Lucrative business proposal spam from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 08:45:00 -0600
Received: from mail-wm1-f66.google.com ([209.85.128.66]:50402)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wQ4d6-000000006Xz-1vWz
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 08:44:18 -0600
Received: by mail-wm1-f66.google.com with SMTP id 5b1f17b1804b1-48a563e4ef7so49440275e9.0
for; Thu, 21 May 2026 07:43:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1779374594; x=1779979394; darn=doctor.nl2k.ab.ca;
h=mime-version:message-id:list-unsubscribe:date:subject:to:reply-to
:from:from:to:cc:subject:date:message-id:reply-to;
bh=72RLEJ0BB3eiaKHaoADcLoK+obOnShVsV9dqWrc1H54=;
b=k+BLIB84Bl/ccrjSllVn1HySMCNfHaX5DAGaHJaJvuLZXpLyXjrRpwtj7jdJiwKYcN
n6MsElrWtmDdrdtQ4xeft/KkMdXbIFPnUhCC9k2JWBwCelKNcA2JHnNLf2YJS4DhwDtC
qRbdYk3Ju1SyTvWzXyPBCCqEkHQo+sRSr1LATrCfc4+a3KZTK475rJBEWlUm1xjNNDjD
fQSk0Kd17rPnOJDF7e1HJyIa1BxA4lQZv5XtE6rnhgK2mJXgyOkUFN/mTIg0JjWsOrKJ
e8rVLVwmPL1oLXzuEs7odzE/gYwUOPjVMORs6J5iFBcM/ln+PKh0Wr4KenPW82J8JU+d
I8kA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779374594; x=1779979394;
h=mime-version:message-id:list-unsubscribe:date:subject:to:reply-to
:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=72RLEJ0BB3eiaKHaoADcLoK+obOnShVsV9dqWrc1H54=;
b=cx++jvwFFTqfuRirX9sJ5Z/tWO70SY32JPf6sBdKKl91HGbybB/MzV+RknaGf3fCoh
/YuxUy9pt4jQvENlOzVBN2An/+/gpa5opBBLwKmTTb+NUqscIKbafjwWucOvGd93+3bm
agUVTC504/IXJEzQ8+7ywA6+wF9i5Xst515ok7jQabWNeLDRo++fhz6JjKRtbM+Tmjgm
gyWJKczI8JfVTXKusmz0z98FdfwDvUJSLDaV0tOCRquEFOa4Yd1kRaDJEimrvUcZHp+e
oJ0BOKhjgXAAb/9x6L2v8lfXRLtdS1QDv0V3qFtTeaFyv2uKx7MV/1BnytmI4s4Au1f/
Kgiw==
X-Gm-Message-State: AOJu0YzuZ9M+BkO5LVmdqcmPAU1jEwRMxy8WH+gsCHpZ4mJaHnywhjpA
Ds+oNP/n3VvJots3p9Pczqro6GkG2F1kmYNkT481xvIr2cEcXmyfxspNZ+ShTWvxD1cfk1F7j2K
mlQ==
X-Gm-Gg: Acq92OFBPFyqbREA1vI1sTl5Z0Imq20XSMGouP8yOXL1ccuphU5hMPi1vVCqsiCMlb0
DGY8S3HcZ1e1bqpoBRPCNs4UM30riM3hPF4Gjpzo+OdwOE9oJ2yqWmRUu7chEbCWWmrMIRxH2yx
KKXxOMUP1Qa9Hd3iqZgUWA+W7PEb8dumazkRf7+POxXfDb5MUI7DpEIuOKU4S+z3reMNmoxNPqb
Kbt9cRGCTfJ1dTIb0tZltyjqRmolBvWuRABGvKcuXTmXOlfn8WQwAqlfXKGkW70uoT5WqjKg9M+
yZ7S7W239xd4p9A8IHC6s7jsaxapo3YSeiMYN+BqaHhfUWlw7jwcEzO62xls/jVJAsnyTwYvmRS
BV/XSUD/YJDmxKdLqoEjoMlFi+Lbj46p69MfQGZK+zYvgHGpkj52/6r8FEIqVYjival8JBC63At
eRHONq0kD4bXizvi6bJFfxbTxsUrKpkA0r/sJF6ptb/g==
X-Received: by 2002:a05:600c:8b45:b0:48e:635a:18d2 with SMTP id 5b1f17b1804b1-490360341c0mr51211975e9.2.1779374594044;
Thu, 21 May 2026 07:43:14 -0700 (PDT)
Received: from DESKTOP-7KFFQ7I ([102.89.82.27])
by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-49033d9eca8sm69461925e9.12.2026.05.21.07.43.13
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 21 May 2026 07:43:13 -0700 (PDT)
From: =?utf-8?B?U2VudGFvZGlsYWx0ZA==?=
Reply-To: naruhitok@aktio-us.com
To: dave@doctor.nl2k.ab.ca
Subject: =?utf-8?B?THVjcmF0aXZlIEJ1c2luZXNzIFByb3Bvc2Fs?=
Date: Thu, 21 May 2026 15:43:10 +0100
List-Unsubscribe:
X-Priority: 3
Message-ID: <67FA77E5D1354E7CBE75C4A3C8A1FD75@gmail.com>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="2FB4B6583ADE442BB24A50EA8863D94D"
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I came across your profile and i was impressed by
your background. AKTIO CORPORATION are expanding into North America and are
looking to hire a Regional Executive Partner to lead their new operations.
[...]
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
[209.85.128.66 listed in dnsbl.ahbl.org]
[209.85.128.66 listed in dnsbl.ahbl.org]
[209.85.128.66 listed in dnsbl.ahbl.org]
[102.89.82.27 listed in dnsbl.ahbl.org]
[102.89.82.27 listed in dnsbl.ahbl.org]
[102.89.82.27 listed in dnsbl.ahbl.org]
[102.89.82.27 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.66 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[sentaodila3(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[sentaodila3(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.66 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.66 listed in bl.score.senderscore.com]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
0.0 NO_RDNS2 Sending MTA has no reverse DNS
1.8 COMBO_IMAGEONLY1 Appears to be an image only message
Subject: {SPAM?} =?utf-8?B?THVjcmF0aXZlIEJ1c2luZXNzIFByb3Bvc2Fs?=
--2FB4B6583ADE442BB24A50EA8863D94D
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=0D=0A
quiv=3DContent-type>=0D=0A=0D=0A=0D=0A
=3D"MSHTML=2011.00.10570.1001">=0D=0A=0D=0A
From: Sophie Baker
Sent: 1 May 2026 10:34
To: sales@nk.ca
Subject: Canada Prestige Awards 2026
Hi
Just to update you, the awards event calendar has now been finalised for the year. You will be very welcome to any UK or international events for free so if you do want to view this let me know and I’ll send it over. The events offer a great networking opportunity to meet with businesses across a wide range of industries.
We do also have the late nomination process open for the awards if you felt you still want to take part.
I will look forward to hearing from you.
Kind regards,
Sophie Baker
Awards Coordinator
Landline: +44 (0) 121 638 0411
sophie@prestigeawardsguide.co.uk
(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.
To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.
From: Sophie Baker
Sent: 24 April 2026 09:22
To: sales@nk.ca
Subject: Canada Prestige Awards 2026
Hi
I did approach you about being involved in the awards. I am not sure if you saw any of my messages?
We are still accepting entries in a number of categories so if taking part was of interest then do let me know.
Kind regards,
Sophie Baker
Awards Coordinator
Landline: +44 (0) 121 638 0411
sophie@prestigeawardsguide.co.uk
(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.
To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.
From: Sophie Baker
Sent: 25 February 2026 10:23
To: sales@nk.ca
Subject: Canada Prestige Awards 2026
Hi
The nomination stage of our Canada Prestige Awards 2026 is open and we would like to invite to you to take part.
We are reviewing submissions for companies, individuals, products and services. The awards are open to all SMEs who provide a product or service to people or businesses in Canada and therefore can of course be based in other regions.
After the decision making is completed then all winners will be invited to our annual awards event. This gives all of those involved an opportunity to network, meet the judges and take part in promotional press activities which we organise for winners and their guests. All of which is arranged on a complimentary basis.
The Prestige Awards provide the latest news and developments in a variety of industries. Content is available in hard copy print media as well as online features, interviews, competitions and much more. The awards recognise the important work of SME’s and celebrate their many successes and outstanding service over the year.
To learn more about the media platform then please visit www.prestigeawardsguide.co.uk
If you wish to access any subscriber-only content on the website then please let me know and I will provide this on a complimentary basis.
What do I need to do?
Please reply back to us confirming you wish to be considered in this year’s programme.
After we receive your acceptance, you will be placed on the list of shortlisted nominees. Once the allocation of nominations is met, all organisations within that particular category are then passed to our panel of industry expert judges who will ultimately pick a winner. Publicly sourced information is used such as reviews, testimonials, information on the company’s website as well as social media accounts.
Questionnaire & Categories
During the nomination process we give companies and individuals the opportunity to specify the categories they wish to be considered for. We also provide all nominees with the opportunity to submit additional information that may support them being successful in the awards. This could include details on the company, new projects, positive media attention/ other recognition or direct us to online testimonials and customer reviews. This may all have a positive impact on the decision making. Please fill in the short questionnaire provided and include any information you feel relevant.
The questionnaire will be provided once you confirm your participation.
Tell me more about the award programme & who votes
Every year, we invite companies to talk to us about themselves and provide information on why they are worthy of recognition in the awards. We receive submissions from SMEs in all industries who provide products and services to the region. The judges pick a selection of winners in a range of categories.
The awards are a free to enter programme that provide exposure to subscribers looking for information on the very best companies and services.
Once the submissions have been reviewed then winners will be notified by a member of the awards team. Each winner will receive coverage in the awards magazine as well as the website, press releases and will be able to attend the free winner’s event. As previously highlighted, this will give each winner the opportunity to network with other winners, meet the judges and have a photo-shoot with their teams.
For more information on events then please visit our website
Are there any costs?
Unlike many award programmes, we offer no options for companies or individuals to make any financial contributions prior to this year’s decisions being made. This includes the booking of advertorial space or partnership opportunities of any kind.
Winners are chosen by our independent panel made up of select industry experts and our editor-in-chief. This ensures the most deserving are picked each year and decisions cannot be influenced by current relationships.
Not for this year
Although we make every effort to only approach organisations which are relevant to the award categories, we are running this year, you may feel the timing isn’t right for you are the moment. We do not wish to contact people who would rather not be considered so please do let us know if that is the case. You will then be immediately removed and not contacted again about the opportunity.
I do hope we can consider you in the programme and I would be happy to answer any other questions you may have.
Kind regards,
Sophie Baker
Awards Coordinator
Landline: +44 (0) 121 638 0411
sophie@prestigeawardsguide.co.uk
(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.
To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 08:45:00 -0600
Received: from mail-wm1-f66.google.com ([209.85.128.66]:50402)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wQ4d6-000000006Xz-1vWz
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 08:44:18 -0600
Received: by mail-wm1-f66.google.com with SMTP id 5b1f17b1804b1-48a563e4ef7so49440275e9.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1779374594; x=1779979394; darn=doctor.nl2k.ab.ca;
h=mime-version:message-id:list-unsubscribe:date:subject:to:reply-to
:from:from:to:cc:subject:date:message-id:reply-to;
bh=72RLEJ0BB3eiaKHaoADcLoK+obOnShVsV9dqWrc1H54=;
b=k+BLIB84Bl/ccrjSllVn1HySMCNfHaX5DAGaHJaJvuLZXpLyXjrRpwtj7jdJiwKYcN
n6MsElrWtmDdrdtQ4xeft/KkMdXbIFPnUhCC9k2JWBwCelKNcA2JHnNLf2YJS4DhwDtC
qRbdYk3Ju1SyTvWzXyPBCCqEkHQo+sRSr1LATrCfc4+a3KZTK475rJBEWlUm1xjNNDjD
fQSk0Kd17rPnOJDF7e1HJyIa1BxA4lQZv5XtE6rnhgK2mJXgyOkUFN/mTIg0JjWsOrKJ
e8rVLVwmPL1oLXzuEs7odzE/gYwUOPjVMORs6J5iFBcM/ln+PKh0Wr4KenPW82J8JU+d
I8kA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779374594; x=1779979394;
h=mime-version:message-id:list-unsubscribe:date:subject:to:reply-to
:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=72RLEJ0BB3eiaKHaoADcLoK+obOnShVsV9dqWrc1H54=;
b=cx++jvwFFTqfuRirX9sJ5Z/tWO70SY32JPf6sBdKKl91HGbybB/MzV+RknaGf3fCoh
/YuxUy9pt4jQvENlOzVBN2An/+/gpa5opBBLwKmTTb+NUqscIKbafjwWucOvGd93+3bm
agUVTC504/IXJEzQ8+7ywA6+wF9i5Xst515ok7jQabWNeLDRo++fhz6JjKRtbM+Tmjgm
gyWJKczI8JfVTXKusmz0z98FdfwDvUJSLDaV0tOCRquEFOa4Yd1kRaDJEimrvUcZHp+e
oJ0BOKhjgXAAb/9x6L2v8lfXRLtdS1QDv0V3qFtTeaFyv2uKx7MV/1BnytmI4s4Au1f/
Kgiw==
X-Gm-Message-State: AOJu0YzuZ9M+BkO5LVmdqcmPAU1jEwRMxy8WH+gsCHpZ4mJaHnywhjpA
Ds+oNP/n3VvJots3p9Pczqro6GkG2F1kmYNkT481xvIr2cEcXmyfxspNZ+ShTWvxD1cfk1F7j2K
mlQ==
X-Gm-Gg: Acq92OFBPFyqbREA1vI1sTl5Z0Imq20XSMGouP8yOXL1ccuphU5hMPi1vVCqsiCMlb0
DGY8S3HcZ1e1bqpoBRPCNs4UM30riM3hPF4Gjpzo+OdwOE9oJ2yqWmRUu7chEbCWWmrMIRxH2yx
KKXxOMUP1Qa9Hd3iqZgUWA+W7PEb8dumazkRf7+POxXfDb5MUI7DpEIuOKU4S+z3reMNmoxNPqb
Kbt9cRGCTfJ1dTIb0tZltyjqRmolBvWuRABGvKcuXTmXOlfn8WQwAqlfXKGkW70uoT5WqjKg9M+
yZ7S7W239xd4p9A8IHC6s7jsaxapo3YSeiMYN+BqaHhfUWlw7jwcEzO62xls/jVJAsnyTwYvmRS
BV/XSUD/YJDmxKdLqoEjoMlFi+Lbj46p69MfQGZK+zYvgHGpkj52/6r8FEIqVYjival8JBC63At
eRHONq0kD4bXizvi6bJFfxbTxsUrKpkA0r/sJF6ptb/g==
X-Received: by 2002:a05:600c:8b45:b0:48e:635a:18d2 with SMTP id 5b1f17b1804b1-490360341c0mr51211975e9.2.1779374594044;
Thu, 21 May 2026 07:43:14 -0700 (PDT)
Received: from DESKTOP-7KFFQ7I ([102.89.82.27])
by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-49033d9eca8sm69461925e9.12.2026.05.21.07.43.13
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 21 May 2026 07:43:13 -0700 (PDT)
From: =?utf-8?B?U2VudGFvZGlsYWx0ZA==?=
Reply-To: naruhitok@aktio-us.com
To: dave@doctor.nl2k.ab.ca
Subject: =?utf-8?B?THVjcmF0aXZlIEJ1c2luZXNzIFByb3Bvc2Fs?=
Date: Thu, 21 May 2026 15:43:10 +0100
List-Unsubscribe:
X-Priority: 3
Message-ID: <67FA77E5D1354E7CBE75C4A3C8A1FD75@gmail.com>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="2FB4B6583ADE442BB24A50EA8863D94D"
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I came across your profile and i was impressed by
your background. AKTIO CORPORATION are expanding into North America and are
looking to hire a Regional Executive Partner to lead their new operations.
