NetKnow Corporate Blog

Haresasz Nxysarwsa has invited you to PayPal Payment Received – Bitcoin Order Processing

Title: PayPal Payment Received – Bitcoin Order Processing

When: July 6, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



We are pleased to confirm that your PayPal payment has been received successfully. Your Bitcoin (BTC) purchase request is now being processed by our system.



Transaction Summary:

Order Type: Bitcoin (BTC)

Payment Method: PayPal

Amount Charged: $450.00

Status: Processing



Your order is currently undergoing verification and will be completed shortly.



If you did not authorize this transaction, please contact our support team immediately at +1 802 264 8641.



Thank you for choosing our service.



Sincerely,

Billing Department

Attendees:



cynthiaperez389903@groups.outlook.com





Dear Customer,



We are pleased to confirm that your PayPal payment has been received successfully. Your Bitcoin (BTC) purchase request is now being processed by our system.



Transaction Summary:

Order Type: Bitcoin (BTC)

Payment Method: PayPal

Amount Charged: $450.00

Status: Processing



Your order is currently undergoing verification and will be completed shortly.



If you did not authorize this transaction, please contact our support team immediately at +1 802 264 8641.



Thank you for choosing our service.



Sincerely,

Billing Department

Kedy

pondelok 6. júl 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.14.11 listed in dnsbl.ahbl.org]

[40.93.14.11 listed in dnsbl.ahbl.org]

[40.93.14.11 listed in dnsbl.ahbl.org]

[40.93.14.11 listed in dnsbl.ahbl.org]

[209.85.128.70 listed in dnsbl.ahbl.org]

[209.85.128.70 listed in dnsbl.ahbl.org]

[209.85.128.70 listed in dnsbl.ahbl.org]

[209.85.128.70 listed in dnsbl.ahbl.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.14.11 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.14.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.14.11 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.14.11 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.70 listed in will-spam-for-food.eu.org]

[209.85.128.70 listed in will-spam-for-food.eu.org]

[209.85.128.70 listed in will-spam-for-food.eu.org]

[209.85.128.70 listed in will-spam-for-food.eu.org]

[209.85.128.70 listed in will-spam-for-food.eu.org]

[209.85.128.70 listed in will-spam-for-food.eu.org]

[209.85.128.70 listed in will-spam-for-food.eu.org]

[209.85.128.70 listed in will-spam-for-food.eu.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:cafe:0:0:71 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:32e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[40.93.14.11 listed in will-spam-for-food.eu.org]

[40.93.14.11 listed in will-spam-for-food.eu.org]

[40.93.14.11 listed in will-spam-for-food.eu.org]

[40.93.14.11 listed in will-spam-for-food.eu.org]

[40.93.14.11 listed in will-spam-for-food.eu.org]

[40.93.14.11 listed in will-spam-for-food.eu.org]

[40.93.14.11 listed in will-spam-for-food.eu.org]

[40.93.14.11 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.14.11 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.14.11 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.14.11 listed in list.dnswl.org]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 TO_IN_SUBJ To address is in Subject

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Received_=2D_Bitcoin_Order_P?=

=?UTF-8?Q?rocessing_=40_po_6=2E_j=C3=BAl_2026_=28cynthiaperez389903=40groups=2Eoutlo?=

=?UTF-8?Q?ok=2Ecom=29?=

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?TkRoRThieXkrU2Q5NWs5V2NvcmxzZ2kzbmlXSzlid1o5ZlJvakRNdUV1R2ZI?=

