEEsHEvqzOn8q9zoI/FpjKNuy18aq6GEhPv+i04

e4CUeU4CoRNXejUmdia+MvU8EnlmQABWl2ftUBC6mQv7OYjCwIuC6PX0Xn5jJMNcImc/PenJw4M

fEGxdvWRLlI3AI0hsDaT45BN7zgqdB/z7j0TgRTT/b1JOQlwbQzZROPAhn1253rf0ojm7CJeumi

d00rSu4N7WPNJ3NfskUZ78q+FXnBwkIpBNQyYua7G3g=

X-Received: by 2002:ac8:5d10:0:b0:505:e7b8:5523 with SMTP id

d75a77b69052e-508f46d14cdmr37744611cf.8.1772820189278; Fri, 06 Mar 2026

10:03:09 -0800 (PST)

MIME-Version: 1.0

From: Williams Graham

Date: Fri, 6 Mar 2026 10:02:58 -0800

X-Gm-Features: AaiRm51GUw-ne1HMN_v03T6emax4mDw9buCwYpOWwxpya-03AqfwU66t79ViBuM

Message-ID:

Subject: HELLO IS THIS EMAIL STILL ACTIVE

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a1f65a064c5eddda"

Bcc: doctor@mail.nl2k.ab.ca

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Investment spam from Google Gmail part 2

Posted by Dave Yadallee on
Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

[209.85.160.179 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.179 listed in dnsbl.ahbl.org]

[209.85.160.179 listed in dnsbl.ahbl.org]

[209.85.160.179 listed in dnsbl.ahbl.org]

[209.85.160.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.179 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.179 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.179 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[oleksandrrenikki(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.179 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} HELLO IS THIS EMAIL STILL ACTIVE



--000000000000a1f65a064c5eddda

Content-Type: text/plain; charset="UTF-8"



Greetings,



I hope this email finds you well. I am writing to establish a direct line

of communication with a view to exploring potential business partnerships

and investment opportunities within your country's economic Sectors, if

applicable. The UBA Group is actively seeking collaboration, and we

believe there may be strong mutual benefits to be discussed.I look forward

to hearing from you soon regarding this matter. Please let me know if you

have any questions or require any further information.



Sincerely,



UBA Consultant



Williams Graham



--000000000000a1f65a064c5eddda

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




ont-size:12px;margin:0px">
;,"sans-serif";font-size:large;color:rgb(10,10,10)">Greetings,=C2=

=A0


-size:12px;margin:0px">
quot;sans-serif";font-size:large;color:rgb(10,10,10)">I hope this emai=

l finds you well.=C2=A0 =C2=A0I am writing to establish a direct line of co=

mmunication with a view to exploring potential business partnerships and in=

vestment opportunities within your country's economic=C2=A0Sectors, if =

applicable.=C2=A0=C2=A0The UBA Group is actively seeking collaboration, and=

we believe there may be strong mutual benefits to be discussed.I look forw=

ard to hearing from you soon regarding this matter. Please let me know if y=

ou have any questions or require any further information.


e=3D"font-family:"Segoe UI",Inter,Arial;font-size:12px;margin:0px=

">
;font-size:large;color:rgb(10,10,10)">Sincerely,


-family:"Segoe UI",Inter,Arial;font-size:12px;margin:0px">
tyle=3D"font-family:"arial black","sans-serif";font-siz=

e:large;color:rgb(10,10,10)">UBA Consultant


ly:"Segoe UI",Inter,Arial;font-size:12px;margin:0px">
=3D"font-family:"arial black","sans-serif";font-size:la=

rge;color:rgb(10,10,10)">Williams Graham





--000000000000a1f65a064c5eddda--

Investment spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Mar 2026 15:37:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vydmD-00000000IwB-12dk

for dave@doctor.nl2k.ab.ca;

Fri, 06 Mar 2026 15:36:09 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Mar 2026 15:36:09 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f179.google.com ([209.85.160.179]:48243)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyZWt-00000000P1C-3E7j

for doctor@nl2k.ab.ca;

Fri, 06 Mar 2026 11:04:14 -0700

Received: by mail-qt1-f179.google.com with SMTP id d75a77b69052e-509006c070eso697241cf.0

for ; Fri, 06 Mar 2026 10:03:16 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1772820190; cv=none;

d=google.com; s=arc-20240605;