[...]
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
[209.85.128.66 listed in dnsbl.ahbl.org]
[209.85.128.66 listed in dnsbl.ahbl.org]
[209.85.128.66 listed in dnsbl.ahbl.org]
[102.89.82.27 listed in dnsbl.ahbl.org]
[102.89.82.27 listed in dnsbl.ahbl.org]
[102.89.82.27 listed in dnsbl.ahbl.org]
[102.89.82.27 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[102.89.82.27 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.66 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[sentaodila3(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[sentaodila3(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.66 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.66 listed in bl.score.senderscore.com]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
0.0 NO_RDNS2 Sending MTA has no reverse DNS
1.8 COMBO_IMAGEONLY1 Appears to be an image only message
Subject: {SPAM?} =?utf-8?B?THVjcmF0aXZlIEJ1c2luZXNzIFByb3Bvc2Fs?=
--2FB4B6583ADE442BB24A50EA8863D94D
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=0D=0A
quiv=3DContent-type>=0D=0A=0D=0A=0D=0A
=3D"MSHTML=2011.00.10570.1001">=0D=0A=0D=0A
Hello,
DIV>=0D=0A
--2FB4B6583ADE442BB24A50EA8863D94D--
DIV>=0D=0A
I=20came=20across=20your=20profile=20and=20i=20was=20impress=
ed=20by=20your=20background.=20AKTIO=20CORPORATION=20are=20expanding=20into=
=20North=20America=20and=20are=20looking=20to=20hire=20a=20Regional=20Execu=
tive=20Partner=20to=20lead=20their=20new=20operations.=20This=20is=20a=20pa=
rt-time=20position=20with=20a=20competitive=20salary,=20attractive=20commis=
sion,=20and=20a=20flexible=20schedule=20that=20won't=20conflict=20with=20yo=
ur=20current=20job.
=0D=0Aed=20by=20your=20background.=20AKTIO=20CORPORATION=20are=20expanding=20into=
=20North=20America=20and=20are=20looking=20to=20hire=20a=20Regional=20Execu=
tive=20Partner=20to=20lead=20their=20new=20operations.=20This=20is=20a=20pa=
rt-time=20position=20with=20a=20competitive=20salary,=20attractive=20commis=
sion,=20and=20a=20flexible=20schedule=20that=20won't=20conflict=20with=20yo=
ur=20current=20job.
If=20you=20are=20open=20to=20considerin=
g=20new=20professional=20opportunities,=20reply =20and=20I=20will=20be=
=20pleased=20to=20share=20additional=20information
Best=20rega=
rds,
=0D=0Ag=20new=20professional=20opportunities,=20reply =20and=20I=20will=20be=
=20pleased=20to=20share=20additional=20information
Best=20rega=
rds,
Independent=20Recruiter
=0D=0A=0D=0A=
--2FB4B6583ADE442BB24A50EA8863D94D--
Webroot Phish from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 10:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wQ5rO-00000000HdJ-2szL
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 10:02:58 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 May 2026 10:02:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f74.google.com ([209.85.210.74]:46198)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wQ3lR-000000000JD-2jp6
for doctor@nl2k.ab.ca;
Thu, 21 May 2026 07:48:51 -0600
Received: by mail-ot1-f74.google.com with SMTP id 46e09a7af769-7e56806cfecso7402185a34.0
for; Thu, 21 May 2026 06:47:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1779371267; x=1779976067; darn=nl2k.ab.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=g1vHfs9XyhGtlq2Q1mNxdb7+pvpuH13OEiHal728/Sk=;
b=DzVSXJC/9gSC/4JzVYMMLAeO7T8wZTjH+KEE3vjFjaEJ4TxgfmQ9Tx6hP5qn136CHb
7iRB4gYgzhnkS3TUNKw0W5XLXXoIgM85ckw8El1v3ejzSypAtOexq0LztcehHOLeHpNh
3B/qyml0NCqQmYouiglNcspSpNpmvDy8Q0YLYj2Tf1f+v5xBNuoi8xeKffDYF6rGpxO7
hiXW+DadG3r1o/ppQoy3Ea5+hh/tjGKyZcfhfenhCaRfQt0ZtlADe6dk7ueaEACXaaJX
CUo35eJjHHMICbdw8gMWweG/DxYeLb9c40OJRUMRRbD/83p1vGnXU597jQrO///njmHS
UTtA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=autonetfb-com.20251104.gappssmtp.com; s=20251104; t=1779371267; x=1779976067; darn=nl2k.ab.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=g1vHfs9XyhGtlq2Q1mNxdb7+pvpuH13OEiHal728/Sk=;
b=VpCyunACLrJEojPkqGDTsU/rCMFCMxQxkQaRMJOyJK3QZf10g8/6D7SG9ZU/dJ/peQ
GEbAdTrcAe/8Y0ZYW0/VOdyyNH4a2MZK+6Ak2vKP6ZhOmnyfvOnd3ScQ+CRarwdrT8GS
o7ia2Sx2CpuuHicei4w3qhn1FFZ1Ifax/6R4LpfYxGck0twY+O0oMg6cSWyHVS0s7jAb
4fmBs/dip/bvQMWOQ8eIQLRFyMtUojvvNdeP7rJFk2LjPxPCxkrxfkHqq/M90Qly7guj
GjGltLDmf0i07OJCNwNUf0kkumyxg3TztnsSJ83WIFFFQ0vQIKfXbPfgOAJCI6F+GHfE
j7Bw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779371267; x=1779976067;
h=from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=g1vHfs9XyhGtlq2Q1mNxdb7+pvpuH13OEiHal728/Sk=;
b=kOgbaVYk/QGqHiAFWAwt+cwE/CWU/Vv8Nv/sAfVt5/bR60EGSdrzcWlo6ClDad2EUv
/9+qX5njiR/Dm8lUUJ3p5QkFmwFI0WxGzDhyMFwXemQc4ZCREFRBQgCBsclccr8qx/6u
u/06qagrNy6tblHo54xhQ3rAjsbLAFC3/Y/Q0+4ktnZoSQAosZgvC4LYU0a1/K+MC+We
UncwV2yb3U3s975nLXAxu1A/K/JjHffsVPyPPkAReIyOB/gVDFtyOyeGlVBGhU7waqdY
ORNio5Ig8IBSHGG4jSGuJr8hB8VUgKAW60M4VnsBlWiZGXsIfiCqw3bk3sPnZdudNSlg
6wLA==
X-Forwarded-Encrypted: i=1; AFNElJ9aBo9LwhltQTGXaEhyTOu9NsgCdxxY9d+43/rtkA0o5in0onH2qzsrog4vPyyWZlqhKgZkzjY=@nl2k.ab.ca
X-Gm-Message-State: AOJu0YxI4n8UKygTF+COR+tYdeBc/VnvwTGSkXZN0vntXN2Qwk5Jmwa5
dnfStqH4ZXXTPaQfPp3eYMrlDJXg28PrxIAfck9Ltl64ZLZDNo8cyLDKCMZ227MJAmYyiYosy0o
fj01jJXCN1l6dSpjfEWffCqrUAPHp10od/fuXONsu/423ZA==
MIME-Version: 1.0
X-Received: by 2002:a05:6830:901:b0:7e1:90a:97c2 with SMTP id
46e09a7af769-7e5ec5bdb88mt1317208a34.23.1779371266740; Thu, 21 May 2026
06:47:46 -0700 (PDT)
Reply-To: Aero Zeso
Sender: Google Calendar
Message-ID:
Date: Thu, 21 May 2026 13:47:47 +0000
Subject: Billing Update: OJN - Invoice #68361
From: Aero Zeso
Content-Type: multipart/alternative; boundary="0000000000004c652d06525428e8"
X-Spam_score: 10.8
X-Spam_score_int: 108
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Billing Update: OJN - Invoice #68361 Billing Update: OJN -
Invoice #68361 Thursday May 21, 2026 â‹… 10:47pm Eastern Time - New York
Webroot AntiSpyware 📄 Subscription Renewal Date: Thursday, 21 May 2026Subscription
Renewal ID-Digit: S4EM1UFBQZXLJG📞 Service Hotline: (805)-303 0254.Auto-security
renewal now active.Dear Member, [...]
Content analysis details: (10.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.74 listed in dnsbl.ahbl.org]
[209.85.210.74 listed in dnsbl.ahbl.org]
[209.85.210.74 listed in dnsbl.ahbl.org]
[209.85.210.74 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.74 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.74 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
1.2 MISSING_HEADERS Missing To: header
0.6 J_CHICKENPOX_64 BODY: 6alpha-pock-4alpha
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.74 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.74 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.210.74 listed in bl.score.senderscore.com]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
1.9 REPLYTO_WITHOUT_TO_CC No description available.
3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
Subject: {SPAM?} Billing Update: OJN - Invoice #68361
Billing Update: OJN - Invoice #68361
Billing Update: OJN - Invoice #68361
Billing Update: OJN - Invoice #68361
Thursday May 21, 2026 ⋅ 10:47pm (Eastern Time - New York)
Webroot AntiSpyware 📄 Subscription Renewal Date: Thursday, 21 May 2026
Subscription Renewal ID-Digit: S4EM1UFBQZXLJG
📞 Service Hotline: (805)-303 0254.
Auto-security renewal now active.
Dear Member,
This message is shared to acknowledge your association with the Webroot AntiSpyware community over the past 48-Month. We appreciate your time with us. Your previous subscription period has concluded, and assistance is available should you wish to continue using our services.
Order Tracking:
Quantity: One-X Device
Product: AlphaGuard Pro
Plan: 48-Month Warranty
Payment Method: Auto Debit
Total Amount: $442.11 USD
Client ID: NH3WFS7DY9
Activation Key: 7736ee85-19f8-4cec-b5c8-60a63c726b43
📌 If you have questions or would like support regarding your account, you may contact us at (805)-303 0254..
Stay Blessed,
Webroot Premium
Accounts Team: Denise Robinson
📞 Call for Customer Support: (805)-303 0254
Office Address: 64 Melody Ln Merced Ca 95340 US
Daily Hours: 6 AM – 6 PM
Guests
(Guest list has been hidden at organizer's request)
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 10:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wQ5rO-00000000HdJ-2szL
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 10:02:58 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 May 2026 10:02:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f74.google.com ([209.85.210.74]:46198)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wQ3lR-000000000JD-2jp6
for doctor@nl2k.ab.ca;
Thu, 21 May 2026 07:48:51 -0600
Received: by mail-ot1-f74.google.com with SMTP id 46e09a7af769-7e56806cfecso7402185a34.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20251104; t=1779371267; x=1779976067; darn=nl2k.ab.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=g1vHfs9XyhGtlq2Q1mNxdb7+pvpuH13OEiHal728/Sk=;
b=DzVSXJC/9gSC/4JzVYMMLAeO7T8wZTjH+KEE3vjFjaEJ4TxgfmQ9Tx6hP5qn136CHb
7iRB4gYgzhnkS3TUNKw0W5XLXXoIgM85ckw8El1v3ejzSypAtOexq0LztcehHOLeHpNh
3B/qyml0NCqQmYouiglNcspSpNpmvDy8Q0YLYj2Tf1f+v5xBNuoi8xeKffDYF6rGpxO7
hiXW+DadG3r1o/ppQoy3Ea5+hh/tjGKyZcfhfenhCaRfQt0ZtlADe6dk7ueaEACXaaJX
CUo35eJjHHMICbdw8gMWweG/DxYeLb9c40OJRUMRRbD/83p1vGnXU597jQrO///njmHS
UTtA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=autonetfb-com.20251104.gappssmtp.com; s=20251104; t=1779371267; x=1779976067; darn=nl2k.ab.ca;
h=from:subject:date:message-id:sender:reply-to:mime-version:from:to
:cc:subject:date:message-id:reply-to;
bh=g1vHfs9XyhGtlq2Q1mNxdb7+pvpuH13OEiHal728/Sk=;
b=VpCyunACLrJEojPkqGDTsU/rCMFCMxQxkQaRMJOyJK3QZf10g8/6D7SG9ZU/dJ/peQ
GEbAdTrcAe/8Y0ZYW0/VOdyyNH4a2MZK+6Ak2vKP6ZhOmnyfvOnd3ScQ+CRarwdrT8GS
o7ia2Sx2CpuuHicei4w3qhn1FFZ1Ifax/6R4LpfYxGck0twY+O0oMg6cSWyHVS0s7jAb
4fmBs/dip/bvQMWOQ8eIQLRFyMtUojvvNdeP7rJFk2LjPxPCxkrxfkHqq/M90Qly7guj
GjGltLDmf0i07OJCNwNUf0kkumyxg3TztnsSJ83WIFFFQ0vQIKfXbPfgOAJCI6F+GHfE
j7Bw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779371267; x=1779976067;
h=from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=g1vHfs9XyhGtlq2Q1mNxdb7+pvpuH13OEiHal728/Sk=;
b=kOgbaVYk/QGqHiAFWAwt+cwE/CWU/Vv8Nv/sAfVt5/bR60EGSdrzcWlo6ClDad2EUv
/9+qX5njiR/Dm8lUUJ3p5QkFmwFI0WxGzDhyMFwXemQc4ZCREFRBQgCBsclccr8qx/6u
u/06qagrNy6tblHo54xhQ3rAjsbLAFC3/Y/Q0+4ktnZoSQAosZgvC4LYU0a1/K+MC+We
UncwV2yb3U3s975nLXAxu1A/K/JjHffsVPyPPkAReIyOB/gVDFtyOyeGlVBGhU7waqdY
ORNio5Ig8IBSHGG4jSGuJr8hB8VUgKAW60M4VnsBlWiZGXsIfiCqw3bk3sPnZdudNSlg
6wLA==
X-Forwarded-Encrypted: i=1; AFNElJ9aBo9LwhltQTGXaEhyTOu9NsgCdxxY9d+43/rtkA0o5in0onH2qzsrog4vPyyWZlqhKgZkzjY=@nl2k.ab.ca
X-Gm-Message-State: AOJu0YxI4n8UKygTF+COR+tYdeBc/VnvwTGSkXZN0vntXN2Qwk5Jmwa5
dnfStqH4ZXXTPaQfPp3eYMrlDJXg28PrxIAfck9Ltl64ZLZDNo8cyLDKCMZ227MJAmYyiYosy0o
fj01jJXCN1l6dSpjfEWffCqrUAPHp10od/fuXONsu/423ZA==
MIME-Version: 1.0
X-Received: by 2002:a05:6830:901:b0:7e1:90a:97c2 with SMTP id
46e09a7af769-7e5ec5bdb88mt1317208a34.23.1779371266740; Thu, 21 May 2026
06:47:46 -0700 (PDT)
Reply-To: Aero Zeso
Sender: Google Calendar
Message-ID:
Date: Thu, 21 May 2026 13:47:47 +0000
Subject: Billing Update: OJN - Invoice #68361
From: Aero Zeso
Content-Type: multipart/alternative; boundary="0000000000004c652d06525428e8"
X-Spam_score: 10.8
X-Spam_score_int: 108
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Billing Update: OJN - Invoice #68361 Billing Update: OJN -
Invoice #68361 Thursday May 21, 2026 â‹… 10:47pm Eastern Time - New York
Webroot AntiSpyware 📄 Subscription Renewal Date: Thursday, 21 May 2026Subscription
Renewal ID-Digit: S4EM1UFBQZXLJG📞 Service Hotline: (805)-303 0254.Auto-security
renewal now active.Dear Member, [...]
