X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 09:06:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8fam-000000005qf-3eXh
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 09:06:04 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 09:06:04 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj2-f42.google.com ([74.125.227.170]:42220)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8f8D-00000000290-3ohw
for doctor@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 08:36:44 -0600
Received: by mail-pj2-f42.google.com with SMTP id 98e67ed59e1d1-39e6298aa19so425988a91.0
for ; Mon, 21 Sep 2026 07:35:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1790001341; x=1790606141; darn=doctor.nl2k.ab.ca;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:from:to:cc:subject
:date:message-id:reply-to:content-type;
bh=+MOZjQp5mxknxsDUBtNsHvBekNByiMgO8PKYwdP+a1k=;
b=U/CM+ONEJHvuYSbxWTLlwTA0tA8CJPskEnyIf+bJAJ3Xl0hDsUKx/I4THylydzXQLR
D1fmjELMLXzrT4rWr8bnhFEjTA+E1d5HkodeLZfXsRtb58rZ8XQkh0OXB8ZmbObKs1zA
KUd34ASSksSOYuJUWhzA2j7WO3KUbb1+hfnMNuLomm1YPGycMfHxcDgFJE1298nixG9l
ZTaoczzmS2aP1HCPX++ke3j0AB9f+AO7pxigX+e+8do9Weswngbv1AVQ33PuYTVeGLJl
hL4pN1oW7oChv3xL6ZR2Uzi1V3Bug0n/IXvX1f9toE1HLqjGKKCx5vD7a6INTDuSJeYm
85yQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790001341; x=1790606141;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=+MOZjQp5mxknxsDUBtNsHvBekNByiMgO8PKYwdP+a1k=;
b=B6gLCmKXT3dufX8jwZJGneSkp/+6khUWV6zF8FU2tdjuud6O1df7mflVAYMElbGKEN
lbA4E8cD784kCQfhwvM0aMGY7FeFkIMrpuw8iTCtKHwKykopnAHoxnTMRtsTgSif/KLN
pJZ1uipjjDw4QEUcH6KDC8PBQAw35Eq3EUfFoz9AEXZnK8Y/Fz6OhSdwFNibkro6CvVj
NeX9lK/1TTqr88apbResc2ju1YaGowFfJS2UFcvOVdAwX2FlDfK5Lg2NMYFxPOvV9jJe
5hztgE9KM/OvePgNpJsvx+lhzKMldpkTqRTgVGxGXhxJAKyQj/03M0n4NRGkQRDVqFvY
uuoQ==
X-Gm-Message-State: AFuF++nUK5ni9JhkQWHYLWTZMsicgxtWbM3MTtdbh8VgN6cWluFJNYoR
V95igMuNzBCast9DgXFAazB5NgRkoyrlLqPKNuRdobeKCqVPZotO7qoFK1JITzaju3A=
X-Gm-Gg: AYBFou2j+lgHr1Fa1Pw6ZgrqBHXxFTRB8rhFoj0oanu8ZPtPim1nhlbBZG619Rg7n1f
yNQtPjapBxb7pMHgvpSHCINRiKbUjE2Y3hQPe7/SOpno4C1C+VTjmm0nHbwWofJuusc3DCrbJcr
3vg7ZW+xjr24PfLGkMkXk6Pbz3dwI1W2VAS6gqFhXV2UI70Jd61Kow8JEYSPGKqgPUOd9K4qA2q
Pt8qoxiDWuHqeeka2BoFjw/NRdpEI6Vx5CaFT80vIMr3g78vODUIPj4lkdLy2vWeVxJvstUy/L9
NWGonXzU0/L9TVzQlY5/uQ1Ef27jiwl6y5zVNmQisTKz/GVmF5ELpe5fuujmUxF51OPOeZwOJie
hqzDfvHcW7yurReVGN6ju5ruPNMN/Yy4KkY0od8vtRokcC2V109D2D/LM/LvqaEg9tguGvHO5zY
4RfRwLWrh5r7Xk8RNl46Gq2mz8lElBsvUlP9DGRY03zr6jL5eYT0K5Yz0oDGfMVyDT7iMGbIGSN
cjhSDSWQjNp592O3lznE/Cay7tpR0AwYfChXQGxwShjs18=
X-Received: by 2002:a17:90b:53c5:b0:39d:f130:8f12 with SMTP id 98e67ed59e1d1-39e5942a918mr18988685a91.2.1790001340590;
Mon, 21 Sep 2026 07:35:40 -0700 (PDT)
Received: from DESKTOP-4CHE62R.hgu_lan ([103.186.151.163])
by smtp.gmail.com with ESMTPSA id 5a478bee46e88-33c331aef9bsm20774450eec.25.2026.09.21.07.35.38
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 21 Sep 2026 07:35:39 -0700 (PDT)
Message-ID: <6ab140bb.580c57c2.f25d8.77a4@mx.google.com>
Date: Mon, 21 Sep 2026 07:35:39 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============8339606039266579481=="
MIME-Version: 1.0
From: selita.ebanks.leadforce@gmail.com
To: doctor@doctor.nl2k.ab.ca
Subject: Salon Industriel de Quebec (SIQ) 2026 visitor connection details
Reply-To: selita.ebanks.leadforce@gmail.com
Disposition-Notification-To: selita.ebanks.leadforce@gmail.com
Return-Receipt-To: selita.ebanks.leadforce@gmail.com
X-Spam_score: 7.9
X-Spam_score_int: 79
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Salon Industriel de Quebec (SIQ) 2026 visitor connection
details Hello,
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
[74.125.227.170 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[103.186.151.163 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[74.125.227.170 listed in dnsbl.ahbl.org]
[74.125.227.170 listed in dnsbl.ahbl.org]
[74.125.227.170 listed in dnsbl.ahbl.org]
[74.125.227.170 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[selita.ebanks.leadforce(at)gmail.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.170 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.170 listed in wl.mailspike.net]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
Subject: {SPAM?} Salon Industriel de Quebec (SIQ) 2026 visitor connection details
Hello,
Hope all is well at your end.
We're offering the pre-registered attendees list for the event below, an effective way to reach relevant buyers ahead of time.
Event Details:
Event: Salon Industriel de Quebec (SIQ) 2026
Dates: 06 - 08 Oct 2026
Location: Québec, Canada
Visitor Count: 11,587
Each line of the list contains:
Contact Name, Email Address, Company Name, Website URL, Phone Number, and Title/Designation.
It turns cold introductions on the day into planned conversations.
We're providing this list at a discounted rate. Please reply if you'd like to see the pricing and additional details.
Looking forward to hearing from you!
Kind Regards,
Selita Ebanks
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 09:06:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8fav-000000005rd-32Vw
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 09:06:13 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 09:06:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pz2-f30.google.com ([74.125.228.30]:33009)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8f8D-0000000028u-0cNZ
for doctor@nl2k.ab.ca;
Mon, 21 Sep 2026 08:36:43 -0600
Received: by mail-pz2-f30.google.com with SMTP id 41be03b00d2f7-cc1cea50dc0so1288903a12.2
for ; Mon, 21 Sep 2026 07:35:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1790001340; x=1790606140; darn=nl2k.ab.ca;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:from:to:cc:subject
:date:message-id:reply-to:content-type;
bh=TlqB3q0Uwa/5hOQbDFHrZwIJ4ipr8qjloq8ONRAII90=;
b=NmiiHc4WXSsaVoZeIAobP+5+2f7iqAiE/It3hIhbQWl/iWtd9WUYi35Awq4lo241Q5
UOy+oBCmlXIHEXa95M3BFHhlSAhvM9OCSdTqJtrlq+K0YBf5kuyZNmBitYQO0s2T7PsJ
vgyFVRdwncL2fjI0YnofJv6SlrUONMSM57Kzosumk3Q2ainDSZLgYCmfna5yl0QQkzI5
zT6ePcV+Jxb4C1jpQM3QdSpGVcjcS/MO0bnu7grzsflyhZ5WRWNcJgstuy2rzt2RvYBJ
N/+e6W0osyytYjcmi+pVnATuY0CJAPYNflamh/0KApvqGAgCbwg5/7wkS06lRHOrjo6l
WoDQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790001340; x=1790606140;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=TlqB3q0Uwa/5hOQbDFHrZwIJ4ipr8qjloq8ONRAII90=;
b=H8rbC/jqpQbOW9elFXKplkXYLAQswhAs76asoNBeCaz7x6I8tir+UsOU0jztsq2wMo
TZZcjexT+aWwhPU6qnz/2wkoykPZX5onc2/iDfRM9j496LTKSWjoHXFg2UN6+r0rHTkn
h4nrAFJ+KJqqt3iAwbb9Jl8y/ukOXSjYXqz6ZPHsXGVnVpY2oPkUum9NoP1S/XpbuooX
TK2vbnCsgZ7JP2bCgPfwG6ah56+RW/WLK55hiKUSGY0W71HFk0+eKlO2eiC1qCyPHysC
CofWEhqlqK8ZnihrCeASh7s6Obc7Eo7G2TDT/VhkvByQRuqSJKDSgdfp/GrkzMc+cHnP
HJFg==
X-Gm-Message-State: AFuF++lWUbtsS1ozgXg8jC9vDcTl4y4RpNsMWCTvUIXoTOD9GnlVBMFO
TxH01O0ovWAkCV+NeSyHr+UTI5av3AFAWTDKlPfuDU77C4fTRqLsd5noPF4wzGTlKIE=
X-Gm-Gg: AYBFou0nqiAyLG+K6fyMmCN18NgwVT+CoZWKZbJgXRUpR5UqYG3Uz8Mr+Bch7Bte2ej
JNUkWezImxW+f62xIulsRUPk+tu/0T+yjLhWiwj8XiwdhfzzrCMtgXWa/57mEyqBnNlyNHknz4+