=?utf-8?B?dkk1bXE4V1VVbU5wR1VWdmxxNXlmd1lwbVFob0FDcDJvOHdjNlJhNWV4dnRI?=

=?utf-8?B?UVRQaE1vM0xiSjJIT3dKbUVBcENjR2l3a2RuMGVESDhhMEpZZGp6REdQWTJ1?=

=?utf-8?B?Mk9kU2dQamJuZHJrQnlhSVgwOWJvQ3BaQ29uMGNqOTdocTFaa3U5ZjBHbkhH?=

=?utf-8?B?cXhia0tDZzlWSEhldFhnTzR0QTNzV1N2K3VxOVdTMHhuQ25IbmRia1lHU2NY?=

=?utf-8?B?QnQxWGhXbGlpWEtKOUx5a3Vtd2J4OHZhcEtZelArSngzNkpJeHFXQVozSjhl?=

=?utf-8?B?QUMrT1JVQ1YySnlPUVlRcDF2MEtRWXppR25OSWlhaTVHL2wwZXErSkNYL1g5?=

=?utf-8?B?U29UdUJ4byt2cncrVTNHSlgrL3JUMWpjT3BqMURQVlBUVm5telZ4TFBFKzU0?=

=?utf-8?B?R3NJQjhiV2lIQ3k0ZWtoOVdJS2F4TkwvV0E1WUNMUk00RUZZL0lQN1d4MnBE?=

=?utf-8?B?L1R2ZG5MY3pVbkRzeXBpWFUwS3JYZ3MyZllXMzROTXk5MDEwTkcwTGNucVQ2?=

=?utf-8?B?WVdpcHdDRXdKdW5nbEErblJza0M2WFJCVzRPdHVickcwa2JlN0U5ZlpqQ2Vv?=

=?utf-8?B?TVpPNlQ3N081d1crVnErekdmNytFUWhiTy9PQkhGKytHb24zSE96WGlweERR?=

=?utf-8?B?NzNEOC90MG94dHk4QmltY00wNnhWQXBPOGpGSVpQbW1NK2RTaVNwaUlZQktj?=

=?utf-8?B?UW9SZW9oNVlpV05NNkp0bW5DalRraG1pTEI5eklrVXZuV3hSdW1HQXFjRnk3?=

=?utf-8?B?QTBqRUNzdU9TbGNVTWZQeU5nSk5xRUM1MjVnZkJQM2o4Ni8xTi9Ma01wN0RC?=

=?utf-8?B?eVIyN2NtYThNdWpkZ05qNWRSTzB0dTZCai9LeDQ1RVd6Q283Qm1jZzNnWGFC?=

=?utf-8?B?ekJsM2NxMUduS2RRTCt1SWdBSGhLbWxLbDdmQTl5VlhCZ01XTEFPeDZxT2p4?=

=?utf-8?B?T05uN3lxR3loK3M3NzVJMDhRTzVhRTdqaDl3YzJVWFNzbVVnY01OT0VMYjF6?=

=?utf-8?B?TW1PcWhJYmkrT2hkcmE5MlpyZzE5WTR1VDNSczh3VlJEekY5eERDWkdBNFZG?=

=?utf-8?B?M0Nncjk2WkNyTG9keDVHdDZRL0dEWUZucWRBUWIxOGo1RURmVmUwbVJ4NG05?=

=?utf-8?B?Q2hERHBIdk80dzB5d2RRSUU1Z2xZWWw2R3Zyb1R2eThjZzlqeE1reFlwclo3?=

=?utf-8?B?MUpFdlMwLytnODZZM0dkRENIQTl2OHJmS2cybWtBNGxBSnZ0bllCdnFPZEh4?=

=?utf-8?B?MVcwbW8vTHhmQnNEd1dNaTJWY0pEOUJlTEdRS0hXajBML3R1L1NqQ2w1NVFz?=

=?utf-8?B?c1VHY0RXTDVuUUxvQWYwU3VwUy9FNTJ0dFRsS0tHYk5DVThoZno0WUg5OEl2?=

=?utf-8?B?bmQ5ZVplK0xZUlRiVWQ4ckpMbXBNTXB6K1lMUmt1djdweTZjd01VaGtub1pQ?=

=?utf-8?B?ZnFndFI3Q2xsSlAwREFGUWtQdnpVaEZDUGV2UDlxQUs1anZudXFZb1JQSER5?=

=?utf-8?B?QzlvVThiRGpobG1zME13SGpLa0NNeDlJalhDU1dFVVR2Tkx2enl1MisrM0J0?=

=?utf-8?B?NytXNkt2MG9IaEZKcThtdWxMTTQyWU5nUHdpVzdkcWc1elBjb3R3WWpCVjNp?=

=?utf-8?B?TlprR0tjYlV0N0d0N2JhcWh5MVJvR1p6bnI1UkxISENtNjlNN1NWNHlqMmhO?=

=?utf-8?B?T0xhZE5lY0RzVDgrMXFWZTFOMXMycEY3UXJUYUxhZ1YrY0Z4UUxRc0lkaE9w?=

=?utf-8?B?ZnZtMGpBOWJjNnNnWHY5ZkU5Z1FINWdNUjd1ZW1iditMazRlWGZKZ09kaDc3?=

=?utf-8?B?TUhENUVRcjhXTkwrTjV6Q0ZoRkFBQ0NSUXRHOGJKcUhFNWNLNExic3UwZXZB?=

=?utf-8?B?UlRRVEF6SE9qZXNkaG1DbHFSQVJSbGhTdGRBRXNveXFSSnFjUVFzUFA5SmtU?=

=?utf-8?B?ZXNLSHVvaDZ1eWRIbDFzTjMyNWdENFFnemYxZ2M2bk1Pa3g4eGhkZEVNZkpI?=

=?utf-8?B?MUVVb3RCSjFpdkZENkwvNW1yN3hqSXFlcENIeEtSanB0TXBsdFBzUmRsaVNa?=

=?utf-8?B?ajF3ZWMyb0NESHdoVEcxUGxGbnhwY0RFVDJJU3BkV09zb0pHN1I5OXhaVi9U?=

=?utf-8?B?Y2FwYmc1YWF2bkJ5dHgxZ3FQV1lwKzVCVkxZRjloWXc3ajFZeHpLUnUyaERM?=

=?utf-8?B?UDdYVGlzV2V4ODU1N2wzOEVQMmRzemFWTm1TakRTMGxTTi9NQVA0UFJLZXB5?=

=?utf-8?B?b04zVG1FY1U3ZDF0V3l2TEJ1RDFUUUdVbmVYSVFnQnNnWThmeHVxZTdaOEpi?=

=?utf-8?B?QUNCbytZRVB0LzJOYitqYU1KSUNvRmcwaW9UVU1pQnZrQmxOL1VXNzc0K1du?=

=?utf-8?B?VW5Va2hyZDN1RFJpUW44QlNsWi96TGt2TDZBZHRWWGhSVG4yZ2d0RFFQSUZG?=

=?utf-8?B?eWZkUkNnN3hVZUNpZUdVNWxnWFVpcnJtVWhrWkxxL3EvdkRTQ3p4bTUzUjVQ?=

=?utf-8?B?a0tjZjJndklCMG5HV2QrOWRlRnNRcWxoYksycE9qWTdDVmx3OGZBTG5EbHhs?=

=?utf-8?B?L1ZpUm5ubjRUY3Jlb0x1YUFHbCtjUFFBbXlIOXY5dStSRmhGamtjcG1jRElI?=

=?utf-8?B?Vi9UUXZ3eGw4U2x1SWJrVnZEbkVPNVZzVk5zand3UnU4Q2RKdEtGZTVaTExV?=

=?utf-8?B?S29ETURqb0FxN3o0Qm1BVEdmeHk2MFN1amwwcHBqMEZlVE1oakJhbGNwTlda?=

=?utf-8?B?aUJpdEJjL0VjZTlUbUVrcy9zVWpJZHFqTXJRUm5LOXkwMDFHdE5OaTlaM25U?=

=?utf-8?B?c0dyYTArQitDSjdPeHlaNG1wc0JjM2pWdVlGcENPaktya256cGlSL0pLd2xz?=

=?utf-8?B?R015SnhlNWRRSExJZk9ESVdPVmR4ZHdBN2M5eW9QWnFDb1ltbEY5bTZJdncz?=

=?utf-8?B?ZTl1amdFVXhUeFBQZTR5WUhmQXZHUGNTR0ZuL1B2VUhTdHNUUng2K2hYZzhN?=

=?utf-8?B?WCt1VklIS0x5Q20weHBFRk9XQk1DU3RlZEVISFpUSWo3TGRBazJyZFFRQXUv?=

=?utf-8?B?cGVoZ043c3hxYitUK2s2cGdCWlNVVXJlNm9wM2ZlKzJmSWVNSGlwbTArbC9P?=

=?utf-8?B?MG9PSkh0UStqZnA1OTRWNjhKdmt6ZUh2RDFycC9VZitmaDZCcjFtSWd6TzJi?=

=?utf-8?B?VnVwKzYvbm05YUFaSnBSMCt2WnFjOWNKRlJFTElHUjhuc0VhMG8vRjhWdTR2?=

=?utf-8?B?NkkvSVdvZTFmZU1abTlyTUY2enRHc280R3F4WEpBVmpPaVRGd1ZCMnhtTGtU?=

=?utf-8?B?NURQSjdWZHIvSUU5Tm5WMUQyR01sMStTeTZsRHRaeWIxclJWRmV5Y3R3WGhJ?=

=?utf-8?B?cDF5TVkwekhrMGRPWUc3Vm9JMzNxeDNhVFQ4dlZjN2U0VjlzbWtRZENXZ2dR?=

=?utf-8?B?NUxyenVYQ3lLRXd4NTY3djhHK1NLTHFtWEkxMHV3Qkg1UUdOUE1EdXNkL2cv?=

=?utf-8?B?YjRnVlBpR1RtekRZSkhMckpkaGlibXV1TkVYT3hLTFJ5UHJEUlVGY3BPQnZV?=

=?utf-8?B?ZG1iRWUyVDZmY3F3TGQ5eUw3V1A5VWNTS3JqNjNIdHpzTEhXNEZTbXQ5QUJX?=

=?utf-8?B?bzJ4RHVWUStvdzNDR3RFVEF0SElub0ZqT3dsdkZvU0U1czNrT3JSTXZ3RHlr?=

=?utf-8?B?cDVuaGtSVW8zVFYwSzdqb1l2MldMdmxoQzY1ZUcxdm03VldXS2lIWEJMQW5Y?=

=?utf-8?B?aHhwTmw2aTVsMitOZE94UjBJamhTaTJhLzVNMlBZc3VLWWt6SWd4K1dYZ08y?=

=?utf-8?B?ZE1JRkZveXQyQXcwdzJyZDVWRFBsRXoraHZHZkdlTlJWU2tNUWtSRk1pLzFL?=

=?utf-8?B?S1hURjJXcXdwcEZjMGUyRmQ0SDkzTWgyLytuWWVZSlBSTHFReDZkV1EyUkNU?=

=?utf-8?B?dmRJQ1ZHcEV5SFRQZVVvTnc0dkwrTlhIMDJtL3RueDBzKy9xK201MXFOYWN3?=

=?utf-8?Q?apyrU5dmFGTpv0igU=3D?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Jul 2026 16:40:11.5600

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 79b7726c-1a88-4c28-8bbc-08dedb7d3f80

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: BN3PEPF0000B077.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA3PR18MB5300

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PayPal Payment Received – Bitcoin Order Processing pondelok

6. júl 2026 Dear Customer, We are pleased to confirm that your PayPal payment

has been received successfully. Your Bitcoin (BTC) purchase request is now

being processed by our system.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 06 Jul 2026 14:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgpTk-00000000HFV-3zIn

for dave@doctor.nl2k.ab.ca;

Mon, 06 Jul 2026 13:59:44 -0600

Resent-From: The Doctor

Resent-Date: Mon, 6 Jul 2026 13:59:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southcentralusazlp17012011.outbound.protection.outlook.com ([40.93.14.11]:14773 helo=SN4PR2101CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgmO6-0000000033s-14vA

for doctor@doctor.nl2k.ab.ca;

Mon, 06 Jul 2026 10:41:55 -0600

Received: from BLAPR03CA0126.namprd03.prod.outlook.com (2603:10b6:208:32e::11)

by SA3PR18MB5300.namprd18.prod.outlook.com (2603:10b6:806:2f8::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.9; Mon, 6 Jul 2026

16:40:12 +0000

Received: from BN3PEPF0000B077.namprd04.prod.outlook.com

(2603:10b6:208:32e:cafe::71) by BLAPR03CA0126.outlook.office365.com

(2603:10b6:208:32e::11) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.9 via Frontend Transport; Mon, 6

Jul 2026 16:40:11 +0000

Authentication-Results: spf=pass (sender IP is 209.85.128.70)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.128.70 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.128.70; helo=mail-wm1-f70.google.com; pr=C

Received: from mail-wm1-f70.google.com (209.85.128.70) by

BN3PEPF0000B077.mail.protection.outlook.com (10.167.243.122) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6

via Frontend Transport; Mon, 6 Jul 2026 16:40:11 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:A14FC93A1C8C5B10F440CF066719D235795AC88DF83E55BA8BF6E1993720D899;UpperCasedChecksum:574D906F11FF38747DB5A12396D462EC9DCBF7D0B3C3DAE93B2844DAD67C0920;SizeAsReceived:3519;Count:15

