web/SEO/App spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 04 Apr 2026 05:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8zHu-00000000DU8-48wB

for dave@doctor.nl2k.ab.ca;

Sat, 04 Apr 2026 05:35:38 -0600

Resent-From: The Doctor

Resent-Date: Sat, 4 Apr 2026 05:35:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f71.google.com ([209.85.208.71]:47305)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8rpW-00000000F8I-3IdG

for root@nk.ca;

Fri, 03 Apr 2026 21:38:01 -0600

Received: by mail-ed1-f71.google.com with SMTP id 4fb4d7f45d1cf-66a9f797d25sf2358080a12.2

for ; Fri, 03 Apr 2026 20:37:01 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1775273815; cv=pass;

d=google.com; s=arc-20240605;

b=G9YnxhJRgsJixDX3slzL5nXAGvtyakmTP29N7aa3GG3ImoImXbKKTQPM2hPCKSJWTj

+Kh5DEyFwMjgv/+WXgtsQaFta9rxH43ADoodWjphFCrq8aPLT9tC6niLCRX2ppeHztTe

Qudc8DmjCvGK9DkCbsPbyOnOhTwL7CIqDPx/A7bMvy0UMVGhwZgkRIDYJIYKeuG4RBth

Ls+aw9OG6/pXq9xcPCkS3sUKd97XWrnuIzQ/wXcg6506AGQIfquMVxsa/php9fk23qvR

oCn0avuG+fEWIGjL7KaoK3GkrYcAdska4z5bjHz+E/Tr3GRujTp52BuHxOQLGN0PoHu+

ReDQ==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=3rxlZhEG3jDUmJhnVoCPXf22xUXi4WNjVlw4xNg4H1Q=;

fh=fNN1gBJ7fpxLoagqcuWl45Sf3304ot0vPf9YWA7Mm0U=;

b=SGtk/HL3LbyagX9C1s1/c4wPW1TDqzI7GmTKUaXyJCz7W3i3xuziIeBnl/aUqOEXKN

GV8mnf0PHG/MhGQmK5rTTrLoMqxlhcxc1OLewGppsrT//v5w/u6E/8bMATvHO7KKmmU9

TRxoFOHjRPBqjzTiQLkojZfJhi30+OR1nBLmdh0I4Cu3amHeOwoIYH913heYBkEGxAxW

vQTWCrln9aZC2f4JHoXPUDfun3+Q4V7j3nBVmVsOgEJP60lRX9b6kQOlErC5pNauxpE+

KRLKHXgLAf39bueeeDaB2XmTq7c7sSQf2yPsj9XPYoFOiGM9ZWepAE7Ze/X6QuOIDbnR

IL/w==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=QWWh2fq8;

arc=pass (i=1);

spf=pass (google.com: domain of davistmason@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=davistmason@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfotech.co.in

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=knitinfotech-co-in.20251104.gappssmtp.com; s=20251104; t=1775273815; x=1775878615; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=3rxlZhEG3jDUmJhnVoCPXf22xUXi4WNjVlw4xNg4H1Q=;

b=RiGS0xbt/FZZoI95JYSoNcMrxJh9+PMQdPXpXRvN9YAp/xpcoJkgTLx+dAOKWfOFcb

iHlgEemY0SaX7H+FLYtqncf2MNQckWWgvFLSkk1aNWyVqj9t1hdA43G4IRcO19No/3bp

k/qntEPmwqDX3SPtR3UiYO4degN4pP7XmRdLvbH0F5FSxSz9MtySFL6IJChem7U5vYjK

cj+JvcfxSZrVtuKmc3YoPZIrxCMJ3gJPu+XKtZGkusDmpDCETFtkBbB56GrK0iivqK4m

viaqyqITLifIKkaMve8YyQwdUcK7B2o2RkVy2f2bea7mc6FiE1HX3Tw8VJlHS79e4c1u

MzeA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1775273815; x=1775878615;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=3rxlZhEG3jDUmJhnVoCPXf22xUXi4WNjVlw4xNg4H1Q=;

b=IUBnVkVAZ7ZnMhdzTffHXA3JR3EQpJhp0rThnXQdp8nYUvpIdXzDduxR7owCaGB3Np

e6CYg8Xod4GrGR++4lQYApv16qs4c0vTb5l8D3kOKpEt2CMZy+cVfZugZ9Iy3kP5oQBl

vlDdha38HtQU7eDtSLCJ1PapD+vrAAWpfJVu1H1Q8llkeS07+TzFsix2SJW+iPoTufnR

8JWrgIkjoX8q7LHW8DwWPgmQIQMfnYLrUvsBhMHnkl9y7+XNHY1hNcsUtfYcoLyVI5Wp

lcbv+OEkr5g/E3KqtmmcZ/jeCKYlDcPELVMhf8sNA0ffUYQQzgmsqqVHgjSwR/GP9+nE

26fw==

X-Forwarded-Encrypted: i=3; AJvYcCUktyyTKu2d9MfzqTshhnfr7zrOAoHLzzd6Hl8H3HC87R+urxUoh/sARGhzuT9dHcjz+Uab@nk.ca

X-Gm-Message-State: AOJu0YwDRGGmJQWNNGSzrqdju/jGNy9il9hdrkPZTa/vR0wi7njeYN/o

mDej5q4V65yWWWiWKa6DZvEVT9OL/LHvtOPnq715V/tIX6FtTJVDGwTUtOA6tp9S/+A=

X-Received: by 2002:a05:6402:254c:b0:66e:3116:381a with SMTP id 4fb4d7f45d1cf-66e3f733c0cmr2181085a12.24.1775273814566;

Fri, 03 Apr 2026 20:36:54 -0700 (PDT)

X-BeenThere: davistmason5@knitinfotech.co.in; h="AYAyTiJs87BUNbPOS4Fzpvq3U7YLFJ+HYTXcdf0BAQ/U1L+f7w=="

Received: by 2002:aa7:d30e:0:b0:66d:eb80:52b9 with SMTP id 4fb4d7f45d1cf-66e0306a511ls1698918a12.0.-pod-prod-02-eu;

Fri, 03 Apr 2026 20:36:23 -0700 (PDT)

X-Forwarded-Encrypted: i=3; AJvYcCW8iox1xNjBALUaGsWCzV5yBb9g+vJH57UY97tBRo2vnPYynPhE2W5ybEe1oZA/tKuKXlkguAiGmyqo7pY=@knitinfotech.co.in

X-Received: by 2002:a17:907:9999:b0:b98:4e9b:7e49 with SMTP id a640c23a62f3a-b9c67951919mr252807266b.33.1775273782871;

Fri, 03 Apr 2026 20:36:22 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1775273782; cv=pass;

d=google.com; s=arc-20240605;

b=JKSAdDnAkjKUVRXAYJSKGZj+CzeMrYTkCi9fDWE3XE8HraDPadRjg8iDIBMz0Jb3v2

9IRzNeAiHACbB+s4iD5m27yYkW8BTBXlXq6CHdW1NVKVvx9YJsT92FzZUBvqf2dOiPcO

8BHDJoMwQIkBaCPlaz4jPBtwrTCFFgpF28nXKlLEQfeFzYQHVTm5he8QkuK25WW3y41a

MsTL4/jTCbFxvWMxK0dkBE67pS8QSBF6bqL9EFH0CaeaJ9sUFk5G88rqlEnjlK6KdDjq

HcEEp0ffPnm9V/iVQi+w+Tb/YsOj1xDxjndK8L90oXLxr4hA61TcratfeKQujHJQweCr

IoJQ==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=3rxlZhEG3jDUmJhnVoCPXf22xUXi4WNjVlw4xNg4H1Q=;

fh=tUj5eRtgbiXNnLPG/Are/NI5VN1pVdM0WPWZiWFKDdI=;

b=EkAadjEElARWwMagNIkMmbdkezxgzdp3kqq8WOeqhQeCI1rrPSRfUWcGJWcOVS8uBU

xsDbgndw8hNC/Y/lKhVPHmPrPJxXgY+K2/44K4nSWaiNaPSHTE/dTx+eXAB+cMDsMLER

fyTEnNY8Fm8msLjLIe16G4QEagGI9iQVIgyd4n6Xa0cJj8Pmk5GKr1ZQBi1HO3jTcAot

/K+j/QGUjGOwk8WbBvWVUR46/wqQc/Ay0bI2ehUNddiu99qkoW8nM6TiEoxPAB/cfqM0

LBXPZGwieC0VB8urLvdtTBBkfr/J52oYLQSMbzbJAWREvJd52ExY0fDx/OW/5nRRsba3

Rm5w==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=QWWh2fq8;

arc=pass (i=1);

spf=pass (google.com: domain of davistmason@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=davistmason@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfotech.co.in

