Web/SEO/App spam from Microsoft Outlook Part 2



--_000_SJ2PR02MB9823F92337387236D79F2D74AD222SJ2PR02MB9823namp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








xt-indent: 0px; line-height: 18.4px; background-color: rgb(255, 255, 255); =

margin: 0in 0px 10pt; font-family: Calibri, Helvetica, sans-serif; font-siz=

e: 12pt; color: rgb(0, 0, 0);">

Hi,



xt-indent: 0px; line-height: 18.4px; background-color: rgb(255, 255, 255); =

margin: 0in 0px 10pt; font-family: Calibri, Helvetica, sans-serif; font-siz=

e: 12pt; color: rgb(0, 0, 0);">

I recently visited your website and was impressed with its design and overa=

ll presentation. It looks professional and well-structured.



xt-indent: 0px; line-height: 18.4px; background-color: rgb(255, 255, 255); =

margin: 0in 0px 10pt; font-family: Calibri, Helvetica, sans-serif; font-siz=

e: 12pt; color: rgb(0, 0, 0);">

However, I noticed that it=92s not currently ranking well on Google and oth=

er major search engines, which may be limiting your online visibility and p=

otential leads.



xt-indent: 0px; line-height: 18.4px; background-color: rgb(255, 255, 255); =

margin: 0in 0px 10pt; font-family: Calibri, Helvetica, sans-serif; font-siz=

e: 12pt; color: rgb(0, 0, 0);">

My team specializes in helping businesses improve their search engine ranki=

ngs and online presence through ethical, long-term SEO strategies. We focus=

on sustainable growth rather than short-term tricks.



xt-indent: 0px; line-height: 18.4px; background-color: rgb(255, 255, 255); =

margin: 0in 0px 10pt; font-family: Calibri, Helvetica, sans-serif; font-siz=

e: 12pt; color: rgb(0, 0, 0);">

If you=92re interested, I=92d be happy to share a customized proposal and p=

ricing details for your website.



xt-indent: 0px; line-height: 18.4px; background-color: rgb(255, 255, 255); =

margin: 0in 0px 10pt; font-family: Calibri, Helvetica, sans-serif; font-siz=

e: 12pt; color: rgb(0, 0, 0);">

Looking forward to your response.



xt-indent: 0px; line-height: 18.4px; background-color: rgb(255, 255, 255); =

margin: 0in 0px 10pt; font-family: Calibri, Helvetica, sans-serif; font-siz=

e: 12pt; color: rgb(0, 0, 0);">

Best regards,


Rani



s-serif; font-size: 12pt; color: rgb(0, 0, 0);">












--_000_SJ2PR02MB9823F92337387236D79F2D74AD222SJ2PR02MB9823namp_--

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 07:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD03x-00000000C5Z-3uTq

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 07:13:49 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 07:13:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westcentralusazolkn19010042.outbound.protection.outlook.com ([52.103.7.42]:40425 helo=CY7PR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCzsw-0000000050Z-2T8M

for sales@nk.ca;

Wed, 15 Apr 2026 07:02:37 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ufrVE5nnEieJFWAa8/mzUfN8304u9kmD0Pi1fM/AELGu4J5GcQT5lfOlKZx956/4hs1YDpi/dXeKcHm14A1jGGzyDRFmdlzmGelQCDBlnO/7950au2OujoOacuHl09PyRpdX7+pwdfBld21C4mIrGVRsClWWSjg9LIbN6JIbDBfnhfXG8zQYGBMTQxn6K2/+xD9YgH62L7oT/2itOokDHXvePWpESC8/tATEkeqC637KwP25HWCycsFacTOYChMPqM3fNCMUI0SEDycbaiRRJII2+flxdeoXN0W/54pVOirXMmwXpqWfGpUE4STMD4CgDUT0ILzNUOaJ7LewiNtz6g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=1HJMnGUaky+YW4WaD4M9nVUYBMsHLVtBM3bCgV6Qurs=;

b=rkSltXBKOIr86lUPmvTqLp87iwYsJidSa8rJEaMBTdKTbvVNzUvDGxYuicMKeFRNQxH/6DRfNzmD0w7En1tFioDipERcP8ba7K6ZOA3+cAL0iONj33yaZ1yipfR58Wl+AeYzAxpGIeN6igW1ZbjP6i8q8lmiyBmxfV/7rB6J1MWoCMIZrj7Qzez0iOjBK7baaxvac1fAQEwnpVYiMpaRESIgBVQAp4qldobr0zGw4gKfSVLmtcz5W3CdM8S46h7af6V21cGytVe0ZRVKr4ZdxJRuNkvwgjAk53sUW12wd+VfsVBLmmQ+KFwMLD07edtT8Sa5xGrV0pCEHbsGnhFN8w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=1HJMnGUaky+YW4WaD4M9nVUYBMsHLVtBM3bCgV6Qurs=;

b=rA77LI4lK3GoYtfiwYDw1aU2nbzQTKn9DHjFHpbbozlcSVRNYjbugzJcDZ6QC8knv88BbDxwzumtcuGSJsoBMPMGeqK0DokIobmF0xVUPn6tzAJyKRkJazwiHNN9Etx3CKHS76LSIjtvJIXsXUEckqEGmkID1ED9JYFJ3cq1UEp1BMxyxc2uyWjqKuKv4+UPJwKgNLpJs2uIonKmmMl1kj0YoiEreNcvt7SOofVrGdy4kIicil6ENJtCbJn15iYyq5qfmCIBL13SHxJYQGulSM9x9/nv+iP4LksQswrkeHI7quIepPULZ6TXHcKi0ED/047E5hZ8D/U5qtpEFc4fJQ==

Received: from SJ2PR02MB9823.namprd02.prod.outlook.com (2603:10b6:a03:538::6)

by BL0PR02MB6499.namprd02.prod.outlook.com (2603:10b6:208:1c5::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9818.21; Wed, 15 Apr

2026 13:01:00 +0000

Received: from SJ2PR02MB9823.namprd02.prod.outlook.com

([fe80::53db:b5f6:3d10:8212]) by SJ2PR02MB9823.namprd02.prod.outlook.com

([fe80::53db:b5f6:3d10:8212%5]) with mapi id 15.20.9769.046; Wed, 15 Apr 2026

13:01:00 +0000

From: Rani Patel

Subject: SEO Audit & Growth Proposal

Thread-Topic: SEO Audit & Growth Proposal

Thread-Index: AQHczNfbqTwstwpLcUSOQdMl2v1HwA==

Date: Wed, 15 Apr 2026 13:00:59 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SJ2PR02MB9823:EE_|BL0PR02MB6499:EE_

x-ms-office365-filtering-correlation-id: b2a6ad67-921a-480e-8211-08de9aef0a21

x-microsoft-antispam:

BCL:0;ARA:14566002|20031999003|39105399006|31061999003|22091999003|24121999003|37011999003|461199028|15080799012|15030799006|19110799012|24071999003|8060799015|8062599012|3412199025|440099028|102099032|35041999009|40105399003|43065399003|31055399003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?VCXIRgWV/KQkJzpYJPkgZhz4LixQ5B0/uRvkbKcCk55mjpnM4CiU/1Y3?=

=?Windows-1252?Q?pEkcXy/knyvNgYcCwZpSc23GFhDXALEX/nti/WL4bj5BpSIBqx+tPmU1?=

=?Windows-1252?Q?hiRRp/AfymO0lL5ih7OmPFeeLi+O1Lz6EZ8HiBvVL7AwOw/anG0DXfOo?=

=?Windows-1252?Q?sljarONj2OhUWxE8hXnPFOmnzSp0P3FCnc+EI++79U1+6PrsyN+yAg7L?=

=?Windows-1252?Q?XkOVM0hk1SKlClofM3edkE0JwqJXXp8VJi+qGddH8jFt6LpG6qAiiMmL?=

=?Windows-1252?Q?afJtnu0p0dgK5lPw4QBXuQouk+jnPBtvyHDNppmE+tMHWwdS/X324+zr?=

=?Windows-1252?Q?Cw+/W9PGlBnRcZBFg7HsuuyQJ6llxz2m3ogQ7MVQyrb/xSx4RSQF3839?=

=?Windows-1252?Q?w+xpcU/CbPSK7rKeK8YzCKUfN5mxw8gGLXnxNk9PNksAB4WCLi+H7gr/?=

=?Windows-1252?Q?e7e3atTK9Gv4AcahAumt9mmAZE279v3tGZhLoCY0tetWeL9dm5/Fs/Fa?=

=?Windows-1252?Q?282rTbKMwXFx+Jq9cRPJhkdmRLPL8Vsh2al+q0qcQTOcP68BsXTj2I1X?=

=?Windows-1252?Q?8FAYZPLB/Oim/Pw6K9trVAYoTCgVIDg+GRxLoAgIgRl4EFbwTKUC8bX3?=

=?Windows-1252?Q?GHyS9HisRxYFXhxfV9m15Doc3UiAs2NJL8VmZ6TaziyMWvoRIs1h+gN8?=

=?Windows-1252?Q?FNtizmuh64JCi1A1PeY+e7CGUZATZo1vorY3FLr7rZw34q07oalvBiW3?=

=?Windows-1252?Q?gVNluIs3xjxvRP64KpcDQqUjtgdJP35LYYOmm9j31WVYkIqfNRHFRQU8?=

=?Windows-1252?Q?6GxKY/BWGkdZ9Y0zs6CL6G0qo2g7eybLkeYZI0meyqvENcBcoPJKb2y1?=

=?Windows-1252?Q?kWNSSk2XK7xCgTz7IfXLw48R51wI0E5fHok9WokP9sbKvaeCR6sxWwkb?=

=?Windows-1252?Q?XmL06eiX5aQ653yazZCOb/gACnsH5NkOke02gIq32dbHIsg++6D1mEkV?=

=?Windows-1252?Q?g0NpZWAS8xevaGldPUaDqLjgAFRzegLCdGtMGAObz+3fBajL2kZK/F31?=

=?Windows-1252?Q?ym0aBZQynpACR4A1liZ8wGRycfPUad9EiDRtyx1CvdSNHGau7iyunqGn?=

=?Windows-1252?Q?FHxq6bsgL2q+2Oi0UsMk9xpjOh+mlQxZIaz+RxtFKSJeuPeT0OrH1UM7?=

=?Windows-1252?Q?XihNYc7sYL6pjijIE4PFt7GIM1DOUFziQtatH7ShyUjaEITDTaBZaU3u?=

=?Windows-1252?Q?GaQNzboOsXyi6vaGRxmpWmLZK6KK5FQ2rN+wApbw?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?JPFeopMA+Xz5CzgJuN2hDLO6ZTQYFA1JXxDvbbHkn24NoLXOpew4YLXb?=

