0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.196 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.196 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 END_FUTURE_EMAILS Spammy unsubscribe

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_END_FUTURE_EMAILS Spammy unsubscribe

Subject: {SPAM?} Website design/redesign/ Upgrade ?



This is a multi-part message in MIME format.



------=_NextPart_000_11419_01DCBAD6.5BEC1B00

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi there!







I hope you're doing well.







I'm reaching out to see if you're looking to create, upgrade, repair, or

redesign a website or mobile app. I work with Wix, Shopify, and WordPress,

helping businesses improve design, performance, and usability.







I'm an India-based web designer and developer, working with clients

worldwide and offering reliable, cost-effective services.







Technologies & Services I work with:







. HTML, CSS, JavaScript



. React, Next.js



. PHP, Laravel



. Shopify (custom themes & apps)



. WordPress (custom themes & plugins)



. Wix custom design



. Mobile app UI/UX



. Website speed optimization & SEO







If you are interested please share your contact detail, then I can send you

our past work details, company information and an affordable quotation with

the best offer.







Thank you for your time and consideration.







Kind regards,



Karthik,











P.S. If you'd prefer not to receive further emails, simply reply with "NO"

in the subject line.









------=_NextPart_000_11419_01DCBAD6.5BEC1B00

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

------=_NextPart_000_11419_01DCBAD6.5BEC1B00--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Mar 2026 06:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4dws-000000009FE-1uVc

for dave@doctor.nl2k.ab.ca;

Mon, 23 Mar 2026 05:59:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 23 Mar 2026 05:59:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f196.google.com ([209.85.215.196]:56784)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4bh0-00000000DpL-2xBQ

for sales@nk.ca;

Mon, 23 Mar 2026 03:35:41 -0600

Received: by mail-pg1-f196.google.com with SMTP id 41be03b00d2f7-c742d7c8acfso1676240a12.1

for ; Mon, 23 Mar 2026 02:34:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mobwebify-com.20230601.gappssmtp.com; s=20230601; t=1774258474; x=1774863274; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=PAfvEATYELQkeQLD15YSFtjO8Y/eeEk2NaYA3ofv+C0=;

b=0HZ4ZWOnhJIrBD+dJbpLrWIKZqVWwVZeYj2FM5D9UgKMRceVLkJR1caOONZDMhl9EC

zsjyGaoZ4W9YTCkVmgSTPltXeTR8eSNE3I5Of2+hswKX40dsQYyXFYt1a7L8/RklGmXH

CO5w1hkaXt1ZhyTS9CbpgW1LEw86k0LSA34rFmPl7VOJN5kk6+ydGq/huwB20b4Ng7oz

4dZ21NfbCQT4S0OR6naVIq7iQwUVchPQqa7klQEgHqxoDkWwZQlbLj6+74czVGXSXfzd

6pyUGxUPNFCswcUZMi2yysQC9jBUjEVEGz0le42pOFeF0WU5MgxLELYRBEfnJLhCr2Wm

DbVA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774258474; x=1774863274;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=PAfvEATYELQkeQLD15YSFtjO8Y/eeEk2NaYA3ofv+C0=;

b=RAFzrO2O1fFIHp0mRMi7xtRhO5HUdwwUkr12doYwCPfeTp6VomvcW/dwjWgRj+BFWB

muzM0OVtlVgg12VFzGOqak1SQXLe05qoKcYtyn0B9gSDc0XqLdexvwgakAcB2Ymf2tsu

Y/Nn8a4KRxfewaTJKkXt4fFSuk97zjvYMZZrlGHPIZ0c11+LU8kxPKfH8rzVVrvy1qb7

qgD2sZ9uzv6gsbWnOUnHyq0WD7JSYsBgo+oCaZEYdCwaCLqkGbbn+CwOS4iTPzZmyoXY

3t5XLiEorkmNzN8RXszEv5gFyabJqUEFkcKMIeYFvWVb3dXWgMsrIW3HpZ1agI8CjwRv

+ARg==

X-Gm-Message-State: AOJu0YzSlliUi6w77MHdp9aPfSMZoHufpy4t2kw6W/ardnBZLphg2tQZ

++0YLh+Zx0oq1tq/SmOU9vwIaCAusTisWRSeZXDCKJGjhhWvnokD5VTd+1+gTOIZWd5J4Ax91Xx

ikxkzL84=

X-Gm-Gg: ATEYQzwPTAto5zLpJ9xV+e5F1UpsevlJ8mfs3a4jUXbDQFgXeTLKleH2KhSwR+6mo3W

6ufXiGGg8bLg4n9Qq3NgzpPCPGE9AeGaa9ywSYECYYX5EN3aHifjUYiYCbIhG3PxqcT/QJCyrOI

+yKrhks8AZD5bbUMr5PX7S1ElueoPpZl1PbF1oghMeJjLAlYHJGPK98R3eDRzJ4xOyywCg7/fc+

d66H3b8bWjNokHvugzcbTdsQqM/ppHtiYyKn8q/S7HrzZms3gpueAJ9+9Z8ANO25qF0Umnt0O8P

M6zzFhG9uTjdqgvPGY+W35cBhGp/OhvPsk37wQtS4Lh0tLssgNUqyk7yU8eLSLRL3oDgm0v9MQ9

2AuKxS1jGNPZybl79YaK4drTyLZbpZ0zt+rlB27Ih3ClZpz/FeDuBLommV0hFKMaXAGuPQkarD4

KYwZMRIRO0sFMJIHmQjftDo4Z5qkyh4+Au7g==

X-Received: by 2002:a05:6a20:a124:b0:398:7c6b:8616 with SMTP id adf61e73a8af0-39bceb2c4d2mr10181153637.30.1774258473560;

Mon, 23 Mar 2026 02:34:33 -0700 (PDT)

Received: from DESKTOPSRTB37E ([2405:201:402e:a082:39e2:43e9:4c17:ec])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-c74665ca1f8sm7265336a12.20.2026.03.23.02.34.32

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 23 Mar 2026 02:34:33 -0700 (PDT)

From: "Karthik"

To:

Subject: Website design/redesign/ Upgrade ?

Date: Mon, 23 Mar 2026 14:52:57 +0530

Message-ID: <1141801dcbaa8$4233df00$c69b9d00$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_11419_01DCBAD6.5BEC1B00"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Ady6jail9pS8dcBzSDm07H/3lFixkg==

Content-Language: en-us

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi there! I hope you're doing well. I'm reaching out to see

if you're looking to create, upgrade, repair, or redesign a website or mobile

app. I work with Wix, Shopify, and WordPress, helping businesses improve

design, performance, and [...]