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id a640c23a62f3a-b9c3d003cdcsor223523166b.23.2026.04.03.20.36.22

for

(Google Transport Security);

Fri, 03 Apr 2026 20:36:22 -0700 (PDT)

Received-SPF: pass (google.com: domain of davistmason@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1775273782; cv=none;

d=google.com; s=arc-20240605;

b=KBrVbfT6qmfpiudt4ELb+KoDIDg1UrVLnjcesccgM32e9BFq1vG87QcL2KQD6QLp34

JaKHxa0WJLIqulesp40C5s1qFZEMf54pYuqjys+he7jW4XnLTaCADCjYS8JuOsfLYqjz

UNJeQ8iEtf/0biGKIeeLvBVNg4ZJWXGDRfIyvh1psA5tBJVQfe9LIMNe3FU0D5/WpY8Q

Uf9TF/kriiBRpjzR7xZJJxA22Tq5dO7nNOu+J5J0fIySaKU7ExQoYCbaFFSR+H+q6buO

06FYmZ+MDSa4SQmJNDMcOSJvFtzGysq5jckK+Xnaeksv6nno9Peu9cz84yrBRtFFZAJS

kq5Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=3rxlZhEG3jDUmJhnVoCPXf22xUXi4WNjVlw4xNg4H1Q=;

fh=tUj5eRtgbiXNnLPG/Are/NI5VN1pVdM0WPWZiWFKDdI=;

b=Awgv7eJCy7/R8OMcBmhOfMDRQG0BbIOpVJY7qYk71e/UXpyWMNFJykzS6Zb0vGtxdh

Anw1zPogDqjnWpZrx5kwyjonlwEvjVPP4LXI49WaQwAoGbm6XJLnnUZqG09B13zXA9Wi

vE2QSbcRqNthp+K+XK1jwvEskKz+crUUN/rg6z0Z9b39WQ0eKxaXK/C6WryZScfLXqLo

18aSO2Dp++a0Rkx1zkiPu2g4AFpv+j6pet28R7b7hZmfrX2wzShAPa6OmFJgJLZOxOkf

ZpzC8vmU3/JyqCUTQUTfaQMRTqiS2zJuKt6mdSG6akZ8axGSRhCrMivoZCUED6Y0fPNW

aNpA==;

darn=knitinfotech.co.in

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Forwarded-Encrypted: i=1; AJvYcCX/vHvjAdhU0auOa+e11SKxFpxs9uyOruueSJqJdVQgsNYWjdeI898DHUBjL+Bexa0nFp3UftmuKrhs9ck=@knitinfotech.co.in

X-Gm-Gg: AeBDievbpqHI0YM81qiW9RZwtcrqLxFszs1rO7AmxM185BXv4cGuYADsoytsdcPXauh

mDCMSb8ucbUXaXnJfGEBvFdVlHpqG0/rpwp8R2eeHTsNY2vs3Rz0OY3g3/wUOc8JTbnBLTiShoD

kx/umfZBEq6Us8R+9NsJSlsYimpR2VIlvH9QxN6S6KwRtGOFTD1LkC/5OPwFJ3lsHqBImdUWbLV

ePlJe3h3rV8oJFlf/DiA6CTpAwOoFlIHhgY42WwvzlXzBD8Caah7rrNz32u4qrjCKPO4xZ6gRfw

UfSVCJKyYT97ON42Stt5rcDhBcTMr18uMpwr8qwgMp36077wDaCmhPy/5KCLlRplR6V5PPm7ujL

VtUgTHk8=

X-Received: by 2002:a17:907:c996:b0:b94:21a8:f7d9 with SMTP id

a640c23a62f3a-b9c6799353amr163311166b.36.1775273782060; Fri, 03 Apr 2026

20:36:22 -0700 (PDT)

MIME-Version: 1.0

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Apr 2026 17:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8oP3-00000000LmN-09Nz

for dave@doctor.nl2k.ab.ca;

Fri, 03 Apr 2026 17:58:17 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Apr 2026 17:58:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp74-41.mmglsmd.net ([160.124.74.41]:50057)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8jUQ-000000002ZV-0czV

for root@nk.ca;

Fri, 03 Apr 2026 12:43:37 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ind.tce-trans.com;

i=@ind.tce-trans.com; q=dns/txt; s=umail; t=1775241760;

h=content-type : mime-version : message-id : reply-to :

subject : from : to : date : subject : from : date;

bh=LDAuK6FguzN7U7QkWijiLTdotC7Ieqn8BYLsNQ7cneY=;

b=Qk3RlRmH1JdyHIjOjeZSNQg1u2AiLKhu/hevlwmOlE7tAOXyoaU+8j3H

M6jIVZGOYhykIbZ7TRXEJzz77bu9g/m9+PQD8ggwKn0v02/uN/3bdl3y+G

mgQGrnwEfGdJJUAr42g+s+g7d4pBlO/TdahfM1KhTkA+F0Jl6RqTyF7Rk=

Received: from helo (unknown [127.0.0.1])

by smtp.ind.tce-trans.com (Postfix) with ESMTP id OhBXqKfZWMPG

for ; Sat, 04 Apr 2026 02:42:40 +0800

Content-Type: multipart/mixed; boundary="===============7084061030984121119=="

MIME-Version: 1.0

Message-Id: <20260404024240.37914-{8756:20260403231211-8756-51}-0044997@ind.tce-trans.com>

Reply-to: sales@tce-electronics.com

Subject: =?utf-8?q?Supply_inductor?=

From: David

To: Sir or Madam

Date: Sat, 04 Apr 2026 02:42:40 +0800

Mail-ID: 69cfd8f6e1382308b441f1ca

X-Spam_score: 14.3

X-Spam_score_int: 143

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir or Madam, How are you ? TCE Electronics is a professional

manufacturer of custom-designed inductor/toroidal choke for electrical equipment.





Content analysis details: (14.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.74.41 listed in dnsbl.ahbl.org]

[160.124.74.41 listed in dnsbl.ahbl.org]

[160.124.74.41 listed in dnsbl.ahbl.org]

[160.124.74.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.74.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.74.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.74.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.74.41 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.74.41 listed in will-spam-for-food.eu.org]

[160.124.74.41 listed in will-spam-for-food.eu.org]

[160.124.74.41 listed in will-spam-for-food.eu.org]

[160.124.74.41 listed in will-spam-for-food.eu.org]

[160.124.74.41 listed in will-spam-for-food.eu.org]

[160.124.74.41 listed in will-spam-for-food.eu.org]

[160.124.74.41 listed in will-spam-for-food.eu.org]

[160.124.74.41 listed in will-spam-for-food.eu.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: edm.chengmail.cn/113.10.156.149]

-0.0 SPF_PASS SPF: sender matches SPF record

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.4 SALES_REPLY Your parents named you sales?

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: count.marketing-jd.top (top)]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Supply_inductor?=





Dear Sir or Madam,



How are you ?



TCE Electronics is a professional manufacturer of custom-designed inductor/toroidal choke for electrical equipment.

Looking forward to receiving your kind inquiry soon.