=?Windows-1252?Q?N1leXQnUOgs0jbEYZYvCbPrXcY0gGtLNzGm1nmgcBN6bXe++0ARnBn/6?=

=?Windows-1252?Q?r3jLUJD39bxLfp91NEipAz1UW4BA88xqsBctnRC9gofl6iFA6etsDcGX?=

=?Windows-1252?Q?SZagVytxtsrIYi78sly6cEfmnfXpUSXzLXV55lZr4jOVVTAspDdGTQFA?=

=?Windows-1252?Q?bMj6WWleJw2WIO7Sb7z6LHu5ZnnNOKE6zPiSnrf9ucNmi9n5SLKEGCND?=

=?Windows-1252?Q?NhPdhP8Utj4z5uD684ZE2c2/cjjlmS0UeItINjVbpP9bSlgmS+KN3vV0?=

=?Windows-1252?Q?BJEGquaTMoG2MDrdNYWUvpZMnNlHtYKsXkV3jEoXAmiwYC5zeLJkpqZA?=

=?Windows-1252?Q?faHJ8KmlKZV+FtMa5n4OrvmfahaiJRPl+opfTdRys45L08t2Y4pbvSfI?=

=?Windows-1252?Q?UKYSxGmY2Z4LGzMcGYhEsJHcF9OHyEP9jpawHi4wxLL/lQ4ZSPK7XMaY?=

=?Windows-1252?Q?3BRdDk1G4y6N5hrHBHe38zgdyd1JAxAs2rbGmkrmBGCrZifRhafxQVOg?=

=?Windows-1252?Q?/NBkgnZQoLNxQpWnxsW+bvUkVnwmij4YA8QcinMSMUIRV5+0K5bkZeXE?=

=?Windows-1252?Q?CR8UoLT5SpMg+CPrtnyZBporf3vwCGnLgRgM9Iy/aPeVVMUIpuvXwH7A?=

=?Windows-1252?Q?+O7MPvq+j8Mfhyb+yyC04Zth5YP/Ybhnl5WL7ihfMhI+tRmNyGVi7cOZ?=

=?Windows-1252?Q?wekBn9kzcs/9DdrL7w6MZzbqIltBovtK8DMEU8ExzpZpWLtj11KJhFhZ?=

=?Windows-1252?Q?Nff8PjIJmVsvn5PS1AxzoNyHAgGHfRU3D9WH3aw3qLEtSczKaWkVXjM6?=

=?Windows-1252?Q?bWniW+8HWbhuqDL92BrvWmbBSxktXuyRvbG8Q0oRj7moe8nrwrHtvqum?=

=?Windows-1252?Q?SIs6WF/ogFINlNDLyLL3vonyUlFwhOiTCBPFEF+XkAzVkl8c5XCO1fkk?=

=?Windows-1252?Q?S7CFqLi9yLH18dR5R0vlIalg62ckMSdNN1aKByeqKQkGiiaHBDyU3cAV?=

=?Windows-1252?Q?odmvcnjHSa9I6Gb2viNMvPq6A1LQw/Of+o4GbehlqLRlN1U0+CbXMcrm?=

=?Windows-1252?Q?nnEXPqXr4QE2VVk2ZthcZ1ZsfPwjiCk4o+BOJNwbGi90jrQQiFnxzT/X?=

=?Windows-1252?Q?s3jmO3WzhEQ3b3B72soT1BRtyolr13kJuel1ypsDTTmVnCIeyU2NuOnX?=

=?Windows-1252?Q?9Vy4u8lrXf3//U2TZkmbvytc1kbJJsQXo2byvujogGnI/jSdmqNoQqpu?=

=?Windows-1252?Q?UzVzOshMVEf7CtUEeBgVapaPfDttfCeO+Rz28YWBFfSdyrZCnOBS3wqa?=

=?Windows-1252?Q?RN5JyWe5Mpz7n/0b3Nlt6cmdZanzka2J0U30kddXUL5vmEwVtZmJ+qtD?=

=?Windows-1252?Q?m8fNkgkbAWJlA7a2u22e1YfNKykiDvxgi4RvUon/4oIx4xpHbmGt0PZh?=

=?Windows-1252?Q?TuJ8hNhnVy6O74WNoV8+z61Fg2w9V6R7u2IBd1fy/mwOPtZaTYOzgbwe?=

=?Windows-1252?Q?laprj0G1JEPhk2VI?=

Content-Type: multipart/alternative;

boundary="_000_SJ2PR02MB9823F92337387236D79F2D74AD222SJ2PR02MB9823namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SJ2PR02MB9823.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: b2a6ad67-921a-480e-8211-08de9aef0a21

X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Apr 2026 13:00:59.0651

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR02MB6499



--_000_SJ2PR02MB9823F92337387236D79F2D74AD222SJ2PR02MB9823namp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

I recently visited your website and was impressed with its design and overa=

ll presentation. It looks professional and well-structured.

However, I noticed that it=92s not currently ranking well on Google and oth=

er major search engines, which may be limiting your online visibility and p=

otential leads.

My team specializes in helping businesses improve their search engine ranki=

ngs and online presence through ethical, long-term SEO strategies. We focus=

on sustainable growth rather than short-term tricks.

If you=92re interested, I=92d be happy to share a customized proposal and p=

ricing details for your website.

Looking forward to your response.

Best regards,

Rani



French language funds spam from Google Gmail Part 2



Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.82.65 listed in dnsbl.ahbl.org]

[74.125.82.65 listed in dnsbl.ahbl.org]

[74.125.82.65 listed in dnsbl.ahbl.org]

[74.125.82.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.82.65 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.82.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.82.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.82.65 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.65 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[74.125.82.65 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[74.125.82.65 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[allar.tankl(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[daraerreira3679(at)gmail.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[74.125.82.65 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.65 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.65 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.82.65 listed in will-spam-for-food.eu.org]

[74.125.82.65 listed in will-spam-for-food.eu.org]

[74.125.82.65 listed in will-spam-for-food.eu.org]

[74.125.82.65 listed in will-spam-for-food.eu.org]

[74.125.82.65 listed in will-spam-for-food.eu.org]

[74.125.82.65 listed in will-spam-for-food.eu.org]

[74.125.82.65 listed in will-spam-for-food.eu.org]

[74.125.82.65 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} =?UTF-8?Q?D=C3=89BLOCAGE_DES_FONDS_DE_SUBVENTION?=



--0000000000002a6d0e064f7f38f8

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



BANQUE EUROP=C3=89ENNE D'INVESTISSEMENT



98-100 BOULEVARD KONRAD ADENAUER L-2950 LUXEMBOURG



LUXEMBOURG



Cher b=C3=A9n=C3=A9ficiaire, je vous =C3=A9cris au nom de la Banque Europ=

=C3=A9enne

d'Investissement. Vos coordonn=C3=A9es nous ont =C3=A9t=C3=A9 transmises en=

vue de

l'attribution d'une subvention de 7 millions de dollars am=C3=A9ricains.



Pour plus d'informations et pour le versement de cette subvention, veuillez

contacter Mme Nadia Calvi=C3=B1o, pr=C3=A9sidente de la Banque europ=C3=A9e=

nne

d'investissement, =C3=A0 l'adresse courriel ci-dessous :



nadiamc0@outlook.com



Veuillez lui communiquer le code suivant : WBF/01/2025.



Allar Tankler



Directeur des communications BEI



--0000000000002a6d0e064f7f38f8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



BANQUE EUROP=C3=89ENNE D'INVESTISSEMENT

98-100 =

BOULEVARD KONRAD ADENAUER L-2950 LUXEMBOURG

LUXEMBOURG

Cher b=

=C3=A9n=C3=A9ficiaire, je vous =C3=A9cris au nom de la Banque Europ=C3=A9en=

ne d'Investissement. Vos coordonn=C3=A9es nous ont =C3=A9t=C3=A9 transm=

ises en vue de l'attribution d'une subvention de 7 millions de doll=

ars am=C3=A9ricains.

Pour plus d'informations et pour le verseme=

nt de cette subvention, veuillez contacter Mme Nadia Calvi=C3=B1o, pr=C3=A9=

sidente de la Banque europ=C3=A9enne d'investissement, =C3=A0 l'adr=

esse courriel ci-dessous=C2=A0:


om">nadiamc0@outlook.com


Veuillez lui communiquer le code suivan=

t=C2=A0: WBF/01/2025.

Allar Tankler

Directeur des communicati=

ons BEI




--0000000000002a6d0e064f7f38f8--

French language funds spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 07:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD03r-00000000Bnj-3xxg

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 07:13:43 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 07:13:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f65.google.com ([74.125.82.65]:40025)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCzmV-000000004j8-2yqT

for root@mail.nl2k.ab.ca;

Wed, 15 Apr 2026 06:55:58 -0600

Received: by mail-dl1-f65.google.com with SMTP id a92af1059eb24-12714f01940so346956c88.0

for ; Wed, 15 Apr 2026 05:54:49 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1776257683; cv=none;

d=google.com; s=arc-20240605;

b=K5tMCEo0zmr3XwBfrrMMyydFoh1+X2cAt6wQhrQpcfcQRI509QeO+1JYYCM6X7QWPD

DoyLJR6a0tXx3qGpcW0ajRevG+g8lpmM9IkR45xEfK4PHdXDi1PuVIVGJeKj8BTtdzav

nJNl3mtSP87Qzs0VuJKSk5KMcOLLvWJ6GLH/xzdtLm5IIuv5kIiHsJxWpJcD2vu4U1pb

x62aFV9mJaG36jpBZkHPoAHsJ4KR1nBnNj9/LzoS1B7kqnJlRZEgfjcLkuyf5jq8Prhg

Qpdt3I+f3ezt/v0KIlq3sMHNs4isEFmlx0WXuv5UxYr48fyufaY7l+iUu22fXFsiDUC7

Xgow==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=KvO4RWAlUfKVgFzBovZSyT99LI+qVY3zy4TbHUYPe5I=;

fh=sG3gH5uOIX5GaEEC4IxYcZ52PdNwVXu+Oxa6IXo2VPk=;