b=PZ/HQ0J50fNk7xck0mLgBe5EO/qs3NCT1pZEgi7w0IHSzpj/NaHgoVyyiZjcHq4Aes

PFaPhH4U+7Z3LZhvPn1Z2uxc38YWNdBQ7odbUnPjLwoTZfAVEKVakdQG6WtCCxKJQ+QJ

o5jR7K7hEFq/BxFyE9Nzh/HRiqo8Nkls01CpHrnROg7TP0UC/YgF4fvX6SWfHDWHpdkB

kxDYnX5ytwOahozdD+BwnA6jBe8r/xdbC+KaPOxf+OH5PHiSMnzXNzUCUR12g1Q+8RNc

ZrvpN886iHcbg0UiNhcgNwjT03XuxTU2Oa0MOUrfHgTPdmUPsCFI4P8B8/k1Q0ygiL0V

ijFg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=K7ysYzj/O/x3d7aJG6Gka6yitVil4JuTqYLuHIpXWdI=;

fh=sLLMVS6D+GhHFJ+gRBWoTrJDY+Iw2pkzFp9v1LcZHeI=;

b=XclJizm0PxiZ4FOOpy5Sihln4nj1ZnAO/Df/cntJ2OhsOPZ+wkhsZH86lHVj4XvYFu

yJa9G1ERfoDqL/Ffc7tInoC0RZgPKu1aa8lW7gG37xmNIy2CD3kmayQEdValjyrK7+lq

HD7OMo9u4wg2kJYwx+LkzsWhr88PbmzNzUAApT96vH4jf1PzoCC57fQ41Sg29Udlz50e

Mv5UkDiBHXybxBFoNKRptrIgqCNbhPLuDWCFo+mMCabxGO5jsbXltmNYhOR3lZLa1btm

zRqKjE1n4gnoorHpO5yD7WPvBp7fejdtqIeXSQtE1uL7PflHlq9Txt4BvfsRogY+Gnui

/uAQ==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772820190; x=1773424990; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=K7ysYzj/O/x3d7aJG6Gka6yitVil4JuTqYLuHIpXWdI=;

b=QOyD4SEssqLBwlGIvNEsjRwqHjk5l5FEAvenNLWVIP2OixjWeqq6POHeoqftxoIGUv

z4vTalIVXMB96nQG1uRnmcd5yogRkJOMyRl/l+kJa/HTfRgPJJ/l+WD13LXeZzR5i7ul

oWC2/26e33Wt8cJRhhrla5yu/1GcHrSu2IxeJ3umqCU49rLDjQMfSWfGCOaTO65RA7KU

HaM76qVKOesvUNwmjTS+sXw/cihFfWTHAsOJqNs7tuZHsS95wnkeF/eontbsrOUnTlYG

ciIw4zAvdFiUzqnANHLn93hnjzlFwcJtLWMUqiysapKFVvEyHrIvHnCk8VLqIuxi71vP

4r5g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772820190; x=1773424990;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=K7ysYzj/O/x3d7aJG6Gka6yitVil4JuTqYLuHIpXWdI=;

b=XCEL6QQnReEMi/YaQPkBhn0kuJ16fODOuUJ+AptL+nPNef1WrAEHqCSgq0Es/5Q0SU

+98Z40KEH4vLeMv9VGb+mDs0hl/I5VMGLsxup5zuMF0g2ASKV1xEMRdK6RPelYPtt5v/

8RANMUoUFLhrrnHrKRRoeQzhItW9O3HQK1nNVC+Bmyu8Zaas+fkVe+tNmjkyag/4sDbC

g74FLd7CePtwOIAx8hODOoEoGN8OYBrIQMx9OfrvhKDK5MNkQLQ33OGZUQb1dmB6ozLo

cOC01mAPQ+JjhIj9z24MZ6J9qy/ccqtoH9IRP1dlBx/tpmxwZ2sdIBTEwun8B5NsfKpA

Zxww==

X-Forwarded-Encrypted: i=1; AJvYcCWwI9iZEbGfu27YzKUbrv2VsaXS3At9GGhQMfGWvN6aRp2zf142+1D6grRFWlbfOAIalbkJqyc=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YySC7vQNzBpmynDbBd8F1A6/wLbxMOGcI+tnzXMyNMIYr3TBLiP

bLuHwUXGcDZEIleql8WWx9NiS51Elf//KXYvWt8gpthhfa7cNNymUlJ0yk8T1Wl4vsgbmh8L54y

oKvEBDcgw97KfPCNuzN7YiqYLUmmugeo=

X-Gm-Gg: ATEYQzxc46xwwbJbj4aOCD9VBjWvpQyMOjpkiVVU7HjsPTPzpGHQ7MZTSwjpempho5G

guZp2BjuwGRMG+AMd96TBWWLgmJN0BxEC4ad1nq2puuOq31JYtQ0wBdU3vBd7mJ7apcEEDiy40U

UXwlMpZXNmrCqpzpBVqZUSjc14qUiO2Iw22BK63hv1NMwPEozWiPYxujX4iDq2j8JaQAKGWYDQc

rFJoMXRoUjW8Eg/4piws0+FWfyNdK8HhBg4LIs8uHT+w83ajI8U4Bezl6qkBQl9Li9uSi0bN02l

5er9MOxREnhGXGmqbJrbIOhxaa8Wiy3LD+3ex4o6uOc=

X-Received: by 2002:ac8:5d10:0:b0:505:e7b8:5523 with SMTP id

d75a77b69052e-508f46d14cdmr37744611cf.8.1772820189278; Fri, 06 Mar 2026

10:03:09 -0800 (PST)