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

[209.85.215.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.196 listed in dnsbl.ahbl.org]

[209.85.215.196 listed in dnsbl.ahbl.org]

[209.85.215.196 listed in dnsbl.ahbl.org]

[209.85.215.196 listed in dnsbl.ahbl.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[dnsbl.ahbl.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[dnsbl.ahbl.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[dnsbl.ahbl.org]

[2405:201:402e:a082:39e2:43e9:4c17:ec listed in]

[dnsbl.ahbl.org]

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 23 Mar 2026 06:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4dwO-000000009Eg-3opj

for dave@doctor.nl2k.ab.ca;

Mon, 23 Mar 2026 05:59:28 -0600

Resent-From: The Doctor

Resent-Date: Mon, 23 Mar 2026 05:59:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f49.google.com ([209.85.210.49]:57562)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4aV1-000000006ec-4A4E

for doctor@doctor.nl2k.ab.ca;

Mon, 23 Mar 2026 02:19:09 -0600

Received: by mail-ot1-f49.google.com with SMTP id 46e09a7af769-7d77b179b52so3087130a34.2

for ; Mon, 23 Mar 2026 01:17:37 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1774253851; cv=none;

d=google.com; s=arc-20240605;

b=D13GbLPebqoHbAV1sYJW/1d6WAUsZ4dz7TQGuogLk+/LTgCVh608jrKCdbBMPxPbbV

nvPYd7WYZTDuTBFDWjBAc9eQMEGEOAHMmk3gPWliJJo6U4A0f3VYZw9KWnND2SsW5GFK

mU52GH9cHH0rHMruhD6LAuO+o+JZfUqnZ1KKXLrp3yGaNwhCLD7kgV/6uolDdLFjWKMw

OZt9TGeIJhG+QXOFK2y462eWf+4gZVLwU7zDm35FOaCMU10k5bNQKQiQ4YG7v+8knQTJ

P+sAukZoX+xYn4ejx5XC/DpsKQn6EFZcKlLvgNin5ul6mZZLR2+/BKO67h2JuD2pcsBC

o6Fg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=M5v+5oG5eDxkAxKoi9ISiZTG1WxPiYRtNI/bY69ccpk=;

fh=xaZl+7cO1/q3BwI+4tajlvokh9pahuI9oLng50OXL1c=;

b=SDadieebjhS1+EPyZwd0opn0l7L48ca8Tzi1wKkWiisvXWMKQR2CCiC2x6dMnJKRh/

fBMhc665AESqoSXNOu4xrkHk/eA3RkOFo80Qw3N4Pue9JsS9KHeK2jVvEyVWBmeVUH9E

MetNS3Wuupf+i+uFZ4d1IuHSo/S3OQQa/JcULUx+lkFFOhFwf/RBoC7SdEBXP5ZJSjkW

DRuXZk7U3lItX1vGIacqhTNKVn5Qvzql5tl512P7eeF0ynpysFwSnTIrn40I+8+ycxpA

W+lr0ErTscdBEE17CQSm77AAwa/049L1j95uQBVhFzIl+322uyZc28lAdOc//IOBlWBh

31UQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1774253851; x=1774858651; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=M5v+5oG5eDxkAxKoi9ISiZTG1WxPiYRtNI/bY69ccpk=;

b=PZEUjJq5d+zW/0fGAHGkVcz0vj1k8ZyUVWtvHJhu8PCKssrRM4NXFIlKRmhaRT+Jkg

QtwyQ7+kK8yeubqdCePh43W/FLfWYOu2z2TdMembbW5MUmyL/R5qkNn2HKKdLaH9tx2r

7Oyxai48cE3aCYqH/wFSuJnxtqxjlh7yEFA6O55q7C5DJaQKhr8fQdPPI5w5Pgtx+mCO

fY6dGvixxOI4TXSwl/4dleFP4woPBbdSpfH24pUJTMU4GF8KzlGNUaxl7kWI3I7WLFMu

l55Je79kt8gAYMy6l0A+IljBVGJhD2MYLjX/ywvt3VJW3OaK2LhxloXffsgPKN0G7e6C

etrQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774253851; x=1774858651;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=M5v+5oG5eDxkAxKoi9ISiZTG1WxPiYRtNI/bY69ccpk=;

b=q39wVh79951rknr+MZ+dAKO5UzTLO8fha/hgx/ETpDXyFUT/ag/aLy95Ii4aZII+PO

vPP+UizXy2EgE/gwS11FXfL9Yt6Jl813jV6eoDHCa+NwnUIZGlr1OcVuwdvof3FHnSbW

h69FrxPJ3MmS2iBfDlnGQK6qTpXafmms1boUWYZ998lLeGLdIMguHkvP9tDHgy8vfQ7M

CmFt92qk7OLu9udl/tMfsjhK9L/ddgP9P0j6namWigeVGCOFDhLFMTqkIa7U3RtOdVdr

7EBe1GyKwMprwgLu2Tr9b59zXsCtZxOhwTXYeW2jiw9Swb+V7UMR5ninhXO/A3vxY+qQ

Yr1Q==

X-Forwarded-Encrypted: i=1; AJvYcCXqE7zfm29n+AjmBvq9wnLlxgeN2u4JRdzGnvPJx9YaxjnBBUVXWzmhM+iXMOyCdjQDxAz/13w=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwqGoxcKEt3Tx9Do7zyALxNGyC1mk8fPUHLbZv9Bn/3WNQaVAe6

vKzdv2lQIYa1kN8VMGaPdXSTo6tonoiY38YiHkUeT2sju4rGnxztrTN6r+KL7+XAcS/tnOLKzms

yDuwE7TZaaMj5/d4MqAmNncJfXjfzOUA=

X-Gm-Gg: ATEYQzzx/ofchoAjNUVr9J2HkSYyCKrDgwHcIiHfnVjBK0gtMPmvP1oqmBkIXSYa609

1KAAv5MihyaR2z36535ycb63HWKXehu5EpaZ33dYZ/Dt4kOGEGUXSp7HD8pVjtyuc0x3GQIBjuG

qiKMua7b64l0I8baphHe7VzPyltD/FKaI88DsH8aQ6M7F+XVnOb1T030dZk43BrSJ9rGtTY40qU

UyAo3GaXezxwN6Oow3sFDkXbVgEb+Xqjp1LDhj9Krlt2UOBVHwQ5GLY3G4+X/A0JhwmpiHFOE2M

Fvg+vUxwZHsb+Z2Ns5TmOTIZkM4wcvxy4Ww4ugBEvLItNw6SkM8PwNz7mLni97+zpQ+0MyDi+7p

1Xw==

X-Received: by 2002:a05:6820:82c:b0:67d:bef4:7187 with SMTP id

006d021491bc7-67dbef473a6mr4995462eaf.65.1774253850829; Mon, 23 Mar 2026

01:17:30 -0700 (PDT)

MIME-Version: 1.0

Reply-To: wvicc1974@yahoo.com

From: willson victor

Date: Mon, 23 Mar 2026 06:30:39 +0100

X-Gm-Features: AQROBzCBt7Ald_GSohPdaD4jXO6AHROjO0DCbf-v9wG4hcld5MRgCaG4hdJT9pk

Message-ID:

Subject: GREETINGS

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000085283e064dacaac7"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Hello, I intend to reach out regarding a valuable opportunity

for us both. Kindly confirm if this email is still active. Best regards,

willson victor --



Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

[209.85.210.49 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.49 listed in dnsbl.ahbl.org]

[209.85.210.49 listed in dnsbl.ahbl.org]

[209.85.210.49 listed in dnsbl.ahbl.org]

[209.85.210.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.49 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.49 listed in list.dnswl.org]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[wvicc1974(at)yahoo.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[wvicc1974(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[wvicc1974(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.49 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} GREETINGS



--00000000000085283e064dacaac7

Content-Type: text/plain; charset="UTF-8"



--



Hello,

I intend to reach out regarding a valuable opportunity for us both. Kindly

confirm if this email is still active.