Best regards

David Tang





Add: Floor 2, Bldg 10, 2nd Industrial Park, Guanlong Xili, Nanshan District, Shenzhen, Guangdong, China PC:518055

Tel: 86-755-86148041 Ext 801

Fax: 86-755-86148034

E-mail: sales@tce-electronics.com

Website: www.tce-electronics.com

























chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Fri, 03 Apr 2026 12:38:00 -0600

Received: from [160.124.75.229] (port=41575 helo=mta75-229.mmglsmd.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8jO0-000000002Hl-4BFV

for dave@nk.ca;

Fri, 03 Apr 2026 12:37:09 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ind.tce-trans.com;

i=@ind.tce-trans.com; q=dns/txt; s=umail; t=1775241361;

h=content-type : mime-version : message-id : reply-to :

subject : from : to : date : subject : from : date;

bh=1h/YSIul3HR1g87WXgGznMFpDHDUByyFkdCrd93pGWA=;

b=HSoPlrLpRFjW9uK80lFt2frIcvVVQOjSfYbNuvez4mpUiKYgK1LV8y9E

q9B3rKT8UCoQ32L4KWvcJpPc/BMuP4I3oWTXWjSWCdAWHQfosaM7liNC82

gHzKPxNVUrjQQN26MKyfWSfPWvJY2lZe/VN+qERKBgly3EOPQOrceUVmw=

Received: from helo (unknown [127.0.0.1])

by smtp.ind.tce-trans.com (Postfix) with ESMTP id lOsgfbDYpoAx

for ; Sat, 04 Apr 2026 02:34:30 +0800

Content-Type: multipart/mixed; boundary="===============7084061030984121119=="

MIME-Version: 1.0

Message-Id: <20260404023430.49220-{8756:20260403231211-8756-51}-0029391@ind.tce-trans.com>

Reply-to: sales@tce-electronics.com

Subject: =?utf-8?q?Supply_inductor?=

From: David

To: Sir or Madam

Date: Sat, 04 Apr 2026 02:34:30 +0800

Mail-ID: 69cfd8f6e1382308b441edfc

X-Spam_score: 15.5

X-Spam_score_int: 155

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir or Madam, How are you ? TCE Electronics is a professional

manufacturer of custom-designed inductor/toroidal choke for electrical equipment.





Content analysis details: (15.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.75.229 listed in dnsbl.ahbl.org]

[160.124.75.229 listed in dnsbl.ahbl.org]

[160.124.75.229 listed in dnsbl.ahbl.org]

[160.124.75.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.75.229 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.75.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.75.229 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.75.229 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.75.229 listed in will-spam-for-food.eu.org]

[160.124.75.229 listed in will-spam-for-food.eu.org]

[160.124.75.229 listed in will-spam-for-food.eu.org]

[160.124.75.229 listed in will-spam-for-food.eu.org]

[160.124.75.229 listed in will-spam-for-food.eu.org]

[160.124.75.229 listed in will-spam-for-food.eu.org]

[160.124.75.229 listed in will-spam-for-food.eu.org]

[160.124.75.229 listed in will-spam-for-food.eu.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: edm.chengmail.cn/113.10.156.149]

-0.0 SPF_PASS SPF: sender matches SPF record

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.4 SALES_REPLY Your parents named you sales?

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: count.marketing-jd.top (top)]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Supply_inductor?=



Dear Sir or Madam,



How are you ?



TCE Electronics is a professional manufacturer of custom-designed inductor/toroidal choke for electrical equipment.

Looking forward to receiving your kind inquiry soon.



Best regards

David Tang





Add: Floor 2, Bldg 10, 2nd Industrial Park, Guanlong Xili, Nanshan District, Shenzhen, Guangdong, China PC:518055

Tel: 86-755-86148041 Ext 801

Fax: 86-755-86148034

E-mail: sales@tce-electronics.com

Website: www.tce-electronics.com





















Nigerian spam from Google Gmail Part 2

Content analysis details: (23.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.46 listed in dnsbl.ahbl.org]

[209.85.128.46 listed in dnsbl.ahbl.org]

[209.85.128.46 listed in dnsbl.ahbl.org]

[209.85.128.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.46 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.46 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.46 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrmaqsoodahmed60(at)gmail.com]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.6 J_CHICKENPOX_61 BODY: 6alpha-pock-1alpha

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.46 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.46 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} REPLY URGENTLY



--000000000000b2aca7064e8bbfe9

Content-Type: text/plain; charset="UTF-8"



Dear Friend,I know this means of communication may not be morally right to

you as a person but I also have had a great thought about it and I have

come to this conclusion which I am about to share with you.



INTRODUCTION: I am Mr. Maqsood Ahmed a banker and in one way or the other

was hoping you will cooperate with me as a partner in a project of

transferring an abandoned fund of a late customer of the bank worth of

$18,000,000 (Eighteen Million Dollars US).



This will be disbursed or shared between the both of us in these

percentages, 55% for me and 45% for you. Contact me immediately if that is

alright for you so that we can enter in agreement before we start

processing for the transfer of the funds. If you are satisfied with this

proposal, please provide the below details for the Mutual Confidentiality

Agreement:



(1) Full Name and Address...

(2) Private telephone number...

(3) Your Age...

(4) Nationalities...

(5) Occupations..

(6) A scan copy of your identification,



I wait for your response so that we can commence on this transaction as

soon as possible.



Regards,

Mr. Maqsood Ahmed.



--000000000000b2aca7064e8bbfe9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





Dear Friend,I know this means of communication may=

not be morally right to you as a person but I also have had a great though=

t about it and I have come to this conclusion which I am about to share wit=

h you.
=C2=A0
INTRODUCTION: I am Mr. Maqsood Ahmed a banker and in on=

e way or the other was hoping you will cooperate with me as a partner in a =

project of transferring an abandoned fund of a late customer of the bank wo=

rth of $18,000,000 (Eighteen Million Dollars US).
=C2=A0
This will be=

disbursed or shared between the both of us in these percentages, 55% for m=

e and 45% for you. Contact me immediately if that is alright for you so tha=

t we can enter in agreement before we start processing for the transfer of =

the funds. If you are satisfied with this proposal, please provide the belo=

w details for the Mutual Confidentiality Agreement:
=C2=A0
(1) Full N=

ame and Address...
(2) Private telephone number...
(3) Your Age...
>(4) Nationalities...
(5) Occupations..
(6) A scan copy of your ident=

ification,
=C2=A0
I wait for your response so that we can commence on=

this transaction as soon as possible.

Regards,
Mr. Maqsood Ahmed=

.






--000000000000b2aca7064e8bbfe9--

Nigerian spam from Google Gmail Part 2

Content analysis details: (23.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.46 listed in dnsbl.ahbl.org]

[209.85.128.46 listed in dnsbl.ahbl.org]

[209.85.128.46 listed in dnsbl.ahbl.org]

[209.85.128.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.46 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.46 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.46 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

[209.85.128.46 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrmaqsoodahmed60(at)gmail.com]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.6 J_CHICKENPOX_61 BODY: 6alpha-pock-1alpha

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.46 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.46 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} REPLY URGENTLY



--000000000000b2aca7064e8bbfe9

Content-Type: text/plain; charset="UTF-8"



Dear Friend,I know this means of communication may not be morally right to

you as a person but I also have had a great thought about it and I have

come to this conclusion which I am about to share with you.



INTRODUCTION: I am Mr. Maqsood Ahmed a banker and in one way or the other

was hoping you will cooperate with me as a partner in a project of

transferring an abandoned fund of a late customer of the bank worth of

$18,000,000 (Eighteen Million Dollars US).



This will be disbursed or shared between the both of us in these

percentages, 55% for me and 45% for you. Contact me immediately if that is

alright for you so that we can enter in agreement before we start

processing for the transfer of the funds. If you are satisfied with this

proposal, please provide the below details for the Mutual Confidentiality

Agreement:



(1) Full Name and Address...

(2) Private telephone number...

(3) Your Age...

(4) Nationalities...

(5) Occupations..

(6) A scan copy of your identification,



I wait for your response so that we can commence on this transaction as

soon as possible.



Regards,

Mr. Maqsood Ahmed.



