X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 22 Sep 2026 14:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x96hD-000000001GC-23aC
for dave@doctor.nl2k.ab.ca;
Tue, 22 Sep 2026 14:02:31 -0600
Resent-From: The Doctor
Resent-Date: Tue, 22 Sep 2026 14:02:31 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from bsgw-00000288.cafe24.com ([118.219.235.58]:35247)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x95Ak-00000000Hzp-0wh2
for root@nk.ca;
Tue, 22 Sep 2026 12:25:05 -0600
Received: from [130.254.47.122] ([::ffff:130.254.47.122])
(AUTH: LOGIN alsgud5488@nexpa.co.kr)
by bsgw-00000288.cafe24.com with esmtp; Mon, 21 Sep 2026 10:20:12 +0900
id 0000000005D89B62.000000006AB0864C.0000E214
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re: Investment partnership
To: Recipients
From: "doha consultant"
Date: Sun, 20 Sep 2026 18:20:08 -0700
Reply-To: info@doha-consultant.com
Received-SPF: softfail (Address does not pass the Sender Policy Framework)
SPF=FROM;
sender=alsgud5488@nexpa.co.kr;
remoteip=::ffff:130.254.47.122;
remotehost=;
helo=[130.254.47.122];
receiver=bsgw-00000288.cafe24.com;
Message-ID:
Greetings
How are you doing? Do you need an investment partner for any of your projec=
ts? I have many investors who are willing and able to invest in your proje=
ct.
Send me your WhatsApp number or Mobile number for faster communications
Warm regards,
Ahmed Ahn Abudadi
investment consultant
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 22 Sep 2026 08:10:31 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x91CX-00000000Jrg-48CC
for dave@doctor.nl2k.ab.ca;
Tue, 22 Sep 2026 08:10:29 -0600
Resent-From: The Doctor
Resent-Date: Tue, 22 Sep 2026 08:10:29 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from bsgw-00000288.cafe24.com ([118.219.235.58]:51792)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x90no-00000000Gsq-3UxC
for root@nk.ca;
Tue, 22 Sep 2026 07:45:07 -0600
Received: from [130.254.47.122] ([::ffff:130.254.47.122])
(AUTH: LOGIN alsgud5488@nexpa.co.kr)
by bsgw-00000288.cafe24.com with esmtp; Mon, 21 Sep 2026 09:49:51 +0900
id 0000000005CA9548.000000006AB07F2F.00026F36
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re: Investment partnership
To: Recipients
From: "doha consultant"
Date: Sun, 20 Sep 2026 17:49:48 -0700
Reply-To: info@doha-consultant.com
Received-SPF: softfail (Address does not pass the Sender Policy Framework)
SPF=FROM;
sender=alsgud5488@nexpa.co.kr;
remoteip=::ffff:130.254.47.122;
remotehost=;
helo=[130.254.47.122];
receiver=bsgw-00000288.cafe24.com;
Message-ID:
Greetings
How are you doing? Do you need an investment partner for any of your projec=
ts? I have many investors who are willing and able to invest in your proje=
ct.
Send me your WhatsApp number or Mobile number for faster communications
Warm regards,
Ahmed Ahn Abudadi
investment consultant
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 07:17:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8dsn-000000005dM-1FZQ
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 07:16:33 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 07:16:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs2-f12.google.com ([74.125.227.12]:62942)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8ZFK-0000000007b-1H3L
for doctor@netknow.ca;
Mon, 21 Sep 2026 02:19:39 -0600
Received: by mail-vs2-f12.google.com with SMTP id 71dfb90a1353d-5c67e53002bso1546896e0c.0
for ; Mon, 21 Sep 2026 01:18:05 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1789978679; cv=none;
d=google.com; s=arc-20260327;
b=JnXx7JhDBirtkC4wri4rb2RR5dTU7hbM9L/lAzX6XdQaMW/hr5knBUYnrZIjRZL+47
gxh8JGyYGZoqDPsgh4bG3ldLYmXxJGys7EDQUFu1KU2DgsOtM6weUj5Lpf9RvEqtuCX2
Y0obmf92FWR9lsrbwuJHekiDbJG0rumeO5e8tCuonZblaAhiTcyV+q8+FUYdGrUTVg0q
EqWY6e/F5yfzNbYafPojl8IC+Dop9Bo/+aMPQqu9iB8RnbU0oUF0oESVD52Z7F43JOCw
x3XYDk/16eISe59z7SynGQjhUtnH+20GIQxYUgc3AcvhOTh2r4K/oBgYczTaBIb/s0Z0
Cx2A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
fh=tpQbCcdiUiekKUhLaHDY2Q/XS4l7J54HEaZAyxCHQp0=;
b=HIwY77UmajCCB0Wis+FfenQIoWw1ukCtcawX9pr1cmWp2T/rzfoa4cMPtSiG8yZKxe
GfWqOjxKYc0Mi0vCP6iJHvJn4u7VtbWqUXdBnu5WX0HW7+nokkPu02jXRsPoc5dCB1AQ
aIn2nv/iXGdx2v2Tt2JGzm7kxLJyg5gZw9W+lgP2e5IvkRXNybZl3oU/eXz/juT8toOR
6xDNewv6+r38UTJT/us3Z8WCfpR+KN/tqfTqfq5ML+me1HZi84vdB9mLWk/e3IvbNfJ7
rQN9v9cGU0QaeRVyMT+Yy4/5Ms6YGDVigJyUYwSs86KMFukP+sY+EaWy+XXzy1BKUVPD
+Y9g==;
darn=netknow.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1789978679; x=1790583479; darn=netknow.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=fiAX53MhyaFQzrElVaYdfNHGoGL4xr+zsgaFUQObnUw6A6yFmnQ1Itg4Ag9gOQiAlu
W1yNb/1oRx0uH6D60AiXrshQ+OjDm1IGimuHyau2tc093TIZ6mIHEwJZ/o1A/H5jdOPg
7S97bNrJyBfzEg1Y8bxNKPXIvA+ShQlKcnu7wJV8rWYmDK9ZEp+oXbG/XXLA2+0t2DcC
+bmLVbi4yyohmdJBiEWJBTDcObp5gosSC47Wsx0pCUkzcRjhUgu5CwsKpTwsl2/iSxhZ
EyEhaXF7htJMtsFM/IXmhvZm/FEe86kmrI0A5GvUcZ2vojY7p0P5KKWv+3j21X+Cb4Xx
jE+A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789978679; x=1790583479;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=qLtEq47MTD8N1JiIKv5Taff3QQw25LQ4402UfIUTfio=;
b=daOx8PGU1MFoBeILT0X/mjLMrbC7kR+02idcJH16g50feBKpOyK/up7YJLwxv3SbeT
lp8fpRsztpeyQr8YkzkxByn/FgWNxLlQaOFp8VGSN3QACj/x7345wHUSxLDulyXhaVpW
BSgwTbPCb48dGV3+2gfEUxKxeKaAxrV4eePw5RW5WamQLz9Nu0zWOBurhOKP1QF+r4v+
tw7rONA5Qqh6v8E2WG8PwO1yYi8JZODZATANKOmrqVGysCCYAOx4Q3EQAowXOr7/k+aj
4LDn6CQ4IKd2bjBgXj4S3FVesFTnSQdJBnPr6dT34ZKa2RaXA62GMevYvxXOA8YnKLaw
0zZQ==
X-Forwarded-Encrypted: i=1; AKwUvBw+JC40Qq64qGmUvsa5n3KFilFcl+rekYu68QQ+qxo3o6mkIgYFviDdhhhFFR23QvsElSGcd2U=@netknow.ca
X-Gm-Message-State: AFuF++nCiwQj+TiOLA774eO5LpFkvpn5puDeCoXJAWhnPLx6IGTVfn7+
xhnXpsRLq8OUcDCMzsyB01S7PmSMcQyZrAR58xfdxIRt7QNKSHZt9X65hLMtoJD9unCiud7wgSK
HzVim3ylNjsxvIY51ArN1osiH+QSwfYeJg0ynhAc=
X-Gm-Gg: AYBFou3KOIDhwviYTfArDtp29wc3IFxIJfsW7OWvRQ4BvC0IAMoPbecocal6FeiOl77
BHCAm7CPdDYmEQ63vEfKdVDBvZcw6df0AVxKqaJ7hECk64aZjU68MHfy5bTS1H/xc0reqPE+x1M
gJR3fT7syTwxgJxXjdvE7amRR4ktvcleIotNBcapViYdeUz3ZYBzJlnXjx0pVrxtUCztQngmN+m
fJ9C20HzVY0a+CSIDyQw0UkwMAPAJtwZJtjQVfj48ZEa8YJxTOdSvQRGiMmnEm5nvKm455f4wju
iNPKoS8h5fHmJW6LURAXI8R0Sl1x+4o1DHLWnBw7BuIZ6iKyfs/llUyHPWTP2XmZI997OD01CzJ
DraY+eiZtcary
X-Received: by 2002:a05:690e:1349:b0:671:8e1:2386 with SMTP id
956f58d0204a3-6717fcf014bmr2850265d50.44.1789978197126; Mon, 21 Sep 2026
01:09:57 -0700 (PDT)
MIME-Version: 1.0
From: "relieffunde@outlook.com"
Date: Mon, 21 Sep 2026 13:39:46 +0530
X-Gm-Features: AcwNN1XUbFwPZynzidLxneCpY8Aah1Xc9RFWlPxOam2yTgvODnIPZb1IIajwqLg
Message-ID:
Subject: UN HUMANITARIAN AID PROGRAM 2026
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009871fd065bf9c651"
Bcc: doctor@netknow.ca
X-Spam_score: 20.5
X-Spam_score_int: 205
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR
UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
[74.125.227.12 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.227.12 listed in dnsbl.ahbl.org]
[74.125.227.12 listed in dnsbl.ahbl.org]
[74.125.227.12 listed in dnsbl.ahbl.org]
[74.125.227.12 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.227.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.227.12 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.227.12 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.227.12 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.227.12 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kouamekouakouemmanuel49(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kouamekouakouemmanuel49(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
3.5 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail
account
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.12 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.12 listed in bl.score.senderscore.com]
Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026
--0000000000009871fd065bf9c651
Content-Type: text/plain; charset="UTF-8"
DEAR SIR/ MADAM,
YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO
CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS:
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:
--0000000000009871fd065bf9c651
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
DEAR SIR=
/ MADAM,
ail=3D"gmail_signature">
=C2=A0=C2=A0
YOUR EMAIL HA=
S BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR W=
INNING PRIZE, EMAIL US.