Content analysis details: (10.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.74 listed in dnsbl.ahbl.org]
[209.85.210.74 listed in dnsbl.ahbl.org]
[209.85.210.74 listed in dnsbl.ahbl.org]
[209.85.210.74 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.74 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.74 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
[209.85.210.74 listed in will-spam-for-food.eu.org]
1.2 MISSING_HEADERS Missing To: header
0.6 J_CHICKENPOX_64 BODY: 6alpha-pock-4alpha
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.74 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.74 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.210.74 listed in bl.score.senderscore.com]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
1.9 REPLYTO_WITHOUT_TO_CC No description available.
3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
Subject: {SPAM?} Billing Update: OJN - Invoice #68361
Billing Update: OJN - Invoice #68361
Billing Update: OJN - Invoice #68361
Billing Update: OJN - Invoice #68361
Thursday May 21, 2026 ⋅ 10:47pm (Eastern Time - New York)
Webroot AntiSpyware 📄 Subscription Renewal Date: Thursday, 21 May 2026
Subscription Renewal ID-Digit: S4EM1UFBQZXLJG
📞 Service Hotline: (805)-303 0254.
Auto-security renewal now active.
Dear Member,
This message is shared to acknowledge your association with the Webroot AntiSpyware community over the past 48-Month. We appreciate your time with us. Your previous subscription period has concluded, and assistance is available should you wish to continue using our services.
Order Tracking:
Quantity: One-X Device
Product: AlphaGuard Pro
Plan: 48-Month Warranty
Payment Method: Auto Debit
Total Amount: $442.11 USD
Client ID: NH3WFS7DY9
Activation Key: 7736ee85-19f8-4cec-b5c8-60a63c726b43
📌 If you have questions or would like support regarding your account, you may contact us at (805)-303 0254..
Stay Blessed,
Webroot Premium
Accounts Team: Denise Robinson
📞 Call for Customer Support: (805)-303 0254
Office Address: 64 Melody Ln Merced Ca 95340 US
Daily Hours: 6 AM – 6 PM
Guests
(Guest list has been hidden at organizer's request)
Business Broker Spam from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 10:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wQ5r4-00000000HM6-2ME1
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 10:02:38 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 May 2026 10:02:38 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f177.google.com ([209.85.222.177]:57474)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wQ2UG-00000000MgU-11kU
for sales@nk.ca;
Thu, 21 May 2026 06:27:00 -0600
Received: by mail-qk1-f177.google.com with SMTP id af79cd13be357-911501a99feso783916285a.2
for; Thu, 21 May 2026 05:26:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=teaminvesttheadvisory.com; s=google; t=1779366359; x=1779971159; darn=nk.ca;
h=mime-version:date:content-transfer-encoding:subject:to:from
:message-id:from:to:cc:subject:date:message-id:reply-to;
bh=kZvohykA6oQPlDU0OcEDsK7mNG8a/j6uJ6fxVW9Zg7o=;
b=bQHROnV/La2ZgOVTH6dC/4rCEmuImcJFJIT8E2cG2uqSIhHogGQ1/A7z3EL9/8Nv9+
B11y3oMHo10S0j4FBQ2573CCi5QuuPmOxXzvN3q9S/KkNl9rS9By1nHvEb++aMePCXDk
FxnvbRUToACex+g6Cpx/ovoplu8d4jJtiAy3A3fvpTZ2tFi6UQOZoQ6gmxTK1c5pzmC7
f22uH78JOBU2pD+XVp7Igm9JROZSl1hKFKTbgDKbbvA6ODbKe2q5xYBtricTVym/aDV/
46xlSrzGD1uGEkz3dypoC7cZaxROPCDEatt0D8erTaMioYyYq6rxzIkxK/RmU6Il7lC+
EMbA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779366359; x=1779971159;
h=mime-version:date:content-transfer-encoding:subject:to:from
:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=kZvohykA6oQPlDU0OcEDsK7mNG8a/j6uJ6fxVW9Zg7o=;
b=ZxK4cZhu9xo1I9OUh2PJsgM0fscYAmAHtnPairQ8mYfzZB9LfAEdnuHzuDcfmLZ0yM
N+KQzbLskXR19MYhgI8FjD0flHD9h+aj2uOPqgIo52iMNKWLYwgMSEI80elRqAytUb6t
kzHgSoYEzKowl2RT5SB7h2l3/eVKYDuFhb5S5zbMWRs0gnVT5Acd3SSYZV0xwgtZoDDA
kifhDGD2TY4k9ZCji02IdB4PUsKPAu+KLT30+9U/mYdXvcIrryCaYT06OUPj1P/WkOMd
XbNXJTgmwfwTkOph+rKDJxfuNFOlQlJ4KlzRYjB7JR9rtoT17bk9PzWXNtub5t3lVmWr
0+7g==
X-Gm-Message-State: AOJu0YzwvEPhNB5hLjgVWJB2qIN5yvT93S5qA2h52o6uoPDNDzMIz0BR
tzBBg/MQErNz03GFwoP80rswEAMLYCa7hOQLmrw7dmNsBdyBG5NJGbBTNAICPIH4fwc+GD2g0v+
BdZYbrg==
X-Gm-Gg: Acq92OEUxSRppE01Zp+2ZRQVfiJeHeilHlhAJgcivjYgWUrWopjycPLyhgstFyN3lUe
r9Ys11TpWuAL1QNrLtsC9rJ8Djzl/MptRKV1G7KBhxGkpxY1ZbZvSxAcx/AeBR6PjRKQhaDD9TI
F92T4z6cd+zjcvnI8HsULztUHKWof6U3dBAayS+qFAksHmcdvozRjmzTbx5EFFlHDinhh24y4uc
zVmBnhl8sRGaf3yDivEVSOFbsW52YIR44GpG6+/rlG+EQDzESUwJi7dg0H5kqAiNXW8HTdqnFBd
UpNGiNYlKdKXID4bU6pwluvOegAiTObEZhkrxDAumWwx6GSoe2k7Svm09E25FeKsG3j2ZkVj33L
KUlc4hRBjHkWZoT9uRlnd+9otlZDavMmSq3J46R6zwlYkd7MFnzH4NwiStGu+7TEaTx4R+2OnLR
i/gPlJxGMakRTukI7CZPHqviwxUClbGKpEfnr4qG2rm3CipoTWlU9VUQSpVRzpEud1GHhLCTBLY
xaYh4nkS98d+zNHSxDqVpG72yCJaodMqgkoeCJ2WCk64JsRCa2Izm/o6r08ClsGklo/sRvG
X-Received: by 2002:a05:620a:408c:b0:8ef:3de6:c5a9 with SMTP id af79cd13be357-914a2d141afmr325976185a.47.1779366358523;
Thu, 21 May 2026 05:25:58 -0700 (PDT)
Received: from 019e4a7f-eb92-7c10-81f5-3f8810d93ffc.local (ec2-34-229-119-73.compute-1.amazonaws.com. [34.229.119.73])
by smtp.gmail.com with ESMTPSA id af79cd13be357-914abbae5d1sm76386985a.32.2026.05.21.05.25.58
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 21 May 2026 05:25:58 -0700 (PDT)
Message-ID:
<019e4a7f-eb92-7c10-81f5-3f8810d93ffc@teaminvesttheadvisory.com>
X-Mail-Abuse-Inquiries:
https://app.instantly.ai/privacy/report-abuse/019e4a7f-eb92-7c10-81f5-3f8810d93ffc
From: Oliver Bogner
To: sales@nk.ca
Subject: Netknow Internet Knowledge <> The Advisory
Content-Transfer-Encoding: quoted-printable
Date: Thu, 21 May 2026 12:25:58 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Hello,
Quick note: we may have a buyer who is actively seeking a =
=C2=A0business like Netknow Internet Knowledge.
Oliver Bogner here, =
Managing Partner at The Advisory Investment Bank (Top 5 Lower Middle Market=
, 2025). Previously sold some of my own companies, Forbes 30 under 30, and =
INC 5,000 CEO.=C2=A0
Are you free for a brief chat sometime next week?
Best,
Oliver Bogner
Managing Partner | The Advisory Investment Bank
Top 3 Lower Middle Market Investment Bank on Axial - 2025 List
2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO
A: 269 S Beverly Dr. =
Beverly Hills, CA 9021
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 10:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wQ5r4-00000000HM6-2ME1
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 10:02:38 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 May 2026 10:02:38 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f177.google.com ([209.85.222.177]:57474)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wQ2UG-00000000MgU-11kU
for sales@nk.ca;
Thu, 21 May 2026 06:27:00 -0600
Received: by mail-qk1-f177.google.com with SMTP id af79cd13be357-911501a99feso783916285a.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=teaminvesttheadvisory.com; s=google; t=1779366359; x=1779971159; darn=nk.ca;
h=mime-version:date:content-transfer-encoding:subject:to:from
:message-id:from:to:cc:subject:date:message-id:reply-to;
bh=kZvohykA6oQPlDU0OcEDsK7mNG8a/j6uJ6fxVW9Zg7o=;
b=bQHROnV/La2ZgOVTH6dC/4rCEmuImcJFJIT8E2cG2uqSIhHogGQ1/A7z3EL9/8Nv9+
B11y3oMHo10S0j4FBQ2573CCi5QuuPmOxXzvN3q9S/KkNl9rS9By1nHvEb++aMePCXDk
FxnvbRUToACex+g6Cpx/ovoplu8d4jJtiAy3A3fvpTZ2tFi6UQOZoQ6gmxTK1c5pzmC7
f22uH78JOBU2pD+XVp7Igm9JROZSl1hKFKTbgDKbbvA6ODbKe2q5xYBtricTVym/aDV/
46xlSrzGD1uGEkz3dypoC7cZaxROPCDEatt0D8erTaMioYyYq6rxzIkxK/RmU6Il7lC+
EMbA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779366359; x=1779971159;
h=mime-version:date:content-transfer-encoding:subject:to:from
:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=kZvohykA6oQPlDU0OcEDsK7mNG8a/j6uJ6fxVW9Zg7o=;
b=ZxK4cZhu9xo1I9OUh2PJsgM0fscYAmAHtnPairQ8mYfzZB9LfAEdnuHzuDcfmLZ0yM
N+KQzbLskXR19MYhgI8FjD0flHD9h+aj2uOPqgIo52iMNKWLYwgMSEI80elRqAytUb6t
kzHgSoYEzKowl2RT5SB7h2l3/eVKYDuFhb5S5zbMWRs0gnVT5Acd3SSYZV0xwgtZoDDA
kifhDGD2TY4k9ZCji02IdB4PUsKPAu+KLT30+9U/mYdXvcIrryCaYT06OUPj1P/WkOMd
XbNXJTgmwfwTkOph+rKDJxfuNFOlQlJ4KlzRYjB7JR9rtoT17bk9PzWXNtub5t3lVmWr
0+7g==
X-Gm-Message-State: AOJu0YzwvEPhNB5hLjgVWJB2qIN5yvT93S5qA2h52o6uoPDNDzMIz0BR
tzBBg/MQErNz03GFwoP80rswEAMLYCa7hOQLmrw7dmNsBdyBG5NJGbBTNAICPIH4fwc+GD2g0v+
BdZYbrg==
X-Gm-Gg: Acq92OEUxSRppE01Zp+2ZRQVfiJeHeilHlhAJgcivjYgWUrWopjycPLyhgstFyN3lUe
r9Ys11TpWuAL1QNrLtsC9rJ8Djzl/MptRKV1G7KBhxGkpxY1ZbZvSxAcx/AeBR6PjRKQhaDD9TI
F92T4z6cd+zjcvnI8HsULztUHKWof6U3dBAayS+qFAksHmcdvozRjmzTbx5EFFlHDinhh24y4uc
zVmBnhl8sRGaf3yDivEVSOFbsW52YIR44GpG6+/rlG+EQDzESUwJi7dg0H5kqAiNXW8HTdqnFBd
UpNGiNYlKdKXID4bU6pwluvOegAiTObEZhkrxDAumWwx6GSoe2k7Svm09E25FeKsG3j2ZkVj33L
KUlc4hRBjHkWZoT9uRlnd+9otlZDavMmSq3J46R6zwlYkd7MFnzH4NwiStGu+7TEaTx4R+2OnLR
i/gPlJxGMakRTukI7CZPHqviwxUClbGKpEfnr4qG2rm3CipoTWlU9VUQSpVRzpEud1GHhLCTBLY
xaYh4nkS98d+zNHSxDqVpG72yCJaodMqgkoeCJ2WCk64JsRCa2Izm/o6r08ClsGklo/sRvG
X-Received: by 2002:a05:620a:408c:b0:8ef:3de6:c5a9 with SMTP id af79cd13be357-914a2d141afmr325976185a.47.1779366358523;
Thu, 21 May 2026 05:25:58 -0700 (PDT)
Received: from 019e4a7f-eb92-7c10-81f5-3f8810d93ffc.local (ec2-34-229-119-73.compute-1.amazonaws.com. [34.229.119.73])
by smtp.gmail.com with ESMTPSA id af79cd13be357-914abbae5d1sm76386985a.32.2026.05.21.05.25.58
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 21 May 2026 05:25:58 -0700 (PDT)
Message-ID:
<019e4a7f-eb92-7c10-81f5-3f8810d93ffc@teaminvesttheadvisory.com>
X-Mail-Abuse-Inquiries:
https://app.instantly.ai/privacy/report-abuse/019e4a7f-eb92-7c10-81f5-3f8810d93ffc
From: Oliver Bogner
To: sales@nk.ca
Subject: Netknow Internet Knowledge <> The Advisory
Content-Transfer-Encoding: quoted-printable
Date: Thu, 21 May 2026 12:25:58 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Hello,
Quick note: we may have a buyer who is actively seeking a =
=C2=A0business like Netknow Internet Knowledge.
