nk.ca credential phishing
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 14:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzKrg-000000007VK-2WN1
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 14:04:24 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 14:04:24 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from server.nigatom.gov.ng ([170.249.214.194]:60138)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzKoi-000000004Cq-3nn1
for root@nk.ca;
Thu, 18 Sep 2025 14:01:34 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nigatom.gov.ng; s=default; h=Message-Id:Date:MIME-Version:Content-Type:To:
Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=WNFq/EJzELpZoUv3vWtm9O1dVePrG4myjHKLk7df3Ag=; b=JOLkAsqCZGEPg6vHqv1EjulDym
Eg+hEpKgAtta5ZcnsC64AO73nQuKoK3Eife3d/8YKUpYfZaGEZ+ltdktZOYUOLqnJrZ/5nPWX/eF1
IEBwIHBFFOdW02kfi0Lmxf6cUta9Xk5F5jfZuVO13TfoeBjUED1AhXFIC+ptLh9K2f72esbVHxa8H
IETR7bb9F8FV6uCbTL4/dpAIkSYClr+gIxOiyLR9mjZ82FoGL2Mo/JnpcObLaHb0+amb4t3Twfbat
ZSaPJFwW90y1yv3c+8Wm43n89jJiHcGwamAc4FSWPRxfw+4HK1pTyQ6iVfXHzY5+il+QVLfisVHF1
GMotn/QQ==;
Received: from ec2-3-149-247-239.us-east-2.compute.amazonaws.com ([3.149.247.239]:52679 helo=EC2AMAZ-OL9LF1Q)
by server.nigatom.gov.ng with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from
id 1uzKny-00000008asH-33qp
for root@nk.ca;
Thu, 18 Sep 2025 16:00:33 -0400
From: "nk"
Subject: ATTENTION : Password key expired!!!
To:
Content-Type: multipart/alternative; boundary="AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB"
MIME-Version: 1.0
Date: Thu, 18 Sep 2025 20:00:33 +0000
Message-Id: <183220250900203DD29DE1BF$33FD656CF7@nigatom.gov.ng>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.nigatom.gov.ng
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nigatom.gov.ng
X-Get-Message-Sender-Via: server.nigatom.gov.ng: authenticated_id: inemo.adaka@nigatom.gov.ng
X-Authenticated-Sender: server.nigatom.gov.ng: inemo.adaka@nigatom.gov.ng
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Email Password Center! ? Hello root@nk.ca, We're notifying
you that your current password has expired. To ensure uninterrupted access
to your account, please confirm your existing password below:
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[3.149.247.239 listed in dnsbl.ahbl.org]
[3.149.247.239 listed in dnsbl.ahbl.org]
[3.149.247.239 listed in dnsbl.ahbl.org]
[3.149.247.239 listed in dnsbl.ahbl.org]
[170.249.214.194 listed in dnsbl.ahbl.org]
[170.249.214.194 listed in dnsbl.ahbl.org]
[170.249.214.194 listed in dnsbl.ahbl.org]
[170.249.214.194 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[3.149.247.239 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[3.149.247.239 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[3.149.247.239 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[3.149.247.239 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment
1.2 GB_CUSTOM_HTM_URI Custom html uri
Subject: {SPAM?} ATTENTION : Password key expired!!!
This is a multi-part message in MIME format
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Email Password Center!=20
? Hello root@nk.ca,
We're notifying you that your current password has expired.
To ensure uninterrupted access to your account, please confirm your ex=
isting password below:
Keep Existing Password https://mueblescabra.com.mx/tom/redirect.php#ro=
ot@nk.ca
For a seamless experience and continued security, we recommend keeping=
your current password and staying logged in to your account.
Have questions or need help? We're happy to assist!
Thank you for your swift attention to this matter ;
Note: Failure to update may result in loss of access to your account o=
r email.
Thank You,
2025 nk Server
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
8859-1">
le=3D1"> <=
title>ATTENTION : Password key expired!!!
=3Dleft>
14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPAC=
ING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COL=
OR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; W=
IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=
ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=
ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=
le: initial; text-decoration-color: initial">
T-SIZE: small; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: =
0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FON=
T-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,=
255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=
aps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=
: initial; text-decoration-style: initial; text-decoration-color: init=
ial" align=3Dleft>
-large; FONT-FAMILY: 'Segoe UI'; FONT-WEIGHT: bolder">
OX-SIZING: border-box">
-ALIGN: inherit">
: inherit" color=3D#0000ff>Email Password Center!=
&n=
bsp;
MILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=
-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =
normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=
(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=
variant-caps: normal; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-se=
rif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FON=
T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: l=
eft; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-I=
NDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;=
text-decoration-thickness: initial; text-decoration-style: initial; t=
ext-decoration-color: initial">
FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal=
; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=
T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; OR=
PHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =
0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=
t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=
oration-style: initial; text-decoration-color: initial">
OX-SIZING: border-box">
ZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-S=
PACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =
COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2=
; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fon=
t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=
troke-width: 0px; text-decoration-thickness: initial; text-decoration-=
style: initial; text-decoration-color: initial">
ING: border-box" color=3D#2c363a size=3D2 face=3DArial>⦿ Hello =
root@nk.ca,
edium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px; MAR=
GIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34=
,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=
(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=
variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=
thickness: initial; text-decoration-style: initial; text-decoration-co=
lor: initial">
SIZING: border-box" size=3D2>
T style=3D"BOX-SIZING: border-box" color=3D#2c363a face=3DArial>
style=3D"BOX-SIZING: border-box" size=3D2>We're notifying you that you=
r current password has expired.
R style=3D"BOX-SIZING: border-box">To ensure uninterrupted access to y=
our account, please confirm your existing password below:
BOX-SIZING: border-box">
=
FONT>
; FONT-SIZE: 14px; BORDER-TOP: rgb(211,211,211) 1px dotted; FONT-FAMIL=
Y: Roboto, sans-serif; BORDER-RIGHT: rgb(211,211,211) 1px dotted; WHIT=
E-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: collapse; BORDER-=
BOTTOM: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none; FONT-WEIGHT=
: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; BOR=
DER-LEFT: rgb(211,211,211) 1px dotted; ORPHANS: 2; WIDOWS: 2; BACKGROU=
ND-COLOR: rgb(255,255,255); font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=
ness: initial; text-decoration-style: initial; text-decoration-color: =
initial">
ING: border-box">
(211,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1px dotted; B=
ORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM: 10px; PADDI=
NG-TOP: 10px; PADDING-LEFT: 10px; BORDER-LEFT: rgb(211,211,211) 1px do=
tted; MARGIN: 0px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: blue">
size=3D3 face=3DArial>
ION: none; COLOR: white; BACKGROUND-COLOR: transparent" href=3D"https:=
//mueblescabra.com.mx/tom/redirect.php#root@nk.ca" rel=3Dnoreferrer ta=
rget=3D_blank>Keep Existing Password<=
p style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=
o, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px=
; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-S=
TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255=
); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=
: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=
nitial; text-decoration-style: initial; text-decoration-color: initial=
">
T-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto,=
sans-serif"><=
SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
BOX-SIZING: border-box; FONT-SIZE: 13px">
rder-box; FONT-SIZE: 12px">
-SIZE: 13px">For a seamless experience and continued security, we reco=
mmend keeping your current password and staying logged in to your acco=
unt.
border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
le=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sa=
ns-serif">
-FAMILY: Roboto, sans-serif">
NT-SIZE: 16px">
>
"BOX-SIZING: border-box; FONT-SIZE: 12px">
order-box; FONT-SIZE: 13px">Have questions or need help? We're happy t=
o assist!
ZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
R style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=
o, sans-serif">
FONT-FAMILY: Roboto, sans-serif">
x; FONT-SIZE: 16px">
14px">
yle=3D"BOX-SIZING: border-box; FONT-SIZE: 12px">
ING: border-box; FONT-SIZE: 13px">Thank you for your swift attention t=
o this matter ;<=
/P>
SIZING: content-box; FONT-SIZE: 14px; OVERFLOW: visible; FONT-FAMILY: =
Roboto, sans-serif; BORDER-RIGHT-WIDTH: 0px; BORDER-TOP-COLOR: ; WHITE=
-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRAN=
SFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: norma=
l; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-IND=
ENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -=
webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=
t-decoration-style: initial; text-decoration-color: initial; border-im=
age: initial">
T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =
MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=
,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =
rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=
nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=
on-thickness: initial; text-decoration-style: initial; text-decoration=
-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">Note:=
Failure to update may result in loss of access to your account or ema=
il.
G: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE=
-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: no=
ne; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHAN=
S: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px;=
font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=
xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
-SIZING: border-box" size=3D2>
ONT-SIZE: 14px">
">
"BOX-SIZING: border-box; FONT-SIZE: 13px">
order-box; FONT-SIZE: 12px">Thank You,
AN>
T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =
MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=
,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =
rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=
nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=
on-thickness: initial; text-decoration-style: initial; text-decoration=
-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">
style=3D"BOX-SIZING: border-box" color=3D#0520fa>2025 nk Server=
FONT>
ZE: medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px=
; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-S=
TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255=
); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=
: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=
nitial; text-decoration-style: initial; text-decoration-color: initial=
" align=3Dleft>
dy>
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB--
nk.ca credential phishing
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 14:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzKrX-000000007Tg-1awq
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 14:04:15 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 14:04:15 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from server.nigatom.gov.ng ([170.249.214.194]:60108)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzKoi-000000004CQ-3nkm
for doctor@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 14:01:34 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nigatom.gov.ng; s=default; h=Message-Id:Date:MIME-Version:Content-Type:To:
Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=OEU2ZP3O4O+OCFpWCmqmh95tJh7scR9h3GZ+3kM7N/E=; b=lfeu3R0rhEbbBDHrx5ddsInq3g
d+ayXBBkkxE37TTmK1p3LxddpHl1ZYQjysB5W5VOEZgqVjk+AZYZBrCXk2wuqj1ACUOLOIIIzdLio
Oc3eEkeSuWvaPlBLrlfauD9Rjn9pXRIvO2JZC93azKYyWifQT0o3boEEKIBPqYfG8ybEh+A9S6eOZ
xsl3470wlaEwWLRd5nph/7Dv9HDYwZKuk9XYXoJHdAEBT+hEwnUxlsW+dle+u2So/vghXaQjPLrZq
HfSsNGjf3Lk4DX46utweh/+8OjwiXTDWkfynBEdgHxTsjGYV/nzSp1jtTtgysWJFdMK1qgOBGIDXO
khs4dKqA==;
Received: from ec2-3-149-247-239.us-east-2.compute.amazonaws.com ([3.149.247.239]:52676 helo=EC2AMAZ-OL9LF1Q)
by server.nigatom.gov.ng with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from
id 1uzKnx-00000008ar6-1lne
for doctor@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 16:00:32 -0400
From: "doctor"
Subject: ATTENTION : Password key expired!!!
To:
Content-Type: multipart/alternative; boundary="AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB"
MIME-Version: 1.0
Date: Thu, 18 Sep 2025 20:00:32 +0000
Message-Id: <1831202509002076DA0970AC$4B7CB904ED@nigatom.gov.ng>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.nigatom.gov.ng
X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nigatom.gov.ng
X-Get-Message-Sender-Via: server.nigatom.gov.ng: authenticated_id: inemo.adaka@nigatom.gov.ng
X-Authenticated-Sender: server.nigatom.gov.ng: inemo.adaka@nigatom.gov.ng
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Email Password Center! ? Hello doctor@doctor.nl2k.ab.ca,
We're notifying you that your current password has expired. To ensure uninterrupted
access to your account, please confirm your existing password below:
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[3.149.247.239 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
[170.249.214.194 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[3.149.247.239 listed in dnsbl.ahbl.org]
[3.149.247.239 listed in dnsbl.ahbl.org]
[3.149.247.239 listed in dnsbl.ahbl.org]
[3.149.247.239 listed in dnsbl.ahbl.org]
[170.249.214.194 listed in dnsbl.ahbl.org]
[170.249.214.194 listed in dnsbl.ahbl.org]
[170.249.214.194 listed in dnsbl.ahbl.org]
[170.249.214.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[3.149.247.239 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[3.149.247.239 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[3.149.247.239 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[3.149.247.239 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment
Subject: {SPAM?} ATTENTION : Password key expired!!!
This is a multi-part message in MIME format
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Email Password Center!=20
? Hello doctor@doctor.nl2k.ab.ca,
We're notifying you that your current password has expired.
To ensure uninterrupted access to your account, please confirm your ex=
isting password below:
Keep Existing Password https://mueblescabra.com.mx/tom/redirect.php#do=
ctor@doctor.nl2k.ab.ca
For a seamless experience and continued security, we recommend keeping=
your current password and staying logged in to your account.
Have questions or need help? We're happy to assist!
Thank you for your swift attention to this matter ;
Note: Failure to update may result in loss of access to your account o=
r email.
Thank You,
2025 doctor Server
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
8859-1">
le=3D1"> <=
title>ATTENTION : Password key expired!!!
=3Dleft>
14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPAC=
ING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COL=
OR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; W=
IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=
ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=
ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=
le: initial; text-decoration-color: initial">
T-SIZE: small; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: =
0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FON=
T-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,=
255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=
aps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=
: initial; text-decoration-style: initial; text-decoration-color: init=
ial" align=3Dleft>
-large; FONT-FAMILY: 'Segoe UI'; FONT-WEIGHT: bolder">
OX-SIZING: border-box">
-ALIGN: inherit">
: inherit" color=3D#0000ff>Email Password Center!=
&n=
bsp;
MILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=
-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =
normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=
(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=
variant-caps: normal; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-se=
rif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FON=
T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: l=
eft; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-I=
NDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;=
text-decoration-thickness: initial; text-decoration-style: initial; t=
ext-decoration-color: initial">
FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal=
; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=
T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; OR=
PHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =
0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=
t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=
oration-style: initial; text-decoration-color: initial">
OX-SIZING: border-box">
ZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-S=
PACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =
COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2=
; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fon=
t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=
troke-width: 0px; text-decoration-thickness: initial; text-decoration-=
style: initial; text-decoration-color: initial">
ING: border-box" color=3D#2c363a size=3D2 face=3DArial>⦿ Hello =
doctor@doctor.nl2k.ab.ca,
; FONT-SIZE: medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPA=
CING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; CO=
LOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGRO=
UND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures:=
normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=
xt-decoration-thickness: initial; text-decoration-style: initial; text=
-decoration-color: initial">
style=3D"BOX-SIZING: border-box" size=3D2>
rder-box">
Arial>We're notifying =
you that your current password has expired.
rder-box">
To ensure uninterrupted=
access to your account, please confirm your existing password below:<=
BR style=3D"BOX-SIZING: border-box">
x">
: border-box; FONT-SIZE: 14px; BORDER-TOP: rgb(211,211,211) 1px dotted=
; FONT-FAMILY: Roboto, sans-serif; BORDER-RIGHT: rgb(211,211,211) 1px =
dotted; WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: colla=
pse; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none;=
FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIG=
N: left; BORDER-LEFT: rgb(211,211,211) 1px dotted; ORPHANS: 2; WIDOWS:=
2; BACKGROUND-COLOR: rgb(255,255,255); font-variant-ligatures: normal=
; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=
ration-thickness: initial; text-decoration-style: initial; text-decora=
tion-color: initial">
e=3D"BOX-SIZING: border-box">
DER-TOP: rgb(211,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1=
px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM:=
10px; PADDING-TOP: 10px; PADDING-LEFT: 10px; BORDER-LEFT: rgb(211,211=
,211) 1px dotted; MARGIN: 0px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: =
blue">
TEXT-DECORATION: none; COLOR: white; BACKGROUND-COLOR: transparent" hr=
ef=3D"https://mueblescabra.com.mx/tom/redirect.php#doctor@doctor.nl2k.=
ab.ca" rel=3Dnoreferrer target=3D_blank>Keep Existing Password
NT>
: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPA=
CING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; CO=
LOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGRO=
UND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures:=
normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=
xt-decoration-thickness: initial; text-decoration-style: initial; text=
-decoration-color: initial">
OX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-seri=
f">
Roboto, sans-serif">
14px; FONT-FAMILY: Roboto, sans-serif">
er-box; FONT-SIZE: 16px">
IZE: 14px">
AN style=3D"BOX-SIZING: border-box; FONT-SIZE: 12px">
X-SIZING: border-box; FONT-SIZE: 13px">For a seamless experience and c=
ontinued security, we recommend keeping your current password and stay=
ing logged in to your account.
N>
oboto, sans-serif">
x; FONT-FAMILY: Roboto, sans-serif">
box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
BOX-SIZING: border-box; FONT-SIZE: 16px">
rder-box; FONT-SIZE: 14px">
-SIZE: 13px"><=
SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 13px">Have questions =
or need help? We're happy to assist!
>
ILY: Roboto, sans-serif">
E: 14px; FONT-FAMILY: Roboto, sans-serif">
order-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
le=3D"BOX-SIZING: border-box; FONT-SIZE: 16px">
NG: border-box; FONT-SIZE: 14px">
; FONT-SIZE: 13px">
2px">Thank you=
for your swift attention to this matter ;=
SPAN>
ORDER-LEFT-WIDTH: 0px; BOX-SIZING: content-box; FONT-SIZE: 14px; OVERF=
LOW: visible; FONT-FAMILY: Roboto, sans-serif; BORDER-RIGHT-WIDTH: 0px=
; BORDER-TOP-COLOR: ; WHITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; W=
ORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(4=
4,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR:=
rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; f=
ont-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=
ion-thickness: initial; text-decoration-style: initial; text-decoratio=
n-color: initial; border-image: initial">
r-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: =
normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT=
-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WI=
DOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-va=
riant-ligatures: normal; font-variant-caps: normal; -webkit-text-strok=
e-width: 0px; text-decoration-thickness: initial; text-decoration-styl=
e: initial; text-decoration-color: initial">
border-box" size=3D2>
: 14px">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
IZING: border-box; FONT-SIZE: 13px">
box; FONT-SIZE: 12px">Note: Failure to update may result in loss of ac=
cess to your account or email.
