Procurement phish from MailChannels

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 16 Sep 2026 05:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6oCi-0000000066b-35RY

for dave@doctor.nl2k.ab.ca;

Wed, 16 Sep 2026 05:53:32 -0600

Resent-From: The Doctor

Resent-Date: Wed, 16 Sep 2026 05:53:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from seahorse.cherry.relay.mailchannels.net ([23.83.223.161]:36243)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6l2z-0000000024j-24kK

for sales@nk.ca;

Wed, 16 Sep 2026 02:31:30 -0600

X-Sender-Id: whogohost|x-authuser|james.howell@primorisco.com

Received: from relay.mailchannels.net (localhost [127.0.0.1])

by relay.mailchannels.net (Postfix) with ESMTP id 93BF2721752

for ; Wed, 16 Sep 2026 08:29:29 +0000 (UTC)

Received: from da33.host-ww.net (100-100-67-126.trex-nlb.outbound.svc.cluster.local [100.100.67.126])

(Authenticated sender: whogohost)

by relay.mailchannels.net (Postfix) with ESMTPA id D9273721C2E

for ; Wed, 16 Sep 2026 08:29:28 +0000 (UTC)

X-Sender-Id: whogohost|x-authuser|james.howell@primorisco.com

X-MC-Relay: Neutral

X-MailChannels-SenderId: whogohost|x-authuser|james.howell@primorisco.com

X-MailChannels-Auth-Id: whogohost

X-Suffer-Unite: 37772c0d5cd957dd_1789547369512_2791029772

X-MC-Loop-Signature: 1789547369512:2486925483

X-MC-Ingress-Time: 1789547369512

Received: from da33.host-ww.net (da33.host-ww.net [102.209.117.116])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384)

by 100.100.67.126 (trex/8.0.2);

Wed, 16 Sep 2026 08:29:29 +0000

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=primorisco.com; s=x; h=Content-Type:Message-ID:Reply-To:Subject:To:From:

Date:MIME-Version:Sender:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Unsubscribe-Post:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=KVm+8C19G0RYJn0e2FjwW3aAxavQucO4o9HZIgcxXX4=; b=BscKF/vdMmBCfQbx+SZNWA6Bj+

axEfJlCiJOUGiSh9Z3QdifkmIBPdbBFVZzbAm8QiGeyfD/ydm4fue3EmdpNpP0Tw38316eTa//SJ9

4kovgC73kIaLqiXezs2JpbHXIRDjOo0Xf6VxS2w71KEyQ47DMHATN//WbJFhyAHifOKjTrYZsO3UI

AvEzfOVhimymHWVf/rlSTyTlIqOAvvZHimb2l+jyq6LBdycKbrj0bxFqCqjYmohKs2B1wISZtV3vd

aMgTElrdBMAo3W1i86QcxbN9g7Mszg6oxodHaJEnThUdpp+uJHt9xjgyr8o/TwEC8VXNHcjQD2nDi

6miqt0Bg==;

Received: from [::1] (helo=primorisco.com)

by da33.host-ww.net with esmtpa (Exim 4.100)

(envelope-from )

id 1x6l1B-00000005mVY-2ndh

for sales@nk.ca;

Wed, 16 Sep 2026 10:29:25 +0200

MIME-Version: 1.0

Date: Wed, 16 Sep 2026 01:29:25 -0700

From: James Howell

To: sales@nk.ca

Subject: Request For Quote

Reply-To: james.howell@primorisco.com

Mail-Reply-To: james.howell@primorisco.com

Message-ID: <2671f7954f2ff62b29fbaf4865b53aed@primorisco.com>

X-Sender: james.howell@primorisco.com

Organization: Primoris Canada

Content-Type: multipart/alternative;

boundary="=_042d59c3735f7c7ee274d3afa3fc23b4"

X-AuthUser: james.howell@primorisco.com



--=_042d59c3735f7c7ee274d3afa3fc23b4

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=US-ASCII;

format=flowed



Dear Sales,

Please provide a quotation for the following item(s), including, unit

price, lead time, and confirmation of 21-days net payment terms:



Ubiquiti Unifi U7-LR Pro Access Point



Ubiquiti Nanostation M2 EU



Cambium Network ePMP Force 300-16



TP-Link TL-WR841N



Kindly also send us your credit application form for processing.

Regard

James Howell

Senior Director of Procurement

Primoris Canada , A Division of Primoris Services Corporation

HQ : 28509 96 Avenue Acheson, AB T7X 6J7

Phone: 780.400.2178

Office: 877-208-2178

Email: james.howell@primorisco.com

--=_042d59c3735f7c7ee274d3afa3fc23b4

Content-Type: multipart/related;

boundary="=_afd4e3d585e27ed9d854b4d2c1d92518"



--=_afd4e3d585e27ed9d854b4d2c1d92518

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8




=3DUTF-8" />
eva,sans-serif'>






Dear Sales,


Please provide a quotation =

for the following item(s), including, unit price, lead time, and confirmati=

on of 21-days net payment terms:


 


Ubiquiti Unifi U7-LR Pro Access P=

oint




 


Ubiquiti Nanostation M2 EU


 


Cambium Network ePMP Force 300-16=



 


TP-Link TL-WR841N




 


 


Kindly also send us your cr=

edit application form for processing.


Regard





James Howell
Senior Director of Procurement
Primoris Canada , =

A Division of Primoris Services Corporation
HQ : 28509 96 Avenue Aches=

on, AB T7X 6J7 
Phone: 780.400.2178
Office: 877-208-2178

/>Email: james.howe=

ll@primorisco.com




=3D"267" height=3D"118" />









--=_afd4e3d585e27ed9d854b4d2c1d92518

Content-Transfer-Encoding: base64

Content-ID:

Content-Type: image/png;

name=d238cabb.png

Content-Disposition: inline;

filename=d238cabb.png;