Yr7knW13lL7RJDOEgAcfyj1vqvOKr2SzTTR52dAl9/+kbWQwFX7/Odas6MukMT933Vs8zUy3opR
vj38cLdoFOjfIyESURTHKbTdYU9xHgaqwp9LrZaFaZrjf0WBpJSN6tmCr8L3HoJSiH1HWEg33hb
zBuy1vCGJbREPPqoTZBClWQqDtHIyAaWDRe0TLaLoARHpCMcnjJAmzY6qkMb+JA2m+2MNtOc4IB
H5U4W+Yfr4IabyRJJu+o14DMQLYcOviZMUPjPHSVVSHUusJfCsZXYQLDCJmOuFi2xJeuwGPAosR
yDDi3G/7xq18J9kST71eACK1KgTMGPa2JxIOx7enotiiNlXt8HxvT7ItnFh+dlHj3pNpjKSr26R
TbgGB/T48Km7Si4xVnVhn8NkvmwztxhPbSgktaAoavxK8hghgnLixvPWC3q3g68fzIFOA==
X-Received: by 2002:a05:6a20:b78a:b0:3dd:a195:dd53 with SMTP id adf61e73a8af0-3dda195e4efmr11143615637.53.1790001340114;
Mon, 21 Sep 2026 07:35:40 -0700 (PDT)
Received: from DESKTOP-4CHE62R.hgu_lan ([103.186.151.163])
by smtp.gmail.com with ESMTPSA id 5a478bee46e88-33e3f17288dsm12510371eec.29.2026.09.21.07.35.38
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 21 Sep 2026 07:35:39 -0700 (PDT)
Message-ID: <6ab140bb.c121173f.1602f8.60ba@mx.google.com>
Date: Mon, 21 Sep 2026 07:35:39 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============1452285711577727447=="
MIME-Version: 1.0
From: sia.rae.conflyst@gmail.com
To: doctor@nl2k.ab.ca
Subject: Salon Industriel de Quebec (SIQ) 2026 attendee contact reference
Reply-To: sia.rae.conflyst@gmail.com
Disposition-Notification-To: sia.rae.conflyst@gmail.com
Return-Receipt-To: sia.rae.conflyst@gmail.com
X-Spam_score: 5.9
X-Spam_score_int: 59
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Salon Industriel de Quebec (SIQ) 2026 attendee contact reference
Greetings,
Content analysis details: (5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
[74.125.228.30 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[103.186.151.163 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[74.125.228.30 listed in dnsbl.ahbl.org]
[74.125.228.30 listed in dnsbl.ahbl.org]
[74.125.228.30 listed in dnsbl.ahbl.org]
[74.125.228.30 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.186.151.163 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[sia.rae.conflyst(at)gmail.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.228.30 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.228.30 listed in wl.mailspike.net]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
Subject: {SPAM?} Salon Industriel de Quebec (SIQ) 2026 attendee contact reference
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 08:34:00 -0600
Received: from mail-pz2-f12.google.com ([74.125.228.12]:41227)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8f5Q-00000000Lq3-2Anj
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 08:33:50 -0600
Received: by mail-pz2-f12.google.com with SMTP id d2e1a72fcca58-85469a34908so2746759b3a.0
for ; Mon, 21 Sep 2026 07:32:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1790001168; x=1790605968; darn=doctor.nl2k.ab.ca;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:from:to:cc:subject
:date:message-id:reply-to:content-type;
bh=NmwWVz/NzNY+uO4DfZG0wvY9IbN3oT4nj/vZJo+4Lak=;
b=BcPwuyWzABuUDNubzpMO/wPT4JyQoR1MQtMKzH936OU1sMxQs+kRp43uPCXcy8PVEk
O4SQZXXARnbCfM37LwKptjSNRuHQx6nz3HQPKMhcwGFh4c/fTUxdxvSxJl9+gzLNgTxt
8VGcmbFtx/MKUxa69MytJhlIQf/e6GGKaD/0YOMCBdBpYGE8KimEYLLlUMVOHKamUF3+
5E0BZi7OrRXgS+1gSgs4FyGOLvBFtwr8JPMOu1B1Muqrkw3+GiRVyec6sSwj/uIsKEcC
WQYPXvnh6modptEmk8PrD3dJyjm8wZF6Pgg9sTU0EfgpFD5KTYDGqkb1h6pW3zT1BScV
UMHQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790001168; x=1790605968;
h=return-receipt-to:disposition-notification-to:reply-to:subject:to
:from:mime-version:content-type:date:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=NmwWVz/NzNY+uO4DfZG0wvY9IbN3oT4nj/vZJo+4Lak=;
b=nwFw0BlZKrfxur3Ab6a7yJroRzo1xhvEDi9D2djg7/BXLZ11+msOCxUshOyWIA3Q6N
Lmp8xPDYR0tqnJz74wgkpfS9zERp+cuOTSgfK1wj3MQREPp1jterHbrL3BAhc83rSiSv
154rMRfXmUhS6mX3/9Kh++D66/zsPaYvIRPvKl2r8UI/0Fed4ulXZLtPl/qTloFONZU0
TH5m/eZiUXM0FHIv6lrSxeLD+Bgn9kaemVHb3PFdVix+8Gmkv+5JY9ZcuPJ51vQ7vLqG
TmB7B1niOH4FxEqFtMIOy1A3X8jC2vMbAVvK+EwjUHdVU2P/3tsHSjWHRe9aFwB9+zqL
+cjQ==
X-Gm-Message-State: AFuF++mtCRxo5HigBnOm6Qm7OIs+N4LGJAGSrEyI4PnEZcFZImQWITQF
/V3mJWniSVIs2tIKgrSoJRgZPAGyWjF2EZfkHHtQcKmeRGaONgmwqRNMk3mC1MHh4PA=
X-Gm-Gg: AYBFou0ws1qEcHYeR6ED31FU3RS75oymfIZWgaGMVoWrVJV5VwWffpIhMsswvYpsQtM
IhHKibBslU1YAb+jggagyOHv1n4mLiHGlWPhWBm/eB5ILdPqAoU+SiS1UPZAA9nucvuUvtkx2MM
jKTJZHhIJr7fGsB5c9H8fC0JPxK7huBKWuFucGULiPei3eEXnUtqC2iiOutIgbec/qewhDi4JDX
ecSrUjR0WgsLlqDQF6ZZUvjFXt17kE8f5fF8iQb3MeXnTsJ8ojKTVWaB1PNgLEq7e4UG7w8dvJa
/V/oRkWCb7ja8aOgbp4F1qvXLUusWAJRnqGI3DfOrwLurXtAdX9gLCzjmMmA9DUk+yqfdOKCfFi
1+hpFuqB8kE/QDfE5oYdfL/uyQLIwK9x5B0pYHGUJwQ2OcjSCgCYpXiVQ5JbKTvfX2jZCGdg6l+
9XQZDIs1RCDO+2RL8OVc/NamyS0EiGr2uscPAF3MifOtdXv/e+Lrdeu3EvdR4H7KY/Izpz/ILhW
dVxXw/6GIX/ac1twO6XpwnqU8M77mcv9nmqMZmflZKVur19Y4KtCMVhuEbdxrICBcb72QfMpwXZ
N9D1nHO2zgFC
X-Received: by 2002:a05:6a00:94ed:b0:871:eea6:95f4 with SMTP id d2e1a72fcca58-874dd9f1531mr16984105b3a.19.1790001167788;
Mon, 21 Sep 2026 07:32:47 -0700 (PDT)
Received: from DESKTOP-4CHE62R.hgu_lan ([103.186.151.163])
by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-877a9b0d62csm3297037b3a.39.2026.09.21.07.32.45
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 21 Sep 2026 07:32:46 -0700 (PDT)
Message-ID: <6ab1400e.8c731851.21a85.1d04@mx.google.com>
Date: Mon, 21 Sep 2026 07:32:46 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============2288923993310494796=="
MIME-Version: 1.0
From: ximena.luna.leadexpert@gmail.com
To: dave@doctor.nl2k.ab.ca
Subject: Salon Industriel de Quebec (SIQ) 2026 attendee access overview
Reply-To: ximena.luna.leadexpert@gmail.com
Disposition-Notification-To: ximena.luna.leadexpert@gmail.com
Return-Receipt-To: ximena.luna.leadexpert@gmail.com
X-Spam_score: 7.9
X-Spam_score_int: 79
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Salon Industriel de Quebec (SIQ) 2026 attendee access overview
Hi,
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.228.12 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[103.186.151.163 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
[103.186.151.163 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[103.186.151.163 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.228.12 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.228.12 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ximena.luna.leadexpert(at)gmail.com]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
Subject: {SPAM?} Salon Industriel de Quebec (SIQ) 2026 attendee access overview
Hi,
Trust you're well.
Attendance at Salon Industriel de Quebec (SIQ) 2026 has reached 11,587 visitors.
Event Details:
Date: 06 - 08 Oct 2026
Location: Québec, Canada
Attendees include buyers, engineers, distributors and project managers.
We are providing access to the pre-registered attendees list ahead of the show.
The list includes:
• Full contact names and business email addresses
• Company names and websites
• Designations, job titles, and mobile numbers etc.
Your team can target the right accounts and follow up quickly.
We can offer the list at a special rate. Let us know if that is of interest and we'll share the pricing and further details.
Thank you for your time.