T>
: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-T=
OP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58);=
FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,=
255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=
ness: initial; text-decoration-style: initial; text-decoration-color: =
initial">
"BOX-SIZING: border-box; FONT-SIZE: 14px">
order-box; FONT-SIZE: 16px">
T-SIZE: 14px">=
Thank You,
AN>
er-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE:=
normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FON=
T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; W=
IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=
ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=
ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=
le: initial; text-decoration-color: initial">
: border-box" size=3D2>
E: 14px">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 13px">
-box; FONT-SIZE: 9px">
0520fa>2025 doctor Server
N>
SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 4=
00; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; B=
ACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-liga=
tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=
px; text-decoration-thickness: initial; text-decoration-style: initial=
; text-decoration-color: initial" align=3Dleft>
rial>
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB--
nk.ca credential phishing
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 14:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzKrc-000000007Ug-0zra
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 14:04:20 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 14:04:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from server.nigatom.gov.ng ([170.249.214.194]:60144)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzKoi-000000004Cv-3nMz
for sales@nk.ca;
Thu, 18 Sep 2025 14:01:30 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nigatom.gov.ng; s=default; h=Message-Id:Date:MIME-Version:Content-Type:To:
Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=UC4IK8W44j0LwL3WXcwHRI+rmDanK6egkSffpukioMs=; b=KCQOBrUrmWgLl8qfudtdrE7NbV
386/U4f4FrZRAKbV6+FaBXp3F0hZOdbPrz6S0a+WSke8B2+I/nhDAOpRpb2Q3XH1T34DhP2GIj0zF
rdzhVQUdOeNsH2rjxQq8XougHLHhApWMa+HEUvwZCmt5hWKALPdnPpuofbmBTRjwkwhkBNM1rwDNl
7dQ/zZOF/oU3btGdtlCbTrrP/5/12Qbs6znpJC6Xd+Vh868EQkLNUkYwFR/0EN6qGqYaVjlr0aYpV
eXpSEfABqlJp8TLwtbMW4ivXV03EapRwS0q6CS2zTQekt5Ve5vP1B8lmGmELgsNwj/oMLYRYbC/Vy
LT7hdHIA==;
Received: from ec2-3-149-247-239.us-east-2.compute.amazonaws.com ([3.149.247.239]:52680 helo=EC2AMAZ-OL9LF1Q)
by server.nigatom.gov.ng with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from
id 1uzKny-00000008atY-3yHQ
for sales@nk.ca;
Thu, 18 Sep 2025 16:00:33 -0400
From: "nk"
Subject: ATTENTION : Password key expired!!!
To:
Content-Type: multipart/alternative; boundary="AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB"
MIME-Version: 1.0
Date: Thu, 18 Sep 2025 20:00:33 +0000
Message-Id: <18332025090020C3386E4D1D-4FFA3DD753@nigatom.gov.ng>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.nigatom.gov.ng
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nigatom.gov.ng
X-Get-Message-Sender-Via: server.nigatom.gov.ng: authenticated_id: inemo.adaka@nigatom.gov.ng
X-Authenticated-Sender: server.nigatom.gov.ng: inemo.adaka@nigatom.gov.ng
X-Source:
X-Source-Args:
X-Source-Dir:
This is a multi-part message in MIME format
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Email Password Center!=20
? Hello sales@nk.ca,
We're notifying you that your current password has expired.
To ensure uninterrupted access to your account, please confirm your ex=
isting password below:
Keep Existing Password https://mueblescabra.com.mx/tom/redirect.php#sa=
les@nk.ca
For a seamless experience and continued security, we recommend keeping=
your current password and staying logged in to your account.
Have questions or need help? We're happy to assist!
Thank you for your swift attention to this matter ;
Note: Failure to update may result in loss of access to your account o=
r email.
Thank You,
2025 nk Server
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
8859-1">
le=3D1"> <=
title>ATTENTION : Password key expired!!!
=3Dleft>
14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPAC=
ING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COL=
OR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; W=
IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=
ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=
ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=
le: initial; text-decoration-color: initial">
T-SIZE: small; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: =
0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FON=
T-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,=
255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=
aps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=
: initial; text-decoration-style: initial; text-decoration-color: init=
ial" align=3Dleft>
-large; FONT-FAMILY: 'Segoe UI'; FONT-WEIGHT: bolder">
OX-SIZING: border-box">
-ALIGN: inherit">
: inherit" color=3D#0000ff>Email Password Center!=
&n=
bsp;
MILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=
-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =
normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=
(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=
variant-caps: normal; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-se=
rif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FON=
T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: l=
eft; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-I=
NDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;=
text-decoration-thickness: initial; text-decoration-style: initial; t=
ext-decoration-color: initial">
FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal=
; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=
T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; OR=
PHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =
0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=
t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=
oration-style: initial; text-decoration-color: initial">
OX-SIZING: border-box">
ZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-S=
PACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =
COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2=
; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fon=
t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=
troke-width: 0px; text-decoration-thickness: initial; text-decoration-=
style: initial; text-decoration-color: initial">
ING: border-box" color=3D#2c363a size=3D2 face=3DArial>⦿ Hello =
sales@nk.ca,
medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px; MA=
RGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,3=
4,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rg=
b(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font=
-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=
-thickness: initial; text-decoration-style: initial; text-decoration-c=
olor: initial">
-SIZING: border-box" size=3D2>
NT style=3D"BOX-SIZING: border-box" color=3D#2c363a face=3DArial>
style=3D"BOX-SIZING: border-box" size=3D2>We're notifying you that yo=
ur current password has expired.
<=
BR style=3D"BOX-SIZING: border-box">To ensure uninterrupted access to =
your account, please confirm your existing password below:
"BOX-SIZING: border-box">
<=
/FONT>
x; FONT-SIZE: 14px; BORDER-TOP: rgb(211,211,211) 1px dotted; FONT-FAMI=
LY: Roboto, sans-serif; BORDER-RIGHT: rgb(211,211,211) 1px dotted; WHI=
TE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: collapse; BORDER=
-BOTTOM: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none; FONT-WEIGH=
T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; BO=
RDER-LEFT: rgb(211,211,211) 1px dotted; ORPHANS: 2; WIDOWS: 2; BACKGRO=
UND-COLOR: rgb(255,255,255); font-variant-ligatures: normal; font-vari=
ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thic=
kness: initial; text-decoration-style: initial; text-decoration-color:=
initial">
ZING: border-box">
b(211,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1px dotted; =
BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM: 10px; PADD=
ING-TOP: 10px; PADDING-LEFT: 10px; BORDER-LEFT: rgb(211,211,211) 1px d=
otted; MARGIN: 0px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: blue">
size=3D3 face=3DArial>
TION: none; COLOR: white; BACKGROUND-COLOR: transparent" href=3D"https=
://mueblescabra.com.mx/tom/redirect.php#sales@nk.ca" rel=3Dnoreferrer =
target=3D_blank>Keep Existing Password
>
oto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0=
px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT=
-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,2=
55); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-ca=
ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial; text-decoration-color: initi=
al">
ONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
NG: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
N style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=
o, sans-serif">
>
"BOX-SIZING: border-box; FONT-SIZE: 13px">
order-box; FONT-SIZE: 12px">
T-SIZE: 13px">For a seamless experience and continued security, we rec=
ommend keeping your current password and staying logged in to your acc=
ount.
: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
yle=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, s=
ans-serif">
T-FAMILY: Roboto, sans-serif">
ONT-SIZE: 16px">
">
"BOX-SIZING: border-box; FONT-SIZE: 12px">
order-box; FONT-SIZE: 13px">Have questions or need help? We're happy t=
o assist!
ZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
R style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=
o, sans-serif">
FONT-FAMILY: Roboto, sans-serif">
x; FONT-SIZE: 16px">
14px">
yle=3D"BOX-SIZING: border-box; FONT-SIZE: 12px">
ING: border-box; FONT-SIZE: 13px">Thank you for your swift attention t=
o this matter ;<=
/P>
SIZING: content-box; FONT-SIZE: 14px; OVERFLOW: visible; FONT-FAMILY: =
Roboto, sans-serif; BORDER-RIGHT-WIDTH: 0px; BORDER-TOP-COLOR: ; WHITE=
-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRAN=
SFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: norma=
l; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-IND=
ENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -=
webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=
t-decoration-style: initial; text-decoration-color: initial; border-im=
age: initial">
T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =
MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=
,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =
rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=
nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=
on-thickness: initial; text-decoration-style: initial; text-decoration=
-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">Note:=
Failure to update may result in loss of access to your account or ema=
il.
G: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE=
-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: no=
ne; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHAN=
S: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px;=
font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=
xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
-SIZING: border-box" size=3D2>
ONT-SIZE: 14px">
">
"BOX-SIZING: border-box; FONT-SIZE: 13px">
order-box; FONT-SIZE: 12px">Thank You,
AN>
T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =
MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=
,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =
rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=
nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=
on-thickness: initial; text-decoration-style: initial; text-decoration=
-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">
style=3D"BOX-SIZING: border-box" color=3D#0520fa>2025 nk Server=
FONT>
ZE: medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px=
; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-S=
TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255=
); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=
: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=
nitial; text-decoration-style: initial; text-decoration-color: initial=
" align=3Dleft>
dy>
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB--
nk.ca credential phishing
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 14:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzKrc-000000007Ug-0zra
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 14:04:20 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 14:04:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from server.nigatom.gov.ng ([170.249.214.194]:60144)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzKoi-000000004Cv-3nMz
for sales@nk.ca;
Thu, 18 Sep 2025 14:01:30 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nigatom.gov.ng; s=default; h=Message-Id:Date:MIME-Version:Content-Type:To:
Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=UC4IK8W44j0LwL3WXcwHRI+rmDanK6egkSffpukioMs=; b=KCQOBrUrmWgLl8qfudtdrE7NbV
386/U4f4FrZRAKbV6+FaBXp3F0hZOdbPrz6S0a+WSke8B2+I/nhDAOpRpb2Q3XH1T34DhP2GIj0zF
rdzhVQUdOeNsH2rjxQq8XougHLHhApWMa+HEUvwZCmt5hWKALPdnPpuofbmBTRjwkwhkBNM1rwDNl
7dQ/zZOF/oU3btGdtlCbTrrP/5/12Qbs6znpJC6Xd+Vh868EQkLNUkYwFR/0EN6qGqYaVjlr0aYpV
eXpSEfABqlJp8TLwtbMW4ivXV03EapRwS0q6CS2zTQekt5Ve5vP1B8lmGmELgsNwj/oMLYRYbC/Vy
LT7hdHIA==;
Received: from ec2-3-149-247-239.us-east-2.compute.amazonaws.com ([3.149.247.239]:52680 helo=EC2AMAZ-OL9LF1Q)
by server.nigatom.gov.ng with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from
id 1uzKny-00000008atY-3yHQ
for sales@nk.ca;
Thu, 18 Sep 2025 16:00:33 -0400
From: "nk"
Subject: ATTENTION : Password key expired!!!
To:
Content-Type: multipart/alternative; boundary="AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB"
MIME-Version: 1.0
Date: Thu, 18 Sep 2025 20:00:33 +0000
Message-Id: <18332025090020C3386E4D1D-4FFA3DD753@nigatom.gov.ng>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.nigatom.gov.ng
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nigatom.gov.ng
X-Get-Message-Sender-Via: server.nigatom.gov.ng: authenticated_id: inemo.adaka@nigatom.gov.ng
X-Authenticated-Sender: server.nigatom.gov.ng: inemo.adaka@nigatom.gov.ng
X-Source:
X-Source-Args:
X-Source-Dir:
This is a multi-part message in MIME format
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Email Password Center!=20
? Hello sales@nk.ca,
We're notifying you that your current password has expired.
To ensure uninterrupted access to your account, please confirm your ex=
isting password below:
Keep Existing Password https://mueblescabra.com.mx/tom/redirect.php#sa=
les@nk.ca
For a seamless experience and continued security, we recommend keeping=
your current password and staying logged in to your account.
Have questions or need help? We're happy to assist!
Thank you for your swift attention to this matter ;
Note: Failure to update may result in loss of access to your account o=
r email.
Thank You,
2025 nk Server
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
8859-1">
le=3D1"> <=
title>ATTENTION : Password key expired!!!
=3Dleft>
14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPAC=
ING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COL=
OR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; W=
IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=
ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=
ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=
le: initial; text-decoration-color: initial">
T-SIZE: small; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: =
0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FON=
T-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,=
255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=
aps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=
: initial; text-decoration-style: initial; text-decoration-color: init=
ial" align=3Dleft>
-large; FONT-FAMILY: 'Segoe UI'; FONT-WEIGHT: bolder">
OX-SIZING: border-box">
-ALIGN: inherit">
: inherit" color=3D#0000ff>Email Password Center!=
&n=
bsp;
MILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=
-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =
normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=
(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=
variant-caps: normal; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-se=
rif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FON=
T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: l=
eft; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-I=
NDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;=
text-decoration-thickness: initial; text-decoration-style: initial; t=
ext-decoration-color: initial">
FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal=
; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=
T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; OR=
PHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =
0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=
t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=
oration-style: initial; text-decoration-color: initial">
OX-SIZING: border-box">
ZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-S=
PACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =
COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2=
; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fon=
t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=
troke-width: 0px; text-decoration-thickness: initial; text-decoration-=
style: initial; text-decoration-color: initial">
ING: border-box" color=3D#2c363a size=3D2 face=3DArial>⦿ Hello =
sales@nk.ca,
medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px; MA=
RGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,3=
4,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rg=
b(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font=
-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=
-thickness: initial; text-decoration-style: initial; text-decoration-c=
olor: initial">
-SIZING: border-box" size=3D2>
NT style=3D"BOX-SIZING: border-box" color=3D#2c363a face=3DArial>
style=3D"BOX-SIZING: border-box" size=3D2>We're notifying you that yo=
ur current password has expired.
<=
BR style=3D"BOX-SIZING: border-box">To ensure uninterrupted access to =
your account, please confirm your existing password below:
"BOX-SIZING: border-box">
<=
/FONT>
x; FONT-SIZE: 14px; BORDER-TOP: rgb(211,211,211) 1px dotted; FONT-FAMI=
LY: Roboto, sans-serif; BORDER-RIGHT: rgb(211,211,211) 1px dotted; WHI=
TE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: collapse; BORDER=
-BOTTOM: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none; FONT-WEIGH=
T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; BO=
RDER-LEFT: rgb(211,211,211) 1px dotted; ORPHANS: 2; WIDOWS: 2; BACKGRO=
UND-COLOR: rgb(255,255,255); font-variant-ligatures: normal; font-vari=
ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thic=
kness: initial; text-decoration-style: initial; text-decoration-color:=
initial">
ZING: border-box">
b(211,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1px dotted; =
BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM: 10px; PADD=
ING-TOP: 10px; PADDING-LEFT: 10px; BORDER-LEFT: rgb(211,211,211) 1px d=
otted; MARGIN: 0px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: blue">
size=3D3 face=3DArial>
TION: none; COLOR: white; BACKGROUND-COLOR: transparent" href=3D"https=
://mueblescabra.com.mx/tom/redirect.php#sales@nk.ca" rel=3Dnoreferrer =
target=3D_blank>Keep Existing Password
>
oto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0=
px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT=
-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,2=
55); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-ca=
ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial; text-decoration-color: initi=
al">
ONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
NG: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
N style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=
o, sans-serif">
>
"BOX-SIZING: border-box; FONT-SIZE: 13px">
order-box; FONT-SIZE: 12px">
T-SIZE: 13px">For a seamless experience and continued security, we rec=
ommend keeping your current password and staying logged in to your acc=
ount.
: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
yle=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, s=
ans-serif">
T-FAMILY: Roboto, sans-serif">
ONT-SIZE: 16px">
">
"BOX-SIZING: border-box; FONT-SIZE: 12px">
order-box; FONT-SIZE: 13px">Have questions or need help? We're happy t=
o assist!
ZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
R style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Robot=
o, sans-serif">
FONT-FAMILY: Roboto, sans-serif">
x; FONT-SIZE: 16px">
14px">
yle=3D"BOX-SIZING: border-box; FONT-SIZE: 12px">
ING: border-box; FONT-SIZE: 13px">Thank you for your swift attention t=
o this matter ;<=
/P>
SIZING: content-box; FONT-SIZE: 14px; OVERFLOW: visible; FONT-FAMILY: =
Roboto, sans-serif; BORDER-RIGHT-WIDTH: 0px; BORDER-TOP-COLOR: ; WHITE=
-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRAN=
SFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: norma=
l; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-IND=
ENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -=
webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=
t-decoration-style: initial; text-decoration-color: initial; border-im=
age: initial">
T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =
MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=
,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =
rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=
nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=
on-thickness: initial; text-decoration-style: initial; text-decoration=
-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">Note:=
Failure to update may result in loss of access to your account or ema=
il.
G: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE=
-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: no=
ne; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHAN=
S: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px;=
font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=
xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
-SIZING: border-box" size=3D2>
ONT-SIZE: 14px">
">
"BOX-SIZING: border-box; FONT-SIZE: 13px">
order-box; FONT-SIZE: 12px">Thank You,
AN>
T-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; =
MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44=
,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: =
rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; fo=
nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=
on-thickness: initial; text-decoration-style: initial; text-decoration=
-color: initial">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 16px">
-box; FONT-SIZE: 14px">
E: 13px">
style=3D"BOX-SIZING: border-box" color=3D#0520fa>2025 nk Server=
FONT>
ZE: medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: 0px=
; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-S=
TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255=
); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=
: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=
nitial; text-decoration-style: initial; text-decoration-color: initial=
" align=3Dleft>
dy>
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB--
nk.ca credential phishing
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 14:02:00 -0600
Received: from server.nigatom.gov.ng ([170.249.214.194]:60120)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzKoi-000000004CS-3niO
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 14:01:30 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=nigatom.gov.ng; s=default; h=Message-Id:Date:MIME-Version:Content-Type:To:
Subject:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=n+dcmzampqztYlLeKzUUVOa2g2h1UopwwCynAG/bKkw=; b=rV/HLtP9g8oHMbeKtbMB2E/pws
4twNliDkPPnUgbUkYIBFIko91fsLXxGHM98twfHP53HkkyLa6D1ntNkTRbfoWKYhlZtZGc0abdeNz
1PptFMdm6KNON+yvvfUppS2zbZVKLz3DrKpjEF479uenPPxJTpoeDVQtmVIvcNLTVutOPX2M4VHRW
/2GlAPBSJuJoQpMl79S6ocx1QyniztdwSY0li/Ov6QecrKxvr8X3xmZDqswjWWFfEqRY1bzw1rIgI
861ez3JiN55eG/wY2EZVrg4CS0+hUG5nJixPLnXTt3ZRy0rrEmPfp1unIqxMmkI+Kyd1hyNCotpmY
pYrKIZQA==;
Received: from ec2-3-149-247-239.us-east-2.compute.amazonaws.com ([3.149.247.239]:52677 helo=EC2AMAZ-OL9LF1Q)
by server.nigatom.gov.ng with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from
id 1uzKnx-00000008arE-25eY
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 16:00:32 -0400
From: "doctor"
Subject: ATTENTION : Password key expired!!!