--000000000000b2aca7064e8bbfe9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





Dear Friend,I know this means of communication may=

not be morally right to you as a person but I also have had a great though=

t about it and I have come to this conclusion which I am about to share wit=

h you.
=C2=A0
INTRODUCTION: I am Mr. Maqsood Ahmed a banker and in on=

e way or the other was hoping you will cooperate with me as a partner in a =

project of transferring an abandoned fund of a late customer of the bank wo=

rth of $18,000,000 (Eighteen Million Dollars US).
=C2=A0
This will be=

disbursed or shared between the both of us in these percentages, 55% for m=

e and 45% for you. Contact me immediately if that is alright for you so tha=

t we can enter in agreement before we start processing for the transfer of =

the funds. If you are satisfied with this proposal, please provide the belo=

w details for the Mutual Confidentiality Agreement:
=C2=A0
(1) Full N=

ame and Address...
(2) Private telephone number...
(3) Your Age...
>(4) Nationalities...
(5) Occupations..
(6) A scan copy of your ident=

ification,
=C2=A0
I wait for your response so that we can commence on=

this transaction as soon as possible.

Regards,
Mr. Maqsood Ahmed=

.






--000000000000b2aca7064e8bbfe9--

Nigerian spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Apr 2026 06:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8dNf-00000000ACP-2TrQ

for dave@doctor.nl2k.ab.ca;

Fri, 03 Apr 2026 06:12:07 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Apr 2026 06:12:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f46.google.com ([209.85.128.46]:46568)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8bkE-00000000BzL-14a2

for root@mail.nl2k.ab.ca;

Fri, 03 Apr 2026 04:27:28 -0600

Received: by mail-wm1-f46.google.com with SMTP id 5b1f17b1804b1-48704db565eso18640775e9.1

for ; Fri, 03 Apr 2026 03:26:31 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1775211984; cv=none;

d=google.com; s=arc-20240605;

b=iW8JqfcXrKxQn6hTKbgQ5DZ5uYYLB7YS9LeGpyN4eKMRwAiupXualHaTTxrHVfNuX0

N4hwwff/87Yuoo60tti0bxfqbELOQNQr3Y19Obyx+TB4w+kmiITtwVBcFZhCNtViG9HH

OjZIZ0b1T0SpNnEo9H3YqoZzP1E0mQu3yKl3nfGcyB/uQIYmlU7lxf12aaKAOYgOJer3

JR7tAran+o8/aS5q5h5/Pc9EiGna2NAUwA4nn7FvnqbXAI2Vj4TmivWWhZ1kqdJrFEAP

cJNEVehPAfHhirXYgNmMyKciZs7uPOJH97FjrozDqrTQpUNCEP4VCEVymoEbXSYPmMz6

C0lw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=7HSleohCjNak48fN4kD53i8oatlsQBK5Ny6snMvVglk=;

fh=OsnooQFh6Vz0TbHfmwjeNSxYnax3kGKP3aI2C2dC4G0=;

b=LutPiLwhuID7fmoWOge6VV6M34ZTjSEJtuiN+37VlHOkhl6xkcsaJXJTVo35ls5bDO

8A2ZnNpCK54jIKYq37E+GtbHpsPaMyEpkUNtB9GhxyatiiVswuEDPZO6dBVNcRjAH/SD

OjJxgcJdV5Hm0NBeVbRzhD9KGgYO1/odDCsViqouieZTqCHhzpDD9NmfY4KNE54LhuSp

wL3QlJfb8PebaKhi+zjeZL/gT4Ois00RZzubEZ+QEEvBgBoDd+Bh3F/Yczg5OgUx/Zoy

tzWgOdeqB3klKLhJPEcywhqLmp1VR68HiiBuSmANSpLzP0NOCxLJnEpbsKia1BtIw5sO

+MUA==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1775211984; x=1775816784; darn=mail.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=7HSleohCjNak48fN4kD53i8oatlsQBK5Ny6snMvVglk=;

b=P75eJdoLxhvugALWAvdFWMSZMx5mcczPuWFy/zsqYoS806X76jY1OjBaW2meCy7AFI

Su2cCL/04VCbXWFJH5tfmQc4AHAgBTDeJ7vGXmj88QU2g6SzUKPG1InSgdf2ywuZ21Kq

/3LD/hIg/KR6e9aZwgyKGZn0gAGZoKZJiuy33W4PB3Ef12J6OBT3fiPNPWI8w5RFrBkP

sSCubg0lz8tIOV1ozsMQnjQSVdhFWoJe9VjBWT1bF3HIaRLkoaRZs5HyoyEHHz7Y/M+w

IrdTFVddW4z58lNUsRhhsdNxfZh9r59rcZjwEnn/NsH3lmufGxiOOrdNPwryE6MoTSjD

eK7w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1775211984; x=1775816784;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=7HSleohCjNak48fN4kD53i8oatlsQBK5Ny6snMvVglk=;

b=EaNyj/cmnuaXoZ5Cu30WuEhzqUqQFoU6oyMR+xJ/LVYjhhpwMpF07zDiEAR8El1Aw8

QXaul23AVd6IJkWmMVV42J+82HkIB/7hSiWf1BrBPVgwo1U8wXfNZfhwM3XAlK/UuK6F

c+DIHrJOwd7dGfHDu4j4MVA1BVVi8xbiMPpBnMqUMfXTpXRkPDnRLWPyvZj1XW/ZhBOO

NZKE5P5lwwpTE0ugke92nlyswV7o52m70A61rytqACwqE5bbJScFZIJ41O1LjrQXPB2o

1VWNnTs5bCMsZ5V1d9oH0hIy1zXVcRI0rLWgE1ujsLUp2CyfMU4Soeq8liGlaZqZh5q4

Q+ng==

X-Forwarded-Encrypted: i=1; AJvYcCW1vbsuqIMA2gdYwzlzzYe25KcAghM/mzw3NttSXm8h00IrFg3W7ea+1j9Ngro3WjjdjR1F@mail.nl2k.ab.ca

X-Gm-Message-State: AOJu0YzdDerL4siM8DI0cXqX6CAQZtZTwnzyGHatMKzN0VwEUbuloqT+

xAikqLAA/y9vBibTgzdbsfY/32zdn5EqkSZwG3d20QsKCsP1GY0rbahQWrkB7T4OC6Tk1YQjFKB

ey4bGMTnQZITVRQ37m/nfQc84DhXY68Y=

X-Gm-Gg: ATEYQzxU1NUIpr2XgHaS/GSgc1FoOSjpiD5QNm9M8NMRdm/qR6oH4ZAv/zmPlq6rx6h

HS6KykmSvjBy0MDj49Vql3mX2qKv06LDY6fLd6joLq4gEHshttawAD33JJcTtEF4kbsyN7yl2dU

S/rBA0kAthLxz/fo1e1BN5Gp3cO37wvBNzp+xI2p7r+xbxl6y7tUTCY54vhBZhoX3AMLGO1L3hK

Y2owCtF+YsrCaWlbcU5QsBkzlnkADMRahrhPZffs1UYoSXbp9amETE1RdAwx0mtgPY8GYcrgxVh

+psYNzRQgr/2aaY/JbnGBx3xjTXuDLsQiEFNr8R/tSg=

X-Received: by 2002:a05:600c:310a:b0:483:709e:f238 with SMTP id

5b1f17b1804b1-488997ee02cmr37821885e9.29.1775211983841; Fri, 03 Apr 2026

03:26:23 -0700 (PDT)

MIME-Version: 1.0

From: "Mr. Maqsood Ahmed"

Date: Fri, 3 Apr 2026 06:24:09 -0700

X-Gm-Features: AQROBzCXCB5HEZQl3PRxVccLpWDdMWf15Oc1gRnhSMlpUibY7qasLBd9f0daYGo

Message-ID:

Subject: REPLY URGENTLY

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b2aca7064e8bbfe9"

Bcc: root@mail.nl2k.ab.ca

X-Spam_score: 23.5

X-Spam_score_int: 235

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend,I know this means of communication may not be

morally right to you as a person but I also have had a great thought about

it and I have come to this conclusion which I am about to share wit [...]