Kind Regards,
Ximena Luna
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 08:20:31 -0600
Received: from mail-pz2-f12.google.com ([74.125.228.12]:53703)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8es8-00000000KTi-36vm
for dave@nl2k.ab.ca;
Mon, 21 Sep 2026 08:20:06 -0600
Received: by mail-pz2-f12.google.com with SMTP id 41be03b00d2f7-cc1cea4ae2cso2512379a12.0
for ; Mon, 21 Sep 2026 07:19:09 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1790000343; cv=none;
d=google.com; s=arc-20260327;
b=lW06Kn76KM01oHeFeMOhWwqTBSgNh0jPTWXPBQGQ7/bQ0zUO9XBNnwopxbEFjpmVyd
5WXy8/w6tPirjgS3GH4WZWAnJUS/rCjkqd8Cgj+RrablXVxEPa0D7Tda7qRpQx8lRuLV
svzvMPvJ5eRV1no/tuXarHpsaULbkBIGyN9LQKWj9l1jrmZQsPa3SBuLQWjlSFtlFcX+
5D2Glq6sM6R2p2JhaS2C2Rf6ALS2szHtROZjovjH76X2OYMZxmPZi9/2jBvLlWhX6kwq
+XsWyMbc0boxALKvvC4yiamxAA1oTFPZtfZHzGUeqWmTA+7A/Kd9P+jwsckG4aOpUT1a
FIsg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=yKRCSYgqMEKFHtW8TGCOWN0XrLNv9FoUh22hHKtIqfI=;
fh=uWMryb96Izk6ZmDZCubdYP24Mnm+lNqDjLYVCVC8ZAA=;
b=WQ5OjwdM1j1V8fhdB9HahNKIv7DJcgSdqtcnfJi2Mz/3lXt+FHY80QskQQIZCoZcVh
JtWKd1mBj+pWHwjUq2du5KeJfj1q1Xq+dz6YakwVGiwY5csSFhMJH8YZ6wEL3w+Lhg2y
mA+spa1TFXa8L1vbPRLvz0NWojnX89OY/33fiV/9POHiUTt6LS83fkUxrRIsQQEPOH41
iPQzdfUPNK1OanlfppXyaPqCZcvb60TDDLn0z423yle8ZOXovnK2ipWist7S+HOZ+FuY
6d+Wj//u/CRe62Wz7DdEktHQ/j+G2XH6EtriW1dOL32f4511C5twGwpiBmzzO1Te6Spe
ojHA==;
darn=nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1790000343; x=1790605143; darn=nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=yKRCSYgqMEKFHtW8TGCOWN0XrLNv9FoUh22hHKtIqfI=;
b=Zl1MBi89C5Y9+cK/UrdRWTHSLc+ZIPqpHbT0gUsPsfT+7z2atwbWeMSIAhO1xyR+lT
Zp9og9KLyV7U/xKwV77cM6JCnlsBDZV6uQBMwLOFmOoQSx4gabKTWdc9BvlNnulOXHy5
FrDW+EgPmDtTjVxd/XTobgY9F/uDJtsFsBwhmuGdyVADE5iAn2mGbHqLJm36HhvvCCuj
/ttSQodWVPnFzIobIgmVXjnwjN+CA9igsuU6wMSzA021xmgXSGVijgpFrjFaGZiOMKp+
dEs+yKEfBTpPI0r/6v2QZeAQrMV+eUo4lwTUvM5Io7Fky/1F+Bp9vlIXxNvD0b3z4dN5
1ORA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790000343; x=1790605143;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=yKRCSYgqMEKFHtW8TGCOWN0XrLNv9FoUh22hHKtIqfI=;
b=WM2q4bUips+yiB/Oxum646RnY6jzmR+2tKuJAbr9iAPxPSRuCxq71z+fa8AzwgNGvS
a1xbe6o9CoR1BToDo3Q+k8BmwqmC20+TBbl1UuQMzIoqjdU7UtZH7FUYkEoFXFit9P9V
BH3/86hR3YFgcOWAYLuoepf4xn3oXF3e5gUj2mVh0PErImXkVkxQU/R8GCQiml3J5ZzP
zliltbYY5RTCIsrXvqKhxjlCPKWUjaNFo6SsKVyuQHgF0vUuTQ5tHYUWaTFVXLHu1Egj
yT99+1eC6bDbp8TClv+xzQ+7h1RWvHrTy3cuU7HZsmRj0c5zGl3tIRj/NgzFNjn+CRJK
codg==
X-Forwarded-Encrypted: i=1; AKwUvBxX9v8gSdz2/gAIXCz/Va0uCtKhMzU4uusM5KSWCw+Kh9v1N0NQLqSm2I9fa7h195hxBXd7@nl2k.ab.ca
X-Gm-Message-State: AFuF++kMGiMT7IZDTipjr3kkE9uIBaF/V0apD8KDNhTSydX+P/898Tlc
PADLyLpjJhL0gVRfoTYTwM6OT4TNx1hIeBJxr5IlMtrRnsuWxB4HXZUcGLC4qWVrktF+JmuUMpU
oUlDruaYNr+BciWlzCDdgo1lB1ROzD+2nEFc5p59puc7j
X-Gm-Gg: AYBFou0kkck1XbVsIp6yvoUFNp51r5PJ3NABKtTANKR/DjckTaoZyWlQIILTrMLPMA+
7PIlxuAaxz9OrKuOFurs8XLb0ejSAVCfPYiZBAPf4xSK/kc1nPUdJ1pIS724saXEcKlskgj3Rjc
IPK268qmN7xaaagS6qH0fPDJzdluKa5xBiM//wZ0HV89bQP7slskBD1g8+C/KwJaziPgypa+lpt
Tac9yw8evOry8RV+0wWv1rAp+1iML4kdwocE/j3YnNvg4sFpAu762yniw22xQiJ3vC+YHpgvEnJ
SuwRACOuyiu0+slg3LSDwu9FHUz/GXhXrYmSNy6EyvqznKNqugOWCCLG3hmk1SbUNmo+YtxGixh
7gZEAwbAqk1/hTQoqadXajqwH65jF+ey4ZfB/MBtTN8ozvURV
X-Received: by 2002:a05:690e:168e:b0:672:99e1:11cf with SMTP id
956f58d0204a3-67299e115demr2168950d50.108.1789999978269; Mon, 21 Sep 2026
07:12:58 -0700 (PDT)
MIME-Version: 1.0
From: "martingruenberg00@outlook.com"
Date: Mon, 21 Sep 2026 15:12:46 +0100
X-Gm-Features: AcwNN1UpLV2ftlA_VdtuHKouQpkSbtyin4jGxJlPdg-M4tzCQhAjXSf8kqv7lGg
Message-ID:
Subject: Confidential message
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000da4f35065bfed83e"
Bcc: dave@nl2k.ab.ca
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Confidential message My name is Mr.Martin J. Gruenberg, and
I would like to present a business opportunity that may be advantageous for
both of us. In my position at the bank, I have come across funds [...]
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.228.12 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
[74.125.228.12 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
[74.125.228.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.228.12 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[martin.gruenberg00(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[martin.gruenberg00(at)gmail.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.228.12 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.228.12 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Confidential message
--000000000000da4f35065bfed83e
Content-Type: text/plain; charset="UTF-8"
Confidential message
My name is Mr.Martin J. Gruenberg, and I would like to present a business
opportunity that may be advantageous for both of us. In my position at the
bank, I have come across funds that belong to a deceased customer.
I have all the necessary documentation to facilitate the release of these
funds, and I am suggesting an equal division of the total amount. I kindly
ask for your response to discuss further details regarding the process and
your potential involvement. Rest assured, this opportunity is completely
risk-free.
to me
--000000000000da4f35065bfed83e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Confidential message
My name is Mr.Martin J. Gruenb=
erg, and I would like to present a business opportunity that may be advanta=
geous for both of us. In my position at the bank, I have come across funds =
that belong to a deceased customer.
I have all the necessary documen=
tation to facilitate the release of these funds, and I am suggesting an equ=
al division of the total amount. I kindly ask for your response to discuss =
further details regarding the process and your potential involvement. Rest =
assured, this opportunity is completely risk-free.
to me
--000000000000da4f35065bfed83e--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 09:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8fZY-000000005jm-2G3t
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 09:04:48 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 09:04:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from qhupl.tswenni.com ([20.240.194.100]:59893)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8e3H-00000000FIW-0itc
for root@nk.ca;
Mon, 21 Sep 2026 07:27:30 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=qhupl.tswenni.com;
h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;
i=pnwtlfudo@qhupl.tswenni.com;
bh=kebY/a40L46UK6ZtTVSYqimbmv75m6Cz4GIpWVFmu7w=;
b=QkQtzdLwcZdVaRGAJaybWpok6OpHHVw613hmDFrseYAVnLyiF2BlEO4ewMRV79X79V2FBLnwWEtz
TxEjgZNDMTLkn+cGxW8XIWQPr3RWLGMvj+c/MN1AK0f8DG28n5RjDD3jou3pHS/Tlc1Itdqq6jJ9
GiNvNTYetLyTAcLU3vWoqPO2h/1ElKtZhoAXs6UUm1ckLnbYwKQhijzW7WN6cdsbZEqq8aL4gen4
hMSOI+fQyVRHefG6kFbCLNaM1vuBzJxiv3FZIOr/rq9rF4bp2mEwlsxPYiiONKoYyM5sFt1lcMuZ
QDv7R7hcp9EZXyLmql6TR3wL28ohcYO2hjW9+Q==
Content-Type: multipart/alternative;
boundary="===============3700870325063818660=="
MIME-Version: 1.0
From: Wealthsimple Team
To: root@nk.ca
Subject: Your tax details need an update
Date: Mon, 21 Sep 2026 09:26:35 -0400
Message-ID: <178999719504.30787.11039605708692946691@qhupl.tswenni.com>
Reply-To: feedback@wealthsimple.com
Feedback-ID: campaign:wealthsimple.com:mailer
X-Spam_score: 30.2
X-Spam_score_int: 302
X-Spam_bar: ++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello root, We noticed that the tax information on your account
is incomplete or out of date. To comply with current regulations, we ask
you to update it as soon as you can. Account: root@nk.ca Reference: 79012426
Status: Update required
Content analysis details: (30.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 HK_RANDOM_FROM From username looks random
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
2.3 MANGLED_ACCNT BODY: mangled account(s)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[20.240.194.100 listed in bl.score.senderscore.com]
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]
1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]
1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]
1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]
1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]
1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]
1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]
1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]
1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]
1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]
1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]
1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]
1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]
1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]
1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]
1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]
1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]
1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]
1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]
1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 WINDOWS_7BITS Windows charset announced as 7 bit
1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)
0.0 GB_CUSTOM_HTM_URI Custom html uri
Subject: {SPAM?} Your tax details need an update
--===============3700870325063818660==
Content-Type: text/plain; charset=windows-1252
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Hello root,
We noticed that the tax information on your account is incomplete or
out of date. To comply with current regulations, we ask you to update
it as soon as you can.
Account: root@nk.ca
Reference: 79012426
Status: Update required
Update your tax details:
https://www.huizegroup.com/?email=root@nk.ca&uid=lsiZEbByw4aKXXWPb2t5ezXq
It only takes a minute or two - and it helps you avoid withholding
tax at a higher rate.
Warm regards,
The Wealthsimple team
---
This email was sent automatically to root@nk.ca.
If this message was not meant for you, you can safely ignore it.
--===============3700870325063818660==
Content-Type: text/html; charset=utf-8
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Your tax details need an update
Wealthsimple
|
A note from Wealthsimple
|
Your tax details
need an update
|
Hello root,
We noticed that the tax information on your account is incomplete or out of date. To comply with current regulations, we ask you to update it as soon as you can.
|
|
It only takes a minute or two - and it helps you avoid withholding tax at a higher rate.
|
Account
root@nk.ca
|
Reference
98986909
|
Status
Update required
|
|
Warm regards,
The Wealthsimple team
|
This email was sent automatically to root@nk.ca.
If this message was not meant for you, you can safely ignore it.