Oliver Bogner here, =
Managing Partner at The Advisory Investment Bank (Top 5 Lower Middle Market=
, 2025). Previously sold some of my own companies, Forbes 30 under 30, and =
INC 5,000 CEO.=C2=A0
Are you free for a brief chat sometime next week?
Best,
Oliver Bogner
Managing Partner | The Advisory Investment Bank
Top 3 Lower Middle Market Investment Bank on Axial - 2025 List
2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO
A: 269 S Beverly Dr. =
Beverly Hills, CA 9021
Business partnership spam from google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 06:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wQ2Mr-00000000Jlh-0Udk
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 06:19:13 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 May 2026 06:19:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f52.google.com ([209.85.208.52]:50384)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wQ1Kb-000000006J2-02gN
for root@nk.ca;
Thu, 21 May 2026 05:12:58 -0600
Received: by mail-ed1-f52.google.com with SMTP id 4fb4d7f45d1cf-6870a365c77so4101637a12.0
for; Thu, 21 May 2026 04:12:00 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1779361914; cv=none;
d=google.com; s=arc-20240605;
b=VhyPQOMM+/WzL0Kxxj0j7YssqvajRpQnfhFyF0BpKzrMsINEzdSGRhnx4wNYWEXyte
3yf17dsq2uiOP1uTdA8/tnMXfLOyNsBn1OfREvchPWFBvULRANfAQajAZlBI3Hb3ylju
oKk1GPRbfmzKyxr9m3+TYOhWjDzbyl0s/+E+f6F3Vdga4czNpOSRzfsMT2YGVHDWS34U
r3nDrgcDn5Hn0WAO/C4rsxqumMWxvoJ0eWKNcDFq1JhXmclQutPTz+HG4hT8FlHbYwZv
qGC4HgWaS/1ClCrdnN5jxDkiXizQOqxLXYjtPpDLLgVTeqh1Kz+0YHxfcyIc72USoclB
63Uw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=GrWqkGwg6GzVjDwayYPwV6UdhJN+9q6PTRO83M6LGvQ=;
fh=YZIoAtBSAbOctlYA3kznnDQ+80+DtCt/5Bb/GiAIQy0=;
b=STEVCEJfUEdASDXawxiSx5x0jBlO4lpYQ1qQ1FlPK70RuoKDSg+yFTgR4uVSISv6pM
JmplkTJF4bYDzxGAdx+iSVIBju8YS76Oa44I2OrVeLZB4ymSsPjlHEAtb65vc550H4TP
HxWaCQ33T8C6x8DOyAxiEeeLbHmdWRpw0gqKBj0oW/GgI0gRuYaz5x6VFOebd1E7mhGG
Q7I3Y1BrihrpXY1OLzE1jKJQfZYw8nekTcfJ9tOugFlzw86/OXtR9/rYSp5mY+ca+vr4
n1G0SiTcgbr3lNNyCKuOn8RlrswpaF6dOsWxJLdY7QKOTASHT3zj6yoG6HqGhezastol
NNOw==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1779361914; x=1779966714; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=GrWqkGwg6GzVjDwayYPwV6UdhJN+9q6PTRO83M6LGvQ=;
b=NDiQHEJrltW8WvckJAcH5r0StifooQKwqp63yj2vNVuZ5gj5bdKx9dhSjAsrHcZfV5
LfX6HI5un/3+aF2kbT1LBPljq963hNc9fR03+K6nl3pK/qMvHTd8wMfo1EoS07Xk/7dW
h6qQRH+KzNbMs/m+cvYADOvCfqK35AamyhCfuQUeWOK+VtO8d5TJm9XhNcEkUNCV1el2
s/ZSHIeEEWmr2CUslECu5cdhKFjhShj9HxFbmLMUlzf+CUeerIN69jJp3NjnDqyHH7hg
6LwnirZd1BWg4ts32zmr6UXOa3c/b3k1/SR7PRJVxtdlCoiXH1TCrpGw0XhCpMPY2zFa
xkSg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779361914; x=1779966714;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=GrWqkGwg6GzVjDwayYPwV6UdhJN+9q6PTRO83M6LGvQ=;
b=E1Qm4GTQnWyARoFS8ROjWprw1KGKv7gKN+2ZUzBAll1VeYtug+3rpFLM2J6JQLcOXC
HzdyMRwr+HI/rT0/Mhnm/Rt+rZTvVjFL0oSBG/SFzpX/0iQJjdzFWvqcsUFUl1kM1q/t
NQcgP2VX/09JgVGqWYzHmAvE5aBDB61MHNvuHEuiNmWx8B9ZHDLJmkR83T9ntg7q5wYh
fyjwzqw/alfroxJUSGQVd8gSpxnrxRs3g97NwH1LEqP+xAe0nDKpVZnBJHeVTy7EDcmw
ukVqpWEzDX1NwioQ7Jih+WTnuZvlhhAFvrkdxAFuY9FR9TXhqYF1bmnRjW+gGwmhxbwB
G0Yw==
X-Forwarded-Encrypted: i=1; AFNElJ8L0ZBGatz/+kZMPu6AtBfu7xoy85JL7j7EB470Zo7g70AYBLnfxe6bE4PbPpM58B+7qyLO@nk.ca
X-Gm-Message-State: AOJu0YzRxpp9cYjpt9jEw+yCkMRc931/LTKa053Jt2PFlCg8W4NJJC7K
VISeZZRlAdMw9f67R1GhhwyDIqZtAeOfZkvW1xwx+ly6eitQCwItp8W0DSLmBaM8wvQwIxZlFbx
HrJihfE1VKG2fAHxU8w9C7qMTZFtda+52+LDdqcgRXbOoP7PypeR0
X-Gm-Gg: Acq92OEY35VKzvtrCZC6rN4xflRqnTwWwim4G6EoOTmeul2I/G8XJEULFw0E0piMrlk
qQAqYq/iNC3/Bp7BraZqhsFKqPw4ezbLiCaQnr+1UQxkH3E+XjUI/UHvnXDiN6WdYuOK2ox/oLe
irrVHr9hwpE4ytiqxOCd6JLmiGbWybjEbXBxd31jxnhm83r/5nBYR4A1G+SxPRN0qWbrK8XUy44
jqmDCmU5HjWPevawXwr3l1DMAI46nq2qSYDDG+ckBMJZRXmUNvq+9czH+50RE/ycVsmIhnFZysz
chGqLCh2EqQuVpz6HWeXe10A5xhPbfIu+WWivDXEEuzyElBmL5s=
X-Received: by 2002:a05:6000:228a:b0:45e:93b2:37bb with SMTP id
ffacd0b85a97d-45ea39e9b9bmr3800914f8f.6.1779361245386; Thu, 21 May 2026
04:00:45 -0700 (PDT)
MIME-Version: 1.0
From: Ashraf Al Mamari
Date: Thu, 21 May 2026 11:59:51 +0100
X-Gm-Features: AVHnY4LrwHngetW5AQALw7n2akOKouw4nzsrJP0yC-spaKjUwMrcgZCJB4qlgGg
Message-ID:
Subject: Crude oil business opportunity
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000f55e50065251d220"
Bcc: root@nk.ca
--000000000000f55e50065251d220
Content-Type: text/plain; charset="UTF-8"
Hello,
I'm seeking experienced business executives who are open to new
opportunities in crude oil lifting partnership.
Should this be of interest to you I would be glad to provide further details
Regards
Ashraf Al Mamari
Oman Petroleum Company
--000000000000f55e50065251d220
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000f55e50065251d220--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 06:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wQ2Mr-00000000Jlh-0Udk
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 06:19:13 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 May 2026 06:19:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f52.google.com ([209.85.208.52]:50384)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wQ1Kb-000000006J2-02gN
for root@nk.ca;
Thu, 21 May 2026 05:12:58 -0600
Received: by mail-ed1-f52.google.com with SMTP id 4fb4d7f45d1cf-6870a365c77so4101637a12.0
for
ARC-Seal: i=1; a=rsa-sha256; t=1779361914; cv=none;
d=google.com; s=arc-20240605;
b=VhyPQOMM+/WzL0Kxxj0j7YssqvajRpQnfhFyF0BpKzrMsINEzdSGRhnx4wNYWEXyte
3yf17dsq2uiOP1uTdA8/tnMXfLOyNsBn1OfREvchPWFBvULRANfAQajAZlBI3Hb3ylju
oKk1GPRbfmzKyxr9m3+TYOhWjDzbyl0s/+E+f6F3Vdga4czNpOSRzfsMT2YGVHDWS34U
r3nDrgcDn5Hn0WAO/C4rsxqumMWxvoJ0eWKNcDFq1JhXmclQutPTz+HG4hT8FlHbYwZv
qGC4HgWaS/1ClCrdnN5jxDkiXizQOqxLXYjtPpDLLgVTeqh1Kz+0YHxfcyIc72USoclB
63Uw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=GrWqkGwg6GzVjDwayYPwV6UdhJN+9q6PTRO83M6LGvQ=;
fh=YZIoAtBSAbOctlYA3kznnDQ+80+DtCt/5Bb/GiAIQy0=;
b=STEVCEJfUEdASDXawxiSx5x0jBlO4lpYQ1qQ1FlPK70RuoKDSg+yFTgR4uVSISv6pM
JmplkTJF4bYDzxGAdx+iSVIBju8YS76Oa44I2OrVeLZB4ymSsPjlHEAtb65vc550H4TP
HxWaCQ33T8C6x8DOyAxiEeeLbHmdWRpw0gqKBj0oW/GgI0gRuYaz5x6VFOebd1E7mhGG
Q7I3Y1BrihrpXY1OLzE1jKJQfZYw8nekTcfJ9tOugFlzw86/OXtR9/rYSp5mY+ca+vr4
n1G0SiTcgbr3lNNyCKuOn8RlrswpaF6dOsWxJLdY7QKOTASHT3zj6yoG6HqGhezastol
NNOw==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1779361914; x=1779966714; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=GrWqkGwg6GzVjDwayYPwV6UdhJN+9q6PTRO83M6LGvQ=;
b=NDiQHEJrltW8WvckJAcH5r0StifooQKwqp63yj2vNVuZ5gj5bdKx9dhSjAsrHcZfV5
LfX6HI5un/3+aF2kbT1LBPljq963hNc9fR03+K6nl3pK/qMvHTd8wMfo1EoS07Xk/7dW
h6qQRH+KzNbMs/m+cvYADOvCfqK35AamyhCfuQUeWOK+VtO8d5TJm9XhNcEkUNCV1el2
s/ZSHIeEEWmr2CUslECu5cdhKFjhShj9HxFbmLMUlzf+CUeerIN69jJp3NjnDqyHH7hg
6LwnirZd1BWg4ts32zmr6UXOa3c/b3k1/SR7PRJVxtdlCoiXH1TCrpGw0XhCpMPY2zFa
xkSg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779361914; x=1779966714;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=GrWqkGwg6GzVjDwayYPwV6UdhJN+9q6PTRO83M6LGvQ=;
b=E1Qm4GTQnWyARoFS8ROjWprw1KGKv7gKN+2ZUzBAll1VeYtug+3rpFLM2J6JQLcOXC
HzdyMRwr+HI/rT0/Mhnm/Rt+rZTvVjFL0oSBG/SFzpX/0iQJjdzFWvqcsUFUl1kM1q/t
NQcgP2VX/09JgVGqWYzHmAvE5aBDB61MHNvuHEuiNmWx8B9ZHDLJmkR83T9ntg7q5wYh
fyjwzqw/alfroxJUSGQVd8gSpxnrxRs3g97NwH1LEqP+xAe0nDKpVZnBJHeVTy7EDcmw
ukVqpWEzDX1NwioQ7Jih+WTnuZvlhhAFvrkdxAFuY9FR9TXhqYF1bmnRjW+gGwmhxbwB
G0Yw==
X-Forwarded-Encrypted: i=1; AFNElJ8L0ZBGatz/+kZMPu6AtBfu7xoy85JL7j7EB470Zo7g70AYBLnfxe6bE4PbPpM58B+7qyLO@nk.ca
X-Gm-Message-State: AOJu0YzRxpp9cYjpt9jEw+yCkMRc931/LTKa053Jt2PFlCg8W4NJJC7K
VISeZZRlAdMw9f67R1GhhwyDIqZtAeOfZkvW1xwx+ly6eitQCwItp8W0DSLmBaM8wvQwIxZlFbx
HrJihfE1VKG2fAHxU8w9C7qMTZFtda+52+LDdqcgRXbOoP7PypeR0
X-Gm-Gg: Acq92OEY35VKzvtrCZC6rN4xflRqnTwWwim4G6EoOTmeul2I/G8XJEULFw0E0piMrlk
qQAqYq/iNC3/Bp7BraZqhsFKqPw4ezbLiCaQnr+1UQxkH3E+XjUI/UHvnXDiN6WdYuOK2ox/oLe
irrVHr9hwpE4ytiqxOCd6JLmiGbWybjEbXBxd31jxnhm83r/5nBYR4A1G+SxPRN0qWbrK8XUy44
jqmDCmU5HjWPevawXwr3l1DMAI46nq2qSYDDG+ckBMJZRXmUNvq+9czH+50RE/ycVsmIhnFZysz
chGqLCh2EqQuVpz6HWeXe10A5xhPbfIu+WWivDXEEuzyElBmL5s=
X-Received: by 2002:a05:6000:228a:b0:45e:93b2:37bb with SMTP id
ffacd0b85a97d-45ea39e9b9bmr3800914f8f.6.1779361245386; Thu, 21 May 2026
04:00:45 -0700 (PDT)
MIME-Version: 1.0
From: Ashraf Al Mamari
Date: Thu, 21 May 2026 11:59:51 +0100
X-Gm-Features: AVHnY4LrwHngetW5AQALw7n2akOKouw4nzsrJP0yC-spaKjUwMrcgZCJB4qlgGg
Message-ID:
Subject: Crude oil business opportunity
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000f55e50065251d220"
Bcc: root@nk.ca
--000000000000f55e50065251d220
Content-Type: text/plain; charset="UTF-8"
Hello,
I'm seeking experienced business executives who are open to new
opportunities in crude oil lifting partnership.