Foreign language spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 03 Apr 2026 06:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8dMz-00000000AAx-1Sim

for dave@doctor.nl2k.ab.ca;

Fri, 03 Apr 2026 06:11:25 -0600

Resent-From: The Doctor

Resent-Date: Fri, 3 Apr 2026 06:11:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazon11023124.outbound.protection.outlook.com ([40.107.44.124]:11738 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

id 1w8bTE-00000000BNE-0aov

for root@nk.ca;

Fri, 03 Apr 2026 04:09:54 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=nCUkpXzD4kf/NiIaJYeVB7Bc3eNC6NDm0iA8Qu9KVOdUbTQkWytfxATxTgdZjJbkHgFqvHQuVE8lf2itbvxzIN7FT7HppjiAQ1yb6ixpo5sWsTgOtEnry7CsAxLi8QIqTSoTAfQMo5JYQRCY5o2H+4AC3fWw239goWlexqcuLl0JXWQB1cIl33bUzFSX5jD+BFXMfkJMU1G5Z8JalVegcvvafvBYYEtLdhh2Qc3TPnSfxoSAs0FpGId9j4Cb00dsEcK//CJPM2H/05WTyj6DTfcYJ4/aL40cWxwx1mROoW2zThEGa9r1HBob4a6MYKwU1KcqpbuxdApP0iH6fg1VKA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=vi3rI8PXCkDx/MNIK9wb/rFtP83uUsj9yTEgrOMa2l8=;

b=D5CPKYniVOXY6CCjIT79pAwNGfi8poqSDupUyvz0fEid2oEFHQtUpx6rCd8BQeamsAr+yr4Lz1H+GJZmDQB66RUI6eM7GeKjnbhlUeeeeJFNU1rE44gNbbOyrvo5dBzCrvBIbNy/hh3QrNxo/4gwwoRrHAehQsCDOs/2nqke81zR9Kp8ZOwEsojBU/JoQmEg+jzdnBkTO+IfXnqswXG3LzImxPZbI0m2L1Cq8V1btu/Y4F8IZmHzi1FLppVaAnfKVb+lQLa8lV/PLxhbx0TN0Nqg9dxTXFcUbCMQvF6/iBWUQd8q67npql5I750hMCQUmw1v+PP2P9qhOWysTBRnMA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=pass

action=none header.from=0755.im; dkim=pass header.d=0755.im; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=st8robotacid.onmicrosoft.com; s=selector1-st8robotacid-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=vi3rI8PXCkDx/MNIK9wb/rFtP83uUsj9yTEgrOMa2l8=;

b=jVxot9AgtuRYJ+dr9x2yq31W+6MAaVYpA0Qx6gDlEDJxIyrIf4ZeTdj2GHPrFS68fImVvmqJMJBc46fVFPbQYrzlqo/0kDTrRA2Zhsb/YDf31GOPCc0TBVWpfMG8p4/e7wY8GxMGAGRy3KtgYWoW4cm0nKR1FuooIEKfpEMhMQI=

Received: from SmtpServer.Submit by SEZPR01MB5612 with Microsoft SMTP Server

id 15.20.9769.18; Fri, 3 Apr 2026 10:08:48 +0000

MIME-Version: 1.0

To:

Sender: Microsoft Outlook

From: Microsoft Outlook

Message-ID: <7b880f6a-5f7b-4da9-9e91-c488d6dd559a@EtrNotification>

Date: Fri, 3 Apr 2026 10:08:48 +0000

Subject: Notification: You're invited to share this calendar

X-MS-Exchange-Transport-Rules-Notification: 1

X-MS-Exchange-Transport-Rules-Loop: 1

Content-Type: multipart/alternative;

boundary="_09ecbc5e-350e-40db-8f6f-25cf71f9d802_"

X-MS-Exchange-Parent-Message-Id:



Auto-Submitted: auto-generated

X-MS-Exchange-Generated-Message-Source: Transport Rule Agent

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SEZPR01MB5612:EE_

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|376014|366016|786006|61400799027|18002099003|56012099003|16102099003|8096899003;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:zh-cn;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(786006)(61400799027)(18002099003)(56012099003)(16102099003)(8096899003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

PCJP6AUPOLgzPYBDZPvqM+Exlvj1AaxCP/9roA9ZbGFfvlSooUSQsT6f5OeVydFDXGf9LUIwifRYSp0uaZdSQi4+GRnZwnJTntB7Ghg6uR9izr54Q298n14xsMO0yqkWm9FvoD4+KzsrbgRo9OewiuP+8fUU1V133B8bAs3Y3XVq6deM/jmbNkeFsvLWFORbQqGUo+JwGepwz4sa/Ys82F5u6zeGLT9ivqwS2VNF/YRL4qMeiSEdsK7VQbla8dq8KxclD9/utH3rxsXbLesUbeZZyXJ22h2qnJEvZqkVo+tZxd6/+CI+dIq6oPT5oDYe3qpxX3TqSol7APr1S4zsEg==

X-OriginatorOrg: 0755.im

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Apr 2026 10:08:48.0698 (UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id:

4e37dbd7-3ab5-4423-2782-08de9168ff66

X-MS-Exchange-CrossTenant-AuthSource:

SEZPR01MB5612.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB5612

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 全国收单RMB兑外汇 咨询微信:FT255355 全国收单RMB兑外汇

咨询微信:FT255355



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.107.44.124 listed in dnsbl.ahbl.org]

[40.107.44.124 listed in dnsbl.ahbl.org]

[40.107.44.124 listed in dnsbl.ahbl.org]

[40.107.44.124 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.107.44.124 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.107.44.124 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.107.44.124 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.107.44.124 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[40.107.44.124 listed in will-spam-for-food.eu.org]

[40.107.44.124 listed in will-spam-for-food.eu.org]

[40.107.44.124 listed in will-spam-for-food.eu.org]

[40.107.44.124 listed in will-spam-for-food.eu.org]

[40.107.44.124 listed in will-spam-for-food.eu.org]

[40.107.44.124 listed in will-spam-for-food.eu.org]

[40.107.44.124 listed in will-spam-for-food.eu.org]

[40.107.44.124 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FORGED_SPF_HELO No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.44.124 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.44.124 listed in list.dnswl.org]

Subject: {SPAM?} Notification: You're invited to share this calendar



--_09ecbc5e-350e-40db-8f6f-25cf71f9d802_

Content-Type: text/plain; charset="gb2312"

Content-Transfer-Encoding: quoted-printable



=C8=AB=B9=FA=CA=D5=B5=A5RMB=B6=D2=CD=E2=BB=E3 =D7=C9=D1=AF=CE=A2=D0=C5=A3=

=BAFT255355



--_09ecbc5e-350e-40db-8f6f-25cf71f9d802_

Content-Type: text/html; charset="gb2312"

Content-Transfer-Encoding: quoted-printable







=C8=AB=B9=FA=CA=D5=B5=A5RMB=B6=D2=CD=E2=BB=E3 =D7=C9=D1=AF=CE=A2=D0=C5=A3=

=BAFT255355







--_09ecbc5e-350e-40db-8f6f-25cf71f9d802_--

Forgeign Language spam Part 2

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: jphumanchkpoint.s3.eu-west-1.amazonaws.com]

[URI: wouzee.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: wouzee.com]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.158.54.132 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.158.54.132 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[194.114.136.43 listed in sbl-xbl.spamhaus.org]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.158.54.132 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[51.158.54.132 listed in bl.score.senderscore.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?B?44CQ6YeN6KaB44CR44Oh44O844Or6YWN5L+h44Ko?=

=?UTF-8?B?44Op44O844Gu44GU5aCx5ZGK77yIN+S7tuWksQ==?= =?UTF-8?B?5pWX77yJ?=











=E3=83=A1=E3=83=BC=E3=83=AB=E9=85=8D=E4=BF=A1=E3=82=A8=E3=83=A9=<br /><br /> =E3=83=BC=E3=81=AE=E3=81=94=E5=A0=B1=E5=91=8A