Help
·
Privacy
·
Terms
Copyright Wealthsimple Technologies Inc. All rights reserved.
|
|
--===============3700870325063818660==--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 09:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8fZP-000000005j0-35TR
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 09:04:39 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 09:04:39 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from qhupl.tswenni.com ([20.240.194.100]:36327)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8e1f-00000000F6Q-2LzK
for doctor@nk.ca;
Mon, 21 Sep 2026 07:25:51 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=qhupl.tswenni.com;
h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;
i=qnephqfss@qhupl.tswenni.com;
bh=6wEcFg+UK6gptLxLF1ObrRG9So55d7ZVi+57Y2NoBt0=;
b=MRbMbt3JZgdbljCBrXqwTNrQ3+HOeiFJn3qBnD85N/golk4ZYU8wh+3XS0+xxjGackWu2Q31yju+
egLSCGr+fi0TI/BYak7fpFkCd44iOE6IpZIChyjuD+zV7xgFL0/l3zNRZeUD6s9KwS6/kmSHh3ut
Q+bHbl0Q/Ggz/oqwomjzqNljp41qZt3AVC04391F/sGlTaF49db3GNfbdDjh0VdUmbk5pDqbd3Td
8FmuDKV9rX0LKMjrhd5tOB/gYx/9Ot7RooPGr+s/dPPdDdTBpMMpx5gEuyOGuSCsXhB9zXBTQHvY
ntEP7kwZea7NJer8wh/rjIVAmhPA0cosClzQ2Q==
Content-Type: multipart/alternative;
boundary="===============2890450572559252456=="
MIME-Version: 1.0
From: Wealthsimple investing
To: doctor@nk.ca
Subject: Your tax details need an update
Date: Mon, 21 Sep 2026 09:24:53 -0400
Message-ID: <178999709355.30787.11860610694060458852@qhupl.tswenni.com>
Reply-To: feedback@wealthsimple.com
Feedback-ID: campaign:wealthsimple.com:mailer
X-Spam_score: 31.9
X-Spam_score_int: 319
X-Spam_bar: +++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello doctor, We noticed that the tax information on your
account is incomplete or out of date. To comply with current regulations,
we ask you to update it as soon as you can. Account: doctor@nk.ca Reference:
68692127 Status: Update required
Content analysis details: (31.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
[20.240.194.100 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
[20.240.194.100 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[20.240.194.100 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
2.3 MANGLED_DOCTOR BODY: mangled doctor
2.3 MANGLED_ACCNT BODY: mangled account(s)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[20.240.194.100 listed in bl.score.senderscore.com]
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]
1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]
1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]
1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]
1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]
1.0 J_WEEDS_Q FULL: Dec/Hex char Enc [Qq]
1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]
1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]
1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]
1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]
1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]
1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]
1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]
1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]
1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]
1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]
1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]
1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]
1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]
1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]
1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]
0.0 GB_CUSTOM_HTM_URI Custom html uri
1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)
2.0 WINDOWS_7BITS Windows charset announced as 7 bit
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} Your tax details need an update
--===============2890450572559252456==
Content-Type: text/plain; charset=windows-1252
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Hello doctor,
We noticed that the tax information on your account is incomplete or
out of date. To comply with current regulations, we ask you to update
it as soon as you can.
Account: doctor@nk.ca
Reference: 68692127
Status: Update required
Update your tax details:
https://www.jskxyl.com/?email=doctor@nk.ca&uid=pyvdTGHy8zhHHA89LSTf2ilK
It only takes a minute or two - and it helps you avoid withholding
tax at a higher rate.
Warm regards,
The Wealthsimple team
---
This email was sent automatically to doctor@nk.ca.
If this message was not meant for you, you can safely ignore it.
--===============2890450572559252456==
Content-Type: text/html; charset=utf-8
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Your tax details need an update
Wealthsimple
|
A note from Wealthsimple
|
Your tax details
need an update
|
Hello doctor,
We noticed that the tax information on your account is incomplete or out of date. To comply with current regulations, we ask you to update it as soon as you can.
|
|
It only takes a minute or two - and it helps you avoid withholding tax at a higher rate.
|
Account
doctor@nk.ca
|
Reference
15302828
|
Status
Update required
|
|
Warm regards,
The Wealthsimple team
|
This email was sent automatically to doctor@nk.ca.
If this message was not meant for you, you can safely ignore it.
Help
·
Privacy
·
Terms
Copyright Wealthsimple Technologies Inc. All rights reserved.
|
|
--===============2890450572559252456==--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 07:16:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8dsi-000000005Q2-30Lk
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 07:16:28 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 07:16:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs2-f15.google.com ([74.125.227.15]:33116)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8ZEf-0000000005D-1B2D
for doctor@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 02:18:58 -0600
Received: by mail-vs2-f15.google.com with SMTP id 71dfb90a1353d-5c981b0d59cso1695301e0c.3
for ; Mon, 21 Sep 2026 01:17:34 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1789978649; cv=none;
d=google.com; s=arc-20260327;
b=UEpYHECSIprMnRlyTi4btMNZ5fwroHhxqLyuLux6TUeULOP5l2J/4yih4pOh9q0Ju/
8iK+AraM/XGVEaj0WLtb3RRvzNRv9Pl2HpPhcnfLQItYce3eFUr2FSAxAcWfrH1YQSyB
72LLY/auE6Pa+Z1ORfIWlzfoW6V7PO7dzOXE5eqkph6J+HWmho3CCCycm6EZhuEE6nIM
94F6VqAGI13WB9LLZdLoAsOZiuijk8A+GtWfxjKE8MlNwhmppir8ZMAMhP+N8m9+/lvc
1x86nBMFeB64sEXx2bpuaI1S3ZrBUTvbu069xJxxoM+J2idcU0LYe6UeXEKT63ma9TKN
vG7A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
fh=Cbj9vSK1W7yoRZRdOfZJMtquxUbc3jT+BV3cWtEo2fs=;
b=jDh70zaIKeJS+nKoFQcFy8pVgCM/aobQJqAmDpXS7X/yEojvNl8Ft49NXYs1E9dbH5
wZLppXZVU5qLid0AznSBEt0UEGGD8uSnQtLORKnwaPbyemF+VbseuLiBw279G7UXAH4S
5fHWHo0yKagcyaWkWc3wCs60aDvssl0K6eN0LPIGsalBLCFzX1br2DAQCZlbBafITWJt
fpNNqT8WixAM7WpDZOtJN+1o3tGxqU+/ecZL7ZqpXHRbgVjSLasTntrrnM55A0EVrwXF
NGjZ+c1IKa0tYUEmiuftSqcIFNJEcbkJ2cmNdvlOGZf1vLqJ6iD5ZcMhodYA/nerByln
gcyA==;
darn=doctor.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1789978649; x=1790583449; darn=doctor.nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=aFye5pB3L+ZAL6zStb19hnB8KFwjCvMrO2GoQYppgBvk88EA3Ygfc1PWT4ULMS7SrY
V1enXsCmnmuUqyxRkbieRZ7jI7mAJrCXWLsXuB7P6kuz/531LXY9AjmXlDbDowtwgNUV
Zozarhdy0Jpju8yj7kRVqqQd/y1bpBnXXGKtT9pF7ADe+shtwoTQn/HxBbpWyEX4X36y
oMkUKbi9DRWyU+fqe9IiF/9G9LSZf497GqJ/qcuIJdVDopCP+6xP3uP/PdmxtaOOZAwx
/OPlbc2JrYiXY5Nx9ZCJozuSioliztAFXE2DrArLSp56hn62hoBvLne3FOGkhctOy/Xg
pfpA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789978649; x=1790583449;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=YJIrCd5VNe6887mFuLOYkFo27EU3HqgM+qH0jQiVu7XvYGr5QXe6JyxL+s1T6WyRlG
pvAGFpr9x8z3XL8QEsv8HbpBGhd8x1NXWee5oQFgkjOTXTUQiyTLpwvcsQP74a1keur/
N2kAJbqNwybg1OhZA1fRdOzcJE0SN+ySAMBjXCC0P3GTmnCzd39qseHEbZCn/+rcuYsz
yQE+x2thl5fFZDD7vLSlc+PYqLEiZY2KqG3sqnAiTropO9gutk6KuViEctS/7dqkCvpI
/mLyOuLcRY8GJwXmYcQaje+5u+9AL8HnNuO/z84NGrMac+DJRKmdcWhPE//sf7QENcFl
3m3g==
X-Forwarded-Encrypted: i=1; AKwUvBxc/s0T8XERZA0VOzxsDWY+Yt+evtS8FKVobNHd75srzYGpNwZ/CNPR02XU0elAszru0kic9ns=@doctor.nl2k.ab.ca
X-Gm-Message-State: AFuF++mD/Ly11nZObFTlbNXLpaHDRPB8pSo4rcEjxQKa2xo8bXi0CMvP
haMQvCxT7ckAqYtq0zwFitknTkVB54YuMvhFJkrrtrDZ4L8S1UL6LgzYxXL6IKdENoRgSq19oVe
Iv7FjpUkYwwe19VMXuiXXHajr/vuwLzsvhAS8YK0=
X-Gm-Gg: AYBFou2ukNH217j5Np9qBHujMhk7e5z8dCNS0FH5AmU2ZQGyKDcpbfndAFGTcuA0mS8
9hXmznScM52K/kdWO0CtfNXeDN0oiBzlqdMT3XMmG3HSngbOVHRNOUtu3Wad+uhUxY3Ue+lTnsZ
dqYC1EsCFUJL76jw5vX+vqtOY1xsnZ4mNeZYBT2+yOr6lIHUtDmMi/4dhPzF9pJ5pevqISM+Lvs
oIv8DtYw93oTTpGCdHEkz2dFHjNXLxxrO+4gbxz3lgxwuj1A+U8Ie0WRtMBLucXrPEq5Ea7BkKf
LKas5KrMv4qcaCR0wY7n5Z+gZNk3E0hV52B/tNZzexHmz1M8lasA/EMjxaZq8tUC0wjYhlOM1Po
hpwbsjss3gJa7zg==
X-Received: by 2002:a05:690e:1349:b0:671:8e1:2386 with SMTP id
956f58d0204a3-6717fcf014bmr2850265d50.44.1789978197126; Mon, 21 Sep 2026
01:09:57 -0700 (PDT)
MIME-Version: 1.0
From: "relieffunde@outlook.com"
Date: Mon, 21 Sep 2026 13:39:46 +0530
X-Gm-Features: AcwNN1XUbFwPZynzidLxneCpY8Aah1Xc9RFWlPxOam2yTgvODnIPZb1IIajwqLg
Message-ID:
Subject: UN HUMANITARIAN AID PROGRAM 2026
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009871fd065bf9c651"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 20.5
X-Spam_score_int: 205
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR
UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
[74.125.227.15 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.227.15 listed in dnsbl.ahbl.org]
[74.125.227.15 listed in dnsbl.ahbl.org]
[74.125.227.15 listed in dnsbl.ahbl.org]
[74.125.227.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.227.15 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.227.15 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.227.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.227.15 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kouamekouakouemmanuel49(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kouamekouakouemmanuel49(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.5 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail
account
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.0 FREEMAIL_REPLY From and body contain different freemails
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.15 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.15 listed in wl.mailspike.net]
Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026
--0000000000009871fd065bf9c651
Content-Type: text/plain; charset="UTF-8"
DEAR SIR/ MADAM,
YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO
CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS:
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:
--0000000000009871fd065bf9c651
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
DEAR SIR=
/ MADAM,
ail=3D"gmail_signature">
=C2=A0=C2=A0
YOUR EMAIL HA=
S BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR W=
INNING PRIZE, EMAIL US.