=3D"_blank">relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS: =
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0=
--0000000000009871fd065bf9c651--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 21 Sep 2026 07:15:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8drU-00000000NyF-2zy7
for dave@doctor.nl2k.ab.ca;
Mon, 21 Sep 2026 07:15:12 -0600
Resent-From: The Doctor
Resent-Date: Mon, 21 Sep 2026 07:15:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj2-f43.google.com ([74.125.227.171]:43270)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8WGm-000000006Fi-0SSz
for sales@nk.ca;
Sun, 20 Sep 2026 23:08:56 -0600
Received: by mail-pj2-f43.google.com with SMTP id 98e67ed59e1d1-39666bed444so192871a91.1
for ; Sun, 20 Sep 2026 22:08:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=theithubstudios.com; s=google; t=1789967274; x=1790572074; darn=nk.ca;
h=content-language:thread-index:content-type:mime-version:message-id
:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=B53jV964AiH8Se+5cRigUdkpZ0vTl9VBLYmfjgMERUw=;
b=TvPId8gjKWua3RpDxJLzRzRdjYa7Qko8gvXSWHDsVAjtPIv9cnGQeURL90KNfNd6o5
ogVvwO/ICs8u4DBBousfemkKRFCsnWMEwnNT3UAZCzfY7q+NbyKjN6gEXFgpKIwmL0nW
ZdFKdCQbtS/keqGrEcyVYaMP2oh/eFAOFbHfFtm101u4L6EwC6scwPwNcG0GuQJ96pYl
7it6P1SWe7Ml0K/gaE39cxmjEd9VqWPetK4GZx5L8AxnSxa5ACdzMLbMHxTSTolWuDI1
pffl9qT/TVh9UFLpF2GMFJF2e9ph82/o9X7WirQTaz1/Q0Xsq6RNaZSqiboqX5bKO+v+
+nsA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789967274; x=1790572074;
h=content-language:thread-index:content-type:mime-version:message-id
:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to:content-type;
bh=B53jV964AiH8Se+5cRigUdkpZ0vTl9VBLYmfjgMERUw=;
b=ghGkfPqu6kHaGmEYhdc7N6KyiVOXPs9KIEhhIV+LIv83hFt77ctdUtTbSHirWP9k6f
X6+dfJxI4lX2bx3kPfPPC9njHsBQbjbqCjnbqwTYqfryGzd8X2ME4wlEAJ3ZQohO0kwC
S97O9fr7OUuTNLyYgD4FMAaB0+beqRGz+jP+PozYVyR/CF5t/CZqBgs8bXK/NOZlS95D
FUHY9AB/3+t4pV13eM5i7hno84HEcza2JMDS4OWN3Gii+9tSeQ4IJLPApnvrI10DWq1m
KGTJUBlXmcAiiKd2Q2U3XYoA6/pFsQmxrIq3BvfbirE2SuThXXbqrQoVUkppNVcMy1OZ
oNLg==
X-Gm-Message-State: AFuF++kbXzw6SzUm3fO4Uo1/kft0QgaUCE2O2F5pfKyqaVzVFezM06c9
iauVL9j7tWYM1Pt99eBWvL/A+fWTbsgnurnMlNToITYN6rHjWuKDO6zyrxDsWJwKUSlMz111fGE
sNp3x
X-Gm-Gg: AYBFou0K6MG5Yg8xMol8a7q8csj3DIj5FWF6+U+M9ONidxVhYy3ID8YQCMRSlI/M3YB
pkF4IE3plE6cEZB1T32N/pCs1OvGH0Ept+5QwGNW6zJ6cNiQCTKo93mdK4tfVLmtmLUDduoWNPj
SrDkbj08dg+VHMKv+NSIxptIkuE+8HyG8ZMPQQ5QrZH/DOimiIl7MikpYuztvSvPVco03a7TaTo
5Qbwm3C0LkToGh4u129qo7coa98bJG6ohUBto08+BTgb6KjrKsk6SEM9arFokdp8M0cuPu9DPts
zJfj7LdSn80ObnxWgKkV8QPg4s7yHi07b4w+e7IJprBg6xp1TMCt1/Hn0y3fjve1BC0HI9quccL
PiEcOLe3qoy0BHHZHSse90UDTRYiJOKKHNyC6/6GN0b2En1JIi5Q0dagFkn9gLLZulFr1NoxgWn
yGq6QYqOomHeVUda7lOf9+oQBHH6RSoMd+s67PlMt6we1kvr3UePJ8lNeYbkE2Niu5zmvxB0K/T
V0vvf/Us3j4iT30m/zjZXs=
X-Received: by 2002:a17:90b:58f0:b0:39e:261:4e13 with SMTP id 98e67ed59e1d1-39e54f42eefmr20207342a91.3.1789967274447;
Sun, 20 Sep 2026 22:07:54 -0700 (PDT)
Received: from DESKTOPL5RN3M6 ([2401:4900:8845:4648:a944:ec53:9887:cea0])
by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-39e6cb427casm12106608a91.17.2026.09.20.22.07.52
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Sun, 20 Sep 2026 22:07:53 -0700 (PDT)
From: "Neile Adams"
To:
Subject: RE: 1st Page Ranking
Date: Mon, 21 Sep 2026 10:34:53 +0530
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_BBD6_01DD49B5.429C7140"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: Ad1JfNHa9B9mogLSQQilKeT1u5scXA==
Content-Language: en-us
X-Spam_score: 5.2
X-Spam_score_int: 52
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, May I send you a web portfolio and prices? Please let
me know. Thank you,
Content analysis details: (5.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
[74.125.227.171 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.227.171 listed in dnsbl.ahbl.org]
[74.125.227.171 listed in dnsbl.ahbl.org]
[74.125.227.171 listed in dnsbl.ahbl.org]
[74.125.227.171 listed in dnsbl.ahbl.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in dnsbl.ahbl.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in dnsbl.ahbl.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in dnsbl.ahbl.org]
[2401:4900:8845:4648:a944:ec53:9887:cea0 listed]
[in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.227.171 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.227.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.227.171 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.227.171 listed in dnsbl.ahbl.org]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: theithubstudios.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: theithubstudios.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.171 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.171 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} RE: 1st Page Ranking
This is a multipart message in MIME format.
------=_NextPart_000_BBD6_01DD49B5.429C7140
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi,
May I send you a web portfolio and prices? Please let me know.
Thank you,
_____
From: Neile Adams
Sent: 02 September 2026 03:51 PM
To: sales@nk.ca
Subject: 1st Page Ranking
Hello,
We checked your website ''www.nk.ca" and see you have a good design and it
looks great, but it's not ranking on Google and other major search engine.
We are a SEO Expert and helped over 2500+ businesses rank on the (1st Page
on Google). Our rates are very affordable.
We can send you a price list?
Thanks
Neile Adams
------=_NextPart_000_BBD6_01DD49B5.429C7140
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
(filtered medium)">
class=3DWordSection1>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>Hi,
=
May I send you a web portfolio and prices? Please let me =
know.
Thank you,
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>=
style=3D'text-align:center'>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>
size=3D3 width=3D"100%" align=3Dcenter>
class=3DMsoNormal>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:
>
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'> Neile =
Adams
Sent: 02 September 2026 03:51 PM
To: =
sales@nk.ca
Subject: 1st Page Ranking
Hello,
We =
checked your website ‘‘www.nk.ca” and see you have a =
good design and it looks great, but it’s not ranking on Google and =
other major search engine.
We are a SEO Expert and helped over =
2500+ businesses rank on the (1st Page on Google). Our rates are very =
affordable.
We can send you a price =
list?
Thanks
Neile =
Adams
------=_NextPart_000_BBD6_01DD49B5.429C7140--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 20 Sep 2026 20:38:30 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8TvI-000000004nL-1jo2
for dave@doctor.nl2k.ab.ca;
Sun, 20 Sep 2026 20:38:28 -0600
Resent-From: The Doctor
Resent-Date: Sun, 20 Sep 2026 20:38:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from dehliz.cenayhosting.com ([95.173.177.4]:57066)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8OxH-00000000JWP-1j3Q
for sales@nk.ca;
Sun, 20 Sep 2026 15:20:21 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=endtech.com.tr; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Date:Subject:To:From:Reply-To:Message-ID:Sender:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Unsubscribe-Post:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=RrR0M4ngbg3RlrnwLNG7t74JDtTLbb8XdBw2bmYvV8w=; b=SE48MDf4DzuyYNUCDkSmrJHkAQ
18AEWkZYVlzTjONVFm4TrclsSzBUYLRGRH4ULgNgplL4dR7C7I7OlEmTXBWHH5uyaM9zqzaUc1/3p
zU33QMmkHHe6deC/pVafpaCxEMEWQ9qMHXGQnmBXmRX+UFFmivfAIZcge5QwffY4g4oaCyrrVq5Pa
vPg/Q+KuDUFjWC7+/uESDXcEl/G4nmIBkPWTVteC0hl1pDWySFRKqXXi1oSvobLIXNtmZONmhqcJM
3vnPr4bwUfQttrzTpjLLUpNeB4qXdA6NghuTjVx6vlEca4wOiHbjXdOrmjM03nPGCTfH7kwXrjfH8
MKRjsscg==;
Received: from ip68-231-132-74.tc.ph.cox.net ([68.231.132.74]:54270 helo=googlemail.com)
by dehliz.cenayhosting.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100)
(envelope-from )
id 1x8OnR-0000000GJbn-34Yx;
Mon, 21 Sep 2026 00:10:01 +0300
Message-ID: <2451274fbb7f555e7dd2cb6091d07a70c63f7eb0@endtech.com.tr>
Reply-To: Paul
From: Paul
To: Pia
Subject: 1win casino database for sale and cryptorino database for sale
Date: Sun, 20 Sep 2026 23:09:17 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dehliz.cenayhosting.com
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - endtech.com.tr
X-Get-Message-Sender-Via: dehliz.cenayhosting.com: authenticated_id: ozgur.ozen@endtech.com.tr
X-Authenticated-Sender: dehliz.cenayhosting.com: ozgur.ozen@endtech.com.tr
X-Source:
X-Source-Args:
X-Source-Dir:
hello,
I am selling the following databases
All records contain contact details such as email addresses, names, physi=
cal addresses, phone numbers, and more.
cryptorino.io.sql (A crypto casino =E2=80=94 complete database)
Price: $900
1win.com.sql (An online casino =E2=80=94 very large)
63 million records
Price: $900
If you are interested contact me on Telegram at @paulxq9 or paulxq99 or p=
aulxq999 , if one username does not work try another.
I accept only bitcoin or another cryptocurrency as payment method.
Do not reply to this email, instead, contact me on Telegram if you are in=
terested!
checmtuxhvksvyorjgryxuxduubcgxjyrvumwfqasuyycwiavyhfzvcdwjrnyh
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 20 Sep 2026 20:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8Tuo-000000004h6-1r2Q
for dave@doctor.nl2k.ab.ca;
Sun, 20 Sep 2026 20:37:58 -0600
Resent-From: The Doctor
Resent-Date: Sun, 20 Sep 2026 20:37:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from a3-11.smtp-out.eu-west-1.amazonses.com ([54.240.3.11]:34379)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from <010201a0c07636c3-0984e5b6-ad70-4c61-aa13-60c3dca3c635-000000@send.mikozod.ro>)
id 1x8NyA-00000000CrI-0qU7
for root@nk.ca;
Sun, 20 Sep 2026 14:17:11 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=resend;
d=mikozod.ro; t=1789935367;
h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;
bh=/DiFIw90bwJcmnIG5O1bQdu3Jkw27RFLCPq29qPDYSY=;
b=n4uUuzExP4W4tyoWYvRrqQuz63FAIX5pWkdFUVPLJSi4O8iU5qYfCwFWrpRR4yg1
dq7sNiYhGQEk4P8l+OkpSFkTlBpe8bpobmtCvQ+GGlsLLKbAfq/GUAK/GSxNELbM34A
rLsyn2SUz1esP5zcaAkPRX7ya8OYq5T2lh6BmEwI=
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
s=shh3fegwg5fppqsuzphvschd53n6ihuv; d=amazonses.com; t=1789935367;
h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type:Feedback-ID;
bh=/DiFIw90bwJcmnIG5O1bQdu3Jkw27RFLCPq29qPDYSY=;
b=M0cuM7H4rWB7K+KF3n/ekcnT54Z2VpZdO1zgWKzNX3QFsgJPsMl1/GYEfTN5hh7B
xXUKRawFE8oK3NpMt/8rr0M+BtL4zSpZMuc79t6/difblZf5I5wNbWkairRMbY1vf7N
8qr+RBEk0YcRqlELrBd7jkterNKBrtFfgND2jnLs=
From: FedEx Notifications
To: root@nk.ca
Subject: Your Delivery Update
Message-ID: <010201a0c07636c3-0984e5b6-ad70-4c61-aa13-60c3dca3c635-000000@eu-west-1.amazonses.com>
Date: Sun, 20 Sep 2026 20:16:07 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--_NmP-7708f40fd24cdab8-Part_1"
Feedback-ID: :1.eu-west-1.dQwBQNzPKritNaf0NHG9k176MlOysSyr2bsAae6jgUY+J7I/jo76YVL7xEFKf4s/l6mk/N7vtc8v5Eb4ECQY8FKO7lWMTyEVdxBicrB37J4W1t2cu4x5vAUfHiG95IvByNZ3W4MksJl0PernfhcWMmjRhLY3Xl7xFq6ZH9DgpEY=:1.eu-west-1.duyiEkLYPi4nGdRFd7LaGmAjRWieZlOvGu1wIBVR/Ks=:AmazonSES
X-SES-Outgoing: 2026.09.20-54.240.3.11
X-Spam_score: 8.3
X-Spam_score_int: 83
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FedEx SHIPMENT UPDATE A shipment has arrived at your local
FedEx facility and is awaiting final delivery confirmation. Outstanding balance:
$14.99 CAD Tracking 7894 3210 5678 9012 Weight 2.5 kg Service International
Priority Reference INV-2026-0042
Content analysis details: (8.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
[54.240.3.11 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[54.240.3.11 listed in dnsbl.ahbl.org]
[54.240.3.11 listed in dnsbl.ahbl.org]
[54.240.3.11 listed in dnsbl.ahbl.org]
[54.240.3.11 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[54.240.3.11 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[54.240.3.11 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[54.240.3.11 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[54.240.3.11 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: mikozod.ro]
[URI: load.bz]
-0.0 SPF_PASS SPF: sender matches SPF record
2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[54.240.3.11 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[54.240.3.11 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[54.240.3.11 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
Subject: {SPAM?} Your Delivery Update
----_NmP-7708f40fd24cdab8-Part_1
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
FedEx SHIPMENT UPDATE
A shipment has arrived at your local FedEx facility =
and is awaiting final delivery confirmation. Outstanding balance: $14.99 =
CAD
Tracking 7894 3210 5678 9012 Weight 2.5 kg Service International =
Priority Reference INV-2026-0042
Review your shipment details Review =
Details https://load.bz//JABj
Confirmation process Once you review the =
shipment details, you can confirm the delivery information on the same page=
. =E2=80=A2 Review the shipment information
=E2=80=A2 Confirm the delivery =
address
=E2=80=A2 Track the package status
View shipment details =
https://load.bz//JABj
Final-mile delivery partner KOGO
The final-mile portion of your shipment is handled by our delivery partner.=
Keep this reference available for tracking.
The outstanding balance on =
this shipment is $14.99 CAD.
Review the shipment details to proceed with =
delivery confirmation.
This message was sent regarding a shipment =
associated with your address.
=C2=A9 2026 FedEx. All rights reserved.