Best regards,

willson victor



--00000000000085283e064dacaac7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

"gmail_signature_prefix">--

ature" data-smartmail=3D"gmail_signature">

Hello,<=

/div>

I intend to reach out regarding a valuable opportunity for us bot=

h. Kindly confirm if this email is still active.

Best regards,
iv>

willson victor

--00000000000085283e064dacaac7--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 22 Mar 2026 20:05:00 -0600

Received: from [192.248.50.242] (port=38532 helo=stm.eng.ruh.ac.lk)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4Uee-00000000OJt-0awI

for dave@doctor.nl2k.ab.ca;

Sun, 22 Mar 2026 20:04:42 -0600

Received: from stm.eng.ruh.ac.lk (unknown [10.50.225.254])

by stm.eng.ruh.ac.lk (Postfix) with ESMTPA id CEFF2FCF0739;

Mon, 23 Mar 2026 07:38:52 +0530 (IST)

Received: from 110.235.184.220

(SquirrelMail authenticated user

siriwardhana_mklm_e21@engug.ruh.ac.lk)

by stm.eng.ruh.ac.lk with HTTP;

Mon, 23 Mar 2026 07:38:52 +0530 (IST)

Message-ID: <20988.110.235.184.220.1774231732.squirrel@stm.eng.ruh.ac.lk>

Date: Mon, 23 Mar 2026 07:38:52 +0530 (IST)

Subject: Attention: Beneficiary

From: "Global Financial Stability"

Reply-To: info@gfstability.online

User-Agent: SquirrelMail/1.4.8-21.el5.centos

MIME-Version: 1.0

Content-Type: text/plain;charset=iso-8859-1

Content-Transfer-Encoding: 8bit

X-Priority: 3 (Normal)

Importance: Normal

To: undisclosed-recipients:;

X-Spam_score: 21.4

X-Spam_score_int: 214

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I have been instructed by Global Financial Stability to inform

you about the release of your delayed compensation pending funds worth of

$917,610.00 US dollars via Debit Card ATM or Bank to Bank trans [...]



Content analysis details: (21.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[110.235.184.220 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

[192.248.50.242 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.248.50.242 listed in dnsbl.ahbl.org]

[192.248.50.242 listed in dnsbl.ahbl.org]

[192.248.50.242 listed in dnsbl.ahbl.org]

[192.248.50.242 listed in dnsbl.ahbl.org]

[110.235.184.220 listed in dnsbl.ahbl.org]

[110.235.184.220 listed in dnsbl.ahbl.org]

[110.235.184.220 listed in dnsbl.ahbl.org]

[110.235.184.220 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.248.50.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.248.50.242 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.248.50.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.248.50.242 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[192.248.50.242 listed in bb.barracudacentral.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[192.248.50.242 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 LOTS_OF_MONEY Huge... sums of money

0.5 MONEY_NOHTML Lots of money in plain text

-1.5 RM_KNOWN_WEBMAIL Header show use of a known webmail

1.5 MONEY_ATM_CARD Lots of money on an ATM card

1.0 XFER_LOTSA_MONEY Transfer a lot of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Attention: Beneficiary



I have been instructed by Global Financial Stability to inform you about the

release of your delayed compensation pending funds worth of $917,610.00 US

dollars via Debit Card ATM or Bank to Bank transfer depending on your

choice of payment.



Kindly reply and confirm your preferred method via our official email:

info@gfstability.online





Sincerely,

Anna Francis

Authorized Representative

Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

[52.103.43.54 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.54 listed in dnsbl.ahbl.org]

[52.103.43.54 listed in dnsbl.ahbl.org]

[52.103.43.54 listed in dnsbl.ahbl.org]

[52.103.43.54 listed in dnsbl.ahbl.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:39d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.54 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.54 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[alister.cook108(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[alister.cook108(at)outlook.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.54 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?iso-8859-1?Q?Quotation=A0?=



--_000_TYZPR01MB790537D2C228C0858EEBFBE6B74AATYZPR01MB7905apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi there,



I really liked the layout of your site, but I noticed a couple of technical=

SEO issues that are preventing it from ranking as high as it should on Goo=

gle.



Would it be okay if I sent that Proposal & Quotation



Alister Cook





--_000_TYZPR01MB790537D2C228C0858EEBFBE6B74AATYZPR01MB7905apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">





























--_000_TYZPR01MB790537D2C228C0858EEBFBE6B74AATYZPR01MB7905apcp_--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 22 Mar 2026 12:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4NSC-00000000FJk-0tVq

for dave@doctor.nl2k.ab.ca;

Sun, 22 Mar 2026 12:23:12 -0600

Resent-From: The Doctor

Resent-Date: Sun, 22 Mar 2026 12:23:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012054.outbound.protection.outlook.com ([52.103.43.54]:57472 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4LoS-000000004iS-1k7A

for sales@nk.ca;

Sun, 22 Mar 2026 10:38:15 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=gvaoOE8gHTWH1+BBSKoD6F61RZcp/jrmBra4JearU0J02+rtWJLSerP+UtxKdtwY4bw1XHkke9GdhMJTnCuP6l5HJ++PHQOmUHjkhC4yWHvWRTUzKvIGu+Q2//p5Rawwjre90v7ijZ7rFvay/HbYmvjJmALJBiFjI3uJ2XQaUbdH6c7y8GUbf4xyhsxseJ8la2A60kXBFSsxfrYdZ3W/xkvXF0Lk6LMYoKGfsXhZtyqGwYJwfpn9RfZXx2HT9YZg3xcyc1lRKrJvuVC5lQw7TV3Q7nEBNNB60mdqesKM/jL/FUe0G76qh7yoInd85JZL0yYNM9+ntpLxWa5p/+ZDFw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=2u6Y/gos5DRbca6NVbN/4LVzFNWIslRO0xyqr6WU6aY=;