Automated Mail =

Delivery Report









Doctor







=E3=83=A1=E3=83=BC=E3=83=AB=E9=85=8D=

=E4=BF=A1=E3=82=A8=E3=83=A9=E3=83=BC=E3=81=AE=E3=81=94=E5=A0=B1=E5=91=8A
2>





=E4=BB=A5=E4=B8=8B=E3=81=AE=

=E3=83=A1=E3=83=BC=E3=83=AB=E3=81=AF=E3=80=81=E8=A4=87=E6=95=B0=E3=81=AE=

=E5=8F=97=E4=BF=A1=E8=80=85=E3=81=AB=E5=AF=BE=E3=81=97=E3=81=A6=E6=AD=A3=

=E5=B8=B8=E3=81=AB=E9=85=8D=E4=BF=A1=E3=81=95=E3=82=8C=E3=81=BE=E3=81=9B=

=E3=82=93=E3=81=A7=E3=81=97=E3=81=9F=E3=80=82































=E9=80=81=E4=BF=A1=E7=B5=90=

=E6=9E=9C
=E4=B8=80=E9=83=A8=E5=A4=B1=E6=95=97
=E5=A4=B1=

=E6=95=97=E4=BB=B6=E6=95=B0
7 =E4=BB=B6
=E4=B8=BB=

=E3=81=AA=E8=A6=81=E5=9B=A0
=E5=AE=9B=E5=85=88=

=E5=81=B4=E3=83=A1=E3=83=BC=E3=83=AB=E3=83=9C=E3=83=83=E3=82=AF=E3=82=B9=

=E5=88=B6=E9=99=90 / =E3=83=9D=E3=83=AA=E3=82=B7=E3=83=BC=E6=8B=92=E5=90=A6=













=E6=9C=AC=E3=83=A1=E3=83=BC=E3=83=AB=E3=81=AF=E9=85=8D=E4=BF=A1=

=E7=8A=B6=E6=B3=81=E3=82=92=E9=80=9A=E7=9F=A5=E3=81=99=E3=82=8B=E7=9B=AE=

=E7=9A=84=E3=81=A7=E8=87=AA=E5=8B=95=E9=80=81=E4=BF=A1=E3=81=95=E3=82=8C=

=E3=81=A6=E3=81=84=E3=81=BE=E3=81=99=E3=80=82









Forgeign Language spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Apr 2026 15:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8Py8-00000000Pj4-0wc8

for dave@doctor.nl2k.ab.ca;

Thu, 02 Apr 2026 15:52:52 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Apr 2026 15:52:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.wouzee.com ([51.158.54.132]:58004)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8Pvd-00000000PUc-3SQr

for doctor@doctor.nl2k.ab.ca;

Thu, 02 Apr 2026 15:50:25 -0600

Received: from mail.wouzee.com (localhost [127.0.0.1])

by mail.wouzee.com (Postfix) with ESMTP id 4fmwVG0FbzzsWpt

for ; Thu, 2 Apr 2026 21:49:10 +0000 (UTC)

Authentication-Results: mail.wouzee.com (amavisd-new);

dkim=pass (2048-bit key) reason="pass (just generated, assumed good)"

header.d=wouzee.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wouzee.com; h=

content-type:mime-version:date:content-transfer-encoding

:message-id:subject:to:from; s=dkim; t=1775166549; x=1777758550;

bh=POxCu1UTgmkH/XvGUilvETyFm9dJL/v46OkEWP8Ptpo=; b=OjavRcPXSyyc

tMeavdoYAG3cNuU5PegvyhPVVvyZfAHQb8Z81c97mo0vNJQCUlFB4BWYbgftUEVj

LqRHEIzqwsjKP4kkKrUdEF0j3LpU89hR/ziHaeXZPUXT1FJhnrZbniNXRWC6PUXP

VxtWL06zwPi44hZjG1GMMkIzNEqtwLSw9UexgM+yuWKl/YP8oTEoVps9Ry8e/OSf

xzmq8ek7ZxQqx2+hn6iuMHft8Dg1B51hrOZac6WC+6PsnvkhqwA2CI6r2g3d1Axc

KhjtkrEF4UYAuPok4rjlfGsHPnsXH4jwb93tZW5nfZsZCb0RCOOqQKIQg1X3wObZ

4qpjPY+5hA==

X-Virus-Scanned: Debian amavisd-new at mail.wouzee.com

Received: from mail.wouzee.com ([127.0.0.1])

by mail.wouzee.com (mail.wouzee.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id N_mGfGhzFfPr for ;

Thu, 2 Apr 2026 21:49:09 +0000 (UTC)

Received: from [127.0.0.1] (unknown [194.114.136.43])

by mail.wouzee.com (Postfix) with ESMTPSA id 4fmwVD6DbwzsVLW

for ; Thu, 2 Apr 2026 21:49:08 +0000 (UTC)

From: =?UTF-8?B?RG9jdG9yIOODoeODvOODq+mFjeS/oeOCt+OCuQ==?=

=?UTF-8?B?44OG44Og?=

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?44CQ6YeN6KaB44CR44Oh44O844Or6YWN5L+h44Ko?=

=?UTF-8?B?44Op44O844Gu44GU5aCx5ZGK77yIN+S7tuWksQ==?= =?UTF-8?B?5pWX77yJ?=

Message-ID: <8ef25980-6b4c-0d90-6c85-18e2b907c2cf@donationv.com>

Content-Transfer-Encoding: quoted-printable

Date: Thu, 02 Apr 2026 21:49:04 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ãƒ¡ãƒ¼ãƒ«é…ä¿¡ã‚¨ãƒ©ãƒ¼ã®ã”å ±å‘Š Automated Mail Delivery

Report



Content analysis details: (12.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

[51.158.54.132 listed in dnsbl.ahbl.org]

[51.158.54.132 listed in dnsbl.ahbl.org]

[51.158.54.132 listed in dnsbl.ahbl.org]

[194.114.136.43 listed in dnsbl.ahbl.org]

[194.114.136.43 listed in dnsbl.ahbl.org]

[194.114.136.43 listed in dnsbl.ahbl.org]

[194.114.136.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.158.54.132 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[194.114.136.43 listed in will-spam-for-food.eu.org]

[194.114.136.43 listed in will-spam-for-food.eu.org]

[194.114.136.43 listed in will-spam-for-food.eu.org]

[194.114.136.43 listed in will-spam-for-food.eu.org]

[194.114.136.43 listed in will-spam-for-food.eu.org]

[194.114.136.43 listed in will-spam-for-food.eu.org]

[194.114.136.43 listed in will-spam-for-food.eu.org]

[194.114.136.43 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

[51.158.54.132 listed in will-spam-for-food.eu.org]

Urgency spam Part 3

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrmaqsoodahmed60(at)gmail.com]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.6 J_CHICKENPOX_61 BODY: 6alpha-pock-1alpha

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.187 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.187 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.187 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.187 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_MONEY_PERCENT X% of a lot of money for you

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.187 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.187 listed in bl.score.senderscore.com]

Subject: {SPAM?} REPLY URGENTLY



--00000000000033dd61064e7b6145

Content-Type: text/plain; charset="UTF-8"



Dear Friend,I know this means of communication may not be morally right to

you as a person but I also have had a great thought about it and I have

come to this conclusion which I am about to share with you.



INTRODUCTION: I am Mr. Maqsood Ahmed a banker and in one way or the other

was hoping you will cooperate with me as a partner in a project of

transferring an abandoned fund of a late customer of the bank worth of

$18,000,000 (Eighteen Million Dollars US).



This will be disbursed or shared between the both of us in these

percentages, 55% for me and 45% for you. Contact me immediately if that is

alright for you so that we can enter in agreement before we start

processing for the transfer of the funds. If you are satisfied with this

proposal, please provide the below details for the Mutual Confidentiality

Agreement:



(1) Full Name and Address...

(2) Private telephone number...

(3) Your Age...

(4) Nationalities...

(5) Occupations..

(6) A scan copy of your identification,



I wait for your response so that we can commence on this transaction as

soon as possible.