size=3264



iVBORw0KGgoAAAANSUhEUgAAAVIAAACVCAMAAAA9kYJlAAAAgVBMVEX///8AAAA8PDz39/fw8PAe

Hh7a2tpUVFSysrLq6upFRUWcnJzl5eXAwMBOTk7g4OAzMzOkpKR9fX1nZ2etra3Hx8ddXV1zc3PT

09OQkJDz8/O5ubnFxcVsbGyJiYlZWVkmJiaDg4MtLS0MDAyOjo45OTmfn59CQkIgICAWFhYLCwss

MhODAAAL+klEQVR4nO2d6ZaqOhBGpcEBEBBEwHnWY7//A16ZAoShgoSCS/v9OGsdG0OyhQxVlcpo

9BV3iS1oJHbdqgpt5pOVNjMf68PZcpeOM9WV589b97v/7/OpKPr0eHSc5d61rMNtrZrmbKutPEPe

MN7hJLSr12Lqrm1PahUTLNHY2TdXb9zaxXR/eGw9uepePzy4seioelj8sppvb0f+zTntzUnJDdGQ

+trvUGG+H87Zvs32WIVPCSrSt1REoKsWnk5Kp1n3SPGgbscozfnddo9UeJV1QlxlorVHocbeDpAK

wgODqYfXHq17pIKLwVTGa0+mM+sGqbAfGNNb90iFMwbTFV57zO6RCrmBsg1ZeO1JxtzOkAooa1TE

9vQA6RQDKd5USjh0j1RYYTBFbE9sqeoQ6QIDKWJvGj+mHSIVMExTiBP+uDftEukSASnmm691j1TA

sP47eM1xe4C0wDLGXQ/E9vQAKcabj7iCEozukQoADh5CXOhHb123SI1M6yXDW21tU10fLHfv+y6f

P/f75fTv9bpe/at/r9fXa3y63H+U49Ji9WUhNufcA6SkM5Xt/aX+1w8s4xv/Wpdq2gOk0ezY0D8t

wIaRVrVwvPh5KvrRcZzlW/uUloEcR6/1SzMhHf8b19JvnRpEP6tW6ztZHapoBprmvrM0V4ZcYwJn

aGq+kEIxIWW/MZEoe7b1Yq/DnO3SEoFGwmX2+umHpoUdywQ3sK5BSFmjVnIymFbX/pUNJ+NQRTKe

/HGDRfD8CdYlMJq2hvRdBYYnVX4/1PBVlYLWC27q2oYTYTDOIvjBWkTKAmvS3LABYUohbexFhMaq

IJqmTaQM4867Y9uCF1XrF6hEgvTZpC1MDQo69laRjhYQj21zpFBnmiDl4JoBqhJ0Qu0itSEc5nso

ZaBWqUWl7qRHv8H1BQVMoBGQShAOFXERzsOUeKi+BQLSETTor0ftRw1HcjgQHc2q74GBdAkU77+M

jTtTNnExzgKmQgyka6D4YD0JceejymBwVs2f0wopgaukZaTQ+BSaw1zgKi5qjJNVLSOFXuooNMpT

eIEr1U9zVoxqGSk0QyLRZtLsfARnsU2E4o4N1DJSyPOTs82JoiTJkOZzY+J5q912FvgAzu5yeofm

FlazhtRQx0h5TL+JpIlmnsu2PMCGVV7quC9d82lFRuJKLTDD4W1laRkpFDnXVtS+aNMLCJT9AYFa

RgrZoRl8R59ql4Vqwt/gpJaRQgbGVmOhVaQfj1LHZpN2Y0wnA0QKrUep2Aju2lzJnTDir0K1ihT2

lLQdsL8hd0LZbhGoVaTwMpNXM0plDAspHEPy4taOUsWGmyEgBZ0kAiezMCClb0g/8i5InslmA8VY

JUavvgZfyUkQUr3K5Fog/VnH74EyDC97hrRdoezMDx/T/rz47QqxjX8EqYLTxmCg7M9Uv1W1Ydor

UDDf78+CtFVhZY7yG9kf416rwmqkb2pAeiNG3SJFcwf57hqUNBWBukSKMoXy5dsY++MhbVOP2c6r

tQ/hYwlos4tR1/NSotdpEeS5hBSs0PxUmEvXOq9NjTEqx1/nt8sxpZ4g/VivNYthx48Q4gTMqNR8

AEgFJneyP+TzcSAY1XU5DQMpw8jj+7752E2AzRo/A0EKzzn9CA0+gS3ABojBIAUN5X60W/P9JL6A

WI/hIIXiHoLQLC6zNWA3WXdIL9FO4kAcyoMcLkEPyMUWBVTk2RVSpU4tWXRhQcojaHcCVKQrpJTH

iUOJYxakPAxfUAi83gnSH3ppz6FMKDFaiPRfY6LgHi2nA6R6PgqKQxWgmWkU397Yx31nqQgq0oVa

tCbnsJ8EMtnHkcPPZgFDcOYACxOpctZKZo8sMRSAIBbJLQ6fQ50zbM+4tY/0ojiuf6hHVUOa5jhg

8H6mIwins082lclbpuQWDwakc+kjbcQaE+umjylsN6GDsZeqNmF4XEVpPlltzcOe+cHbMiBtGAXN

JhWoRLUYwn5LAt6ul7uiB/ZXJ05i5Bynuv5cXD48OsKfp/UC6cj4eAmlMK2JPi29tvw+pR9I3/LM

81Jhj6e6Lqb7m804eW/eW7PKv1tvkKYJbCTZmEy81Wq3W/nyvMlkYhhzWZakOp10LLRUu8GSo49I

uatZX11DgRv9TyD9OKVfXWGkOOiHUHD68r15fwIpUqaP95gZ3O4vIG3/vLdIoXvrDyAFtwhyU/De

/wWkZwSYgfTwfsNHugFayE/RwmP4SHFSJgmJgXvwSPHy6sfLuqEjRX/th48UKaFf2lczcKSg/42X

Ut6vQSOVcc4gFrJm8CEj5eAnZJOeoTRcpBpaN0p5E4eLdIdj0hvnPDXDRfruStXW+1K3wFUzZKRv

zc32Dnq734p9s1BuLJQzbduVvFNd/Qq0s5YuzmFWvg9upVUKbxd769oYnmY/1n5mTmXxrw7B1/h0

V6ZL97x+zDRvjrH37X8tURQ3scRQXVfpq6+++uqrr7766quvEKTNqrTdTepNjEU7/KKNltcE1jZu

DNL94KyuF7UGVXLmKF7aJlCxXfWOdD+mY2LZM4WR7W14OdlBxf4prIQybCfvMue1+iJlRcq84/WL

lBkp68bsPvall5ptaCpGpFEcIChp6Qba4yW9BXUOq+RinbXDihQvl+X/XgnS/UPNaO2mTeN4J1T9

75UgLZgJp4Lgj8VfFyVZqrUY2MgFX/BLqfYrboKzzCSme72vZK1SnWKZlSAt2lmYxG5GfbtmhfJn

VfI6Xic4pFuQ3OiCXfh/Mfq/66+mtsvf6AvKjUwhNJeEODhqPiPZ3HYpJ+9V2au71BXxLV2fix07

TJ9rst/5lqpz/J3ZwaG2io91y+Sz5KtGmhweewo/iDdtKfTu4qiR9IgvJn+nttCdAqgTyrNJZfHQ

SrfIu8S1S24pUVtL4oymuRFfKh1AXjxO/qlGmsTDjrNI9dw2jpApPS8lSFf53Dbrwp2K6Z3ilVtF

4uecIBXpzTr78AJ6XlqZwIQD02qkSZNPWaTTfPAxgLSg+nbhHrCkHkDIuEQhzaPyCpFWR4u0jTT5

3X+ySJ18QNKqEmnhA1ecjS0eK6CcTS6F9Ja7wipCChTbPDNSNdIkOuaYRVoQjLSuRFpD8TACns9F

Ic0HnIyLkD7Inw9eNDUQjWRjb/OTIisnUanT4q0sUl9H1bYfCfQlhHRsqfbMfljZIMaT9Xh/qqZy

3cV5tpIXwdlOwnmOKHmpUVHOIn3rcrBnZuqKIqTkz5kGz6Illts8zVyC9OlkNc003aSRxvmDyHuk

A0iTjj99CH3ynp3JZ9EUlfw/awfzqO+mkMa3IL1lUEcKKcmx1JZJmnVBGjWdIP0lJcSPctDbliNN

D6VLutgsiOhDchFVZcIknGTM84WRnzl4jsueUsHaRikWgjQLEy6nwY/YkUaXE6SJpSlOohpkVChF

ekrflORdzSR+I3HiISqy/WZPVZk85OFjRpCmrPZVSJO+NKdXUThpbTEija04BGly77lpBwoaWIo0

YyOY0MUGIm90iIrstqXt3+S087DbmxcUFlUprASFNN335sUhPT8j0nhiQ5CWxKWWIs1wKbaqUkjl

wotGqfUHhbTM6k3PS6uzvros1CrFhpSsqQnSEitHTaQZCmVPKT2tKUNaNlbnrPrVbW6c+ZwF6TV5

ywnSEttNG0jpF3+bva4+0pFWFY3e+PwYEOnPOT1WIyIlwxP9KpIlADXisyP1K7ra2qq6DnU7u4l9

psSMya4EqSnPKcly7vVGRFo6iSKWcWpeWgtpTuTZb+zur1w95dUJ0mnmFmfyObV6YkSqRLpT1tG4

mMZev+o1fk6YSJ+kaoJ+Vv3IIPtxSPeCVGGMSMkrnn1qyXS1careHiOFcpTpVGGMSFMmANcMQ7hs

85CsvjkOT71DClmxtlRhjEihNBOM7vVy9RhpxrySl0MXxjo8PUsKDNXcFdxnpJVMD7nCWJGKVTsW

ORzBlwRD1kNasnoqdecdCq8CkI5Es2Q780HOF1YWvRFPuhIbjVm279zicWiUMYnFtJtUjq8u+btI

lxb/X668quLTkaGZa2vvHH05S9e6Uce/lXwt38Q0Lkl7nPfOu9DpNCpVna14Wfe+qqf/ABDC5gbc

fNCUAAAAAElFTkSuQmCC

--=_afd4e3d585e27ed9d854b4d2c1d92518--



--=_042d59c3735f7c7ee274d3afa3fc23b4--

REgional executive role spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 21:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6g7l-00000000BST-3ax9

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 21:15:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 21:15:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp2.etice.ce.gov.br ([189.90.161.162]:10000)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6fjC-000000009Al-16zn

for root@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 20:50:38 -0600

Received: from smtp2.etice.ce.gov.br (localhost.localdomain [127.0.0.1])

by smtp2.etice.ce.gov.br (Proxmox) with ESMTP id 96B41161898;

Tue, 15 Sep 2026 23:10:16 -0300 (-03)

Received: from zmb-mbx-01.etice2.ce.gov.br (unknown [172.27.37.2])

by smtp2.etice.ce.gov.br (Proxmox) with ESMTPS id 6507E1618A9;

Tue, 15 Sep 2026 23:10:16 -0300 (-03)

Received: from zmb-mbx-01.etice2.ce.gov.br (localhost [127.0.0.1])

by zmb-mbx-01.etice2.ce.gov.br (Postfix) with ESMTPS id 39BE55F40F76;

Tue, 15 Sep 2026 23:16:15 -0300 (-03)

Received: from localhost (localhost [127.0.0.1])

by zmb-mbx-01.etice2.ce.gov.br (Postfix) with ESMTP id B792A5F40F72;

Tue, 15 Sep 2026 23:16:14 -0300 (-03)