Should this be of interest to you I would be glad to provide further details
Regards
Ashraf Al Mamari
Oman Petroleum Company
--000000000000f55e50065251d220
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello,
I'm seeking experienced business executi=
ves who are open to new opportunities in crude oil lifting partnership.
=
Should this be of interest to you I would be glad to provide further de=
tails
Regards
Ashraf Al Mamari
Oman Petroleum Company
I'm seeking experienced business executi=
ves who are open to new opportunities in crude oil lifting partnership.
=
Should this be of interest to you I would be glad to provide further de=
tails
Regards
Ashraf Al Mamari
Oman Petroleum Company
--000000000000f55e50065251d220--
Spotify Phish
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 04:25:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wQ0aF-00000000OTr-3Uwc
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 04:24:55 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 May 2026 04:24:55 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [38.242.154.47] (port=54634 helo=server.34sayfam.net)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wQ06G-00000000KNM-30JL
for root@nk.ca;
Thu, 21 May 2026 03:54:05 -0600
Received: by server.34sayfam.net (Postfix, from userid 1014)
id 521F2104029B; Thu, 21 May 2026 11:53:06 +0200 (CEST)
To: root@nk.ca
Subject: =?UTF-8?B?RmluYWwgd2FybmluZzogUGF5bWVudCBmYWlsZWQgLSBBY2Nlc3MgRmluYWwgTm90aWNl?=
From: Support AB
To: root@nk.ca
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
List-Unsubscribe:,
Message-Id: <20260521095306.521F2104029B@server.34sayfam.net>
Date: Thu, 21 May 2026 11:53:06 +0200 (CEST)
X-Spam_score: 9.2
X-Spam_score_int: 92
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: You no longer have Spotify Premium. Due to a payment issue,
your Spotify Premium account has been suspended. Your subscription has been
changed to the free Spotify version. With the free plan, you will start hearing
ads, lose the ability to listen offline, and will no longer be able to skip
songs at will.
Content analysis details: (9.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[38.242.154.47 listed in dnsbl.ahbl.org]
[38.242.154.47 listed in dnsbl.ahbl.org]
[38.242.154.47 listed in dnsbl.ahbl.org]
[38.242.154.47 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[38.242.154.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[38.242.154.47 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[38.242.154.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[38.242.154.47 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[38.242.154.47 listed in bl.score.senderscore.com]
0.0 TVD_PH_7 BODY: No description available.
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_MXG_BING_REDIR_SUSP BODY: Suspicious Bing redirect
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
4.0 WIKI_IMG Image from wikipedia
1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
Subject: {SPAM?} =?UTF-8?B?RmluYWwgd2FybmluZzogUGF5bWVudCBmYWlsZWQgLSBBY2Nlc3MgRmluYWwgTm90aWNl?=
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 04:25:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wQ0aF-00000000OTr-3Uwc
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 04:24:55 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 May 2026 04:24:55 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [38.242.154.47] (port=54634 helo=server.34sayfam.net)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wQ06G-00000000KNM-30JL
for root@nk.ca;
Thu, 21 May 2026 03:54:05 -0600
Received: by server.34sayfam.net (Postfix, from userid 1014)
id 521F2104029B; Thu, 21 May 2026 11:53:06 +0200 (CEST)
To: root@nk.ca
Subject: =?UTF-8?B?RmluYWwgd2FybmluZzogUGF5bWVudCBmYWlsZWQgLSBBY2Nlc3MgRmluYWwgTm90aWNl?=
From: Support AB
To: root@nk.ca
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
List-Unsubscribe:
Message-Id: <20260521095306.521F2104029B@server.34sayfam.net>
Date: Thu, 21 May 2026 11:53:06 +0200 (CEST)
X-Spam_score: 9.2
X-Spam_score_int: 92
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: You no longer have Spotify Premium. Due to a payment issue,
your Spotify Premium account has been suspended. Your subscription has been
changed to the free Spotify version. With the free plan, you will start hearing
ads, lose the ability to listen offline, and will no longer be able to skip
songs at will.
Content analysis details: (9.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[38.242.154.47 listed in dnsbl.ahbl.org]
[38.242.154.47 listed in dnsbl.ahbl.org]
[38.242.154.47 listed in dnsbl.ahbl.org]
[38.242.154.47 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[38.242.154.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[38.242.154.47 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[38.242.154.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[38.242.154.47 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
[38.242.154.47 listed in will-spam-for-food.eu.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[38.242.154.47 listed in bl.score.senderscore.com]
0.0 TVD_PH_7 BODY: No description available.
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_MXG_BING_REDIR_SUSP BODY: Suspicious Bing redirect
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
4.0 WIKI_IMG Image from wikipedia
1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
Subject: {SPAM?} =?UTF-8?B?RmluYWwgd2FybmluZzogUGF5bWVudCBmYWlsZWQgLSBBY2Nlc3MgRmluYWwgTm90aWNl?=
|
Unsubscribe
ID #TE6FssoQ4qg8LrpdtlU0NFWL5O
Who's Who spam Part 2
Posted by Dave Yadallee onFrom: Sophie Baker
Sent: 1 May 2026 10:34
To: sales@nk.ca
Subject: Canada Prestige Awards 2026
Hi
Just to update you, the awards event calendar has now been finalised for the year. You will be very welcome to any UK or international events for free so if you do want to view this let me know and I’ll send it over. The events offer a great networking opportunity to meet with businesses across a wide range of industries.
We do also have the late nomination process open for the awards if you felt you still want to take part.
I will look forward to hearing from you.
Kind regards,
Sophie Baker
Awards Coordinator
Landline: +44 (0) 121 638 0411
sophie@prestigeawardsguide.co.uk
(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.
To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.
From: Sophie Baker
Sent: 24 April 2026 09:22
To: sales@nk.ca
Subject: Canada Prestige Awards 2026
Hi
I did approach you about being involved in the awards. I am not sure if you saw any of my messages?
We are still accepting entries in a number of categories so if taking part was of interest then do let me know.
Kind regards,
Sophie Baker
Awards Coordinator
Landline: +44 (0) 121 638 0411
sophie@prestigeawardsguide.co.uk
(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.
To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.
From: Sophie Baker
Sent: 25 February 2026 10:23
To: sales@nk.ca
Subject: Canada Prestige Awards 2026
Hi
The nomination stage of our Canada Prestige Awards 2026 is open and we would like to invite to you to take part.
We are reviewing submissions for companies, individuals, products and services. The awards are open to all SMEs who provide a product or service to people or businesses in Canada and therefore can of course be based in other regions.
After the decision making is completed then all winners will be invited to our annual awards event. This gives all of those involved an opportunity to network, meet the judges and take part in promotional press activities which we organise for winners and their guests. All of which is arranged on a complimentary basis.
The Prestige Awards provide the latest news and developments in a variety of industries. Content is available in hard copy print media as well as online features, interviews, competitions and much more. The awards recognise the important work of SME’s and celebrate their many successes and outstanding service over the year.
To learn more about the media platform then please visit www.prestigeawardsguide.co.uk
If you wish to access any subscriber-only content on the website then please let me know and I will provide this on a complimentary basis.
What do I need to do?
Please reply back to us confirming you wish to be considered in this year’s programme.
After we receive your acceptance, you will be placed on the list of shortlisted nominees. Once the allocation of nominations is met, all organisations within that particular category are then passed to our panel of industry expert judges who will ultimately pick a winner. Publicly sourced information is used such as reviews, testimonials, information on the company’s website as well as social media accounts.
Questionnaire & Categories
During the nomination process we give companies and individuals the opportunity to specify the categories they wish to be considered for. We also provide all nominees with the opportunity to submit additional information that may support them being successful in the awards. This could include details on the company, new projects, positive media attention/ other recognition or direct us to online testimonials and customer reviews. This may all have a positive impact on the decision making. Please fill in the short questionnaire provided and include any information you feel relevant.
The questionnaire will be provided once you confirm your participation.
Tell me more about the award programme & who votes
Every year, we invite companies to talk to us about themselves and provide information on why they are worthy of recognition in the awards. We receive submissions from SMEs in all industries who provide products and services to the region. The judges pick a selection of winners in a range of categories.
The awards are a free to enter programme that provide exposure to subscribers looking for information on the very best companies and services.
Once the submissions have been reviewed then winners will be notified by a member of the awards team. Each winner will receive coverage in the awards magazine as well as the website, press releases and will be able to attend the free winner’s event. As previously highlighted, this will give each winner the opportunity to network with other winners, meet the judges and have a photo-shoot with their teams.
For more information on events then please visit our website
Are there any costs?
Unlike many award programmes, we offer no options for companies or individuals to make any financial contributions prior to this year’s decisions being made. This includes the booking of advertorial space or partnership opportunities of any kind.
Winners are chosen by our independent panel made up of select industry experts and our editor-in-chief. This ensures the most deserving are picked each year and decisions cannot be influenced by current relationships.
Not for this year
Although we make every effort to only approach organisations which are relevant to the award categories, we are running this year, you may feel the timing isn’t right for you are the moment. We do not wish to contact people who would rather not be considered so please do let us know if that is the case. You will then be immediately removed and not contacted again about the opportunity.
I do hope we can consider you in the programme and I would be happy to answer any other questions you may have.
Kind regards,
Sophie Baker
Awards Coordinator
Landline: +44 (0) 121 638 0411
sophie@prestigeawardsguide.co.uk
(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.
To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.
Who's Who spam Part 1
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 04:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wQ0V8-00000000NSE-1ucU
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 04:19:38 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 May 2026 04:19:38 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from fenicemedia-smtp7.myhyve.com ([5.255.58.143]:47445)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPxi3-0000000019I-2hL8
for sales@nk.ca;
Thu, 21 May 2026 01:21:05 -0600
Received: from fenicemediawin7.myhyve.com (unknown [172.19.12.98])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client did not present a certificate)
by fenicemedia-smtp7.myhyve.com (Postfix) with ESMTPS id 257AD3152093
for; Thu, 21 May 2026 05:42:39 +0100 (BST)
MIME-Version: 1.0
From: "Sophie Baker"
Reply-To: sophie@prestigeawardsguide.co.uk
To: sales@nk.ca
Subject: Canada Prestige Awards 2026
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_7744_7D67714B.5CA777AE"
X-Mailer: Smart_Send_4_4_2
Date: Thu, 21 May 2026 05:42:38 +0100
Message-ID: <435647289259214517763@fenicemediawin7>
X-Spam_score: 19.6
X-Spam_score_int: 196
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi The deadline for submitting entries into this year’s
awards is May 22nd. If you do wish to be considered then please let us know
in this time.
Content analysis details: (19.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[5.255.58.143 listed in dnsbl.ahbl.org]
[5.255.58.143 listed in dnsbl.ahbl.org]
[5.255.58.143 listed in dnsbl.ahbl.org]
[5.255.58.143 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[5.255.58.143 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[5.255.58.143 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[5.255.58.143 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[5.255.58.143 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
15 GR_DOMAIN_SILLYS1 Spammer tool signature (sillysend)
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[5.255.58.143 listed in bl.score.senderscore.com]
1.0 OPT_OUT BODY: No description available.
1.6 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} Canada Prestige Awards 2026
Hi
This is the final opportunity to be involved in this year’s awards. Unfortunately, as the deadline is May 22nd then no further entries will be accepted after this time.
If you have any questions whatsoever about how the awards work or the value of being involved then please let me know.
If you can’t be involved for this year then I wish you all the best and hope we can consider you in the future.
Kind regards,
Sophie Baker
Awards Coordinator
Landline: +44 (0) 121 638 0411
sophie@prestigeawardsguide.co.uk
(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.
To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.
From: Sophie Baker
Sent: 8 May 2026 09:42
To: sales@nk.ca
Subject: Canada Prestige Awards 2026
Hi
The deadline for submitting entries into this year’s awards is May 22nd.
If you do wish to be considered then please let us know in this time.
As mentioned, there are no fees to take part or to attend the events and meet all of those involved.
If you feel this isn’t the right time to be involved or you simply don’t want to take part in any awards then do let me know so I can ensure you aren’t contacted again for this year.
Kind regards,
Sophie Baker
Awards Coordinator
Landline: +44 (0) 121 638 0411
sophie@prestigeawardsguide.co.uk
(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.
To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 May 2026 04:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wQ0V8-00000000NSE-1ucU
for dave@doctor.nl2k.ab.ca;
Thu, 21 May 2026 04:19:38 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 May 2026 04:19:38 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from fenicemedia-smtp7.myhyve.com ([5.255.58.143]:47445)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPxi3-0000000019I-2hL8
for sales@nk.ca;
Thu, 21 May 2026 01:21:05 -0600
Received: from fenicemediawin7.myhyve.com (unknown [172.19.12.98])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client did not present a certificate)
by fenicemedia-smtp7.myhyve.com (Postfix) with ESMTPS id 257AD3152093
for
MIME-Version: 1.0
From: "Sophie Baker"
Reply-To: sophie@prestigeawardsguide.co.uk
To: sales@nk.ca
Subject: Canada Prestige Awards 2026
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_7744_7D67714B.5CA777AE"
X-Mailer: Smart_Send_4_4_2
Date: Thu, 21 May 2026 05:42:38 +0100
Message-ID: <435647289259214517763@fenicemediawin7>
X-Spam_score: 19.6
X-Spam_score_int: 196
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi The deadline for submitting entries into this year’s
awards is May 22nd. If you do wish to be considered then please let us know
in this time.