b=xWrI+98iVQGHcbrU/O+LCnZP07w0qvLGfLo0cze9s/he7BMrkc+s1mdAb1YlHdE+JBgizYlz0NH6521rFT15MdkElKQeABBZqjs2BFv3ynPUY7Pqo8uQ5iFZhfgH4rdQbx7tCTFTzDDTae4/Q1PJhJk4DtJU6xvE0NSQdHm1VqeUP9KApJpvWbcTJvjlSFVezWcv4lmNvSQZ7CyTxx8qC4vDuQObUW+jZG4eu7CQ+jPR2WS5lFVdiHP58ZDaFQcWWAykaDyB/DmD2clp1yLTfnKOnzhZmORsMOJXTXWjCuMm9uQN/xxNr7T5LEz9WP+Vw9x7ghsg6ZGFAiZfAVrWsg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=2u6Y/gos5DRbca6NVbN/4LVzFNWIslRO0xyqr6WU6aY=;

b=QDVOBn00Ya353aHmcDNgE7it9kf5zYK99HRbW2C1ys0B2XAuFCGCtHhwJlqR5zP9IriS/UfkL1uE2gc3Ie2zp75DcD8A3d2ys1O2S0piNGqJFGTRiq3zRfQLxmzYS/04zULZm6yXoZU1QOjU/MpSM9wRkFd8HT9+iiReECKozV7cVXMchAxJOFE8rAta4oMjNoiqMXAxOF8YTyMDDlPF8wZy0aCok9vuDyCNStXAJa6Wc9kpokaekvaH8fVwPxFBIAr2NZWEOMbdKdYxxmoyCaoID9QxNZvtTuOz4JJJonLJPFfcBusuE8ilVgnoySPnS6ViBaku3tPiTI+arpu9+w==

Received: from TYZPR01MB7905.apcprd01.prod.exchangelabs.com

(2603:1096:405:39d::19) by SEZPR01MB4758.apcprd01.prod.exchangelabs.com

(2603:1096:101:a2::8) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9700.21; Sun, 22 Mar

2026 16:36:35 +0000

Received: from TYZPR01MB7905.apcprd01.prod.exchangelabs.com

([fe80::533b:e392:4b9d:1f45]) by TYZPR01MB7905.apcprd01.prod.exchangelabs.com

([fe80::533b:e392:4b9d:1f45%6]) with mapi id 15.20.9723.022; Sun, 22 Mar 2026

16:36:24 +0000

From: Alister Cook

Subject: =?iso-8859-1?Q?Quotation=A0?=

Thread-Topic: =?iso-8859-1?Q?Quotation=A0?=

Thread-Index: AQHcuhmpcyNNV6zAXEOQe/5GWG5h3Q==

Date: Sun, 22 Mar 2026 16:36:24 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB7905:EE_|SEZPR01MB4758:EE_

x-ms-office365-filtering-correlation-id: e7bdc3f1-b505-4e72-70f6-08de88312863

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|39105399006|31061999003|19110799012|15030799006|24071999003|8062599012|8060799015|7071999006|20031999003|30051999003|22091999003|37011999003|7042599007|24121999003|15080799012|3412199025|440099028|56001999003|102099032|35041999009|40105399003|39145399003|41105399003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?9Sz1m/IgFS5Nf3Ubmx1rzSKTPeC65f8CfiTTeLxfGUjlh+M6Uiq0a0Q+z/?=

=?iso-8859-1?Q?1HFFrTDhO69yfNEEGJNncyrrrQbsYCVnoYCYkhIjijgsmoknwxB5P1uZIG?=

=?iso-8859-1?Q?mKKbnn9Mbigfq39Jje+FgTXXQkXImxjuPoCnaTrm0Y+7em6Aiz3P5bGBGN?=

=?iso-8859-1?Q?/VRQiFrJC5133j44EigSG4lXbwckmNl22MF8WmoHHTrDcSBOoQ/yFyaUi7?=

=?iso-8859-1?Q?/v6SwDxPlznYpHLX2FuVq4XGRBkAiEs1ir7YSjgwEaG6RH7Xu/luM5BxHN?=

=?iso-8859-1?Q?A7KSQpFMRkIk9gp2ek59PwShZQCYDyAY38qAM4XJaXUI0jYnu/oq1YrlHI?=

=?iso-8859-1?Q?wlQ4Lxdb7gJgf7IvHgIaYx1qxtyp+0zbcKPcf0a+90KwWDyeg3H1oudt2t?=

=?iso-8859-1?Q?z9nNvVT2mc56DTiZKdRwBCzYwzMnBQdgxL0O2HL45BO4gat3yMv7AwwNS4?=

=?iso-8859-1?Q?iRpGhsfuTMxUBbNAFCK/dcZwOkw7UfneSYCpY5fgxKuU9ypNM47B9QQAFC?=

=?iso-8859-1?Q?lw2wFUNgLo5oG243i+O3ZE5FwW34YeEIVxtMxfVNCYBbJBia8sYA2SO4+r?=

=?iso-8859-1?Q?HgIviH9rVPxYQ6wCLZqYItU+oj81jy6EP8xK4NrpM3gKs1ZfBqHOl4xp2N?=

=?iso-8859-1?Q?u2T/iTA1S4YsKoiND0ierNOH0XFeFSnJE958omNP/ULjg3n5nC4R99VFG4?=

=?iso-8859-1?Q?pJpq10QdarHb+nIhUSDCjytrHTgxSG9+0gd/HM8K2MtLECKNLuVuI0lBgZ?=

=?iso-8859-1?Q?lVSmlHTcrOq+It1T4oPdn+CYTKJZjGkjcGkGjfNKYVXlicIUsRj6VfUYx8?=

=?iso-8859-1?Q?tDwDC3LAHjHUddMwteKGRwFyti3IMNt8e1LXeu8PunlD02rylyT6P47Fll?=

=?iso-8859-1?Q?dZNfwR4Dgynn2W9+5jh9pWGPq4OPwQzarr2ryCZl/AcSjEcf3VasOGAuqb?=

=?iso-8859-1?Q?H2PpT5Fr5Xa8jUNJ7B9UQGSnZjDEh/Co7Np1837aDP66CkdhMHbMOvdPgw?=

=?iso-8859-1?Q?RNYC8KVnpJBQD/x7KYjWzKa/tHIDRZ5cR9SJHJeX8atPmJGISAkrzqdz0t?=

=?iso-8859-1?Q?RLc6mGsC64sdyKqtHgo9TYu+EX2JD/5aTAIjipBFRMYIR1JLhEIKxNxyop?=

=?iso-8859-1?Q?j87u4ZQvYMLW16sgJiZN9uA0Vk4QIAtYNrBb7Ly4YbJbIUJdN89gzXmEaC?=

=?iso-8859-1?Q?ZpzqxA/Jz0wp2+eMAW48nibp/5BhHnzjnq1grEUiB1kmgYWUkdftMJJr3s?=

=?iso-8859-1?Q?IbPvpxH5cdUZ2xJUYLCNnt1Fm3g9s8upNehkbpHEUJdCdBT9I8kXl7tz60?=

=?iso-8859-1?Q?9XoiRHEIsmKI4Oy+RAGuHewq4Fu7tEtjcXwMAR9v/HMhpGzSitgYtxY1rU?=

=?iso-8859-1?Q?gaSsEt68ES?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?uCfhh/16+SFQYk/KnDxWE2gj0SzRZcP3i2gLbuRfihpcaPHAnB2ibfLASg?=