b=bPDHp03au2Ew+xx8s9FgtJ7+GXFWt/a5T92NcNjG/bAYGj5RE8nikTluPybGi2faFa

Q7by/iDmXh/D3Ox1faOJaGmCpDimTG7zFERVaOV5J1C6JZ7iRQMssRGPR6HvIsyq46Ja

TNyD6d4vGnUxfMHtz0QHn4xRHWPSdQ6UT807++TqZw0UlBO6/aZRWW6BbdyQuj4oeCtR

gZY6Hlk7f7fvSLDLKsTx/LrIP/fFMVWwKZ9K5PzBMuW0f25f+sZxnckuACN/aOh+F1z+

8gkWu+seUcN9ZV1pk19tdaOwC3RuDDPj9b+GqwQdl7sjHurgeFycAzYDHUxikykAKsvt

q7hA==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1776257683; x=1776862483; darn=mail.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=KvO4RWAlUfKVgFzBovZSyT99LI+qVY3zy4TbHUYPe5I=;

b=QV68J2+6/DGwmYX0A6PVW8fUhWNVUjk5w28Aw3hvdwhv1kzNdEFMnCezi8g+1Kw3mR

EfUx2LWbaumimZSQOHRWEa4Uwu67Tzh2Ox4Za2Lj0bOiCCEA8Dui5mbC0A1ClvojLDKf

IcEa+ohVEu6EofNAiBJ2MmFc2QMYJ4jIktITSABPxq4wL06d0aCWO5eQUzQnwT7OCZWl

7bCkeaEar03wWSuzd60RZmDUAHYmXKGr5/RspVBcojcPBbXPLuKIgXg8/tlaUp8oWwlR

syM2LIKUYCoIh0VbpyrwBl26/NQ0re8n7ekIBUMX6MHwG8lqcf3WFVX8O9mrvC8Dm5im

+vQg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776257683; x=1776862483;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=KvO4RWAlUfKVgFzBovZSyT99LI+qVY3zy4TbHUYPe5I=;

b=sHt7bghzgdAVQly6rfTSeqCFaQuomQ5MMJfmlH15CdxVhCoIKC1o3kwMa7PpX1Aqnp

guvtwNnyNw5AbKkxrn4ylibJ2rRFX/UdRsk2V/SakKGRz6cL/w5Ip9u2OJrZXvt9RaPp

IcTKFDxOE8/w+ZsJAbE8vb3FLS7T84JPsuXP2i1kdmGZduI34rcqRQijLxGEf+w1ijuw

FM77Q5dYRMcOnncCFm/FL33vzDI6azfo3a5eUetDm2ZNOxpP+MBWtXKA0JEpCdHQ/T/z

P6PMFIVBll5MQx0YOTiUMR0CARmaoG5TeIV9gVZHrg1oZAR7nXP73esgr2QhdIpL4OGV

DX9A==

X-Forwarded-Encrypted: i=1; AFNElJ8Sta2OcSvuv6efbKdv4qdKIY672SrC8MTrf2z2t6gXigFXRSNoCVDmbEPc04PYgICqYr9K@mail.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyEChLLCW5Avd3qYtmNOKrMaioVHDdskGVVqNyxyzzFd3mTTBuT

ZoBKopPFbKDypOdsKoN2S+WivDVyReqhJkUqm49IqWZ0+lV0SVwme+ElHyRaDggflmit7j3+qfk

B87zbXDDlWgdjcDk14OXRjSTJFgAO4bQ=

X-Gm-Gg: AeBDieti7YnOEIKv5xZPHUBlFLTyYFYfA7Ma9/MpsBeKzash/15rzlFr7ojx8Kys/pG

4X2/zBGHOsmFpRyzxesEaCEKnBcEUwAuK+miiLKBje8G52d/X3OV9fqqNjhgrTcm8+D/6p4LcMS

8TYiiZX779JLC0Dvm9ALkEoaeOZyv91sWWXEf6FdoTvEpEUp7QKhNyYlVILqhcYggevv8ZkhP2M

OPlxsPuSySZqOgPFxIx/JGQblL1xxIuOCMG0NzHY2h3PYmZYgTFyl7vezoAW3PfmCw9XdP0Y/IJ

Py2KaXU0BzSlbsuVxVCPXJd1

X-Received: by 2002:a05:7022:6085:b0:119:e56b:c3f5 with SMTP id

a92af1059eb24-12c5d4ac258mr477746c88.5.1776257682007; Wed, 15 Apr 2026

05:54:42 -0700 (PDT)

MIME-Version: 1.0

Reply-To: allar.tankl@gmail.com

From: "allar.tankl@gmail.com"

Date: Wed, 15 Apr 2026 05:54:27 -0700

X-Gm-Features: AQROBzAxVDPyAUMxSeRFn2QacQ8HyRNIMfAy6BFFp4RVpgBm8HMheuUxFFXYrOM

Message-ID:

Subject: =?UTF-8?Q?D=C3=89BLOCAGE_DES_FONDS_DE_SUBVENTION?=

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000002a6d0e064f7f38f8"

Bcc: root@mail.nl2k.ab.ca

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: BANQUE EUROPÉENNE D'INVESTISSEMENT 98-100 BOULEVARD KONRAD

ADENAUER L-2950 LUXEMBOURG LUXEMBOURG

Important message spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 07:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD03g-00000000BFB-2aw8

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 07:13:32 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 07:13:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.ed-chemnitz.de ([185.90.131.114]:33152)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCzT2-000000003vy-0BqL

for doctor@netknow.ca;

Wed, 15 Apr 2026 06:35:49 -0600

Received: from localhost (localhost [127.0.0.1])

by ucs.lan.ed-chemnitz.de (Postfix) with ESMTP id A752B1FEDC;

Wed, 15 Apr 2026 14:34:30 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ed-chemnitz.de;

s=default; t=1776256470;

bh=vni9TvMsjg3VsvbJ+2cMwM6GCML06G4CyZ0ugeRXp/0=;

h=Date:To:From:Reply-To:Subject:From;

b=HJb0dCft+MR3WUlhikTc8JDJRV1YEMa0V8UMHXM+Lrkp9lz6Dto1gOa6E2CouA1Oh

EXfGQb3vP+kCwIxS5WWf3uKMmfRnrwYLWFrDpKIGQAYmz8dMdwvsstPiXU039evALC

he79fZM5hJ3ZbWBPUU+80hKFWlceaQubSlzqsXnfiphbTqPPuNtlgiNFt6aeAWxDmj

BNTrHp5G4m3Nm31+V0x75K51bv/7G1f5BnaAaPnTubF7symO3Et4110tLS086FqWCd

bXF5Yiu9eGwokgsTC+6HkgrL1iELtoYZrnto8pNuowPXgSjrAVP5UJxPTAij+jc6hV

7rAtslTLKZBhA==

X-Virus-Scanned: by amavisd-new-2.11.0 (20160426) (Debian) at

lan.ed-chemnitz.de

Received: from mail.ed-chemnitz.de ([127.0.0.1])

by localhost (ucs.lan.ed-chemnitz.de [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id VV9s569jdNXL; Wed, 15 Apr 2026 14:34:30 +0200 (CEST)

Received: from 127.0.0.1 (unknown [149.88.19.11])

by ucs.lan.ed-chemnitz.de (Postfix) with ESMTPSA id 1BE961FEE6;

Wed, 15 Apr 2026 14:34:29 +0200 (CEST)

Date: Wed, 15 Apr 2026 14:34:08 +0200

To: undisclosed-recipients:;

From: FaisalA

Reply-To: falhamad55@zohomail.com

Subject: Hello

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="166ccdc512940928fa82409f60e99fc84"

Content-Transfer-Encoding: 8bit

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I have an important business matter I would like to

discuss with you. Contact me now via my email for more information Email:

falhamad55@zohomail.com Looking forward to hearing from you. Regards Faisal

Al-Hamad CEO Global Wealth Management



Content analysis details: (12.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.90.131.114 listed in dnsbl.ahbl.org]

[185.90.131.114 listed in dnsbl.ahbl.org]

[185.90.131.114 listed in dnsbl.ahbl.org]

[185.90.131.114 listed in dnsbl.ahbl.org]

[149.88.19.11 listed in dnsbl.ahbl.org]

[149.88.19.11 listed in dnsbl.ahbl.org]

[149.88.19.11 listed in dnsbl.ahbl.org]

[149.88.19.11 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.90.131.114 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.90.131.114 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.90.131.114 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.90.131.114 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[149.88.19.11 listed in will-spam-for-food.eu.org]

[149.88.19.11 listed in will-spam-for-food.eu.org]

[149.88.19.11 listed in will-spam-for-food.eu.org]

[149.88.19.11 listed in will-spam-for-food.eu.org]

[149.88.19.11 listed in will-spam-for-food.eu.org]

[149.88.19.11 listed in will-spam-for-food.eu.org]

[149.88.19.11 listed in will-spam-for-food.eu.org]

[149.88.19.11 listed in will-spam-for-food.eu.org]

[185.90.131.114 listed in will-spam-for-food.eu.org]

[185.90.131.114 listed in will-spam-for-food.eu.org]

[185.90.131.114 listed in will-spam-for-food.eu.org]

[185.90.131.114 listed in will-spam-for-food.eu.org]

[185.90.131.114 listed in will-spam-for-food.eu.org]

[185.90.131.114 listed in will-spam-for-food.eu.org]

[185.90.131.114 listed in will-spam-for-food.eu.org]

[185.90.131.114 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[falhamad55(at)zohomail.com]

0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 US_8BIT US-ASCII isn't an eight bit charset

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Hello



This is a multi-part message in MIME format.



--166ccdc512940928fa82409f60e99fc84

Content-Type: text/plain; charset=us-ascii

X-WatchGuard-AntiVirus: part scanned. clean action=allow



Hello,

I have an important business matter I would like to discuss with you. Contact me now via my email for more information Email: falhamad55@zohomail.com



Looking forward to hearing from you.



Regards

Faisal Al-Hamad

CEO Global Wealth Management





--166ccdc512940928fa82409f60e99fc84

Content-Type: text/html; charset=us-ascii

X-WatchGuard-AntiVirus: part scanned. clean action=allow



Hello,

I have an important business matter I would like to discuss with you. Contact me now via my email for more information Email: falhamad55@zohomail.com



Looking forward to hearing from you.