----_NmP-7708f40fd24cdab8-Part_1
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
=EF=BB=BF
0">
Shipment Update - Delivery Confirmation Required
Helvetica,sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100=
%;">
border=3D"0" style=3D"background:#f4f6f9;padding:20px 10px;margin:0;">
cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"max-width:520px;w=
idth:100%;background:#ffffff;border-radius:16px;box-shadow:0 8px 32px =
rgba(0,0,0,0.10);border:1px solid #e0e3e9;margin:0 auto;">
|
|
16px 0 0;">
border=3D"0">
|
0;letter-spacing:0.5px;">FedEx
|
ackground:rgba(255,255,255,0.20);padding:4px 14px;border-radius:20px;letter=
-spacing:0.5px;">SHIPMENT UPDATE
border=3D"0">
|
|
7;padding-bottom:12px;">
A shipment has arrived at your local FedEx =
facility and is awaiting final delivery confirmation.
|
7;padding-bottom:8px;">
Outstanding =
balance:
00;">$14.99 CAD
cellpadding=3D"0" cellspacing=3D"0" border=3D"0">
|
style=3D"padding:14px 0 14px 0;border-bottom:2px dashed =
#dde0e7;">
style=3D"margin-top:14px;">
|
color:#666666;padding-bottom:8px;">
999;text-transform:uppercase;letter-spacing:0.5px;display:block;">Tracking<=
/span>
7894 3210 5678 =
9012
|
style=3D"font-size:11px;color:#666666;padding-bottom:8px;">
spacing:0.5px;display:block;">Weight
style=3D"font-size:14px;color:#1a1a1a;">2.5 kg
spacing:0.5px;display:block;">Service
style=3D"font-size:13px;color:#1a1a1a;">International Priority
|
|
66;">
etter-spacing:0.5px;display:block;">Reference
INV-2026-0042
cellpadding=3D"0" cellspacing=3D"0" border=3D"0">
|
style=3D"padding:14px 0 14px 0;border-bottom:2px dashed =
#dde0e7;">
cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"margin-top:6px;">
|
7;padding-bottom:8px;">
Review your =
shipment details
|
style=3D"padding:8px 0 12px 0;">
style=3D"display:inline-block;background:#4D148C;color:#ffffff;padding:12px=
32px;border-radius:8px;text-decoration:none;font-size:16px;font-weight:600=
;">Review Details
cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"margin-top:6px;">
|
7;padding-bottom:8px;">
Confirmation =
process
|
;line-height:1.7;padding-bottom:10px;">
Once you review the shipment =
details, you can confirm the delivery information on the same page.
|
8;padding-left:10px;padding-bottom:6px;">
=E2=80=A2 Review the shipment =
information
=E2=80=A2 Confirm the delivery address
=E2=80=A2 Track the package status
style=3D"margin-top:6px;">
|
2px 0;">
oration:underline;font-size:13px;font-weight:600;">View shipment =
details
cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"border:1px solid =
#e5e7eb;border-radius:10px;">
|
|
3px;padding-bottom:4px;">Final-mile delivery partner
|
etter-spacing:0.5px;">KOGO
0;font-size:12px;color:#555555;line-height:1.6;">
The final-mile portion of=
your shipment is handled by our delivery partner. Keep this reference =
available for tracking.
|
|
24px;border-radius:0 0 16px 16px;border-top:1px solid #e6e9ef;">
|
t:1.7;">
The outstanding balance on this shipment is
style=3D"color:#1a1a1a;">$14.99 CAD.
Review the shipment =
details to proceed with delivery confirmation.
style=3D"max-width:520px;margin-top:12px;">
|
style=3D"font-size:10px;color:#999999;text-align:center;padding:6px =
0;line-height:1.6;">
This message was sent regarding a shipment associated =
with your address.
© 2026 FedEx. All rights reserved.
----_NmP-7708f40fd24cdab8-Part_1--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 20 Sep 2026 09:57:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8Ju3-00000000CMR-2jng
for dave@doctor.nl2k.ab.ca;
Sun, 20 Sep 2026 09:56:31 -0600
Resent-From: The Doctor
Resent-Date: Sun, 20 Sep 2026 09:56:31 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-francecentralazolkn19013081.outbound.protection.outlook.com ([52.103.46.81]:38288 helo=PA4PR04CU001.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8IzZ-000000007UF-2T9L
for root@nk.ca;
Sun, 20 Sep 2026 08:58:19 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=GZ1hGx7WAM7U9zXN2dOiibI+XueHwkmY5fkoLd6r3OhMQJ5yj6kXcEOdJGpTwND0T0fOnZU7QprFeN+7gvi013p7/uXSKWGEs2M7uSKrM5TmGpISr4kTq8nuCjlU/xAuJRoDxMYFDOZrZbkp5a0gi7w0ct6vD4eJO65qH278G3PNQcqqAfp3PtpfMnwBbZp3qIYHud5J6Gs/06ohbzTiigGhqXFvPlvU/s2dSBnVP6rTEPQY0YswR1FL/3OxDPTdhqotMainL1SzmKojdZKBoEV7dpIVWkwGjUNtCUfYqaliwMg8VzoFv8pjw4g3F59goaYXunTph3Zf84qsbKGUXA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=bYjj2KpAg/P/khfCy1cLohfe4tF6cTr/d9IR1NItwS4=;
b=XTsPNHYExv7qJhbsG/Lbyv/7idNxSwOHkExzgGzZi830yPAZZ9WzQvAuR5tqWqDBetKddi8LfpqlDJSSCBcFxOp5voUK/PN+s/BehgzDFkTFPC0kTHAHtuo1JcG2Zq8uiOzdUQj0T3lT6lvXxgrVmAsyAWBeshwYCeWUWkC/75ohTt5SBb5Y7OX1mR+bJZlxVax+4tLcc2+ygtBCOaKEewVrqtwMrmxXhU6AX4YLf25CEQ66X1q5DQzSIXpijzS0/I2R+Ech4GER1q5s2TYzLHM4XhHiQ7bdYqgzwUe8sBoRr4ViI+NqDHg4/hzeXOMb/viBoj085axW8PIeLqjjzg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=bYjj2KpAg/P/khfCy1cLohfe4tF6cTr/d9IR1NItwS4=;
b=dP8PJe8OJmAfNb1vxEn265vamv3jjl+rDBlxI4jeaSho92yFJRAkKnWPRg++XFtokfsCcv8j6fK33zGvVYtLmOlK65snP+J0KUuZOpsMK0KQlIqL5WRCiWVhgvY7kyslr/UhQmfIlzGqyXebiLklFi93SKZCnFIYsQ8GmECGo8TJWWOIp38CUSAJ9F/tz1905wfjO2wjfKxSI3nrWNJOXkABwBvQebVPBnrP3IJ/fRvgOGQft/6kdXJPcusynzim4Ci0/HeMV9u++oTQp3e/98gjrwxHu/oHjb3D+6cUpW29L7djvfzYvFIRCQNBDXzCqCmY/F9twK1LmmG6i2iFVw==
Received: from FRZP193MB2610.EURP193.PROD.OUTLOOK.COM (2603:10a6:d10:13d::21)
by AM9P193MB0966.EURP193.PROD.OUTLOOK.COM (2603:10a6:20b:1f3::8) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.16; Sun, 20 Sep
2026 14:57:12 +0000
Received: from FRZP193MB2610.EURP193.PROD.OUTLOOK.COM
([fe80::17fe:2c38:eeb2:4a49]) by FRZP193MB2610.EURP193.PROD.OUTLOOK.COM
([fe80::17fe:2c38:eeb2:4a49%6]) with mapi id 15.21.0428.015; Sun, 20 Sep 2026
14:57:12 +0000
From: Kiera Eisenhauer
To: "root@nk.ca"
Subject: Issue on nk.ca
Thread-Topic: Issue on nk.ca
Thread-Index: AQHdSRBR/s7vUEmm2EG8AyoIDv0bbg==
Date: Sun, 20 Sep 2026 14:57:12 +0000
Message-ID:
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: FRZP193MB2610:EE_|AM9P193MB0966:EE_
x-ms-office365-filtering-correlation-id: 910be72b-83c7-4c24-14b5-08df1727741b
x-microsoft-antispam:
BCL:0;ARA:14566002|15080799012|20031999006|38102599003|39105399006|4140399003|37011999003|8060799015|31061999003|8062599012|19110799012|55001999006|24021099003|24071999003|25010399006|4302099013|440099028|3412199025|102099032|1602099012|40105399003|2607281247196008|10035399007;
x-microsoft-antispam-message-info:
=?us-ascii?Q?YwiMqIjsYPXK6/B5PE00KELOa853d77yJZ3/DW+znPaJNck3kXLQAEML9g3P?=
=?us-ascii?Q?02g5J9Vqr0/fvQa3kQU3bXxF+zSOS+nLH35QdQQKQXjM6jzv3kjJazyVHiNS?=
=?us-ascii?Q?X+THos02wGI7VkhN5FEL69h0dqx7N956hCPAuwf+kwD5DMmDPn8y9CgB60pG?=
=?us-ascii?Q?wv2ELlL/bN3KfUwuK3poohS8qs7aFY4X7G0nbroyUfkQlcBEZksl0yEOWBUI?=
=?us-ascii?Q?zD1YLlbYR10TAwjbRK16hsi0b8mCEpn4mFzH98Xi8q7+LS0JzYh3bGe8rPVJ?=
=?us-ascii?Q?Y3bq4jvymCAOGqrWzWIlWIDfkcTL1VJTSeTtWsHgPk9gkxBM8glnl2xstL7K?=
=?us-ascii?Q?5TpQWK4C/2roPDR4q5R+Yd/vWHGQLVVVjBv8tAY6OKSLTl2MeUxfp5LnwlDw?=
=?us-ascii?Q?za18VdTZLTRP/uRzf5XqMpYsjeYYIwCforGxVMchEnuxZiDkMxfORM0YH1xG?=
=?us-ascii?Q?LZgRl0i0g3L/jlmts/8jfuR5ObtT8/1lFdikl+OdY65lAgVg7gjOcC+yoc7T?=
=?us-ascii?Q?Ia1Uv5hYYeKT5SLvCaA5iMh5eA0TmRBNMv5Trf5nTlWl0WjKlVxXLQV0dV1b?=
=?us-ascii?Q?8CJuhaNG7JtouSMRmRkTedaoKyJDx2gDe1feDKiYhgQbAVDdXQKMRFweCetT?=
=?us-ascii?Q?6IFOu/mIc7PMQWz+RUDeHZTJ0BOKT8Iil+uQ7HsdiG96eVK7FxtysK94gdD0?=
=?us-ascii?Q?gWfbhkQukgtQ+Ws/LvRbDPrPsvdrKxbxlYeCrjx2xysnJ+W7f9Js3ALA4wLl?=
=?us-ascii?Q?lg14p4sZDA5T+5xnKJ1vlvA7m9TZwrXLEzOHFJDINFMlVEa3d8cNCwSx66uG?=
=?us-ascii?Q?0tg3Y6uiCjvkxJPUGvcxaZnKQGtuD2N7WIMbHD5n9Ag8NW8tX/nN/kXgoFA5?=
=?us-ascii?Q?zIfRuU22/RW3h+ex3cpykmZBq4xr7SymBN1qcSme+9tshQT/SbIzDUGPt6+w?=
=?us-ascii?Q?KeHvexa4qnzgCJGmna2kTupyxZB6hE3Jfnh63Idnw8g6pw39zWoJGSmJcOsb?=
=?us-ascii?Q?AhgNLLkkNat9moJ0tbmmmLNmELP31lGGjNegIJIcbvrKie7WDqlCrAJ0U1dC?=
=?us-ascii?Q?Vi5g1mQ2WSNHdltJrlqhtiq0ubC2jdui5H1eLUcI5WZCc89kmw9KGPPAxl0P?=
=?us-ascii?Q?1Jbu+Qn4Ikpj?=
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?us-ascii?Q?ZQasHvYArsRcnWhMujBsc/dC0akNocQztXK+LcqH/vYvJdbiZHgEFc9SovJY?=
=?us-ascii?Q?yJQSd96oQX8BWs6KlHBd2PgXMdGZ5V1fm6arypMDocdU08vcBcovuxwmeiAv?=
=?us-ascii?Q?dGBXDtnTDa8M5wurYdqWf7l3hdHaSNloby2Sp3zCXYJMEyKxocy2WrUwiDsy?=
=?us-ascii?Q?ANrbb2wprYXX422wxAMgX1TdVKu4RaJovcSl0kq9wuft8NauXRu7vOI0cbsU?=
=?us-ascii?Q?D3+0a/nAewf0/Lb9sT/7UPAAESEj2wx26t39wZQjTZ3sCo5mqrFEw0/NoCxj?=
=?us-ascii?Q?orlY6ZW+RaD1U6Nd5Pd7xcKztOeEHlIctZnnuGylwnkpOwxZPqHQM92AG9MH?=
=?us-ascii?Q?Ud+FKkOqR+5JCE8O73mrBp00lUd5l8paPFN0ElygwP/3gzT4f4hh87NwNUNS?=
=?us-ascii?Q?DIw/RROzADyAT87q+QuJ4zUul+Qhp2SPava8K21oHDJpM4q1Wwgb/r072c5w?=
=?us-ascii?Q?fb9GNDltwfXWEMukC8iN7ICfdIkN71aWSjFecfHQSdC6VVC/S8vFcNjcNBbr?=
=?us-ascii?Q?H5jjSQF1qQmjKYXby6DG3MhEDuvqQRREM4B/ZWHLMEMhntGuTtjwD6gz21uy?=
=?us-ascii?Q?wqVPSBqsyeL2+UMNI+HOcQWIvs2GHMCg7x/zxJp7g0JPIUYJ9RK8sA7kPGs+?=
=?us-ascii?Q?C+M+cLacm+Wy+KZ6MrwdI9IKnCxBw0WAQFM90Dr0v++GtDUrZBPFrVE/ktee?=
=?us-ascii?Q?9EAvz1jRQNmX+sTqgh9ld5+Qo9llegXwIfzONOq4W/iU8lYb7duExTw3FpgP?=
=?us-ascii?Q?u5Z2Bwi3LRHT+uSvEcpAK4AD8+DTWshtmHJIBFHYbZVikyL6ZIR4/nD/U8KQ?=
=?us-ascii?Q?to1/s4/2n2ZHSHLL2ZpzyLX8okpt6amef5prUnzyxmTURSb44H6PQW5fKAqc?=
=?us-ascii?Q?oev6cNeUDCvix8H6bD/XgxaNunYns3IsfteIFNfKeRW4q2BRPVxSHw2o2QRI?=
=?us-ascii?Q?z2MdmpwfIm4UhsW7seVsihXF/6URi/9yVnx6JUN5CC7ofj/SqPmBhAiCpuQM?=
=?us-ascii?Q?JR4pA3h2EdGlKL1oHx5Y3LJtgKoOob5uVEburch/7+K8fkEvpp8AAybZKtcQ?=
=?us-ascii?Q?KlZ0jcKbLPr28YVqz+jdomT8iyLUmm2LGf3xIQjoEoqXBUFnHrJatw3lHtEz?=
=?us-ascii?Q?F5E7p+o6y+9KgxTxP6U9LwjGerJe4t5n7yW+3reu7YbDNVmpbjcmJt7afPtL?=
=?us-ascii?Q?LealRqN9FwRHoUSHyMSv1bdJI/woYPKmSVymqpThCrcJnrn2XBZjjyh2wKAN?=
=?us-ascii?Q?8S1/roJ6KdZQ/GZS5Je1bSEA+8XxXB8Abko18yezP++5Sq0r5K8FEsoj18sO?=
=?us-ascii?Q?5rh0JjXEJZhyVBe0m8NVHxMmuTi8J8jZm97d0z2O1YUpLtHaSjtKj/CR96G6?=
=?us-ascii?Q?ouItuGsRt2IfBdC3Seza4NwBpQCT?=
Content-Type: multipart/alternative;
boundary="_000_FRZP193MB26107DEBBCFA26A9A7AC4F80C7852FRZP193MB2610EURP_"
MIME-Version: 1.0
X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-b2714.templateTenant
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: FRZP193MB2610.EURP193.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 910be72b-83c7-4c24-14b5-08df1727741b
X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Sep 2026 14:57:12.8605
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9P193MB0966
--_000_FRZP193MB26107DEBBCFA26A9A7AC4F80C7852FRZP193MB2610EURP_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hello there,
Actually, I got issues on your business website www.nk.ca . With your permi=
ssion, I would like to send you a screenshot of those errors. Which is on y=
our Website.