Content analysis details: (19.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[5.255.58.143 listed in dnsbl.ahbl.org]
[5.255.58.143 listed in dnsbl.ahbl.org]
[5.255.58.143 listed in dnsbl.ahbl.org]
[5.255.58.143 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[5.255.58.143 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[5.255.58.143 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[5.255.58.143 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[5.255.58.143 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
[5.255.58.143 listed in will-spam-for-food.eu.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
15 GR_DOMAIN_SILLYS1 Spammer tool signature (sillysend)
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[5.255.58.143 listed in bl.score.senderscore.com]
1.0 OPT_OUT BODY: No description available.
1.6 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} Canada Prestige Awards 2026
Hi
This is the final opportunity to be involved in this year’s awards. Unfortunately, as the deadline is May 22nd then no further entries will be accepted after this time.
If you have any questions whatsoever about how the awards work or the value of being involved then please let me know.
If you can’t be involved for this year then I wish you all the best and hope we can consider you in the future.
Kind regards,
Sophie Baker
Awards Coordinator
Landline: +44 (0) 121 638 0411
sophie@prestigeawardsguide.co.uk
(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.
To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.
From: Sophie Baker
Sent: 8 May 2026 09:42
To: sales@nk.ca
Subject: Canada Prestige Awards 2026
Hi
The deadline for submitting entries into this year’s awards is May 22nd.
If you do wish to be considered then please let us know in this time.
As mentioned, there are no fees to take part or to attend the events and meet all of those involved.
If you feel this isn’t the right time to be involved or you simply don’t want to take part in any awards then do let me know so I can ensure you aren’t contacted again for this year.
Kind regards,
Sophie Baker
Awards Coordinator
Landline: +44 (0) 121 638 0411
sophie@prestigeawardsguide.co.uk
(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.
To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.
Chinese products spam Part 3
Posted by Dave Yadallee on
Hi. We recently published A Global and Regional Market Report on Wafer Defect Inspection System 2026. It analyzes the major market players in the industry, which may bring you new information about the global market.
.
If you have further interest in this report or related reports, we would be happy to share the Sample Report and Quotation for your reference.
.
The following manufacturers are covered:
KLA Corporation
Applied Materials
Lasertec
Hitachi High-Tech Corporation
ASML
Onto Innovation
Camtek
SCREEN Semiconductor Solutions
Skyverse Technology
Toray Engineering
NEXTIN
Suzhou TZTEK (Muetec)
Microtronic
Bruker
SMEE
Hangzhou Changchuan Technology
Wuhan Jingce Electronic Group
Angkun Vision (Beijing) Technology
Nanotronics
Visiontec Group
Hefei Yuwei Semiconductor Technology
Suzhou Secote (Optima)
DJEL
Jiangsu VPTEK
Ever Red New Technology
Confovis
Zhongdao Optoelectronic
Suzhou Xinshi Technology
RSIC scientific instrument (Shanghai)
Gaoshi Technology (Suzhou)
Unity Semiconductor SAS
JUTZE Intelligence Technology
Chroma ATE Inc
CMIT
Engitist Corporation
HYE Technology
Shuztung Group
Cortex Robotics
Takano
Shanghai Techsense
......
Segment by Type
Patterned Wafer Defect Inspection System
Non-patterned Wafer Defect Inspection System
E-beam Wafer Defect Inspection and Classification System
Wafer Macro Defects Detection and Classification
Wafer Inspection System for Advanced Packaging
......
Segment by Application
300mm Wafer Size
200mm Wafer Size
Others
.
This report will walk you through the Wafer Defect Inspection System market from the following aspects in: Consumption, Sales, Revenue, Price, Cost, Gross Margin, Market size, Market share, Growth Rate, Trends, etc.
.
In addition, we can also provide customized market research information on demand, covering customized reports, management consulting, IPO consulting, industry chain investigations, as well as database and research services.
.
Thank you for reading.
Best Regards / Cordiali saluti / 谨致问候
Annie Zhang | Global Sales Manager
E-mail: Annie@winmarketresearch.com
Phone: +86-15812413698 (7*24)
TEL: US: +1-888-365-4458(US) +1-202-499-1434(Int'L)
EU: +44-808-111-0143(UK) +44-203-734-8135(EU)
Asia: +86-20-8520-6863(CN) +852-30628839(HK)
USA Office: 17890 Castleton Street Suite 369 City of Industry CA 91748 United States
China Office: VILI International Building No.167 Tianhe District Guangzhou City China
.
If you have further interest in this report or related reports, we would be happy to share the Sample Report and Quotation for your reference.
.
The following manufacturers are covered:
KLA Corporation
Applied Materials
Lasertec
Hitachi High-Tech Corporation
ASML
Onto Innovation
Camtek
SCREEN Semiconductor Solutions
Skyverse Technology
Toray Engineering
NEXTIN
Suzhou TZTEK (Muetec)
Microtronic
Bruker
SMEE
Hangzhou Changchuan Technology
Wuhan Jingce Electronic Group
Angkun Vision (Beijing) Technology
Nanotronics
Visiontec Group
Hefei Yuwei Semiconductor Technology
Suzhou Secote (Optima)
DJEL
Jiangsu VPTEK
Ever Red New Technology
Confovis
Zhongdao Optoelectronic
Suzhou Xinshi Technology
RSIC scientific instrument (Shanghai)
Gaoshi Technology (Suzhou)
Unity Semiconductor SAS
JUTZE Intelligence Technology
Chroma ATE Inc
CMIT
Engitist Corporation
HYE Technology
Shuztung Group
Cortex Robotics
Takano
Shanghai Techsense
......
Segment by Type
Patterned Wafer Defect Inspection System
Non-patterned Wafer Defect Inspection System
E-beam Wafer Defect Inspection and Classification System
Wafer Macro Defects Detection and Classification
Wafer Inspection System for Advanced Packaging
......
Segment by Application
300mm Wafer Size
200mm Wafer Size
Others
.
This report will walk you through the Wafer Defect Inspection System market from the following aspects in: Consumption, Sales, Revenue, Price, Cost, Gross Margin, Market size, Market share, Growth Rate, Trends, etc.
.
In addition, we can also provide customized market research information on demand, covering customized reports, management consulting, IPO consulting, industry chain investigations, as well as database and research services.
.
Thank you for reading.
Best Regards / Cordiali saluti / 谨致问候
Annie Zhang | Global Sales Manager
E-mail: Annie@winmarketresearch.com
Phone: +86-15812413698 (7*24)
TEL: US: +1-888-365-4458(US) +1-202-499-1434(Int'L)
EU: +44-808-111-0143(UK) +44-203-734-8135(EU)
Asia: +86-20-8520-6863(CN) +852-30628839(HK)
USA Office: 17890 Castleton Street Suite 369 City of Industry CA 91748 United States
China Office: VILI International Building No.167 Tianhe District Guangzhou City China
Chinese products spam Part 2
Posted by Dave Yadallee on
Content preview: Hi. We recently published A Global and Regional Market Report
on Wafer Defect Inspection System 2026. It analyzes the major market players
in the industry, which may bring you new information about th [...]
Content analysis details: (6.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[59.82.0.15 listed in dnsbl.ahbl.org]
[59.82.0.15 listed in dnsbl.ahbl.org]
[59.82.0.15 listed in dnsbl.ahbl.org]
[59.82.0.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[59.82.0.15 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[59.82.0.15 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[59.82.0.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[59.82.0.15 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[59.82.0.15 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[59.82.0.15 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[59.82.0.15 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.5 MIME_BAD_LINEBREAK Message body with fishy line breaks
Subject: {SPAM?} =?utf-8?B?UmVsZWFzZXMgTmV3IFJlcG9ydCAtIFdhZmVyIERlZmVjdCBJbnNw?=
=?utf-8?B?ZWN0aW9uIFN5c3RlbSAyMDI2LTIwMzEg5rW36YeP5pWw5o2u5aSE55CG?=
on Wafer Defect Inspection System 2026. It analyzes the major market players
in the industry, which may bring you new information about th [...]
Content analysis details: (6.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[59.82.0.15 listed in dnsbl.ahbl.org]
[59.82.0.15 listed in dnsbl.ahbl.org]
[59.82.0.15 listed in dnsbl.ahbl.org]
[59.82.0.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[59.82.0.15 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[59.82.0.15 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[59.82.0.15 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[59.82.0.15 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
[59.82.0.15 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[59.82.0.15 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[59.82.0.15 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[59.82.0.15 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or
Generic rPTR
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.5 MIME_BAD_LINEBREAK Message body with fishy line breaks
Subject: {SPAM?} =?utf-8?B?UmVsZWFzZXMgTmV3IFJlcG9ydCAtIFdhZmVyIERlZmVjdCBJbnNw?=
=?utf-8?B?ZWN0aW9uIFN5c3RlbSAyMDI2LTIwMzEg5rW36YeP5pWw5o2u5aSE55CG?=
Chinese products spam Part 1
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@nk.ca
Delivery-date: Wed, 20 May 2026 21:33:00 -0600
Received: from out0-15.static.mail.aliyun.com ([59.82.0.15]:54019)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPu8z-00000000M7b-25m3
for dave@nk.ca;
Wed, 20 May 2026 21:32:31 -0600
X-Alimail-AntiSpam:AC=CONTINUE;BC=0.7876297|0.1049292;BR=01201311R711S98rulernew999_84748_200303;CH=yellow;DM=|AD|false|;DS=CONTINUE|ham_enroll_verification|0.0509211-0.0254323-0.923647;FP=13099583996740149947|5|1|97|0|-1|-1|-1;HT=maildocker-contentspam033032062159;MF=annie.f@winglobalinc.com;NM=1;PH=DS;RN=200;RT=0;SR=0;TI=SMTPD_---.hcapp7J_1779334216;
Received: from DESKTOP-JHFQFMI(mailfrom:annie.f@winglobalinc.com fp:SMTPD_---.hcapp7J_1779334216 cluster:ay29)
by smtp.aliyun-inc.com;
Thu, 21 May 2026 11:30:25 +0800
Date: Thu, 21 May 2026 11:30:16 +0800
From: Annie Zhang
Message-ID:
Subject: =?utf-8?B?UmVsZWFzZXMgTmV3IFJlcG9ydCAtIFdhZmVyIERlZmVjdCBJbnNw?=
=?utf-8?B?ZWN0aW9uIFN5c3RlbSAyMDI2LTIwMzEg5rW36YeP5pWw5o2u5aSE55CG?=
Disposition-Notification-To: Annie Zhang
X-Mailer: MailMasterPC/4.19.4.1001 (Win10 22H2)
X-MailMaster-ShowOneRcpt: 1
X-CUSTOM-MAIL-MASTER-SENT-ID: FCA3C376-2954-45E2-8CDE-A300F76D6A3A
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
X-Spam_score: 6.3
X-Spam_score_int: 63
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi. We recently published A Global and Regional Market Report
on Wafer Defect Inspection System 2026. It analyzes the major market players
in the industry, which may bring you new information about th [...]
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@nk.ca
Delivery-date: Wed, 20 May 2026 21:33:00 -0600
Received: from out0-15.static.mail.aliyun.com ([59.82.0.15]:54019)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPu8z-00000000M7b-25m3
for dave@nk.ca;
Wed, 20 May 2026 21:32:31 -0600
X-Alimail-AntiSpam:AC=CONTINUE;BC=0.7876297|0.1049292;BR=01201311R711S98rulernew999_84748_200303;CH=yellow;DM=|AD|false|;DS=CONTINUE|ham_enroll_verification|0.0509211-0.0254323-0.923647;FP=13099583996740149947|5|1|97|0|-1|-1|-1;HT=maildocker-contentspam033032062159;MF=annie.f@winglobalinc.com;NM=1;PH=DS;RN=200;RT=0;SR=0;TI=SMTPD_---.hcapp7J_1779334216;
Received: from DESKTOP-JHFQFMI(mailfrom:annie.f@winglobalinc.com fp:SMTPD_---.hcapp7J_1779334216 cluster:ay29)
by smtp.aliyun-inc.com;
Thu, 21 May 2026 11:30:25 +0800
Date: Thu, 21 May 2026 11:30:16 +0800
From: Annie Zhang
Message-ID:
Subject: =?utf-8?B?UmVsZWFzZXMgTmV3IFJlcG9ydCAtIFdhZmVyIERlZmVjdCBJbnNw?=
=?utf-8?B?ZWN0aW9uIFN5c3RlbSAyMDI2LTIwMzEg5rW36YeP5pWw5o2u5aSE55CG?=
Disposition-Notification-To: Annie Zhang
X-Mailer: MailMasterPC/4.19.4.1001 (Win10 22H2)
X-MailMaster-ShowOneRcpt: 1
X-CUSTOM-MAIL-MASTER-SENT-ID: FCA3C376-2954-45E2-8CDE-A300F76D6A3A
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
X-Spam_score: 6.3
X-Spam_score_int: 63
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi. We recently published A Global and Regional Market Report
on Wafer Defect Inspection System 2026. It analyzes the major market players
in the industry, which may bring you new information about th [...]