MIME-Version: 1.0

From: Williams Graham

Date: Fri, 6 Mar 2026 10:02:58 -0800

X-Gm-Features: AaiRm51GUw-ne1HMN_v03T6emax4mDw9buCwYpOWwxpya-03AqfwU66t79ViBuM

Message-ID:

Subject: HELLO IS THIS EMAIL STILL ACTIVE

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a1f65a064c5eddda"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, I hope this email finds you well. I am writing

to establish a direct line of communication with a view to exploring potential

business partnerships and investment opportunities within your country's

e [...]

Nigerian Spam from Google Cloud

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Mar 2026 15:36:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vydm2-00000000Iul-1uIS

for dave@doctor.nl2k.ab.ca;

Fri, 06 Mar 2026 15:35:58 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Mar 2026 15:35:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.75.33.114] (port=48776 helo=mailserver.grupflorence.com.tr)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyZW3-00000000OwB-2kB8

for root@nk.ca;

Fri, 06 Mar 2026 11:03:26 -0700

Received: from 129.70.97.34.bc.googleusercontent.com ([34.97.70.129]:64436)

by mailserver.grupflorence.com.tr with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96.2)

(envelope-from )

id 1vyZVD-0005iU-0v

for root@nk.ca;

Fri, 06 Mar 2026 21:02:19 +0300

Reply-To: vicjha@zydneyfreezers.pro

From: Viktor Jhangiani

To: root@nk.ca

Subject: Important

Date: 6 Mar 2026 18:02:13 +0000

Message-ID: <20260306140710.3A044015BA07C3AD@grupflorence.com.tr>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - mailserver.grupflorence.com.tr

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - grupflorence.com.tr

X-Get-Message-Sender-Via: mailserver.grupflorence.com.tr: authenticated_id: mustafa.cil@grupflorence.com.tr

X-Authenticated-Sender: mailserver.grupflorence.com.tr: mustafa.cil@grupflorence.com.tr

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello! In my younger days, I worked as an engineer and a

gold merchant in Odessa, Ukraine. Now retired, I'm reaching out from my hospital

bed after being diagnosed with esophageal cancer that gives me just a [...]





Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.97.70.129 listed in will-spam-for-food.eu.org]

[34.97.70.129 listed in will-spam-for-food.eu.org]

[34.97.70.129 listed in will-spam-for-food.eu.org]

[34.97.70.129 listed in will-spam-for-food.eu.org]

[34.97.70.129 listed in will-spam-for-food.eu.org]

[34.97.70.129 listed in will-spam-for-food.eu.org]

[34.97.70.129 listed in will-spam-for-food.eu.org]

[34.97.70.129 listed in will-spam-for-food.eu.org]

[77.75.33.114 listed in will-spam-for-food.eu.org]

[77.75.33.114 listed in will-spam-for-food.eu.org]

[77.75.33.114 listed in will-spam-for-food.eu.org]

[77.75.33.114 listed in will-spam-for-food.eu.org]

[77.75.33.114 listed in will-spam-for-food.eu.org]

[77.75.33.114 listed in will-spam-for-food.eu.org]

[77.75.33.114 listed in will-spam-for-food.eu.org]

[77.75.33.114 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.75.33.114 listed in dnsbl.ahbl.org]

[77.75.33.114 listed in dnsbl.ahbl.org]

[77.75.33.114 listed in dnsbl.ahbl.org]

[77.75.33.114 listed in dnsbl.ahbl.org]

[34.97.70.129 listed in dnsbl.ahbl.org]

[34.97.70.129 listed in dnsbl.ahbl.org]

[34.97.70.129 listed in dnsbl.ahbl.org]

[34.97.70.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.75.33.114 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.75.33.114 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.75.33.114 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.75.33.114 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} Important















Hello!



In my younger days, I worked as an engineer and a gold merchant in Odessa, =

Ukraine. Now retired, I'm reaching out from my hospital bed after being dia=

gnosed with esophageal cancer that gives me just a few months left to live.=

Although I've struggled to remain hopeful, maintaining the energy for char=

itable activities—an essential part of my life—has been difficu=

lt. It would mean a lot if we could discuss this further because supporting=

others has always brought me immense fulfillment=20

and joy.

Please let me know when you receive this message, and I'll =

provide all the necessary details.

I truly appreciate it.