DKIM-Filter: OpenDKIM Filter v2.10.3 zmb-mbx-01.etice2.ce.gov.br B792A5F40F72

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ceasa-ce.com.br;

s=C7F71E74-C738-11E8-A07D-EDDAC9A542FC; t=1789524975;

bh=ngi58LPZ9HDZcoHwdA5iO1A95tQi8GBrLN2CymFMjUc=;

h=Date:From:Message-ID:MIME-Version;

b=epUUC/HW+o+qVzjz3KCeMPCySPK0g1Jw/q88awlVq0QWimPUp52ZwT5SLcEmvpxdX

S9vx4d9hCO1sfGOYZN+Gpc2VLr5u+xb9NDcpATYy7sxXJqjtFACQ4BzaFCDvFG2rVc

0yVlylHeoFOcTVITRM5qEMpwDK1FSQtlHm4/fwhXz8AGHUSzC8snLdogLwv5/gP2wM

MrxrMx7UkD4Mjg5uN37E496taGzIjxFzTpROy1KUkeBJCpaltxt3JID7uvc+E1DSpy

j6KgCFlvCWTKtmyuxOV4+nRPFiICa0L+qQ5NauSUV2+lBvUpBzE28+fxHe6Arew/BD

jr7p5Ky5XmeMQ==

X-Virus-Scanned: amavisd-new at zmb-mbx-01.etice2.ce.gov.br

Received: from zmb-mbx-01.etice2.ce.gov.br ([127.0.0.1])

by localhost (zmb-mbx-01.etice2.ce.gov.br [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id Qujnx2eA-ypM; Tue, 15 Sep 2026 23:16:14 -0300 (-03)

Received: from zmb-mbx-01.etice2.ce.gov.br (zmb-mbx-01.etice2.ce.gov.br [172.27.37.2])

by zmb-mbx-01.etice2.ce.gov.br (Postfix) with ESMTP id 6C8BC5F40F5C;

Tue, 15 Sep 2026 23:16:13 -0300 (-03)

Date: Tue, 15 Sep 2026 23:16:13 -0300 (BRT)

From: Ana Alaide

Reply-To: koji@cojiasteel.com

Message-ID: <140043030.943868.1789524973423.JavaMail.zimbra@ceasa-ce.com.br>

Subject: Re: Regional Exec Role

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [172.27.37.4]

X-Mailer: Zimbra 8.8.9_GA_3019 (ZimbraWebClient - GC151 (Win)/8.8.9_GA_3019)

Thread-Index: +YK2UANm7t+2KcDDuvh35KTGul/DrQ==

Thread-Topic: Regional Exec Role

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Can you step into a role as a regional executive? Regards,

Ana Alaide



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[189.90.161.162 listed in dnsbl.ahbl.org]

[189.90.161.162 listed in dnsbl.ahbl.org]

[189.90.161.162 listed in dnsbl.ahbl.org]

[189.90.161.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[189.90.161.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[189.90.161.162 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[189.90.161.162 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[189.90.161.162 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[189.90.161.162 listed in bl.score.senderscore.com]

Subject: {SPAM?} Re: Regional Exec Role







Can you step into a role as a regional executive?



Regards,

Ana Alaide



REgional Executive spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 21:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6g7p-00000000BSs-172i

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 21:15:57 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 21:15:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp1.etice.ce.gov.br ([189.90.161.164]:10000)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6fj2-0000000098Z-2Tzk

for root@nk.ca;

Tue, 15 Sep 2026 20:50:29 -0600

Received: from smtp1.etice.ce.gov.br (localhost.localdomain [127.0.0.1])

by smtp1.etice.ce.gov.br (Proxmox) with ESMTP id 3AF981629B2;

Tue, 15 Sep 2026 23:10:19 -0300 (-03)

Received: from zmb-mbx-01.etice2.ce.gov.br (unknown [172.27.37.2])

by smtp1.etice.ce.gov.br (Proxmox) with ESMTPS id AF1E4162D82;

Tue, 15 Sep 2026 23:10:16 -0300 (-03)

Received: from zmb-mbx-01.etice2.ce.gov.br (localhost [127.0.0.1])

by zmb-mbx-01.etice2.ce.gov.br (Postfix) with ESMTPS id E91605F40F73;

Tue, 15 Sep 2026 23:16:14 -0300 (-03)

Received: from localhost (localhost [127.0.0.1])

by zmb-mbx-01.etice2.ce.gov.br (Postfix) with ESMTP id B18B55F40F6F;

Tue, 15 Sep 2026 23:16:14 -0300 (-03)

DKIM-Filter: OpenDKIM Filter v2.10.3 zmb-mbx-01.etice2.ce.gov.br B18B55F40F6F

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ceasa-ce.com.br;

s=C7F71E74-C738-11E8-A07D-EDDAC9A542FC; t=1789524974;

bh=ngi58LPZ9HDZcoHwdA5iO1A95tQi8GBrLN2CymFMjUc=;

h=Date:From:Message-ID:MIME-Version;

b=SxXi6KywmwC8P3wUbrwwqfVpAsVC/LgLfNd/NGaQwWB+1O+GKh0wpzOsgCxLmz9MN

UfWKzHboR0NCBpxvfLKGhzx9bE72pevq9UhPX1Aal5rwiqtc2mEcDr3WYfqETxx91c

4kgLr4y3sIEm1PkW11vx+rJBbFnbdpk6jGNYs3p5luAGzY+ECAQ7nm0RhorvHvd3Jr

x6SLxqUg7uyxjohaXJ3uu9pVKnLpX0iZ5XcJfUkEupw7dHQjxS/kDcd5AdQieeSqZQ

iRW78np7lwr7iUrJV3n8y3fhKLW1LB33JRwixnNkPAHJaL9qwPSYh9+ZsiEGul4nUL

ANQUufvWmIZ2Q==

X-Virus-Scanned: amavisd-new at zmb-mbx-01.etice2.ce.gov.br

Received: from zmb-mbx-01.etice2.ce.gov.br ([127.0.0.1])

by localhost (zmb-mbx-01.etice2.ce.gov.br [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id lIPJl_xTx3Pr; Tue, 15 Sep 2026 23:16:14 -0300 (-03)

Received: from zmb-mbx-01.etice2.ce.gov.br (zmb-mbx-01.etice2.ce.gov.br [172.27.37.2])

by zmb-mbx-01.etice2.ce.gov.br (Postfix) with ESMTP id 6C8BC5F40F5C;

Tue, 15 Sep 2026 23:16:13 -0300 (-03)

Date: Tue, 15 Sep 2026 23:16:13 -0300 (BRT)

From: Ana Alaide

Reply-To: koji@cojiasteel.com

Message-ID: <140043030.943868.1789524973423.JavaMail.zimbra@ceasa-ce.com.br>

Subject: Re: Regional Exec Role

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [172.27.37.4]

X-Mailer: Zimbra 8.8.9_GA_3019 (ZimbraWebClient - GC151 (Win)/8.8.9_GA_3019)

Thread-Index: +YK2UANm7t+2KcDDuvh35KTGul/DrQ==

Thread-Topic: Regional Exec Role

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Can you step into a role as a regional executive? Regards,

Ana Alaide



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[189.90.161.164 listed in will-spam-for-food.eu.org]

[189.90.161.164 listed in will-spam-for-food.eu.org]

[189.90.161.164 listed in will-spam-for-food.eu.org]

[189.90.161.164 listed in will-spam-for-food.eu.org]

[189.90.161.164 listed in will-spam-for-food.eu.org]

[189.90.161.164 listed in will-spam-for-food.eu.org]

[189.90.161.164 listed in will-spam-for-food.eu.org]

[189.90.161.164 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[189.90.161.164 listed in dnsbl.ahbl.org]

[189.90.161.164 listed in dnsbl.ahbl.org]

[189.90.161.164 listed in dnsbl.ahbl.org]

[189.90.161.164 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[189.90.161.164 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[189.90.161.164 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[189.90.161.164 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[189.90.161.164 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[189.90.161.164 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

Subject: {SPAM?} Re: Regional Exec Role







Can you step into a role as a regional executive?