Received: by mail-wm1-f70.google.com with SMTP id 5b1f17b1804b1-493ba771d1bso30098785e9.2

for ; Mon, 06 Jul 2026 09:40:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1783356010; x=1783960810; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=GvcX5rMX/eX6UnxDgS37sC6YDfGCOmzgJ9u2Pr2tZXc=;

b=I404+DTHJtDrojAZ/WQruy1tX8U1q9qxqk3qzIFsc0znLuXIrgnVEfNPjLmbwFlrhJ

uI5s40kEAQ6pVnW8asXEZ2YDD/S6YJwPlt2bBuzWMjkvTpnSsrZyfHNBTkT3Zmy3NtRP

uU/uPmwvE/Q9zcuP/6GSIz9TEWrL/GApI8z1CgdMOeT251X15uFJMhM/hnvStj/Nid5H

8q+vSZTQKlJSqak7r837m1ZYpOz2g6X9OXYYPF+nI6ERORcuGVgsx/i75apyQXB07nrU

y0xJzH2QFh6GIbbLM55hqNrsjI0tdjVljzM4qyFqCWojktEdKmTTV9iYM67iLE73Eq6+

hitQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783356010; x=1783960810; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=GvcX5rMX/eX6UnxDgS37sC6YDfGCOmzgJ9u2Pr2tZXc=;

b=UwD4ESLL96cgNqd+oHP2CJmybSJrNwLyBoA+7I3fJnqnzRqrCpe2exJohIOHQ4d14O

oiCLMO4UhqQ16QagMmjxkWoayDCY11azjPHDCkoNdVRnr29Z0EoZP/Ral3+naQs+68sU

unbuYM1xZ+CGmuguaKLnQODIMNbGdoV7SEwbeptv/sxH9usTOZvGct71z6MIVzha48t8

Nm/cD/FnPizWfIhFpiTav0E2/wArygXTHCRJ3gPMiF+Ij7NWjTSj9IUviKxXme10xmt4

NWoS0bVvZ+VI8BK525IyfbcKaz7VuhfLVXB8Xx+z+oIDHBseWE86J/gzWakesK9tkvwK

eBOw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783356010; x=1783960810;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=GvcX5rMX/eX6UnxDgS37sC6YDfGCOmzgJ9u2Pr2tZXc=;

b=lMwv24haqH8Exzfm2TK8QGBq/7+bJxBXc1vHbCKhY/xIa2ucn490+xrVImeuqRcWjf

n2bbsI2t3rEocLy4ULFwOETtZUMwZKhTyWb0eUcrMBq7ubdHM9PI7tFfY/p0GQ40xMal

ZHopt2BUYbX0aWCFpIu/BuM7Q5cokeXoDxtMWeJWmRE/Xuki1wG1UtPIZzsBYfEmN4aS

72oke+5pI9GvC+8E3etrhZalrl20hr12mI0N0kpvv3MEYQ1Fs4TSd9LJB0tWdaTfoIec

goggubIEnMq22nJnUOwznBRfQGa6IqZdNnehcbXOVUNQWB6ygABnIp09VKSpw9h3ghZA

D5LQ==

X-Gm-Message-State: AOJu0YxDrNRJf0k5dacmKmYlt7QYuXR1IgkoB1c4Cmv1qTyVtgroKstf

A79nsB+OAJqYgMTzzYLvVq0rBcd2AbJrHHJoRwcRk1x/aRon4pmoYpU9y4y8wybX30cruuWtAxo

9TBtcLpT19ZqaAOr/Te8wzhCbuMOMwU6bSco=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:3514:b0:493:b7cb:c5f with SMTP id

5b1f17b1804b1-493df05f8d4mr14237945e9.11.1783356010133; Mon, 06 Jul 2026

09:40:10 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Mon, 06 Jul 2026 16:40:10 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Received_=2D_Bitcoin_Order_P?=

=?UTF-8?Q?rocessing_=40_po_6=2E_j=C3=BAl_2026_=28cynthiaperez389903=40groups=2Eoutlo?=

=?UTF-8?Q?ok=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="0000000000007dfcb40655f3edb1"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN3PEPF0000B077:EE_|SA3PR18MB5300:EE_

X-MS-Office365-Filtering-Correlation-Id: 79b7726c-1a88-4c28-8bbc-08dedb7d3f80

X-Sender-IP: 209.85.128.70

X-MS-Exchange-EOPDirect: true

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|26130799012|4040799016|22000799015|5139299004|6149299003|6092099016|1680799066|26000799027|9000799056|9400799043|970799063|24102599021|32020799003|9020799019|34130799006|16200799027|6019299003|3151999006|29080799009|26104999009|1370799030|440099028|4302099013|21002599022;

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 06 Jul 2026 13:59:33 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgpTF-00000000HEc-1toX

for dave@doctor.nl2k.ab.ca;

Mon, 06 Jul 2026 13:59:13 -0600

Resent-From: The Doctor

Resent-Date: Mon, 6 Jul 2026 13:59:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f70.google.com ([209.85.219.70]:47306)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgl9z-00000000Pw4-1Yoo

for sales@nk.ca;

Mon, 06 Jul 2026 09:23:11 -0600

Received: by mail-qv1-f70.google.com with SMTP id 6a1803df08f44-8eeba1d9e47so38615146d6.2

for ; Mon, 06 Jul 2026 08:22:15 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wcbrb.com; s=google; t=1783351329; x=1783956129; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=iuIUEBmi4eQYnip0o8X31surIKPoeZQGtnAGNCNH6G4=;

b=gKsBQQ4BN2EhBZiWKmjE0hD5iB+jFPQCNJFhaTxFyupbhOF5jO8R41Z8JgTA4QXuuN

neVBczTHmKCHFxszpaIlDg4tX+50PVSyi+PLY2c1yQu/Ed+b8N8YP5jpsODfjohvskO0

8GKPU+e4qt7SrLq7f8lfN3Om4RN3ftC8u1jOLaEBnS8i5fGx9VnpVMcro7B72++NS1a6

dRx225ndsq6+SgetgtEpUcnd4gDvy7wW9dcBo3G54V+CbUczA2iqmRR7OgDl0ydauWII

wPMBHAlzp0TAP4LBDm9GEhLqSGkN//5bczAoRYXq474xWc3hJ/eNzBid8+jJYJTZLowP

XOjQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783351329; x=1783956129;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=iuIUEBmi4eQYnip0o8X31surIKPoeZQGtnAGNCNH6G4=;

b=dJRYCsYdRim/zkL4j/jzgP1k26CNzud2E79oxc2d+pjdy62LdhGNjT4rsCAZ1KEP9B

nOtIjYiCwhTaKEon16sTUrvkafyWeNff4REOPG116aLQM9uRrgVfpJjAWhVitvZdtI2+

8TumXdUBr6U4wsjGxgKhVxXmMFRGNfZyfjiQyhl0MArJc/FqA6h4hyhFGSNsRscESUBz

GGSD7A1GN2XKKE56Bbv2jlKwseSYfFmOOZE+avlO/Q8zqYeoTdt66mgHSvYX2NTlR3dv

PrUexDsSZRrmfCiuQHQPP1sJWcYgT+6D4IKnkuBEz+cIMcjwbQIIFksEMv85vNqFSbVA

3eCw==

X-Gm-Message-State: AOJu0YxRGyM7assAAhHjoZ2aSy8NLAVF/NoYxGTOJGQ5kPBhScPrsi4H

kloTrt6gAOHkdAbBcbDJxgft73yL2oGUEjf0HkftpzgUAbSQ91bWgnI7XIySUUz9ojRgOlKAK9J

G185hO/BbCB1eVD2tlm1ITQ==

MIME-Version: 1.0

X-Received: by 2002:a53:d6c1:0:b0:664:ae6a:e9aa with SMTP id

956f58d0204a3-6677fd3758amr678570d50.80.1783350935107; Mon, 06 Jul 2026

08:15:35 -0700 (PDT)

Message-ID:

Date: Mon, 06 Jul 2026 15:15:35 +0000

Subject: Netknow Internet Service selected for CBRB Best Businesses in Canada 2026

From: cbrbregionalboard@wcbrb.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Congratulations on being selected and approved for

the CBRB Best Businesses in Canada 2026. The CBRB Canadian Business Review

Board assesses and evaluates businesses across Canada and verifies only those

that meet the CBRB Canadian Business Review Standards.



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.70 listed in dnsbl.ahbl.org]

[209.85.219.70 listed in dnsbl.ahbl.org]

[209.85.219.70 listed in dnsbl.ahbl.org]

[209.85.219.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.70 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: thecbrb.com]

[URI: wcbrb.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: wcbrb.com]

[URI: www.thecbrb.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.70 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.70 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.70 listed in wl.mailspike.net]

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Netknow Internet Service selected for CBRB Best Businesses in Canada 2026



Hello,



Congratulations on being selected and approved for the CBRB Best Businesses in Canada 2026.



The CBRB Canadian Business Review Board assesses and evaluates businesses across Canada and verifies only those that meet the CBRB Canadian Business Review Standards.



Representing the Best Businesses in Canada, the CBRB Canadian Business Review Board has determined that your business meets our review standards, and we look forward to recognizing your achievements and recommending your services.



Membership in the CBRB Best Businesses in Canada 2026 includes listing in our exclusive national directory, official recognition through the CBRB Best Businesses in Canada 2026 Verification Certificate and Custom Badge, as well as promotional content highlighting Netknow Internet Service commitment to upholding:



• Strong Vision

• Customer-Centric Approach

• Customer Satisfaction

• Business Leadership



CBRB verification is granted based on your business meeting our review standards. CBRB membership provides additional benefits, as outlined in the registration form.