Regards,

Mr. Maqsood Ahmed.



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion, visit https://groups.google.com/d/msgid/dece15-912025586/CA%2BU7FrBD6j7FpPqv8f-X1ARxyYVd8ZCTnN31qEgwy3U4PhQE3Q%40mail.gmail.com.



--00000000000033dd61064e7b6145

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




Dear Friend,I know this means of communication may not=

be morally right to you as a person but I also have had a great thought ab=

out it and I have come to this conclusion which I am about to share with yo=

u.
=C2=A0
INTRODUCTION: I am Mr. Maqsood Ahmed a banker and in one wa=

y or the other was hoping you will cooperate with me as a partner in a proj=

ect of transferring an abandoned fund of a late customer of the bank worth =

of $18,000,000 (Eighteen Million Dollars US).
=C2=A0
This will be dis=

bursed or shared between the both of us in these percentages, 55% for me an=

d 45% for you. Contact me immediately if that is alright for you so that we=

can enter in agreement before we start processing for the transfer of the =

funds. If you are satisfied with this proposal, please provide the below de=

tails for the Mutual Confidentiality Agreement:
=C2=A0
(1) Full Name =

and Address...
(2) Private telephone number...
(3) Your Age...
(4)=

Nationalities...
(5) Occupations..
(6) A scan copy of your identific=

ation,
=C2=A0
I wait for your response so that we can commence on thi=

s transaction as soon as possible.

Regards,
Mr. Maqsood Ahmed.
>









--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com
.


To view this discussion, visit
/dece15-912025586/CA%2BU7FrBD6j7FpPqv8f-X1ARxyYVd8ZCTnN31qEgwy3U4PhQE3Q%40m=

ail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google=

.com/d/msgid/dece15-912025586/CA%2BU7FrBD6j7FpPqv8f-X1ARxyYVd8ZCTnN31qEgwy3=

U4PhQE3Q%40mail.gmail.com
.




--00000000000033dd61064e7b6145--

Loan Phishing

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Apr 2026 15:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8Pxn-00000000Phz-3VOH

for dave@doctor.nl2k.ab.ca;

Thu, 02 Apr 2026 15:52:31 -0600

Resent-From: The Doctor

Resent-Date: Thu, 2 Apr 2026 15:52:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from host1.ugopogo.com ([67.225.191.7]:48972)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w8Ofu-00000000MGY-428M

for sales@nk.ca;

Thu, 02 Apr 2026 14:30:07 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=canam88.com

; s=default; h=Content-Type:MIME-Version:Message-ID:Date:Subject:To:From:

Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=b4Kd/igK7WugPICorkZyz+043/6uABARwlZ4qLpUp/s=; b=oF94+vVdQmKF9d4ZBt5ks1Mt3y

0CHCHhCyR8qoSqyxHfFXfslFhPm8776ys32p02k/PZO6tllttUJED8LVR6918KOeOL7Teuny6kha9

rpOVpBujAgyd9iobNeyRu74uNLzUPA4//sb5CAZFfjAdFkdx3R7OCv5bxC1HfgM3jHYv6p/xwM3Cw

N5tt3AXn3livj8R9QdrIDL1V//Z9SE60y6HK4s6k/3iwVH4LCkiGLju5VKtdEXGU2dr9l2Upf1Ix5

0JSRxJffTAQow9Wu7WWvLlqQaw158rhW+N1HsqCtyPgVfuU60eFTYo9pM5h9BsPdEL3fzCkUXTqp/

380dILXQ==;

Received: from [180.93.238.58] (port=56683)

by host1.ugopogo.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96.2)

(envelope-from )

id 1w8Of6-000QZf-2y

for sales@nk.ca;

Thu, 02 Apr 2026 16:29:06 -0400

From: "NexusLend"

To: sales@nk.ca

Subject: =?UTF-8?B?QnVzaW5lc3MgR3Jvd3RoIFNvbHV0aW9uIOKAkyBFc3RpbWF0ZWQgUGVyc29uYWwgTG9hbjogJDgwMy4wMA==?=

Date: 2 Apr 2026 14:25:08 -0600

Message-ID: <20260402142508.70CE307BCCB4ED34@canam88.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0012_C3A9FDF0.B1772057"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - host1.ugopogo.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - canam88.com

X-Get-Message-Sender-Via: host1.ugopogo.com: authenticated_id: dana@canam88.com

X-Authenticated-Sender: host1.ugopogo.com: dana@canam88.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Valued Client, Are you looking to expand your business

while preserving your personal savings? We have a solution designed to support

your goals. We are pleased to offer a personal loan tailored to help cover

expenses and provide working capital for your business growth. This crypto-based

loan requires no collateral, offering you both flexibili [...]



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[67.225.191.7 listed in dnsbl.ahbl.org]

[67.225.191.7 listed in dnsbl.ahbl.org]

[67.225.191.7 listed in dnsbl.ahbl.org]

[67.225.191.7 listed in dnsbl.ahbl.org]

[180.93.238.58 listed in dnsbl.ahbl.org]

[180.93.238.58 listed in dnsbl.ahbl.org]

[180.93.238.58 listed in dnsbl.ahbl.org]

[180.93.238.58 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[67.225.191.7 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[67.225.191.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[67.225.191.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[67.225.191.7 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[180.93.238.58 listed in will-spam-for-food.eu.org]

[180.93.238.58 listed in will-spam-for-food.eu.org]

[180.93.238.58 listed in will-spam-for-food.eu.org]

[180.93.238.58 listed in will-spam-for-food.eu.org]

[180.93.238.58 listed in will-spam-for-food.eu.org]

[180.93.238.58 listed in will-spam-for-food.eu.org]

[180.93.238.58 listed in will-spam-for-food.eu.org]

[180.93.238.58 listed in will-spam-for-food.eu.org]

[67.225.191.7 listed in will-spam-for-food.eu.org]

[67.225.191.7 listed in will-spam-for-food.eu.org]

[67.225.191.7 listed in will-spam-for-food.eu.org]

[67.225.191.7 listed in will-spam-for-food.eu.org]

[67.225.191.7 listed in will-spam-for-food.eu.org]

[67.225.191.7 listed in will-spam-for-food.eu.org]

[67.225.191.7 listed in will-spam-for-food.eu.org]

[67.225.191.7 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?B?QnVzaW5lc3MgR3Jvd3RoIFNvbHV0aW9uIOKAkyBFc3RpbWF0ZWQgUGVyc29uYWwgTG9hbjogJDgwMy4wMA==?=





Need funds for personal expenses or business growth?

We have a solution that lets you borrow without touching your savings. Secure, transparent, and built for the future of finance.



✓ No-collateral, crypto-based loans smart contracts

✓ ✅ No late penalties — real flexibility, no hidden fees

✓ ✅ Flexible repayment — adapt to your cash flow

✓ ✅ Your savings left intact — grow your wealth while you borrow


0.6 J_CHICKENPOX_61 BODY: 6alpha-pock-1alpha

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.190 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_MONEY_PERCENT X% of a lot of money for you

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} REPLY URGENTLY



--00000000000033dd61064e7b6145

Content-Type: text/plain; charset="UTF-8"



Dear Friend,I know this means of communication may not be morally right to

you as a person but I also have had a great thought about it and I have

come to this conclusion which I am about to share with you.



INTRODUCTION: I am Mr. Maqsood Ahmed a banker and in one way or the other

was hoping you will cooperate with me as a partner in a project of

transferring an abandoned fund of a late customer of the bank worth of

$18,000,000 (Eighteen Million Dollars US).



This will be disbursed or shared between the both of us in these

percentages, 55% for me and 45% for you. Contact me immediately if that is

alright for you so that we can enter in agreement before we start

processing for the transfer of the funds. If you are satisfied with this

proposal, please provide the below details for the Mutual Confidentiality

Agreement:



(1) Full Name and Address...

(2) Private telephone number...

(3) Your Age...

(4) Nationalities...

(5) Occupations..

(6) A scan copy of your identification,



I wait for your response so that we can commence on this transaction as

soon as possible.