Regards,

Ana Alaide



Yahama piano spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 18:42:00 -0600

Received: from mail-pz2-f12.google.com ([74.125.228.12]:56778)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6diA-00000000NYl-0Y44

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 18:41:27 -0600

Received: by mail-pz2-f12.google.com with SMTP id 41be03b00d2f7-cc4c08393dfso271116a12.3

for ; Tue, 15 Sep 2026 17:40:30 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1789519224; cv=none;

d=google.com; s=arc-20260327;

b=QQ1NODhIpw2Iff/Mzknmmn+TQxVf85kjMa/H3JKqjYB9FB91AjPSJtGiAXdg661CCD

h1SwfFPS7Hx0mxFfKJr5WokAnyit6sfcGTtI3BLJp3oQZt66hQLDLL+Nyf4UuNzphibh

jIfgTZEDLi3bCGsalipnfT1YIz4v3XD6V7+D2r7BccuCdMO0NNyTfjMUQMfm8CjNyB8c

ntuKATUVM/stksnRxbHZynhYDuVXFvaFhOW4TuULGXXaD5oat3//xVp4uZ80gQ+BFkIE

7yHyipR5r5hfFZmwCvG8N9xz9MmqEmPoomIf3+oKmm5zO/JGF/Qvdopy62E1pJf1Ss6e

DrZQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=cPJBD2//mc+h+MRlTFBAFNNzlcNQpK6RtVNks0RAHko=;

fh=Z6qHuNBFbBA1jKXN2FmXqCdLKjgw5V5nVwb529N/FSM=;

b=ck1mljzhbdZqqcNoIMm0v53tK6NZnGwApjnmyyQOZ1xSYr5DW6ouHiN7kHRblAbOTA

1Dirat4U88DXzcI3yyHtGVXdGoGvdePeZU3kbQ4tM6IdHfMyyPdyUvkda88Z61jSZ5Te

CmlQrOHdryr5PHlhhuU2L9hdl+vFq4m3AvOLZlUHFvFpEyss+imS/kXO4s4AsyngPt3s

VpIumHFVp/tkwBKNo2dUPmxt4C2KY0s8K2RFuetd/8okOcHTbZLYTjMjl9WdImmrzcK+

NvO/pg+LqzG9f/JtLsk5Vx+UAiio0pBf1XPDVmQEGiSrZ/yg5eR7pZBFtXXWPkCdNS76

yK0A==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1789519224; x=1790124024; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=cPJBD2//mc+h+MRlTFBAFNNzlcNQpK6RtVNks0RAHko=;

b=jSw/pL/IupgV5FtwsKgfQP5xWTN+nFZppNksPL7Qbhswf5eGrPiSanjtl6LbyjJcIy

AneB1iQJZtoDbTdFVEypXErVuuRJn+eiA8DQBVfPFygmDUOq+p2QL2WlxPp/+zutz1yr

mtdttlqhJ/11yQoD71VyWypwgqUR0xgsOpYb1vPf9ft5nk9ovLBjBR3CJdZg76KCuEPb

+Yds8Zlajm5puEYGVD3J48pvFV+B0PtNN2yz/LkuH0lDfGm+j7nzuPjD3m+DWD24t5v1

9d/dRm/HabJKdAkovk1W00mseeoX/ozZXX0hi1HavC1vNpsyLYE3xtdsfN0YyTGPw1sk

IfbQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1789519224; x=1790124024;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=cPJBD2//mc+h+MRlTFBAFNNzlcNQpK6RtVNks0RAHko=;

b=sC56vOHwvqcU/jnl8UTD4OiS1OjY14b9vRBmPJOOZxeqtwJ12rhquKBPa9BddyQboF

mkzXZbVgq6WXLkcW7UcDUVo5guYfC1utHwxZgeRhL1kiE+dmyJwd7EiUZnxrdrPCKBYb

jwI/Hf8O+3s9gfqmFa3VYXldxN7GB0IwI/GFjqokoC0gc97zGIZsloJUv2hdLMlHOJPt

NGbocY+CDlITdMjSGpgXiAtyh5ZJPqsuXMatUJjIL1By03VFwtFnU5MaTCaYaWWI5zaO

PkL4ovrRBfwBw2MbZ11Y1ytwixKkQTWhd7wtsUe7yswOlHs8OKqyQfZR726ii/8yKxeX

D6dA==

X-Forwarded-Encrypted: i=1; AKwUvBzDtIQM8+n1MlydrlI17co31DgjF9RJ0SwdEhh1gurOqs1kKke72oPg5IkGzVZJzLm+t8sI@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++m8Bfv3BvxbMzXmtwJvCq8ssz0I4VuB1yDxRStanDjqzTfXn/6+

GE8PtlFXKwFjvPRLC8YXM82BydOJH5USYem0JGsaBYlIgPZ38GDKpVgdbR0mzZXO+wccaAOPeIt

YM6HYjwS8ZGKsNVvYU1xuFNWzPTWqn66XUrxa6kOQwcYpry+5UQ==

X-Gm-Gg: AYBFou0nwmqIapnWFsSakCv1gzXsDFOux71NvF/gS8ZGxTxEwT9t2WLf64SsPepFP+a

Fa8dU3t6ScEl2us0VDACoydG0vsyszsugp0hsQnhDaxP1IYj8FHpb8YaAnGNJIdxX9Ucfc8A5HF

PLqEV3SthmxlRyBhzn3kyE8frqyc7sUVBxIxBAuar44vtPqC8tRhefbjyJ+jWs1zQ1V7Yk8zOfl

+CteRHC5LVFB4xCd7K9buHJh87P6qXakp/bAhriQHmL0Zu8cL5+yyDUtd67LddGj27TtC3eS3Cu

qSaCs7OZklorawXD50CMWD2jPBl45mDeLJH7aiZ3zVMB3feuDkA71XCILw==

X-Received: by 2002:a05:690e:e81:b0:66f:c1bc:407c with SMTP id

956f58d0204a3-671632b51c4mr262420d50.63.1789518895310; Tue, 15 Sep 2026

17:34:55 -0700 (PDT)

MIME-Version: 1.0

Reply-To: raphaelsarah629@gmail.com

From: =?UTF-8?Q?Sarah_Rapha=C3=ABl?=

Date: Tue, 15 Sep 2026 17:34:45 -0700

X-Gm-Features: AcwNN1Wbysr0dogIy6tBgFHFP0dbDndIig1jYiTQT1Yj0SrX9g8qMSakrX06TK8

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000012eb38065b8ed64d"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, I’m giving away my late husband’s Yamaha Baby

Grand GC1. Please share if you know anyone interested. Regards, Sarah Raphaël





Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.228.12 listed in will-spam-for-food.eu.org]

[74.125.228.12 listed in will-spam-for-food.eu.org]

[74.125.228.12 listed in will-spam-for-food.eu.org]

[74.125.228.12 listed in will-spam-for-food.eu.org]

[74.125.228.12 listed in will-spam-for-food.eu.org]

[74.125.228.12 listed in will-spam-for-food.eu.org]

[74.125.228.12 listed in will-spam-for-food.eu.org]

[74.125.228.12 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.228.12 listed in dnsbl.ahbl.org]

[74.125.228.12 listed in dnsbl.ahbl.org]

[74.125.228.12 listed in dnsbl.ahbl.org]

[74.125.228.12 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.228.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.228.12 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.228.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.228.12 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.228.12 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[shanealex773(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[shanealex773(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[raphaelsarah629(at)gmail.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.228.12 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.228.12 listed in bl.score.senderscore.com]

Subject: {SPAM?}



--00000000000012eb38065b8ed64d

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings,



I=E2=80=99m giving away my late husband=E2=80=99s Yamaha Baby Grand GC1. Pl=

ease share if

you know anyone interested.



Regards,

Sarah Rapha=C3=ABl



--00000000000012eb38065b8ed64d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings,

I=E2=80=99m giving away my late husband=

=E2=80=99s Yamaha Baby Grand GC1. Please share if you know anyone intereste=

d.

Regards,
Sarah Rapha=C3=ABl




--00000000000012eb38065b8ed64d--

PersistIQ Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 21:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6g77-00000000BOv-3PIi

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 21:15:13 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 21:15:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk2-f13.google.com ([74.125.230.205]:56577)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6dSl-00000000MHL-1JdX

for root@nk.ca;

Tue, 15 Sep 2026 18:25:36 -0600

Received: by mail-qk2-f13.google.com with SMTP id d75a77b69052e-52fb76bcb1eso2998461cf.3

for ; Tue, 15 Sep 2026 17:24:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=persistiq.net; s=google; t=1789518268; x=1790123068; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:subject:to