The standard CBRB Best Businesses in Canada 2026 badge may be requested by emailing info@thecbrb.com; your custom verification badge, along with membership options are available through the registration form, with applicable administrative fees outlined within the form.



Following registration, you will receive:

• CBRB Best Businesses in Canada 2026 Verification Certificate

• CBRB Best Businesses in Canada 2026 Custom Verification Badge

• CBRB Best Businesses in Canada 2026 Directory Listing & Profile Page



CBRB Canadian Business Review Board may highlight verified businesses on official CBRB social media.



To accept your CBRB Best Businesses in Canada 2026 membership, please complete the following form:

https://forms.gle/JpvTnaRwSshttUum9



If you have any questions, feel free to contact us.



(For all future emails, please send your response to “Info@thecbrb.com”)



Christine Walls

CBRB Canadian Business Review Board

Membership Committee

Best Businesses in Canada

www.thecbrb.com

@thecbrb

@thecbrb_canada











If you would like to unsubscribe from future correspondence, please email your request to unsubscribe@thecbrb.com.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 06 Jul 2026 06:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgin4-00000000674-23YV

for dave@doctor.nl2k.ab.ca;

Mon, 06 Jul 2026 06:51:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 6 Jul 2026 06:51:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f182.google.com ([209.85.160.182]:52506)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wghXb-000000000mz-3ghq

for root@nk.ca;

Mon, 06 Jul 2026 05:31:20 -0600

Received: by mail-qt1-f182.google.com with SMTP id d75a77b69052e-51c2c8f43aaso18669391cf.1

for ; Mon, 06 Jul 2026 04:30:24 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=persistpipelineops.pro; s=google; t=1783337418; x=1783942218; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=MgZbM5ZGHPcxLz+dDXYWXktvlgQg8yKnV06d2sfVoYE=;

b=P1h5pkFUESCTAtvzj41bN1ABKeWuKr1eitwfXz+SywIzFUse5wFwlr2y3PJnMinR7r

P91bxFB7uLy6bQLoiQZxfnngEbmJRHDmkKwOyEXouuB/ZbsvXZhZdNKNbkEw2cW9XQe8

QjgytDfn+qGOd2IjxsJqHe7I/VqtP0yevwPvwLA08T1oM4gg4GdIFA59madfBDJTg361

vGzcsWtOZ2yp08/+lezV1Wmwms+In41iq+R8MIxcGDlereoNTSZncLlCHFZm/myBchQm

deu1MnKveQFng+6LEV7lkcTNtqdqSVUomIb98D19bnxifUaKjA4+Bo+dd+zE76DTjh5u

rcbA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783337418; x=1783942218;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=MgZbM5ZGHPcxLz+dDXYWXktvlgQg8yKnV06d2sfVoYE=;

b=N0NIG1UjU5jAO9FA10aNYQrTfedpJoA2pReWr1tryXt9eneZHIIGpRY7jBnSgzCPUT

4YKoZt6111YvHE4Yzq0/h3fnnEeDt+fUb5ezV1BNnLfv89f3ULzRCW3qtiCzD/XWnRul

plhmV9eM6ZZu+ZmpO5WcdB0alG9XlVvu+jkrQg2zTnRJ3Ohk8A3Pl8/0VEt2ir8gLn61

uvcC5fah26wGR4x2lVAO3Xnzj7uxVwTNMFF22vd/uS8+G7BzFbnbmVufzUv5Tn77IWXU

TqR79Ky7d7LvvVTkOafgA7DHoC2CshX9Ur4o3ejDDqbPOjt1pYOzFjuP6w7ocfMzFSBJ

JHnA==

X-Gm-Message-State: AOJu0YwTmWnkOAtcS2Lg2KEyjF0FPK2mET32uFErTPwlXjM3fEQve2DC

zaR2dKoWRwYWI6vz4EvuWT4BFRjveYxG5OkHZhVcp/bFFYOQBNtmZMqQpKr8Ow7F8zrPMheFgvr

+G36Cxw==

X-Gm-Gg: AfdE7ckzokUTbzMlhJh1GQOlHnHyWmA54s8N8hmjmrc/OCqA8U0Sd2aAZKmyhI/b4Ik

909xVABF157UZ9VlugMA3LsTPS7MU9aTtrOmOTy8J0cGAWIvjjcgUVmLI2GjzEQgQdNI0qxOH+c

HBtnB3Y0Ir3SufHQBXw7c2EeK30BQAgB+QiO8PI/j5LS+6N3scjufuWpnD/wpK4dHHE+qLrbYDS

qDikWEeDy0dM9NT7RyK+mm1GWyLaVp5k1AFjkce58C68QiHpB5OoEy5Qyy7q9XeHGKyQ9QrijpO

JbKcQeo1oadvb86UslXmzWlQnTA4jZ/e1tCJw2pdysardfVrVMCoEiXYaVbmHewH1z/aWiV3yYi

C7K+hVAOPtsntQhMJfxD1Ohy/r8lKRa/wJiiAMXaLyIemyj9GrUuZ43e13CGtspOg4Ov9Eh1t9Y

37YZMbGru1wWEVU5Lph9Fpfw1QyU8BoSPoO6XZPtNii62iyDwipsiYH27GD78DQTECAKQl2TSQ0

yZPnqnI3yYwMmu8PlbYIYpEcizXLCsITDIY9aBZFI3sC5Ih

X-Received: by 2002:a05:622a:1e0f:b0:51c:db4:3cb2 with SMTP id d75a77b69052e-51c4c32e929mr135389641cf.63.1783337418010;

Mon, 06 Jul 2026 04:30:18 -0700 (PDT)

Received: from 019f3731-7ab0-702e-bec4-0f8122f8bcb5.local (ec2-98-81-180-99.compute-1.amazonaws.com. [98.81.180.99])

by smtp.gmail.com with ESMTPSA id d75a77b69052e-51c41b266c0sm88542151cf.8.2026.07.06.04.30.17

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 06 Jul 2026 04:30:17 -0700 (PDT)

Message-ID: <019f3731-7ab0-702e-bec4-0f8122f8bcb5@persistpipelineops.pro>

In-Reply-To: <019f27a4-b784-787e-8fc1-6458e989115d@persistpipelineops.pro>

References: <019f27a4-b784-787e-8fc1-6458e989115d@persistpipelineops.pro>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019f3731-7ab0-702e-bec4-0f8122f8bcb5

From: Gabriella Brooks

To: root@nk.ca

Subject: Re: clients for internet services

Content-Transfer-Encoding: quoted-printable

Date: Mon, 06 Jul 2026 11:30:17 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8



Hi,



Just wanted to make sure you caught my earlier message. I have a quick=

idea that could bring NK a few more bookings consistently.



Worth few minutes?=C2=A0



Thanks,

-Gabriella

PersistIQ



On Fri, July 3, 2026 11:02 AM, Gabriella Brooks
ps.pro>

[gabriella@persistpipelineops.pro]> wrote:



> Hi,

>=20

> Following up on my last note: we help service providers find clients =

using personalized outreach.

>=20

> Best,

> -Gabriella

>=20

>=20

> Sent from my iPhone

> On Tue, June 30, 2026 12:03 AM, Gabriella Brooks =



> [gabriella@persistpipelineops.pro]> =

wrote:

>=20

> > Hey,

> >=20

> > I was looking into how service providers =

like NK are handling clients growth, and wanted to connect.

> >=20

> > We're currently partnering with several firms like yours, and =

connecting them with individuals and businesses actively looking for =

internet services.

> >=20

> > We'd love to help you do the same. Got 15 =

minutes this week to chat about growing your clients base?

> >=20

> > Best,

> > -Gabriella

> > PersistIQ

> >=20

> > P.S: let me know if irrelevant.