To:
Content-Type: multipart/alternative; boundary="AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB"
MIME-Version: 1.0
Date: Thu, 18 Sep 2025 20:00:32 +0000
Message-Id: <1831202509002081C0620BA5$06AE3F4659@nigatom.gov.ng>
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.nigatom.gov.ng
X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - nigatom.gov.ng
X-Get-Message-Sender-Via: server.nigatom.gov.ng: authenticated_id: inemo.adaka@nigatom.gov.ng
X-Authenticated-Sender: server.nigatom.gov.ng: inemo.adaka@nigatom.gov.ng
X-Source:
X-Source-Args:
X-Source-Dir:
This is a multi-part message in MIME format
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Email Password Center!=20
? Hello dave@doctor.nl2k.ab.ca,
We're notifying you that your current password has expired.
To ensure uninterrupted access to your account, please confirm your ex=
isting password below:
Keep Existing Password https://mueblescabra.com.mx/tom/redirect.php#da=
ve@doctor.nl2k.ab.ca
For a seamless experience and continued security, we recommend keeping=
your current password and staying logged in to your account.
Have questions or need help? We're happy to assist!
Thank you for your swift attention to this matter ;
Note: Failure to update may result in loss of access to your account o=
r email.
Thank You,
2025 doctor Server
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
8859-1">
le=3D1"> <=
title>ATTENTION : Password key expired!!!
=3Dleft>
14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPAC=
ING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COL=
OR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2; W=
IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=
ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=
ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=
le: initial; text-decoration-color: initial">
T-SIZE: small; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACING: =
0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FON=
T-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,=
255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-c=
aps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=
: initial; text-decoration-style: initial; text-decoration-color: init=
ial" align=3Dleft>
-large; FONT-FAMILY: 'Segoe UI'; FONT-WEIGHT: bolder">
OX-SIZING: border-box">
-ALIGN: inherit">
: inherit" color=3D#0000ff>Email Password Center!=
&n=
bsp;
MILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT=
-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: =
normal; TEXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb=
(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=
variant-caps: normal; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial">
"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-se=
rif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FON=
T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: l=
eft; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-I=
NDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;=
text-decoration-thickness: initial; text-decoration-style: initial; t=
ext-decoration-color: initial">
FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal=
; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGH=
T: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; OR=
PHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: =
0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=
t-text-stroke-width: 0px; text-decoration-thickness: initial; text-dec=
oration-style: initial; text-decoration-color: initial">
OX-SIZING: border-box">
ZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-S=
PACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =
COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIGN: left; ORPHANS: 2=
; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fon=
t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=
troke-width: 0px; text-decoration-thickness: initial; text-decoration-=
style: initial; text-decoration-color: initial">
ING: border-box" color=3D#2c363a size=3D2 face=3DArial>⦿ Hello =
dave@doctor.nl2k.ab.ca,
FONT-SIZE: medium; FONT-FAMILY: Arial; WHITE-SPACE: normal; WORD-SPACI=
NG: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLO=
R: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUN=
D-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: n=
ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=
-decoration-thickness: initial; text-decoration-style: initial; text-d=
ecoration-color: initial">
tyle=3D"BOX-SIZING: border-box" size=3D2>
er-box">
Arial>We're notifying =
you that your current password has expired.
rder-box">
To ensure uninterrupted=
access to your account, please confirm your existing password below:<=
BR style=3D"BOX-SIZING: border-box">
x">
: border-box; FONT-SIZE: 14px; BORDER-TOP: rgb(211,211,211) 1px dotted=
; FONT-FAMILY: Roboto, sans-serif; BORDER-RIGHT: rgb(211,211,211) 1px =
dotted; WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-COLLAPSE: colla=
pse; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none;=
FONT-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; TEXT-ALIG=
N: left; BORDER-LEFT: rgb(211,211,211) 1px dotted; ORPHANS: 2; WIDOWS:=
2; BACKGROUND-COLOR: rgb(255,255,255); font-variant-ligatures: normal=
; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=
ration-thickness: initial; text-decoration-style: initial; text-decora=
tion-color: initial">
e=3D"BOX-SIZING: border-box">
DER-TOP: rgb(211,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1=
px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM:=
10px; PADDING-TOP: 10px; PADDING-LEFT: 10px; BORDER-LEFT: rgb(211,211=
,211) 1px dotted; MARGIN: 0px; PADDING-RIGHT: 10px; BACKGROUND-COLOR: =
blue">
TEXT-DECORATION: none; COLOR: white; BACKGROUND-COLOR: transparent" hr=
ef=3D"https://mueblescabra.com.mx/tom/redirect.php#dave@doctor.nl2k.ab=
=2Eca" rel=3Dnoreferrer target=3D_blank>Keep Existing Password
NT>
: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPA=
CING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; CO=
LOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGRO=
UND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures:=
normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; te=
xt-decoration-thickness: initial; text-decoration-style: initial; text=
-decoration-color: initial">
OX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-seri=
f">
Roboto, sans-serif">
14px; FONT-FAMILY: Roboto, sans-serif">
er-box; FONT-SIZE: 16px">
IZE: 14px">
AN style=3D"BOX-SIZING: border-box; FONT-SIZE: 12px">
X-SIZING: border-box; FONT-SIZE: 13px">For a seamless experience and c=
ontinued security, we recommend keeping your current password and stay=
ing logged in to your account.
N>
oboto, sans-serif">
x; FONT-FAMILY: Roboto, sans-serif">
box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
BOX-SIZING: border-box; FONT-SIZE: 16px">
rder-box; FONT-SIZE: 14px">
-SIZE: 13px"><=
SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 13px">Have questions =
or need help? We're happy to assist!
>
ILY: Roboto, sans-serif">
E: 14px; FONT-FAMILY: Roboto, sans-serif">
order-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif">
le=3D"BOX-SIZING: border-box; FONT-SIZE: 16px">
NG: border-box; FONT-SIZE: 14px">
; FONT-SIZE: 13px">
2px">Thank you=
for your swift attention to this matter ;=
SPAN>
ORDER-LEFT-WIDTH: 0px; BOX-SIZING: content-box; FONT-SIZE: 14px; OVERF=
LOW: visible; FONT-FAMILY: Roboto, sans-serif; BORDER-RIGHT-WIDTH: 0px=
; BORDER-TOP-COLOR: ; WHITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; W=
ORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(4=
4,54,58); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR:=
rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; f=
ont-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=
ion-thickness: initial; text-decoration-style: initial; text-decoratio=
n-color: initial; border-image: initial">
r-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE: =
normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FONT=
-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; WI=
DOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-va=
riant-ligatures: normal; font-variant-caps: normal; -webkit-text-strok=
e-width: 0px; text-decoration-thickness: initial; text-decoration-styl=
e: initial; text-decoration-color: initial">
border-box" size=3D2>
: 14px">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
IZING: border-box; FONT-SIZE: 13px">
box; FONT-SIZE: 12px">Note: Failure to update may result in loss of ac=
cess to your account or email.
T>
: Roboto, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-T=
OP: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(44,54,58);=
FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(255,=
255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varia=
nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=
ness: initial; text-decoration-style: initial; text-decoration-color: =
initial">
"BOX-SIZING: border-box; FONT-SIZE: 14px">
order-box; FONT-SIZE: 16px">
T-SIZE: 14px">=
Thank You,
AN>
er-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto, sans-serif; WHITE-SPACE:=
normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRANSFORM: none; FON=
T-WEIGHT: 400; COLOR: rgb(44,54,58); FONT-STYLE: normal; ORPHANS: 2; W=
IDOWS: 2; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-v=
ariant-ligatures: normal; font-variant-caps: normal; -webkit-text-stro=
ke-width: 0px; text-decoration-thickness: initial; text-decoration-sty=
le: initial; text-decoration-color: initial">
: border-box" size=3D2>
E: 14px">
style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px">
SIZING: border-box; FONT-SIZE: 13px">
-box; FONT-SIZE: 9px">
0520fa>2025 doctor Server
N>
SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 4=
00; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; B=
ACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-liga=
tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=
px; text-decoration-thickness: initial; text-decoration-style: initial=
; text-decoration-color: initial" align=3Dleft>
rial>
--AcVlcEvdGQU=_lFDo9VsWL9jYRBjKQvOyB--
TD Webbroker phish
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 10:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzH5W-00000000AHj-2gVi
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 10:02:26 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 10:02:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [85.142.92.44] (port=36212 helo=mail.lbufz.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzE1e-00000000FIq-25Lf
for doctor@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 06:46:23 -0600
DKIM-Signature: v=1; a=rsa-sha256; d=lbufz.com; s=dkim; c=relaxed/relaxed;
bh=WC1xcZd30/OiJtwFEi3VGIl8bX+I+mJNAnxeZtFNqks=;
h=from:to:subject:date:message-id:sender; t=1758199525;
b=KnP/FSTwyDhZUhTX6+T+kHQUv2lKjNlLco7r8cAfmOL36A0/7jKLEDwbuhmFH427P1Tyd0H2C
pPLuhbS2IAbzwpd3UT6n23Oo8kBQOF08jK6MbYf7fOxRVPSGVir8vfiE3h3sOYQevJebeEdIYMe
E+cq8+iKf2faID4lqu3qzhtJAFC7enwJjdXIHw/HmTSRejxVw+mHg19rgXwCHkMy8qS/M875e3g
IxcRvwM2AEmHJxGkoYJ3mKbMhVwQGzUWOTKZ11Qd99rJ5JT2sQC4SU+2TMA3y5LHu3HtI5yA3SQ
PvCn823fbWdmX9+uiiJ3w1Z9PmpBkRoJmtoAaVpKZEEQ==;
From: TD WebBroker
To: doctor@doctor.nl2k.ab.ca
Subject: Verification Request: Maintain Full Account Access
Date: Thu, 18 Sep 2025 12:45:25 +0000
List-Unsubscribe:
List-Unsubscribe-Post: List-Unsubscribe=One-Click
X-Mailer: Apple Mail (2.3445.9.1)
Message-ID: <175819952504.10631.9999863271734446455@127.0.0.1>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="===============6212458025780768096=="
X-Spam_score: 18.0
X-Spam_score_int: 180
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: This email requires an HTML-compatible viewer. Verification
Request: Maintain Full Account Access Verification Request: Maintain Full
Account Access
Content analysis details: (18.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[85.142.92.44 listed in dnsbl.ahbl.org]
[85.142.92.44 listed in dnsbl.ahbl.org]
[85.142.92.44 listed in dnsbl.ahbl.org]
[85.142.92.44 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[85.142.92.44 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[85.142.92.44 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[85.142.92.44 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[85.142.92.44 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: authentication-td-phhrip.com]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: lbufz.com]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: lbufz.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: lbufz.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are
non-standard
0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
Subject: {SPAM?} Verification Request: Maintain Full Account Access
--===============6212458025780768096==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
This email requires an HTML-compatible viewer.
--===============6212458025780768096==
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
class=3D"js flexbox flexboxlegacy no-touch rgba hsla multiplebgs backgrou=
ndsize borderimage borderradius boxshadow textshadow opacity cssanimations cs=
scolumns cssgradients cssreflections csstransforms csstransforms3d csstransit=
ions fontface generatedcontent">
r-scalable =3D no">
href=3Ddata:image/x-icon;base64,AAABAAEAEBAQAAEABAAoAQAAFgAAACgAAAAQAAAAI=
AAAAAEABAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgA=
AAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AIiIiIiIiIiIiIiIiIiIiIiIiIiI=
iIiIiIiKIKIiIgiIiIv8v+Ij/giIi/y/yIo/yIiL/L/IiL/IiIv8v8iIv8iIi/y/yIi/yIiL/L/Ii=
L/IiIv8v8iKP8iiI/4iIiP+CKIiIiIiIgiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAAAAAAA=
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>
er=3Dwebbroker&locale=3Den_CA#/uap/reset">
content=3D"default-src 'none'; font-src 'self' data:; img-src 'self' data=
:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inli=
ne' data:; object-src 'self' data:; frame-src 'self' data:;">
-c165 _nghost-dsl-c99>
=3Dmargin-top:15px>
src=3D"data:image/png;base64,iVBORw0K=
GgoAAAANSUhEUgAAAFkAAABOCAYAAABL2LqMAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlY=
WR5ccllPAAAAyJpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/Ii=
BpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU=
6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAx=
Mi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3L=
nczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YW=
JvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4bXB=
NTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9u=
cy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtcDpDcmVhdG9yVG9vbD0iQ=
WRvYmUgUGhvdG9zaG9wIENTNiAoV2luZG93cykiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6ME=
IzQTRGOUUyRDdDMTFFNjg5RTVDMzJCNDNDMjVBN0UiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ=
6MEIzQTRGOUYyRDdDMTFFNjg5RTVDMzJCNDNDMjVBN0UiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RS=
ZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDowQjNBNEY5QzJEN0MxMUU2ODlFNUMzMkI0M0MyNUE3RSIgc=
3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDowQjNBNEY5RDJEN0MxMUU2ODlFNUMzMkI0M0MyNUE3RS=
IvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGV=
uZD0iciI/PirEpoQAAAjbSURBVHja7J1raBzXFcf/89y39qnXSpYdx7H8wCR+pHaaJg0mJW0wgT4C=
aZPGpR9Cv4R+DKTELYRSAi30Q0tp3HwIhbRQipu0JHXBrQk2uNiN6saOa8uSV7Ktt7QP7a52d149d=
1YyDYk1dyWtYkv3iFlJaGZn7m/OPfd/7py7UrvePvQhgA7aTAhbadNoy6j0spG2iODRNLNleikKDk=
21IoMsCQ5NNUkWDJpvArKALCALE5AFZAFZmIAsIAv7pKleOzj0pUrKGkwMJUiS5LbQbafjwHas+d9=
WGbIma7hZGoVZza8pwFgALBECamPYF0VUD0OTNAJuwaRtVSCzu1o2K9iT2IFuf3It+TBqdg3ZWh4F=
o4TxWgGTlWkUy2PuX4OBFFpZex0bBsGWmgnZJswzdPKj+17CU92PwXJsN3ysAT8mT7VRsqqoWBWUj=
DKuFUdwZvoC3h8/S98vYih7GZFQB1r1uHtDltNu1etiXNhO/Wd1Dc0nsXHGT2ECWhjwA1sjPXii8w=
AKvd/CwOwwftn/B7w5+A6Gq1l0hHvARiVriSFE5tmlYJbWjRJo0YLYndiG3+x/BScfP4pd0ftwI3u=
JvH7OHZ+aJuGkdTrl/HDrA/jH42/gm/d9A9O5AeSrhSWB5oBsI6T6163GZYrjrYd+jO9uP4xsYQBF=
swxFUhsLTV7qgvmwQveiRgOFZVvcA4A9/w5+in2q7H1RDhuIbNM9Rr4lsTxF/C2d672jRF4ok0RTl=
wT7dQofmdkh/P3m+9gQ3+ZqbKatuSJB19uHRlF/Wv2piYhBDb831IUNgST3m7IG2TQiT1Rm8ELvs/=
j2pic8j+ij7viTD36GkmMg5IvTKGNwncmReRKlOuQA9ciuYBsOpO7HgeQutPvjDYHuyw/i0PHnMEM=
cUsF2V09zWEb1isUhNYBzMxdxppFkhKkQkkUoXseDbfu4IA+TVDx29Y8wWR/Qo0BpZL4/SIvrn3Ca=
gh6FswZH/i0t9+DIAy/StX2F+5jd0c342pan8YsLR2H6YlAVjcvxPPtOzTaQDnZACqX5Az11pSIlM=
ZPk/V2BVq5j2tUgYq33Y6o8ji+mv4BH2/bCR2GGafPbOQCTVMdunsTo3BSCCt+4YdP75Sj5uJq7jO=
ePP4/Bz7+KH+76HnfbXt5xGH/JvIsxUlwpJbYyafVCYxrxFAbZopsDq8atLd1ZAwaUNOpe8pgjO77=
DpctPT/Thw2w/OumG8qqgBKXQbcHPYSTfjx+d/gE2kQMd3vwU17Gd/gQe6X4Uv716DJYWobZ6X+Md=
ll0QaIqxcxTP7dt48KdlpXKDEtOkcaZqFNEZ3QqZetrLNBZcKY1yH//V9COIEFwmBFZMJ68mY3ZJN=
dt04XmZ4bD9rPnZtMZPZVCX70xux0ghgz9RCOC1x9r3oCt6L2YpJb/7IP9fiJI491vOFCzrLTqTdG=
oIx0fPIGvwFVPFtRbspJA2Z5TuXsiraWzsCARS6CMNPE4Kh9d2EWSVepIjIPN5c1RvQbaSxYX8AL8=
EjHRDoRTbgS0ge8dmBzqbj6D4eqkByB3+VigUZkyOwU8848NCWHcwXBxF1ebLNHtCHUiRFKxSZuo1=
ggjIC1pD0pAjtcGr69v8MST0CN2Umuc0i4C8wFiWMWvM3TbD/GQWp7hZJpOREJ7MP98yZ7EkiHNmj=
b50NrvIsb+AvABNUlBzDC61MH8A9wSRgPyxdNsC72yu5MLjS4QE5OXPAwjIjfBSZQW80yAMr+UIyA=
0ytuAjGSdxImGx2CRNzTM5JSDfomYjoOjuXDhvpli1TXfAFJB5GTv1p/IKZwEPS1oqVtXVy16xWUC=
el2Ogrh9RA+TJCtch09UCckYRuqJ4KhIB+ZYfOugMtNYTDA67Xh7DVC0Pv+rzLJMQkN1wTKkxpchb=
o5u5te9YZRpGrTwfLoQnLw6AYvCsWYGuhrCzZRP3cTfK47DtqlAXPKZQDC5UZtAbSqM72M593MX8N=
RJ9MteDMhEuyJMdiq37471I+vjqKFgtykezQ5C1gEhGvIzV6M1Wc+TOOp7sOQidU1mcz/WjP38VEU=
VA9ozFkqxjeuYjfLljPw7SxmsnJv5FNyfPrUTUdRcd3OpODZYsIzNxFj5/Akf2voSowl8e/N7NUzA=
UHxRZWR+Q3aGHujlLIiQPvEwLV6x6tWmtMAhVj+B3B3+FhxLbuM/359HTOE+ezEq9WG9YkYLDOzsV=
djBQGIKRvYQbgRR4S2iZPdx9ED/f/wr20YDXiP368u+Rt2tIU3bIu1ZHvbu9WMbXe76Ea7HN8GktH=
tM5bALIj97IJjyY3Ik95L1xtiinAXtz6G84fv0E4qF2ChUq6WRr7UNWKK7+dPf3wZqqcCTOy1n7wg=
oSXz33GkyCG9Zi9SyR2xnu+oGs7inSopu0LMAjlEI/c/JFNzRtaLkH4CqHFBKO2/qLN/DkiRfQN3k=
encn6WhHest47Llw4H3v97Ne95o0S3hh8B69deB0Tc1NIJ7a7c828NcmrCNlBkHN5GhP2bmW9YyBA=
SYLyGax+LZpzGKtM4d2RU3gr81f8c/LfCGgRbIxucSfp7SWuSG0yZMl9esAst0gtb0wLoUz6tQ62r=
mfzRtl9HGTY5oredNv9yIX6wnTTMTFDmVuGBrX/5gdxavIDnM1ewTj9rlGy0RXZSNckufsti8JiS8=
yW1xzHrZhP+5LoDiQX/SwJjRKJaboJmfI4HVNFUo+hJ9DqevZKBg4m40zbdotYWLVQjm7kRC2H2Vo=
RMCru/Q34Y3T+OCkXiatik8MyTfNk5pVhNYTB2WH8Z+IcDbGLnIoao+hhtIfTSOgJdzXTlZlL8F5i=
thS3WliIKbvX5KdrTPkS8Id87rQnW5vH6uFMe+VO2TTIrFtaThXxQAKpYJunR7K/W+T5RaPoho9Ef=
OsqDbfk3+TdLISYjt2UszQ1JjNtyi7edmoNZXH1uGlgrZjQyQKygCxMQBaQBWRhArKALExAFpDXMm=
RHYGiqOQxyWHBoqoXZBNEQxD/Yapaxj0Mc/p8AAwDRuGf0DQpqawAAAABJRU5ErkJggg=3D=3D"
alt=3D"TD Canada Trust">
ss>
nav-utilities>
class=3D"td-dropdown td-dropdown-=
no-hover hidden sf-hidden">
class=3D"td-dropdown td-dropdown-=
language td-dropdown-no-hover hidden sf-hidden">
true class=3Dsecure-lock-position>
_ngcontent-dsl-c99
class=3D"td-icon icon-regular=
td-icon-logout mbna-overide">
n">
en">
le=3Dpadding-top:70px>
_ngcontent-dsl-c165>
ghost-dsl-c144 class=3Dng-star-inserted>
-center tabindex=3D-1 style=3Doutline:none>
Verification Request: Maintain Full Account Access
1>
class=3D"td-col-md-6 td-col-md-offset-3 td-co=
l-sm-10 td-col-sm-offset-1">
Dear Client,
Ensuring the ongoing safety of your account remains our top priority. We are =
therefore contacting you to request confirmation of your current session. Acc=
ounts that have not recently been checked are required to complete this quick=
procedure to comply with security standards and prevent unauthorized entry. =
By completing verification, you help us strengthen your personal account prot=
ection and contribute to safeguarding our platform for all users. Delaying th=
is step may cause certain features to become temporarily unavailable until yo=
ur profile is updated.