Web/SEO/App spam from Google Gmail Part 2

Posted by Dave Yadallee on
Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.195 listed in dnsbl.ahbl.org]

[209.85.215.195 listed in dnsbl.ahbl.org]

[209.85.215.195 listed in dnsbl.ahbl.org]

[209.85.215.195 listed in dnsbl.ahbl.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[dnsbl.ahbl.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[dnsbl.ahbl.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[dnsbl.ahbl.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.195 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.195 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.215.195 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.215.195 listed in sa-trusted.bondedsender.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.195 listed in wl.mailspike.net]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.215.195 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.195 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.215.195 listed in will-spam-for-food.eu.org]

[209.85.215.195 listed in will-spam-for-food.eu.org]

[209.85.215.195 listed in will-spam-for-food.eu.org]

[209.85.215.195 listed in will-spam-for-food.eu.org]

[209.85.215.195 listed in will-spam-for-food.eu.org]

[209.85.215.195 listed in will-spam-for-food.eu.org]

[209.85.215.195 listed in will-spam-for-food.eu.org]

[209.85.215.195 listed in will-spam-for-food.eu.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[will-spam-for-food.eu.org]

[2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7 listed in]

[will-spam-for-food.eu.org]

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} =?utf-8?b?aU9TICYgQW5kcmlvZCBEZXZlbG9wZXJz4oCmPz8=?=



--===============4049527480534041341==

Hi,

I recently visited your website and learned a bit about your business. It looks like a great opportunity for expanding through a mobile app.

I’m Sophia, a mobile app developer specializing in iOS & Android with over 8 years of experience.

If you ever plan to launch a mobile app or enhance your existing platform, I’d be glad to help and share some similar projects I’ve worked on.

Thanks and looking forward to hearing from you.

Regards

Sophia

App Developer



--===============4049527480534041341==--

Web/SEO/App spam from Gogole Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Mar 2026 15:36:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vydlq-00000000IuH-1JSQ

for dave@doctor.nl2k.ab.ca;

Fri, 06 Mar 2026 15:35:46 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Mar 2026 15:35:46 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f195.google.com ([209.85.215.195]:45375)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyZHO-00000000Gk1-2ph1

for sales@nk.ca;

Fri, 06 Mar 2026 10:48:12 -0700

Received: by mail-pg1-f195.google.com with SMTP id 41be03b00d2f7-c7388fb61adso1033941a12.3

for ; Fri, 06 Mar 2026 09:47:15 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=theappsdeveloper-com.20230601.gappssmtp.com; s=20230601; t=1772819229; x=1773424029; darn=nk.ca;

h=subject:to:from:mime-version:date:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=JHoPNTZUmeKBJUefG51lQSx70q0S84mRimaz6NR7w7g=;

b=Z78x8dZ0s27S9yGpT1RqgP/VFXFLbMvXdcz6xPpWqY89k/LKa/h9ewN1tkQ9zDHgTn

mF2LS5N43qYvCG2M9ejkF6Y2I4c6ROx01g/SkvgMtJu+J4T+GCT60MTaUWANUz+RunvE

TUf75Ld+cfzsDSgH1MXiLOZhkqhEwD3kALr7BzyT2ZlNcQsutQZDkQ4m8MshN4WA6JzB

opyHANbL2WwpFRnvV7J7fyF6Zw2MwU3JphbAs0zIOCHlC81u2ewpMVakFJhcl25TRM+2

7UlJiIJIsOapYH6rzCJHaWBqTurG1+YEX5xekZwvVJRSB7Leph+w5imzTSUTsgH0vdDu

7LRw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772819229; x=1773424029;

h=subject:to:from:mime-version:date:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=JHoPNTZUmeKBJUefG51lQSx70q0S84mRimaz6NR7w7g=;