:from:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=vOqr39KgKDWdQagiHqqW6xJdI8j8l7wCulWLw2Q2KGw=;

b=n4WGZTXzSExkzr0De7tvW0Orrf4vjKHTlcf3wFoJ8sQuXJz2UX9bNqbgarN5uRCUr5

aSKk2zKfjQuq471vpbXuvPp+sD1P5GxVj1UE9xWfa6Og6i3Dc4Nd9Vndhn+Mb1SPFhFw

iSm/E8ebbn2MS5qQThTQSyZqSSeqo1ngo0/xu8pGzTlTJGGs+uuFZYoZ2KGEyMXpL5it

BbASsFEJXPSRB7pcT6Y81beZY+4wllBExKT7sYY+hF+vgZT6ruSX32tJoEqRMaw7Azw3

9tgOfBJaE309S2YgBZT3ahp6BYgnHmXgwLQC9qh6yuTQzlyGsknXkFs3ldZHWp4i2IGI

7SVQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1789518268; x=1790123068;

h=content-type:mime-version:date:content-transfer-encoding:subject:to

:from:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=vOqr39KgKDWdQagiHqqW6xJdI8j8l7wCulWLw2Q2KGw=;

b=f40WTcCzxaAhtDWuQ9kh0/qphToWOpsVo43DruEgaq16MSmFk53aEd9zerQizTRJVU

i+QYOrLNlz6engCBh9OlsmK/WgU3vtG0PhR0OZqd1ozCP0VsGFKiI0r2CxlHHobughq0

5oiEy2RLSpWBBl7hO7u6Jd9Fzw1fq542qF669DEKN9zo/a9X8xbJeZOxHDcBv7Z2QqxR

oMK1hyAkOsDpB4EOC+NiRUvlVaXjsgWFrc+eYNSVXasCgZ3TGqeqScWGbI1aT9DVimgH

yUWKQLqdR3uVMrXdSqH9o8yKwzKN2zzPlsU+3rTrsn5XXG2UqIwkrDXOzn3sM6a/mYlQ

e6aA==

X-Gm-Message-State: AFuF++nOU78AoI1wBIfOPUqBJqoE9uXoSTyBauW839iuYUNnR5ZSZx8j

INrp7rtG1Fg9tsXPeHwLXGHbs/E9geZY5j+ubsHwf8P3U+LH4KhQg+WVyndlaPKDEo+g821Eh+3

igKayHg==

X-Gm-Gg: AYBFou1c/U5xKtJDmofcQkDhVq7OPmmVleTyub4YaD0PdC3RBJVmLvzvs1jUf2RUUfJ

WJYMqem68bS12z2xnOAPOJeXc4PymFi8DBLP9A43Dha/ehIgl6MyGyWQV9/XiQIMsR1Y/c8hHf3

YZM0A1FSUfH0b2Dkf5rCCKmx45vR71u7f7x2btG/FVGd0bg5n+F/DL6G2yT7Tc/25EO+5RL16re

vz2cVrMBpRUz633T4JD/NDfL0+XDv5xiveDtVTXCPd5NMMgSPtbHgkdl4sineA9D5zd5JkCUkCd

+w6cYJ+cvN1qak4l/KFoLZRNrcFq/kqOE14XIZCVOT3sD6iU6LdF6F+zqqoAp2NiVuMmQG1YVqu

Zcfj/zCaMgJ67WRti16W8l+o3lYomCUVLX+bDsUAENsYH8cO17xaB9URfQdwLjVBNw2GH7ek/o8

GdwmnnhL3KaWqf0GCR7dJwbxo76voOPwc9K3Q4h23jLgDxBuPghsiz0jkEmXkAV3ZdCTgDz83iR

+vuq1y+uIkLh69EozABKj37F/IrULjjItgvHYmjo/0m3obAaMpS+SNUKmtuIDJqAuss9T8HabbK

evniW9d/9qd+ls0=

X-Received: by 2002:ac8:6906:0:b0:51b:ec6c:766c with SMTP id d75a77b69052e-5327ee5e309mr10841561cf.12.1789518268114;

Tue, 15 Sep 2026 17:24:28 -0700 (PDT)

Received: from 01a0a799-c33f-7b47-b5b6-b9771e5e96f6.local (ec2-54-161-22-8.compute-1.amazonaws.com. [54.161.22.8])

by smtp.gmail.com with ESMTPSA id 6a1803df08f44-9123be96999sm11549076d6.31.2026.09.15.17.24.27

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 15 Sep 2026 17:24:27 -0700 (PDT)

Message-ID: <01a0a799-c33f-7b47-b5b6-b9771e5e96f6@persistiq.net>

In-Reply-To: <01a0982e-bc62-746b-9a07-0dcabf5c8149@persistiq.net>

References: <01a0982e-bc62-746b-9a07-0dcabf5c8149@persistiq.net>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/01a0a799-c33f-7b47-b5b6-b9771e5e96f6

From: Jackie Baker

To: root@nk.ca

Subject: Re: NK new clients

Content-Transfer-Encoding: quoted-printable

Date: Wed, 16 Sep 2026 00:24:27 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I know you're busy, so making it quick. PersistIQ could

help NK enhance its client bookings consistently. Mind a quick call in the

next few days to see if this can work?



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.161.22.8 listed in will-spam-for-food.eu.org]

[54.161.22.8 listed in will-spam-for-food.eu.org]

[54.161.22.8 listed in will-spam-for-food.eu.org]

[54.161.22.8 listed in will-spam-for-food.eu.org]

[54.161.22.8 listed in will-spam-for-food.eu.org]

[54.161.22.8 listed in will-spam-for-food.eu.org]

[54.161.22.8 listed in will-spam-for-food.eu.org]

[54.161.22.8 listed in will-spam-for-food.eu.org]

[74.125.230.205 listed in will-spam-for-food.eu.org]

[74.125.230.205 listed in will-spam-for-food.eu.org]

[74.125.230.205 listed in will-spam-for-food.eu.org]

[74.125.230.205 listed in will-spam-for-food.eu.org]

[74.125.230.205 listed in will-spam-for-food.eu.org]

[74.125.230.205 listed in will-spam-for-food.eu.org]

[74.125.230.205 listed in will-spam-for-food.eu.org]

[74.125.230.205 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.230.205 listed in dnsbl.ahbl.org]

[74.125.230.205 listed in dnsbl.ahbl.org]

[74.125.230.205 listed in dnsbl.ahbl.org]

[74.125.230.205 listed in dnsbl.ahbl.org]

[54.161.22.8 listed in dnsbl.ahbl.org]

[54.161.22.8 listed in dnsbl.ahbl.org]

[54.161.22.8 listed in dnsbl.ahbl.org]

[54.161.22.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.230.205 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.230.205 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.230.205 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.230.205 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: persistiq.net]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: persistiq.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.8 MY_DSL I could use a BL for this.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.5 SMILEY BODY: Contains one or more Smileys

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.230.205 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.230.205 listed in wl.mailspike.net]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: NK new clients



Hi,



I know you're busy, so making it quick. PersistIQ could help NK =

enhance its client bookings consistently.



Mind a quick call in the next =

few days to see if this can work?



Thanks!

-Jackie

PersistIQ



On Sun, September 13, 2026 12:33 AM, Jackie Baker

[jackie_b@persistiq.net]> wrote:



> Hi

>=20

> I previously mentioned that =

I=E2=80=99ve been helping service providers find clients by creating =

personalized email sequences, finding targeted prospects, and booking them =

meetings with warm leads.

>=20

> Would that be interesting to you?

>=20

> Best,

> -Jackie

> PersistIQ

>=20

> Let me know if this is irrelevant to =

you, I'll not reach again - thanks :-)

> On Thu, August 6, 2026 12:45 AM, =

Jackie Baker

> [jackie_b@persistiq.net]> wrote:

>=20

> > Hi

> >=20

> > I came across NK online and wanted to reach out =

because we're working with other service providers that are offering =

internet services.=E2=80=8D

> >=20

> > I=E2=80=99m currently working with a=

few service providers on campaigns that are getting their teams meetings =

with warm leads every month. We=E2=80=99re targeting people who need =

internet services using personalized email sequences.

> >=20

> > If I could help you connect with potential clients like this, would =

that be helpful to you?=E2=80=8D

> >=20

> > Thanks

> > Jackie

> >=20

> > P.S: let me know if irrelevant.

> >

Dragonfly Shipping phish from Mailjet

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 21:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6g7O-00000000BQL-2urA

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 21:15:30 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 21:15:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o174.p27.mailjet.com ([185.189.238.174]:43137)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6eX7-0000000021W-0kr7

for root@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 19:34:05 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=opale-harley-days.com; i=payment@opale-harley-days.com; s=mailjet; t=1789522377; x=1789529577;

h=Message-Id: MIME-Version: From: To: Subject: Date:

List-Unsubscribe: List-Unsubscribe-Post: Feedback-Id:

X-CSA-Complaints: X-MJ-Mid: X-MJ-SMTPGUID:

X-REPORT-ABUSE-TO: Content-Type: To: From: Sender:

Subject: Date;

bh=5Mec/IHoKsWmB2WIhpcxJzTjaBxKXlJA04lEg/h0HXM=;

b=jwQbvZJsNKLxRs+YEpa1ZC6MKHd62S9PfmbyAqioMdeJm/QsXQ2xjQxKw

Dd3F05scCjsEMqiB906QIPbwv4W//Nt6I39OvzwupidWeztt46fZ1GxtQjLn

ndUS0vntRvlfVFa6oXUJ2JPvbpdn1QjAc8m0/EE/0T5kiC+c5CBxcc=

Message-Id:

MIME-Version: 1.0

From: Dragonfly Shipping

To: root@doctor.nl2k.ab.ca

Subject: Your package requires action (Ref: #0NEV4B)

Date: Wed, 16 Sep 2026 01:32:56 +0000 (UTC)

List-Unsubscribe:

,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-Id: 42:135029.19573:MJ

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

AMYAAKYhtzEAAAAAAAAABCoEwdQAAYCspKEAAAAAAAIPdQBqqfHIvBZg8XnORM2-6iB0J0wQ5AAATHU

X-MJ-SMTPGUID: bc1660f1-79ce-44cd-beea-2074274c10e4

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative;

boundary="===============7040384582454350956=="

X-Spam_score: 50.2

X-Spam_score_int: 502

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Dragonfly Shipping — Your package requires action Your

package requires action



Content analysis details: (50.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.189.238.174 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mj.am]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)

[185.189.238.174 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.189.238.174 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Your package requires action (Ref: #0NEV4B)





Your package requires action



Hello,



Your package is currently pending final release at the distribution center. Please confirm your delivery details and preferences to ensure a smooth final delivery.