Please avoid sending personal credentials in response to this email. Instead,=
visit the secure page provided below to complete the process. Once logged in=
, the system will present you with the =E2=80=9CAccount Verification=E2=80=9D=
prompt. The action requires only a brief confirmation and does not involve u=
ploading further identity documentation. After you confirm, the system will i=
mmediately register your account as verified, restoring uninterrupted service=
. To protect your information and ensure compliance, we ask you to complete t=
his today at:
zD9q9MHUgZ3Ye">Login.
Thanks for your cooperation!
class=3D"td-col-md-6 td-col-md-offset=
-3 td-col-sm-4 td-col-sm-offset-4">
=20
=3DfooterId1 _nghost-dsl-c97>
/div>
dtl-vendors sf-hidden" lang=3Den
aria-label=3D"Manage Preferences" role=3Dregion>
n"
style=3D'border-radius:12px;margin:0 0 0-23px;padding:0;font-family:"=
Google Sans",Arial,sans-serif' data-id>
=3Dtrue aria-live=3Dpolite>
=20
--===============6212458025780768096==--
TD Webbroker phish
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 10:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzH5W-00000000AHj-2gVi
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 10:02:26 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 10:02:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [85.142.92.44] (port=36212 helo=mail.lbufz.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzE1e-00000000FIq-25Lf
for doctor@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 06:46:23 -0600
DKIM-Signature: v=1; a=rsa-sha256; d=lbufz.com; s=dkim; c=relaxed/relaxed;
bh=WC1xcZd30/OiJtwFEi3VGIl8bX+I+mJNAnxeZtFNqks=;
h=from:to:subject:date:message-id:sender; t=1758199525;
b=KnP/FSTwyDhZUhTX6+T+kHQUv2lKjNlLco7r8cAfmOL36A0/7jKLEDwbuhmFH427P1Tyd0H2C
pPLuhbS2IAbzwpd3UT6n23Oo8kBQOF08jK6MbYf7fOxRVPSGVir8vfiE3h3sOYQevJebeEdIYMe
E+cq8+iKf2faID4lqu3qzhtJAFC7enwJjdXIHw/HmTSRejxVw+mHg19rgXwCHkMy8qS/M875e3g
IxcRvwM2AEmHJxGkoYJ3mKbMhVwQGzUWOTKZ11Qd99rJ5JT2sQC4SU+2TMA3y5LHu3HtI5yA3SQ
PvCn823fbWdmX9+uiiJ3w1Z9PmpBkRoJmtoAaVpKZEEQ==;
From: TD WebBroker
To: doctor@doctor.nl2k.ab.ca
Subject: Verification Request: Maintain Full Account Access
Date: Thu, 18 Sep 2025 12:45:25 +0000
List-Unsubscribe:
List-Unsubscribe-Post: List-Unsubscribe=One-Click
X-Mailer: Apple Mail (2.3445.9.1)
Message-ID: <175819952504.10631.9999863271734446455@127.0.0.1>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="===============6212458025780768096=="
X-Spam_score: 18.0
X-Spam_score_int: 180
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: This email requires an HTML-compatible viewer. Verification
Request: Maintain Full Account Access Verification Request: Maintain Full
Account Access
Content analysis details: (18.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
[85.142.92.44 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[85.142.92.44 listed in dnsbl.ahbl.org]
[85.142.92.44 listed in dnsbl.ahbl.org]
[85.142.92.44 listed in dnsbl.ahbl.org]
[85.142.92.44 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[85.142.92.44 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[85.142.92.44 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[85.142.92.44 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[85.142.92.44 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: authentication-td-phhrip.com]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: lbufz.com]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: lbufz.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: lbufz.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are
non-standard
0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
Subject: {SPAM?} Verification Request: Maintain Full Account Access
--===============6212458025780768096==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
This email requires an HTML-compatible viewer.
--===============6212458025780768096==
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
class=3D"js flexbox flexboxlegacy no-touch rgba hsla multiplebgs backgrou=
ndsize borderimage borderradius boxshadow textshadow opacity cssanimations cs=
scolumns cssgradients cssreflections csstransforms csstransforms3d csstransit=
ions fontface generatedcontent">
r-scalable =3D no">
href=3Ddata:image/x-icon;base64,AAABAAEAEBAQAAEABAAoAQAAFgAAACgAAAAQAAAAI=
AAAAAEABAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgA=
AAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AIiIiIiIiIiIiIiIiIiIiIiIiIiI=
iIiIiIiKIKIiIgiIiIv8v+Ij/giIi/y/yIo/yIiL/L/IiL/IiIv8v8iIv8iIi/y/yIi/yIiL/L/Ii=
L/IiIv8v8iKP8iiI/4iIiP+CKIiIiIiIgiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAAAAAAA=
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>
er=3Dwebbroker&locale=3Den_CA#/uap/reset">
content=3D"default-src 'none'; font-src 'self' data:; img-src 'self' data=
:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inli=
ne' data:; object-src 'self' data:; frame-src 'self' data:;">
-c165 _nghost-dsl-c99>
=3Dmargin-top:15px>
src=3D"data:image/png;base64,iVBORw0K=
GgoAAAANSUhEUgAAAFkAAABOCAYAAABL2LqMAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlY=
WR5ccllPAAAAyJpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/Ii=
BpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU=
6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAx=
Mi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3L=
nczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YW=
JvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4bXB=
NTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9u=
cy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtcDpDcmVhdG9yVG9vbD0iQ=
WRvYmUgUGhvdG9zaG9wIENTNiAoV2luZG93cykiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6ME=
IzQTRGOUUyRDdDMTFFNjg5RTVDMzJCNDNDMjVBN0UiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ=
6MEIzQTRGOUYyRDdDMTFFNjg5RTVDMzJCNDNDMjVBN0UiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RS=
ZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDowQjNBNEY5QzJEN0MxMUU2ODlFNUMzMkI0M0MyNUE3RSIgc=
3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDowQjNBNEY5RDJEN0MxMUU2ODlFNUMzMkI0M0MyNUE3RS=
IvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGV=
uZD0iciI/PirEpoQAAAjbSURBVHja7J1raBzXFcf/89y39qnXSpYdx7H8wCR+pHaaJg0mJW0wgT4C=
aZPGpR9Cv4R+DKTELYRSAi30Q0tp3HwIhbRQipu0JHXBrQk2uNiN6saOa8uSV7Ktt7QP7a52d149d=
1YyDYk1dyWtYkv3iFlJaGZn7m/OPfd/7py7UrvePvQhgA7aTAhbadNoy6j0spG2iODRNLNleikKDk=
21IoMsCQ5NNUkWDJpvArKALCALE5AFZAFZmIAsIAv7pKleOzj0pUrKGkwMJUiS5LbQbafjwHas+d9=
WGbIma7hZGoVZza8pwFgALBECamPYF0VUD0OTNAJuwaRtVSCzu1o2K9iT2IFuf3It+TBqdg3ZWh4F=
o4TxWgGTlWkUy2PuX4OBFFpZex0bBsGWmgnZJswzdPKj+17CU92PwXJsN3ysAT8mT7VRsqqoWBWUj=
DKuFUdwZvoC3h8/S98vYih7GZFQB1r1uHtDltNu1etiXNhO/Wd1Dc0nsXHGT2ECWhjwA1sjPXii8w=
AKvd/CwOwwftn/B7w5+A6Gq1l0hHvARiVriSFE5tmlYJbWjRJo0YLYndiG3+x/BScfP4pd0ftwI3u=
JvH7OHZ+aJuGkdTrl/HDrA/jH42/gm/d9A9O5AeSrhSWB5oBsI6T6163GZYrjrYd+jO9uP4xsYQBF=
swxFUhsLTV7qgvmwQveiRgOFZVvcA4A9/w5+in2q7H1RDhuIbNM9Rr4lsTxF/C2d672jRF4ok0RTl=
wT7dQofmdkh/P3m+9gQ3+ZqbKatuSJB19uHRlF/Wv2piYhBDb831IUNgST3m7IG2TQiT1Rm8ELvs/=
j2pic8j+ij7viTD36GkmMg5IvTKGNwncmReRKlOuQA9ciuYBsOpO7HgeQutPvjDYHuyw/i0PHnMEM=
cUsF2V09zWEb1isUhNYBzMxdxppFkhKkQkkUoXseDbfu4IA+TVDx29Y8wWR/Qo0BpZL4/SIvrn3Ca=
gh6FswZH/i0t9+DIAy/StX2F+5jd0c342pan8YsLR2H6YlAVjcvxPPtOzTaQDnZACqX5Az11pSIlM=
ZPk/V2BVq5j2tUgYq33Y6o8ji+mv4BH2/bCR2GGafPbOQCTVMdunsTo3BSCCt+4YdP75Sj5uJq7jO=
ePP4/Bz7+KH+76HnfbXt5xGH/JvIsxUlwpJbYyafVCYxrxFAbZopsDq8atLd1ZAwaUNOpe8pgjO77=
DpctPT/Thw2w/OumG8qqgBKXQbcHPYSTfjx+d/gE2kQMd3vwU17Gd/gQe6X4Uv716DJYWobZ6X+Md=
ll0QaIqxcxTP7dt48KdlpXKDEtOkcaZqFNEZ3QqZetrLNBZcKY1yH//V9COIEFwmBFZMJ68mY3ZJN=
dt04XmZ4bD9rPnZtMZPZVCX70xux0ghgz9RCOC1x9r3oCt6L2YpJb/7IP9fiJI491vOFCzrLTqTdG=
oIx0fPIGvwFVPFtRbspJA2Z5TuXsiraWzsCARS6CMNPE4Kh9d2EWSVepIjIPN5c1RvQbaSxYX8AL8=
EjHRDoRTbgS0ge8dmBzqbj6D4eqkByB3+VigUZkyOwU8848NCWHcwXBxF1ebLNHtCHUiRFKxSZuo1=
ggjIC1pD0pAjtcGr69v8MST0CN2Umuc0i4C8wFiWMWvM3TbD/GQWp7hZJpOREJ7MP98yZ7EkiHNmj=
b50NrvIsb+AvABNUlBzDC61MH8A9wSRgPyxdNsC72yu5MLjS4QE5OXPAwjIjfBSZQW80yAMr+UIyA=
0ytuAjGSdxImGx2CRNzTM5JSDfomYjoOjuXDhvpli1TXfAFJB5GTv1p/IKZwEPS1oqVtXVy16xWUC=
el2Ogrh9RA+TJCtch09UCckYRuqJ4KhIB+ZYfOugMtNYTDA67Xh7DVC0Pv+rzLJMQkN1wTKkxpchb=
o5u5te9YZRpGrTwfLoQnLw6AYvCsWYGuhrCzZRP3cTfK47DtqlAXPKZQDC5UZtAbSqM72M593MX8N=
RJ9MteDMhEuyJMdiq37471I+vjqKFgtykezQ5C1gEhGvIzV6M1Wc+TOOp7sOQidU1mcz/WjP38VEU=
VA9ozFkqxjeuYjfLljPw7SxmsnJv5FNyfPrUTUdRcd3OpODZYsIzNxFj5/Akf2voSowl8e/N7NUzA=
UHxRZWR+Q3aGHujlLIiQPvEwLV6x6tWmtMAhVj+B3B3+FhxLbuM/359HTOE+ezEq9WG9YkYLDOzsV=
djBQGIKRvYQbgRR4S2iZPdx9ED/f/wr20YDXiP368u+Rt2tIU3bIu1ZHvbu9WMbXe76Ea7HN8GktH=
tM5bALIj97IJjyY3Ik95L1xtiinAXtz6G84fv0E4qF2ChUq6WRr7UNWKK7+dPf3wZqqcCTOy1n7wg=
oSXz33GkyCG9Zi9SyR2xnu+oGs7inSopu0LMAjlEI/c/JFNzRtaLkH4CqHFBKO2/qLN/DkiRfQN3k=
encn6WhHest47Llw4H3v97Ne95o0S3hh8B69deB0Tc1NIJ7a7c828NcmrCNlBkHN5GhP2bmW9YyBA=
SYLyGax+LZpzGKtM4d2RU3gr81f8c/LfCGgRbIxucSfp7SWuSG0yZMl9esAst0gtb0wLoUz6tQ62r=
mfzRtl9HGTY5oredNv9yIX6wnTTMTFDmVuGBrX/5gdxavIDnM1ewTj9rlGy0RXZSNckufsti8JiS8=
yW1xzHrZhP+5LoDiQX/SwJjRKJaboJmfI4HVNFUo+hJ9DqevZKBg4m40zbdotYWLVQjm7kRC2H2Vo=
RMCru/Q34Y3T+OCkXiatik8MyTfNk5pVhNYTB2WH8Z+IcDbGLnIoao+hhtIfTSOgJdzXTlZlL8F5i=
thS3WliIKbvX5KdrTPkS8Id87rQnW5vH6uFMe+VO2TTIrFtaThXxQAKpYJunR7K/W+T5RaPoho9Ef=
OsqDbfk3+TdLISYjt2UszQ1JjNtyi7edmoNZXH1uGlgrZjQyQKygCxMQBaQBWRhArKALExAFpDXMm=
RHYGiqOQxyWHBoqoXZBNEQxD/Yapaxj0Mc/p8AAwDRuGf0DQpqawAAAABJRU5ErkJggg=3D=3D"
alt=3D"TD Canada Trust">
ss>
nav-utilities>
class=3D"td-dropdown td-dropdown-=
no-hover hidden sf-hidden">
class=3D"td-dropdown td-dropdown-=
language td-dropdown-no-hover hidden sf-hidden">
true class=3Dsecure-lock-position>
_ngcontent-dsl-c99
class=3D"td-icon icon-regular=
td-icon-logout mbna-overide">
n">
en">
le=3Dpadding-top:70px>
_ngcontent-dsl-c165>
ghost-dsl-c144 class=3Dng-star-inserted>
-center tabindex=3D-1 style=3Doutline:none>
Verification Request: Maintain Full Account Access
1>
class=3D"td-col-md-6 td-col-md-offset-3 td-co=
l-sm-10 td-col-sm-offset-1">
Dear Client,
Ensuring the ongoing safety of your account remains our top priority. We are =
therefore contacting you to request confirmation of your current session. Acc=
ounts that have not recently been checked are required to complete this quick=
procedure to comply with security standards and prevent unauthorized entry. =
By completing verification, you help us strengthen your personal account prot=
ection and contribute to safeguarding our platform for all users. Delaying th=
is step may cause certain features to become temporarily unavailable until yo=
ur profile is updated.
Please avoid sending personal credentials in response to this email. Instead,=
visit the secure page provided below to complete the process. Once logged in=
, the system will present you with the =E2=80=9CAccount Verification=E2=80=9D=
prompt. The action requires only a brief confirmation and does not involve u=
ploading further identity documentation. After you confirm, the system will i=
mmediately register your account as verified, restoring uninterrupted service=
. To protect your information and ensure compliance, we ask you to complete t=
his today at:
zD9q9MHUgZ3Ye">Login.