Because of these issues you aren't rankings on Google.
May I send you, error's Screenshot ?
Thank you
Kiera
--_000_FRZP193MB26107DEBBCFA26A9A7AC4F80C7852FRZP193MB2610EURP_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
>
Hello there,
Actually, I got issues on your business website www.nk.ca . With your pe=
rmission, I would like to send you a screenshot of those errors. Which is o=
n your Website.
Because of these issues you aren't rankings on Google.
May I send you, error's Screenshot ?
Thank you
Kiera
--_000_FRZP193MB26107DEBBCFA26A9A7AC4F80C7852FRZP193MB2610EURP_--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path: <2029283526@intime.cz>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Sep 2026 19:41:30 -0600
Received: from mail-ed1-f102.google.com ([209.85.208.102]:56778)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from <2029283526@intime.cz>)
id 1x86Xx-00000000GFM-3xXs
for dave@doctor.nl2k.ab.ca;
Sat, 19 Sep 2026 19:41:01 -0600
Received: by mail-ed1-f102.google.com with SMTP id 4fb4d7f45d1cf-6a051b737d8so426531a12.1
for
; Sat, 19 Sep 2026 18:40:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=intime.cz; s=google; t=1789868396; x=1790473196; darn=doctor.nl2k.ab.ca;
h=message-id:date:mime-version:content-type:to:subject:from:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=89XtZuhjfivm4T4NuuYC2M0sYZaaaMD9PplD6cBpQXk=;
b=JknbBUnAcKJB4ukkOmUurrtxuURZztaPwutSmTf330wYVgPk/S29coFS7YU1vXJ7uB
eNTHBhcSHC7Co56keZ6Oh0gtu7UPcwdUXfJsJ1XZYcrYlIw8g61FzELg2tFSw1U/XtBK
nk20MipGsvGOTN9wub+4I0V4afgJZQmszgDJWCDTRDugwkhk9eAQQNgc1CS0EW+kRGsw
e5sA2d5IFpuAUQobYy/wXg1j9ONoadvk0m/zbCDbEsOxdrw8y/vVIsdOR5Gn6Bd3PZEY
EIUrvzZpZvVhxzBI6xG/VDbklu1EzbLbecSIgttYcyCDIJc2c7g6JCX4nla1TDQUS5ZZ
zjIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789868396; x=1790473196;
h=message-id:date:mime-version:content-type:to:subject:from:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=89XtZuhjfivm4T4NuuYC2M0sYZaaaMD9PplD6cBpQXk=;
b=lMyrMPSb+Ch3y2dy9jXx8YZIbfZu7tNggqJfAqAb0pFl7/5U9jL5oZ2KrNTswM7bgX
PjwoQisCmIL1dCy4onKGCsOn2wqzQtnqODoziGd4D6Vrjwl5DVBIDus0aiDlEWEjZX0n
FsgBZh1AF6VocU90sACgP1PTYDBnEl7eYnxTBFy2WdR6s1C1mETI4IKPuLHQMEAa0OMg
IqL4Xv+Soag9/BajZqFxXQditJgBD4bsJAe8VJZHPvJiNZwdj8eehuSoRfqjxtdkj1Jn
OPgfvnH1mMX//gl6MPq8b4sHiDRwBRRGy/ZolPYPGo73MaInx5Q1/r+6Qq8nmGvZ6554
JAIA==
X-Gm-Message-State: AFuF++kN/wCth8gj2Kkgk2u/sP1MseXwliT1ig9AY0oMYCjMYedWC0j5
6zQ5C3G/6vGEzQTz9Iw0G/UXrbdS2mOiU3qjbRK6QN24KFCyafh3BnUT9YTFfWJ1FhZJkZ1u5i/
+GpCiINhyMvIHWEqM6Aj6pcChyPU4GqlHXalSl6KSwNW4ynY=
X-Gm-Gg: AYBFou0nu0MwWoxmzXwr8g+cF6aymWnC7fE1/aYQqaUEQoivWeoRlrQ4D7ydI/vkHPv
DIyBJgs2dUEbyGTZdc1/uT1QW5EQjdA4IqIcfvMOVMVf2yiQPEn5uwBTS0MXNcbp+RwDfcH50Gm
spsaqD+lzSzocZMpDFvBUgsVzhjuZSGYc12KAlKDHpmDcKm6HShz68/XfALuGkVWsbcFMhkuQci
13xPkMZ+D/HDvy4th5ejlz6GQaC6osoBuxmui4po2ossaHrW9I1KOxTS7BjZfEsvob/t6nZltg6
Cii74VpfI5jtNXW0Di/MDHqrcNheGAcFk7XjONz/SGE3QH/y1W7LHUd7AzYsmMgkOJ6owRY0I0v
E+EUoVimPbGCL
X-Received: by 2002:a05:6402:42d3:b0:6a3:fdb0:c374 with SMTP id 4fb4d7f45d1cf-6aa531254d4mr4617325a12.13.1789868395573;
Sat, 19 Sep 2026 18:39:55 -0700 (PDT)
Received: from WIN-3V1QAPPLHFQ ([156.146.61.24])
by smtp-relay.gmail.com with ESMTPS id 4fb4d7f45d1cf-6aa67e6402esm1885340a12.10.2026.09.19.18.39.55
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Sat, 19 Sep 2026 18:39:55 -0700 (PDT)
X-Relaying-Domain: intime.cz
From: "doctor.nl2k.ab.ca Security Team" <2029283526@intime.cz>
Subject: Your dave@doctor.nl2k.ab.ca Password Has Expired 9/19/2026
To:
Content-Type: multipart/related; type="multipart/alternative"; boundary="XldARmASP2JwWs14CZm=_Yb1bGATTy2jvA"
MIME-Version: 1.0
Date: Sat, 19 Sep 2026 18:39:55 -0700
Message-Id: <202619091839558B1D5E5BE2-25261FAF13@intime.cz>
X-Spam_score: 7.5
X-Spam_score_int: 75
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear dave,, Your dave@doctor.nl2k.ab.ca https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.nl2k.ab.ca
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
[209.85.208.102 listed in dnsbl.ahbl.org]
[209.85.208.102 listed in dnsbl.ahbl.org]
[209.85.208.102 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: edgeone.dev]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.102 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: edgeone.dev]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.102 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.208.102 listed in bl.score.senderscore.com]
1.5 MR_STRANGE_QUESTION URI: No description available.
0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URI: ns3.dnsv2.com/163.177.5.55]
[URI: ns3.dnsv2.com/117.135.128.155]
[URI: ns3.dnsv2.com/220.196.136.55]
[URI: ns3.dnsv2.com/125.94.59.155]
[URI: ns4.dnsv2.com/101.227.168.55]
Subject: {SPAM?} Your dave@doctor.nl2k.ab.ca Password Has Expired 9/19/2026
This is a multi-part message in MIME format
--XldARmASP2JwWs14CZm=_Yb1bGATTy2jvA
Content-Type: multipart/alternative;
boundary="z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo"
--z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Dear dave,,
Your=20
dave@doctor.nl2k.ab.ca https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@=
doctor.nl2k.ab.ca
password is valid until=20
9/19/2026 https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.nl2k.a=
b.ca
, Please Kindly use this to associate the following to keep the same p=
assword.
Continue ?
Sincerely,
doctor.nl2k.ab.ca Security=20
Team.
--z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
8859-1">
Your dave@doctor.nl2k.ab.ca Password Has Expired 9/19/2026
itle>
![]()
TOP-COLOR: rgb(0,0,0); WIDTH: 318px; BORDER-LEFT-COLOR: rgb(0,0,0); BO=
RDER-BOTTOM-COLOR: rgb(0,0,0); BORDER-RIGHT-COLOR: rgb(0,0,0)" src=3D"=
cid:DBC33FD599CE3F2280F7@WINVQAPPLHFQ" width=3D431 height=3D112>
<=
DIV>
COLOR: rgb(32,31,30); BACKGROUND-COLOR: transparent">
=
; COLOR: rgb(32,31,30); BACKGROUND-COLOR: transparent">
FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif; WHITE-SPA=
CE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400;=
COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETT=
ER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0=
px; font-variant-ligatures: normal; font-variant-caps: normal; -webkit=
-text-stroke-width: 0px; text-decoration-thickness: initial; text-deco=
ration-style: initial; text-decoration-color: initial">
FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(32,31,30=
); BACKGROUND-COLOR: transparent">Dear
-SIZE: medium; FONT-FAMILY: Arial; BACKGROUND-COLOR: transparent">dave=
,
le=3D"FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(32=
,31,30); BACKGROUND-COLOR: transparent">,
ORDER-LEFT-WIDTH: 0px; FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica=
, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; WHITE=
-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRAN=
SFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); PADDING-BOTTOM: 0=
px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; ORPHANS: =
2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px;=
BORDER-TOP-WIDTH: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDEN=
T: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -we=
bkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-=
decoration-style: initial; text-decoration-color: initial">
"FONT-SIZE: 11pt; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(32,31,3=
0); MARGIN: 0px">
rgb(32,33,36); BACKGROUND-COLOR: rgb(248,249,250)">
, sans-serif">Your
fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.nl2k.ab.ca" rel=3D"noope=
ner noreferrer" target=3D_blank data-saferedirecturl=3D"https://www.go=
ogle.com/url?q=3Dhttps://rosslodges.co.za/Update/generalweb/index.html=
/?/%23%5BEMail%5D&source=3Dgmail&ust=3D1789908488864000&us=
g=3DAOvVaw3Ehl5VZdQHnuWnLk6mrH0z">dave@doctor.nl2k.ab.ca password =
is valid until
sans-serif">
LY: Arial; BACKGROUND-COLOR: transparent">
,204)" href=3D"https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.n=
l2k.ab.ca" target=3D_blank data-saferedirecturl=3D"https://www.google.=
com/url?q=3Dhttps://rosslodges.co.za/Update/generalweb/index.html/?/%2=
3%5BEMail%5D&source=3Dgmail&ust=3D1789908488864000&usg=3DA=
OvVaw3Ehl5VZdQHnuWnLk6mrH0z">9/19/2026
rgb(0,0,255); BACKGROUND-COLOR: transparent">
e=3D"FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(0,0=
,0); BACKGROUND-COLOR: transparent">,
-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER=
-BOTTOM-WIDTH: 0px; COLOR: rgb(32,31,30); PADDING-BOTTOM: 0px; PADDING=
-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-=
TOP-WIDTH: 0px; BACKGROUND-COLOR: transparent"> Please Kindly use this=
to associate the following to keep the same password.