Regards,

Mr. Maqsood Ahmed.



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion, visit https://groups.google.com/d/msgid/dece15-912025586/CA%2BU7FrBD6j7FpPqv8f-X1ARxyYVd8ZCTnN31qEgwy3U4PhQE3Q%40mail.gmail.com.



--00000000000033dd61064e7b6145

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




Dear Friend,I know this means of communication may not=

be morally right to you as a person but I also have had a great thought ab=

out it and I have come to this conclusion which I am about to share with yo=

u.
=C2=A0
INTRODUCTION: I am Mr. Maqsood Ahmed a banker and in one wa=

y or the other was hoping you will cooperate with me as a partner in a proj=

ect of transferring an abandoned fund of a late customer of the bank worth =

of $18,000,000 (Eighteen Million Dollars US).
=C2=A0
This will be dis=

bursed or shared between the both of us in these percentages, 55% for me an=

d 45% for you. Contact me immediately if that is alright for you so that we=

can enter in agreement before we start processing for the transfer of the =

funds. If you are satisfied with this proposal, please provide the below de=

tails for the Mutual Confidentiality Agreement:
=C2=A0
(1) Full Name =

and Address...
(2) Private telephone number...
(3) Your Age...
(4)=

Nationalities...
(5) Occupations..
(6) A scan copy of your identific=

ation,
=C2=A0
I wait for your response so that we can commence on thi=

s transaction as soon as possible.

Regards,
Mr. Maqsood Ahmed.
>









--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to
de=

ce15-912025586+unsubscribe@googlegroups.com
.


To view this discussion, visit
/dece15-912025586/CA%2BU7FrBD6j7FpPqv8f-X1ARxyYVd8ZCTnN31qEgwy3U4PhQE3Q%40m=

ail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google=

.com/d/msgid/dece15-912025586/CA%2BU7FrBD6j7FpPqv8f-X1ARxyYVd8ZCTnN31qEgwy3=

U4PhQE3Q%40mail.gmail.com
.




--00000000000033dd61064e7b6145--

Urgency spam from google Gmail Part 2

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=OLqS9pAA;

arc=pass (i=1);

spf=pass (google.com: domain of fertweei032@gmail.com designates 2607:f8b0:4864:20::a2c as permitted sender) smtp.mailfrom=fertweei032@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Received: from mail-vk1-xa2c.google.com (mail-vk1-xa2c.google.com. [2607:f8b0:4864:20::a2c])

by gmr-mx.google.com with ESMTPS id 956f58d0204a3-65040cd8401si52738d50.3.2026.04.02.07.54.39

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Thu, 02 Apr 2026 07:54:39 -0700 (PDT)

Received-SPF: pass (google.com: domain of fertweei032@gmail.com designates 2607:f8b0:4864:20::a2c as permitted sender) client-ip=2607:f8b0:4864:20::a2c;

Received: by mail-vk1-xa2c.google.com with SMTP id 71dfb90a1353d-56d933b555cso406337e0c.0

for ; Thu, 02 Apr 2026 07:54:39 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1775141679; cv=none;

d=google.com; s=arc-20240605;

b=AXzbbwpKMxtIQ8snN+atLGfo0JT5/ecz4tTmlYL2cArxXZaLgnEIM3lyA9UhEKNDrx

XHmi1YXZfZmuXJyJFiKLkHWrUEAKnfHb0hflQtqi0aSYvKI3cAvcOOpMwRYl1rxQFEqb

IQA0fHu9s+wYJhNpUrjFN79yvv669nJuGRq3jF1LieU1G8rObcM10WI98bLvBW9RjcB5

nU/9CR8w6rRxHop6+yY8rgpKi6Qf4QemAYiRlxBWzIYQurswVvZYx6ZgXcTFcx1pSDkb

spfZu4XwZiwzE19lrRs9NeP6n1D4uArIGGwEH/iIlgn520EcCt4VwLRm33EsZW9RkMjJ

0tbw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=K3Pfh7CcSS6dMuF6esOdtIw/4sgBD6Xfcphv4ssyZfg=;

fh=0CDKmnRwW5OoAzVa2Glq5a7zJgZzatnxwmzN9UujUXA=;

b=hmQsjhwQq1KMi64EkA2QZ86AXUlb6Lp0BKSyuXg70uAnfZMljnjjSZGtHnQz2AJj/R

yu2UiTMG2keemSmUhmYhzQDdCvOS41+xMq+UAw7KXYHr3RZIY2PDRl4NGtiGmPdTDggc

52/ed8GZ+yo0/TQBpwfs4EjzfJ9cfXcjptmvcy4ulfYJiXft2XjivKCjdxDWplt4OlmB

MWh4vwG9o5vyNFTzhPEEkU5qM2e5MqnElFowG0h+5C25rHYvc81v47kO/WOcN0S8YJu+

+rrr5VKkSS8/EItU+Q6zMrPhGprkIM79YUt+Tah3zSPKYpDX8NuFY/cZblJhvemCuNcp

t8Eg==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Forwarded-Encrypted: i=1; AJvYcCUHvG/BHgCmsrQJ4oBEHCHHwox7NPy6r9GauYA/uDSkpiGZ6RkdDNhBn43vWFoTaLMphtHkGRy6n9AHxw98iqvU@googlegroups.com

X-Gm-Gg: ATEYQzy0bUD/A/saeR++9VvNjoesPkEfwkiSpWBreizcT+0lD67gU0Hn1DsbFEyoTQ2

YrN38xuKafHRC8jDeDjW/TfJCy2UOrKERxAyNgI4Yna9RAVI0PdghprcR9VMIi2eDOQJEHbXT4R

XOFaMhV916bYVYmB9C2srZR/YRB2Elik+0/61qIL19ODxPYkErC2tKP3LmRiJko9l1644zsubvJ

vlw+8WRZkVpJUnGnlbfGksco1BVI+KovmgKkdt89CWUZHk4R+yH0j61eUntN/BHh6RF2HZk+4na

rg8ktQ57xunyvrh20NaH8213YIcEysNorOl1VXYbrSDM2Q==

X-Received: by 2002:a05:6102:b14:b0:602:9b21:eee7 with SMTP id

ada2fe7eead31-605682b9af3mr3216709137.35.1775141678995; Thu, 02 Apr 2026

07:54:38 -0700 (PDT)

MIME-Version: 1.0

From: "Mr. Maqsood Ahmed"

Date: Thu, 2 Apr 2026 18:52:39 -0700

X-Gm-Features: AQROBzA8NbtTDx1A98OMnZ2xL88VnZYJekP_th4vg0fWNLYowkpt0V_Bg3WlN-4

Message-ID:

Subject: REPLY URGENTLY

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000033dd61064e7b6145"

Bcc: dece15-912025586@googlegroups.com

X-Original-Sender: mrmaqsoodahmed60@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20251104 header.b=OLqS9pAA; arc=pass

(i=1); spf=pass (google.com: domain of fertweei032@gmail.com designates

2607:f8b0:4864:20::a2c as permitted sender) smtp.mailfrom=fertweei032@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend,I know this means of communication may not be

morally right to you as a person but I also have had a great thought about

it and I have come to this conclusion which I am about to share wit [...]





Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[dnsbl.ahbl.org]

[209.85.128.190 listed in dnsbl.ahbl.org]

[209.85.128.190 listed in dnsbl.ahbl.org]

[209.85.128.190 listed in dnsbl.ahbl.org]

[209.85.128.190 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a2c listed in]

[will-spam-for-food.eu.org]

[209.85.128.190 listed in will-spam-for-food.eu.org]

[209.85.128.190 listed in will-spam-for-food.eu.org]

[209.85.128.190 listed in will-spam-for-food.eu.org]

[209.85.128.190 listed in will-spam-for-food.eu.org]

[209.85.128.190 listed in will-spam-for-food.eu.org]

[209.85.128.190 listed in will-spam-for-food.eu.org]

[209.85.128.190 listed in will-spam-for-food.eu.org]

[209.85.128.190 listed in will-spam-for-food.eu.org]