=3D"_blank">relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS: =
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0=
--0000000000009871fd065bf9c651--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 07:16:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8dsZ-000000004vD-1txL
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 07:16:19 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 07:16:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs2-f40.google.com ([74.125.227.40]:42177)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8ZDz-00000000Q0o-1IZ0
for doctor@nl2k.ab.ca;
Mon, 21 Sep 2026 02:18:17 -0600
Received: by mail-vs2-f40.google.com with SMTP id 71dfb90a1353d-5c9d8b323d9so262124e0c.1
for ; Mon, 21 Sep 2026 01:16:21 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1789978575; cv=none;
d=google.com; s=arc-20260327;
b=OztxUv7ui6sVNCR/qywfp07DFT6IjX7d+T8zga+oVpMDxK3jxvc1vTme3CmwWEJvlj
aGYiXiUUMldN62ue1s2dBnsu5Wu0gk3+zCVtOodca+BYCnWGnxTIVHucDzH8e7LS8O8c
ttZP736nSC1nIAMtt9RSETnIWaxVRLfMjXoaEL2qpS1XJFmSCf1sPKA9Rn/bK/1wvrNi
kzFYpAdPTkGNOSIwCg7HcTT3eWH4AZzpLR61CRvZ5Bf1sLzLwG3gl3addHoGkne8XHCO
hkL1hYr3W0Su+pNa3CsqzIi4vuOELHOCJP1oKMs2c7hoUGuCDOmn0V3vIcMkVAv7cK5N
y1xQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
fh=w9KosX7+8a9wkLJKfYxbXKduy5eUK8cRyHHwq3AL2+8=;
b=Bh6mCG+8mwgJ6y+plcnvVXycBcFekFWcUp3x68KxLGBnIIuxjoED4n7yHsbFhrqmV5
7fuw2N1m4VEls0pe3J/yyCYRITFu580dycYTkJN5Qz3rLrd+XUbFEODg+KRIbQjKUVuP
BSEP9sRQAEslWUK2ahtLK99wGF+6FRTLHpDSwLivVTv7HRzmI1SiHeHVF+hdlf30jZ/s
Y8wb1TBwTaPOiLZEUEk7eYK5tRuVfjG7rNObQM5XsbOPYkHxPGsjcTL3QTT5NDfUP/WZ
EIfZ3xn0SJJ5f7Fxc86e1o8rcA1wKLkItb57fSOcPnq2AC7dEkZ4nUCxOX6F3wqsq7sZ
ZNRA==;
darn=nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1789978575; x=1790583375; darn=nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=V/mOdTwkEjlN3G0V55LJ+L51ZLMroKLghgUlpBPlNaGnY8iNpwjRgcnJCQlSVN3dVJ
7YtLixQfgdODwq5dxL+Q40EOU5PCgXLTBHd/g7vqY+NvmR6O36w8+i24Ydr2xKUs/UL5
ENZojWbcGzqqLUAeVnbxX9ozrXAdOsHQWfPtrFZLRJF2OvFrlc8EGGzjTt6b0ZUgiAMR
smLm3GoQpVO/kmM7KqpSxryINkuFB3sUE4xZX5nR6Wx3IHkwfXms6HZJDyuhq4KHBAkl
kDMNDdBxP8rKZg7PQYojKZetJuLZeXu+LevpquSzxalyjtPRa0GWUEBiwc7WNoKqlgDN
1HPg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789978575; x=1790583375;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=ASgV7d2SDtA8Brj09skq+H7fQz4jBrT7oykq0OqMS/62t4F8WQDjR5V6sd1It8N2u/
nUTUUm1rsa28jYwgIaat8opZDhL7JzKhwP9IDkyxIa13SQbxXHoi33o9O+VgJcG0POMO
UizNn+C+QY1EvQjPaScIb7j4j4dDkHebwHlqT2/MUrPi/YftAjk548nYR33FrHAq9Ji4
hB+JO7NRHC68EcrznIk0/DjRqCX3Pfd7FBwQ/P3KQT7AVheXakTdi03jJE49IKc320JF
MRouy5M4LMzpjzyZKmHEhDD56caanj82tFZwNNx9s9AwVbIDPefqPQELRVoPj8Iq1hM+
JrjQ==
X-Forwarded-Encrypted: i=1; AKwUvBzBURn9vm2/mHmEf2K3y3AUo5DGvShLnY+FPHvoojkDGwR2xh1qii9TXIHaiIhAjLS2UZjQ5vk=@nl2k.ab.ca
X-Gm-Message-State: AFuF++kluX411e8j19SZrwYQj3mmXg5B+f92kRoIEv+2IDHKUtCUJ0QE
b7cSyAvWM3cZISAPbcnMQ472SSfPx2o+FmWKOTISB5Y2xw1UjLY4DL8mKea1BZ7Mnh+Pkvd3gNq
Un9J8jaxwTCj5eBXZIhlZdr6Om6HsCbH0985jFhA=
X-Gm-Gg: AYBFou29sEMhD9/dVftckUbUE46//jLtgBDR0dBvbs/4IKr7W8knAzpUTNIz1/QApho
3BBQcFqUBUbz3XKglsnujkcH5Ik8IPRr3fyDFnRl1duMsMOMJSWlgILE7A1zSX46zdX741RsTxy
XipyS5oaZb9VmkZkGSoiajz5noyzXifwbXM88QFsOiroJX8CnCt005or9I6VKlsZraI5ks+rqKd
wyVOaOP+FY9i0YvibdMG81he//Wm0PSHOPX05/+s8OrQDN6qC/Da8WELjuMtWKdv35Z+hLGSvDS
pOWq5Gx2PqZeyu0jd+LklUJMt0iFxCGhJhSMQQkYISpDc8CvqDM0BvtFynS2P8xTDlTf6Mlmjg3
lVKbn+9PBs7eo
X-Received: by 2002:a05:690e:1349:b0:671:8e1:2386 with SMTP id
956f58d0204a3-6717fcf014bmr2850265d50.44.1789978197126; Mon, 21 Sep 2026
01:09:57 -0700 (PDT)
MIME-Version: 1.0
From: "relieffunde@outlook.com"
Date: Mon, 21 Sep 2026 13:39:46 +0530
X-Gm-Features: AcwNN1XUbFwPZynzidLxneCpY8Aah1Xc9RFWlPxOam2yTgvODnIPZb1IIajwqLg
Message-ID:
Subject: UN HUMANITARIAN AID PROGRAM 2026
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009871fd065bf9c651"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 20.5
X-Spam_score_int: 205
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR
UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
[74.125.227.40 listed in dnsbl.ahbl.org]
[74.125.227.40 listed in dnsbl.ahbl.org]
[74.125.227.40 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.40 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.40 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kouamekouakouemmanuel49(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kouamekouakouemmanuel49(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
3.5 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail
account
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
1.0 FREEMAIL_REPLY From and body contain different freemails
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
0.0 FILL_THIS_FORM Fill in a form with personal information
1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026
--0000000000009871fd065bf9c651
Content-Type: text/plain; charset="UTF-8"
DEAR SIR/ MADAM,
YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO
CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS:
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:
--0000000000009871fd065bf9c651
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
DEAR SIR=
/ MADAM,
ail=3D"gmail_signature">
=C2=A0=C2=A0
YOUR EMAIL HA=
S BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR W=
INNING PRIZE, EMAIL US.
=3D"_blank">relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS: =
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0=
--0000000000009871fd065bf9c651--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 07:16:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8dse-000000005Co-3Tvv
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 07:16:24 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 07:16:24 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs2-f40.google.com ([74.125.227.40]:37398)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8ZDz-00000000020-21jS
for doctor@mail.nl2k.ab.ca;
Mon, 21 Sep 2026 02:18:17 -0600
Received: by mail-vs2-f40.google.com with SMTP id ada2fe7eead31-7a05d236f53so1487172137.1
for ; Mon, 21 Sep 2026 01:16:48 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1789978602; cv=none;
d=google.com; s=arc-20260327;
b=s7DeJo7pKWIS3vkq78HA2fQ1ElIDkyUTLA2tWm7h8vq+bBlAaakA209XXtdAgEHwFB
W0Tujxh7YdLBpA9y+mZLSIMJPn52NnxZXsxu6lRh4asLL0SfRwKps3vsm/6lG9njkXTb
OjbjxnPCPbFeu0YfmMeGfg1xJruwE4/l+ZLXEEsw1w2+gr8cuKOEVGqWIiBltGREHjxJ
V4INLyvw8wH1cgp6jY15r4ObYLZy4IdiUraiuQhCloUFdINkrorqV1s9t5/FNuQ77eJz
jz6j+GR5wvixObWlVPZ+T2VVQkTNnBlBIKHiUnY9I4YX3NeWTLVvfSg1zR5w+bSZi2hP
7Hzg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
fh=v7FrDHOmFdlqbSUe+de30mslTHOr7F3ITCzfdj0uJ4E=;
b=gVU0aSiWB/nx+FsF4mP1/84Rv04AjJbfaBtqYD/Fj9memRBj0Rrig5qNAiAjivMCSZ
gOR/nInvvXY4QbSoyf5aWoCmPZn8Q0OnP1SsGEd63WAGrOFP7BedadctgzEZ64JFR1ew
TMrNIzncEyEeVTdlW4tD6WD+l3II+pGEtO0az5RzknRiLdq9GuuDKUNTdOGTkzB+qRa2
r+oAJxBGXwXuEHm0bOA5V1FMwn1t25+Rrvbqz+KvM/wBCVH9SktViXtxk1EdeSxnHLaN
LZ8B+ttnu9MRy7ESWN6kgdP/Z3OAyufnCx4acHrW4qFeN8hYOg7sy00gwhfKbg7PWlQu
DO5w==;
darn=mail.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1789978602; x=1790583402; darn=mail.nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=jAL108uDJKeg/hdwGrbMOIBawhs1QYhZzX04oyzXyKPR/92N0uXZ1ojCuHslqDKFiv
HdI3Eroq0hu4AtqHFKA5QdZJBDcTgjXiSthb8UjS8zCdiYcT4uAs7gwB4OYIj1ibL6Ky
Tu4I2iHHqf9WwVEgE459gC8kvjRbrWZDma2S5Mgsd09uMk4M91YO9cYAA5kjO/qa32g1
UDKxaVs5B1dT9X7f4MacUeuPFXYZXZjILsYe/OyR79o/Ni9qKVIpd2zmBQWnORmPl/YF
bTmcF9tnbq5ezC+5n6iGxl63i0wiBmMwvpqcOTMkY9WZwCvQvzo2+vYDtXkonj2E2CKw
fItQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789978602; x=1790583402;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=eXmuX8C3hDQhPozBuFHdBtDATsBW8fhvBzLn1G58KDt0rvSbzP0fn2xj1rKqX2B8D/
2c6VVXbNx+xQKRQVsuQ1iIZVrO8NVqwEodZg2Vc9Y1mKcMzyheRt+rdqjLB++pQjTri+
ZLh84wuRKQ6zeStJ/b4ZHmop0g9j49VwnOPNwDuZ46FIWycq6feYxJ1XldDSi9wJwU9G
IAVlKlNKPAOk/y9DvTsGt8CHrZp5EhJrKA/yppnf3clWVd11eYWRBCUJAC35G+xF3JCC
1vpGLu9HDLPMvacUyfU+rVTB8nD9K9zP6jgDXU6hlOG864xYfa9D9Ip/WD3m2YTeh0pU
NsQw==
X-Forwarded-Encrypted: i=1; AKwUvBzUP3v6OjgSLkjFbMb1I1rk++Tk7mBQ2mpza9IV5zuBdP1mHa3iRj8rjKTeUDv3ZG/aNRFh9Gw=@mail.nl2k.ab.ca
X-Gm-Message-State: AFuF++kWLb0uzM78Aue9LHcajJJP49GnRz1PiFZxnLDRJjamr4oaJwY8
DbtI9SJ55ZPgQWzcJCzDMumKv6ZsdnID7ojsx6urGC4YMMTdL/mrVl/RZz1FASMkqdQREpV96/5
5rO2JiXo9K+jKIHSneLy7i66fVo2PmlaNFbmnMQY=
X-Gm-Gg: AYBFou1mknubPuUQA+CW6o0d2gK6v6ljkZpVvPc6AjTpjMAa+r9sz4amttrO0VpSSlb
JqbySegsF/f6fiU9MvzzrypDJ+D9CbRt/+Gi8AfWbWRY6tfCH+X/G7ZpDMzQHC+2yJaBmFuRIB7
hga3L3tk/saOqWoliUoKN5J2BJvHNbhHRlup59Kxk5OAQuRJFER1O0FXUPhEHEEO2IvojSx5OW2
AlHVhLxZcxc00zKYR3C6Gs1w+Pjon+IMWDvAEsxaQLNK7lW3JETHG+OBkrgP37W5nUobJKxZL2K
qq6+0Hb/3WsS2B/WIivE323IPg5+c+OXSpuHJOFVSb9dRH1LOlCP2336l8H3w2CoE+KbOjdUkTq
B+RWwgfvt9/HlxA==
X-Received: by 2002:a05:690e:1349:b0:671:8e1:2386 with SMTP id
956f58d0204a3-6717fcf014bmr2850265d50.44.1789978197126; Mon, 21 Sep 2026
01:09:57 -0700 (PDT)
MIME-Version: 1.0
From: "relieffunde@outlook.com"
Date: Mon, 21 Sep 2026 13:39:46 +0530
X-Gm-Features: AcwNN1XUbFwPZynzidLxneCpY8Aah1Xc9RFWlPxOam2yTgvODnIPZb1IIajwqLg
Message-ID:
Subject: UN HUMANITARIAN AID PROGRAM 2026
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009871fd065bf9c651"
Bcc: doctor@mail.nl2k.ab.ca
X-Spam_score: 20.5
X-Spam_score_int: 205
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR
UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.40 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.40 listed in wl.mailspike.net]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
[74.125.227.40 listed in will-spam-for-food.eu.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
[74.125.227.40 listed in dnsbl.ahbl.org]
[74.125.227.40 listed in dnsbl.ahbl.org]
[74.125.227.40 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.227.40 listed in dnsbl.ahbl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kouamekouakouemmanuel49(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kouamekouakouemmanuel49(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
3.5 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail
account
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026
--0000000000009871fd065bf9c651
Content-Type: text/plain; charset="UTF-8"
DEAR SIR/ MADAM,
YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO
CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS:
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:
--0000000000009871fd065bf9c651
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
DEAR SIR=
/ MADAM,
ail=3D"gmail_signature">
=C2=A0=C2=A0
YOUR EMAIL HA=
S BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR W=
INNING PRIZE, EMAIL US.