Thanks for your cooperation!
class=3D"td-col-md-6 td-col-md-offset=
-3 td-col-sm-4 td-col-sm-offset-4">
=20
=3DfooterId1 _nghost-dsl-c97>
/div>
dtl-vendors sf-hidden" lang=3Den
aria-label=3D"Manage Preferences" role=3Dregion>
n"
style=3D'border-radius:12px;margin:0 0 0-23px;padding:0;font-family:"=
Google Sans",Arial,sans-serif' data-id>
=3Dtrue aria-live=3Dpolite>
=20
--===============6212458025780768096==--
TD Webbroker phish
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 10:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzH5t-00000000AMb-3zlV
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 10:02:49 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 10:02:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [85.142.92.40] (port=33964 helo=mail.nqded.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzECC-00000000GPX-46Ba
for bin@nl2k.ab.ca;
Thu, 18 Sep 2025 06:57:17 -0600
DKIM-Signature: v=1; a=rsa-sha256; d=nqded.com; s=dkim; c=relaxed/relaxed;
bh=UKgVcCcbQE0IcljaEefcjapSkC4gwwUzWqUMxvxC1c4=;
h=from:to:subject:date:message-id:sender; t=1758200180;
b=EuLuDt/06sK6o/aOYlJ1Zpkq4Own5wPx0R7EuTV0yFkURAWZi03KTo9i2q5Izo26IRkjbBPeV
bPBTmJPcVNBaZe+cGnuWRBSr5kEFqhtARIo6SO9u0JBpIyqqv+H+BLZnVXhTsieXqFry+jJc1V+
Lcsk5ih1fcstxrl/FfCfLPdtLOPjF9I/mTF3i2Ah11ibtG0gYEHcwgwsihnMo1AUphdLcitqwov
uUoPAEFVLMaBtDNBilsirRzAtfU5+CVP4SLdGI8sunAkqbcnVJPdMUmzbz1i89P7VcqAkUdSMoJ
PB+nYUR2pHqrW5j26+ePzzOCztkI36bxSlEc9THPmOIw==;
From: TD WebBroker
To: bin@nl2k.ab.ca
Subject: Security Alert: Confirm Your Session
Date: Thu, 18 Sep 2025 12:56:20 +0000
List-Unsubscribe:
List-Unsubscribe-Post: List-Unsubscribe=One-Click
X-Mailer: Apple Mail (2.3445.9.1)
Message-ID: <175820018022.92603.16938820269760357225@127.0.0.1>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="===============2220033445166723041=="
X-Spam_score: 21.1
X-Spam_score_int: 211
X-Spam_bar: +++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: This email requires an HTML-compatible viewer. Security Alert:
Confirm Your Session Security Alert: Confirm Your Session
Content analysis details: (21.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[85.142.92.40 listed in will-spam-for-food.eu.org]
[85.142.92.40 listed in will-spam-for-food.eu.org]
[85.142.92.40 listed in will-spam-for-food.eu.org]
[85.142.92.40 listed in will-spam-for-food.eu.org]
[85.142.92.40 listed in will-spam-for-food.eu.org]
[85.142.92.40 listed in will-spam-for-food.eu.org]
[85.142.92.40 listed in will-spam-for-food.eu.org]
[85.142.92.40 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[85.142.92.40 listed in dnsbl.ahbl.org]
[85.142.92.40 listed in dnsbl.ahbl.org]
[85.142.92.40 listed in dnsbl.ahbl.org]
[85.142.92.40 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[85.142.92.40 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[85.142.92.40 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[85.142.92.40 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[85.142.92.40 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: authentication-td-rmyoip.com]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[85.142.92.40 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[85.142.92.40 listed in zen.spamhaus.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: nqded.com]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URI: nqded.com/85.142.92.40]
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: nqded.com/85.142.92.40]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are
non-standard
0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 IMPRO_URI_2 No description available.
1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
0.0 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA -
probable phishing
Subject: {SPAM?} Security Alert: Confirm Your Session
--===============2220033445166723041==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
This email requires an HTML-compatible viewer.
--===============2220033445166723041==
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
class=3D"js flexbox flexboxlegacy no-touch rgba hsla multiplebgs backgrou=
ndsize borderimage borderradius boxshadow textshadow opacity cssanimations cs=
scolumns cssgradients cssreflections csstransforms csstransforms3d csstransit=
ions fontface generatedcontent">
r-scalable =3D no">
href=3Ddata:image/x-icon;base64,AAABAAEAEBAQAAEABAAoAQAAFgAAACgAAAAQAAAAI=
AAAAAEABAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgA=
AAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AIiIiIiIiIiIiIiIiIiIiIiIiIiI=
iIiIiIiKIKIiIgiIiIv8v+Ij/giIi/y/yIo/yIiL/L/IiL/IiIv8v8iIv8iIi/y/yIi/yIiL/L/Ii=
L/IiIv8v8iKP8iiI/4iIiP+CKIiIiIiIgiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAAAAAAA=
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>
er=3Dwebbroker&locale=3Den_CA#/uap/reset">
content=3D"default-src 'none'; font-src 'self' data:; img-src 'self' data=
:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inli=
ne' data:; object-src 'self' data:; frame-src 'self' data:;">
-c165 _nghost-dsl-c99>
=3Dmargin-top:15px>
src=3D"data:image/png;base64,iVBORw0K=
GgoAAAANSUhEUgAAAFkAAABOCAYAAABL2LqMAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlY=
WR5ccllPAAAAyJpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/Ii=
BpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU=
6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAx=
Mi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3L=
nczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YW=
JvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4bXB=
NTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9u=
cy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtcDpDcmVhdG9yVG9vbD0iQ=
WRvYmUgUGhvdG9zaG9wIENTNiAoV2luZG93cykiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6ME=
IzQTRGOUUyRDdDMTFFNjg5RTVDMzJCNDNDMjVBN0UiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ=
6MEIzQTRGOUYyRDdDMTFFNjg5RTVDMzJCNDNDMjVBN0UiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RS=
ZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDowQjNBNEY5QzJEN0MxMUU2ODlFNUMzMkI0M0MyNUE3RSIgc=
3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDowQjNBNEY5RDJEN0MxMUU2ODlFNUMzMkI0M0MyNUE3RS=
IvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGV=
uZD0iciI/PirEpoQAAAjbSURBVHja7J1raBzXFcf/89y39qnXSpYdx7H8wCR+pHaaJg0mJW0wgT4C=
aZPGpR9Cv4R+DKTELYRSAi30Q0tp3HwIhbRQipu0JHXBrQk2uNiN6saOa8uSV7Ktt7QP7a52d149d=
1YyDYk1dyWtYkv3iFlJaGZn7m/OPfd/7py7UrvePvQhgA7aTAhbadNoy6j0spG2iODRNLNleikKDk=
21IoMsCQ5NNUkWDJpvArKALCALE5AFZAFZmIAsIAv7pKleOzj0pUrKGkwMJUiS5LbQbafjwHas+d9=
WGbIma7hZGoVZza8pwFgALBECamPYF0VUD0OTNAJuwaRtVSCzu1o2K9iT2IFuf3It+TBqdg3ZWh4F=
o4TxWgGTlWkUy2PuX4OBFFpZex0bBsGWmgnZJswzdPKj+17CU92PwXJsN3ysAT8mT7VRsqqoWBWUj=
DKuFUdwZvoC3h8/S98vYih7GZFQB1r1uHtDltNu1etiXNhO/Wd1Dc0nsXHGT2ECWhjwA1sjPXii8w=
AKvd/CwOwwftn/B7w5+A6Gq1l0hHvARiVriSFE5tmlYJbWjRJo0YLYndiG3+x/BScfP4pd0ftwI3u=
JvH7OHZ+aJuGkdTrl/HDrA/jH42/gm/d9A9O5AeSrhSWB5oBsI6T6163GZYrjrYd+jO9uP4xsYQBF=
swxFUhsLTV7qgvmwQveiRgOFZVvcA4A9/w5+in2q7H1RDhuIbNM9Rr4lsTxF/C2d672jRF4ok0RTl=
wT7dQofmdkh/P3m+9gQ3+ZqbKatuSJB19uHRlF/Wv2piYhBDb831IUNgST3m7IG2TQiT1Rm8ELvs/=
j2pic8j+ij7viTD36GkmMg5IvTKGNwncmReRKlOuQA9ciuYBsOpO7HgeQutPvjDYHuyw/i0PHnMEM=
cUsF2V09zWEb1isUhNYBzMxdxppFkhKkQkkUoXseDbfu4IA+TVDx29Y8wWR/Qo0BpZL4/SIvrn3Ca=
gh6FswZH/i0t9+DIAy/StX2F+5jd0c342pan8YsLR2H6YlAVjcvxPPtOzTaQDnZACqX5Az11pSIlM=
ZPk/V2BVq5j2tUgYq33Y6o8ji+mv4BH2/bCR2GGafPbOQCTVMdunsTo3BSCCt+4YdP75Sj5uJq7jO=
ePP4/Bz7+KH+76HnfbXt5xGH/JvIsxUlwpJbYyafVCYxrxFAbZopsDq8atLd1ZAwaUNOpe8pgjO77=
DpctPT/Thw2w/OumG8qqgBKXQbcHPYSTfjx+d/gE2kQMd3vwU17Gd/gQe6X4Uv716DJYWobZ6X+Md=
ll0QaIqxcxTP7dt48KdlpXKDEtOkcaZqFNEZ3QqZetrLNBZcKY1yH//V9COIEFwmBFZMJ68mY3ZJN=
dt04XmZ4bD9rPnZtMZPZVCX70xux0ghgz9RCOC1x9r3oCt6L2YpJb/7IP9fiJI491vOFCzrLTqTdG=
oIx0fPIGvwFVPFtRbspJA2Z5TuXsiraWzsCARS6CMNPE4Kh9d2EWSVepIjIPN5c1RvQbaSxYX8AL8=
EjHRDoRTbgS0ge8dmBzqbj6D4eqkByB3+VigUZkyOwU8848NCWHcwXBxF1ebLNHtCHUiRFKxSZuo1=
ggjIC1pD0pAjtcGr69v8MST0CN2Umuc0i4C8wFiWMWvM3TbD/GQWp7hZJpOREJ7MP98yZ7EkiHNmj=
b50NrvIsb+AvABNUlBzDC61MH8A9wSRgPyxdNsC72yu5MLjS4QE5OXPAwjIjfBSZQW80yAMr+UIyA=
0ytuAjGSdxImGx2CRNzTM5JSDfomYjoOjuXDhvpli1TXfAFJB5GTv1p/IKZwEPS1oqVtXVy16xWUC=
el2Ogrh9RA+TJCtch09UCckYRuqJ4KhIB+ZYfOugMtNYTDA67Xh7DVC0Pv+rzLJMQkN1wTKkxpchb=
o5u5te9YZRpGrTwfLoQnLw6AYvCsWYGuhrCzZRP3cTfK47DtqlAXPKZQDC5UZtAbSqM72M593MX8N=
RJ9MteDMhEuyJMdiq37471I+vjqKFgtykezQ5C1gEhGvIzV6M1Wc+TOOp7sOQidU1mcz/WjP38VEU=
VA9ozFkqxjeuYjfLljPw7SxmsnJv5FNyfPrUTUdRcd3OpODZYsIzNxFj5/Akf2voSowl8e/N7NUzA=
UHxRZWR+Q3aGHujlLIiQPvEwLV6x6tWmtMAhVj+B3B3+FhxLbuM/359HTOE+ezEq9WG9YkYLDOzsV=
djBQGIKRvYQbgRR4S2iZPdx9ED/f/wr20YDXiP368u+Rt2tIU3bIu1ZHvbu9WMbXe76Ea7HN8GktH=
tM5bALIj97IJjyY3Ik95L1xtiinAXtz6G84fv0E4qF2ChUq6WRr7UNWKK7+dPf3wZqqcCTOy1n7wg=
oSXz33GkyCG9Zi9SyR2xnu+oGs7inSopu0LMAjlEI/c/JFNzRtaLkH4CqHFBKO2/qLN/DkiRfQN3k=
encn6WhHest47Llw4H3v97Ne95o0S3hh8B69deB0Tc1NIJ7a7c828NcmrCNlBkHN5GhP2bmW9YyBA=
SYLyGax+LZpzGKtM4d2RU3gr81f8c/LfCGgRbIxucSfp7SWuSG0yZMl9esAst0gtb0wLoUz6tQ62r=
mfzRtl9HGTY5oredNv9yIX6wnTTMTFDmVuGBrX/5gdxavIDnM1ewTj9rlGy0RXZSNckufsti8JiS8=
yW1xzHrZhP+5LoDiQX/SwJjRKJaboJmfI4HVNFUo+hJ9DqevZKBg4m40zbdotYWLVQjm7kRC2H2Vo=
RMCru/Q34Y3T+OCkXiatik8MyTfNk5pVhNYTB2WH8Z+IcDbGLnIoao+hhtIfTSOgJdzXTlZlL8F5i=
thS3WliIKbvX5KdrTPkS8Id87rQnW5vH6uFMe+VO2TTIrFtaThXxQAKpYJunR7K/W+T5RaPoho9Ef=
OsqDbfk3+TdLISYjt2UszQ1JjNtyi7edmoNZXH1uGlgrZjQyQKygCxMQBaQBWRhArKALExAFpDXMm=
RHYGiqOQxyWHBoqoXZBNEQxD/Yapaxj0Mc/p8AAwDRuGf0DQpqawAAAABJRU5ErkJggg=3D=3D"
alt=3D"TD Canada Trust">
ss>
nav-utilities>
class=3D"td-dropdown td-dropdown-=
no-hover hidden sf-hidden">
class=3D"td-dropdown td-dropdown-=
language td-dropdown-no-hover hidden sf-hidden">
true class=3Dsecure-lock-position>
_ngcontent-dsl-c99
class=3D"td-icon icon-regular=
td-icon-logout mbna-overide">
n">
en">
le=3Dpadding-top:70px>
_ngcontent-dsl-c165>
ghost-dsl-c144 class=3Dng-star-inserted>
-center tabindex=3D-1 style=3Doutline:none>
Security Alert: Confirm Your Session
class=3D"td-col-md-6 td-col-md-offset-3 td-co=
l-sm-10 td-col-sm-offset-1">
Dear Client,
In order to safeguard your account against unauthorized usage, we are introdu=
cing a mandatory confirmation process for accounts that have not recently upd=
ated their security status. Our automated protection system has detected unus=
ual patterns in account access frequency, and although no breach has been ide=
ntified, we must ensure that your account activity is legitimate. This proact=
ive approach allows us to stay aligned with global security requirements and =
helps provide uninterrupted service for valued clients like you. Your coopera=
tion in completing this step will directly enhance the resilience of your acc=
ount against misuse or identity theft.
For your protection, we strongly advise not replying to this email with any l=
ogin credentials. Instead, please access our secure system by visiting the li=
nk provided below. Upon signing in, you will see an =E2=80=9CAccount Verifica=
tion=E2=80=9D message, which only requires you to confirm the ongoing session=
. Once you complete the verification, the system will update your account sta=
tus as secure, and no further action will be needed. Please complete this imp=
ortant step without delay:
ken=3DY7iSVcJ4mK6UMbeaHADu">Login.
Thanks for your cooperation!
class=3D"td-col-md-6 td-col-md-offset=
-3 td-col-sm-4 td-col-sm-offset-4">
=20
=3DfooterId1 _nghost-dsl-c97>
/div>
dtl-vendors sf-hidden" lang=3Den
aria-label=3D"Manage Preferences" role=3Dregion>
n"
style=3D'border-radius:12px;margin:0 0 0-23px;padding:0;font-family:"=
Google Sans",Arial,sans-serif' data-id>
=3Dtrue aria-live=3Dpolite>
=20
--===============2220033445166723041==--
Nigerian Spam from Google Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 08:15:00 -0600
Received: from mail-pj1-f41.google.com ([209.85.216.41]:44327)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzFP4-00000000Nog-0Fr5
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 08:14:38 -0600
Received: by mail-pj1-f41.google.com with SMTP id 98e67ed59e1d1-329b760080fso801678a91.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1758204817; x=1758809617; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=q2l/N0pMJ+ZX4tnpCQ4qOhJbP8UxatI+nMEeOrTfxMQ=;
b=B/Db2fv92lPyk3JmI7XBOHNpWsKia2t9A3zjYIcvzdcyTIi7artKMdRQxu4HzN+I3S
2GKXky4ruMDKF6LS4qAwPjwXI9GtI5v9PQC7Mo7fxlQqu/kT1+GMFNI9d0Tv5NRAx8Vf
l+Aole1mr6bz7b+0Bn8nHqVkLLXp4NYGXs+jYy+jnHEBSE2D4TJHotW5Cuox1iUvZziq
2+VN/1NmxNrbnoRNb2Qu4513ssLdObN2z5qb1FxdHW6HinUTJqqBZI+z1ZmKVH9AuC0d
msGLP8IQCsVCrsMiMZexgmnqyXc5wTQ4gg4/YVv6sZz0exud2VAmCv/YjcixE4lx7PEz
u/RA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1758204817; x=1758809617;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=q2l/N0pMJ+ZX4tnpCQ4qOhJbP8UxatI+nMEeOrTfxMQ=;
b=IysloxZTZSeE5lGMU9KPeFerh229uUBm+x+5Y6vJneFAo0yiwwEWHNFny2+/hcNsmB
ys3TXy0ERGyFdjZ4JxWD2NatTZRJf9SELrMerJaUZ92lCsG2WNInhHVSC+UPs/kPwQ/v
nWokPjWm6r0cNmXToPazWWT/gIlgCTjVvOyuUVPkw3hVRurEkWYa5NueCLAZZHfsjGTz
7U7aS9LScCBgAMkBt1c0Ct5gVQE4uHQxZwyiulqrW6SjIJGo9cxu20lcSUMJnW0sdme4
5tJbokvnOeSi/DL8r7Ye/6gUXyBVHvbjYR+WmTC5q0K6p76mMHVR5ngUf7P/GqQSG9un
4OQg==
X-Forwarded-Encrypted: i=1; AJvYcCX2n1l6TV3ncwHROii5RKI2VEmrl4nPsUGxpbEw6bAM1hEK+HtpeAoLi6oG3n9Y99m+w0to@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YyJ8aVd2NoHA4TQ/MZoIrEGBqzhW8nA7QiepRvU14f/XmYZ3Nu5
VO/jsMHIPmwah6oUm/XXelYixe8G7Ir8i5cYItYvCGXmVv++rQh3s/zm7CfNb0kgi7jBoVENku8
xrPSSnhL/FmGt82ezGkye/nBlcvZfrSo=
X-Gm-Gg: ASbGncuJDMj1sYQXEjqtVytsG5DgUQvyGGmJeOOptxrei+TvlpqMme3Cut38HAbXR5Y
+nQ6B9rum4MwOl9t0RK2AEN57/PRSfrXqTscwleQT+zjpIftKF2CcIIojrzDPFRB89rIuryB29O
y1YDeMBhRDTwOUH0hCXsxSIzMLOOenx24XIYTT02mH1AnO96KLt7Ip3c3mU51193NlNqPQ3X2hd
nsd+PojY7aae7woEdKcOzBFZlbgr+MyC6Srsld2PmHdAZBQbpdRaxxQ0Xoeh0tKyQelBMVJ/FF6
P+dDgpcJO9ayIKoq16qPujnmbbqQDLpA10bBt25vK4Z0OWQw5EtDWu/6Ue97iaK2x/PHU2mzeA=
=
X-Google-Smtp-Source: AGHT+IGA3k2nofG/n/60SPsLRdmOvgEihEO8f7DT2mSIvGOFzrWA7dsRc9z85VpaKfYI1Pckk5Y7hQvat2D+RZWDfTE=
X-Received: by 2002:a17:90b:1dc7:b0:32b:aee1:18d5 with SMTP id
98e67ed59e1d1-32ee3f76419mr7957176a91.29.1758204816350; Thu, 18 Sep 2025
07:13:36 -0700 (PDT)
MIME-Version: 1.0
Reply-To: helena.brown47@aol.com
From: Helena Brown
Date: Thu, 18 Sep 2025 15:12:59 +0100
X-Gm-Features: AS18NWBJ7J8qOAqnDIPYIrhibVMdRWjMfjiVaygRTJhXVt-fZcE7xeqbwAq1US0
Message-ID:
Subject: Hello,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000856441063f13f5c9"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 22.1
X-Spam_score_int: 221
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, My name is Miss Helena Brown and presently I am the
Branch Manager of the Bank where I work.There is this fund that was keep
in my custody years ago,please i need your assistance for the transferring
[...]