=?iso-8859-1?Q?6o0c2eZkIE0cDu2026na/Ba3kf1+1mmBAF4HUeRRDD1ptTm01UYDmkrDz3?=

=?iso-8859-1?Q?Ofmkccl8WoAXwOayU3nof7TJ2eBJgVE/+H5d16f6QxKJZE+Rls/MCkUSex?=

=?iso-8859-1?Q?LNsg+jGNfK86ndLmqVy4sq5U1Sx4aiAHJ89VLOXL6XhcMzo3GV4mWTTv5Z?=

=?iso-8859-1?Q?nQBk2kBYExrwEVuLfwQmotpWrigKiK33klxwGuXCqtuA0J25R9aEKXqRrr?=

=?iso-8859-1?Q?cv+aNtgamyB2HuPP7trIYbTuEhYueEpcs+MlXJ+XhPwsHkie5XO2wleoXC?=

=?iso-8859-1?Q?gHLJNcxxf19kWjCcu0bzDsWlw/xrJbYMc9DQU4o44AzytnmPY8pNiORG32?=

=?iso-8859-1?Q?D2Y0JQjgijYeKwbxR9AiJK0WVNrg4kSgNcrLsPLeqiOQtD4+lwS3TqQtpk?=

=?iso-8859-1?Q?jHnHAW8EAU70EFJ4QgWquVfrxAZTW72Nf2HJYnN0h3E2ezo9XFhR68C8WP?=

=?iso-8859-1?Q?aoHdobwOJbvVIGPLx2jVcVYdokF+U5d/dpJwRd9Yf+qSYIOiX/ah3AyfLC?=

=?iso-8859-1?Q?W65tg6nZYPTK2zdDDrwyGPr9mxbXh2fPyzjtKB1xvEqBw7vLU8k1m2p0b/?=

=?iso-8859-1?Q?53y81I6HSMuARCPvCtjN2xgUbqiGn26qnGAD1cMJlPkcL464pngpkJKleJ?=

=?iso-8859-1?Q?Z1hZuxaxc2+eVTITLKbqLnGY9Vlxm2vcT13VCqi+udHQBXrVdyfSsqdixU?=

=?iso-8859-1?Q?wHamxgs9XIK6Lt/aih6MaUNMO9NQGkiioLR6i4Uctixx8aLkrO/b24kSBk?=

=?iso-8859-1?Q?Rtg+hTkXXZ2RCna1cMznjSCYYuUXvAxXGfMh98yG5qGqktjCmvmuwa0huL?=

=?iso-8859-1?Q?s2C1tDZrGDe4K+gfZjCBrqYU8i/JTLYjgJCmAZlgk4Gt3RHe3hfHjuqAi5?=

=?iso-8859-1?Q?gTpnPP18lOEf16+SiwC8m4sP41V/mRMlL4SB4Snzc4ebaLiyXnUZoqBjyI?=

=?iso-8859-1?Q?qYl8mrG7UjDua1/IWihGVqRDLk32nZHogWCEvw2+WGVUH3K12+5TqflLdE?=

=?iso-8859-1?Q?gYFlKAJMdz8vUEl5rRKwJVgCLq6zHG7Om7oVhbx8SLs8F3kULuQ4g60CK7?=

=?iso-8859-1?Q?lC86FvOnnAfiXpVCMN7VIaWCjO82Y98XqFj5Kf0cIYEIbqnYIqCJSmrcFf?=

=?iso-8859-1?Q?CBoxBcPeI4f00K41c/uCjP2XUss3c0HJpomtHzAI+S0BenhK0EpV/TDKH0?=

=?iso-8859-1?Q?6op9lFdq07tCAxAC76fbNEJ5BEo5LCSR3ImnWUXIsFynzfw04Xw8gOTDaG?=

=?iso-8859-1?Q?vYF0+SYOGkkzvQ3Hdf3oHTAAc+WjHNDDiGfKg7VMaD1hqQYg/Pax2tGiJr?=

=?iso-8859-1?Q?2hE6Tv8X6D9GTjyO8uz9IM+0CT4Q/rNQTHoQm6n0ALrKz7zxeVxUP0KVYc?=

=?iso-8859-1?Q?ZgOWbMbSdmn9Ph1Os2ujLAKU+nAADxzMZExcx7LDpJwBaLECxJDFzJ3SI+?=

=?iso-8859-1?Q?hldOtE2ANcbtgZGUK0N1d0?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB790537D2C228C0858EEBFBE6B74AATYZPR01MB7905apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB7905.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e7bdc3f1-b505-4e72-70f6-08de88312863

X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Mar 2026 16:36:24.5013

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB4758

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi there, I really liked the layout of your site, but I noticed

a couple of technical SEO issues that are preventing it from ranking as high

as it should on Google. Would it be okay if I sent that Proposal & Quotation

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 22 Mar 2026 12:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4NQ2-00000000F2m-0jA0

for dave@doctor.nl2k.ab.ca;

Sun, 22 Mar 2026 12:20:58 -0600

Resent-From: The Doctor

Resent-Date: Sun, 22 Mar 2026 12:20:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [195.83.153.7] (port=47937 helo=smtp-out2-webmail-7.u-picardie.fr)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4JbW-00000000HPP-2LUN

for sales@nk.ca;

Sun, 22 Mar 2026 08:16:43 -0600

Received: from passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142])

by smtp-out2-webmail-7.u-picardie.fr (Postfix) with ESMTP id 4fdyR12vsKzCrDX;

Sun, 22 Mar 2026 14:52:13 +0100 (CET)

X-Virus-Scanned: Debian amavisd-new at u-picardie.fr

Received: from smtp.u-picardie.fr ([10.0.132.227])

by passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142]) (amavisd-new, port 10048)

with LMTP id OewThFIcET68; Sun, 22 Mar 2026 14:52:10 +0100 (CET)

Received: from horde-07 (horde-07.vm.u-picardie.fr [10.0.132.99])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)

(No client certificate requested)

(Authenticated sender: g22105250)

by smtp.u-picardie.fr (Postfix) with ESMTPSA id 4fdyQx3pxgz40Q2;