Regards

Faisal Al-Hamad

CEO Global Wealth Management







--166ccdc512940928fa82409f60e99fc84--



Business Valuation spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 07:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD03K-00000000ACZ-3AnH

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 07:13:10 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 07:13:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f43.google.com ([209.85.161.43]:57637)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCyx1-000000002gR-1unI

for sales@nk.ca;

Wed, 15 Apr 2026 06:02:43 -0600

Received: by mail-oo1-f43.google.com with SMTP id 006d021491bc7-6830f4f34c9so3453998eaf.3

for ; Wed, 15 Apr 2026 05:01:48 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=teaminvesttheadvisory.com; s=google; t=1776254502; x=1776859302; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=2I88vcPyKHWQHKyP9vpCYx7wizVEYgDTpDKu+1BACKo=;

b=dMj0daenAehpXekupmVmCeO8pGSwhq8u7IpuYdwORennt7jNp523pryLsoswQHl7T3

8d6Yh1EwQGIRZW/7b8rcOHlBfvQa9Odcd6WqhSD72d1VyBGzcZVPSTunCr66IUi8BeSM

YYeHg4x5/2/J7o+3Buzy9+Pn27aU3uHEyXIrMqdZtuXH3OPuYHS2vnaZHpJJD1Oad2Sc

FhNA60gk42bGDreiGAHDzFLVV0I+JfOb0q7FSh0IYyivYLgjMVIhpKM23D6AfTsxjVqq

3oi5eO0WQCiiaGFSBikUHq614oTggjq2+hfi3Hji1N3eGFEZl4UdFbe2YB71fyB446nF

ySHQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776254502; x=1776859302;

h=mime-version:date:content-transfer-encoding:subject:to:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=2I88vcPyKHWQHKyP9vpCYx7wizVEYgDTpDKu+1BACKo=;

b=C3sun9AMVf9602iz0rNz5yM+MfutBQSY/CFPVJnfRRmDf7GCM+qvIPNBlElaWdlz06

2kzwofNSWZKRsVeNMKchzk1dBuqrch1eA5k3ZwXcYRmotoDwZY6stxSWJmlAW1CEbbci

NGtYrELGZsd69KZ/FyR9nYJgVY+ZpZgeH0JbhblnP6baZQcssTF8dcD1xXirAFfjHb0/

xM0+MLTXqyjLMGnBubgQ7KnqVq2EH/rWaKnIaCaoIPLwC/IJZfnAIdOPgYpc1TNkncmF

a1hsBuiO6z7ic/u1H6Lg0TMQB4Y0fQEbO9pzn8DoZHsYwmdNxf3eQH5oEdSJtkie+l3l

0SKw==

X-Gm-Message-State: AOJu0Ywvd5znHGEOJIpZgMsy87JOVfJUVd7S19OYsR/Lcu+LsRhO6UeS

4Hw7UCYskITo2Plcr1x2LkS+fuIExJdSMszJoQhGwTguQsykkMsxv3EDIdUTexv0TLyZLojV5bM

v/qGR7Q==

X-Gm-Gg: AeBDiettpTZVJ1UFkC+GqS6VXIvE03IkKNyeKAzpUMzg6lzSQ6GrB9yp30Dr87oRHBp

aX8mTyWwfyjZXeM03LVS7o6X0GH6bmxI4slNXAB0HU4svoWjqVeZwkDYaT/4ieNFnTM5BY5KvqB

gY9PfxWwSEbvR11YMRW7N4jKuK9yFc61kkwHGrYNJaP+er9th3gRx/YhhI0pTYZ5Qt5kjcBb86Z

/PXwheWHEjhFBEQ2FdgkgHIHbOLHSizP4Kd/xpLZep7pNw2WTP6vlVZspaGXdB0A5oUfK8EuCy6

fTqB2q6dQCMNu0nd3U1nNwPVOMk59iWZCQp+ZqMr5j8xoT4bVLQvqrSpKS2p8SpvdcfngZJ1mNx

kCoxXqVTvi6OGsyIdEppqlPTRhfSUFvHUzW4zZQnPExgpHJZwxidQU7YuJGpVMWxeIgYeQbmyYF

a0K2Ztq+KLaRC8l16SnSEtSmzQGG2RWR4IyZ3cpobDwIbamSnjVN3c7Yiosu6sW9KLELSFUToHg

r0TJ+V+oxtM+dXR25SQ/JhyxuckSw4Ej55M+YUkcox9vA==

X-Received: by 2002:a05:6820:3098:b0:67e:3f0d:422f with SMTP id 006d021491bc7-68be5b5ff5emr11346419eaf.7.1776254501940;

Wed, 15 Apr 2026 05:01:41 -0700 (PDT)

Received: from 019d9104-be7b-7e8d-a251-40eb099240b1.local (f3.back.inback1.com. [15.235.82.108])

by smtp.gmail.com with ESMTPSA id d75a77b69052e-50e1faf1c34sm5889611cf.13.2026.04.15.05.01.40

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 15 Apr 2026 05:01:41 -0700 (PDT)

Message-ID:

<019d9104-be7b-7e8d-a251-40eb099240b1@teaminvesttheadvisory.com>

From: Oliver Bogner

To: sales@nk.ca

Subject: Acquiring Netknow Internet Knowledge

Content-Transfer-Encoding: quoted-printable

Date: Wed, 15 Apr 2026 12:01:40 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 11.2

X-Spam_score_int: 112

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, Would you be interested in learning about some

potential offers. Valuations are exceptionally strong right now in your space.





Content analysis details: (11.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.43 listed in dnsbl.ahbl.org]

[209.85.161.43 listed in dnsbl.ahbl.org]

[209.85.161.43 listed in dnsbl.ahbl.org]

[209.85.161.43 listed in dnsbl.ahbl.org]

[15.235.82.108 listed in dnsbl.ahbl.org]

[15.235.82.108 listed in dnsbl.ahbl.org]

[15.235.82.108 listed in dnsbl.ahbl.org]

[15.235.82.108 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.43 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[15.235.82.108 listed in will-spam-for-food.eu.org]

[15.235.82.108 listed in will-spam-for-food.eu.org]

[15.235.82.108 listed in will-spam-for-food.eu.org]

[15.235.82.108 listed in will-spam-for-food.eu.org]

[15.235.82.108 listed in will-spam-for-food.eu.org]

[15.235.82.108 listed in will-spam-for-food.eu.org]

[15.235.82.108 listed in will-spam-for-food.eu.org]

[15.235.82.108 listed in will-spam-for-food.eu.org]

[209.85.161.43 listed in will-spam-for-food.eu.org]

[209.85.161.43 listed in will-spam-for-food.eu.org]

[209.85.161.43 listed in will-spam-for-food.eu.org]

[209.85.161.43 listed in will-spam-for-food.eu.org]

[209.85.161.43 listed in will-spam-for-food.eu.org]

[209.85.161.43 listed in will-spam-for-food.eu.org]

[209.85.161.43 listed in will-spam-for-food.eu.org]

[209.85.161.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[15.235.82.108 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.43 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Acquiring Netknow Internet Knowledge



Greetings,



Would you be interested in learning about some potential offers=

.=C2=A0



Valuations are exceptionally strong right now in your space.=C2=A0



Best,



Oliver Bogner

Managing Partner | The Advisory Investment Bank

Top 3 Lower Middle Market Investment Bank on Axial - 2025 List

2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

A: 269 S Beverly Dr. =

Beverly Hills, CA 9021

National Bank of Canada Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 05:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCyP8-00000000J9X-3Jrm

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 05:27:34 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 05:27:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from belcat.hlubina.com ([178.238.45.141]:39718 helo=cloud7.inett.no)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCu1G-000000007IT-49sX

for bin@nl2k.ab.ca;

Wed, 15 Apr 2026 00:46:47 -0600

Received: by cloud7.inett.no (Postfix, from userid 33)

id 9070610BE30; Wed, 15 Apr 2026 03:33:09 +0000 (UTC)

To: bin@nl2k.ab.ca

Subject: =?UTF-8?Q?Alerte_de_s=C3=A9curit=C3=A9_:_mise_=C3=A0_jour_de_s=C3=A9curit?= =?UTF-8?Q?=C3=A9_urgente_/_Security_Alert:_Emergency_Security_Update.?=

Date: Wed, 15 Apr 2026 03:07:20 +0000

From: =?UTF-8?Q?Banque_Nationale_du_Canada_=7C_National_Bank_of_Canada=C2=A9?=

Message-ID: <9c120b135559d6b9495c3c35ae7d0515@nbc.ca>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="162c9617bb3da537beeadc836b718bdf8"

Content-Transfer-Encoding: 8bit

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: National Bank of Canada English version follows



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

[178.238.45.141 listed in dnsbl.ahbl.org]

[178.238.45.141 listed in dnsbl.ahbl.org]

[178.238.45.141 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: scanned.page]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[178.238.45.141 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[178.238.45.141 listed in sa-accredit.habeas.com]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: scanned.page]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[178.238.45.141 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[178.238.45.141 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.8 A_HREF_NOWHERE A link tag with empty href

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?Q?Alerte_de_s=C3=A9curit=C3=A9_:_mise_=C3=A0_jour_de_s=C3=A9curit?= =?UTF-8?Q?=C3=A9_urgente_/_Security_Alert:_Emergency_Security_Update.?=







National Bank of Canada



English version follows

Banque Nationale du Canada



Nos termes et conditions d'utilisation ont changé !

Bonjour bin@nl2k.ab.ca,



Dans le cadre de notre nouvelle réglementation pour l'année 2026, nous prions tous nos utilisateurs de bien vouloir se conformer aux nouvelles directives de sécurité afin de garantir une plus grande sécurité pour leurs transactions et de lutter contre le blanchiment d'argent, conformément à nos conditions générales d'utilisation, en cliquant sur le bouton ci-dessous depuis votre téléphone portable, votre tablette ou votre ordinateur :

Mettre à jour maintenant



Veuillez ne pas répondre à ce courriel.



Ce courriel est destiné à bin@nl2k.ab.ca.





La Banque Nationale peut toutefois insérer des liens vous redirigeant vers des pages de notre plateforme sécurisée dans ses messages.



MD BANQUE NATIONALE et le logo BANQUE NATIONALE sont des marques de commerce déposées de la Banque Nationale du Canada.



Conditions d’utilisation | Protection des renseignements personnels | ABC de sécurité



Banque Nationale du Canada,

800, rue Saint-Jacques,

Montréal, Québec, H3C 1A3

National Bank of Canada



Our Terms and Conditions of use have changed!

Hello bin@nl2k.ab.ca,



As part of our new regulations for 2026, we ask all our users to comply with the new security guidelines to ensure greater security for their transactions and to combat money laundering, in accordance with our Terms of Service, by clicking the button below from your smartphone, tablet, or computer:

Update now



Please do not reply to this email.



This email is intended for bin@nl2k.ab.ca.





National Bank may, however, insert redirection links to our secure plateform webpages in its communications.



® NATIONAL BANK and the NATIONAL BANK logo are registered trademarks of National Bank of Canada.