IV style=3D"BORDER-LEFT-WIDTH: 0px; FONT-SIZE: small; FONT-FAMILY: Ari=
al, Helvetica, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: ba=
seline; WHITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0=
px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); PADD=
ING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0=
px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; PADDIN=
G-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; BACKGROUND-COLOR: rgb(255,255,255=
); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=
: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=
nitial; text-decoration-style: initial; text-decoration-color: initial=
">
R: rgb(32,31,30); MARGIN: 0px">
DER-LEFT-WIDTH: 0px; FONT-SIZE: small; FONT-FAMILY: arial, 'helvetica =
neue', helvetica, sans-serif, serif, emojifont; BORDER-RIGHT-WIDTH: 0p=
x; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: rgb(0,0,=
0); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: =
0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px"> =
-WIDTH: 0px; FONT-SIZE: small; FONT-FAMILY: inherit; BORDER-RIGHT-WIDT=
H: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BO=
TTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-R=
IGHT: 0px; BORDER-TOP-WIDTH: 0px"> &=
nbsp; =
SPAN>
i', 'segoe wp', 'segoe ui wpc', tahoma, arial, sans-serif; BORDER-COLL=
APSE: collapse; COLOR: rgb(33,33,33)" cellSpacing=3D0 cellPadding=3D0 =
border=3D0> |
-RIGHT: transparent 1px solid; BORDER-BOTTOM: transparent 1px solid; B=
ORDER-LEFT: transparent 1px solid; MARGIN: 0px; border-image: none" bg=
Color=3D#1976d2 align=3Dcenter>
assword%20expiry/?mail=3Dlmespinosa@opimed.com style=3D"TEXT-DECORATIO=
N: none; BORDER-TOP: rgb(25,118,210) 1px solid; FONT-FAMILY: avenirnex=
t-demibold, arial, sans-serif; BORDER-RIGHT: rgb(25,118,210) 1px solid=
; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: rgb(25,118,210) 1px solid; =
COLOR: rgb(255,255,255); PADDING-BOTTOM: 12px; PADDING-TOP: 12px; PADD=
ING-LEFT: 30px; BORDER-LEFT: rgb(25,118,210) 1px solid; MARGIN: 0px; D=
ISPLAY: inline-block; PADDING-RIGHT: 30px; border-image: none" href=3D=
"https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.nl2k.ab.ca" rel=
=3D"noopener noreferrer" target=3D_blank data-saferedirecturl=3D"https=
://www.google.com/url?q=3Dhttps://rosslodges.co.za/Update/generalweb/i=
ndex.html/?/%23%5BEMail%5D&source=3Dgmail&ust=3D17899084888640=
00&usg=3DAOvVaw3Ehl5VZdQHnuWnLk6mrH0z">Continue =
594; |
RDER-RIGHT: transparent 1px solid; BORDER-BOTTOM: transparent 1px soli=
d; BORDER-LEFT: transparent 1px solid; MARGIN: 0px; border-image: none=
" bgColor=3D#1976d2 align=3Dcenter>
FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(32,31,30=
); MARGIN: 0px">
bri, sans-serif; COLOR: rgb(32,31,30); MARGIN: 0px">Sincerely,
tyle=3D"FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(=
32,31,30); MARGIN: 0px">
Arial; COLOR: rgb(34,34,34); BACKGROUND-COLOR: transparent">doctor.nl=
2k.ab.ca Sec=
urity Team.
wline>
NT-FAMILY: Arial, Helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPA=
CING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34=
); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; =
BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-lig=
atures: normal; font-variant-caps: normal; -webkit-text-stroke-width: =
0px; text-decoration-thickness: initial; text-decoration-style: initia=
l; text-decoration-color: initial">
--z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo--
--XldARmASP2JwWs14CZm=_Yb1bGATTy2jvA
Content-Type: image/jpeg;
name="Roundcube logoo.jpg"
Content-Transfer-Encoding: base64
Content-Disposition: inline;
filename="Roundcube logoo.jpg"
Content-ID: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--XldARmASP2JwWs14CZm=_Yb1bGATTy2jvA--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Sep 2026 19:14:31 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x868N-00000000EFq-0n3K
for dave@doctor.nl2k.ab.ca;
Sat, 19 Sep 2026 19:14:23 -0600
Resent-From: The Doctor
Resent-Date: Sat, 19 Sep 2026 19:14:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [103.138.142.2] (port=65528 helo=mail.bcel.com.la)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x844y-000000002uD-0wL5
for sales@nk.ca;
Sat, 19 Sep 2026 17:02:54 -0600
Received: from ROBEY ([45.154.138.168])
(user=thanongsone@bcel.com.la mech=LOGIN bits=0)
by mail.bcel.com.la with ESMTP id 68JN1P8J004747-68JN1P8S004747
(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
for ; Sun, 20 Sep 2026 06:01:41 +0700
From: "thanongsone@bcel.com.la"
Subject: Project Funding and Investment Opportunities
To:
Content-Type: multipart/alternative; boundary="lgEo=_rT1XGyklXeNd5Gv5SjxY2xXLdK6h"
MIME-Version: 1.0
Reply-To:
Date: Sun, 20 Sep 2026 02:01:40 +0300
Message-Id: <203920260901027EAD3C144B-7E73B517EF@bcel.com.la>
X-FEAS-Auth-User: thanongsone@bcel.com.la
X-FEAS-Client-IP: 45.154.138.168
X-FE-Last-Public-Client-IP: 45.154.138.168
X-FE-Policy-ID: 0:1:2:SYSTEM
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; d=bcel.com.la; s=bcel; c=relaxed/relaxed;
h=from:subject:to:content-type:mime-version:reply-to:date:message-id;
bh=wzdlEzNTTCRFgA/s2J1AedxOHGkLwZ6h8vPTbXRx0Ys=;
b=uojRPI4YmREh2h1skyjpJT6XqPZ5+2i0cw2YWlh2K+L+gTlSn0C122EsYbovXkXr2wMpBNVlbg2g
NQgwWruyhPJzMJL5d+76vpSvQfGMoym7kYDphkMkGE1SLQha6j1TKdNEOClJkLs8YtZwBp1rInaI
QvS5WKyEXxjREt5jUx9e5E+T0syozFKS35vSs8unA2llXzxteENS6RwGaRHlrtNaRlfM4wQsIhUt
M+AyW+7FWy925+FEQlmyrtrqz6lF1ugHJV9znWaLXE5HqY5ljWvTvr1benBJHHhedFVNuZ0sE7R5
UUyLGLf4+QTgb5W2p/5NmbQ0+xwcjmPaboKuYg==
X-Spam_score: 15.8
X-Spam_score_int: 158
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir/Madam, I hope this message finds you well. We are
pleased to introduce a project funding opportunity for qualified individuals,
companies, and organizations seeking financial support for genuine and viable
projects.
Content analysis details: (15.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[45.154.138.168 listed in will-spam-for-food.eu.org]
[45.154.138.168 listed in will-spam-for-food.eu.org]
[45.154.138.168 listed in will-spam-for-food.eu.org]
[45.154.138.168 listed in will-spam-for-food.eu.org]
[45.154.138.168 listed in will-spam-for-food.eu.org]
[45.154.138.168 listed in will-spam-for-food.eu.org]
[45.154.138.168 listed in will-spam-for-food.eu.org]
[45.154.138.168 listed in will-spam-for-food.eu.org]
[103.138.142.2 listed in will-spam-for-food.eu.org]
[103.138.142.2 listed in will-spam-for-food.eu.org]
[103.138.142.2 listed in will-spam-for-food.eu.org]
[103.138.142.2 listed in will-spam-for-food.eu.org]
[103.138.142.2 listed in will-spam-for-food.eu.org]
[103.138.142.2 listed in will-spam-for-food.eu.org]
[103.138.142.2 listed in will-spam-for-food.eu.org]
[103.138.142.2 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.138.142.2 listed in dnsbl.ahbl.org]
[103.138.142.2 listed in dnsbl.ahbl.org]
[103.138.142.2 listed in dnsbl.ahbl.org]
[103.138.142.2 listed in dnsbl.ahbl.org]
[45.154.138.168 listed in dnsbl.ahbl.org]
[45.154.138.168 listed in dnsbl.ahbl.org]
[45.154.138.168 listed in dnsbl.ahbl.org]
[45.154.138.168 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.138.142.2 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.138.142.2 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.138.142.2 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.138.142.2 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: bcel.com.la]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: bcel.com.la]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[ahmedwalid0(at)hotmail.com]
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[103.138.142.2 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.138.142.2 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 MIXED_HREF_CASE Has href in mixed case
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
Subject: {SPAM?} Project Funding and Investment Opportunities
This is a multi-part message in MIME format
--lgEo=_rT1XGyklXeNd5Gv5SjxY2xXLdK6h
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Dear Sir/Madam,
I hope this message finds you well.
We are pleased to introduce a project funding opportunity for qualifie=
d individuals, companies, and organizations seeking financial support =
for genuine and viable projects.
I am an international financial broker working with Premium34 Global Y=
atirim Companies. Through our network of funding partners and investor=
s, we facilitate access to project financing and capital ranging from =
USD 1 million to USD 100 million, subject to project assessment, due d=
iligence, and applicable terms and conditions.
The proposed financing may include:
Funding from USD 1 million up to USD 100 million
Competitive fixed annual interest rates, potentially as low as 2%, d=
epending on the project and financing structure
Flexible financing structures tailored to eligible projects
Grace periods of approximately 10 years and 12 months, where applica=
ble
Financing consideration for infrastructure, real estate, energy, man=
ufacturing, agriculture, technology, and other legitimate business pro=
jects
Professional review and assessment of the project proposal and suppo=
rting documentation
Interested applicants are invited to provide a brief overview of their=
project, including the required funding amount, project location, bus=
iness plan, proposed use of funds, and relevant financial information.=
All applications are subject to verification, due diligence, investor=
approval, and the applicable financing requirements.
If you are seeking reliable funding for a genuine and commercially via=
ble project, please contact us for further information regarding the a=
pplication process, eligibility requirements, documentation, and next =
steps.
We look forward to hearing from you and exploring a potential financin=
g opportunity.
Thank you for your time and consideration.
Best regards,
Walid Ahmed
International Financial Broker
Premium34 Global Yatirim Companies
Email:=20
Ahmedwalid0@hotmail.com mailto:Ahmedwalid0@hotmail.com
Tel/WhatsApp: +17862197362
--lgEo=_rT1XGyklXeNd5Gv5SjxY2xXLdK6h
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
8859-1">
le=3D1"> <=
title>Project Funding and Investment Opportunities
=3Dleft>Dear Sir/Madam,
=3Dleft>I hope this message finds you well=
=2EWe are pleas=
ed to introduce a project funding opportunity for qualified individual=
s, companies, and organizations seeking financial support for genuine =
and viable projects.
rial>I am an international financial broker working with Premium34 Glo=
bal Yatirim Companies. Through our network of funding partners and inv=
estors, we facilitate access to project financing and capital ranging =
from USD 1 million to USD 100 million, subject to project assessment, =
due diligence, and applicable terms and conditions.
=3Dleft>The proposed financing may include=
: Funding from=
USD 1 million up to USD 100 million
Competitive fixed annual int=
erest rates, potentially as low as 2%, depending on the project and fi=
nancing structure
Flexible financing structures tailored to eligi=
ble projects
Grace periods of approximately 10 years and 12 month=
s, where applicable
Financing consideration for infrastructure, r=
eal estate, energy, manufacturing, agriculture, technology, and other =
legitimate business projects
Professional review and assessment o=
f the project proposal and supporting documentation
=3Dleft>Interested applicants are invited =
to provide a brief overview of their project, including the required f=
unding amount, project location, business plan, proposed use of funds,=
and relevant financial information. All applications are subject to v=
erification, due diligence, investor approval, and the applicable fina=
ncing requirements.
ial>If you are seeking reliable funding for a genuine and commercially=
viable project, please contact us for further information regarding t=
he application process, eligibility requirements, documentation, and n=
ext steps.
We lo=
ok forward to hearing from you and exploring a potential financing opp=
ortunity.