=3D"_blank">relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS: =
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0=
--0000000000009871fd065bf9c651--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 22 Sep 2026 14:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x96hD-000000001GC-23aC
for dave@doctor.nl2k.ab.ca;
Tue, 22 Sep 2026 14:02:31 -0600
Resent-From: The Doctor
Resent-Date: Tue, 22 Sep 2026 14:02:31 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from bsgw-00000288.cafe24.com ([118.219.235.58]:35247)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x95Ak-00000000Hzp-0wh2
for root@nk.ca;
Tue, 22 Sep 2026 12:25:05 -0600
Received: from [130.254.47.122] ([::ffff:130.254.47.122])
(AUTH: LOGIN alsgud5488@nexpa.co.kr)
by bsgw-00000288.cafe24.com with esmtp; Mon, 21 Sep 2026 10:20:12 +0900
id 0000000005D89B62.000000006AB0864C.0000E214
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re: Investment partnership
To: Recipients
From: "doha consultant"
Date: Sun, 20 Sep 2026 18:20:08 -0700
Reply-To: info@doha-consultant.com
Received-SPF: softfail (Address does not pass the Sender Policy Framework)
SPF=FROM;
sender=alsgud5488@nexpa.co.kr;
remoteip=::ffff:130.254.47.122;
remotehost=;
helo=[130.254.47.122];
receiver=bsgw-00000288.cafe24.com;
Message-ID:
Greetings
How are you doing? Do you need an investment partner for any of your projec=
ts? I have many investors who are willing and able to invest in your proje=
ct.
Send me your WhatsApp number or Mobile number for faster communications
Warm regards,
Ahmed Ahn Abudadi
investment consultant
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 22 Sep 2026 08:10:31 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x91CX-00000000Jrg-48CC
for dave@doctor.nl2k.ab.ca;
Tue, 22 Sep 2026 08:10:29 -0600
Resent-From: The Doctor
Resent-Date: Tue, 22 Sep 2026 08:10:29 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from bsgw-00000288.cafe24.com ([118.219.235.58]:51792)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x90no-00000000Gsq-3UxC
for root@nk.ca;
Tue, 22 Sep 2026 07:45:07 -0600
Received: from [130.254.47.122] ([::ffff:130.254.47.122])
(AUTH: LOGIN alsgud5488@nexpa.co.kr)
by bsgw-00000288.cafe24.com with esmtp; Mon, 21 Sep 2026 09:49:51 +0900
id 0000000005CA9548.000000006AB07F2F.00026F36
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re: Investment partnership
To: Recipients
From: "doha consultant"
Date: Sun, 20 Sep 2026 17:49:48 -0700
Reply-To: info@doha-consultant.com
Received-SPF: softfail (Address does not pass the Sender Policy Framework)
SPF=FROM;
sender=alsgud5488@nexpa.co.kr;
remoteip=::ffff:130.254.47.122;
remotehost=;
helo=[130.254.47.122];
receiver=bsgw-00000288.cafe24.com;
Message-ID:
Greetings
How are you doing? Do you need an investment partner for any of your projec=
ts? I have many investors who are willing and able to invest in your proje=
ct.
Send me your WhatsApp number or Mobile number for faster communications
Warm regards,
Ahmed Ahn Abudadi
investment consultant
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 07:17:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8dsn-000000005dM-1FZQ
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 07:16:33 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 07:16:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs2-f12.google.com ([74.125.227.12]:62942)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8ZFK-0000000007b-1H3L
for doctor@netknow.ca;
Mon, 21 Sep 2026 02:19:39 -0600
Received: by mail-vs2-f12.google.com with SMTP id 71dfb90a1353d-5c67e53002bso1546896e0c.0
for ; Mon, 21 Sep 2026 01:18:05 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1789978679; cv=none;
d=google.com; s=arc-20260327;
b=JnXx7JhDBirtkC4wri4rb2RR5dTU7hbM9L/lAzX6XdQaMW/hr5knBUYnrZIjRZL+47
gxh8JGyYGZoqDPsgh4bG3ldLYmXxJGys7EDQUFu1KU2DgsOtM6weUj5Lpf9RvEqtuCX2
Y0obmf92FWR9lsrbwuJHekiDbJG0rumeO5e8tCuonZblaAhiTcyV+q8+FUYdGrUTVg0q
EqWY6e/F5yfzNbYafPojl8IC+Dop9Bo/+aMPQqu9iB8RnbU0oUF0oESVD52Z7F43JOCw
x3XYDk/16eISe59z7SynGQjhUtnH+20GIQxYUgc3AcvhOTh2r4K/oBgYczTaBIb/s0Z0
Cx2A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
fh=tpQbCcdiUiekKUhLaHDY2Q/XS4l7J54HEaZAyxCHQp0=;
b=HIwY77UmajCCB0Wis+FfenQIoWw1ukCtcawX9pr1cmWp2T/rzfoa4cMPtSiG8yZKxe
GfWqOjxKYc0Mi0vCP6iJHvJn4u7VtbWqUXdBnu5WX0HW7+nokkPu02jXRsPoc5dCB1AQ
aIn2nv/iXGdx2v2Tt2JGzm7kxLJyg5gZw9W+lgP2e5IvkRXNybZl3oU/eXz/juT8toOR
6xDNewv6+r38UTJT/us3Z8WCfpR+KN/tqfTqfq5ML+me1HZi84vdB9mLWk/e3IvbNfJ7
rQN9v9cGU0QaeRVyMT+Yy4/5Ms6YGDVigJyUYwSs86KMFukP+sY+EaWy+XXzy1BKUVPD
+Y9g==;
darn=netknow.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1789978679; x=1790583479; darn=netknow.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=fiAX53MhyaFQzrElVaYdfNHGoGL4xr+zsgaFUQObnUw6A6yFmnQ1Itg4Ag9gOQiAlu
W1yNb/1oRx0uH6D60AiXrshQ+OjDm1IGimuHyau2tc093TIZ6mIHEwJZ/o1A/H5jdOPg
7S97bNrJyBfzEg1Y8bxNKPXIvA+ShQlKcnu7wJV8rWYmDK9ZEp+oXbG/XXLA2+0t2DcC
+bmLVbi4yyohmdJBiEWJBTDcObp5gosSC47Wsx0pCUkzcRjhUgu5CwsKpTwsl2/iSxhZ
EyEhaXF7htJMtsFM/IXmhvZm/FEe86kmrI0A5GvUcZ2vojY7p0P5KKWv+3j21X+Cb4Xx
jE+A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789978679; x=1790583479;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=daOx8PGU1MFoBeILT0X/mjLMrbC7kR+02idcJH16g50feBKpOyK/up7YJLwxv3SbeT
lp8fpRsztpeyQr8YkzkxByn/FgWNxLlQaOFp8VGSN3QACj/x7345wHUSxLDulyXhaVpW
BSgwTbPCb48dGV3+2gfEUxKxeKaAxrV4eePw5RW5WamQLz9Nu0zWOBurhOKP1QF+r4v+
tw7rONA5Qqh6v8E2WG8PwO1yYi8JZODZATANKOmrqVGysCCYAOx4Q3EQAowXOr7/k+aj
4LDn6CQ4IKd2bjBgXj4S3FVesFTnSQdJBnPr6dT34ZKa2RaXA62GMevYvxXOA8YnKLaw
0zZQ==
X-Forwarded-Encrypted: i=1; AKwUvBw+JC40Qq64qGmUvsa5n3KFilFcl+rekYu68QQ+qxo3o6mkIgYFviDdhhhFFR23QvsElSGcd2U=@netknow.ca
X-Gm-Message-State: AFuF++nCiwQj+TiOLA774eO5LpFkvpn5puDeCoXJAWhnPLx6IGTVfn7+
xhnXpsRLq8OUcDCMzsyB01S7PmSMcQyZrAR58xfdxIRt7QNKSHZt9X65hLMtoJD9unCiud7wgSK
HzVim3ylNjsxvIY51ArN1osiH+QSwfYeJg0ynhAc=
X-Gm-Gg: AYBFou3KOIDhwviYTfArDtp29wc3IFxIJfsW7OWvRQ4BvC0IAMoPbecocal6FeiOl77
BHCAm7CPdDYmEQ63vEfKdVDBvZcw6df0AVxKqaJ7hECk64aZjU68MHfy5bTS1H/xc0reqPE+x1M
gJR3fT7syTwxgJxXjdvE7amRR4ktvcleIotNBcapViYdeUz3ZYBzJlnXjx0pVrxtUCztQngmN+m
fJ9C20HzVY0a+CSIDyQw0UkwMAPAJtwZJtjQVfj48ZEa8YJxTOdSvQRGiMmnEm5nvKm455f4wju
iNPKoS8h5fHmJW6LURAXI8R0Sl1x+4o1DHLWnBw7BuIZ6iKyfs/llUyHPWTP2XmZI997OD01CzJ
DraY+eiZtcary
X-Received: by 2002:a05:690e:1349:b0:671:8e1:2386 with SMTP id
956f58d0204a3-6717fcf014bmr2850265d50.44.1789978197126; Mon, 21 Sep 2026
01:09:57 -0700 (PDT)
MIME-Version: 1.0
From: "relieffunde@outlook.com"
Date: Mon, 21 Sep 2026 13:39:46 +0530
X-Gm-Features: AcwNN1XUbFwPZynzidLxneCpY8Aah1Xc9RFWlPxOam2yTgvODnIPZb1IIajwqLg
Message-ID:
Subject: UN HUMANITARIAN AID PROGRAM 2026
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009871fd065bf9c651"
Bcc: doctor@netknow.ca
X-Spam_score: 20.5
X-Spam_score_int: 205
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR
UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.227.12 listed in dnsbl.ahbl.org]
[74.125.227.12 listed in dnsbl.ahbl.org]
[74.125.227.12 listed in dnsbl.ahbl.org]
[74.125.227.12 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.227.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.227.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.227.12 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.227.12 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.227.12 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kouamekouakouemmanuel49(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kouamekouakouemmanuel49(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
3.5 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail
account
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.12 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.12 listed in bl.score.senderscore.com]
Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026
--0000000000009871fd065bf9c651
Content-Type: text/plain; charset="UTF-8"
DEAR SIR/ MADAM,
YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO
CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS:
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:
--0000000000009871fd065bf9c651
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
DEAR SIR=
/ MADAM,
ail=3D"gmail_signature">
=C2=A0=C2=A0
YOUR EMAIL HA=
S BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR W=
INNING PRIZE, EMAIL US.