> >

=0A=

Thousands of active users are online right this moment, eager to build re=

al relationships. Whether you want to relax with a fun chat after work or d=

ive into deep, meaningful discussions, there are amazing people waiting to =

meet you.=0A=

=0A=

=0A=

A single message might completely transform your evening=E2=80=94and you =

are entirely in control. =F0=9F=98=89=0A=

=0A=

=0A=

=0A=

=E2=AD=90 What Makes Our Community Special:=0A=

=0A=

x;">=0A=


• =0A=
  
  =F0=9F=92=95 Discover intriguing people from diverse ba=
  
  ckgrounds=0A=
  
  
=0A=


• =0A=
  
  =F0=9F=92=AC Engage in genuine conversations that flow =
  
  with ease=0A=
  
  
=0A=


• =0A=
  
  =F0=9F=94=92 Feel secure within our private and well-pr=
  
  otected environment=0A=
  
  
=0A=


• =0A=
  
  =F0=9F=8C=9F Find new and exciting matches joining dail=
  
  y=0A=
  
  
=0A=


• =0A=
  
  =F0=9F=94=A5 Enjoy a relaxing dating journey without sw=
  
  ipe fatigue=0A=
  
  
=0A=

=0A=

=0A=

Great relationships rarely start with grand gestures. More often, a simpl=

e "hello," a shared joke, or a perfectly timed message is all you=

need to ignite something special.=0A=

=0A=

=0A=

Stop wondering if there is someone out there searching for a person just =

like you. =F0=9F=A4=94=0A=

=0A=

nter;">=0A=

=F0=9F=92=8C Join us today =E2=80=A2 =F0=9F=8C=B9 Discover someone specia=

l =E2=80=A2 =E2=9C=A8 Unlock a world of possibilities=0A=

=0A=

margin-bottom:30px;">=0A=

Your next great romantic adventure is just a click away. =E2=9D=A4=EF=B8=

=8F=0A=

=0A=

---

=0A=

=0A=

------=_NextPart_000_40DC_086BF0D6.841EE845

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=F0=9F=92=8C Exhausted by the Same Old Dating Apps?



Dating today shouldn't feel like a second job. If you're exhausted by endl=

ess swiping, surface-level conversations, and sudden ghosting, it's time fo=

r a much-needed change of pace. =F0=9F=A4=B7=E2=80=8D=E2=99=82=EF=B8=8F



If you're looking for genuine connections and thrilling new matches, welco=

me to your next favorite dating platform! =E2=9D=A4=EF=B8=8F



Thousands of active users are online right this moment, eager to build rea=

l relationships. Whether you want to relax with a fun chat after work or di=

ve into deep, meaningful discussions, there are amazing people waiting to m=

eet you.



A single message might completely transform your evening=E2=80=94and you a=

re entirely in control. =F0=9F=98=89



=E2=9C=A8 IMPULSEDATE =E2=9C=A8



View Your Matches



=E2=AD=90 What Makes Our Community Special:



=F0=9F=92=95 Discover intriguing people from diverse backgrounds

=F0=9F=92=AC Engage in genuine conversations that flow with ease

=F0=9F=94=92 Feel secure within our private and well-protected environment

=F0=9F=8C=9F Find new and exciting matches joining daily

=F0=9F=94=A5 Enjoy a relaxing dating journey without swipe fatigue



Great relationships rarely start with grand gestures. More often, a simple=

"hello," a shared joke, or a perfectly timed message is all you need to ig=

nite something special.



Stop wondering if there is someone out there searching for a person just l=

ike you. =F0=9F=A4=94



=F0=9F=92=8C Join us today =E2=80=A2 =F0=9F=8C=B9 Discover someone special=

=E2=80=A2 =E2=9C=A8 Unlock a world of possibilities



Your next great romantic adventure is just a click away. =E2=9D=A4=EF=B8=

=8F





Click here to remove yourself from the mailing list.



=



------=_NextPart_000_40DC_086BF0D6.841EE845

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




iv style=3D"max-width:600px;margin:0 auto;font-family:Arial, sans-serif;fon=

t-size:12pt;line-height:1.5;color:#222222;padding:20px;">=0A=

:20px;">=0A=

=F0=9F=92=8C Exhausted by the Same Old Dating Apps?=0A=

=0A=

=0A=

Dating today shouldn't feel like a second job. If you're exhausted by end=

less swiping, surface-level conversations, and sudden ghosting, it's time f=

or a much-needed change of pace. =F0=9F=A4=B7=E2=80=8D=E2=99=82=EF=B8=8F=0A=

=0A=

=0A=

If you're looking for genuine connections and thrilling new matches,
ong>welcome to your next favorite dating platform! =E2=9D=A4=EF=B8=

=8F=0A=

=0A=

X-OriginatorOrg: sct-15-20-9343-9-msonline-outlook-c6799.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 46475d57-d5a2-4179-5b4e-08dedb2ce06c

X-MS-Exchange-CrossTenant-AuthSource: DS0PR05MB9447.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Jul 2026 07:04:52.9241

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR05MB8739

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 💌 Exhausted by the Same Old Dating Apps? Dating today

shouldn't feel like a second job. If you're exhausted by endless swiping,

surface-level conversations, and sudden ghosting, it's time for a much-needed

change of pace. 🤷‍♂️



Content analysis details: (9.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.12.26 listed in dnsbl.ahbl.org]

[52.103.12.26 listed in dnsbl.ahbl.org]

[52.103.12.26 listed in dnsbl.ahbl.org]

[52.103.12.26 listed in dnsbl.ahbl.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.12.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.12.26 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.12.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.12.26 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:8:11c:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:11c:0:0:0:16 listed in]

[will-spam-for-food.eu.org]

[52.103.12.26 listed in will-spam-for-food.eu.org]

[52.103.12.26 listed in will-spam-for-food.eu.org]

[52.103.12.26 listed in will-spam-for-food.eu.org]

[52.103.12.26 listed in will-spam-for-food.eu.org]

[52.103.12.26 listed in will-spam-for-food.eu.org]

[52.103.12.26 listed in will-spam-for-food.eu.org]

[52.103.12.26 listed in will-spam-for-food.eu.org]

[52.103.12.26 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: teamlove4.cc]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.12.26 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.12.26 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.12.26 listed in bl.score.senderscore.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: teamlove4.cc]

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[hugopopik1p(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

Subject: {SPAM?} =?UTF-8?Q?=E2=9D=A4=EF=B8=8F_Discover_in?=

=?UTF-8?Q?triguing_people_fr?=

=?UTF-8?Q?om_diverse_backgro?=

=?UTF-8?Q?unds?=

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 05 Jul 2026 18:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgXT9-00000000EzM-1Fuv

for dave@doctor.nl2k.ab.ca;

Sun, 05 Jul 2026 18:45:55 -0600

Resent-From: The Doctor

Resent-Date: Sun, 5 Jul 2026 18:45:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f198.google.com ([209.85.128.198]:56359)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from <3iOlKagoJBd8NBZPSUJTUBHNBJM.DPNTBMFTOL.DB@maestro.bounces.google.com>)

id 1wgWKs-00000000BIm-1aPf

for sales@nk.ca;

Sun, 05 Jul 2026 17:33:26 -0600

Received: by mail-yw1-f198.google.com with SMTP id 00721157ae682-7ebbaaf1679so78894537b3.0

for ; Sun, 05 Jul 2026 16:32:30 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783294344; x=1783899144; darn=nk.ca;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=eO3Xe5Ch1grL/sk0AQP0FLJ/o+MA7iAPZeaig3dGN4Q=;

b=mn0j3Z2eVipyouy2zr8S0LsQc9rsUlEdkX3TwJTLzAe3brRXPST6fKxU66e7TC4FFh

NkhyhwYrGYmCVZKpTPNYakZFiM85fdEWVGIxFnlIoxVOqV6nKPSqBBh33MS/0aFYoPrR

Arf4qIeaqXHbCv5bPzr/qWAnBrZ62XQo9XDXV41YIOEWG/D6EuOF1M00voqRN9kWZz/f

eXdo31QjndacRHpSL51rbSrEMgBJbil6wWMIcts3fEjA8bEBW2qEawJTiA8i/baMvBM4

FuVrAFGEuQU0lvv1zXg7Uhvklj3hGzARhlfVjbuO/ihZEOnB5Q81JZir0rGvV5ylGTYd

vvwQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783294344; x=1783899144;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=eO3Xe5Ch1grL/sk0AQP0FLJ/o+MA7iAPZeaig3dGN4Q=;

b=DYllKZSchzkCvPUvByi2dPQOAxAvgAdAeWbiVaNa/GINWRTe8laI0xbBQeD5o06rGE

07fLC0f4jQciVIwnqgfJREUemipJzEgmzWFwhyFNK5uA9d3Msj5HlHKG2kYV3bO92RUZ

vVnQs/vkwW76VPgifdTHxSVH70CNQrUzbokeCtWZQwMrbhwTsRdHKjcx8pTgVQRbfPlI

Fx6Ur6lilpPKF7+0v5ML0WqN2en6cSa9sf/6cixyyP5i/QqO3afwOd7gkoXTxefxPHe3

zchIJ07OmBcxMpxfkC296uCq4vE3pULBdhnNbsxTW4TFfeyI4Sxhh8LYM7IhdUcdh4se

ayhg==

X-Gm-Message-State: AOJu0YzYjC2lCUu3rwyVOEcs+n4WaxNbyHmXvaW6n2JfCm6CUFMsELwB

sSVJlMBVrAOHmX0NTF84r1F1KTpUZJa6wRaPzxJ9KXdWLterUi3XelHjQ0+r2/iBUKYwS7P4rBp

xhCLB

MIME-Version: 1.0

X-Received: by 2002:a05:690c:e0c:b0:80c:85c6:897b with SMTP id

00721157ae682-81739edd4b1mr98508197b3.58.1783294344394; Sun, 05 Jul 2026

16:32:24 -0700 (PDT)

Message-ID:

Date: Sun, 05 Jul 2026 23:32:24 +0000

Subject: daveyadallee, Get More 100,000 Instagram Followers

From: mayortista@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, daveyadallee, Get More 100,000 Instagram Followers Sorry

to interrupt your time. We offer social media services, If you're interested,

please visit our Website. If you're not interested, please skip this step.





Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.198 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mayortista(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.198 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.198 listed in bl.score.senderscore.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} daveyadallee, Get More 100,000 Instagram Followers



Hi, daveyadallee, Get More 100,000 Instagram Followers

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 - $5 FREE BALANCE TODAY SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/store/free/?daveyadallee ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest



Thank you,

Regards,



Copyright © 2014 - 2026 instatool.site

Content analysis details: (24.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.48 listed in dnsbl.ahbl.org]

[74.125.224.48 listed in dnsbl.ahbl.org]

[74.125.224.48 listed in dnsbl.ahbl.org]

[74.125.224.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.48 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

[74.125.224.48 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.48 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.224.48 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.48 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[compaorekone3(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[abbttnb001(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[abbttnb001(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

1.8 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.6 HK_SCAM_N13 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Greetings from Kone



--000000000000d94b850655de9121

Content-Type: text/plain; charset="UTF-8"



Greetings to you and your family.



My name is Mr. Kone Compaore, the auditing general with the bank, Africa

Develop bank (ADB) Ouagadougou, Burkina Faso, in West Africa. I am

contacting you to seek your honesty and sincere cooperation in confidential

manner to transfer the sum of 10.5 (Ten million five hundred thousand

Dollars) to your existing or new bank account.



This money belongs to one of our bank client, a Libyan oil exporter who was

working with the former Libyan government; I learn that he was killed by

the revolutionary forces since October 2012. Our bank is planning to

transfer this entire fund into the government public

treasury as unclaimed fund if nobody comes to claim the money from our bank

after six years without account activities .



What the bank need is proof and information about the late customer which I

will assist you on. This is a genuine, risk free and legal business

transaction, All details shall be sent to you once I hear from you.



The information as contained herein be accorded the necessary attention,

urgency as well as the secrecy it deserves.



If you are really sure of your integrity, trustworthy and confidentiality

reply back to me urgently for more details



Best regards,

Kone Compaore



--000000000000d94b850655de9121

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

data-smartmail=3D"gmail_signature">
Greetings to you and your family.
>
My name is Mr. Kone Compaore, the auditing general with the bank, Afri=

ca Develop bank (ADB) Ouagadougou, Burkina Faso, in West Africa. I am conta=

cting you to seek your honesty and sincere cooperation in confidential mann=

er to transfer the sum of 10.5 (Ten million five hundred thousand Dollars) =

to your existing or new bank account.

This money belongs to one of o=

ur bank client, a Libyan oil exporter who was working with the former Libya=

n government; I learn that he was killed by the revolutionary forces since =

October 2012. Our bank is planning to transfer this entire fund into the go=

vernment public
treasury as unclaimed fund if nobody comes to claim the =

money from our bank after six years without account activities .

Wha=

t the bank need is proof and information about the late customer which I wi=

ll assist you on. This is a genuine, risk free and legal business transacti=

on, All details shall be sent to you once I hear from you.

The infor=

mation as contained herein be accorded the necessary attention, urgency as =

well as the secrecy it deserves.

If you are really sure of your inte=

grity, trustworthy and confidentiality reply back to me urgently for more d=

etails

Best regards,
Kone Compaore

--000000000000d94b850655de9121--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 05 Jul 2026 09:13:00 -0600

Received: from mail-yx1-f48.google.com ([74.125.224.48]:46357)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgOVv-000000000D2-3LtV

for dave@doctor.nl2k.ab.ca;

Sun, 05 Jul 2026 09:12:21 -0600

Received: by mail-yx1-f48.google.com with SMTP id 956f58d0204a3-664c535f1a0so3056081d50.1

for ; Sun, 05 Jul 2026 08:11:24 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783264278; cv=none;

d=google.com; s=arc-20260327;

b=ro7PkjtJ/MbqzXUzYxGGXMNFJMwIHiZG76WnFkI7jlSC8xFrF92LdEOcVBENLJTZxZ

3JJH17PUGT8dDB+bqnqLN00KH0JT3i04yzZEly7BpAjTpj/p3NbHjSjNDB2uMKN5G9t/

fz8Ip7QvdLtmkaSsxO570S56LRWFJz5KqdSt9Xu4M77FALf+HMRhYBtXwBF34q96IEmK

IfVT+zyMnzxbRAOWEabGVH2vvxi6Hu4Pj7D/htQ9d0mTIPVVGnhtLUlRR4lAtwRlr1WM

WcgJTzdVB/bbbXffEoCg2qquxxd2Chd+CcEU4aeUtiFMFIysj07QKwp3xzE5/0acz/lj

OQaA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=4Ep6fjdmAacwbxk20FGH55ufb7EwZ4snYam3N89f58M=;

fh=GGsaoXBYE1Mzf5UAj5VkUQi64EVOrrvROv7ggPdsdNM=;

b=MY8KUn872tLRIE0eadHT4fj+jpV0DlsBwEjnByzdfCAc4VU5WsRI87ktU9FSFygzc1

MY36ngwG9ZWdJdjNUnsctipaiRXivy7ooZH+M1lwdLlq4BvPpb+3lwDOuQcCGqRnTdE1

fIHbbO+AeI0HOOlTsqeyP13IXhDAP0G1vSogW5yJs4+OCAkz1rKaWycCBvO0WRI7OJ74

BeBf1t/zwYKTvQO0iBNGCKpoSwLdSGK9SzWttA4/CKUplJD+FtNlpQFY0SedLvdQsFIx

OYKzEJ/RkmaarL4WL7Pm5ucczds9n6CxCq5cgzXNWLeIjphQWuSu7k2ntzZ4krfnOQXI

8a0g==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783264278; x=1783869078; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=4Ep6fjdmAacwbxk20FGH55ufb7EwZ4snYam3N89f58M=;

b=Bj4kD4JSobdbNi1PQSFxiFimX04eTAQ3oIGGVvvHNy8OT7FRu0logX7Z19t0l6s65D

ZkS490SnzYmLU2/A4HTa2GIcFsNJk7r6YSjCwx1Dor+4Hw0QSGniYUkX46tiXHqGqu0y

3f7AwocaOuK8mho0R8WzbmzOGPbwRX2IF8aULtWXqrAKFwTs4MdhcEU9TC/uCwXZnLcr

Xh2P5unaenMyek+qtwou57N3CE/cJwbGTeC0wId0I/6UGx1Z1LmitqhvkxMG0mtHfKVK

6jDRBdWUupn3WCEZOlglhoZCZAZzdpPN2mXdeH4td1k8qU3mWiWJVbwLzq9Qp7I8fSCr

rgcA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783264278; x=1783869078;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=4Ep6fjdmAacwbxk20FGH55ufb7EwZ4snYam3N89f58M=;

b=DwAS5RHlP7PBYCbQKogp0mt4XvInzhYg7fobkBttgKM3olUeSRjCwc621xiKz2iO42

yT3kxcI2J7tZoiHDfDlcsAfBEECr4mJ3o9R538E/jYIBm5NHLT+GuAeu1Hbb65BRj+w8

ggSDqcyfrW/QPgiUqIavCw24sTVsY2DI8r71sh+961Ai2XdK+YTU53qdkuBRf/JqVmIN

u4ELJrBjHQDFu1PM/cogejIjJcZNvKnImAqO86WVu3ecb3fYNQI76YYiEP+bvumq4Eq0

SK0pjX5l4u6LV5wlBWtCCDmiwCyzKba9iEvBmypfHvcakzDz8iT8nLz+f2yCkDQ5BnJc

d3ww==

X-Forwarded-Encrypted: i=1; AHgh+RrjakIhWVLw788RnEckPMrXsGzO4pI3UEwxXp3vMZBEW5ZAipok5JUPIFHxmROlCSfhhXWg@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx6nuNxTjXAD7/T/4OcEUIX+7BHXmBPMixPfreuE1naYI+a0cCW

eVYxqS7NZbcT1oeADjbsowqmOA8oOepXroi5eqJcEmzEpFEE+qXdw5rhZp85OiJSK5dNhqXdGUJ

lkAtIQu1Y2bKaBTAqZ0Jcp8RVXeEmhj0=

X-Gm-Gg: AfdE7cnL/yeXohiWwe0YFJADbDRo22DJaXgFjMrOk5VGndkBMXEQXrRZ3NTa7MVf+VO

bdOfrT+NE3rj7qp3//jGTbwIK407KKM+/xpiztcSdmJiCaS2PtokxZRvNJK5rZ0RZZtFnUJIcej

+oVu/K4qENHW/kpDI0/B7aA2xEOTYFtep7b5wk7ul5TzHW5CVei/4dxqHRLm2b5tuAEufKQuhAs

wFKUdWB34r1va7v5P31V2v3UeCxkNxMRVTcpIXJSnGurlNcS3rBJ4Xy3fTt4JSKF6vRsc9Se3s=

X-Received: by 2002:a05:690e:1383:b0:664:d275:e8b7 with SMTP id

956f58d0204a3-66652ed0e7fmr7925676d50.59.1783264278300; Sun, 05 Jul 2026

08:11:18 -0700 (PDT)