Thank =
you for your time and consideration.
ize=3D3 face=3DArial>Best regards,
e=3D3 face=3DArial>Walid Ahmed
International Financial Broker
Pr=
emium34 Global Yatirim Companies
Email:
d0@hotmail.com">Ahmedwalid0@hotmail.com
Tel/WhatsApp: +17862197=
362
--lgEo=_rT1XGyklXeNd5Gv5SjxY2xXLdK6h--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Sep 2026 19:14:31 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x868D-00000000EEz-0Yt6
for dave@doctor.nl2k.ab.ca;
Sat, 19 Sep 2026 19:14:13 -0600
Resent-From: The Doctor
Resent-Date: Sat, 19 Sep 2026 19:14:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f173.google.com ([209.85.215.173]:43124)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x83gb-000000000rJ-1B7W
for sales@nk.ca;
Sat, 19 Sep 2026 16:37:41 -0600
Received: by mail-pg1-f173.google.com with SMTP id 41be03b00d2f7-cbedd5aece4so2181084a12.0
for ; Sat, 19 Sep 2026 15:36:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=bestsoftwaredevelopmentcompany.com; s=google; t=1789857399; x=1790462199; darn=nk.ca;
h=subject:to:from:mime-version:content-type:date:message-id:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=Jh5GQ8dKSTVQmW3+Q+9uVmtC9pqXkJ28mELePVpOF6g=;
b=K/yhDuyODgXq6MjbmP8mkNnbnDF8m6sRvU7L7ewiwOIfhlu0oEQXYa7j3dpAglZt+z
ccukzqVmBfD/A14+QOG0WYFyO3sd0G8LUHN79g2XJklalBJX241ap2Swc6xDm2iHkRF9
IC0VNGoPoEYJ29Mjqt+whzr1C6FYsleMPzqEqKuquT15A2OLHjsauXQmX6yQXHWyYuRv
WOx6OvgcKKv+zR5m0GXgURibET8PzGZzj1ikXS3aM+1bs0EqebqxKkpmnU09ODb/dq5a
73ZJMTKiWNDxHg84+ScxrnyGANBnIR6qBg0Em6G3loehxuG6Ycn3lxnz2qHsfYXXDhWr
ylkA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789857399; x=1790462199;
h=subject:to:from:mime-version:content-type:date:message-id:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=Jh5GQ8dKSTVQmW3+Q+9uVmtC9pqXkJ28mELePVpOF6g=;
b=u96sCkRZkz98llfBQFd6yzD05sBNNOapEOG8XmFKHZXbQqhr92lwMlGpJgfgs2rDVZ
cvR82e7FN13Ok8buuADXnNy/CZLKgNmMQIwe0bVZgJNptqqrYRLGFCcTm/xkEJPfqxjq
89FpmZhAmJGrVc7RvfxVeXRgbd1ty14L8Ca+dMR0PECLgoUO+Urvf0AyRD6Gl+G4iFa9
HC1i4duRys+yJDvGQRTNAPEFcuLs6t4ceL1GikJcscpN8PUCKU+tQK1521uIJ1u4FYBy
qytOnPRtcpmQJh07FIj2tGDn44/AjSA/+sOz3BM1q2gwIyDemOgiULrcbp8dViJMNBMH
9CLA==
X-Gm-Message-State: AFuF++nBWllGmWqkVB5eJoPtAT3P7sUHBLnSpbZ3YHiI0kn/VTmBxXso
j+J/n06c0hlvWmtPWM8sKM8ZPiW54XtyePOAazv3P1dFONvavKcXiBRDggKJyJZnI9sBirVrDcq
R8GLr
X-Gm-Gg: AYBFou2fW53Z4f8iICdZuX4lFxNQ9agsOEy4BjlCN/V+3mZBJwLahNeWazVEazpj6bs
lT65WLC9uSaT6V/moC1UAUAxKIxsaj7CsKcaZ9LEvBAvk8NLAenQVAL7QEbmRW80GQua7PkgN1L
Aftf7Usa612eXKnZ320fTrePXP4ziNXTFyoVnSbf7w7cC/SYhzcb4z8cGsP9J5XK6MEGjE9TmsO
EVG2Qi19ws/SGC7XtxiSf7vI6rumPgXe65Ek3F0dGK+KuVbigD2AphFpr3kkmJY7sSkYZLGFKZ3
itzJZJ3y3Tb7EiRx1984lgt0CYEdx0a4CXWQxJdNy3kA5wIgeO9/BifgiOv6Q/E1A462iPlvtgm
vetDJeEqhCZDyUqhywGd8wSUY9j7S15SOAX7Me9+ZgJSlmsjJ6xa/iLXKbUB2+wU/cpcQreHKMn
zFnCN08xmr4dfBxde76bwPXOeRqzWP6YHstVjqiY9GCco4ZktcUKbpbKlhq9VRctcv7N2SgIe/Y
tsbyI+o/Nxs7u2OCnBqxAuuEXS7rr5zcwLoQBRwBKBALg4=
X-Received: by 2002:a05:6a20:9185:b0:3dd:a9a9:3965 with SMTP id adf61e73a8af0-3dda9a93b8emr2157382637.41.1789857398887;
Sat, 19 Sep 2026 15:36:38 -0700 (PDT)
Received: from DESKTOP-OUDJMQ8.lan ([2409:40e4:10b8:3af2:cd25:a716:d3a5:ad9a])
by smtp.gmail.com with ESMTPSA id 5a478bee46e88-33c331aeeddsm7800192eec.24.2026.09.19.15.36.37
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Sat, 19 Sep 2026 15:36:38 -0700 (PDT)
Message-ID: <6aaf0e76.ed8a271b.1811f0.789e@mx.google.com>
Date: Sat, 19 Sep 2026 15:36:38 -0700 (PDT)
Content-Type: multipart/alternative; boundary="===============1104364588757647729=="
MIME-Version: 1.0
From: Jay
To: sales@nk.ca
Subject: nk.ca App developer
Hi,
Just checking in regarding my previous email. Let me know if you'd be interested in discussing mobile app opportunities for your business.
Best,
Jay
On 26 July 2026, at 11:22 am, Jay, wrote:
Hi,
I came across your company website www.nk.ca and spent some time exploring your business online. Your platform looks really interesting.
I’m Jay, an experienced iOS & Android app developer helping businesses build high-quality mobile apps.
If you’re considering developing a mobile app to grow your platform, I’d love to share a few suggestions and examples from similar projects.
Let me know if you’d like to connect.
Best,
Jay
App Developer
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Sep 2026 19:14:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x867x-00000000EDR-3amd
for dave@doctor.nl2k.ab.ca;
Sat, 19 Sep 2026 19:13:57 -0600
Resent-From: The Doctor
Resent-Date: Sat, 19 Sep 2026 19:13:57 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj2-f11.google.com ([74.125.227.139]:56271)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x80f2-00000000AjK-1USs
for sales@nk.ca;
Sat, 19 Sep 2026 13:23:54 -0600
Received: by mail-pj2-f11.google.com with SMTP id 98e67ed59e1d1-398a384b5f7so1091547a91.0
for ; Sat, 19 Sep 2026 12:22:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1789845771; x=1790450571; darn=nk.ca;
h=content-type:mime-version:date:message-id:subject:to:from:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=65gMaaM59tdOq2mOZsLa9plAyDQC4GRadn65gLgx1i8=;
b=fAxOv4atS3MEdAuT3pMXPLx/UVWWEbv/mvJtEGjTQdc1a1Hocw00A2yKkRVBrQu3RX
kszA6K2Q8Iv6lo7BC7CmjwdVtOkMQ5hdu29LKcdXT1B66G9if/3aqdhc/ROrNgXhOTLy
RLIgV5Xu9NnFS2mmRbNbNGYMpz+RPsg4urkz8dpjiM7fDdq9rJymjeyrbDXaIy2fWUff
JXIaod6Xqsc/rc7LnRvaR9jVH2QO5Fkv97efgqf5KVMQdRfUacBilT6fZeMTTZ1U0TEo
uaNklZRq3S0xsYQ8tdoJevi9jmqTBLMS3Eqkz/kHD2EaF4tjQVtGMNhG1BUMPkQocdNM
DaxQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789845771; x=1790450571;
h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=65gMaaM59tdOq2mOZsLa9plAyDQC4GRadn65gLgx1i8=;
b=IN6GLFRvrAVlZMymV8YBO3+N3btUBSW5mpvKGxRECurLvFA/mpLcK4UT7uST7IB4iX
l2hZvqskQxjbmmD3nq8xko4nyArKWOo54KoKNOw8jWs1xe17fUZSnh/fka8Nk7vwEEsM
QpP9NFvliC1BZ+GdWXVlokVdC8pI5ijuciX/PNuf29VSIrIaPujOQ+1YLE8Ejs+2vjD9
JbjEAD32yEi+oV2pXG/GGX2puBFMbhCuReIzlD4oKVWSqWJovxMfXR4xwsQDVj798wP1
pKwufF/InA0P7FwhIVRegAUwDizL0XoWRC34QWJu09Q1O8RliClnaLuYsZWbrvuFERZh
2XTg==
X-Gm-Message-State: AFuF++kq6woFRxRysAqzKuooSwv1FkNTruh8Bl0UAGdWK8hQyGmUkOzt
g96Gel7UCRwZihxq0IAO9QnlHILFyvGFf/p0XgTQCTEmOPyKBwexIeAPbKXDCQMj9gik2CsT
X-Gm-Gg: AYBFou0nM6yPO9SUz7NEBSCKCqIDCErra9MLW92SBoRA66E/7U5EB5arePTbhgm47bn
3q9cwwQxj/M9v9LhHS0X1RdvYsoEHvHTJnUDXBQa/1tJx1mMQIn1sqXV6hO3GCAIWCqnm8qtTcT
1+SMLYY5NdF1ucJmyETjdVmtXU3adiFsoiMkXZ+ZUiEzjTtW3pxsB9tbKQ8aHgB4BSsk5zi5VJp
AovEngkgzqsjgFA/JLM9zgWHN4/WyiplcTBmQGtUJ8bHt8zUMiRpmcRtINjGP7HEwzWk3cqADGL
ji+X7/ceiBUJTx3x42WvwvkcHcI7PXKpD915SyLXmc6tE7XryydrsCeU6GtxCotkpWyGgyvUG43
irmWbrsrfvFVjZXfTHiTfg8Un2FrV9F0jt/A0Kr3GtQ84GT/E4J+Gi7tLdThUnMLaGXH79wMRJ7
uISClKSLXN9YTSns+wP9HMN/xXvW51hm73kAQILQQzxW1Syh3Q5PgZ4GnffZy12JV4GyKH/bG3N
uajrn42aA/Ys5GrIxPoj7eg
X-Received: by 2002:a17:90b:1dc9:b0:39e:6c69:7775 with SMTP id 98e67ed59e1d1-39e6c697929mr5401523a91.30.1789845771258;
Sat, 19 Sep 2026 12:22:51 -0700 (PDT)
Received: from [127.0.0.1] ([103.87.59.255])
by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-39e6fb75539sm5390835a91.3.2026.09.19.12.22.48
for
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
Sat, 19 Sep 2026 12:22:50 -0700 (PDT)
From: "Kenneth , LUX Media"
X-Google-Original-From: "Kenneth , LUX Media"
X-Priority: 3
To: sales@nk.ca
Subject: I found your brand recently and wanted to reach out personally.
Message-ID:
Date: Sat, 19 Sep 2026 19:22:46 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--_NmP-e6a7aecddcc43f43-Part_1"
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi friend, This is Kenneth from Lux Media Network. We built
@luxtravelandlife, a luxury Instagram community with over 400k members and
followers. I came across your business recently and wanted to get in touch
on behalf of LUX.
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see ]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.87.59.255 listed in will-spam-for-food.eu.org]
[103.87.59.255 listed in will-spam-for-food.eu.org]
[103.87.59.255 listed in will-spam-for-food.eu.org]
[103.87.59.255 listed in will-spam-for-food.eu.org]
[103.87.59.255 listed in will-spam-for-food.eu.org]
[103.87.59.255 listed in will-spam-for-food.eu.org]
[103.87.59.255 listed in will-spam-for-food.eu.org]
[103.87.59.255 listed in will-spam-for-food.eu.org]
[74.125.227.139 listed in will-spam-for-food.eu.org]
[74.125.227.139 listed in will-spam-for-food.eu.org]
[74.125.227.139 listed in will-spam-for-food.eu.org]
[74.125.227.139 listed in will-spam-for-food.eu.org]
[74.125.227.139 listed in will-spam-for-food.eu.org]
[74.125.227.139 listed in will-spam-for-food.eu.org]
[74.125.227.139 listed in will-spam-for-food.eu.org]
[74.125.227.139 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[103.87.59.255 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.87.59.255 listed in dnsbl.ahbl.org]
[103.87.59.255 listed in dnsbl.ahbl.org]
[103.87.59.255 listed in dnsbl.ahbl.org]
[103.87.59.255 listed in dnsbl.ahbl.org]
[74.125.227.139 listed in dnsbl.ahbl.org]
[74.125.227.139 listed in dnsbl.ahbl.org]
[74.125.227.139 listed in dnsbl.ahbl.org]
[74.125.227.139 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.87.59.255 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.87.59.255 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.87.59.255 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.87.59.255 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.227.139 listed in list.dnswl.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.227.139 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.227.139 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kennethstevens3167(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kennethstevens3167(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} I found your brand recently and wanted to reach out personally.
----_NmP-e6a7aecddcc43f43-Part_1
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Hi friend,
This is Kenneth from Lux Media Network. We built =
@luxtravelandlife, a luxury Instagram community with over 400k members and =
followers.
I came across your business recently and wanted to get in touch=
on behalf of LUX.
We're currently in discussions with a small group of =
brands about a new business initiative, and yours came to mind as one that =
could fit especially well.
It's slightly more nuanced than a cold email =
allows me to explain, but I think it could be very relevant to what you're =
building.
I'd love to give you the full picture and get your view on it.
Are you the right person, or is there someone else I should reach out to?
With kind regards,
Kenneth
Lux Media
@luxtravelandlife
----_NmP-e6a7aecddcc43f43-Part_1
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Hi friend,
This is Kenneth from Lux Media Network. We built =
@luxtravelandlife, a luxury Instagram community with over 400k members and =
followers.
I came across your business recently and wanted to get in=
touch on behalf of LUX.
We're currently in discussions with a small=
group of brands about a new business initiative, and yours came to mind as=
one that could fit especially well.
It's slightly more nuanced than=
a cold email allows me to explain, but I think it could be very relevant =
to what you're building.
I'd love to give you the full picture and =
get your view on it.
Are you the right person, or is there someone =
else I should reach out to?