b=caZ7y1OsfJ3Tq5fEq6lZ/Zn5FnN8ruzWRfEu7mf31W4Pqw2JpHpFC9CnGxmw4xKUG2

Bi4D8KF4lRu2AS2M055hkgav5EeJAIMPeJCBjq5MHAhF0a05xkXfQl7V16wB1gNXvRg0

mn7SVDTpTKryNz8UHqBT3Oq3vETdiC2tsKgfHR97uC6sD0YV80Z6/5HlHYCzdIOAojS0

5cOwDBw1XEfWoM1otHkEppzfBJOpVrCp+cOvWYDjBVSYH51uEFHDegzyqpUMInmQo7tr

FvPLEieWku1lssupa06ZSuHC3wnr2hgrlTGpj1zM4YkTRFKQresx7dchAXN9GjWHKpIO

jQJw==

X-Gm-Message-State: AOJu0YzjtzFK/vFr7Qw/eHu+9o5uZ3qxTHT39BHXN3le/eL2RyxUWcIs

x3TaMBBC1HeFBM4msNnfwETneW9W80yXvhRG0U0WtTXA98gHqqNTUbIHIo45AyI3owZjgYIXToO

sr/EJIPA=

X-Gm-Gg: ATEYQzy4sdDr7rcIEkLCtXdK1NB/d0PlV/fJP9O/pjsSH74AGJUjF0+ACGNWpfDxDtK

O3V4ifsCGRbimplAwrQtwTIVTY+DZDc/oWzKLUkUWE3byV+PU5z89hKZ/+y9oG0H09nXOtaWAI+

3Z/ZRBMzINglRgjJLxvrhBRnWCSpke6FDbYpDhWofbqemvEV5mdtA+gJ+BAczcbabZu1MJ3cJSB

rj6CaRX/q2L8wBvgxHBrq1faB4j/7MjljygMUj/V6dMDN7wzGFUPx9dW9BdwkPtXdsuN7iJyvqz

HaUmU3iKLh3sVYxnbkUtLTb3YiYZ3m1SV0QYhmvxzJ4elwQhzGa9YwsUwe5oC8mJlEKGKRAI/1N

N0IcjkzeiJ+ztG26bw5MoE7oZdCRD03G8CVr6sixUTh2Y2F3/osZtCZrqF4ZSAbjn8Q4nPPjgfY

RSeh9BHos6kzVSgbxTTyUgRhA8IPa8IDtMY6E3g1GbyHmcP9jMLHoz6g==

X-Received: by 2002:a05:6a20:c786:b0:34e:be9b:b67f with SMTP id adf61e73a8af0-398590b64c0mr3083261637.49.1772819228688;

Fri, 06 Mar 2026 09:47:08 -0800 (PST)

Received: from DESKTOP-OUDJMQ8.lan ([2409:40e4:108b:7ca:7df5:d9f:4b8d:2ee7])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-c739e0a70a9sm2068047a12.5.2026.03.06.09.47.07

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 06 Mar 2026 09:47:08 -0800 (PST)

Message-ID: <69ab131c.050a0220.cf12d.1898@mx.google.com>

Date: Fri, 06 Mar 2026 09:47:08 -0800 (PST)

Content-Type: multipart/alternative; boundary="===============4049527480534041341=="

MIME-Version: 1.0

From: Sophia

To: sales@nk.ca

Subject: =?utf-8?b?aU9TICYgQW5kcmlvZCBEZXZlbG9wZXJz4oCmPz8=?=

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I recently visited your website and learned a bit about

your business. It looks like a great opportunity for expanding through a

mobile app. I’m Sophia, a mobile app developer specializing in i [...]





Bitdefender phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Mar 2026 10:27:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyYwO-00000000FTD-3BEw

for dave@doctor.nl2k.ab.ca;

Fri, 06 Mar 2026 10:26:20 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Mar 2026 10:26:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f202.google.com ([209.85.128.202]:57720)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyYvC-00000000FJJ-472X

for root@nl2k.ab.ca;

Fri, 06 Mar 2026 10:25:17 -0700

Received: by mail-yw1-f202.google.com with SMTP id 00721157ae682-7985951fa83so177353647b3.3

for ; Fri, 06 Mar 2026 09:24:20 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1772817854; x=1773422654; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=YNNhVm+bRdn6Ddfpb5n3oIsWLJ78zZnL3OBY1TdI8nk=;

b=gtkzkI9mjVjjkTsmVziIBluuJgj4FfU8mCcwoJqn0pK4pUn3CgWouFLZGoiFR2fNGY

4fj7XGiFxxJK+GTfD/AojnGJ8VOgfVz1XQTAfam9i8Okg7XpPXlN3Zu4t/WQwBMtSNPk

B5yKx7IOJAQ6bo3LYo/M8A2Hd/OxlZsJVtyoYgj7D3YH3cImQpls4xs2WvIUiWykffQA

iiFd4oAA7GrDaV0grBrDFL/oR689zYwS4A92+UMLvqKs1+c4cBqZlYKxG18oKpQNKN5+

sEKuZPE3MDGO0FZRWOiDn0qa6pF21tB6CCeYrAv6AapaFRHdUZSRgV0/rbpLS/KEzzoS

Cqzg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=somkbgk-org.20230601.gappssmtp.com; s=20230601; t=1772817854; x=1773422654; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=YNNhVm+bRdn6Ddfpb5n3oIsWLJ78zZnL3OBY1TdI8nk=;