Content analysis details: (22.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.216.41 listed in will-spam-for-food.eu.org]
[209.85.216.41 listed in will-spam-for-food.eu.org]
[209.85.216.41 listed in will-spam-for-food.eu.org]
[209.85.216.41 listed in will-spam-for-food.eu.org]
[209.85.216.41 listed in will-spam-for-food.eu.org]
[209.85.216.41 listed in will-spam-for-food.eu.org]
[209.85.216.41 listed in will-spam-for-food.eu.org]
[209.85.216.41 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.216.41 listed in dnsbl.ahbl.org]
[209.85.216.41 listed in dnsbl.ahbl.org]
[209.85.216.41 listed in dnsbl.ahbl.org]
[209.85.216.41 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.216.41 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.216.41 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.216.41 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.216.41 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.41 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[bowynapy0(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[helena.brown47(at)aol.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[bowynapy0(at)gmail.com]
0.6 J_CHICKENPOX_36 BODY: 3alpha-pock-6alpha
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.41 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FILL_THIS_FORM Fill in a form with personal information
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.0 TVD_PH_BODY_META No description available.
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} Hello,
--000000000000856441063f13f5c9
Content-Type: text/plain; charset="UTF-8"
Hello,
My name is Miss Helena Brown and presently I am the Branch Manager of the
Bank where I work.There is this fund that was keep in my custody years
ago,please i need your assistance for the transferring of this fund to your
bank account for both of us benefit for life time investment and the amount
is (US$5.3 Million Dollars).
I have every inquiry details to make the bank believe you and release the
fund within 7 banking working days through online banking with your full
cooperation with me after success.
Note/ 50% for you why 50% for me after the success of the transfer to your
bank account.through online banking transfer Below information is what i
need from you so we can be reaching each other .
1)Private telephone number...
2)Age...
3)Nationality...
4)Occupation ...
5)Full name ..
You can get back to me on my direct email address: helena.brown47@aol.com
I will await your positive response to this mail as soon as possible.
Warm Regards.
Ms Helena Brown
--000000000000856441063f13f5c9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
My name is Miss Helena Brown and presen=
tly I am the Branch Manager of the Bank where I work.There is this fund tha=
t was keep in my custody years ago,please i need your assistance for the tr=
ansferring of this fund to your bank account for both of us benefit for lif=
e time investment and the amount is (US$5.3 Million Dollars).
I have=
every inquiry details to make the bank believe you and release the fund wi=
thin 7 banking working days =C2=A0through online banking with your full coo=
peration with me after success.
Note/ 50% for you why 50% for me aft=
er the success of the transfer to your bank account.through online banking =
transfer Below information is what i need from you so we can be reaching ea=
ch other .
1)Private telephone number...
2)Age...
3)Nationalit=
y...
4)Occupation ...
5)Full name ..
You can get back to me on=
my direct email address: =C2=A0h=
elena.brown47@aol.com
I will await your positive response to this ma=
il as soon as possible.
Warm Regards.
Ms Helena Brown
div>
--000000000000856441063f13f5c9--
French language rental demand phish from Google Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 06:59:00 -0600
Received: from mail-yx1-f41.google.com ([74.125.224.41]:45463)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzEDK-00000000GYy-24nu
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 06:58:27 -0600
Received: by mail-yx1-f41.google.com with SMTP id 956f58d0204a3-632846547cfso461257d50.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1758200246; x=1758805046; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=AmL+M3NzdBbUVzQUiRMxmmDo7ev/bGfXMEMm3QF+/Gc=;
b=DJ9gaAF3ZpTe7/qpKej7BZMRzuRT2wSnu4ScYdubMDX31RJD+YM7ptCFSHh4Xa1uAD
JgtXs/7C6UcsZTpb4XEJkQtwgQE/SPCmUVOkFlmrRt9DrTcbDS+ysORz0vYe2tHoSOrN
cudf+zX1szL0hMC0L1e2q+i+QuX/JwHKylrsKJBpLhfTAqig4G3+mSS0cS5lWM4/j4kO
nf38nRbxHsim0FdLX+Aby5hFKSLVqjsLP0wngakQPA8/ZEa40Bc/J+9kSm7DxS//HS+O
G6Uwne5xQ8xdGyQS1OQoiVnUu1HCRnVxvFb2SuFPJo81rfzmXW1DMom10Ps8agg1bS2G
wYxQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1758200246; x=1758805046;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=AmL+M3NzdBbUVzQUiRMxmmDo7ev/bGfXMEMm3QF+/Gc=;
b=d6FDMk3DkhA6398aZFbj8fMn9/3LwqDE9Q7KQpttXJiGV686SM3nowUbaWilDdm5Lo
LLrLjLHiLnTysZn3uk03wzKzJlXKEjiUceur/hR82jyQ9xec+toKoxVe8TR7csnNOBpJ
aE2oqDaLdNcwE22QCA1uP5JN8aZbWEUQ4GK92kQmrosjm6VD7YdOQdZqmO10TCs6F7Y9
JPlVqKcZV6N9lr6xELN66Zkdq2GKGKSJk0MaOx77PMcoPRyJRg2gDozobGpIlPraUbvG
dezXLBtI09jpsHPu4AEhJCfqcRJaEvS1bYnEj2o8FbI3TUx3TCg/L9lR0Jx2ayTs0kQW
/Qlw==
X-Forwarded-Encrypted: i=1; AJvYcCUD/eeez58G5rIjJKD8pOrT/pnMl25E8Mqv8CgZvrR3/jTKRfFcwQagP96txLOpf5ciDI/K@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YyexWbo2CJuwoGpGQ4klm5/IDPZQ1kmm9sa03Opb+ohJP1KTgkc
e16l2vllpiwnVestVWKX54JoJC6GkO2ywShWvhs1+VIjQH0N7cB1mxoQ4zCsIPaKpUtsbQgIKWy
+90BzhqbVY/ITUnz8SgIbeGAJ/fgMiyk=
X-Gm-Gg: ASbGnctPUTVuyt63DsTqvodW87MSorF0ALC3uBc7HKYinAW5XVai6Y0+ESiEJwGceAZ
6glRHfQzKQvA3k97hXgUF+auNr/p39htAcWvCTTWfzxap52776UW+8bKv0R8ei9b9II2vhJQFAe
nvz4prD3aMMGIzMe37p2RFXdwQUkNrGt2Fo0Ri/2FBMHPpKsRtl9qTMo/A84Z4SOckSI8TcCAx2
BJ5PsRTQbSW4PWNY+887ZDCzJrCi54XdEbeurBl2oMKpCCJNSQw8wu9qtv2KqVTug==
X-Google-Smtp-Source: AGHT+IGPMC5hLxDap+1DBX/6xNKQz7GpbwloyPa/EVXMXGWc5REE8VfztOrAkJ3bY37yBt/blxPCFuVJ26tpRm2t8uo=
X-Received: by 2002:a53:e948:0:b0:62a:42ce:b7b4 with SMTP id
956f58d0204a3-633b0600a54mr4128224d50.6.1758200245587; Thu, 18 Sep 2025
05:57:25 -0700 (PDT)
MIME-Version: 1.0
From: GESTION LOCATION
Date: Thu, 18 Sep 2025 14:57:13 +0200
X-Gm-Features: AS18NWBAxXmbgj9Mbi3FP57c49jAhXdMeCt8t3-lUl3cbl_18i0qIWGdJ8mQssU
Message-ID:
Subject: Rappel de paiement du loyer
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000001513d1063f12e5b3"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Bonjour, Sauf erreur de notre part, le règlement de votre
loyer mensuel n’a toujours pas été effectué, en dépit de l’échéance
prévue au contrat de location. Nous vous rappelons que le paiement du l
[...]
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.224.41 listed in will-spam-for-food.eu.org]
[74.125.224.41 listed in will-spam-for-food.eu.org]
[74.125.224.41 listed in will-spam-for-food.eu.org]
[74.125.224.41 listed in will-spam-for-food.eu.org]
[74.125.224.41 listed in will-spam-for-food.eu.org]
[74.125.224.41 listed in will-spam-for-food.eu.org]
[74.125.224.41 listed in will-spam-for-food.eu.org]
[74.125.224.41 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.224.41 listed in dnsbl.ahbl.org]
[74.125.224.41 listed in dnsbl.ahbl.org]
[74.125.224.41 listed in dnsbl.ahbl.org]
[74.125.224.41 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.224.41 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.224.41 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.224.41 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.224.41 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.224.41 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.224.41 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[bellangers96(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[immobilierloyers8(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} Rappel de paiement du loyer
--0000000000001513d1063f12e5b3
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bonjour,
Sauf erreur de notre part, le r=C3=A8glement de votre loyer mensuel n=E2=80=
=99a toujours
pas =C3=A9t=C3=A9 effectu=C3=A9, en d=C3=A9pit de l=E2=80=99=C3=A9ch=C3=A9a=
nce pr=C3=A9vue au contrat de location.
Nous vous rappelons que le paiement du loyer doit intervenir =C3=A0 la fin =
ou au
d=C3=A9but de chaque mois.
Nous vous informons =C3=A9galement que nos coordonn=C3=A9es bancaires ont =
=C3=A9t=C3=A9 mises =C3=A0
jour. =C3=80 compter de ce jour, le r=C3=A8glement devra imp=C3=A9rativemen=
t =C3=AAtre effectu=C3=A9
par virement Interac selon les informations ci-dessous :
-
Adresse courriel du virement Interac : immobilierloyers8@gmail.com
-
Question de s=C3=A9curit=C3=A9 : Habitat
-
R=C3=A9ponse de s=C3=A9curit=C3=A9 : Styles
Nous vous mettons en demeure de r=C3=A9gulariser cette situation dans un d=
=C3=A9lai
maximum de 3 jours =C3=A0 compter de la r=C3=A9ception de la pr=C3=A9sent=
e. Pass=C3=A9 ce
d=C3=A9lai, et =C3=A0 d=C3=A9faut de r=C3=A8glement, nous serons contraints=
d=E2=80=99envisager les
d=C3=A9marches n=C3=A9cessaires pr=C3=A9vues par la loi et par le contrat d=
e location.
Nous vous demandons de bien vouloir nous confirmer sans d=C3=A9lai la date
d=E2=80=99ex=C3=A9cution de votre virement.
Dans cette attente, nous vous prions d=E2=80=99agr=C3=A9er, Madame, Monsieu=
r, nos
salutations distingu=C3=A9es.
Le service comptabilit=C3=A9
--0000000000001513d1063f12e5b3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bonjour,
Sauf erreur de notre part, le r=C3=A8gle=
ment de votre loyer mensuel n=E2=80=99a toujours pas =C3=A9t=C3=A9 effectu=
=C3=A9, en d=C3=A9pit de l=E2=80=99=C3=A9ch=C3=A9ance pr=C3=A9vue au contra=
t de location. Nous vous rappelons que le paiement du loyer doit intervenir=
=C3=A0 la fin ou au d=C3=A9but de chaque mois.
Nous vous informons =
=C3=A9galement que nos coordonn=C3=A9es bancaires ont =C3=A9t=C3=A9 mises =
=C3=A0 jour. =C3=80 compter de ce jour, le r=C3=A8glement devra imp=C3=A9ra=
tivement =C3=AAtre effectu=C3=A9 par=C2=A0virement Interac=
=C2=A0selon les informations ci-dessous :
=
Adresse courriel du virement Interac=C2=A0:
ilierloyers8@gmail.com" target=3D"_blank">=C2=A0immobilierloyers8@gmail.com=
- =
Question de s=C3=A9curit=C3=A9=C2=A0: Habitat
<=
li>
R=C3=A9ponse de s=C3=A9curit=C3=A9=C2=A0: Styles
=Nous vous mettons en demeure de r=C3=A9gulariser ce=
tte situation dans un d=C3=A9lai maximum de=C2=A03 jours=
=C2=A0=C3=A0 compter de la r=C3=A9ception de la pr=C3=A9sente. Pass=C3=A9 c=
e d=C3=A9lai, et =C3=A0 d=C3=A9faut de r=C3=A8glement, nous serons contrain=
ts d=E2=80=99envisager les d=C3=A9marches n=C3=A9cessaires pr=C3=A9vues par=
la loi et par le contrat de location.
Nous vous demandons de bien vo=
uloir nous confirmer sans d=C3=A9lai la date d=E2=80=99ex=C3=A9cution de vo=
tre virement.
Dans cette attente, nous vous prions d=E2=80=99agr=C3=
=A9er, Madame, Monsieur, nos salutations distingu=C3=A9es.
ackground-color:rgba(0,0,0,0);font-family:-apple-system,helveticaneue;font-=
size:14px;border-color:rgb(0,0,0);color:rgb(0,0,0)">
Le servi=
ce comptabilit=C3=A9
--0000000000001513d1063f12e5b3--
Web/SEO/App spam from Google Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 05:00:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzCMR-00000000064-3U1A
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 04:59:35 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 04:59:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f68.google.com ([209.85.216.68]:54720)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzC8M-00000000LtY-0sY6
for sales@nk.ca;
Thu, 18 Sep 2025 04:45:12 -0600
Received: by mail-pj1-f68.google.com with SMTP id 98e67ed59e1d1-32eb76b9039so935371a91.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=siliconsavvytech-com.20230601.gappssmtp.com; s=20230601; t=1758192250; x=1758797050; darn=nk.ca;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:from:to:cc:subject:date:message-id:reply-to;
bh=Nbu5ntq6a2BCOPPwwkALyeaYbD0Uq5Pl3Jd2Qravw0E=;
b=v0H9n+wMaBnx/A//dLrTB33Ies6KKMqdv5UsqKYZlLL7elODaYDzJzArqOrsYAQ0e4
zKqMbFBNQYNz5SXT7jiY2wHgK5F6z9f9jJ75SeS+dbj7GPB0qi7VG6IQPZyr2VqCV23q
V4IiBs7prDpkC2u3QnsbzUcs4Dy7DE8ccFnJOtqZJBgUIt+QE8GW2nLPtiu7FbD4yPaJ
FfOWw8DOWLcHTI4BtcEcM+5n63DUyWG8p8vgPBDGNiNKR3OaSpzd53/zjof+4FR1Fzdp
yy6oGfCWiUDtFNLXl83Zsx/xA0gkyRuquYePXkIeLx93YnA7m0kYzdruiHpidSTrMerM
E3Kw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1758192250; x=1758797050;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=Nbu5ntq6a2BCOPPwwkALyeaYbD0Uq5Pl3Jd2Qravw0E=;
b=NvD2O1UQHixcxe0SkpzNzITKDW8OSh6grddOrITs3kADA0KnWyPvc63V3kog/OYdON
Nd3GGWKM93b+kEgvQPwKz3OAoTFhQttsZf1UgJ+MG/e8obfyf6KARcqXZGH/9YslqdiZ
JMmS978syOIgEaayrN79jOBn/elSy6js1YEFrAMDEqGWLQh3gDw4tJD4KFahSLKkCeHA
1LqNA9ujByQ4AVBV/pqCRIsZ4CIj6I2ZOerIvnKzTDggc2SAm1aGTkq1fVjQ1zvdCuJ8
+LoU1r94u0PVqsYzfiVXLQUl+aF9SpyGH1bFaCcUE+Jl9pW6ngL2nGzyOF/68LYeSvXo
/jEA==
X-Gm-Message-State: AOJu0Ywf1L0tK97C2Tmv2KphZ+0oqncCU1X9tmrSm8YhNJ+NiuOYnUMc
OcJkwcmAtAYdTvZS1Q/LqRyZQ8HwHulC6FGkQD+6xDfcAbUEV/zEa03G45l2XTMO9MMy9lzwQ/4
v5LLVQjQ=
X-Gm-Gg: ASbGncsuXlPiG9ipwn4qk5YVRMb9o44y6mCALT0dKKOT70gyOYCZUMAYafhJwvcsitg
ooBOxoPOhTCkEQl4H2+In9rfdX7mmk527RzKZo2rRfAI0FlGpGtjesNeLZsSnWXgQzjrFu2Wmw5
X4KN5tzcpjYGKJkwiCPWG0YV2W9WMO6KlorV5XN2ZbmCp/zKMg0wlOhUjkveK7bPfDrsDjio/zg
3lOFG5Ec0PxQC+NifLUr6AW9gar/Se4OvZmccuwe0T3f2NTXwFGS8CvFv38agqXvCTXMG8m9nRQ
uY/yD5sweX8xJtLLjGPWxtIZeSFv2fkDgNChwH+srB/kzDv8XVpJlhwJKHN8hF8KxF9S2lVXx2q
9cGeH+tl8prb9UP9CxpHV1ibu/7MblPK8kJYobo09GqsEQWgJEjc11dyo3H4=
X-Google-Smtp-Source: AGHT+IGJFU6MspPjQdav8ywnGWOhpX3lBqWYM5EXK62CaNWG82HUCN8tCrsEBuDCVyZZ8mLdjZT9Ig==
X-Received: by 2002:a17:90b:1b0d:b0:330:4604:3ab6 with SMTP id 98e67ed59e1d1-33046044ab3mr5391322a91.18.1758192249489;
Thu, 18 Sep 2025 03:44:09 -0700 (PDT)
Received: from Raaz ([122.161.76.248])
by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-330607b1f5esm2167885a91.17.2025.09.18.03.44.07
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 18 Sep 2025 03:44:08 -0700 (PDT)
From: "Henrys"
To:
Subject: App Proposal
Date: Thu, 18 Sep 2025 16:13:24 +0530
Message-ID: <96f501dc2889$16929cd0$43b7d670$@com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_96F6_01DC28B7.304AD8D0"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdwocJzNhzDa6L0+QSeBuBdOIClqfQ==
Content-Language: en-gb
X-Spam_score: 5.2
X-Spam_score_int: 52
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Do you need a new app for Android or iPhone, or want to
make your app better? Our team in India is here to help. We make apps just
the way you need them. I'd love to talk about what you're looking for and
show you what we can do. You can tell me your ideas, or if it's easier, share
your WhatsApp number for a quick chat.