B2B spam from Google Gmail Part 1
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 May 2026 21:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPtiR-00000000JSU-1VFn
for dave@doctor.nl2k.ab.ca;
Wed, 20 May 2026 21:04:55 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 May 2026 21:04:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f194.google.com ([209.85.128.194]:51570)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPrKx-00000000Pu0-2qFj
for sales@nk.ca;
Wed, 20 May 2026 18:32:39 -0600
Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-79a535e7c00so54686757b3.3
for; Wed, 20 May 2026 17:31:13 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1779323468; cv=none;
d=google.com; s=arc-20240605;
b=I+7AY8WLYtfmf0BUqXXYkC5OaQHmXy0a5y6ZKQoQ+/C2ee7LZTkGExSCTRRTsFm1N7
pdufJEsEq7b8KGbUDJn2PA2twMzll5q/XdEi2CiI6McQP0U9a8lqL/de+NnoQQAu3jN5
Rp03bglF0Sq5G9LTC/b/o2P6DmI4QkOfeVb7vfun7gwsmHWnjDoj+31JPGmBo2YIOfWk
97TMFprVW7k1F3Z8w0GPElJIoE/GcrBNFv1LYnttGhmWjp5SX6ho3tK34nc0f+hrCwt9
As+owATTny+P00eykSwsfMOpa5K3KB00I/u9xcKuoRXV9BJ154JcLBxyEmRwUzLVqKcb
I+4w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=t3ObNNsQLPKdPGggweXHFLdbFaJKUtXUcFik3SpWUis=;
fh=SbdvE6ALrfgtYdNRIY5pAlGANFNICGF3/4YPW7cyh8E=;
b=kmKFeOpA+IpS6zCgIEnwCg+n1TTJVgvRioUdZ/4+EaxVH9IN0Bpp3Zfa9nAS94tbU0
KN40JFJ4PDG7G+so3e/gXUtbkZ1LLtkn1ZNXfZ88y+3b304wklI4IxtqO8sM1tKJCDsf
/8+2zj0cErw6zTDeCnFPMlSogp0KYrXGbKnHNTWEvyz9qBbbqWs3GdfCPZyb8AcaHXkp
cwcvefBiRISrQuDzkmBJxKmOh7f3URkTWmRtXCs0KRuH3K+OvZOjLsxsxLSOV3JvLhiA
IX7mQ5tdbrkiELokN2IMCzFA72Rhf4NSxciXFr0y5IfjP6VHBBnJEDufYdKIAmTUE2S0
3Gww==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=globistictec.com; s=google; t=1779323468; x=1779928268; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=t3ObNNsQLPKdPGggweXHFLdbFaJKUtXUcFik3SpWUis=;
b=KKKPTMujDaMIMfmHbzAxBELS5bCwDqKhwj8OKortbo79HaYXaR3FaT3xHTOw8eByNg
uySWHufpHx1rzZNFigMXj7XKwCRHL4ZU6fdyXbnmpQ6dEkMqQAFZdYaGi/rU3ze3PefP
sUX9Zd6RVaSXbV1am1o9va11IqjutauXndwySXDmR8H+uv0Mm7iQPsKH/8hEIlawWUVG
iV8FORO/YnvlDUdDeARTPV0j/jkqFatNw3wB4fZGVf6M8aW2w4/sRhlcc/g1muu9ZMvT
viqiAWj7WLqx6CVw4DC19CDfdFo9rS9AgjkmNAL0tV11S65EEexfkxiM0T6zEhxm1vWG
Mmog==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779323468; x=1779928268;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=t3ObNNsQLPKdPGggweXHFLdbFaJKUtXUcFik3SpWUis=;
b=SIlfpTcwxCQNJ1VUr7bNIZqbcQ4YlPwNk6wag9f7tAvzUqSP78oF9HjfIY8C0I79hw
ZP5+wCuy9Tgm1fJjp6aJgAXLmaSCUfIqRgHKthyG6mqH0TMq35ZfpBqf0GA6454CfT9J
Qt7282CHWgLrKTmY436tfSR6G4Rq30i1FlQqdGY1VmjHxh8mWze3MSSg/mpnlabKwsng
iyzrwDyGO/4/3RUeb7GHFMeGs6RIsmTSJch2KzjHUZ/Evgf0eHR1PTECdfI7uZydU285
6mDeNkYKzkpZlq2Hcb2jNBIkGtWQFCpVPDt67CXu9PH76ifDTS+l0toTmw6T4DZG8gDy
17PQ==
X-Forwarded-Encrypted: i=1; AFNElJ+mTDIJOlFPU3jGZitrQv7WHqTLszKHKzuBj/b/nyYgkBXcKqFcSCvDTPsV44LlmQGXzK+XTg==@nk.ca
X-Gm-Message-State: AOJu0Yy8x7LZWQMQbuaSpdzYRujVG8IkmIrl25E161zdVKSmSIshSPfB
NGxjX+soYMtMxPkvPVLvFTNou7QKnjB9lW5yabSIy24cLgw/94ne6azE+w9E04AM6796nq0Ha52
gZNeiPgUI7ZR++41mzkmZUgmvt6fljcD5fyis0DUKKQ==
X-Gm-Gg: Acq92OEC6baa1W4uQlExPKR2PT4Bj+6N8GnZ12ISmRlctVdX4pCq0vfMXZQyM+4k3Nq
v7O3QZ6I5wCcx3Et6f/q97D3CjrDQhDqGkuip72iO6QWh9z+j4dNRnTgaBHEsbuhIu8h68q4OrB
bMdZpWHPmfkQGVjnMwtpIm/s3+hqSEm4A1ej2EJep8B6ibVcf3wiJbvwm3lyY7/NeffLo7mBTGe
VvEYELrxlnw6AKEduZZ0vibemdCbmCd/AdWy3Li31DSuUixTVpL8lSULDPtPD0BKQ2ySuL/gr0J
d34Qsmktpl5WXFtRB2Z/g7EYcWn2sU8o5pMvHIfD1A==
X-Received: by 2002:a05:690c:281:b0:7cf:d242:d94a with SMTP id
00721157ae682-7d20cb3bb93mr8861157b3.25.1779323466726; Wed, 20 May 2026
17:31:06 -0700 (PDT)
MIME-Version: 1.0
From: caroline jones
Date: Thu, 21 May 2026 06:00:00 +0530
X-Gm-Features: AVHnY4Lh2dtaFDs0uUviLIRBVgupt9pVRcYljZggWk1mXme3oJ4yI22ibv7VvAg
Message-ID:
Subject: Updated B2B Contact List for Your Ideal Audience
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000002cd86e06524907ee"
Bcc: sales@nk.ca
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Hope you're doing well! I’d love to send you a free
sample of our B2B marketing database — packed with high-quality contacts
from industries like *Healthcare, Tech, Finance, Retail, Automotive*, and
more.
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.194 listed in dnsbl.ahbl.org]
[209.85.128.194 listed in dnsbl.ahbl.org]
[209.85.128.194 listed in dnsbl.ahbl.org]
[209.85.128.194 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.194 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.194 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.194 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.194 listed in wl.mailspike.net]
Subject: {SPAM?} Updated B2B Contact List for Your Ideal Audience
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 May 2026 21:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPtiR-00000000JSU-1VFn
for dave@doctor.nl2k.ab.ca;
Wed, 20 May 2026 21:04:55 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 May 2026 21:04:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f194.google.com ([209.85.128.194]:51570)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPrKx-00000000Pu0-2qFj
for sales@nk.ca;
Wed, 20 May 2026 18:32:39 -0600
Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-79a535e7c00so54686757b3.3
for
ARC-Seal: i=1; a=rsa-sha256; t=1779323468; cv=none;
d=google.com; s=arc-20240605;
b=I+7AY8WLYtfmf0BUqXXYkC5OaQHmXy0a5y6ZKQoQ+/C2ee7LZTkGExSCTRRTsFm1N7
pdufJEsEq7b8KGbUDJn2PA2twMzll5q/XdEi2CiI6McQP0U9a8lqL/de+NnoQQAu3jN5
Rp03bglF0Sq5G9LTC/b/o2P6DmI4QkOfeVb7vfun7gwsmHWnjDoj+31JPGmBo2YIOfWk
97TMFprVW7k1F3Z8w0GPElJIoE/GcrBNFv1LYnttGhmWjp5SX6ho3tK34nc0f+hrCwt9
As+owATTny+P00eykSwsfMOpa5K3KB00I/u9xcKuoRXV9BJ154JcLBxyEmRwUzLVqKcb
I+4w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=t3ObNNsQLPKdPGggweXHFLdbFaJKUtXUcFik3SpWUis=;
fh=SbdvE6ALrfgtYdNRIY5pAlGANFNICGF3/4YPW7cyh8E=;
b=kmKFeOpA+IpS6zCgIEnwCg+n1TTJVgvRioUdZ/4+EaxVH9IN0Bpp3Zfa9nAS94tbU0
KN40JFJ4PDG7G+so3e/gXUtbkZ1LLtkn1ZNXfZ88y+3b304wklI4IxtqO8sM1tKJCDsf
/8+2zj0cErw6zTDeCnFPMlSogp0KYrXGbKnHNTWEvyz9qBbbqWs3GdfCPZyb8AcaHXkp
cwcvefBiRISrQuDzkmBJxKmOh7f3URkTWmRtXCs0KRuH3K+OvZOjLsxsxLSOV3JvLhiA
IX7mQ5tdbrkiELokN2IMCzFA72Rhf4NSxciXFr0y5IfjP6VHBBnJEDufYdKIAmTUE2S0
3Gww==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=globistictec.com; s=google; t=1779323468; x=1779928268; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=t3ObNNsQLPKdPGggweXHFLdbFaJKUtXUcFik3SpWUis=;
b=KKKPTMujDaMIMfmHbzAxBELS5bCwDqKhwj8OKortbo79HaYXaR3FaT3xHTOw8eByNg
uySWHufpHx1rzZNFigMXj7XKwCRHL4ZU6fdyXbnmpQ6dEkMqQAFZdYaGi/rU3ze3PefP
sUX9Zd6RVaSXbV1am1o9va11IqjutauXndwySXDmR8H+uv0Mm7iQPsKH/8hEIlawWUVG
iV8FORO/YnvlDUdDeARTPV0j/jkqFatNw3wB4fZGVf6M8aW2w4/sRhlcc/g1muu9ZMvT
viqiAWj7WLqx6CVw4DC19CDfdFo9rS9AgjkmNAL0tV11S65EEexfkxiM0T6zEhxm1vWG
Mmog==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1779323468; x=1779928268;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=t3ObNNsQLPKdPGggweXHFLdbFaJKUtXUcFik3SpWUis=;
b=SIlfpTcwxCQNJ1VUr7bNIZqbcQ4YlPwNk6wag9f7tAvzUqSP78oF9HjfIY8C0I79hw
ZP5+wCuy9Tgm1fJjp6aJgAXLmaSCUfIqRgHKthyG6mqH0TMq35ZfpBqf0GA6454CfT9J
Qt7282CHWgLrKTmY436tfSR6G4Rq30i1FlQqdGY1VmjHxh8mWze3MSSg/mpnlabKwsng
iyzrwDyGO/4/3RUeb7GHFMeGs6RIsmTSJch2KzjHUZ/Evgf0eHR1PTECdfI7uZydU285
6mDeNkYKzkpZlq2Hcb2jNBIkGtWQFCpVPDt67CXu9PH76ifDTS+l0toTmw6T4DZG8gDy
17PQ==
X-Forwarded-Encrypted: i=1; AFNElJ+mTDIJOlFPU3jGZitrQv7WHqTLszKHKzuBj/b/nyYgkBXcKqFcSCvDTPsV44LlmQGXzK+XTg==@nk.ca
X-Gm-Message-State: AOJu0Yy8x7LZWQMQbuaSpdzYRujVG8IkmIrl25E161zdVKSmSIshSPfB
NGxjX+soYMtMxPkvPVLvFTNou7QKnjB9lW5yabSIy24cLgw/94ne6azE+w9E04AM6796nq0Ha52
gZNeiPgUI7ZR++41mzkmZUgmvt6fljcD5fyis0DUKKQ==
X-Gm-Gg: Acq92OEC6baa1W4uQlExPKR2PT4Bj+6N8GnZ12ISmRlctVdX4pCq0vfMXZQyM+4k3Nq
v7O3QZ6I5wCcx3Et6f/q97D3CjrDQhDqGkuip72iO6QWh9z+j4dNRnTgaBHEsbuhIu8h68q4OrB
bMdZpWHPmfkQGVjnMwtpIm/s3+hqSEm4A1ej2EJep8B6ibVcf3wiJbvwm3lyY7/NeffLo7mBTGe
VvEYELrxlnw6AKEduZZ0vibemdCbmCd/AdWy3Li31DSuUixTVpL8lSULDPtPD0BKQ2ySuL/gr0J
d34Qsmktpl5WXFtRB2Z/g7EYcWn2sU8o5pMvHIfD1A==
X-Received: by 2002:a05:690c:281:b0:7cf:d242:d94a with SMTP id
00721157ae682-7d20cb3bb93mr8861157b3.25.1779323466726; Wed, 20 May 2026
17:31:06 -0700 (PDT)
MIME-Version: 1.0
From: caroline jones
Date: Thu, 21 May 2026 06:00:00 +0530
X-Gm-Features: AVHnY4Lh2dtaFDs0uUviLIRBVgupt9pVRcYljZggWk1mXme3oJ4yI22ibv7VvAg
Message-ID:
Subject: Updated B2B Contact List for Your Ideal Audience
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000002cd86e06524907ee"
Bcc: sales@nk.ca
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Hope you're doing well! I’d love to send you a free
sample of our B2B marketing database — packed with high-quality contacts
from industries like *Healthcare, Tech, Finance, Retail, Automotive*, and
more.
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.194 listed in dnsbl.ahbl.org]
[209.85.128.194 listed in dnsbl.ahbl.org]
[209.85.128.194 listed in dnsbl.ahbl.org]
[209.85.128.194 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.194 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.194 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.194 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.194 listed in wl.mailspike.net]
Subject: {SPAM?} Updated B2B Contact List for Your Ideal Audience
B2B spam from Google Gmail Part 2
Posted by Dave Yadallee on
--0000000000002cd86e06524907ee
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi,
Hope you're doing well!
I=E2=80=99d love to send you a free sample of our B2B marketing database=
=E2=80=94
packed with high-quality contacts from industries like Healthcare, Tech,
Finance, Retail, Automotive*, and more.
Just let me know what you=E2=80=99re looking for*:
Industry: _________? (Any industry you're targeting)
Location: _________? (Example: USA, UK, Canada, etc.)
Job Titles: _________? (Example: CEOs, Managers, Directors)
Once I have this info, I=E2=80=99ll send over the contact counts, pricing =
for your
review.
Let me know what you need =E2=80=94 happy to help you reach your ideal audi=
ence!
Best regards,
Caroline Jones
--0000000000002cd86e06524907ee
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ight:13.91px">Hi,
t>
x">Hope you're doi=
ng well!
height:13.91px">I=E2=
=80=99d love to send you a=C2=A0free sample=C2=A0of our=C2=A0B2B =
marketing database=C2=A0=E2=80=94 packed with high-quality contacts fro=
m industries like=C2=A0Healthcare, Tech, Finance, Retail, Automotive=
, and more.
ne-height:13.91px">=C2=
=A0
t:13.91px">Just let me=
know what you=E2=80=99re looking for:
al" style=3D"margin:0cm 0cm 8pt;line-height:13.91px">
sans-serif" color=3D"#073763">Industry: _________?=C2=A0(Any indust=
ry you're targeting)
cm 0cm 8pt;line-height:13.91px">
"#073763">Location: _________?=C2=A0(Example: USA, UK, Canada, etc.)=
3.91px">Job Titles:=
=C2=A0_________?=C2=A0(Example: CEOs, Managers, Directors)
>
">=C2=A0
class=3D"MsoNormal" style=3D"margin:0cm 0cm 8pt;line-height:13.91px">
face=3D"verdana, sans-serif" color=3D"#073763">Once I have this info,=C2=A0=
I=E2=80=99ll send over the contact counts, pricing for your review.<=
/font>
.91px">Let me know wha=
t you need =E2=80=94 happy to help you reach your ideal audience!