b=C5JTgq6VlxhJHYbLEMZNQdOAsGYb11kDNzWe7yCrKPB2L5ICW9eoMMgJzMdo8CxPX4

7a5NAudF5iCBcd7Qegezv3Kpt9+4EAKFI6d6J97TO24A2bFYxEFaZei404G6W/QGhD15

D41Zv71oVPps4CHq3kIzyHh866BTs3RsUw5V/m0cirJ17RFFPiGshFhHREHDYDBpqtHa

BxyQYx5nfR3cbnPZCP5ZJ8EstfhyJT4e21bXQdH11X3YVevy8Uuzn8p/G3oU5OPSztS+

+kPLgUABl/DS5ihNPBZGf5GJy81/wJHuwpHPNRKzzenTR3GINbLWy/PACo9SnvomAmbB

mw/Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772817854; x=1773422654;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=YNNhVm+bRdn6Ddfpb5n3oIsWLJ78zZnL3OBY1TdI8nk=;

b=nrhh96O63SEdsFEw5eMR0UnASkT0sCL/JZQai0ip8uWQbBzSx4Pm39sK30Nfx+2fhH

+IaoEoChidWagkOtLgb7vvXeH9KtdvEFWlx+5aarMwdfYW9/E+fN7opJJSllzR1NsgDw

kW6EvGE2Wr0ds0NuZ16WZo/gUdLayXJ+tngFNGJkotFK5AudViGgXX/Mc0eYH7ASIeAA

Go9cRQe44Q5QLTRPcDB26GK9V7qJEWbKJEOtTCNAPKzdCmB95zF5MHiREvOMgiXxneBR

TzC1ah31rBMilT8pwNxcxJLbOeHPqIjv8hwUyAIv0z8E0GYCihNuk3XGhLF45OZysfRg

jVdw==

X-Gm-Message-State: AOJu0YxZTwmuJonYgf25Xfaxs0SKg/yWVZagJtiMN0VptcuHuFbk/E7a

jdtMWQzaa+xFS2Clz2yOYFqdVoGaAiIOtTB0j0fHhGOQ2fkZC/laqzlJPz7rYdhROz9mdafq+AU

O3xxnmPxPclvl90h6BurTvUJAXYThhG2EyeheNzB/jPNhRWRBo/fZDGGG

MIME-Version: 1.0

X-Received: by 2002:a05:690c:6610:b0:78f:bcc1:88e0 with SMTP id

00721157ae682-798dd6aed91mr26026807b3.1.1772817853663; Fri, 06 Mar 2026

09:24:13 -0800 (PST)

Reply-To: Robert Cage

Sender: Google Calendar

Message-ID:

Date: Fri, 06 Mar 2026 17:24:13 +0000

Subject: Invitation: Payment Status Updated: TA7Y2FWA4 - #IZ9309091 @ Sat Mar

7, 2026 1:23am (GMT-5) (root@nl2k.ab.ca)

From: Robert Cage

To: root@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="0000000000006b56a2064c5e5286"

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Payment Status Updated: TA7Y2FWA4 - #IZ9309091 Saturday Mar

7, 2026 â‹… 1:23am Eastern Time - New York Receipt date: Saturday, 07 March

2026 Receipt No: 1069-741-7532 Your plan stays active as scheduled.



Content analysis details: (10.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

[209.85.128.202 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

[209.85.128.202 listed in dnsbl.ahbl.org]

[209.85.128.202 listed in dnsbl.ahbl.org]

[209.85.128.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.202 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.202 listed in list.dnswl.org]

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.202 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Invitation: Payment Status Updated: TA7Y2FWA4 - #IZ9309091 @ Sat Mar

7, 2026 1:23am (GMT-5) (root@nl2k.ab.ca)



Robert Cage has invited you to Payment Status Updated: TA7Y2FWA4 - #IZ9309091

Title: Payment Status Updated: TA7Y2FWA4 - #IZ9309091

When: Friday, March 6, 2026 at 23:23

Organizer:

Robert Cage

Description: Receipt date: Saturday, 07 March 2026

Receipt No: 1069-741-7532



Your plan stays active as scheduled.



Hello,



This message confirms that your membership with Bitdefender is scheduled for renewal today. According to your service agreement, an amount of USD582.22 will be processed. Support is available at 1-810- 282-4308 if needed.



Account Overview Center:

Service Provider: Bitdefender

Add-on Service: Secure Care Plan

Amount Scheduled: USD582.22

Validity: Five Years

Total Payable: USD582.22



For questions or assistance, please contact Customer Service at 1-810- 282-4308.



With respect,

Rhonda Cordero

Bitdefender, LLC

2026 Company. All Rights Reserved.

Server id: a4315f48-e6f1-4dd0-9867-bd5035861f1e

Attendees:



root@nl2k.ab.ca





Receipt date: Saturday, 07 March 2026

Receipt No: 1069-741-7532



Your plan stays active as scheduled.



Hello,



This message confirms that your membership with Bitdefender is scheduled for renewal today. According to your service agreement, an amount of USD582.22 will be processed. Support is available at 1-810- 282-4308 if needed.



Account Overview Center:

Service Provider: Bitdefender

Add-on Service: Secure Care Plan

Amount Scheduled: USD582.22

Validity: Five Years

Total Payable: USD582.22



For questions or assistance, please contact Customer Service at 1-810- 282-4308.