Sun, 22 Mar 2026 14:52:09 +0100 (CET)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=u-picardie.fr;

s=smtp; t=1774187530; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type; bh=jMEzzN46f5jC6ygnDOMquatxcRr1RYKrjfhY9w/QnjY=;

b=r3RO2vgYr5DqDTYNWBqaoIUKKtqOXydJE4nONj01gZTob21ol8xiBto/ojM6dNSiOHYL/z

dGaZcUn0dJaWcBn9gzhX22eLvcsGV+XZSS5EfkFNgO1yzYABD4uy1iMtjpzLLKDM2ac6DS

wyaz7dTGv6+WmqJMtznNAt5i3kSgFXNCUiTtAnQFQsdQuKnmPqNMUtPc/2VXOPh7/YG7OM

v2dFJ0PreaAXpgkWCdqo2uvWdOdDSF9yvgBNc7VHf5iSuGvK9x2nqg5Z1QA8DoDc2BkJaV

2n0SROx3htUwGGGkqf1ip4zJxMsSju6pKcQXsZzDivSFqjpDBFyCzHuGJiPqcw==

Received: from unn-195-181-167-41.datapacket.com

(unn-195-181-167-41.datapacket.com [195.181.167.41]) by

webmail.etud.u-picardie.fr (Horde Framework) with HTTPS; Sun, 22 Mar 2026

14:52:09 +0100

Date: Sun, 22 Mar 2026 14:52:09 +0100

Message-ID: <20260322145209.Horde.BA-uiQwGV6Y4qKDcbOSyxvG@webmail.etud.u-picardie.fr>

From: Valerii Churkin

To: 923471672j@gmail.com

Subject: Read and reply back

Reply-to: o_a111911@aol.com

User-Agent: Horde Application Framework 5

Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes

MIME-Version: 1.0

Content-Disposition: inline

X-Spamd-Bar: +++++

Authentication-Results: smtp.u-picardie.fr;

auth=pass smtp.auth=g22105250 smtp.mailfrom=william.goemaere@etud.u-picardie.fr

X-Rspamd-Server: passoire-04

X-Rspamd-Queue-Id: 4fdyQx3pxgz40Q2

X-Spamd-Result: default: False [5.82 / 1000.00];

BAYES_SPAM(5.92)[99.84%];

MIME_GOOD(-0.10)[text/plain];

ARC_NA(0.00)[];

DKIM_SIGNED(0.00)[u-picardie.fr:s=smtp];

TO_DN_NONE(0.00)[];

MID_RHS_MATCH_FROMTLD(0.00)[];

NEURAL_HAM(-0.00)[-0.998];

FREEMAIL_TO(0.00)[gmail.com];

R_RATELIMIT(0.00)[user(RLc6oh57c5pcnt54),from(RL5okfe1k1465s7jp9i3d5jy9r),user(RLbp3uqkxr7w799q),user(RLfut5xyrj1rhazr)];

MIME_TRACE(0.00)[0:+];

FROM_EQ_ENVFROM(0.00)[];

RCVD_COUNT_TWO(0.00)[2];

RCPT_COUNT_ONE(0.00)[1];

REPLYTO_DOM_NEQ_FROM_DOM(0.00)[];

FROM_HAS_DN(0.00)[];

RCVD_VIA_SMTP_AUTH(0.00)[];

HAS_REPLYTO(0.00)[o_a111911@aol.com];

ETUD_FROM(0.00)[etud.u-picardie.fr];

FREEMAIL_ENVRCPT(0.00)[gmail.com,qq.com];

TAGGED_RCPT(0.00)[];

TO_MATCH_ENVRCPT_ALL(0.00)[];

FREEMAIL_REPLYTO(0.00)[aol.com];

RCVD_TLS_ALL(0.00)[]

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Good day, I am Valerii Churkin, a senior officer in the

Ukrainian military. I would like to discuss a financial matter currently

held in Europe, which I am unable to manage due to my military duties. Please

rep [...]



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.181.167.41 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

[195.83.153.7 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[195.83.153.7 listed in dnsbl.ahbl.org]

[195.83.153.7 listed in dnsbl.ahbl.org]

[195.83.153.7 listed in dnsbl.ahbl.org]

[195.83.153.7 listed in dnsbl.ahbl.org]

[195.181.167.41 listed in dnsbl.ahbl.org]

[195.181.167.41 listed in dnsbl.ahbl.org]

[195.181.167.41 listed in dnsbl.ahbl.org]

[195.181.167.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[195.83.153.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[195.83.153.7 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[195.83.153.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[195.83.153.7 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[o_a111911(at)aol.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Read and reply back







--

Good day,



I am Valerii Churkin, a senior officer in the Ukrainian military. I

would like to discuss a financial matter currently held in Europe,

which I am unable to manage due to my military duties. Please reply

for further details.



Sincerely

Valerii Churkin

--_=_swift_1774145055_349d1725fa483f57f511ed5f0fa016e7_=_

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



[header-logo]

[https://rosasau.com/index.php/campaigns/xb541dja9ef20/trac=

k-url/ob677nvejyaae/a1b00ade245a24789fd4269a56d81930da23aecf]



=09=09[=

top-banner]

[https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-=

url/ob677nvejyaae/a1b00ade245a24789fd4269a56d81930da23aecf]



=09=09[to=

p-banner]

[https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-ur=

l/ob677nvejyaae/4ac0007b51578558a2be5cd3e770204dc54865a6]



=09=09And s=

ince it=E2=80=99s your

first visit=E2=80=A6



=09=09[card1]

[https:=

//rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/4ac=

0007b51578558a2be5cd3e770204dc54865a6]



=09=09[bottom-banner]

[https=

://rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/4a=

c0007b51578558a2be5cd3e770204dc54865a6]



=09=09[footer-logo]

[https:=

//rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b=

00ade245a24789fd4269a56d81930da23aecf]



=09=09[border]

[https://rosa=

sau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade2=

45a24789fd4269a56d81930da23aecf]



=09=09[rta-icon]

[https://rosasau.=

com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a2=

4789fd4269a56d81930da23aecf]

=09=09[asacp-icon]

[https://rosasau.com/i=

ndex.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789f=

d4269a56d81930da23aecf]



=09=09[divider]

[https://rosasau.com/index.=

php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd4269=

a56d81930da23aecf]



=09=09[x-icon]

[https://rosasau.com/index.php/ca=

mpaigns/xb541dja9ef20/track-url/ob677nvejyaae/7c96560f08ae933a07b1e7f4ffbf8=

b46caf49761]

=09=09[facebook-icon]

[https://rosasau.com/index.php/camp=

aigns/xb541dja9ef20/track-url/ob677nvejyaae/f51ce8d459ee2654297c0a3a22321cc=

953939928]

=09=09[telegram-icon]

[https://rosasau.com/index.php/campai=

gns/xb541dja9ef20/track-url/ob677nvejyaae/be0854c0e0d6f2061a3f8cb8da400ce33=

e0a1bb8]



=09=09This website is strictly for adults only! This website=

contains

sexually explicit content. You must be at least 18 YEARS OF AGE=



to enter this website.