>
--0000000000002cd86e06524907ee--
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hi,
Hope you're doing well!
I=E2=80=99d love to send you a free sample of our B2B marketing database=
=E2=80=94
packed with high-quality contacts from industries like Healthcare, Tech,
Finance, Retail, Automotive*, and more.
Just let me know what you=E2=80=99re looking for*:
Industry: _________? (Any industry you're targeting)
Location: _________? (Example: USA, UK, Canada, etc.)
Job Titles: _________? (Example: CEOs, Managers, Directors)
Once I have this info, I=E2=80=99ll send over the contact counts, pricing =
for your
review.
Let me know what you need =E2=80=94 happy to help you reach your ideal audi=
ence!
Best regards,
Caroline Jones
--0000000000002cd86e06524907ee
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ight:13.91px">Hi,
t>
x">Hope you're doi=
ng well!
height:13.91px">I=E2=
=80=99d love to send you a=C2=A0free sample=C2=A0of our=C2=A0B2B =
marketing database=C2=A0=E2=80=94 packed with high-quality contacts fro=
m industries like=C2=A0Healthcare, Tech, Finance, Retail, Automotive=
, and more.
ne-height:13.91px">=C2=
=A0
t:13.91px">Just let me=
know what you=E2=80=99re looking for:
al" style=3D"margin:0cm 0cm 8pt;line-height:13.91px">
sans-serif" color=3D"#073763">Industry: _________?=C2=A0(Any indust=
ry you're targeting)
cm 0cm 8pt;line-height:13.91px">
"#073763">Location: _________?=C2=A0(Example: USA, UK, Canada, etc.)=
3.91px">Job Titles:=
=C2=A0_________?=C2=A0(Example: CEOs, Managers, Directors)
>
">=C2=A0
class=3D"MsoNormal" style=3D"margin:0cm 0cm 8pt;line-height:13.91px">
face=3D"verdana, sans-serif" color=3D"#073763">Once I have this info,=C2=A0=
I=E2=80=99ll send over the contact counts, pricing for your review.<=
/font>
.91px">Let me know wha=
t you need =E2=80=94 happy to help you reach your ideal audience!
>
ont face=3D"verdana, sans-serif" color=3D"#073763">Best regards,
Caro=
line Jones
--0000000000002cd86e06524907ee--
Nigerian Spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 May 2026 21:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPthp-00000000JOZ-2iKp
for dave@doctor.nl2k.ab.ca;
Wed, 20 May 2026 21:04:17 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 May 2026 21:04:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [71.19.249.163] (port=51548 helo=mail02.viralinbox.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPpnJ-00000000OSR-16XU
for root@nk.ca;
Wed, 20 May 2026 16:53:49 -0600
Received: from [::1] (port=39520 helo=int.viralinbox.com)
by mail02.viralinbox.com with esmtp (Exim 4.99.1)
(envelope-from)
id 1wPpmI-0000000018s-1OhD;
Wed, 20 May 2026 18:52:36 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Wed, 20 May 2026 22:52:35 +0000
From: Sokrith Seng
To: undisclosed-recipients:;
Subject: I NEED YOUR ASSISTANCE !!!
Reply-To: sokrith_s@yahoo.com
Mail-Reply-To: sokrith_s@yahoo.com
Message-ID: <4a3e33ad4f08bbda0c6cec846c611170@ezvib.com>
X-Sender: namesokrithseng50.reward@ezvib.com
User-Agent: ViralinBox/1.3.0
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - mail02.viralinbox.com
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ezvib.com
X-Get-Message-Sender-Via: mail02.viralinbox.com: acl_c_authenticated_local_user: ivib2017
X-Authenticated-Sender: mail02.viralinbox.com: ivib2017
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam_score: 20.9
X-Spam_score_int: 209
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear Friend, My Name is Mr.Sokrith Seng, a personal Accountant
working with Foreign Trade Bank of Cambodia (FTB). A late investor and a
reputable customer in our bank died and left $31,640,000.00 Million dollars
i [...]
Content analysis details: (20.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[71.19.249.163 listed in dnsbl.ahbl.org]
[71.19.249.163 listed in dnsbl.ahbl.org]
[71.19.249.163 listed in dnsbl.ahbl.org]
[71.19.249.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[71.19.249.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[71.19.249.163 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[71.19.249.163 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[71.19.249.163 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.6 SUBJ_ALL_CAPS Subject is all capitals
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 HK_SCAM_N2 BODY: No description available.
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[71.19.249.163 listed in bl.score.senderscore.com]
0.0 ODD_FREEM_REPTO Has unusual reply-to header
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 HK_SCAM No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} I NEED YOUR ASSISTANCE !!!
--
Dear Friend,
My Name is Mr.Sokrith Seng, a personal Accountant working with Foreign
Trade Bank of Cambodia (FTB). A late investor and a reputable customer
in our bank died and left $31,640,000.00 Million dollars in our bank
some years ago and there was no next of kin to claim this fund.
Please get back to me as soon as possible for more details if you are
interested in my proposal.
Best Regards,
Sokrith Seng
Board member
Foreign Trade Bank of Cambodia
Phnom Penh
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 May 2026 21:05:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPthp-00000000JOZ-2iKp
for dave@doctor.nl2k.ab.ca;
Wed, 20 May 2026 21:04:17 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 May 2026 21:04:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [71.19.249.163] (port=51548 helo=mail02.viralinbox.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPpnJ-00000000OSR-16XU
for root@nk.ca;
Wed, 20 May 2026 16:53:49 -0600
Received: from [::1] (port=39520 helo=int.viralinbox.com)
by mail02.viralinbox.com with esmtp (Exim 4.99.1)
(envelope-from
id 1wPpmI-0000000018s-1OhD;
Wed, 20 May 2026 18:52:36 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Wed, 20 May 2026 22:52:35 +0000
From: Sokrith Seng
To: undisclosed-recipients:;
Subject: I NEED YOUR ASSISTANCE !!!
Reply-To: sokrith_s@yahoo.com
Mail-Reply-To: sokrith_s@yahoo.com
Message-ID: <4a3e33ad4f08bbda0c6cec846c611170@ezvib.com>
X-Sender: namesokrithseng50.reward@ezvib.com
User-Agent: ViralinBox/1.3.0
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - mail02.viralinbox.com
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ezvib.com
X-Get-Message-Sender-Via: mail02.viralinbox.com: acl_c_authenticated_local_user: ivib2017
X-Authenticated-Sender: mail02.viralinbox.com: ivib2017
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam_score: 20.9
X-Spam_score_int: 209
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear Friend, My Name is Mr.Sokrith Seng, a personal Accountant
working with Foreign Trade Bank of Cambodia (FTB). A late investor and a
reputable customer in our bank died and left $31,640,000.00 Million dollars
i [...]
Content analysis details: (20.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[71.19.249.163 listed in dnsbl.ahbl.org]
[71.19.249.163 listed in dnsbl.ahbl.org]
[71.19.249.163 listed in dnsbl.ahbl.org]
[71.19.249.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[71.19.249.163 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[71.19.249.163 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[71.19.249.163 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[71.19.249.163 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
[71.19.249.163 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.6 SUBJ_ALL_CAPS Subject is all capitals
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 HK_SCAM_N2 BODY: No description available.
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[71.19.249.163 listed in bl.score.senderscore.com]
0.0 ODD_FREEM_REPTO Has unusual reply-to header
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 HK_SCAM No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} I NEED YOUR ASSISTANCE !!!
--
Dear Friend,
My Name is Mr.Sokrith Seng, a personal Accountant working with Foreign
Trade Bank of Cambodia (FTB). A late investor and a reputable customer
in our bank died and left $31,640,000.00 Million dollars in our bank
some years ago and there was no next of kin to claim this fund.
Please get back to me as soon as possible for more details if you are
interested in my proposal.
Best Regards,
Sokrith Seng
Board member
Foreign Trade Bank of Cambodia
Phnom Penh
Canada REvenue Agency Phish
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 May 2026 21:04:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPthG-00000000JL9-3k28
for dave@doctor.nl2k.ab.ca;
Wed, 20 May 2026 21:03:42 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 May 2026 21:03:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtp1.kagoya.net ([153.127.234.3]:39946)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPpTw-000000007Jn-3Hrr
for doctor@doctor.nl2k.ab.ca;
Wed, 20 May 2026 16:33:49 -0600
Received: from kagoya.net (act01.kagoya.net [133.18.75.67])
by smtp1.kagoya.net (Postfix) with ESMTPA id 6299C608C072B;
Thu, 21 May 2026 07:16:40 +0900 (JST)
MIME-Version: 1.0
Message-ID: <20260520221640.0002216D.0533@kagoya.net>
Date: Thu, 21 May 2026 07:16:40 +0900
From: "Canada Revenue Agency (CRA)"
To:
Subject: Important Document
Content-Type: multipart/alternative;
boundary="-----UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D"
X-Priority: 3
X-MAILER: Active! mail
This is a multi-part message in MIME format.
-------UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Changes On Your Canada Revenue Agency (CRA)
Canada Revenue Agency (CRA) sent you an important document to review and sign.
Review Document
If you have any questions or need assistance, feel free to contact us.
CRA
Canada Revenue Agency
Please do not reply to this email, as it is for notification purposes only.
This is an automated notification. Please do not reply to this message directly.
-------UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D
Content-Type: text/html; charset=US-ASCII
Content-Transfer-Encoding: 7bit
If you have any questions or need assistance, feel free to contact us.
-------UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 May 2026 21:04:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPthG-00000000JL9-3k28
for dave@doctor.nl2k.ab.ca;
Wed, 20 May 2026 21:03:42 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 May 2026 21:03:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtp1.kagoya.net ([153.127.234.3]:39946)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPpTw-000000007Jn-3Hrr
for doctor@doctor.nl2k.ab.ca;
Wed, 20 May 2026 16:33:49 -0600
Received: from kagoya.net (act01.kagoya.net [133.18.75.67])
by smtp1.kagoya.net (Postfix) with ESMTPA id 6299C608C072B;
Thu, 21 May 2026 07:16:40 +0900 (JST)
MIME-Version: 1.0
Message-ID: <20260520221640.0002216D.0533@kagoya.net>
Date: Thu, 21 May 2026 07:16:40 +0900
From: "Canada Revenue Agency (CRA)"
To:
Subject: Important Document
Content-Type: multipart/alternative;
boundary="-----UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D"
X-Priority: 3
X-MAILER: Active! mail
This is a multi-part message in MIME format.
-------UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Changes On Your Canada Revenue Agency (CRA)
Canada Revenue Agency (CRA) sent you an important document to review and sign.
Review Document
If you have any questions or need assistance, feel free to contact us.
CRA
Canada Revenue Agency
Please do not reply to this email, as it is for notification purposes only.
This is an automated notification. Please do not reply to this message directly.
-------UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D
Content-Type: text/html; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Changes On Your Canada Revenue Agency (CRA)
Canada Revenue Agency (CRA) sent you an important document to review and sign.
If you have any questions or need assistance, feel free to contact us.
CRA
Canada Revenue Agency
Please do not reply to this email, as it is for notification purposes only.
This is an automated notification. Please do not reply to this message directly.
-------UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D--
Canada REvenue phish from Japan
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 May 2026 16:32:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPpSC-0000000079k-3i0a
for dave@doctor.nl2k.ab.ca;
Wed, 20 May 2026 16:31:52 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 May 2026 16:31:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtp2.kagoya.net ([153.127.234.4]:57240)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wPpPb-000000006x2-1mjk
for www@doctor.nl2k.ab.ca;
Wed, 20 May 2026 16:29:20 -0600
Received: from kagoya.net (act03.kagoya.net [133.18.75.69])
by smtp2.kagoya.net (Postfix) with ESMTPA id 45B11606EE985;
Thu, 21 May 2026 07:15:38 +0900 (JST)
MIME-Version: 1.0
Message-ID: <20260520221538.0001FA7C.0787@kagoya.net>
Date: Thu, 21 May 2026 07:15:38 +0900
From: "Canada Revenue Agency (CRA)"
To:
Subject: Important Document
Content-Type: multipart/alternative;
boundary="-----LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C"
X-Priority: 3
X-MAILER: Active! mail
This is a multi-part message in MIME format.
-------LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Changes On Your Canada Revenue Agency (CRA)
Canada Revenue Agency (CRA) sent you an important document to review and sign.
Review Document
If you have any questions or need assistance, feel free to contact us.
CRA
Canada Revenue Agency
Please do not reply to this email, as it is for notification purposes only.
This is an automated notification. Please do not reply to this message directly.
-------LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C
Content-Type: text/html; charset=US-ASCII
Content-Transfer-Encoding: 7bit
If you have any questions or need assistance, feel free to contact us.
-------LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 May 2026 16:32:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPpSC-0000000079k-3i0a
for dave@doctor.nl2k.ab.ca;
Wed, 20 May 2026 16:31:52 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 May 2026 16:31:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtp2.kagoya.net ([153.127.234.4]:57240)
by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPpPb-000000006x2-1mjk
for www@doctor.nl2k.ab.ca;
Wed, 20 May 2026 16:29:20 -0600
Received: from kagoya.net (act03.kagoya.net [133.18.75.69])
by smtp2.kagoya.net (Postfix) with ESMTPA id 45B11606EE985;
Thu, 21 May 2026 07:15:38 +0900 (JST)
MIME-Version: 1.0
Message-ID: <20260520221538.0001FA7C.0787@kagoya.net>
Date: Thu, 21 May 2026 07:15:38 +0900
From: "Canada Revenue Agency (CRA)"
To:
Subject: Important Document
Content-Type: multipart/alternative;
boundary="-----LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C"
X-Priority: 3
X-MAILER: Active! mail
This is a multi-part message in MIME format.
-------LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Changes On Your Canada Revenue Agency (CRA)
Canada Revenue Agency (CRA) sent you an important document to review and sign.
Review Document
If you have any questions or need assistance, feel free to contact us.
CRA
Canada Revenue Agency
Please do not reply to this email, as it is for notification purposes only.
This is an automated notification. Please do not reply to this message directly.
-------LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C
Content-Type: text/html; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Changes On Your Canada Revenue Agency (CRA)
Canada Revenue Agency (CRA) sent you an important document to review and sign.
If you have any questions or need assistance, feel free to contact us.
CRA
Canada Revenue Agency
Please do not reply to this email, as it is for notification purposes only.
This is an automated notification. Please do not reply to this message directly.
-------LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C--