With respect,

Rhonda Cordero

Bitdefender, LLC

2026 Company. All Rights Reserved.

Server id: a4315f48-e6f1-4dd0-9867-bd5035861f1e

When

Saturday Mar 7, 2026 ⋅ 1:23am (Eastern Time - New York)

Organizer

Robert Cage

rw0274402@somkbgk.org

Guests

(Guest list has been hidden at organizer's request)

Reply for root@nl2k.ab.ca

Yes



No



Maybe

More options



Invitation from Google Calendar



You are receiving this email because you are an attendee on the event.



Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more

Pharmacy Phish from Microsoft Outlook Part 5

Posted by Dave Yadallee on
IF YOU WANT, I CAN CREATE:

STUDENTS IN PREKINDERGARTEN SHOULD EXPERIENCE A BALANCE OF LITERATURE AND INFORMATIONAL TEXTS IN THE

CONTEXT OF INSTRUCTION DESIGNED TO CREATE OPPORTUNITIES FOR CHILDREN TO ENGAGE WITH A VARIETY OF TOPICS, AND

TEXTS, AND HAVE DISCUSSIONS ABOUT TEXTS THAT SUPPORT LANGUAGE DEVELOPMENT AND KNOWLEDGE BUILDING.

CREATING THIS LEARNING ENVIRONMENT FOR EMERGENT READERS CAN TAKE A VARIETY OF FORMATS, INCLUDING READ-

ALOUDS, SHARED READINGS, PRETEND READINGS, LEARNING ACTIVITIES AND PLAY THAT INCORPORATE LITERACY MATERIALS,

TALKING, EXPERIMENTING WITH WRITTEN MATERIALS, AND OTHER LITERACY ACTIVITIES. WE REFER TO THESE INSTRUCTIONAL

EVENTS AS ‘READING OR LITERACY EXPERIENCES’ BECAUSE THE FOCUS IS ON USING TEXTS, PRINTED AND VISUAL, TO DEVELOP

EMERGENT READERS’ CONCEPTS OF HOW MEANING IS CONVEYED THROUGH READING AND WRITING WHILE BUILDING THEIR

LANGUAGE AND KNOWLEDGE.

IT IS NOT ENOUGH TO SIMPLY FEATURE A VARIETY OF LITERARY AND INFORMATIONAL TEXT TYPES IN PREKINDERGARTEN

ENVIRONMENTS AND CLASSROOM INSTRUCTION; THESE TEXTS MUST BE MADE ACCESSIBLE AND MEANINGFUL TO YOUNG

READERS AS A COMPONENT OF FOSTERING ENGAGEMENT WITH LITERACY TO BUILD LANGUAGE AND KNOWLEDGE. FOR

EXAMPLE, EDUCATORS SHOULD PROVIDE AND ENGAGE DEVELOPING READERS WITH AN ASSORTMENT OF FICTION AND NON-

FICTION AGE-APPROPRIATE BOOKS IN THE LIBRARY AREA THAT ARE DISPLAYED ATTRACTIVELY AND USED REGULARLY, ROTATED

OFTEN; CONNECTED TO INSTRUCTIONAL THEMES AND FEATURE CULTURAL DIVERSITY; INCORPORATE TEXT MATERIALS INTO

MANY DIFFERENT ASPECTS OF THE CLASSROOM CURRICULUM, INCLUDING AUTHENTIC INFORMATIONAL TEXT MATERIALS FOR

USE IN PLAY AND TO GUIDE LEARNING CENTERS; AND SELECT A VARIETY

A MORE CORPORATE / FORMAL VERSION

A LONGER ARTICLE (VERY DETAILED REPORT)

A MARKETING-STYLE PROMOTIONAL TEXT

A MIXED RANDOM DATA TEXT (NAMES, NUMBERS, EMAILS, IPS)

A TECHNICAL SERVER-STYLE DOCUMENT

TELL ME WHICH STYLE YOU PREFER 👌

PAYS], ENREGISTRÉE AU REGISTRE DU COMMERCE/FISCAL SOUS LE NUMÉRO .................. , REPRÉSENTÉE PAR

........................... [PRÉNOM ET NOM, FONCTION] (CI-APRÈS, "L´AGENT"),

IL EST CONVENU CE QUI SUIT :

1. PRODUITS ET TERRITOIRE

LE PRINCIPAL ACCORDE À L’AGENT, QUI L’ACCEPTE, LE DROIT D’AGIR À TITRE D’AGENT COMMERCIAL POUR

PROMOUVOIR LA VENTE :

ALTERNATIVE A. DES PRODUITS SUIVANTS …………………………………………. (CI-APRÈS, LES "LES PRODUITS"), SUR

LE TERRITOIRE DÉCRIT CI-APRÈS …………………. (CI-APRÈS, "LE TERRITOIRE").