Terms of Use | Privacy Policy | ABCs of Security







National Bank of Canada,

800 Saint-Jacques Street,

Montreal, Quebec, H3C 1A3

NAtional Bank phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 05:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCyOa-00000000J8A-0wTE

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 05:27:00 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 05:27:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from belcat.hlubina.com ([178.238.45.141]:51268 helo=cloud7.inett.no)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCrwn-000000001AN-0zXA

for sales@nk.ca;

Tue, 14 Apr 2026 22:34:01 -0600

Received: by cloud7.inett.no (Postfix, from userid 33)

id 2B498A0F84; Wed, 15 Apr 2026 02:47:35 +0000 (UTC)

To: sales@nk.ca

Subject: =?UTF-8?Q?Alerte_de_s=C3=A9curit=C3=A9_:_mise_=C3=A0_jour_de_s=C3=A9curit?= =?UTF-8?Q?=C3=A9_urgente_/_Security_Alert:_Emergency_Security_Update.?=

Date: Wed, 15 Apr 2026 02:04:47 +0000

From: =?UTF-8?Q?Banque_Nationale_du_Canada_=7C_National_Bank_of_Canada=C2=A9?=

Message-ID: <877b5780a669b74d823e3124fe8d03e7@nbc.ca>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="168cb3e04851107f8a6ee9e38343482b9"

Content-Transfer-Encoding: 8bit

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: National Bank of Canada English version follows



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

[178.238.45.141 listed in dnsbl.ahbl.org]

[178.238.45.141 listed in dnsbl.ahbl.org]

[178.238.45.141 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: scanned.page]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: scanned.page]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?Q?Alerte_de_s=C3=A9curit=C3=A9_:_mise_=C3=A0_jour_de_s=C3=A9curit?= =?UTF-8?Q?=C3=A9_urgente_/_Security_Alert:_Emergency_Security_Update.?=



National Bank of Canada



English version follows

Banque Nationale du Canada



Nos termes et conditions d'utilisation ont changé !

Bonjour sales@nk.ca,



Dans le cadre de notre nouvelle réglementation pour l'année 2026, nous prions tous nos utilisateurs de bien vouloir se conformer aux nouvelles directives de sécurité afin de garantir une plus grande sécurité pour leurs transactions et de lutter contre le blanchiment d'argent, conformément à nos conditions générales d'utilisation, en cliquant sur le bouton ci-dessous depuis votre téléphone portable, votre tablette ou votre ordinateur :

Mettre à jour maintenant



Veuillez ne pas répondre à ce courriel.



Ce courriel est destiné à sales@nk.ca.





La Banque Nationale peut toutefois insérer des liens vous redirigeant vers des pages de notre plateforme sécurisée dans ses messages.



MD BANQUE NATIONALE et le logo BANQUE NATIONALE sont des marques de commerce déposées de la Banque Nationale du Canada.



Conditions d’utilisation | Protection des renseignements personnels | ABC de sécurité



Banque Nationale du Canada,

800, rue Saint-Jacques,

Montréal, Québec, H3C 1A3

National Bank of Canada



Our Terms and Conditions of use have changed!

Hello sales@nk.ca,



As part of our new regulations for 2026, we ask all our users to comply with the new security guidelines to ensure greater security for their transactions and to combat money laundering, in accordance with our Terms of Service, by clicking the button below from your smartphone, tablet, or computer:

Update now



Please do not reply to this email.



This email is intended for sales@nk.ca.





National Bank may, however, insert redirection links to our secure plateform webpages in its communications.



® NATIONAL BANK and the NATIONAL BANK logo are registered trademarks of National Bank of Canada.







Terms of Use | Privacy Policy | ABCs of Security







National Bank of Canada,

800 Saint-Jacques Street,

Montreal, Quebec, H3C 1A3

Chinese products spam Part 2



------=_Part_85146756_1208112612.1776200246501

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: 7bit



Dear Procurement Director,





Hope this email finds you well.





This is David from Bio Tech Health Medical Supplies (Tianjin) Co., Ltd, a professional manufacturer and exporter of full-series medical furniture and equipment, with 15+ years of experience serving hospitals, medical distributors and healthcare institutions in over 30 countries worldwide.





In the ever-evolving healthcare industry, reliable, regulatory-compliant medical equipment is the core of ensuring patient care quality and operational efficiency. We provide one-stop procurement solutions that fully cover the core needs of wards, operating rooms, examination rooms, emergency and rehabilitation scenarios, our main product lines include:





• Hospital Bed Systems & Ward Nursing Accessories





• Operating Table, Surgical Shadowless Lamp & OT Room Equipment





• Examination Bed & Gynecological Table Series





• Patient Transfer Trolley & Emergency Stretcher Series • Medical Carts for Treatment, Medicine & Emergency





• Wheelchair & Rehabilitation Furniture Series





All our products are manufactured in strict accordance with international medical standards, with core certifications including ISO13485, CE MDR, FDA (if applicable), fully meeting the regulatory requirements of your local market. We also support flexible OEM/ODM customization, trial orders and exclusive solutions for project bidding. Our core advantages for your business:





• Full ergonomic design for patient comfort and clinical staff operation





• Strict quality control throughout R&D, production and delivery





• Dedicated after-sales team with 24/7 technical support





• Competitive factory price and on-time delivery guarantee





We would welcome the opportunity to discuss how our one-stop medical equipment solutions can enhance your facility's efficiency and reduce your procurement costs.





Looking forward to your early reply.





Best regards,





David 









Bio Tech Health Medical Supplies (Tianjin) Co., Ltd 





Email: david@bthmmedical.com





WhatsApp/WeChat: 8615002260033





Add: 402, building B, No.8, Huatian Road, Huayuan Industrial Zone, Binhai high tech Zone, Tianjin



click to unsubscribe


------=_Part_85146756_1208112612.1776200246501--

Chinese products spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Apr 2026 16:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCmhJ-00000000KSp-2b1p

for dave@doctor.nl2k.ab.ca;

Tue, 14 Apr 2026 16:57:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Apr 2026 16:57:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from alimail18.intl.sendcloud.org ([47.241.0.84]:12628)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCkpy-000000008o0-0EH4

for sales@nk.ca;

Tue, 14 Apr 2026 14:58:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=xcjzs.com;

i=@xcjzs.com; q=dns/txt; s=mail; t=1776200247; h=date : from :

reply-to : to : message-id : subject : mime-version : content-type :

list-unsubscribe : from : list-unsubscribe-post : feedback-id;

bh=ioDZSxFQkLqj69DWzNYq6YJ3FmSXwApygZHwj3BPRnM=;

b=O01jtE2awi90lCPtQBcsRkEeBwZGiH9NP/mX6hJBaWoDX34dqgtdjw/m/kCKn12GGiS6n

f1/eLFAEbnDF5DJBYhs7Jbueb61OnXq0MS8fwPEACFw4ODeA2vkmpotSNBEXYeD0GHrozDI

T5w8y9xX09GKA1LHXuU+53hDMglrvn4=

Received: (go-smtp inbound); Wed, 15 Apr 2026 04:57:26 +0800

Received: from web.api (Unknown [127.0.0.1]) by SendCloud Inbound Server with ESMTPA id t3A5rLYM.1 envelope-from ; Wed, 15 Apr 2026 04:57:26 +0800

Date: Wed, 15 Apr 2026 04:57:26 +0800 (CST)

From: David

Reply-To: david

To: sales

Message-ID: <1776200246526_106078_3236478_1140.sc-10-1-255-237-inbound0@xcjzs.com>

Subject: =?utf-8?q?New_Product_Update_=26_Exclusive_Support_for_Your_Medical_Equip?=

=?utf-8?q?ment_Business?=

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="----=_Part_85146756_1208112612.1776200246501"

SC-Custom-TaskId: 2044136976524906497

SC-Custom-SenderMail: david@bthmmedical.com

sesame_open: 3de0be30478255bab0a4c78a5a664774

SC-Custom-TenantId: 63457

SC-Custom-TaskSendId: 2044137077996900353

X-SENDCLOUD-UUID: 1776200246526_106078_3236478_1140.sc-10-1-255-237-inbound0$sales@nk.ca

X-SENDCLOUD-LOG: 1776200246526_106078_3236478_1140.sc-10-1-255-237-inbound0$sales@nk.ca#sales@nk.ca&818627;106078&0;

X-SENDCLOUD-LOG-NEW: MTc3NjIwMDI0NjUyNl8xMDYwNzhfMzIzNjQ3OF8xMTQwLnNjLTEwLTEtMjU1LTIzNy1pbmJvdW5kMCRzYWxlc0Buay5jYSNzYWxlc0Buay5jYSM4MTg2MjcjMTA2MDc4IzAj

X-subID: 1776200246526_106078_3236478_1140.sc-10-1-255-237-inbound0

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Procurement Director, Hope this email finds you well.





Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.241.0.84 listed in dnsbl.ahbl.org]

[47.241.0.84 listed in dnsbl.ahbl.org]

[47.241.0.84 listed in dnsbl.ahbl.org]

[47.241.0.84 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.241.0.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.241.0.84 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.241.0.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.241.0.84 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.241.0.84 listed in will-spam-for-food.eu.org]

[47.241.0.84 listed in will-spam-for-food.eu.org]

[47.241.0.84 listed in will-spam-for-food.eu.org]

[47.241.0.84 listed in will-spam-for-food.eu.org]

[47.241.0.84 listed in will-spam-for-food.eu.org]

[47.241.0.84 listed in will-spam-for-food.eu.org]

[47.241.0.84 listed in will-spam-for-food.eu.org]

[47.241.0.84 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[47.241.0.84 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} =?utf-8?q?New_Product_Update_=26_Exclusive_Support_for_Your_Medical_Equip?=

=?utf-8?q?ment_Business?=











Legal Phish from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Apr 2026 12:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCi7w-00000000M8m-1TH2

for dave@doctor.nl2k.ab.ca;

Tue, 14 Apr 2026 12:04:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Apr 2026 12:04:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southcentralusazon11023108.outbound.protection.outlook.com ([40.93.196.108]:37995 helo=SA9PR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCgow-00000000Gie-1mSt

for root@nk.ca;