With kind regards,
Kenneth
Lux=
Media
@luxtravelandlife
----_NmP-e6a7aecddcc43f43-Part_1--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Sep 2026 19:12:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x865h-00000000E3V-3WgL
for dave@doctor.nl2k.ab.ca;
Sat, 19 Sep 2026 19:11:37 -0600
Resent-From: The Doctor
Resent-Date: Sat, 19 Sep 2026 19:11:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from webhosting.uzcloud.uz ([185.74.7.7]:59447)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))
(envelope-from )
id 1x7xJz-00000000H6R-4AcR
for sales@nk.ca;
Sat, 19 Sep 2026 09:49:58 -0600
Received: from webhosting.uzcloud.uz (localhost.localdomain [127.0.0.1])
by webhosting.uzcloud.uz (Postfix) with ESMTP id 067A92A0C63;
Sat, 19 Sep 2026 20:47:14 +0500 (+05)
X-Spam-Flag: NO
X-Spam-Score: -1.294
X-Spam-Level:
X-Spam-Status: No, score=-1.294 tagged_above=-9999 required=3
tests=[ALL_TRUSTED=-1, BAYES_00=-1.9, DEAR_BENEFICIARY=0.001,
DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
SPF_PASS=-0.001, UNDISC_MONEY=1.805, URIBL_BLOCKED=0.001]
autolearn=no autolearn_force=no
Authentication-Results: webhosting.uzcloud.uz (amavis) (amavis);
dkim=pass (2048-bit key) header.d=garov.uz
Received: from webhosting.uzcloud.uz ([127.0.0.1])
by webhosting.uzcloud.uz (webhosting.uzcloud.uz [127.0.0.1]) (amavis, port 10024)
with ESMTP id IRu6K5j1wsHn; Sat, 19 Sep 2026 20:47:12 +0500 (+05)
Received: from webmail.garov.uz (localhost.localdomain [IPv6:::1])
by webhosting.uzcloud.uz (Postfix) with ESMTPA id 7058C2A0C5C;
Sat, 19 Sep 2026 20:46:57 +0500 (+05)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=garov.uz; s=default;
t=1789832831; bh=0DdaB1ed0Y04FQGelId8ET6Br8snoosHMSGXrBseEbQ=;
h=From:To:Subject;
b=dXwfi2BzXrUf1GKr7MJhcxkg70EupEbqVqf/8dIgDJ2yOlXfFpQ7yvbH4Y6e47a0G
c2GkQ2qhSsNMCZul6qWDNC2y4NaC+O/HSvjSBdkndZNANATICAk8bx4LFMSeuF9OBN
Kaeu/BGr05eJ9u8VWyx/WwtD4d/iHMtfMeSaFPi56tINvaC9EZz5B3SC78YmCmzo66
Aev5brcHUfQFWYnD98m22B0F9TBuGrc/w+sc9rYxpDQKvf0ZUfugMlcd+pdgCNhVsL
bYweEgeCc3HS80erhA9ENUsNWRJ8pG8wbPtSGzmJPKvVDUNPLod9LQPr0fjp8dv2K+
OKJrCrN3QP60w==
Authentication-Results: webhosting.uzcloud.uz;
spf=pass (sender IP is ::1) smtp.mailfrom=info@garov.uz smtp.helo=webmail.garov.uz
Received-SPF: pass (webhosting.uzcloud.uz: connection is authenticated)
MIME-Version: 1.0
Date: Sat, 19 Sep 2026 08:46:57 -0700
From: Jenny Cody
To: undisclosed-recipients:;
Subject: IRC /AUG13025111345/NY/WB/ Instruction for Release of Funds
Reply-To: charlesburton@internationalrescuecommittee.online
Mail-Reply-To: charlesburton@internationalrescuecommittee.online
Message-ID:
X-Sender: info@garov.uz
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 8bit
X-PPP-Message-ID:
<178983281881.3851618.11265393438311658520@webhosting.uzcloud.uz>
X-PPP-Vhost: garov.uz
X-Spam_score: 9.2
X-Spam_score_int: 92
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear Beneficiary, Following our final meeting with the
International Rescue Committee (IRC), an instruction has been concluded to
release part of your funds. For verification, you may consult the following
references:
Content analysis details: (9.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[185.74.7.7 listed in will-spam-for-food.eu.org]
[185.74.7.7 listed in will-spam-for-food.eu.org]
[185.74.7.7 listed in will-spam-for-food.eu.org]
[185.74.7.7 listed in will-spam-for-food.eu.org]
[185.74.7.7 listed in will-spam-for-food.eu.org]
[185.74.7.7 listed in will-spam-for-food.eu.org]
[185.74.7.7 listed in will-spam-for-food.eu.org]
[185.74.7.7 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[185.74.7.7 listed in dnsbl.ahbl.org]
[185.74.7.7 listed in dnsbl.ahbl.org]
[185.74.7.7 listed in dnsbl.ahbl.org]
[185.74.7.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[185.74.7.7 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[185.74.7.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[185.74.7.7 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[185.74.7.7 listed in dnsbl.ahbl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[185.74.7.7 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[185.74.7.7 listed in bl.score.senderscore.com]
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} IRC /AUG13025111345/NY/WB/ Instruction for Release of Funds
--
Dear Beneficiary,
Following our final meeting with the International Rescue Committee
(IRC), an instruction has been concluded to release part of your funds.
For verification, you may consult the following references:
International Rescue Committee – Top 10 Crises the World Cannot Ignore
(2026)
South Africa's Unemployment Crisis – Mail & Guardian, 13 August 2026
You are required to contact Mr. Charles Burton directly for further
instructions:
📧 Email: charlesburton@internationalrescuecommittee.online
Yours faithfully,
Ms. Jenny Cody
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Sep 2026 19:11:31 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x865N-00000000Dy3-3VlZ
for dave@doctor.nl2k.ab.ca;
Sat, 19 Sep 2026 19:11:17 -0600
Resent-From: The Doctor
Resent-Date: Sat, 19 Sep 2026 19:11:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 252-133.gtt-net.cz ([82.144.133.252]:40870 helo=mail.tvrdonice.cz)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))
(envelope-from )
id 1x7wA7-00000000BX0-0wzY
for doctor@nl2k.ab.ca;
Sat, 19 Sep 2026 08:35:40 -0600
Received: from webmail.tvrdonice.cz (localhost [127.0.0.1])
by mail.tvrdonice.cz (Postfix) with ESMTP id B84102249E83;
Sat, 19 Sep 2026 16:34:15 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tvrdonice.cz; s=dkim;
t=1789828456; bh=bAqSvo4X1LZ85Bb/qVsc7ailqDAJh6onk7Bz4g2xj3E=;
h=Date:From:To:Subject:Reply-To:From;
b=UpzABLfD8EQ7XQUyxCr7rz9zMNdxVwtXReCF9C8kCcsLh7QyjDb+OWh7fu9UuNQMW
faXn4V526SdMYp8vSQ4Ka6QTJXjzxNLbmpjEq2sDxx2HBGHRgLZLwAGCVfICE6HflX
lq3QZ/eiS5L9KsTkh2/LBAjuIO/BpW31OJwTW7/lbgqW3m6FW0/5IqrlVhdSPDzw4O
hMlKXp+SwpyZs+YZiSK6tvnYrAnsKWxaC52cgpcf3DpW8RvbaE90tGX3h4VYNEB+lw
7oDVe3xIcLbzZK1FvDwkl/7JLfc7Brrh9plNf0VFK9FUBazFpyPRlh6oJTZW0qNxtJ
RO+XCpvZ/SnaA==
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 8bit
Date: Sat, 19 Sep 2026 16:34:15 +0200
From: "Mr. Mahmoud Ghazi Al-Bashir."
To: undisclosed-recipients:;
Subject: INVESTMENT PARTNERSHIP
Reply-To: ghazialbashir283@gmail.com
Mail-Reply-To: ghazialbashir283@gmail.com
Message-ID: <9445f5dcaaa8a76cad644e36bbb99937@tvrdonice.cz>
X-Sender: mgab@tvrdonice.cz
User-Agent: Roundcube Webmail/1.3.8
X-Spam_score: 25.0
X-Spam_score_int: 250
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- GREETINGS. INVESTMENT PARTNERSHIP !
Content analysis details: (25.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
[82.144.133.252 listed in dnsbl.ahbl.org]
[82.144.133.252 listed in dnsbl.ahbl.org]
[82.144.133.252 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[ghazialbashir283(at)gmail.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[82.144.133.252 listed in bl.score.senderscore.com]
0.6 J_CHICKENPOX_72 BODY: 7alpha-pock-2alpha
2.5 MILLION_USD BODY: Talks about millions of dollars
2.7 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 ODD_FREEM_REPTO Has unusual reply-to header
0.0 HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.4 MONEY_NOHTML Lots of money in plain text
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} INVESTMENT PARTNERSHIP
--
GREETINGS.
INVESTMENT PARTNERSHIP !
My name is Mahmoud Ghazi Al-Bashir and I am the Son of Dr. Issam
Al-Bashir, the formal religious advisor to our formally ousted President
Omar Al-Bashir. from Sudan. We are a family from Sudan, fleeing from
Political instability in our country. We have funds to give out for
investment either on equity or loan basis.
I want to leave Sudan as soon as possible because there’s a threat to
Our life. we have USD$55.7Million (Fifty-Five Million Seven Hundred
Thousand United States Dollars to invest in your Country.so that I and
my family wouldn't be a burden to you and your family. Please, we are
real and serious people and we are ready to have a talk with you and
also meet face to face to discuss this further if you will be kind
enough to give us your attention. For your assistance, we can offer you
50% of the total investment funds.
I am contacting you to know if you can assist me to relocate as soon as
possible. The areas to be considered for the investment are as follows
Real estate, Oil & Gas, Agriculture, Health, Aviation, Tourism, Retail,
Construction, IT & Communications, Technology, Education, Energy,
Engineering, Utilities, Telecoms, Mining, Maritime, sustainable energy
and host of other profitable ventures.
Intending beneficiaries must have a business plan and show their
capability to manage huge funds. The beneficiary must be able to deliver
good and sustainable returns on investment to the investor annually. If
you are that person or establishment seeking to expand your existing
business or you have new ideas waiting for
implementation, the opportunity is here.
Please do send me your personal details which includes your telephone
number for easy communication.
If you’re interested in assisting me, please do not hesitate to reply
back to me via my email (albashirmahmoudalbashir@zohomail.com) As soon
as possible.
I will furnish you with more details once I hear from you.
Best Regards.
Mr. Mahmoud Ghazi Al-Bashir.