WEEKLY ACTIVITY OUTLINE



























Time Primary Activity
8:00–8:40Morning Operations Brief
8:40–9:20System Diagnostics Review
9:20–10:00Record Management Updates
10:00–10:20Team Pause Interval
10:20–11:00Operational Status Assessment






STAFF REFERENCE INDEX



























Role Name Division Status Contact
Coordination SupervisorHarper LaneOperationsActiveharper[at]lane
Technical EvaluatorMason OrtizSystemsActivemason[at]ortiz
Outreach SpecialistAvery KimCommunicationsOn Leaveavery[at]kim






*This summary is automatically generated for reference.





--_be37d0b0-91e2-4345-9602-b4de58cce272_--

Pharmacy Phish from Microsoft Outlook Part 4

Posted by Dave Yadallee on






Why is this free?


This wellness kit is part of our Medicare member support program — available while supplies last.













© 2025 CVS Pharmacy. Offer available while supplies last. Terms apply.


Unsubscribe |





















XML Announcements
  • XML General
  • XML Involved in the Community
  • XML Canadian Club of Edmonton
  • XML Chamber Toastmasters
  • XML Chamber of Commerce Networking
  • XML The Edmonton Social Media Web 2.0 Meetup
  • XML Spam and Phish
  • XML AOL Spam
  • XML Adelphia Spam
  • XML AliceDSL.de Spam
  • XML Amazon Spam
  • XML Arcor-IP.net spam
  • XML Barracuda Network Spam
  • XML Bell Canada Spam
  • XML BellSouth Spam
  • XML Bezeqint Spam
  • XML British Telecom Spam
  • XML Charter Communications Spam
  • XML Chinese Phish Spam
  • XML Cogeco Cable Spam
  • XML Comcast Spam
  • XML Cox spam
  • XML Earthlink Spam
  • XML Eastlink Spam
  • XML Epix.net Spam
  • XML ExcelAds spam
  • XML GoDaddy Spam
  • XML Google Gmail Spam
  • XML Happeninstuff Spam
  • XML Hinet.net Spam
  • XML MailGun Spam and Phish
  • XML Mega Mail Servers Spam
  • XML Message Labs spam
  • XML Messagelabs spam
  • XML Microsoft Outlook Hotmail Spam
  • XML MSN Israeli Spam
  • XML Mindspring Spam
  • XML NEtia Spam from Poland
  • XML Network Solutions Spam
  • XML OVH Spam and Phish
  • XML Phish
  • XML Primus Spam
  • XML Proxad Spam
  • XML Roadrunner Spam
  • XML Roger's Spam
  • XML Shawmail Spam
  • XML Sophos spam
  • XML SourceCable Spam
  • XML StellarEstate Spam
  • XML T-online Germany Spam
  • XML TelecomItalia Spam
  • XML Telefonica Spain Spam
  • XML Telus Spam
  • XML Tera-Byte Spam
  • XML Tiscali Spam
  • XML Tucows Spam
  • XML UCLA Spam
  • XML Verizon Spam
  • XML Virgin Media Spam
  • XML Wanadoo Orange Spam
  • XML Who's Who Spam
  • XML Xplorenet spam
  • XML Yahoo! Spam
  • XML digital ocean spam
  • XML eToll spam
  • XML pppool.de spam
  • XML sendgrid.net spam and phish
  • XML Technical Issues
  • XML Windows Problems
  • XML Web Ranking
  • XML NetKnow and Edmonton Internet Service Providers (ISP) ranking
  • XML Web Ranking Articles

    • Syndicate This Blog

    • XML

    Blog Administration

    Open login screen

    Powered by

    Serendipity PHP Weblog

    NetKnow Navigation

    Home


    VPNs


    Dialup Service


    Web Design


    Web Hosting


    E-Commerce


    Server Colocation


    Domain Registration


    Web Mail


    Support


    Testimonials




    Client List


    FAQs


    Interested in NetKnow Services?


    Links


    Disclaimer


    Acceptable Use


    Security





    Technorati Profile







    AddThis Feed Button

    Remote RSS/OPML-Blogroll Feed

    No RSS/OPML feed selected

    Error

    serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

    addthis





    AddThis Social Bookmark Button









    Blog Grade for www.nk.ca/blog

    Empire Avenue





    Error

    serendipity error: could not include serendipity_plugin_freetag:6c39baf097de002d8b1c2e33b9661474 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_statistics:f520e0fa688ba61bd1ed85c0fd80d550 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_twitter:b18e142d4998b6b0092d068ad858683d - exiting.

    Syndicate This Blog

    Error

    serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

    Error

    serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

    Error

    serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

    Error

    serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

    Error

    serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.