MIME-Version: 1.0

Reply-To: compaorekone3@gmail.com

From: Kone Compaore

Date: Sun, 5 Jul 2026 08:11:07 -0700

X-Gm-Features: AVVi8Cef9ydKDB0oDZK0OnCbCJR3bGq6ndpWAYn4sryHYnUKvpjZx-nXsK7xrnY

Message-ID:

Subject: Greetings from Kone

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000d94b850655de9121"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 24.1

X-Spam_score_int: 241

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings to you and your family. My name is Mr. Kone Compaore,

the auditing general with the bank, Africa Develop bank (ADB) Ouagadougou,

Burkina Faso, in West Africa. I am contacting you to seek your honesty and

sincere cooperation [...]

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 05 Jul 2026 07:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgMWN-00000000JJf-08DX

for dave@doctor.nl2k.ab.ca;

Sun, 05 Jul 2026 07:04:31 -0600

Resent-From: The Doctor

Resent-Date: Sun, 5 Jul 2026 07:04:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.187.54.28] (port=48171 helo=som.wemetgroup.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgLA1-00000000FCU-14yI

for root@nl2k.ab.ca;

Sun, 05 Jul 2026 05:37:29 -0600

Received: from [91.92.241.106] (unknown [172.22.1.1])

by som.wemetgroup.com (Postcow) with ESMTP id C01F2911D5A2;

Sun, 5 Jul 2026 14:32:35 +0530 (IST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=baywatchresort.in;

s=dkim; t=1783242169; h=from:reply-to:subject:date:to:mime-version:content-type:

content-transfer-encoding; bh=FkuoWaKmgbW3l6++gGhgxKZllcLXcyV/tlWUaqYzDH4=;

b=Rz1/VGSKdQfJLrkAFXlgLpeXv22v1i94QV11sh0uczENSl0T+nW5gk40/zzSHuuiCd+pyF

fbRqmJ+XOupi7CjEMIXV6KrA/yXWh890Nd5GlBIcPYtbNd+76so5xl6Tt7gVRdKIVLy7tj

BcHW+yo9Bc0qozeaIrD/sk2tW2dhKL/uBC5IJZO7wuOTftqrtWACgpI0R4S5mu+cOyb8gg

oI8RWkieZn11QwTic+JEj3380RI+o+rLdqJmWE+dmTny8Yf1oLK1kjv78VGX1mmJq6B5UL

nXy2Z7Y2qZNpcGaTRYhwnfOkbRhMtUd4RMt8J42maZHS+2LCHXyTwypxt8pt5g==

Authentication-Results: som.wemetgroup.com;

none

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: We Fund Investment Projects.oj

To: Recipients

From: "Mr. John A Sipp"

Date: Sun, 05 Jul 2026 02:02:14 -0700

Reply-To: sippjohn438@gmail.com

X-Last-TLS-Session-Version: None

X-Spamd-Result: default: False [-2022.23 / 15.00];

GLOBAL_MIME_FROM_WL(-2050.00)[reservations@baywatchresort.in];

MSBL_EBL(7.50)[sippjohn438@gmail.com:replyto,sippjohn438@gmail.com:email];

MAILCOW_FUZZY_DENIED(6.37)[11:712346f3cb:0.84:txt];

FREEMAIL_AFF(4.00)[];

MISSING_MID(2.50)[];

CD_MM_BODY(2.00)[];

FREEMAIL_REPLYTO_NEQ_FROM(2.00)[];

TO_DN_RECIPIENTS(2.00)[];

FROM_NAME_HAS_TITLE(1.00)[mr];

FORGED_RECIPIENTS(0.50)[m:reservations@baywatchresort.in,s:paul.vickery@rocklandtrust.com,s:support@hostmonster.com,s:webmaster@commentcamarche.net,s:root@nl2k.ab.ca,s:james@yahoo.com,s:hotmail.com@sbcglobal.net,s:yahoo.com@ymail.com,s:gmail.com@yahoo.de,s:yahoo.co.nz@yahoo.co.uk,s:msn.com@hotmail.com,s:aol.com@yahoo.fr,s:joy@hotmail.com,s:hotmail.com@hotmail.com,s:yahoomail.com@aol.com,s:config@in.bell.ca,s:mike@yahoo.com,s:verizon.net@att.net,s:%iran@mail.com,s:canada.com@aol.com,s:comcast.net@myway.com];

MIME_GOOD(-0.10)[text/plain];

MIME_TRACE(0.00)[0:+];

MAILCOW_DOMAIN_HEADER_FROM(0.00)[baywatchresort.in];

FUZZY_RATELIMITED(0.00)[rspamd.com];

ARC_NA(0.00)[];

DKIM_SIGNED(0.00)[baywatchresort.in:s=dkim];

HAS_CD_HEADER(0.00)[];

RCPT_COUNT_ONE(0.00)[1];

FREEMAIL_ENVRCPT(0.00)[yahoo.com,sbcglobal.net,ymail.com,yahoo.de,yahoo.co.uk,hotmail.com,yahoo.fr,aol.com,att.net,mail.com,myway.com];

REPLYTO_DOM_NEQ_FROM_DOM(0.00)[];

LOCAL_OUTBOUND(0.00)[];

TO_EQ_FROM(0.00)[];

FUZZY_HAM_MISMATCH(0.00)[];

FROM_EQ_ENVFROM(0.00)[];

FROM_HAS_DN(0.00)[];

TO_DN_ALL(0.00)[];

NEURAL_HAM(-0.00)[-1.000];

MISSING_XM_UA(0.00)[];

RCVD_COUNT_ZERO(0.00)[0];

FREEMAIL_REPLYTO(0.00)[gmail.com];

REPLYTO_DOM_NEQ_TO_DOM(0.00)[];

HAS_REPLYTO(0.00)[sippjohn438@gmail.com]

X-Rspamd-Queue-Id: C01F2911D5A2

X-Rspamd-Fuzzy: 712346f3cb803f8f6fb941bf01429289ace5bd7dd832267e698a28788a9d3ff53d799b8b0b6748c561bdbb0a2fadff0f61c95275fb04b434f0e005f6c4dce48c

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, Fenchurch Advisory are currently providing funding

Starting up a Franchise Business Acquisition Business Expansion Commercial

Real Estate purchase Contract Execution Starting up a private health Facil

[...]



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.187.54.28 listed in dnsbl.ahbl.org]

[160.187.54.28 listed in dnsbl.ahbl.org]

[160.187.54.28 listed in dnsbl.ahbl.org]

[160.187.54.28 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.187.54.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.187.54.28 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.187.54.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.187.54.28 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[sippjohn438(at)gmail.com]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[160.187.54.28 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.6 J_CHICKENPOX_82 BODY: 8alpha-pock-2alpha

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.187.54.28 listed in will-spam-for-food.eu.org]

[160.187.54.28 listed in will-spam-for-food.eu.org]

[160.187.54.28 listed in will-spam-for-food.eu.org]

[160.187.54.28 listed in will-spam-for-food.eu.org]

[160.187.54.28 listed in will-spam-for-food.eu.org]

[160.187.54.28 listed in will-spam-for-food.eu.org]

[160.187.54.28 listed in will-spam-for-food.eu.org]

[160.187.54.28 listed in will-spam-for-food.eu.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.187.54.28 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_NAME_MR_MRS No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} We Fund Investment Projects.oj



Good day,

=



Fenchurch Advisory are currently providing funding

Starting up a Franchise

Business Acquisition

Business Expansion

Commercial Real Estate purchase

Contract Execution

Starting up a private health Facility

=



It is very important for you to know that all our loan financing through ou=

r fund providers is good and genuine. The package comes with a 3 years grac=

e period before repayment of the financing loan amount. Interest rates are =

also negotiable.

=



We are open to having a good business relationship with you. If you think y=

ou have a solid background and idea of making good profit in any venture, p=

lease do not hesitate to contact us for possible business cooperation.