=09=09[border]

[https://rosasau.com/index=

.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd426=

9a56d81930da23aecf]



=09=09=C2=A92026 ImLive.com All Rights Reserved=





UNSUBSCRIBE

[https://rosasau.com/index.php/campaigns/xb541dja9ef20/=

track-url/ob677nvejyaae/6daaddc40f50df294910d1f38232602ed5e1bd23]



--_=_swift_1774145055_349d1725fa483f57f511ed5f0fa016e7_=_

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable








vice-width, initial-scale=3D1.0">

=09






gin: auto; font-family: Arial, sans-serif;" width=3D"600">

=09

=09=09

=09=09=09

=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09

=09=09=09

=09=09

X-rated spam from OVH Part 3

Posted by Dave Yadallee on Sunday, March 22. 2026

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09

=09=09=09

=09=09

=09

=09=09=09 le=3D"margin:0 auto; " width=3D"600"> =09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09 =09=09=09 "https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejy= aae/a1b00ade245a24789fd4269a56d81930da23aecf"> =3D"https://lynkme360.com/email-templated/im_live_two/header-logo.png" styl= e=3D"display: block;" width=3D"151" /> =09=09=09

=09=09=09 th=3D"600"> =09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09 =09=09=09 .php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd426= 9a56d81930da23aecf"> ail-templated/im_live_two/border.png" style=3D"display: block;" width=3D"60= 0" /> =09=09=09

=09=09=09 th=3D"600"> =09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09 =09=09=09 .php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/4ac0007b51578558a2be5c= d3e770204dc54865a6"> ail-templated/im_live_two/top-banner.jpg" style=3D"display: block;" width= =3D"600" /> =09=09=09

=09=09=09 =09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09 =09=09=09 gn: left; color: #ffffff;">And since it=E2=80=99s your =09=09=09=09=09=09first visit=E2=80=A6 "> l/ob677nvejyaae/4ac0007b51578558a2be5cd3e770204dc54865a6"> " src=3D"https://lynkme360.com/email-templated/im_live_two/card1.png" width= =3D"500" /> =09=09=09

=09=09=09 th=3D"600"> =09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09 =09=09=09 .php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/4ac0007b51578558a2be5c= d3e770204dc54865a6"> /email-templated/im_live_two/bottom-banner.jpg" style=3D"display: block" wi= dth=3D"600" /> =09=09=09

=09=09=09 th=3D"600"> =09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09 =09=09=09 .php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd426= 9a56d81930da23aecf"> mail-templated/im_live_two/footer-logo.png" width=3D"215" /> =3D"https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nv= ejyaae/a1b00ade245a24789fd4269a56d81930da23aecf"> "https://lynkme360.com/email-templated/im_live_two/border.png" width=3D"600= " /> =09=09=09=09=09=09 =3D"0"> =09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 x.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd42= 69a56d81930da23aecf"> il-templated/im_live_two/rta-icon.png" style=3D"display: block;" width=3D"1= 18" /> x.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd42= 69a56d81930da23aecf"> mail-templated/im_live_two/asacp-icon.png" style=3D"display: block;" width= =3D"118" /> =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 =3D"https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nv= ejyaae/a1b00ade245a24789fd4269a56d81930da23aecf"> t=3D"77" src=3D"https://lynkme360.com/email-templated/im_live_two/divider.p= ng" /> =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 x.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/7c96560f08ae933a07b1e= 7f4ffbf8b46caf49761"> kme360.com/email-templated/im_live_two/x-icon.png" width=3D"34.8" /> td> =09=09=09=09=09=09=09=09=09=09=09=09 f=3D"https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677n= vejyaae/f51ce8d459ee2654297c0a3a22321cc953939928"> " height=3D"34.8" src=3D"https://lynkme360.com/email-templated/im_live_two/= facebook-icon.png" width=3D"34.8" /> x.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/be0854c0e0d6f2061a3f8= cb8da400ce33e0a1bb8"> s://lynkme360.com/email-templated/im_live_two/telegram-icon.png" width=3D"3= 4.8" /> =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09 : center; font-size: 17px; line-height: 24px; letter-spacing: 0.03em; font= -weight: 400; padding: 9px 0 26px;">This website is strictly for adults onl= y! This website contains =09=09=09=09=09=09sexually explicit content. You must be at least 1= 8 years of age =09=09=09=09=09=09to enter this website. =09=09=09

=09=09=09 =09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09=09 =09=09=09=09=09=09 =09=09=09=09=09 =09=09=09=09 =09=09=09 541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd4269a56d81930da23aec= f"> _two/border.png" style=3D"display: block;" width=3D"600" /> : 13px 0;"> =09=09=09=09=09=09 =09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09 =09=09=09=09=09=09 font-size: 18px; line-height: 24px; letter-spacing: 0.03em; font-weight: 40= 0;">=C2=A92026 ImLive.com All Rights Reserved =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 =09=09=09=09=09=09=09=09=09 ttps://rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaa= e/6daaddc40f50df294910d1f38232602ed5e1bd23">UNSUBSCRIBE =09=09=09=09=09=09 =09=09=09

s/xb541dja9ef20/track-opening/ob677nvejyaae" alt=3D"" />







--_=_swift_1774145055_349d1725fa483f57f511ed5f0fa016e7_=_--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 22 Mar 2026 05:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w4GvE-000000001uI-098c

for dave@doctor.nl2k.ab.ca;

Sun, 22 Mar 2026 05:24:44 -0600

Resent-From: The Doctor

Resent-Date: Sun, 22 Mar 2026 05:24:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.smaily.info ([173.244.60.207]:59775)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w48Bj-00000000Fev-2t8Q

for doctor@doctor.nl2k.ab.ca;

Sat, 21 Mar 2026 20:05:20 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=smaily.info;

h=Message-ID:Date:Subject:From:Reply-To:To:MIME-Version:Content-Type:List-Unsubscribe:List-Id; i=noreply@smaily.info;

bh=5chvhiQux7TN+Mtwa7/myPXSnx0=;

b=iNPgpe4x8oR3KCnKGYIItRGy21AdVce4CsGu3UbHL1HtRmAVgFa/uGuEm6lUPZhncN/Sznj1kEaB

q58r2+TE+MlH/eD47sNQxlv7avD7WKuJLs8jeCQLJWtHrVQhGcTISN5+FylQhTAKSYwnl6yUkBnu

mUu1O5aCAC5SOSFe1ZU=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=smaily.info;

b=h6/rk63+Zg2sIgyyh8fa8i8aUhSkKUmuJYH8DtzzshZ8JlFhEyYuacDa6DdbdmaKSbITq5LGvRvV

qyWH5bCxK5swLt+saAygm4xC0PRkM2vN6oyZ0f51n2gD94JULg0ENpn00j63InGO3XabMETJsPz3

dFuS6WEdKDNw9s8wSBQ=;

Received: from rosasau.com (167.114.128.205) by mail.smaily.info id hnt75e0001g6 for ; Sat, 21 Mar 2026 22:04:15 -0400 (envelope-from )

Message-ID: <6c4f3e6a13a0e966341b2fe2c930d8e293b997a1@smaily.info>

Date: Sun, 22 Mar 2026 02:04:15 +0000

Subject: Last chance before she goes offline =?utf-8?Q?=E2=8F=B3?=

From: ImLive

Reply-To: ImLive

To: "doctor@doctor.nl2k.ab.ca"