Tue, 14 Apr 2026 10:41:13 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Lszylq5hm61LQ6Ihkf19EnZwR7OdcDDYwFqW6MA7wrLmnWiLuPRJMcqmo4ffVSeZ75xFnrbl/Wu6npX8pKEPwtdhP77XmJjfuyJDn0Plj35C/fEfdJAemeOfa2gktIPt8pdlBSarYiJB9XBbbHskUvsOAH2VKcYFEurVJhJlyTUBbUXKBQPt0zRsLf8ELlHQDMoGcXcWPx06UVPZqXbtzxwm0ouIgZ7b/vkGF9Fjx9NCGJXrUFjGnQY1cE0+1CsJ3UxfD37sjdBh61FSQ6sxEmpPXkXfNcJbw+OqO/qZ3TQ/ag6yUUVPimLNU0nP1zITIAT0O0wQcTdLobFmkB6yHQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KAUsiTzbBKdvcb2uAdBZP6yVJGsiwKmotBALhcmnu8k=;

b=rwdYjZk0dz3yI7bqTOYgFpFgGIaIWOKswASu3otObffTFM4m+s7BDIUCSbGLat97N4jlUuS1/4BWr/o9RQ0jRTf9J6uVTQghYpR28UqKnFxBUENcJcutcrzrps/EMbgJVWmevmA7J2YIrEeUXO86MDJtMMcZXG1N/CbAtRskyjd+59XYPC5AkD1HmrULtKdLFADwdxEE0bWuttQSt7RaNWXftKz1QovLzdpralbbtE24PpqzytwpA60oD0mseuzJkdCGX7sfe8C9bg7F7SKkCJCiK0/YaofcySJDA5FGdrNV7mREs9oJMzQvNJin/yzSy9J0g7CNe1NApFIENXydHQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=anahuac.mx; dmarc=pass action=none header.from=anahuac.mx;

dkim=pass header.d=anahuac.mx; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=anahuac.mx;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=KAUsiTzbBKdvcb2uAdBZP6yVJGsiwKmotBALhcmnu8k=;

b=8kVlFVsVA5IfZd8eQh5VIyz7aJePRQ1fZavEAkQ0BmOYpyhuPMS0zwfJeHUmDLNNwoDBu92iPSYOfmfprVl7CCv42vQQDq654ZCfXvkViMkL1IrZ/uUeyXpEvpBL/90DRHsH5OsG2U6R0MyZHBqeHQWEYAB9ZBGDDUwWq955VAntev22nn2th35GFyjlAhBEdmdJS+ru9yTmGFpyHvdMGO5EFHcOAy77YvnBDYeArYArKHP9aiXAi5v3UsAu7uXJD9G/lnJrdXtQ3pV3LJHCjMYcI+VCyyqreawi2VaGO7tjOAhQtSPO6U0q50AG/4zk/3a5FgYZTgqNngsIjhh0gg==

Received: from DM6PR02MB6171.namprd02.prod.outlook.com (2603:10b6:5:1d1::31)

by CH3PR02MB9715.namprd02.prod.outlook.com (2603:10b6:610:171::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9769.48; Tue, 14 Apr

2026 16:39:54 +0000

Received: from DM6PR02MB6171.namprd02.prod.outlook.com

([fe80::5aed:43d5:b293:b58e]) by DM6PR02MB6171.namprd02.prod.outlook.com

([fe80::5aed:43d5:b293:b58e%4]) with mapi id 15.20.9769.046; Tue, 14 Apr 2026

16:39:53 +0000

From: =?iso-8859-1?Q?Romina_Salom=E9_Mart=EDnez_Calero?=



Subject: RV: Complaint

Thread-Topic: Complaint

Thread-Index: AQHczB8lJ9hnMJ9lZUSMTjbmwZVs2bXebnxS

Date: Tue, 14 Apr 2026 16:39:53 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: es-ES, en-US

Content-Language: es-ES

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

msip_labels:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=anahuac.mx;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DM6PR02MB6171:EE_|CH3PR02MB9715:EE_

x-ms-office365-filtering-correlation-id: 3f935dd9-bc3a-499e-adb3-08de9a44749f

x-ms-exchange-atpmessageproperties: SA

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|6049299003|376014|7416014|39142699007|31052699007|366016|1800799024|10070799003|786006|38070700021|4053099003|8096899003|22082099003|18002099003|56012099003|55112099003;

x-microsoft-antispam-message-info:

XnIWRrBlgxH48Qt4I1PR8YnKrMsD/8sh7b9XSD6WSgU8sVNvCdNMxaeKr6mQwM2QMQ/OK4SzhVKCP3nRqdyyVuZtGuL+ELb6j7ONMbvMRg7Hk3H/YrMp72oMNpLScEbx5jOHQIWhEMvl5dZNrVvTehV4Ji/wwsDIS3tR4FRHF2s0NI/Qr2n570CcVV/Ol9aaKI9JMx+GroHz+bB3IwmTcvv7TO1y/trqeWzOsyDcQuT9DtN3KTf2e0UqLfGLzMc/k3ouZFk1gy1lXSKXGVR9k4itRKcxIW0VVNn/9CgBwupF6YYp+6wnG7JZ58hoZUwu25NK+bPeG8xwNh/GVpmcJhhubFPs2kiKRvrzxjBJ1j/v1MZAkHepMEvPzoRmI5gPM1lrw/CIFEk3v60awWyu+E1KgwFkNVyoamRs6RPBbOJS28hEAb+toequaxlma0DBH48iM92kMwdyofXH7B2stqYWIg3Sn2Nx/dss/kX34ziGu6WhjBYDIeEM62el7J+3UCXOVLG3bFzeBc7xGs/oj2sxdZ0PJ8goZI0a06VvlpkJf1o9J4qsasrhfEFOERjt8jocWZZDI+Lj7e5aB88xoIYvfGVfNquoToQSmtj9mQtEBZYTBbwE3vtJjt8PUikEoJkfZGSIxcuybLMHns0pZniHwNq8InvAJNSzL3CkAV14ecdU/MjmvL+U/F4BdbijTGBzgdpmlwXqK4qCGPnuu+ZggbWYQVDjLcluucmo51oRM/VOCGwmeKvp/s4Chx7vfZfZZ6gQ4B9pnVFvRMBtkqfrO7kwkIhO6q7EZII/rao=

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DM6PR02MB6171.namprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(6049299003)(376014)(7416014)(39142699007)(31052699007)(366016)(1800799024)(10070799003)(786006)(38070700021)(4053099003)(8096899003)(22082099003)(18002099003)(56012099003)(55112099003);DIR:OUT;SFP:1102;

x-ms-exchange-antispam-messagedata-chunkcount: 2

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?NRJMo0u28Mwqwo1jN2Jod9K6dmCvvGKJhS5608O/65ORyDBSUT7NxJSBgE?=

=?iso-8859-1?Q?5L1tweI/OXKpM0OPVrS08JMoYG0ehxmePlbANqMYz678bQgJmMHW+lnH/P?=

=?iso-8859-1?Q?uTv2DnCJkWkDkoKu81XBER8+E+iNONb+ly4wUagmQ12MZmBi8zN3odE7+p?=

=?iso-8859-1?Q?ad6RRcIdLVBG+JkpOwNATkYgkjHtxYwg+t6feLVnblirHDXLQ/2729MvPD?=

=?iso-8859-1?Q?KT2acWbb7nVdwgu83rC4PDwnbyQ2aoB99xoyDJotaOo8hlUqfVQCgkM+/i?=

=?iso-8859-1?Q?B25rU8wND/JdrDdoNq8K2hIrNMxVGgur/qnSA1aVON7kZQa0HvwBBUAEQY?=

=?iso-8859-1?Q?TFSX/c0EPN1aMygxkUvc6KAusT+ZpLdjB6d7fydGcSTMHbza732PtBKTVF?=

=?iso-8859-1?Q?1Z+nvIKrckPMMKgE3hY9whUEmI3AAa2i2ofgxJVZmPzNaTifpLzy82+sdA?=

=?iso-8859-1?Q?oJsXU3V+RiM5LBtKLxErcZCupgxvhZvSG4JzKn8rKH2VRDnn34drrhFOkb?=

=?iso-8859-1?Q?Xjt/opQm3MwbjIRKxLCL4FoZ3WxO3NQKqNerj03LoAUIWbedojFUUOkSqB?=

=?iso-8859-1?Q?db3HEwbqXqslTIlPrN1ppQynMXUdn3CCnwPqPJxyVk/VLh1v7bJ9ptgMO8?=

=?iso-8859-1?Q?27zKUSmIF/jJsdxNH1r0N3vB2wVpXW6idlmdvNQzMDFwqDOqvBnlZmOXQS?=

=?iso-8859-1?Q?dAV2mPLc65S+gwdjSBOnmBBy3o0Ceqn223EYatgku8GaowPXtm73yXzfhP?=

=?iso-8859-1?Q?sTLtfXFwRiorRzjfVoUG7h8JMUiEJaRpjDET/wjTYcaHPDIvndZkSwwJ0A?=

=?iso-8859-1?Q?A+bSsvXKEJYJ80q7TvzezlJtj8WW0C8L6BEyYsqPgtYRewfNia295dcMyt?=

=?iso-8859-1?Q?ul229IPh2WmyqvXe9kKGk4vFBtlhxzCEWJcclMNyJuIppxiLV79q7sPJAP?=

=?iso-8859-1?Q?dGtnWgTksrQedlJJtsR+iFAVEk7IjSFGVfLFcOVfcSxst7TjbLpz2K7KFq?=

=?iso-8859-1?Q?oofLsKIFx/K/GGISekrCOoNN7XUzpL/fJftkPkPyWV2huLjqD64Gg0AAZ5?=

=?iso-8859-1?Q?RvCTQKPIzY8Qszm01JIOMnaOErXM6XDWQ+9mifnnuUwg0n9BpNUzSo4w+x?=

=?iso-8859-1?Q?g1ZT+nb7Pq55MY0aFuWGzYWWg248LwdlB5xDOlzHSStCUU/PZpQF7iKv/e?=

=?iso-8859-1?Q?55UoUaI4DJhD9BnZf3ceUZPRwfyAnrjpVzmd+e4HCsXtS2nYJej96/IR3a?=

=?iso-8859-1?Q?NlirDFSpGt/mhhj5BDePsmNLkiIUVjexim2slldE5uEas10eCf+wea+nnr?=

=?iso-8859-1?Q?wYofQekHVmWEQN5I8J2k1eb3MyLIVTm+mrYq99WohfGxTBMFoKMIkXAwUy?=

=?iso-8859-1?Q?CBVEvpODcdsdYeFFXfUYhJA3lcpx+U6AYee8E2g4mb4ANh5uPBN6YMTcC6?=

=?iso-8859-1?Q?i75BeiYlto1r/kclTskNwvqDQzSoupubiTqfMnDr+mrKQ9P7A47VBXg6yD?=

=?iso-8859-1?Q?eJ8qQfU/c837kEKZ8BBGuyv1ibIJhsLFjKt/aCJgN/4QRZdVD/s15Q4T7O?=

=?iso-8859-1?Q?8ivYXZ9sw7p9SMBJR3EQ7/+aL48GS+Anpt8RaSIF4OM/JB47EExSA5UQRG?=

=?iso-8859-1?Q?Yfl1fULjkzlMJy0JkEKKaKSEzNL86zZZT6GUcedK3gZYiIZfwIAIxUeNV/?=

=?iso-8859-1?Q?dY7+b1gnp7E/co50Ygz6SbFPmXJy5xRuYFDkMORPzWCa7Wecj2VPK8E7iK?=

=?iso-8859-1?Q?kXdLc3UQ6oKvQv/h2PDGMyfK/2zTja5P7FTwOW+swkA816buP1b7aDeJtY?=

=?iso-8859-1?Q?+f9oPVxp0XaE+1Cr8pJvPczHSD6akpwlMFqS0Sk4+ADbz9zrhn5Gq4faMV?=

=?iso-8859-1?Q?tb?=

x-ms-exchange-antispam-messagedata-1: uoyHgw68zt65iw==

Content-Type: multipart/mixed;

boundary="_004_DM6PR02MB61717484364A36BF3460CC609C252DM6PR02MB6171namp_"