=3D"_blank">relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS: =
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0=
--0000000000009871fd065bf9c651--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 07:15:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8drU-00000000NyF-2zy7
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 07:15:12 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 07:15:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj2-f43.google.com ([74.125.227.171]:43270)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8WGm-000000006Fi-0SSz
for sales@nk.ca;
Sun, 20 Sep 2026 23:08:56 -0600
Received: by mail-pj2-f43.google.com with SMTP id 98e67ed59e1d1-39666bed444so192871a91.1
for ; Sun, 20 Sep 2026 22:08:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=theithubstudios.com; s=google; t=1789967274; x=1790572074; darn=nk.ca;
h=content-language:thread-index:content-type:mime-version:message-id
:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=B53jV964AiH8Se+5cRigUdkpZ0vTl9VBLYmfjgMERUw=;
b=TvPId8gjKWua3RpDxJLzRzRdjYa7Qko8gvXSWHDsVAjtPIv9cnGQeURL90KNfNd6o5
ogVvwO/ICs8u4DBBousfemkKRFCsnWMEwnNT3UAZCzfY7q+NbyKjN6gEXFgpKIwmL0nW
ZdFKdCQbtS/keqGrEcyVYaMP2oh/eFAOFbHfFtm101u4L6EwC6scwPwNcG0GuQJ96pYl
7it6P1SWe7Ml0K/gaE39cxmjEd9VqWPetK4GZx5L8AxnSxa5ACdzMLbMHxTSTolWuDI1
pffl9qT/TVh9UFLpF2GMFJF2e9ph82/o9X7WirQTaz1/Q0Xsq6RNaZSqiboqX5bKO+v+
+nsA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789967274; x=1790572074;
h=content-language:thread-index:content-type:mime-version:message-id
:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to:content-type;
bh=B53jV964AiH8Se+5cRigUdkpZ0vTl9VBLYmfjgMERUw=;
b=ghGkfPqu6kHaGmEYhdc7N6KyiVOXPs9KIEhhIV+LIv83hFt77ctdUtTbSHirWP9k6f
X6+dfJxI4lX2bx3kPfPPC9njHsBQbjbqCjnbqwTYqfryGzd8X2ME4wlEAJ3ZQohO0kwC
S97O9fr7OUuTNLyYgD4FMAaB0+beqRGz+jP+PozYVyR/CF5t/CZqBgs8bXK/NOZlS95D
FUHY9AB/3+t4pV13eM5i7hno84HEcza2JMDS4OWN3Gii+9tSeQ4IJLPApnvrI10DWq1m
KGTJUBlXmcAiiKd2Q2U3XYoA6/pFsQmxrIq3BvfbirE2SuThXXbqrQoVUkppNVcMy1OZ
oNLg==
X-Gm-Message-State: AFuF++kbXzw6SzUm3fO4Uo1/kft0QgaUCE2O2F5pfKyqaVzVFezM06c9
iauVL9j7tWYM1Pt99eBWvL/A+fWTbsgnurnMlNToITYN6rHjWuKDO6zyrxDsWJwKUSlMz111fGE
sNp3x
X-Gm-Gg: AYBFou0K6MG5Yg8xMol8a7q8csj3DIj5FWF6+U+M9ONidxVhYy3ID8YQCMRSlI/M3YB
pkF4IE3plE6cEZB1T32N/pCs1OvGH0Ept+5QwGNW6zJ6cNiQCTKo93mdK4tfVLmtmLUDduoWNPj
SrDkbj08dg+VHMKv+NSIxptIkuE+8HyG8ZMPQQ5QrZH/DOimiIl7MikpYuztvSvPVco03a7TaTo
5Qbwm3C0LkToGh4u129qo7coa98bJG6ohUBto08+BTgb6KjrKsk6SEM9arFokdp8M0cuPu9DPts
zJfj7LdSn80ObnxWgKkV8QPg4s7yHi07b4w+e7IJprBg6xp1TMCt1/Hn0y3fjve1BC0HI9quccL
PiEcOLe3qoy0BHHZHSse90UDTRYiJOKKHNyC6/6GN0b2En1JIi5Q0dagFkn9gLLZulFr1NoxgWn
yGq6QYqOomHeVUda7lOf9+oQBHH6RSoMd+s67PlMt6we1kvr3UePJ8lNeYbkE2Niu5zmvxB0K/T
V0vvf/Us3j4iT30m/zjZXs=
X-Received: by 2002:a17:90b:58f0:b0:39e:261:4e13 with SMTP id 98e67ed59e1d1-39e54f42eefmr20207342a91.3.1789967274447;
Sun, 20 Sep 2026 22:07:54 -0700 (PDT)
Received: from DESKTOPL5RN3M6 ([2401:4900:8845:4648:a944:ec53:9887:cea0])
by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-39e6cb427casm12106608a91.17.2026.09.20.22.07.52
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Sun, 20 Sep 2026 22:07:53 -0700 (PDT)
From: "Neile Adams"
To:
Subject: RE: 1st Page Ranking
Date: Mon, 21 Sep 2026 10:34:53 +0530
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_BBD6_01DD49B5.429C7140"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: Ad1JfNHa9B9mogLSQQilKeT1u5scXA==
Content-Language: en-us
X-Spam_score: 5.2
X-Spam_score_int: 52
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, May I send you a web portfolio and prices? Please let
me know. Thank you,
Content analysis details: (5.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.227.171 listed in dnsbl.ahbl.org]
[74.125.227.171 listed in dnsbl.ahbl.org]
[74.125.227.171 listed in dnsbl.ahbl.org]
[74.125.227.171 listed in dnsbl.ahbl.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in dnsbl.ahbl.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in dnsbl.ahbl.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in dnsbl.ahbl.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.227.171 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.227.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.227.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.227.171 listed in dnsbl.ahbl.org]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: theithubstudios.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: theithubstudios.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.171 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.171 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} RE: 1st Page Ranking
This is a multipart message in MIME format.
------=_NextPart_000_BBD6_01DD49B5.429C7140
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi,
May I send you a web portfolio and prices? Please let me know.
Thank you,
_____
From: Neile Adams
Sent: 02 September 2026 03:51 PM
To: sales@nk.ca
Subject: 1st Page Ranking
Hello,
We checked your website ''www.nk.ca" and see you have a good design and it
looks great, but it's not ranking on Google and other major search engine.
We are a SEO Expert and helped over 2500+ businesses rank on the (1st Page
on Google). Our rates are very affordable.
We can send you a price list?
Thanks
Neile Adams
------=_NextPart_000_BBD6_01DD49B5.429C7140
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
(filtered medium)">
class=3DWordSection1>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>Hi,
=
May I send you a web portfolio and prices? Please let me =
know.
Thank you,
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=
style=3D'text-align:center'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>
size=3D3 width=3D"100%" align=3Dcenter>
class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:
>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'> Neile =
Adams
Sent: 02 September 2026 03:51 PM
To: =
sales@nk.ca
Subject: 1st Page Ranking
Hello,
We =
checked your website ‘‘www.nk.ca” and see you have a =
good design and it looks great, but it’s not ranking on Google and =
other major search engine.
We are a SEO Expert and helped over =
2500+ businesses rank on the (1st Page on Google). Our rates are very =
affordable.
We can send you a price =
list?