Your shipment details



Tracking number: CA026425617NC

Delivery location: Canada

Status: Awaiting Confirmation



Please confirm your delivery and settle the fee within the next 48 hours to avoid your parcel being returned to the sender.

Confirm & schedule delivery



Questions? Our support team is available to help.



© [2026] Dragonfly Shipping. All rights reserved.

You received this message because a delivery is associated with your email address.



Dragonfly Shipping phish from Mailjet

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 21:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6g7S-00000000BQg-1HGk

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 21:15:34 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 21:15:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o174.p27.mailjet.com ([185.189.238.174]:36845)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6eX7-0000000021O-0krg

for root@nl2k.ab.ca;

Tue, 15 Sep 2026 19:34:05 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=opale-harley-days.com; i=payment@opale-harley-days.com; s=mailjet; t=1789522377; x=1789529577;

h=Message-Id: MIME-Version: From: To: Subject: Date:

List-Unsubscribe: List-Unsubscribe-Post: Feedback-Id:

X-CSA-Complaints: X-MJ-Mid: X-MJ-SMTPGUID:

X-REPORT-ABUSE-TO: Content-Type: To: From: Sender:

Subject: Date;

bh=pd9WhrGrlP3Kf3wgkvPhdCweZ1xM2pRFTetkXX+R7LE=;

b=l5CIxaWNWouJS77e8WkwCkPERq8ALoGZcgJa4gvMU5RYppzGy6asoyckU

IExmeI7S5L3mGfpszUVfUwVn6qBX3IDnZwaFnGrKNvq7GhwtGW9zK9YOleHz

yHgbdmC06O80V0BXe5bybreJirEOqQUumkntZ/jUsoKM8LbzyyCwfk=

Message-Id:

MIME-Version: 1.0

From: Dragonfly Shipping

To: root@nl2k.ab.ca

Subject: Your package requires action (Ref: #0NEV4B)

Date: Wed, 16 Sep 2026 01:32:56 +0000 (UTC)

List-Unsubscribe:

,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-Id: 42:135029.19573:MJ

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

AUgAAKU3xPYAAAAAAAAABCoEweIAAYCspKEAAAAAAAIPdQBqqfHI67pjlw3JRmqCu696WxqQxAAATHU

X-MJ-SMTPGUID: ebba6397-0dc9-466a-82bb-af7a5b1a90c4

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative;

boundary="===============6352007104945644875=="

X-Spam_score: 50.2

X-Spam_score_int: 502

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Dragonfly Shipping — Your package requires action Your

package requires action



Content analysis details: (50.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.189.238.174 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mj.am]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)

[185.189.238.174 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.189.238.174 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Your package requires action (Ref: #0NEV4B)





Your package requires action



Hello,



Your package is currently pending final release at the distribution center. Please confirm your delivery details and preferences to ensure a smooth final delivery.

Your shipment details



Tracking number: CA026425617NC

Delivery location: Canada

Status: Awaiting Confirmation



Please confirm your delivery and settle the fee within the next 48 hours to avoid your parcel being returned to the sender.

Confirm & schedule delivery



Questions? Our support team is available to help.



© [2026] Dragonfly Shipping. All rights reserved.

You received this message because a delivery is associated with your email address.



Dragonfly phish from mailjet.com

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 21:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6g7Z-00000000BRO-1Fg4

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 21:15:41 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 21:15:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o219.p13.mailjet.com ([87.253.238.219]:46485)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <0c7407ad.AUoAAKXnmV4AAAAAAAAABCoFAYkAAYCspKEAAAAAAAIPdQBqqfI-@a135029.bnc3.mailjet.com>)

id 1x6eZ0-000000002CB-4Bws

for sales@nk.ca;

Tue, 15 Sep 2026 19:36:02 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=opale-harley-days.com; i=wordpress@opale-harley-days.com; s=mailjet; t=1789522494; x=1789529694;

h=Message-Id: MIME-Version: From: To: Subject: Date:

List-Unsubscribe-Post: List-Unsubscribe: Feedback-Id:

X-CSA-Complaints: X-MJ-Mid: X-MJ-SMTPGUID:

X-REPORT-ABUSE-TO: Content-Type: To: From: Sender:

Subject: Date;

bh=TX7NIKBMDVOp04t6xfNBIRt/HviccVc+gVWWx/Ehwvg=;

b=rdYZ/WNm82Z/rC04iOgyxq1BoKfcre/3O/qaxF4LcJmYruyN3H24OPUtr

Lo4QSr+TBbdWn+AXgUs1cM4WvAXB+bATjjfuMSpi6+cNdl0Jh49GtKlyHC0B

phDT2vbUL2goxNeM33yMKsD/LyL4cMj+L+n9ZxrBpbCWEQDTBKReyI=

Message-Id: <0c7407ad.AUoAAKXnmV4AAAAAAAAABCoFAYkAAYCspKEAAAAAAAIPdQBqqfI-@mailjet.com>

MIME-Version: 1.0

From: Dragonfly Shipping

To: sales@nk.ca

Subject: Your package requires action (Ref: #0NEV4B)

Date: Wed, 16 Sep 2026 01:34:54 +0000 (UTC)

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

,



Feedback-Id: 42:135029.19573:MJ

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

AUoAAKXnmV4AAAAAAAAABCoFAYkAAYCspKEAAAAAAAIPdQBqqfI-ociFUUAhSN2RkI52ujZL7QAATHU

X-MJ-SMTPGUID: a1c88551-4021-48dd-9190-8e76ba364bed

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative;

boundary="===============0851551004380280402=="

X-Spam_score: 51.0

X-Spam_score_int: 510

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Dragonfly Shipping — Your package requires action Your

package requires action



Content analysis details: (51.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.253.238.219 listed in will-spam-for-food.eu.org]

[87.253.238.219 listed in will-spam-for-food.eu.org]

[87.253.238.219 listed in will-spam-for-food.eu.org]

[87.253.238.219 listed in will-spam-for-food.eu.org]

[87.253.238.219 listed in will-spam-for-food.eu.org]

[87.253.238.219 listed in will-spam-for-food.eu.org]

[87.253.238.219 listed in will-spam-for-food.eu.org]

[87.253.238.219 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.253.238.219 listed in dnsbl.ahbl.org]

[87.253.238.219 listed in dnsbl.ahbl.org]

[87.253.238.219 listed in dnsbl.ahbl.org]

[87.253.238.219 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.253.238.219 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.253.238.219 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.253.238.219 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.253.238.219 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[87.253.238.219 listed in list.dnswl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mj.am]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)

[87.253.238.219 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[87.253.238.219 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Your package requires action (Ref: #0NEV4B)









Your package requires action



Hello,



Your package is currently pending final release at the distribution center. Please confirm your delivery details and preferences to ensure a smooth final delivery.

Your shipment details



Tracking number: CA026425617NC

Delivery location: Canada

Status: Awaiting Confirmation



Please confirm your delivery and settle the fee within the next 48 hours to avoid your parcel being returned to the sender.

Confirm & schedule delivery



Questions? Our support team is available to help.



© [2026] Dragonfly Shipping. All rights reserved.

You received this message because a delivery is associated with your email address.