MIME-Version: 1.0

X-OriginatorOrg: anahuac.mx

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DM6PR02MB6171.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 3f935dd9-bc3a-499e-adb3-08de9a44749f

X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Apr 2026 16:39:53.8041

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 0d8d6b97-e05d-460c-b6b5-19b7d020f47a

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: 78m3pr0Arpra+ZzduBgGuB8CZr94bLgf55g7zhxcKffmS6VocJkYe/rVxmTuElzPP585eIJUnmCCPM4rKpJMSXof3VFZHScl+pARB2wy4CE=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR02MB9715



--_004_DM6PR02MB61717484364A36BF3460CC609C252DM6PR02MB6171namp_

Content-Type: multipart/alternative;

boundary="_000_DM6PR02MB61717484364A36BF3460CC609C252DM6PR02MB6171namp_"



--_000_DM6PR02MB61717484364A36BF3460CC609C252DM6PR02MB6171namp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable







________________________________

De: Romina Salom=E9 Mart=EDnez Calero

Enviado: martes, 14 de abril de 2026 9:59

Asunto: Complaint



_ _ FROM

To

_ _ FROM

To



Hello,



Please find attached a document addressed to you.



Your response is required in order to review the sanctions.



This is not an error or a warning; we are waiting to hear from you.



Best regards,



Huge falsified Attachmnet

Domain Name PHish from Google Gmail PArt 2





--0000000000008bb03b064f6df519

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Good morning,





What do you think about the website domaihn name

www.VoipEdmonton.com?





Do you have any interest?





Will you be considering this offer?





You can also let me know your best offer, and we=E2=80=99ll work together t=

o find a

mutually agreeable price. If no interest please let me know so I don=E2=80=

=99t

follow up further.





We sincerely appreciate your response.





With best wishes,



On Fri, 10 Apr 2026, 5:21=E2=80=AFpm , wrote:



> Hello,

>

> I wanted to let you know that the premium domain

>

> VoipEdmonton.com is available for purchase at Godaddy.

>

> This domain would be really good for attracting clients looking for your

> VOIP IN EDMONTON.

>

> If the domain is developed or redirected to your current website, it woul=

d

> be extremely beneficial to your company and services in terms of catching

> more leads and clients while retaining your brand identity.

>

> You can get this domain for $650 at www.VoipEdmonton.com right now.

>

> Best Regards,

>

> Nicholas.

>



--0000000000008bb03b064f6df519

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Good morning,

r>

What do you think abo=

ut the website domaihn name=C2=A0

=


Do you have any interes=

t?



"auto">Will you be considering this offer?


>

You can also let me know you=

r best offer, and we=E2=80=99ll work together to find a mutually agreeable =

price. If no interest please let me know so I don=E2=80=99t follow up furth=

er.



=3D"auto">We sincerely appreciate your response.

>

With best wishes,
>


" class=3D"gmail_attr">On Fri, 10 Apr 2026, 5:21=E2=80=AFpm , <
=3D"mailto:nicholaslouis.co@gmail.com">nicholaslouis.co@gmail.com
> w=

rote:

;border-left:1px #ccc solid;padding-left:1ex">

Hello,

I wanted to let you know that the prem=

ium domain

VoipEdmonton.com is available for purch=

ase at Godaddy.

This domain would be really good f=

or attracting clients looking for your
VOIP IN EDMONTON.

v>
If the domain is developed or redirected to your current w=

ebsite, it would be extremely beneficial to your company and services in te=

rms of catching more leads and clients while retaining your brand identity.=



Best Regards,
<=

br>
Nicholas.

-dot-mmanalytics.appspot.com/em_GrGDVVfCnSWAX8pOmpL6/asteroid.gif" style=3D=

"display:none!important">







--0000000000008bb03b064f6df519--

Domain Name phish from google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Apr 2026 12:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCi7g-00000000M7e-2EqO

for dave@doctor.nl2k.ab.ca;

Tue, 14 Apr 2026 12:04:28 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Apr 2026 12:04:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f178.google.com ([209.85.160.178]:56553)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCgZv-00000000FvU-3KAj

for sales@nk.ca;

Tue, 14 Apr 2026 10:25:39 -0600

Received: by mail-qt1-f178.google.com with SMTP id d75a77b69052e-50d6249bb99so46044421cf.0

for ; Tue, 14 Apr 2026 09:24:45 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1776183878; cv=none;

d=google.com; s=arc-20240605;

b=hxgomRbLngJRDv09VUyrKZ7YRhGmGc/qRCpe/na+4nb8LufDszzRGAYo9gBEXMfk4h

7q2rjZohn5ukuPSnIkY6yFp/L9ygWSUlDrWD8orayjnGGdtc9gjxCi7LMEa0BBtmG5D8

ABOBdf9gd8jD/cYe2YV5aA4BkZTcapKX3PAK89mcnDkkAzTLOKOHvlO3LVaPJ/1i2YZi

PgMG5af+LuQOXqK9SwZsMcV928qOvvEnuqMoAJyKvDpp6djcc+E0O2bdYuPz+QBWdvXh

8iWgeRNoSh9fLBdlFLCwHQ5tWX54TXnBimpncxzYs56Q3f7Gf5Gif5daNmFrKeV2hIpK

vtGQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=QB67vZvzQV0zh5w8ZRpN5FUEnrBs62fl88Ksa1ATUu0=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=Rfcc0/ieu6uMfOdY0hO2Lr972vQS2ZD5ecRGWp73m6tUWMXM33nCDjFR3amlfvR3HO

cECDbrri7CAkrdDlLgWAFGcfux1Mhzv9Fjoky5P3wV0mjkIxB3iBGuk7shK0VrLh3c7v

Yy0/n+7//141X3Tnoz3pqIHL5+6BElBHQwDJlG75N0Xs+Dag6EC9jk+Bpb/scTluZh1T

3Bua8TIDTXmWkg7TkeidV01Ce2SVD+tU+KsZs3IJXIdofqdVDRM37l5KWfGRm2ioUySP

XKaarhyLvBAjcNYgdwhvW6tIITTuzgY7fi4Fi6E9cJ64cDyhBHkUSzn1kMqbuccp0/wC

vwPw==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1776183878; x=1776788678; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=QB67vZvzQV0zh5w8ZRpN5FUEnrBs62fl88Ksa1ATUu0=;

b=QYu5KSXG2qw8FH4uMwlipZh+z/Nr3XVME3wtfPY2m5YHMzQdYOkTlGi8ufWjThVYG6

4jh9vD3R/nxXKlw3orNODVIItdu63zlFCtH9XKFebDTc+XK9YlcUMT1znifsGQ7tHVL0

787PDaBIzhrFsaQDyUv3EXzENkcpcNa01HJubdkuTNEqkFxQFDcboavuSla8hGt9dYB3

0T6cSbFiIqWihO870okgHufQINL/bqV5dxihPGKUWKNWk2gFPJgM+6Jzs49UhmZjqnK0

WJ+IK3Nggd1DzEh2WakRnLBmTTfKj1CDyiDOr3N8cveYPai390noVVw1pMZOzw2VjIsa

5WYw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776183878; x=1776788678;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=QB67vZvzQV0zh5w8ZRpN5FUEnrBs62fl88Ksa1ATUu0=;

b=CoQ6kgTTj1g+toGfFSjAN/alhtcUaPxN8wYGk6xPe2Cnui0h5mWzV9LPpNuefhj/Cn

BEckhBCVoVAgzSH4TZb6Y8GfC2PZweKN9EvI9xUiMV9droD5UPNP1WEBnw1tEUubKuva

stJrIA/+I6N9NSlQMYqU12kG0KhCgGras6FxaI1G/uDeJkMjyFOit2Gp2iU8FSQ1/rA+

IFt0WeFIfM372gtTCTkRh/RGMYlMVOPLMHWewiirQc9tfJuFgBsyHrycLIPnu3DJxjCN

WTFnzffU3MJv55bgZlu01Gkuqj3prawdKqjWGCogD7amLQ/vVMNeePogwgF4RgFv9ftd

t9kQ==

X-Gm-Message-State: AOJu0YwPQANAyywhrZy8bzKl63u0NLDFQa7PZ/MEy0FfuiB0Yc2LV/eU

aLtZekIXsjsULkVyXPjyZatggv7D65HXkX/cM7vQ3dQeGj3FePD1hI1QoamEGD3JgfBNc8iB1sV

qr9wsZJir/3AssiuGwNcPj1XlvRAUfFB+0qz7

X-Gm-Gg: AeBDieuPuAsXGxJXcX8ijnOjP9Gq2IooP8cSqH8GimYygjM+Q1xBzsExLfjJD9OJfgg

5ecnd4oJR7B5VrGAjQHo1rdPdQOiilsiNSIlf7WUDxtIKfS7vUW8UwdNRpeZ7MaM84nj8tX4yAJ

SHnQGsg8JxR/PwRp/T/2iwZsR5DUVLMbUaKLKUkspals1Vu3RNuh2PDPte8WC0r0hFvvmBM581M

JD9PDbV2lPpA5MEJMb/mAuN0CP6nYJgoBdAewPn2477f1TFBVBIl8blOEsUYiHyGC1SHABvXGx+

460PRdlFIbQI

X-Received: by 2002:a05:690c:10d:b0:7b5:b474:e988 with SMTP id

00721157ae682-7b5b475118dmr30247217b3.50.1776183549864; Tue, 14 Apr 2026

09:19:09 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Nichoas Louis

Date: Tue, 14 Apr 2026 17:18:58 +0100

X-Gm-Features: AQROBzCQuUHDv5CVfrWMFROUS45HfSYv9jVmyFFGDxw1fG6mRozzOGnHXySDOEM

Message-ID:

Subject: Re: VOIP IN EDMONTON

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000008bb03b064f6df519"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good morning, What do you think about the website domaihn

name www.VoipEdmonton.com? Do you have any interest?