=



We offer a 1% commission to brokers who direct us to clients after a succes=

sful f

=



Kindly get back to us for more details sippjohn438@gmail.com

=



Best regards,

John A Sipp

Senior Managing Director and Head of US,

Fenchurch Advisory Financiers/Loan Disbursements

Level 32, Tower 42, 25 Old Broad Street

London EC2N 1HQ.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 05 Jul 2026 04:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgK8Y-000000004zi-1E37

for dave@doctor.nl2k.ab.ca;

Sun, 05 Jul 2026 04:31:46 -0600

Resent-From: The Doctor

Resent-Date: Sun, 5 Jul 2026 04:31:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f43.google.com ([209.85.208.43]:53615)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wgH05-000000004Pl-2Ysq

for doctor@netknow.ca;

Sun, 05 Jul 2026 01:10:58 -0600

Received: by mail-ed1-f43.google.com with SMTP id 4fb4d7f45d1cf-691c5776f35so3004927a12.3

for ; Sun, 05 Jul 2026 00:10:02 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783235396; cv=none;

d=google.com; s=arc-20260327;

b=cG+NJrP+uw8a6oJ4zsdzk6Oy5JwPwhjiZ2GljHdxjeZFPSO7iKgvdHcj9UAQlTxAZc

rcbJxFvshSH0DGZdfc5DbxR+f8gRxCgzWyMNzlFhgPco417lA59tqm8c3XF5hx9i5Adh

E2P/r0DZ5zg/ZmZnccvku6ay8AIxe41oSgBE8B9kjkZeJX2HEly2EPEAOKVksyCiRIy7

oiK5T27c9EzQRIdBop5SC6N2DvTBq2nKDowZv9Bmkz192l1N39jIYSfJz4gizg5gSpnd

RbgvQVSV22yAQc/Rw2xZejZ04ExAn5hoo9QlyBR7ornZxihlSYS7vN75iSlC9bEqq6S6

QDlw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=RilOKzHxuJ3dynAznrO5TOH8gTtFBj9X//9iwNf/W50=;

fh=Y7XwTk0fLrmPMOR9qrL6R8MBeExwYPlcjQ44YNrBUVY=;

b=XyQUNjZi6g4jCwdtLG1i7jLm9ltZmZK/3HE3VMcg+7Aj5ecKNtU3BWkJymg5priRxL

0WE7UnBmq1AEFImMo8UvXhqs4mY5OacOp3wr7DPWCO3LjNx/344Smrv5BnrMLKM8/Qw5

zBstV8gWPHeYNR8yNIxpAQbXQFJB/ZbutTmhLVp8vfqz/H8E20DX/SnKY1yR+KsO6HOp

vgHjF6+CHel5VeEdfOYI6OnDZ1q6R4kyWczQqxznqO1L3zp4QD8vx6WMfJKYofRcw4HZ

zdmQWwmat40GO74mtCCQhty+N4jiJLBGVe9Tzv+voaUAFOig2VuFDOGJvGrpnrwIKTJD

IZeQ==;

darn=netknow.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783235396; x=1783840196; darn=netknow.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=RilOKzHxuJ3dynAznrO5TOH8gTtFBj9X//9iwNf/W50=;

b=cCHQvGI/oJ3cAtiPZ97n9Kc69M8IJ0xs72B+bAiNJFmHI2EnoHgm1pJXjTYjJWyzTn

ht9v9duk14tJdMmuGnlN5jkEX4+9VkytHBS4tKsEAG96rHYOQYiU9DDlFq387ejLtuNa

FYY9r6Zh7YKU/jOnnDj0krArty7f5NERn6KBpZi7NkUTpEfcu+16uF8XuFMLNZzo1/S2

6N8uY+1+69tobr84tAo160OgYohEmhYtVcAjtsgf/PjWiywwfYbPP9AzD7bsIMw8oIvq

rVpuE7PUiEQqjS0MeOyNG4aa8EIaI/GQh6hP2RMaYain4rUn66sCNfaMYlropGjAuFQP

lEAA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783235396; x=1783840196;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=RilOKzHxuJ3dynAznrO5TOH8gTtFBj9X//9iwNf/W50=;

b=BkKl5BUKv7fxN/HRpkWduPZeB0adHDnA5gy9Zzj+PZ4N/RmHyU8Q/LPCtZ4HQ2wXXl

O1190UgEfEEaAwJ3YNMqo+LsoDt2CrLa5da+neGYFLw8W7PfIZKGy2qlqMltEJYoXqvJ

rNbKUDDHrjB+YBizURpsOxVG5wtUluvZHj6WxPVaE1YKJBSblF6+NeIZBMBDm7jFSVKk

tDudmkzowJfFae3GQY6bl3dwlM3Y+cSiSfhq9fkfv/KuBt4oaqNj8+ef7MUmsMebnnrH

NYuQzHh4oiFS4jGbyfJlME9Aalucnu3rebuuTHFV7B3sYDpQBhZq8jjXA0a6+c8bukzR

XKHg==

X-Forwarded-Encrypted: i=1; AHgh+Rq8JRw3R19mx6Mw869H96IntGPWcrrkB6fOrjyy97NW6H616iuNNBXqQVnyLvO1gbaKx+34BpM=@netknow.ca

X-Gm-Message-State: AOJu0YxP8D/65fY5XLf11U9bqMOuyv3rJc09ru4RWP+7z+Gx12drvR+x

93MA52Q6XkrGLe20AEKE9myWLL7XzTXHicplu1mn0zAwWzlCn5DxLp5yzNqyOBSxi1apecqg+Ae

1THk596blGISRnmOC2Fou3wJQdlM9/gs=

X-Gm-Gg: AfdE7cmx/xTyMha1X64Wyq3XFKPTF8/X7maLHQ9Ewn+zvSRA1Qvx3JFKdG2Y2zbn1V4

ThNVxP/23ZfdKDIpmNOuzqmpeD2OddwDbRZBP6XW6T6na04rklLpFx2PhHeySH+s58hthTUleEX

mf93Qw96bDQCTFNXaS6gr3aPobMDjvMvMzOFy1uUnx9Aabe5/VqsRX7E206JboG00waLdbdKq3Q

qWLcqyUiS0gIj+pcxZduuQKAeZyKPvXyATN2NEliRX/hGpyBJ1NvEmk0JX45bTJ7gtFpKrIRbY=

X-Received: by 2002:a05:6402:40cc:b0:698:48c4:361c with SMTP id

4fb4d7f45d1cf-69a1a3b14b9mr1936137a12.28.1783235395153; Sun, 05 Jul 2026

00:09:55 -0700 (PDT)

MIME-Version: 1.0

Reply-To: icegcommission@aol.com

From: I C E G COMMISSION

Date: Sun, 5 Jul 2026 00:09:41 -0700

X-Gm-Features: AVVi8CeW3_OAZOwJGoAYsGOqo5fw_12X1iG33MAGCii7SuiHRFG18a952f1w1oA

Message-ID:

Subject: RE:REMINDER PLEASE REPLY NOW

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000004774860655d7d801"

Bcc: doctor@netknow.ca

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Good day, how are you? Please be advised that your

payment has been processed; please respond as soon as possible.



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.43 listed in dnsbl.ahbl.org]

[209.85.208.43 listed in dnsbl.ahbl.org]

[209.85.208.43 listed in dnsbl.ahbl.org]

[209.85.208.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.43 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.43 listed in will-spam-for-food.eu.org]

[209.85.208.43 listed in will-spam-for-food.eu.org]

[209.85.208.43 listed in will-spam-for-food.eu.org]

[209.85.208.43 listed in will-spam-for-food.eu.org]

[209.85.208.43 listed in will-spam-for-food.eu.org]

[209.85.208.43 listed in will-spam-for-food.eu.org]

[209.85.208.43 listed in will-spam-for-food.eu.org]

[209.85.208.43 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.43 listed in list.dnswl.org]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[contactkevinson(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.43 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.43 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} RE:REMINDER PLEASE REPLY NOW



--0000000000004774860655d7d801

Content-Type: text/plain; charset="UTF-8"



Hello,



Good day, how are you?



Please be advised that your payment has been processed; please respond as

soon as possible.



Regards,

ICEG Office



--0000000000004774860655d7d801

Content-Type: text/html; charset="UTF-8"

Hello,

Good day, how are you?

Please be advised that your payment has been processed; please respond as soon as possible.

Regards,
ICEG Office

--0000000000004774860655d7d801--

--_000_TYZPR01MB61007D5CA2A773AE95D86FE1B4F32TYZPR01MB6100apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi there,



I was reviewing your website and wanted to say=97nice work.

I noticed a few SEO opportunities that could help attract more qualified vi=

sitors from Google.

Nothing complex or urgent=97just a few improvements that often lead to bett=

er rankings and more inbound leads.



Would you like me to share a short plan outlining what I found and how it c=

ould help?



Best regards,

SEO Executive



--_000_TYZPR01MB61007D5CA2A773AE95D86FE1B4F32TYZPR01MB6100apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">

































--_000_TYZPR01MB61007D5CA2A773AE95D86FE1B4F32TYZPR01MB6100apcp_--