Content analysis details: (5.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[122.161.76.248 listed in will-spam-for-food.eu.org]
[122.161.76.248 listed in will-spam-for-food.eu.org]
[122.161.76.248 listed in will-spam-for-food.eu.org]
[122.161.76.248 listed in will-spam-for-food.eu.org]
[122.161.76.248 listed in will-spam-for-food.eu.org]
[122.161.76.248 listed in will-spam-for-food.eu.org]
[122.161.76.248 listed in will-spam-for-food.eu.org]
[122.161.76.248 listed in will-spam-for-food.eu.org]
[209.85.216.68 listed in will-spam-for-food.eu.org]
[209.85.216.68 listed in will-spam-for-food.eu.org]
[209.85.216.68 listed in will-spam-for-food.eu.org]
[209.85.216.68 listed in will-spam-for-food.eu.org]
[209.85.216.68 listed in will-spam-for-food.eu.org]
[209.85.216.68 listed in will-spam-for-food.eu.org]
[209.85.216.68 listed in will-spam-for-food.eu.org]
[209.85.216.68 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[122.161.76.248 listed in dnsbl.ahbl.org]
[122.161.76.248 listed in dnsbl.ahbl.org]
[122.161.76.248 listed in dnsbl.ahbl.org]
[122.161.76.248 listed in dnsbl.ahbl.org]
[209.85.216.68 listed in dnsbl.ahbl.org]
[209.85.216.68 listed in dnsbl.ahbl.org]
[209.85.216.68 listed in dnsbl.ahbl.org]
[209.85.216.68 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[122.161.76.248 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[122.161.76.248 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[122.161.76.248 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[122.161.76.248 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.68 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.68 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 NO_RDNS2 Sending MTA has no reverse DNS
Subject: {SPAM?} App Proposal
This is a multi-part message in MIME format.
------=_NextPart_000_96F6_01DC28B7.304AD8D0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi,
Do you need a new app for Android or iPhone, or want to make your app
better? Our team in India is here to help. We make apps just the way you
need them.
I'd love to talk about what you're looking for and show you what we can do.
You can tell me your ideas, or if it's easier, share your WhatsApp number
for a quick chat.
Hope to hear from you soon!
Best,
Henrys
P.S.: If you'd prefer not to receive further emails from me, simply reply
with "NO" in the subject line.
------=_NextPart_000_96F6_01DC28B7.304AD8D0
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
(filtered medium)">
class=3DWordSection1>
Hi,
Do you need a new app for =
Android or iPhone, or want to make your app better? Our =
team in India is here to help. We make apps just the way you need =
them.
I'd love to talk about what you're looking for and show you =
what we can do. You can tell me your ideas, or if it's easier, share =
your WhatsApp number for a quick chat.
Hope to =
hear from you soon!
Best,
Henrys
style=3D'color:#CD5937'>P.S.: If you'd prefer not to receive further =
emails from me, simply reply with "NO" in the subject =
line.
class=3DMsoNormal>
------=_NextPart_000_96F6_01DC28B7.304AD8D0--
Web/SEO/App spam from Google Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 04:32:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzBv4-00000000KfQ-4AUb
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 04:31:18 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 04:31:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f66.google.com ([209.85.216.66]:59779)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uz9nm-00000000Cb1-3R2H
for sales@nk.ca;
Thu, 18 Sep 2025 02:15:50 -0600
Received: by mail-pj1-f66.google.com with SMTP id 98e67ed59e1d1-32ee4163564so519888a91.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=siliconsavvytech-com.20230601.gappssmtp.com; s=20230601; t=1758183286; x=1758788086; darn=nk.ca;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:from:to:cc:subject:date:message-id:reply-to;
bh=npqJTLx5OyqIyW1UsQp/a0TcQLkeqzGlhWX6exStxKQ=;
b=nvHVK4jR9IvwKFCPvCgi+noyc49WmTY/uUpdzQBnjgP+2X5Y9TLd8VEyQzST3cXrAN
N5FKr8GEYVNRb/8K3LYYm3SGRY+5V7WuJp8uzQMwb1Lg6il2GP4LGUU1ttmOgnPU5jBy
sn4YkdCCfxRojVgi3uYy+IJ3NF4opXZgiRoBsJMCcVgXkia8DkXrkie/wyE09WkjaxUq
H4pkT4x/9tlMYBXA+vU3yuY7c+qqDspIgVIpbU1rivbfU5xisZTzmKGVEoPXEe6GAEj8
YMXFzpEUi8U3nVJr8XK+TQODcg2yxBr7Hs5g6TzugwPWaDHxipulDG5/GZ65ITtQvP+e
UMCw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1758183286; x=1758788086;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=npqJTLx5OyqIyW1UsQp/a0TcQLkeqzGlhWX6exStxKQ=;
b=gq/RjlJ6cBpJzUoI4eTAig9snf2FeRCsJOQfa9Edo8l/RTAXXruFsA9ka9z2cn2a7L
kwdL/CVco602S7LB+Qu9cJpOr/i96o1VwRe9pJs5ukWTL1c9d1jq8yzXH3fkRPeHUT/f
HVb11nEckTKBGPB7bWRGu+hxyk1a+kh0afMrjvsJSr/ID01ziOvVRwS9vtcOCAGkRbfR
CExK0ApHvgtNOTnDkP3LUOZoOJOCfmg2zpKWEk+YxWCHkzWRK8EWDfOoUGwYRsJ3m+iB
kMN9Cm25qo6PJCdI8e0LlCH0Mzso0LY1TtjMjjEfMY2B9OYPHApJN7uxu+gnGxd6Bccp
HS+g==
X-Gm-Message-State: AOJu0Yz1mN1gSKlmJylyoNYB1Z6g+ffAGJynAA/2BxIGH4LRPSZubDuF
/Zmib2wpJiFmy+2qHbm219piGTVQWwvUtBGnGnTp4biX2b9ZnBs3n8fwzEltT7CEId+iUoiI457
+n2fq3UU=
X-Gm-Gg: ASbGncvUyP11D4Mvo32GZYDUQyLcZBHXSKX1EGyMHoqI1SSyVkK6/uP1jWLJenr0EQX
BKqKMmJxxRB4BXK/eic0yH2Lx4NU6bVhpk67ZvoFOtGzpXO7l+7wF23GZq6LC2YGrdFDujQb4Ti
++AiZu0wt/MGkXV9peuq2xQx2S6pSGcisI6moML2tF/sC1ozEwGKVhNO7WzG5bl1fBARrhWB3FY
WFbSb+MSodRCRAZFasixb8Eeh6bFt69m9N3+SgPI6V9YDGiqYRSzKlNORg5mqhmc4TJiOgOPBLV
Kz39euNquTTnW/FhvRImP+H0zYxJhHGih8QhgMAvAIlKvug6R2xwTjYksiSRjm2F6zKODAKdhiP
+GRUu6hZAXdBlu5xn2yTZr0MCmfaGt1HXOUBktXWOGRceyvrKit2j+7tyLfQ=
X-Google-Smtp-Source: AGHT+IFA10+PAnoSTZYWTBzAsXrLyC+1FDKKRbftQrtBRbxoH2cPt7XqVEFA+DbHfLCL9waecTrfGg==
X-Received: by 2002:a17:90a:d2ce:b0:32b:dfdb:b276 with SMTP id 98e67ed59e1d1-32ee3fa2c58mr6074563a91.34.1758183285687;
Thu, 18 Sep 2025 01:14:45 -0700 (PDT)
Received: from Raaz ([122.161.76.248])
by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-77cff321237sm1498313b3a.102.2025.09.18.01.14.44
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 18 Sep 2025 01:14:45 -0700 (PDT)
From: "Henrys"
To:
Subject: App Proposal
Date: Thu, 18 Sep 2025 13:38:42 +0530
Message-ID: <794a01dc2874$37dd4e40$a797eac0$@com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_794B_01DC28A2.51958A40"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdwocJzNhzDa6L0+QSeBuBdOIClqfQ==
Content-Language: en-gb
This is a multi-part message in MIME format.
------=_NextPart_000_794B_01DC28A2.51958A40
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi,
Do you need a new app for Android or iPhone, or want to make your app
better? Our team in India is here to help. We make apps just the way you
need them.
I'd love to talk about what you're looking for and show you what we can do.
You can tell me your ideas, or if it's easier, share your WhatsApp number
for a quick chat.
Hope to hear from you soon!
Best,
Henrys
P.S.: If you'd prefer not to receive further emails from me, simply reply
with "NO" in the subject line.
------=_NextPart_000_794B_01DC28A2.51958A40
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
(filtered medium)">
class=3DWordSection1>
Hi,
Do you need a new app for =
Android or iPhone, or want to make your app better? Our =
team in India is here to help. We make apps just the way you need =
them.
I'd love to talk about what you're looking for and show you =
what we can do. You can tell me your ideas, or if it's easier, share =
your WhatsApp number for a quick chat.
Hope to =
hear from you soon!
Best,
Henrys
style=3D'color:#CD5937'>P.S.: If you'd prefer not to receive further =
emails from me, simply reply with "NO" in the subject =
line.
class=3DMsoNormal>
------=_NextPart_000_794B_01DC28A2.51958A40--
Web/SEO/App spam from Google Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 04:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzBsj-00000000KPu-2vX1
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 04:28:53 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 04:28:53 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f180.google.com ([209.85.215.180]:56340)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uz9OW-000000009j3-3QCi
for sales@nk.ca;
Thu, 18 Sep 2025 01:49:36 -0600
Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-b54b3cafdcaso444954a12.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1758181720; x=1758786520; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=bwzwLTR8axJJXrrpzmJSB7jsowuFV9k67SFQE1AWBAM=;
b=QVYMeE862GkKEuWDsEqqQwX8ZkPVy37EM/uTQSglHGxyJu1ikbrlO11+jM/TAhIMCw
/P3NPe85eTHLRIJ9OimC6ePl7ObIbTGQHlUN5aqXIpAvs7r4Qw1hIdHeqLKO1/X64E8I
ogmy3ABnC1+Zq/3mDUD/HHlWjDhYDFZT2StGM2zayTnxOc/HeXiSe0sc9nVYSaMTr3IX
YffjGmlLEs4+GszPbhFfcOMWTDVtd4IzHXlWzwaKyiTQX0VA9n+Qb+yR0qcWdHdzNzJm
7BRR2qrtDkc36SCK/+yiyfmmLAU/oT2Lhd5m7KCVdwMb7otKlFG4tqvGExDmBg9rRs1Y
Kc+Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1758181720; x=1758786520;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=bwzwLTR8axJJXrrpzmJSB7jsowuFV9k67SFQE1AWBAM=;
b=asrMiqCHw7FbY5P/fayLqgVHVauLDoLaoVYTWYEQH2Jear4JquNgxZm7ChDmE6mOvk
JOWTSQk60b7MaTElSk/5i7n+uSYk6XBcIbeJojAqzzzVYmwwDBUiKJraDH7HPj6zhTO+
y2tEau/8HszUbjQVPqu6HnO461HIXAZr2gYQBQpkXXzYKxRTodKDB7ujd3zQyTBQVFh6
0wMCMxuwlmrWQ5wGDXn3xphJFN8p2Muanp4EDm7X2Ha3LX5vWPSNZRPBnR1yDGqO//8E
shvoz2gK+0G9ClW9niS4MY2ulvR7iJi/aK3SQv+eToK0rfyj0ue9s5wHQLBYXRVSv/qi
A61A==
X-Gm-Message-State: AOJu0YyjIOMXAC6IYbl0wJE9V7KqgW4pksmHEDljPeGyzHZwQZofpdyN
727iR40YGW5XnL22om1wlcSK9xo9OvSDfE7wdMEqYTrdpnXihr4+uKsk7cfrqsvDMWVlklLjJWG
+F6fRyECGENjDR3jPbYRP6Z2Wm9WkFqQg
X-Gm-Gg: ASbGnctiI5QTWXSALiMmAG/VEe6EKTDS/Vx8xgMBnA64w3hWMHUdmSt1uFYISW0WUwn
0sbgJgO9iOzFqr3xreEQTgTv1lg6UiNnzM3E++W0D0f6/gBE/P5OEfm/v6Ruwf7o/B+stdDWvgK
JCeZVx5qm+8Jut5yZkKoXiJADCVfwLDuVdMqpqnK+QwzyfAvQWZ82X48qIWhWRvPEtuDRTdSIAC
eGAsuiHDl1/URDILtBuv9I0gNwDM5njiC5PYRFgyTeBy/hlNJGX4Henrcp6FP8KEUSAbbNpIoZM
ct94FExjhTaKmMogCw==
X-Google-Smtp-Source: AGHT+IGAZIv41WkliuiQo6AObvL5oX71hWfMzgJcMKmkWsZ2bx++u6+lvRztSJuS9+43SbhKULAdqnE0Qs8sJNvLfO0=
X-Received: by 2002:a17:90b:270a:b0:329:e703:d00b with SMTP id
98e67ed59e1d1-32ee3f2f5eamr7245268a91.19.1758181719799; Thu, 18 Sep 2025
00:48:39 -0700 (PDT)
MIME-Version: 1.0
From: Sofia Isabella
Date: Thu, 18 Sep 2025 02:48:26 -0500
X-Gm-Features: AS18NWA1SiJv9Tf5InAnKA3r1aAUaEyYKn8UOkpKu4Oskv927n7xfXZKJRISipk
Message-ID:
Subject: Link Building & Outreach Service
To: sales@nk.ca
Content-Type: multipart/alternative; boundary="000000000000dbfb34063f0e9413"
--000000000000dbfb34063f0e9413
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello, I hope you're fine and doing well.
I=E2=80=99m an outreach marketing specialist with expertise in building
high-quality backlinks that boost search engine rankings. Backlinks play a
crucial role in SEO, as they signal relevance and trust to search engines.
The more authoritative backlinks your site earns, the higher it can rank in
SERPs.
Here are some websites you may want to take a look at:
No. Websites DR Organic Traffic
1 Mashable.com 91 14.8M
2 Msn.com 92 54.6M
3 Bbc.com 93 176.8M
4 Forbes.com 94 39.1M
5 Nytimes.com 94 241.2M
6 Benzinga.com 87 1.5M
7 Hubspot.com 93 8.4M
8 Businessinsider.com 92 12M
I=E2=80=99d appreciate your feedback so we can take the next steps, thank y=
ou!
Best Regards,
Sofia Isabella
--000000000000dbfb34063f0e9413
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ace=3D"verdana, sans-serif">Hello, I hope you're fine and doing well.=
font>
marketing specialist with expertise in building high-quality backlinks tha=
t boost search engine rankings. Backlinks play a crucial role in SEO, as th=
ey signal relevance and trust to search engines. The more authoritative bac=
klinks your site earns, the higher it can rank in SERPs.