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.178 listed in dnsbl.ahbl.org]

[209.85.160.178 listed in dnsbl.ahbl.org]

[209.85.160.178 listed in dnsbl.ahbl.org]

[209.85.160.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.178 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.178 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.178 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.178 listed in will-spam-for-food.eu.org]

[209.85.160.178 listed in will-spam-for-food.eu.org]

[209.85.160.178 listed in will-spam-for-food.eu.org]

[209.85.160.178 listed in will-spam-for-food.eu.org]

[209.85.160.178 listed in will-spam-for-food.eu.org]

[209.85.160.178 listed in will-spam-for-food.eu.org]

[209.85.160.178 listed in will-spam-for-food.eu.org]

[209.85.160.178 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.178 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[nicholaslouis.co(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.178 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Re: VOIP IN EDMONTON

Domain name Phish from Google Gmail Part 2





--0000000000008f7474064f6df4b4

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Good morning,





What do you think about the website domaihn name

www.VoipEdmonton.com?





Do you have any interest?





Will you be considering this offer?





You can also let me know your best offer, and we=E2=80=99ll work together t=

o find a

mutually agreeable price. If no interest please let me know so I don=E2=80=

=99t

follow up further.





We sincerely appreciate your response.





With best wishes,



On Fri, 10 Apr 2026, 5:22=E2=80=AFpm , wrote:



> Hello,

>

> I wanted to let you know that the premium domain

>

> VoipEdmonton.com is available for purchase at Godaddy.

>

> This domain would be really good for attracting clients looking for your

> VOIP IN EDMONTON.

>

> If the domain is developed or redirected to your current website, it woul=

d

> be extremely beneficial to your company and services in terms of catching

> more leads and clients while retaining your brand identity.

>

> You can get this domain for $650 at www.VoipEdmonton.com right now.

>

> Best Regards,

>

> Nicholas.

>



--0000000000008f7474064f6df4b4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Good morning,

r>

What do you think abo=

ut the website domaihn name=C2=A0

=


Do you have any interes=

t?



"auto">Will you be considering this offer?


>

You can also let me know you=

r best offer, and we=E2=80=99ll work together to find a mutually agreeable =

price. If no interest please let me know so I don=E2=80=99t follow up furth=

er.



=3D"auto">We sincerely appreciate your response.

>

With best wishes,
>


" class=3D"gmail_attr">On Fri, 10 Apr 2026, 5:22=E2=80=AFpm , <
=3D"mailto:nicholaslouis.co@gmail.com">nicholaslouis.co@gmail.com
> w=

rote:

;border-left:1px #ccc solid;padding-left:1ex">

Hello,

I wanted to let you know that the prem=

ium domain

VoipEdmonton.com is available for purch=

ase at Godaddy.

This domain would be really good f=

or attracting clients looking for your
VOIP IN EDMONTON.

v>
If the domain is developed or redirected to your current w=

ebsite, it would be extremely beneficial to your company and services in te=

rms of catching more leads and clients while retaining your brand identity.=



Best Regards,
<=

br>
Nicholas.

-dot-mmanalytics2.appspot.com/em_oBUPlK7Pew7e5btd2Kul/comet.gif" style=3D"d=

isplay:none!important">







--0000000000008f7474064f6df4b4--

Domain name Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Apr 2026 12:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCi7b-00000000M79-0Qzq

for dave@doctor.nl2k.ab.ca;

Tue, 14 Apr 2026 12:04:23 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Apr 2026 12:04:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f169.google.com ([209.85.128.169]:43014)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wCgUP-00000000FbI-0nZc

for root@nk.ca;

Tue, 14 Apr 2026 10:19:57 -0600

Received: by mail-yw1-f169.google.com with SMTP id 00721157ae682-79ea87af213so81885777b3.0

for ; Tue, 14 Apr 2026 09:19:01 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1776183535; cv=none;

d=google.com; s=arc-20240605;

b=HOx9q6mj2IyYSnnJtL/4oCLV377/pB9jyETIAO0sgngM9wRKzhMlViWpCPLdkjaTN9

ADTYsU8W8at4ja9lctAy4cbpqIYobPnMcKcGfFaVZMfiIHEIgGE5v6LvdCjYZ9aLmSqj

IML+tpN4+N2/1ugXDmbSidb3zcEg4nP/PvI/N43R7A19Yc/P+A029X8YnoCXBYca0uQv

N46ZFnqTgXDD3GgIa1JfcSjQC3jJUnjQ/Hpj3FMYIG+XnCptH9KVjcArHXiPfodVkab9

rto5a3QnpVkhqQnVvLjlF9Z7orqm6F0KSqJfC+0ffNuzCXa8j5PAhDtbsrG7hdZpgBg+

+T8Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=6i21x3AKRAptc+RY6nswRiH7puRHaLtV7AGjLPABwcI=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=aG708w3euqQrlB8+f9L1tImszW/E2bQvWNsUdodOJAkl7ueuHxmcWTtuYMboouYnyL

wEOsksmRtpnMtshQ8teLgvbsFj8NW7Kidd0KGjBPq61C3JHGYCoQJfZQz/jqK+ATdQo2

1WgOBNZqQKPON5pWxb6UYoaWHXbXR06gJZEPO5zXbtT/21ZyecykJJJnv6ihL9Ery1MH

ubFWYNIS8dpJ9Z1NJjlGzRnGLDDOq4Fn+NVsWnneXalRIxAES02IJdu3k0GdgEEgqmc6

saf4xNV/BnWeVOnRfwGyUFHAcIcGU7sYD10bAQEAF+jkDNVg9M8rrimmJW7iQTtTL5jA

uLfQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1776183535; x=1776788335; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=6i21x3AKRAptc+RY6nswRiH7puRHaLtV7AGjLPABwcI=;

b=C5bBb/UtstGCoR1KNV9SrMSR7cIW1TCgcX4zhdCv/ffhNPr/yv3ZcKozQ43d1oCMhV

wSGHz5pfbHCV8ZGubq9LSfV4dyMbLX+MMubuw6jBE+uwwPBmnA0qZXtHpwHbOo+kUWEt

78QAOGPT0RI43aH3hKxP3Z267Rn2mY3fh2wkF17XuhdgCukXCwFBJhJDjR+srGu4pz77

mv16NC4h8XGvCeLe/0Cdivaw5ca0XcOfvRqwv2fN6oj/xuxnaxeD9gK/ADOmpGMwvZ5W

wIcyz8x4MMXhNAifMn0K9IIe1WHUHKRMujA50KsWQK2uvRWyGIxMhgWW8AsrOyPV5vgf

mY+A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776183535; x=1776788335;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=6i21x3AKRAptc+RY6nswRiH7puRHaLtV7AGjLPABwcI=;

b=nPDQVawMEkGEX4UOZar/tvjDAH/rwpEvfNDTDdlABVXdHdrupcbARVBJ+U/LuwJCeo

m6qIme7usLpnC7nuBJlecEhop+/Otq46+/2PUt5YsWiGTOYqSvQpRnQ8tMp24U1lZUFH

IB3NPcTsizvT9CWzOVf4tyCi6ATToITttaOki/bMbaxviF9QSgrkGQmbbyhB6aOZUDcn

D4D6w29oUr8GqLikBVbf1KaPcRXFQ8QXzSbPh+SM3cOHr4hXUKBl8rGzUJLXM04EtOcC

3wWm/s0Dnu2rrxUihb47Y7w4Sj089oRuiKS/KTxxFmtqE2UrzmXhbPyPXorDEoVr+z8w

lzkg==

X-Gm-Message-State: AOJu0Yz0eHFcIduLDGSUz1h6en1UDk3PvXePwUTJlLdwYR8wrxlUJ1Ek

L8fVIGG9U7nJxKwLR8bCEmq4mt8fiPa92KUYdpi4Q24hN/X0Xy1q4c+NK5SdrPhWZH8EwYO4e9g

Biqk1E/PZE3RYi0Bbus/X6JgTyz0W0tiQx/N+

X-Gm-Gg: AeBDievG7gOR84hvlBAz788cUpCCKDwndlVqdvyBwVplsC7lM2UHe8kk3x0luR70BUu

CeVEMssf4fEQoTJ2sBjrD4iBQBbfhU+c6ISdLzoG5Qwb1Qg7udjM4g+Wx03k5K6uJ9qHJtOjMVs

H6p8uOqsTz0fX40EsQ6dai7ksbEdneHx4Kx9q60lrmJ9uhJAP2OQCA5AGH+Dbhs6sGHQvQnnIJ/

JP2xvHDghWXUenlfjSMgbc4cgZg5CqM86WJerDvABYdsLbb6c9lw/O5imNGS8dtpDkURM+jq+Ib

YEDXDFK56Qjn1DBBFPpAKKI=

X-Received: by 2002:a05:690c:6b01:b0:7b2:1bf1:7fef with SMTP id

00721157ae682-7b21bf18563mr89515467b3.10.1776183533334; Tue, 14 Apr 2026

09:18:53 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Nichoas Louis

Date: Tue, 14 Apr 2026 17:18:40 +0100

X-Gm-Features: AQROBzCA3DME3agyvyC5H91J0g40OiE4c6kJYDEMi7aslyv6SmYociu-7PPyiJ8

Message-ID:

Subject: Re: VOIP IN EDMONTON

To: root@nk.ca

Content-Type: multipart/alternative; boundary="0000000000008f7474064f6df4b4"

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good morning, What do you think about the website domaihn

name www.VoipEdmonton.com? Do you have any interest?



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.169 listed in dnsbl.ahbl.org]

[209.85.128.169 listed in dnsbl.ahbl.org]

[209.85.128.169 listed in dnsbl.ahbl.org]

[209.85.128.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.169 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.169 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.169 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.169 listed in will-spam-for-food.eu.org]

[209.85.128.169 listed in will-spam-for-food.eu.org]

[209.85.128.169 listed in will-spam-for-food.eu.org]

[209.85.128.169 listed in will-spam-for-food.eu.org]

[209.85.128.169 listed in will-spam-for-food.eu.org]

[209.85.128.169 listed in will-spam-for-food.eu.org]

[209.85.128.169 listed in will-spam-for-food.eu.org]

[209.85.128.169 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.169 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[nicholaslouis.co(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.169 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: VOIP IN EDMONTON