Thanks
Neile =
Adams
------=_NextPart_000_BBD6_01DD49B5.429C7140--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 20 Sep 2026 20:38:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8TvI-000000004nL-1jo2
for dave@doctor.nl2k.ab.ca;
Sun, 20 Sep 2026 20:38:28 -0600
Resent-From: The Doctor
Resent-Date: Sun, 20 Sep 2026 20:38:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from dehliz.cenayhosting.com ([95.173.177.4]:57066)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8OxH-00000000JWP-1j3Q
for sales@nk.ca;
Sun, 20 Sep 2026 15:20:21 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=endtech.com.tr; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:To:From:Reply-To:Message-ID:Sender:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Unsubscribe-Post:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=RrR0M4ngbg3RlrnwLNG7t74JDtTLbb8XdBw2bmYvV8w=; b=SE48MDf4DzuyYNUCDkSmrJHkAQ
18AEWkZYVlzTjONVFm4TrclsSzBUYLRGRH4ULgNgplL4dR7C7I7OlEmTXBWHH5uyaM9zqzaUc1/3p
zU33QMmkHHe6deC/pVafpaCxEMEWQ9qMHXGQnmBXmRX+UFFmivfAIZcge5QwffY4g4oaCyrrVq5Pa
vPg/Q+KuDUFjWC7+/uESDXcEl/G4nmIBkPWTVteC0hl1pDWySFRKqXXi1oSvobLIXNtmZONmhqcJM
3vnPr4bwUfQttrzTpjLLUpNeB4qXdA6NghuTjVx6vlEca4wOiHbjXdOrmjM03nPGCTfH7kwXrjfH8
MKRjsscg==;
Received: from ip68-231-132-74.tc.ph.cox.net ([68.231.132.74]:54270 helo=googlemail.com)
by dehliz.cenayhosting.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100)
(envelope-from )
id 1x8OnR-0000000GJbn-34Yx;
Mon, 21 Sep 2026 00:10:01 +0300
Message-ID: <2451274fbb7f555e7dd2cb6091d07a70c63f7eb0@endtech.com.tr>
Reply-To: Paul
From: Paul
To: Pia
Subject: 1win casino database for sale and cryptorino database for sale
Date: Sun, 20 Sep 2026 23:09:17 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dehliz.cenayhosting.com
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - endtech.com.tr
X-Get-Message-Sender-Via: dehliz.cenayhosting.com: authenticated_id: ozgur.ozen@endtech.com.tr
X-Authenticated-Sender: dehliz.cenayhosting.com: ozgur.ozen@endtech.com.tr
X-Source:
X-Source-Args:
X-Source-Dir:
hello,
I am selling the following databases
All records contain contact details such as email addresses, names, physi=
cal addresses, phone numbers, and more.
cryptorino.io.sql (A crypto casino =E2=80=94 complete database)
Price: $900
1win.com.sql (An online casino =E2=80=94 very large)
63 million records
Price: $900
If you are interested contact me on Telegram at @paulxq9 or paulxq99 or p=
aulxq999 , if one username does not work try another.
I accept only bitcoin or another cryptocurrency as payment method.
Do not reply to this email, instead, contact me on Telegram if you are in=
terested!
checmtuxhvksvyorjgryxuxduubcgxjyrvumwfqasuyycwiavyhfzvcdwjrnyh
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 20 Sep 2026 20:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8Tuo-000000004h6-1r2Q
for dave@doctor.nl2k.ab.ca;
Sun, 20 Sep 2026 20:37:58 -0600
Resent-From: The Doctor
Resent-Date: Sun, 20 Sep 2026 20:37:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from a3-11.smtp-out.eu-west-1.amazonses.com ([54.240.3.11]:34379)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from <010201a0c07636c3-0984e5b6-ad70-4c61-aa13-60c3dca3c635-000000@send.mikozod.ro>)
id 1x8NyA-00000000CrI-0qU7
for root@nk.ca;
Sun, 20 Sep 2026 14:17:11 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=resend;
d=mikozod.ro; t=1789935367;
h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;
bh=/DiFIw90bwJcmnIG5O1bQdu3Jkw27RFLCPq29qPDYSY=;
b=n4uUuzExP4W4tyoWYvRrqQuz63FAIX5pWkdFUVPLJSi4O8iU5qYfCwFWrpRR4yg1
dq7sNiYhGQEk4P8l+OkpSFkTlBpe8bpobmtCvQ+GGlsLLKbAfq/GUAK/GSxNELbM34A
rLsyn2SUz1esP5zcaAkPRX7ya8OYq5T2lh6BmEwI=
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
s=shh3fegwg5fppqsuzphvschd53n6ihuv; d=amazonses.com; t=1789935367;
h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type:Feedback-ID;
bh=/DiFIw90bwJcmnIG5O1bQdu3Jkw27RFLCPq29qPDYSY=;
b=M0cuM7H4rWB7K+KF3n/ekcnT54Z2VpZdO1zgWKzNX3QFsgJPsMl1/GYEfTN5hh7B
xXUKRawFE8oK3NpMt/8rr0M+BtL4zSpZMuc79t6/difblZf5I5wNbWkairRMbY1vf7N
8qr+RBEk0YcRqlELrBd7jkterNKBrtFfgND2jnLs=
From: FedEx Notifications
To: root@nk.ca
Subject: Your Delivery Update
Message-ID: <010201a0c07636c3-0984e5b6-ad70-4c61-aa13-60c3dca3c635-000000@eu-west-1.amazonses.com>
Date: Sun, 20 Sep 2026 20:16:07 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--_NmP-7708f40fd24cdab8-Part_1"
Feedback-ID: :1.eu-west-1.dQwBQNzPKritNaf0NHG9k176MlOysSyr2bsAae6jgUY+J7I/jo76YVL7xEFKf4s/l6mk/N7vtc8v5Eb4ECQY8FKO7lWMTyEVdxBicrB37J4W1t2cu4x5vAUfHiG95IvByNZ3W4MksJl0PernfhcWMmjRhLY3Xl7xFq6ZH9DgpEY=:1.eu-west-1.duyiEkLYPi4nGdRFd7LaGmAjRWieZlOvGu1wIBVR/Ks=:AmazonSES
X-SES-Outgoing: 2026.09.20-54.240.3.11
X-Spam_score: 8.3
X-Spam_score_int: 83
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FedEx SHIPMENT UPDATE A shipment has arrived at your local
FedEx facility and is awaiting final delivery confirmation. Outstanding balance:
$14.99 CAD Tracking 7894 3210 5678 9012 Weight 2.5 kg Service International
Priority Reference INV-2026-0042
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[54.240.3.11 listed in dnsbl.ahbl.org]
[54.240.3.11 listed in dnsbl.ahbl.org]
[54.240.3.11 listed in dnsbl.ahbl.org]
[54.240.3.11 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[54.240.3.11 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[54.240.3.11 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[54.240.3.11 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[54.240.3.11 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: mikozod.ro]
[URI: load.bz]
-0.0 SPF_PASS SPF: sender matches SPF record
2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[54.240.3.11 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[54.240.3.11 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[54.240.3.11 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
Subject: {SPAM?} Your Delivery Update
----_NmP-7708f40fd24cdab8-Part_1
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
FedEx SHIPMENT UPDATE
A shipment has arrived at your local FedEx facility =
and is awaiting final delivery confirmation. Outstanding balance: $14.99 =
CAD
Tracking 7894 3210 5678 9012 Weight 2.5 kg Service International =
Priority Reference INV-2026-0042
Review your shipment details Review =
Details https://load.bz//JABj
Confirmation process Once you review the =
shipment details, you can confirm the delivery information on the same page=
. =E2=80=A2 Review the shipment information
=E2=80=A2 Confirm the delivery =
address
=E2=80=A2 Track the package status
View shipment details =
https://load.bz//JABj
Final-mile delivery partner KOGO
The final-mile portion of your shipment is handled by our delivery partner.=
Keep this reference available for tracking.
The outstanding balance on =
this shipment is $14.99 CAD.
Review the shipment details to proceed with =
delivery confirmation.
This message was sent regarding a shipment =
associated with your address.
=C2=A9 2026 FedEx. All rights reserved.
----_NmP-7708f40fd24cdab8-Part_1
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
=EF=BB=BF
0">
Shipment Update - Delivery Confirmation Required
Helvetica,sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100=
%;">
border=3D"0" style=3D"background:#f4f6f9;padding:20px 10px;margin:0;">
cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"max-width:520px;w=
idth:100%;background:#ffffff;border-radius:16px;box-shadow:0 8px 32px =
rgba(0,0,0,0.10);border:1px solid #e0e3e9;margin:0 auto;">
|
|
16px 0 0;">
border=3D"0">
|
0;letter-spacing:0.5px;">FedEx
|
ackground:rgba(255,255,255,0.20);padding:4px 14px;border-radius:20px;letter=
-spacing:0.5px;">SHIPMENT UPDATE
border=3D"0">
|
|
7;padding-bottom:12px;">
A shipment has arrived at your local FedEx =
facility and is awaiting final delivery confirmation.
|
7;padding-bottom:8px;">
Outstanding =
balance:
00;">$14.99 CAD
cellpadding=3D"0" cellspacing=3D"0" border=3D"0">
|
style=3D"padding:14px 0 14px 0;border-bottom:2px dashed =
#dde0e7;">
style=3D"margin-top:14px;">
|
color:#666666;padding-bottom:8px;">
999;text-transform:uppercase;letter-spacing:0.5px;display:block;">Tracking<=
/span>
7894 3210 5678 =
9012
|
style=3D"font-size:11px;color:#666666;padding-bottom:8px;">
spacing:0.5px;display:block;">Weight
style=3D"font-size:14px;color:#1a1a1a;">2.5 kg
spacing:0.5px;display:block;">Service
style=3D"font-size:13px;color:#1a1a1a;">International Priority
|
|
66;">
etter-spacing:0.5px;display:block;">Reference
INV-2026-0042
cellpadding=3D"0" cellspacing=3D"0" border=3D"0">
|
style=3D"padding:14px 0 14px 0;border-bottom:2px dashed =
#dde0e7;">
cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"margin-top:6px;">
|
7;padding-bottom:8px;">
Review your =
shipment details
|
style=3D"padding:8px 0 12px 0;">
style=3D"display:inline-block;background:#4D148C;color:#ffffff;padding:12px=
32px;border-radius:8px;text-decoration:none;font-size:16px;font-weight:600=
;">Review Details
cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"margin-top:6px;">
|
7;padding-bottom:8px;">
Confirmation =
process
|
;line-height:1.7;padding-bottom:10px;">
Once you review the shipment =
details, you can confirm the delivery information on the same page.
|
8;padding-left:10px;padding-bottom:6px;">
=E2=80=A2 Review the shipment =
information
=E2=80=A2 Confirm the delivery address
=E2=80=A2 Track the package status
style=3D"margin-top:6px;">
|
2px 0;">
oration:underline;font-size:13px;font-weight:600;">View shipment =
details
cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"border:1px solid =
#e5e7eb;border-radius:10px;">
|
|
3px;padding-bottom:4px;">Final-mile delivery partner
|
etter-spacing:0.5px;">KOGO
0;font-size:12px;color:#555555;line-height:1.6;">
The final-mile portion of=
your shipment is handled by our delivery partner. Keep this reference =
available for tracking.
|
|
24px;border-radius:0 0 16px 16px;border-top:1px solid #e6e9ef;">
|
t:1.7;">
The outstanding balance on this shipment is
style=3D"color:#1a1a1a;">$14.99 CAD.
Review the shipment =
details to proceed with delivery confirmation.
style=3D"max-width:520px;margin-top:12px;">
|
style=3D"font-size:10px;color:#999999;text-align:center;padding:6px =
0;line-height:1.6;">
This message was sent regarding a shipment associated =
with your address.
© 2026 FedEx. All rights reserved.
----_NmP-7708f40fd24cdab8-Part_1--