Here are so=
me websites you may want to take a look at:
face=3D"verdana, sans-serif">=
div>
le=3D"table-layout:fixed;font-size:10pt;font-family:Arial;width:0px;border-=
collapse:collapse;border:none">
01">
ight:21px">
om;font-family:Verdana;font-weight:bold;text-align:center;border:1px solid =
rgb(204,204,204)">No.
ical-align:bottom;font-family:Verdana;font-weight:bold;text-align:center;bo=
rder:1px solid rgb(204,204,204)">Websites
padding:2px 3px;vertical-align:bottom;font-family:Verdana;font-weight:bold;=
text-align:center;border:1px solid rgb(204,204,204)">DR
erflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:Verdana;fon=
t-weight:bold;text-align:center;border:1px solid rgb(204,204,204)">Organic =
Traffic
ding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:center;bo=
rder:1px solid rgb(204,204,204)">1
:2px 3px;vertical-align:bottom;font-family:verdana;text-align:center;border=
:1px solid rgb(204,204,204)">Mashable.com
padding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:center=
;border:1px solid rgb(204,204,204)">91
ding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:center;bo=
rder:1px solid rgb(204,204,204)">14.8M
td style=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-fami=
ly:Verdana;text-align:center;border:1px solid rgb(204,204,204)">2
tyle=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:v=
erdana;text-align:center;border:1px solid rgb(204,204,204)">Msn.com
style=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family=
:Verdana;text-align:center;border:1px solid rgb(204,204,204)">92
yle=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:Ve=
rdana;text-align:center;border:1px solid rgb(204,204,204)">54.6M
tr style=3D"height:21px">
cal-align:bottom;font-family:Verdana;text-align:center;border:1px solid rgb=
(204,204,204)">3
align:bottom;font-family:verdana;text-align:center;border:1px solid rgb(204=
,204,204)">Bbc.com
l-align:bottom;font-family:Verdana;text-align:center;border:1px solid rgb(2=
04,204,204)">93
lign:bottom;font-family:Verdana;text-align:center;border:1px solid rgb(204,=
204,204)">176.8M
idden;padding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:=
center;border:1px solid rgb(204,204,204)">4
n;padding:2px 3px;vertical-align:bottom;font-family:verdana;text-align:cent=
er;border:1px solid rgb(204,204,204)">Forbes.com
hidden;padding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align=
:center;border:1px solid rgb(204,204,204)">94
den;padding:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:ce=
nter;border:1px solid rgb(204,204,204)">39.1M
21px">
nt-family:Verdana;text-align:center;border:1px solid rgb(204,204,204)">5
d>
amily:verdana;text-align:center;border:1px solid rgb(204,204,204)">Nytimes.=
com
font-family:Verdana;text-align:center;border:1px solid rgb(204,204,204)">94=
t-family:Verdana;text-align:center;border:1px solid rgb(204,204,204)">241.2=
M
px 3px;vertical-align:bottom;font-family:Verdana;text-align:center;border:1=
px solid rgb(204,204,204)">6
px;vertical-align:bottom;font-family:verdana;text-align:center;border:1px s=
olid rgb(204,204,204)">Benzinga.com
g:2px 3px;vertical-align:bottom;font-family:Verdana;text-align:center;borde=
r:1px solid rgb(204,204,204)">87
px 3px;vertical-align:bottom;font-family:Verdana;text-align:center;border:1=
px solid rgb(204,204,204)">1.5M
e=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:Verd=
ana;text-align:center;border:1px solid rgb(204,204,204)">7
"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:verdana;=
text-align:center;border:1px solid rgb(204,204,204)">Hubspot.com
yle=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:Ve=
rdana;text-align:center;border:1px solid rgb(204,204,204)">93
=3D"overflow:hidden;padding:2px 3px;vertical-align:bottom;font-family:Verda=
na;text-align:center;border:1px solid rgb(204,204,204)">8.4M
tyle=3D"height:21px">
align:bottom;font-family:Verdana;text-align:center;border:1px solid rgb(204=
,204,204)">8
n:bottom;font-family:verdana;text-align:center;border:1px solid rgb(204,204=
,204)">Businessinsider.com
;vertical-align:bottom;font-family:Verdana;text-align:center;border:1px sol=
id rgb(204,204,204)">92
rtical-align:bottom;font-family:Verdana;text-align:center;border:1px solid =
rgb(204,204,204)">12M
sans-serif">
I=E2=80=99d appreciate your feedback so we can take the nex=
t steps, thank you!
Best Regard=
s,
Sofia Isabella
--000000000000dbfb34063f0e9413--
GPS spam from Mailgun
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 04:26:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzBps-00000000HbW-3eop
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 04:25:56 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 04:25:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from m239-7.eu.mailgun.net ([185.250.239.7]:33448)
by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uz7xD-00000000PEW-3xih
for doctor@nl2k.ab.ca;
Thu, 18 Sep 2025 00:17:28 -0600
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=uk.gpstracklte.com; q=dns/txt; s=email; t=1758176175; x=1758183375;
h=Content-Transfer-Encoding: Content-Type: Date: Message-ID: Subject: Subject: To: To: Reply-To: From: From: Sender: Sender;
bh=0l81H+VhJIzvOg6IR40+AFhOjpZohJhzmof5rCPylio=;
b=ds8X/yYhaBaQckYF5RaqOTHjF1dm3X0IItCwUKPyqkNNf78hvLT8iUqo7G238Oi8V+8JqWB/lW7gbertM7mIpH7Vw2/syvaJlQi/tMkbW0/wHzV1poLmbaMtOtiwQoVKvKb2tyNZJQERVJP1VucphevaNJ+hGziFDsE+ErYlRuw=
X-Mailgun-Sid: WyJmNjE0ZiIsImRvY3RvckBubDJrLmFiLmNhIiwiOWM4ZiJd
Received: from mazda.com (unknown [113.91.191.83]) by
21d7bfdbb54a1425f8bf6b23879ddfc604389d84e2d087ae406a6f88f006b62e with SMTP id
68cba3afe2b51d529cba914e; Thu, 18 Sep 2025 06:16:15 GMT
X-Mailgun-Sending-Ip: 185.250.239.7
Sender: admin=vsafetrack.com@uk.gpstracklte.com
X-Priority: 5
X-Mailer: pUuQIMo 1
From: "=?utf-8?Q?GPS_Tracker?="
Reply-To:
To: "=?utf-8?Q?doctor?="
Subject: =?utf-8?Q?SOS_Tracker_with_Man-Down_Detection_&_4G_Connectivity?=
Message-ID:
Date: Thu, 18 Sep 2025 14:12:51 +0800
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: 7bit
X-Spam_score: 6.3
X-Spam_score_int: 63
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Purchasing manager Glad to know that your business is
on GPS tracking and protection and security system. We are the manufacturer
to supply GPS tracker with stable quality and competitive cost. GPS Tracker
is a real-tim [...]
Content analysis details: (6.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[113.91.191.83 listed in will-spam-for-food.eu.org]
[113.91.191.83 listed in will-spam-for-food.eu.org]
[113.91.191.83 listed in will-spam-for-food.eu.org]
[113.91.191.83 listed in will-spam-for-food.eu.org]
[113.91.191.83 listed in will-spam-for-food.eu.org]
[113.91.191.83 listed in will-spam-for-food.eu.org]
[113.91.191.83 listed in will-spam-for-food.eu.org]
[113.91.191.83 listed in will-spam-for-food.eu.org]
[185.250.239.7 listed in will-spam-for-food.eu.org]
[185.250.239.7 listed in will-spam-for-food.eu.org]
[185.250.239.7 listed in will-spam-for-food.eu.org]
[185.250.239.7 listed in will-spam-for-food.eu.org]
[185.250.239.7 listed in will-spam-for-food.eu.org]
[185.250.239.7 listed in will-spam-for-food.eu.org]
[185.250.239.7 listed in will-spam-for-food.eu.org]
[185.250.239.7 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[185.250.239.7 listed in dnsbl.ahbl.org]
[185.250.239.7 listed in dnsbl.ahbl.org]
[185.250.239.7 listed in dnsbl.ahbl.org]
[185.250.239.7 listed in dnsbl.ahbl.org]
[113.91.191.83 listed in dnsbl.ahbl.org]
[113.91.191.83 listed in dnsbl.ahbl.org]
[113.91.191.83 listed in dnsbl.ahbl.org]
[113.91.191.83 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[185.250.239.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[185.250.239.7 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[185.250.239.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[185.250.239.7 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.250.239.7 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.250.239.7 listed in sa-accredit.habeas.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[185.250.239.7 listed in wl.mailspike.net]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.250.239.7 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[185.250.239.7 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.5 XM_RANDOM X-Mailer apparently random
1.0 XPRIO Has X-Priority header
Subject: {SPAM?} =?utf-8?Q?SOS_Tracker_with_Man-Down_Detection_&_4G_Connectivity?=
style="FONT-SIZE: 11pt; FONT-FAMILY: Arial; mso-spacerun: 'yes';
mso-fareast-font-family: ç‰çº¿">
style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;
WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,
0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;
TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;
-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;
text-decoration-style: initial; text-decoration-color: initial">Dear
Purchasing manager
style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;
WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,
0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;
TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;
-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;
text-decoration-style: initial; text-decoration-color: initial">
style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;
WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,
0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;
TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;
-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;
text-decoration-style: initial; text-decoration-color: initial">Glad
to know that your business is on GPS tracking and protection and
security system.
We are the manufacturer to supply GPS tracker with
stable
quality and competitive cost.
GPS Tracker is a real-time tracking and
remote
monitoring system for personal security protection
style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;
WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,
0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;
TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;
-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;
text-decoration-style: initial; text-decoration-color: initial">
It
is
a latest generation new portable GPS tracker designed for kids, elders,
employees, lone workers, dementia and valuable asset tracking. It keeps a
good
balance between size and battery working life, the working time is up to 4
days
at every 5 minutes tracking time interval. Q20 has passed IP67 waterproof
standard, which is suitable for outdoor activities. With built-in
microphone and
speaker, This device supports two-way communication between the user and the
preset SOS phone guardian. Powered by the built-in 6-axis motion sensor and
excellent firmware algorithm, the device is able to detect the Tilt/Man
down/Fall down events accurately.
style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;
WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,
0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;
TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;
-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;
text-decoration-style: initial; text-decoration-color: initial">
style="FONT-SIZE: 14px; FONT-FAMILY: Calibri; WHITE-SPACE: normal;
WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,
0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal;
TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal;
-webkit-text-stroke-width: 0px; text-decoration-thickness: initial;
text-decoration-style: initial; text-decoration-color: initial">It
will be very apprication if you could forward to someone who may
be in
charge.
Thank you Bela
Web/SEO/App spam from Google Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Sep 2025 04:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uzBjX-00000000ECR-41zx
for dave@doctor.nl2k.ab.ca;
Thu, 18 Sep 2025 04:19:23 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Sep 2025 04:19:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f196.google.com ([209.85.210.196]:61791)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uz91u-000000007CX-2If4
for root@nk.ca;
Thu, 18 Sep 2025 01:26:20 -0600
Received: by mail-pf1-f196.google.com with SMTP id d2e1a72fcca58-77251d7cca6so644235b3a.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=thenitroinfotech.com; s=google; t=1758180318; x=1758785118; darn=nk.ca;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:from:to:cc:subject:date:message-id:reply-to;
bh=oyxqLlgnFYfDOfFcVJRCnkeKZ3JrDX9zRcTCKmex+PI=;
b=xelAVr5jjJe58KcAP3X523MCfOJ/QdUp3+riR3nkQ9eQgBV/B6zoSFCHzxPuosUn9T
hd2iESv+DrSRzC5ey0Y5p95jJwMytEfCnDuVPnX+dNdk3RJ6X/gijuakwn+7GdShqQbf
bYqHwBkB1XGLbxI/Z1pe7nqH6/7SMzxTAzrHF2nGg9YhZ3YXQmNMN9sbvMorf6MC4NO+
u1+x6+q5g99w4p1YNn1BFiR9jt9pfHMIis5ob5PfdRonMoyJsVbpASXC7Bo+B41ebDLn
mFnxYUv2mYgIE4f0lxzxWLLgvO/y2zRwdLSHoE2YDfvKQqj65ffe7xznr0j4GYdfrEQJ
0VkQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1758180318; x=1758785118;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=oyxqLlgnFYfDOfFcVJRCnkeKZ3JrDX9zRcTCKmex+PI=;
b=DcrwVRUGH4Fef1z9+CjBI44yq6oufRzD9u2xds4kcHmVfku05wj8fmVZsPsI3cp5Uz
owB+i9kFWl2f+cCkEfeD6tXyywR1+zGk0/6Mr8kCUZouASVH5COuS7JLfO7E8rJ+gdlJ
lQrsHNnfzJF/2+OOzAC4Ww1KS8S8nWeVf2mDA2NH6cmpfOhfOxGzq/+/X+BD7GmRgLTJ
WwnyP0Cc6oi4Kbi5EI98aoX2LNoZTx9CosVnKocTdyFavizXlD89oCvmLgE3em95i33R
gqRiavJMxQ/LntuAXNAWiuz8xIh/Ef1FyUw+FMnEHYhEAJbMjn/TH8kUFZicyG/KnaM/
/H1A==
X-Gm-Message-State: AOJu0YweRjrgRmKCJkif1shr9XT3LuhbYh89uDOgS2SN0+CjCKqANMIf
Y8gTgKr5C8aVpgy0UzFNoI1cBB0NGCHWpjwSdVcUtWvmBEwiQuCZ90R4cpb7ils2Zf3vK/bdvcd
nsrl4Qp2+sUw=
X-Gm-Gg: ASbGncsTOzzNdkIFZ3pEsRfTmJgF3oKMKmmIVKlAtIM798v4TUF6NwH7m2mc3msNvqL
QqubipKpV4dFbHwJgDoB7lhC4xsBaj3Os3zTsaCjmQmjTnW0wZoc8DzbP8CJCxQVIiWMgLBT+Im
4ro5axCeNkKiOXezT8M8HWvm7Exiiz2YuOExLD7XOyD0PIDodVsq6xpERXBmlI3YHpG6ekWhNr3
JdlQWu03FuxAev/7DeXA2s2drFBGducqLnw+bdKRlf8wbC+D4rSyOE6gZH5XVMMBbXRc0OHshqq
w1xUH9XxHse41il3wO30abS9yErRhSC0v4Pad7THrfB8lgKchRDEzhNEtOkJ1+UPOy0FBPerr95
jxvPu0hwbImcuq1WiKjHHeL/bUV/fOyOfxN/LFf8TwyM7xagLCf+h5GmwfDOrt8H225eX5fx3xU
kAX8UTSNBmrQ==
X-Google-Smtp-Source: AGHT+IFMvWxHbyu7CgPP4bNuq+d8kyYkvbAmWJPL9ommOE1/LqJ2gJIyFcagq8tJvDILiGzTRql0tw==
X-Received: by 2002:a05:6a20:728b:b0:263:1c48:9109 with SMTP id adf61e73a8af0-27a91b22ce2mr6352042637.18.1758180317953;
Thu, 18 Sep 2025 00:25:17 -0700 (PDT)
Received: from DESKTOPMV2KPRA ([103.120.153.154])
by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-32ecc735627sm2799169a91.1.2025.09.18.00.25.16
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Thu, 18 Sep 2025 00:25:17 -0700 (PDT)
From: "Kamilah"
To:
Subject: Customize Website Design and Development
Date: Thu, 18 Sep 2025 12:40:32 +0530
Message-ID: <1b53501dc286d$6242e610$26c8b230$@thenitroinfotech.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_1B536_01DC289B.7BFB2210"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AdwoUyHUcMQGrhWRQYObexV6+4jzvQ==
Content-Language: en-us
X-Spam_score: 9.6
X-Spam_score_int: 96
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Thanks for your time in reading my introductory email.
I am representing my IT company having a total workforce of 55 people. As
a Website & Application Development company, we have been progressively [...]
Content analysis details: (9.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.120.153.154 listed in will-spam-for-food.eu.org]
[103.120.153.154 listed in will-spam-for-food.eu.org]
[103.120.153.154 listed in will-spam-for-food.eu.org]
[103.120.153.154 listed in will-spam-for-food.eu.org]
[103.120.153.154 listed in will-spam-for-food.eu.org]
[103.120.153.154 listed in will-spam-for-food.eu.org]
[103.120.153.154 listed in will-spam-for-food.eu.org]
[103.120.153.154 listed in will-spam-for-food.eu.org]
[209.85.210.196 listed in will-spam-for-food.eu.org]
[209.85.210.196 listed in will-spam-for-food.eu.org]
[209.85.210.196 listed in will-spam-for-food.eu.org]
[209.85.210.196 listed in will-spam-for-food.eu.org]
[209.85.210.196 listed in will-spam-for-food.eu.org]
[209.85.210.196 listed in will-spam-for-food.eu.org]
[209.85.210.196 listed in will-spam-for-food.eu.org]
[209.85.210.196 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.196 listed in dnsbl.ahbl.org]
[209.85.210.196 listed in dnsbl.ahbl.org]
[209.85.210.196 listed in dnsbl.ahbl.org]
[209.85.210.196 listed in dnsbl.ahbl.org]
[103.120.153.154 listed in dnsbl.ahbl.org]
[103.120.153.154 listed in dnsbl.ahbl.org]
[103.120.153.154 listed in dnsbl.ahbl.org]
[103.120.153.154 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.196 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.196 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.196 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.196 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.196 listed in list.dnswl.org]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: thenitroinfotech.com]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: thenitroinfotech.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.196 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
Subject: {SPAM?} Customize Website Design and Development
This is a multipart message in MIME format.
------=_NextPart_000_1B536_01DC289B.7BFB2210
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi,
Thanks for your time in reading my introductory email. I am representing my
IT company having a total workforce of 55 people. As a Website & Application
Development company, we have been progressively growing over our year of
operations. Our prices are best in the market, which is why we have a client
base in countries like the USA, European Union, Canada, and Australia.
Our primary services are:
. Custom Web Designing.
. Corporate Website Designing.
. Website Redesigning.
. ECommerce Web Designing.
. PSD to WordPress conversion
. PHP Version Upgrade
. WordPress/WooCommerce Development
. Mobile App Development (Android & IOS)
Do let us know if you are interested in designing/developing the sites and I
can share you the detailed information for proceeding further. I would be
happy to share our Work Portfolio, Client testimonials and Methodologies.
In case of questions and queries feel free writing us back?
Best Regards,
Kamilah
------=_NextPart_000_1B536_01DC289B.7BFB2210
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
(filtered medium)">
class=3DWordSection1>
style=3D'line-height:normal'>
style=3D'color:black'>Hi,
Thanks for your time in reading my =
introductory email. I am representing my IT company having a total =
workforce of 55 people. As a Website & Application Development =
company, we have been progressively growing over our year of operations. =
Our prices are best in the market, which is why we have a client base in =
countries like the USA, European Union, Canada, and =
Australia.
Our primary services are:
• Custom Web =
Designing.
style=3D'line-height:normal'>• =
Corporate Website Designing.
style=3D'line-height:normal'>• Website =
Redesigning.
style=3D'line-height:normal'>• =
ECommerce Web Designing.
style=3D'line-height:normal'>• PSD to =
WordPress conversion
style=3D'line-height:normal'>• PHP =
Version Upgrade
style=3D'line-height:normal'>• =
WordPress/WooCommerce Development
class=3DMsoNormal style=3D'line-height:normal'>
style=3D'color:black'>• Mobile App Development (Android & =
IOS)
Do let us know if you are interested in designing/developing =
the sites and I can share you the detailed information for proceeding =
further. I would be happy to share our Work Portfolio, Client =
testimonials and Methodologies.
class=3DMsoNormal style=3D'line-height:normal'>
style=3D'color:black'>In case of questions and queries feel free writing =
us back?
style=3D'line-height:normal'>Best =
Regards,
Kamilah
------=_NextPart_000_1B536_01DC289B.7BFB2210--