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 20 Sep 2026 05:28:31 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8FiT-000000000aQ-1FZ7
for dave@doctor.nl2k.ab.ca;
Sun, 20 Sep 2026 05:28:17 -0600
Resent-From: The Doctor
Resent-Date: Sun, 20 Sep 2026 05:28:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [149.104.79.23] (port=46089 helo=mta.vorbereitung-ruhestand.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x8Civ-000000004SF-1sww
for sales@nk.ca;
Sun, 20 Sep 2026 02:16:42 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=pmta1789811375;
d=vorbereitung-ruhestand.com;
h=Content-Type:MIME-Version:Subject:From:To:Date:Message-ID:Reply-To:
List-Unsubscribe:List-ID:List-Post:List-Owner:List-Archive:List-Help;
i=no-reply@vorbereitung-ruhestand.com;
bh=od1wdDW6y6ddZ74C6dLuaFwxmugINNkR1jN2Ki4ZhZM=;
b=djsd/tJNLmqWCjFZqRNHQOEZ6CrNsfDp7kp5hlcvckH849r/Sr1ei7wC93HrwBkJfkH89PHiHg6D
oXArqFDCpO4RrZwnR+OFbvdNXdT01R1L8YeFPOh2NpBkBM+/ghLskM9+VlssjEYo5W74UztM+JQw
KvyWnLV13fcdHxh4FFw=
Content-Type: multipart/alternative;
boundary="===============4867318697822099342=="
MIME-Version: 1.0
Subject: =?utf-8?b?Q+KBrOKBrOKBrOKArOKArOKArOKArOKArOKBruKBruKBrOKBrOKBrA==?=
=?utf-8?b?4oCs4oCs4oCs4oCs4oCs4oGu4oGuYeKBrOKBrOKBrOKArOKArOKArOKArOKArA==?=
=?utf-8?b?4oGu4oGubmHigazigazigazigKzigKzigKzigKzigKziga7iga5kYVDigazigaw=?=
=?utf-8?b?4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGub3N04oGs4oGs4oGs4oCs4oCs4oCs4oCs?=
=?utf-8?b?4oCs4oGu4oGu4oGs4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGuOiBVcOKBrA==?=
=?utf-8?b?4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGu4oGs4oGs4oGs4oCs4oCs4oCs4oCs?=
=?utf-8?b?4oCs4oGu4oGuZGHigazigazigazigKzigKzigKzigKzigKziga7iga50ZSBvbiB5?=
=?utf-8?b?b+KBrOKBrOKBrOKArOKArOKArOKArOKArOKBruKBrnVyIHNo4oGs4oGs4oGs4oCs?=
=?utf-8?b?4oCs4oCs4oCs4oCs4oGu4oGuaXBt4oGs4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu?=
=?utf-8?b?4oGuZW504oGs4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGu4oGs4oGs4oGs4oCs?=
=?utf-8?b?4oCs4oCs4oCs4oCs4oGu4oGu4oGs4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGu?=
=?utf-8?b?4oGs4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGuIQ==?=
From: Noreply
To: sales@nk.ca
Date: Sat, 19 Sep 2026 13:22:51 +0000
Message-ID:
<178982417114.15427.1108616627936699913@vorbereitung-ruhestand.com>
X-Virtual-MTA: pmta-pool
X-Mailer-RecptId: c51d9fa2329d41b2
Reply-To: support@vorbereitung-ruhestand.com
List-Unsubscribe: =?utf-8?q?=3Cmailto=3Aunsubscribe=40vorbereitung-ruhestand?=
=?utf-8?q?=2Ecom=3Fsubject=3Dunsubscribe-c51d9fa2329d41b2=3E=2C_=3Chttps=3A?=
=?utf-8?q?//vorbereitung-ruhestand=2Ecom/unsubscribe=3Fid=3Dc51d9fa2329d41b?=
=?utf-8?q?2=26e=3Dc2FsZXNAbmsuY2E=3E?=
List-Unsubscribe-Post: List-Unsubscribe=One-Click
List-ID: main.vorbereitung-ruhestand.com
List-Post: NO
Feedback-ID: main:vorbereitung-ruhestand.com
X-Report-Abuse: Please report abuse here: abuse@vorbereitung-ruhestand.com
X-Complaints-To: abuse@vorbereitung-ruhestand.com
List-Owner:
List-Archive:
List-Help:
Organization: PayPal
Content-Language: en
X-Auto-Response-Suppress: OOF, AutoReply
Importance: normal
X-Spam_score: 17.4
X-Spam_score_int: 174
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: CanadaPost – Update about your shipment | Track & trace
CA2609186IH87KEY Dear customer,
Content analysis details: (17.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[149.104.79.23 listed in will-spam-for-food.eu.org]
[149.104.79.23 listed in will-spam-for-food.eu.org]
[149.104.79.23 listed in will-spam-for-food.eu.org]
[149.104.79.23 listed in will-spam-for-food.eu.org]
[149.104.79.23 listed in will-spam-for-food.eu.org]
[149.104.79.23 listed in will-spam-for-food.eu.org]
[149.104.79.23 listed in will-spam-for-food.eu.org]
[149.104.79.23 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[149.104.79.23 listed in dnsbl.ahbl.org]
[149.104.79.23 listed in dnsbl.ahbl.org]
[149.104.79.23 listed in dnsbl.ahbl.org]
[149.104.79.23 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[149.104.79.23 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[149.104.79.23 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[149.104.79.23 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[149.104.79.23 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
15 GR_DOMAIN_EMARKE3 Header from spammer tool signature (emarke)
0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[149.104.79.23 listed in bl.score.senderscore.com]
0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted
Colors in HTML
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
manager
Subject: {SPAM?} =?utf-8?b?Q+KBrOKBrOKBrOKArOKArOKArOKArOKArOKBruKBruKBrOKBrOKBrA==?=
=?utf-8?b?4oCs4oCs4oCs4oCs4oCs4oGu4oGuYeKBrOKBrOKBrOKArOKArOKArOKArOKArA==?=
=?utf-8?b?4oGu4oGubmHigazigazigazigKzigKzigKzigKzigKziga7iga5kYVDigazigaw=?=
=?utf-8?b?4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGub3N04oGs4oGs4oGs4oCs4oCs4oCs4oCs?=
=?utf-8?b?4oCs4oGu4oGu4oGs4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGuOiBVcOKBrA==?=
=?utf-8?b?4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGu4oGs4oGs4oGs4oCs4oCs4oCs4oCs?=
=?utf-8?b?4oCs4oGu4oGuZGHigazigazigazigKzigKzigKzigKzigKziga7iga50ZSBvbiB5?=
=?utf-8?b?b+KBrOKBrOKBrOKArOKArOKArOKArOKArOKBruKBrnVyIHNo4oGs4oGs4oGs4oCs?=
=?utf-8?b?4oCs4oCs4oCs4oCs4oGu4oGuaXBt4oGs4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu?=
=?utf-8?b?4oGuZW504oGs4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGu4oGs4oGs4oGs4oCs?=
=?utf-8?b?4oCs4oCs4oCs4oCs4oGu4oGu4oGs4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGu?=
=?utf-8?b?4oGs4oGs4oGs4oCs4oCs4oCs4oCs4oCs4oGu4oGuIQ==?=
CanadaPost
CanadaPost – Update about your shipment | Track & trace
CA2609186IH87KEY
Dear customer,
Your package has arrived and has passed customs control. The status is now: Customs fees outstanding.
One more step is required to release your package for delivery. Click the button below to view all the details of your shipment.
Outstanding customs charges
Track & trace CA2609186IH87KEY
Status Outstanding customs duties
Click the button below for the details of your shipment:
View shipment
Important information:
Timely action prevents delivery delays
The package is fully insured and traceable.
Avoid delays or returns
Yours sincerely
Canada Post
Verstuur je pakketten met de nr.1 van Nederland
CanadaPost
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@nk.ca
Delivery-date: Sat, 19 Sep 2026 12:39:00 -0600
Received: from mail-pz2-f43.google.com ([74.125.228.43]:34574)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from )
id 1x7zxa-000000006Si-22YF
for dave@nk.ca;
Sat, 19 Sep 2026 12:38:59 -0600
Received: by mail-pz2-f43.google.com with SMTP id 41be03b00d2f7-cc4aa0f1a94so1250609a12.2
for ; Sat, 19 Sep 2026 11:38:03 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1789843078; cv=none;
d=google.com; s=arc-20260327;
b=dNVEWtV+N8UKJqZ50uyge0/QBoaFwn4wk5N5DHorIrJamZxrXSorpmDre9crx6pcoZ
R7Km9MSa2G27+Zb+fttyYjDA0U5Dyk6Cn3X/RvZcE4GEUrqP915/hDjjLuSKvGs0qoqR
I+Bt0V1AfY6V1DCG6HpZY/klGIVGZgfL691XXclYpWZ9J5rFR0WvWYUzxEfpbc3uOmgS
+P0/0Dl6PqmGEWnGVvcayyA0Idt5ZV8/vWq50pGWCd7EdLiBuUXBJ3KX4jXq+KKgovw8
l3tARXkPCzlFNeaZH7uBLo6Pdxj0wUPty41g4ZYO+RlXU+oCAoIT2hNWYXekqBu5w4pt
pgCQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=2zwwKuTOQgAe09+9O3Fh8jrJc8dG6EncbUBfifFjDhw=;
fh=zVw/Lxt0RvGGX9QXDbqqruV2nHBfhGMi4rUjOAShMwI=;
b=Xemxj41U+VEX5ekxVVd70ax8imhVDZQvaL4Kq+pf2fUFB6eYXFKDotQOTw46XDbAcb
CHFM/642yxDeudkoCJ1CynB2WptXBoBP2xeBAG5D7Q7lv88MwPWdj4jXqYoYyZPaWFJu
4OlmrR6Grz5QGFq97ti8gWQyJmKyhurMWM6Lu5C0m+IwJXzWZBLZcUora9ZEDRue/0rJ
iMzlHphNogDsL9nETekrZxRAjlK/S6jNEkv4AsHNa4TjIn0k6Sc+/sU3Hj9N7yY/tGaN
ZpQdplyK9gNjq87Yi3uDnlXlWo9CPESbjFpaRAIAez84C//QZ9w7Wi4us1h96j2a/ttd
PBiQ==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1789843078; x=1790447878; darn=nk.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=2zwwKuTOQgAe09+9O3Fh8jrJc8dG6EncbUBfifFjDhw=;
b=MpMUqHs6wq/TuzGsy3atGYhOUemqPPpmGSDX1QkwqJ2m0yIgWpj+w7sOgb1XbmbUHv
vL0/otVWSeXMxsTkTUT6QTep0TPru4fg/Nu3SbLw2aErr/5JpogZJ2pSGaGvtBsNZK/8
IKZ6ba3Qt8YdXW8D/nXPkFGd3NBigWdmqrgZlxsJOLkhaiZU7u9IuJm249uitHF5i10/
CbPcdyvMgTeXFY26h3zIzULijJObiL0gW8Nsj+c84zpM4Q2KSxn+Y8AS0dy3QLrLqcET
LnBiq2hBuSldSmAD74LTrTcezPZRM4WI7XSQF78AKjyOycN7LniLvCJlcCYdDnu1W0l3
oZTw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789843078; x=1790447878;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=2zwwKuTOQgAe09+9O3Fh8jrJc8dG6EncbUBfifFjDhw=;
b=XCQaf1wNhWfgsWYk6Yfk6G+iOtTUVv06AoHmCwgS1fdosk0rgsAUEcoLtt2DXzUjOX
mLp1gPgG6v/N/L4Noy6ZdLLhmrMVxEcjM1mP/oURoSAkHrh23rZ2Qz2GTIM9JWLjSXqm
1Egnhsxyc1438tG5zIIhoFIyKt44kSLNI8IxBK6ZJoYbcCto7cXMMiglWlPY2L6KiaoS
5GXPPYqhN0wiOJUzSNuG7aayQx3/ViEU9DTWW9w2OPOAzfwqaichXQ0YIlgyyIAv4aR8
ipcNUxdaDQGtn9q1Hl02b16+k2FB9A+RXjkxjwKWqwiRLqrrlfr9gCvrFlPeh4W3B8eq
1WFA==
X-Forwarded-Encrypted: i=1; AKwUvBy5DHOVC9y5WTzhAvAFMOXk6Hvyda4WaK1S2W/tdZq8sNOvYk/v4OEw6oVz9gA5tDj9HN98@nk.ca
X-Gm-Message-State: AFuF++kzFRmC9dL908Ec3SuL2JMVgJhmc8BBzrbZAFZN7O48Tjq3D2xb
STikF9bFWZIL0ECcFeb6bVmYUbzY/FUhtFagDzxX/dqmORPODzFYz371SLX8kxJ2xE2a80jXBiL
iXglDyYsXmEJdGYPHhT0XNmqfyz0VUfYDabidduA=
X-Gm-Gg: AYBFou35IT1GUZui3e8rTj62K9eUC6n2zpq2PAG3aeeHI89NKJsrN/JLt42ZnYvBe9F
jzCN1qi45+puByL60NE0cVnnrG51yasVffH2tWUtsW+fMjW+KbNSnGkbrGXT1cGyD9XFht5p+RM
rcBFB4hDZjw4MxgK3KV/ZhLVBZpFWOx3TGnc2GTq2d9LY9Ac8poKnuFDHrSOxtYH+QGGDRlPi4s
VvTXgLK0ryZYJPDjaIRW7N7Dnq47vU7B4GNYNp8yjLbb7AXdkeS9xyC2DIIBWfA6f64AnI1Uiz0
MaX+sHNy8uBKja7wsFpx/uCNSM10oxVFSpal/4eBFCUxQC7k1zOtMNJmdKcLE9UhDr5EnAGcCCN
azgHxpgYXc32ioSNaK8N9waA=
X-Received: by 2002:a05:690e:4881:20b0:671:3928:273 with SMTP id
956f58d0204a3-6717fccefedmr1159523d50.43.1789810541993; Sat, 19 Sep 2026
02:35:41 -0700 (PDT)
MIME-Version: 1.0
From: "relieffunde@outlook.com"
Date: Sat, 19 Sep 2026 15:05:31 +0530
X-Gm-Features: AcwNN1U-G7T0x4RIaL652ZW39yTxc0sYhr-fpw4DoGersvvxzksQWjM9SFsUWH4
Message-ID:
Subject: UN HUMANITARIAN AID PROGRAM 2026
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000092239c065bd2bd0a"
Bcc: dave@nk.ca
X-Spam_score: 21.6
X-Spam_score_int: 216
X-Spam_bar: +++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR
UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:
Content analysis details: (21.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.228.43 listed in will-spam-for-food.eu.org]
[74.125.228.43 listed in will-spam-for-food.eu.org]
[74.125.228.43 listed in will-spam-for-food.eu.org]
[74.125.228.43 listed in will-spam-for-food.eu.org]
[74.125.228.43 listed in will-spam-for-food.eu.org]
[74.125.228.43 listed in will-spam-for-food.eu.org]
[74.125.228.43 listed in will-spam-for-food.eu.org]
[74.125.228.43 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.228.43 listed in dnsbl.ahbl.org]
[74.125.228.43 listed in dnsbl.ahbl.org]
[74.125.228.43 listed in dnsbl.ahbl.org]
[74.125.228.43 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.228.43 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.228.43 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.228.43 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.228.43 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kouamekouakouemmanuel49(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kouamekouakouemmanuel49(at)gmail.com]
1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
1.0 FREEMAIL_REPLY From and body contain different freemails
3.5 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail
account
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.228.43 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.228.43 listed in wl.mailspike.net]
Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026
--00000000000092239c065bd2bd0a
Content-Type: text/plain; charset="UTF-8"
DEAR SIR/ MADAM,
YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO
CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS:
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:
--00000000000092239c065bd2bd0a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
DEAR SIR=
/ MADAM,
ail=3D"gmail_signature">
=C2=A0=C2=A0
YOUR EMAIL HA=
S BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR W=
INNING PRIZE, EMAIL US.
=3D"_blank">relieffunde@outlook.com
YOUR FULL NAME:
ADDRESS: =
NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0=
--00000000000092239c065bd2bd0a--