Dragonfly phish from mailjet.com

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 21:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6g6n-00000000BM5-3Bk3

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 21:14:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 21:14:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o174.p27.mailjet.com ([185.189.238.174]:37337)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6dRj-00000000MAn-1mCu

for doctor@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 18:24:31 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=opale-harley-days.com; i=payment@opale-harley-days.com; s=mailjet; t=1789518199; x=1789525399;

h=Message-Id: MIME-Version: From: To: Subject: Date:

List-Unsubscribe-Post: List-Unsubscribe: Feedback-Id:

X-CSA-Complaints: X-MJ-Mid: X-MJ-SMTPGUID:

X-REPORT-ABUSE-TO: Content-Type: To: From: Sender:

Subject: Date;

bh=81qaMshc5++rmeKrrbm2RD1EnvS1ZIrdSjvWZvrp6eg=;

b=4QPbYh4kF+e/juVAaARk3rPX9D+RPHqKYzlzM19SOiVwzK/VCQJlpXVkj

BreDX/HOpBJYMi/6ZoCekZY4RKAcgsfE46KrHoV4bgLuFS5uejjbX/+EHfjV

jUXL8mSM7Bl/n0g4OPrCiy4B+BP191oHCeTM8lMRDPvvkEhkySXN0k=

Message-Id:

MIME-Version: 1.0

From: Dragonfly Shipping

To: doctor@doctor.nl2k.ab.ca

Subject: Your package requires action (Ref: #0NEV4B)

Date: Wed, 16 Sep 2026 00:23:19 +0000 (UTC)

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

,



Feedback-Id: 42:135029.19573:MJ

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

AV0AAKQ2C80AAAAAAAAABCn7VWwAAYCspKEAAAAAAAIPdQBqqeF3yQIVMEwJQAGPqRCduz3ouQAATHU

X-MJ-SMTPGUID: c9021530-4c09-4001-8fa9-109dbb3de8b9

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative;

boundary="===============5069774576964155657=="

X-Spam_score: 50.2

X-Spam_score_int: 502

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Dragonfly Shipping — Your package requires action Your

package requires action



Content analysis details: (50.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.189.238.174 listed in bl.score.senderscore.com]

-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)

[185.189.238.174 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.189.238.174 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mj.am]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.0 T_REMOTE_IMAGE Message contains an external image

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Your package requires action (Ref: #0NEV4B)





Your package requires action



Hello,



Your package is currently pending final release at the distribution center. Please confirm your delivery details and preferences to ensure a smooth final delivery.

Your shipment details



Tracking number: CA026425617NC

Delivery location: Canada

Status: Awaiting Confirmation



Please confirm your delivery and settle the fee within the next 48 hours to avoid your parcel being returned to the sender.

Confirm & schedule delivery



Questions? Our support team is available to help.



© [2026] Dragonfly Shipping. All rights reserved.

You received this message because a delivery is associated with your email address.



Dragonfly shipping phish from mailjet.com

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 21:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6g6t-00000000BMZ-0Sg9

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 21:14:59 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 21:14:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o174.p27.mailjet.com ([185.189.238.174]:33093)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <20b085e2.AU4AAKVGFZAAAAAAAAAABCn7VWYAAYCspKEAAAAAAAIPdQBqqeF3@a135029.bnc3.mailjet.com>)

id 1x6dRj-00000000MAm-1kHg

for doctor@mail.nl2k.ab.ca;

Tue, 15 Sep 2026 18:24:27 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=opale-harley-days.com; i=wordpress@opale-harley-days.com; s=mailjet; t=1789518199; x=1789525399;

h=Message-Id: MIME-Version: From: To: Subject: Date:

List-Unsubscribe-Post: List-Unsubscribe: Feedback-Id:

X-CSA-Complaints: X-MJ-Mid: X-MJ-SMTPGUID:

X-REPORT-ABUSE-TO: Content-Type: To: From: Sender:

Subject: Date;

bh=idZADIjN84/KIEA+y91vIgD9YRhVLuKU1noKg5tTo60=;

b=rmuAh8m1oz8pytO+UPcKBtRi7h7tf2UAUui+0jne7no+XzxfR75EXxs6w

ecMztgyVpOaVTeI5SUf6lLjA9KtzWnKh/S4scHI6WS0ytqXz4S8PxDzF39t/

6VXmPeFeeGXI24zOTkdi2e5H9V7PP502adUzRmpyTPbCSo3kBqw9zQ=

Message-Id: <20b085e2.AU4AAKVGFZAAAAAAAAAABCn7VWYAAYCspKEAAAAAAAIPdQBqqeF3@mailjet.com>

MIME-Version: 1.0

From: Dragonfly Shipping

To: doctor@mail.nl2k.ab.ca

Subject: Your package requires action (Ref: #0NEV4B)

Date: Wed, 16 Sep 2026 00:23:19 +0000 (UTC)

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

,



Feedback-Id: 42:135029.19573:MJ

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

AU4AAKVGFZAAAAAAAAAABCn7VWYAAYCspKEAAAAAAAIPdQBqqeF3yIFaKytVT_G7g6dkSBl8JwAATHU

X-MJ-SMTPGUID: c8815a2b-2b55-4ff1-bb83-a76448197c27

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative;

boundary="===============1525227452083763882=="

X-Spam_score: 50.2

X-Spam_score_int: 502

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Dragonfly Shipping — Your package requires action Your

package requires action



Content analysis details: (50.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mj.am]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.189.238.174 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.189.238.174 listed in bl.score.senderscore.com]

-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)

[185.189.238.174 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.0 T_REMOTE_IMAGE Message contains an external image

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Your package requires action (Ref: #0NEV4B)





Your package requires action



Hello,



Your package is currently pending final release at the distribution center. Please confirm your delivery details and preferences to ensure a smooth final delivery.

Your shipment details



Tracking number: CA026425617NC

Delivery location: Canada

Status: Awaiting Confirmation



Please confirm your delivery and settle the fee within the next 48 hours to avoid your parcel being returned to the sender.

Confirm & schedule delivery



Questions? Our support team is available to help.



© [2026] Dragonfly Shipping. All rights reserved.

You received this message because a delivery is associated with your email address.



Dragonfly shipping phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 21:15:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6g6w-00000000BNr-45uv

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 21:15:02 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 21:15:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o174.p27.mailjet.com ([185.189.238.174]:44005)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6dRj-00000000MAo-1kY9

for doctor@nl2k.ab.ca;

Tue, 15 Sep 2026 18:24:27 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=opale-harley-days.com; i=support@opale-harley-days.com; s=mailjet; t=1789518200; x=1789525400;

h=Message-Id: MIME-Version: From: To: Subject: Date:

List-Unsubscribe-Post: List-Unsubscribe: Feedback-Id:

X-CSA-Complaints: X-MJ-Mid: X-MJ-SMTPGUID:

X-REPORT-ABUSE-TO: Content-Type: To: From: Sender:

Subject: Date;

bh=P8ZPJxaN4mJyVS9VEbwQlioWUCyN+MGfjGhe8Jhnzc4=;

b=oCLcuVLT1y2Hyt2veBNEqUdyH64Oy6g3V6ifM9Z7H4ZqQxKzY45a9+OKB

HS3YTO3nJ2JsecT+ozixU017UV9jUxYe7pPYxIRiAikSKDJwFd+R+4s5Uo5l

ohn4ARQ8gNpBVvKOXTJCzmwXtyDpOrtncwDd91giSWs3Yh4E1No8Ow=

Message-Id:

MIME-Version: 1.0

From: Dragonfly Shipping

To: doctor@nl2k.ab.ca

Subject: Your package requires action (Ref: #0NEV4B)

Date: Wed, 16 Sep 2026 00:23:19 +0000 (UTC)

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

,



Feedback-Id: 42:135029.19573:MJ

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

AVIAAKVqXbUAAAAAAAAABCn7VXMAAYCspKEAAAAAAAIPdQBqqeF3CkW6EHJcQ0qZjs3HW0-v6AAATHU

X-MJ-SMTPGUID: 0a45ba10-725c-434a-998e-cdc75b4fafe8

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative;

boundary="===============0267279008342764178=="

X-Spam_score: 50.2

X-Spam_score_int: 502

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Dragonfly Shipping — Your package requires action Your

package requires action



Content analysis details: (50.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

[185.189.238.174 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

[185.189.238.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.189.238.174 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mj.am]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.189.238.174 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.189.238.174 listed in bl.score.senderscore.com]

-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)

[185.189.238.174 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Your package requires action (Ref: #0NEV4B)





Your package requires action



Hello,



Your package is currently pending final release at the distribution center. Please confirm your delivery details and preferences to ensure a smooth final delivery.

Your shipment details



Tracking number: CA026425617NC

Delivery location: Canada

Status: Awaiting Confirmation



Please confirm your delivery and settle the fee within the next 48 hours to avoid your parcel being returned to the sender.

Confirm & schedule delivery



Questions? Our support team is available to help.

Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 21:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6g6a-00000000BKx-47Dx

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 21:14:40 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 21:14:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp2.etice.ce.gov.br ([189.90.161.162]:10000)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6d3O-00000000IgC-0Veu

for root@nk.ca;

Tue, 15 Sep 2026 17:59:18 -0600

Received: from smtp2.etice.ce.gov.br (localhost.localdomain [127.0.0.1])

by smtp2.etice.ce.gov.br (Proxmox) with ESMTP id 87FE6163147;

Tue, 15 Sep 2026 20:58:06 -0300 (-03)

Received: from zmb-mbx-01.etice2.ce.gov.br (unknown [172.27.37.2])

by smtp2.etice.ce.gov.br (Proxmox) with ESMTPS id 57D1A163145;

Tue, 15 Sep 2026 20:58:06 -0300 (-03)

Received: from zmb-mbx-01.etice2.ce.gov.br (localhost [127.0.0.1])

by zmb-mbx-01.etice2.ce.gov.br (Postfix) with ESMTPS id 4FE835F40883;

Tue, 15 Sep 2026 21:04:14 -0300 (-03)

Received: from localhost (localhost [127.0.0.1])

by zmb-mbx-01.etice2.ce.gov.br (Postfix) with ESMTP id E61725F40EE4;

Tue, 15 Sep 2026 21:04:13 -0300 (-03)

DKIM-Filter: OpenDKIM Filter v2.10.3 zmb-mbx-01.etice2.ce.gov.br E61725F40EE4

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ceasa-ce.com.br;

s=C7F71E74-C738-11E8-A07D-EDDAC9A542FC; t=1789517054;

bh=sjYNX4RW226JVpCmSFzLd5S2vnasNK45eGckLop0mhs=;

h=Date:From:Message-ID:MIME-Version;

b=b5LBHii315aWVG2UBtvl25t2vU195qO06OhVaCRfox2xxnzdlNv4FH7W2+gZaOGyu

wo/JAE4mNMHuYgBo1K9NNlfORj/51xdwYxyGYBJVKgG3451IOxVv3zpiEMN3Muuln2

GmNnoZb0vDTs/Qz9VDrFF2tCfzObvi+XR1BrPZ7cxG9wiDKMfbUsyn2JHwVcQnjD/T

l57pNCzQrl4R6+vxI6poqpGwrG1eC2NStczBct7A1UAub2YAVbpBOSRK4GYbBv0Wtx

FvBXfUXZUnzLVO3vVIKx2S+33manofMwPFK2lNrKDw+jyknr4wt3Le5ukRjC9v2qLH

zj/TthYyRcTgQ==

X-Virus-Scanned: amavisd-new at zmb-mbx-01.etice2.ce.gov.br

Received: from zmb-mbx-01.etice2.ce.gov.br ([127.0.0.1])

by localhost (zmb-mbx-01.etice2.ce.gov.br [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id 8zfqgb4JfuMP; Tue, 15 Sep 2026 21:04:13 -0300 (-03)

Received: from zmb-mbx-01.etice2.ce.gov.br (zmb-mbx-01.etice2.ce.gov.br [172.27.37.2])

by zmb-mbx-01.etice2.ce.gov.br (Postfix) with ESMTP id 3A26B5F40883;

Tue, 15 Sep 2026 21:04:12 -0300 (-03)

Date: Tue, 15 Sep 2026 21:04:12 -0300 (BRT)

From: Ana Alaide

Reply-To: hoshiko@cojiasteel.com

Message-ID: <819074335.914967.1789517052223.JavaMail.zimbra@ceasa-ce.com.br>

Subject: Re: Position

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [172.27.37.4]

X-Mailer: Zimbra 8.8.9_GA_3019 (ZimbraWebClient - GC151 (Win)/8.8.9_GA_3019)

Thread-Index: lns9Yezj38GKwC6rJYY4YIPDwUrHiA==

Thread-Topic: Position

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I hope this message finds you well. I am reaching out to inquire

whether you might be interested in a Regional Director position that closely

aligns with your professional background. We look forward to the possibility

of connecting with you're if interested.



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

[189.90.161.162 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[189.90.161.162 listed in dnsbl.ahbl.org]

[189.90.161.162 listed in dnsbl.ahbl.org]

[189.90.161.162 listed in dnsbl.ahbl.org]

[189.90.161.162 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[189.90.161.162 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[189.90.161.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[189.90.161.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[189.90.161.162 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[189.90.161.162 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Re: Position



I hope this message finds you well.



I am reaching out to inquire whether you might be interested in a Regional Director position that closely aligns with your professional background.



We look forward to the possibility of connecting with you're if interested.



Best regards,

Ana Alaide



nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 17:28:00 -0600

Received: from bsgw-00000288.cafe24.com ([118.219.235.58]:41085)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6cYv-00000000CDY-2pIW

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 17:27:58 -0600

Received: from gw.nexpa.co.kr ([::ffff:178.83.19.109])

(AUTH: LOGIN sdj1250@nexpa.co.kr)

by bsgw-00000288.cafe24.com with esmtp; Wed, 16 Sep 2026 08:26:45 +0900

id 0000000005C7EC0B.000000006AA9D435.0001983F

Reply-To: info@doha-consultant.com

From: "Doha consultant"

To: dave@doctor.nl2k.ab.ca

Subject: Re: Re:Investment partnership

Date: 16 Sep 2026 08:26:46 +0900

Message-ID: <20260916082646.C6EE48F272AB7544@nexpa.co.kr>

Mime-Version: 1.0

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Received-SPF: softfail (Address does not pass the Sender Policy Framework)

SPF=FROM;

sender=sdj1250@nexpa.co.kr;

remoteip=::ffff:178.83.19.109;

remotehost=;

helo=gw.nexpa.co.kr;

receiver=bsgw-00000288.cafe24.com;















Greetings

How are you doing? Do you need an investment partner for=

any of your projects? I have many investors who are willing and able to in=

vest in your project.

Send me your WhatsApp number or Mobile number f=

or faster communications

Warm regards,
Ahmed Ahn Abudadi
invest=

ment consultant









Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 17:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6ctW-00000000FgW-3Ldw

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 17:48:58 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 17:48:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from bsgw-00000288.cafe24.com ([118.219.235.58]:46358)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6cYv-00000000CDk-2pLC

for root@nk.ca;

Tue, 15 Sep 2026 17:27:58 -0600

Received: from gw.nexpa.co.kr ([::ffff:178.83.19.109])

(AUTH: LOGIN sdj1250@nexpa.co.kr)

by bsgw-00000288.cafe24.com with esmtp; Wed, 16 Sep 2026 08:26:45 +0900

id 0000000005C7FC04.000000006AA9D436.00019845

Reply-To: info@doha-consultant.com

From: "Doha consultant"

To: root@nk.ca

Subject: Re: Re:Investment partnership

Date: 16 Sep 2026 08:26:46 +0900

Message-ID: <20260916082646.43D89AF2F010DEC9@nexpa.co.kr>

Mime-Version: 1.0

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Received-SPF: softfail (Address does not pass the Sender Policy Framework)

SPF=FROM;

sender=sdj1250@nexpa.co.kr;

remoteip=::ffff:178.83.19.109;

remotehost=;

helo=gw.nexpa.co.kr;

receiver=bsgw-00000288.cafe24.com;















Greetings

How are you doing? Do you need an investment partner for=

any of your projects? I have many investors who are willing and able to in=

vest in your project.

Send me your WhatsApp number or Mobile number f=

or faster communications

Warm regards,
Ahmed Ahn Abudadi
invest=

ment consultant









Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Sep 2026 17:49:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6ctd-00000000FhY-1BzB

for dave@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 17:49:05 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Sep 2026 17:49:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from bsgw-00000288.cafe24.com ([118.219.235.58]:43371)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6cYv-00000000CDR-2pO9

for doctor@doctor.nl2k.ab.ca;

Tue, 15 Sep 2026 17:27:53 -0600

Received: from gw.nexpa.co.kr ([::ffff:178.83.19.109])

(AUTH: LOGIN sdj1250@nexpa.co.kr)

by bsgw-00000288.cafe24.com with esmtp; Wed, 16 Sep 2026 08:26:45 +0900

id 0000000005C7EA9D.000000006AA9D435.0001983C

Reply-To: info@doha-consultant.com

From: "Doha consultant"

To: doctor@doctor.nl2k.ab.ca

Subject: Re: Re:Investment partnership

Date: 16 Sep 2026 08:26:46 +0900

Message-ID: <20260916082645.830ED814873FEB09@nexpa.co.kr>

Mime-Version: 1.0

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Received-SPF: softfail (Address does not pass the Sender Policy Framework)

SPF=FROM;

sender=sdj1250@nexpa.co.kr;

remoteip=::ffff:178.83.19.109;

remotehost=;

helo=gw.nexpa.co.kr;

receiver=bsgw-00000288.cafe24.com;















Greetings

How are you doing? Do you need an investment partner for=

any of your projects? I have many investors who are willing and able to in=

vest in your project.

Send me your WhatsApp number or Mobile number f=

or faster communications

Warm regards,
Ahmed Ahn Abudadi
invest=

ment consultant