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="_=_swift_1774145055_349d1725fa483f57f511ed5f0fa016e7_=_"

X-Report-Abuse: https://rosasau.com/index.php/campaigns/xb541dja9ef20/report-abuse/na6469fs6dceb/ob677nvejyaae

x-job: xb541dja9ef20

X-EBS: https://rosasau.com/index.php/lists/block-address

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe: ,



List-Id: na6469fs6dceb

Feedback-ID: xb541dja9ef20:ob677nvejyaae:na6469fs6dceb:dy792eggq06b2

X-Spam_score: 21.6

X-Spam_score_int: 216

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [header-logo] [https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd4269a56d81930da23aecf]

[top-banner] [https://rosasau.com/index.php/campaigns/xb541dja9ef20/track-url/ob677nvejyaae/a1b00ade245a24789fd4269a56d81930da23aecf]





Content analysis details: (21.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.114.128.205 listed in will-spam-for-food.eu.org]

[167.114.128.205 listed in will-spam-for-food.eu.org]

[167.114.128.205 listed in will-spam-for-food.eu.org]

[167.114.128.205 listed in will-spam-for-food.eu.org]

[167.114.128.205 listed in will-spam-for-food.eu.org]

[167.114.128.205 listed in will-spam-for-food.eu.org]

[167.114.128.205 listed in will-spam-for-food.eu.org]

[167.114.128.205 listed in will-spam-for-food.eu.org]

[173.244.60.207 listed in will-spam-for-food.eu.org]

[173.244.60.207 listed in will-spam-for-food.eu.org]

[173.244.60.207 listed in will-spam-for-food.eu.org]

[173.244.60.207 listed in will-spam-for-food.eu.org]

[173.244.60.207 listed in will-spam-for-food.eu.org]

[173.244.60.207 listed in will-spam-for-food.eu.org]

[173.244.60.207 listed in will-spam-for-food.eu.org]

[173.244.60.207 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[173.244.60.207 listed in dnsbl.ahbl.org]

[173.244.60.207 listed in dnsbl.ahbl.org]

[173.244.60.207 listed in dnsbl.ahbl.org]

[173.244.60.207 listed in dnsbl.ahbl.org]

[167.114.128.205 listed in dnsbl.ahbl.org]

[167.114.128.205 listed in dnsbl.ahbl.org]

[167.114.128.205 listed in dnsbl.ahbl.org]

[167.114.128.205 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[173.244.60.207 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[173.244.60.207 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[173.244.60.207 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[173.244.60.207 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[167.114.128.205 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[167.114.128.205 listed in sbl-xbl.spamhaus.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: rosasau.com/167.114.128.205]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: rosasau.com]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[173.244.60.207 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[173.244.60.207 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: rosasau.com/167.114.128.205]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.3 LONGWORD BODY: Uses overlong words

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[173.244.60.207 listed in wl.mailspike.net]

4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist

[URI: rosasau.com]

2.5 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: rosasau.com]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[173.244.60.207 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[173.244.60.207 listed in bl.score.senderscore.com]

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Last chance before she goes offline =?utf-8?Q?=E2=8F=B3?=

--000000000000c2a8a2064d923cf9

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Spotify Premium





Update Your Payment Method







Dear Customer,



We hope you are doing well. Unfortunately, we were unable to process your

most recent payment due to an issue with your current payment method.



To ensure uninterrupted access to your account, please update your payment

details within the next 48 hours.



You can securely update your payment information by clicking the button

below:





Update Payment











Thank you for your prompt attention to this matter. We appreciate your

continued trust and support.



?mode=resetPassword&oobCode=XRgnps1QPVyzZUYS7RZ1fHhX4Cdlx637ODH680i4J9gAAAGdEwE3PA&apiKey=AIzaSyDXdEYjzvA2lugfU-0MRnCpuEuaJpB0QfE&lang=en&tenantId=ama114-mg9zk







--000000000000c2a8a2064d923cf9

Content-Type: text/html; charset="UTF-8"

Spotify Premium

Update Your Payment Method

Dear Customer, We hope you are doing well. Unfortunately, we were unable to process your most recent payment due to an issue with your current payment method. To ensure uninterrupted access to your account, please update your payment details within the next 48 hours. You can securely update your payment information by clicking the button below:

Update Payment

Thank you for your prompt attention to this matter. We appreciate your continued trust and support. ?mode=resetPassword&oobCode=XRgnps1QPVyzZUYS7RZ1fHhX4Cdlx637ODH680i4J9gAAAGdEwE3PA&apiKey=AIzaSyDXdEYjzvA2lugfU-0MRnCpuEuaJpB0QfE&lang=en&tenantId=ama114-mg9zk

--000000000000c2a8a2064d923cf9--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 21 Mar 2026 19:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w47YX-00000000Acr-2oYF

for dave@doctor.nl2k.ab.ca;

Sat, 21 Mar 2026 19:24:41 -0600

Resent-From: The Doctor

Resent-Date: Sat, 21 Mar 2026 19:24:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f199.google.com ([209.85.221.199]:45107)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w46xe-000000006cf-0nAz

for doctor@doctor.nl2k.ab.ca;

Sat, 21 Mar 2026 18:46:42 -0600

Received: by mail-vk1-f199.google.com with SMTP id 71dfb90a1353d-56cdaa45becso2223178e0c.2

for ; Sat, 21 Mar 2026 17:45:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=spierengenharia.com; s=firebase1; t=1774140340; x=1774745140; darn=doctor.nl2k.ab.ca;

h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=JJQX2lUkKV+rgYVFAB+9keuLiaeMSmDtKciE7hQZNO8=;

b=QoM1ndXTM04pr+dhe0O/RzVuMpCAWR+lyDvLyh8ohug9egxjca4VkYNdAYCasrK2vK

wxrsAgHPmO3KHBOdSnst+l1TzSnzNchQYzc03XMMNn6Y7kdqcpZ2ZacoN+ZcdDr3mcUZ

wFdtDf54JQ2apUDavv03LuPd9PjvMWOSLL4zT7khzpFWqOj91zlFpiCNII5Ge7+pM1Rn

EyVtiQnWtRKgZO4HGdhhEczyVA7S6FWjkZqyZuhZFHAGOp/RhJUW2TNxQ9f4oijfrCa6

hXn8Lu8Izg5FtQzig8ImOR0rJHPr8rJVRE/OKF7PckojItieOc8/c8GEs3mHD++HGGFt

FgeA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774140340; x=1774745140;

h=to:from:subject:date:message-id:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=JJQX2lUkKV+rgYVFAB+9keuLiaeMSmDtKciE7hQZNO8=;

b=XLqaFr5UY5LIEWC7VhNkrpsNTPStTbXJpLrshWhd1zbzFcYizzmu0JpKDj8SdSeZYE

pzEu4JjPg6N+fr7yMWTgtvxlGImvhh4RZ0K/Wh+fdDIp8S7MTpE08mR4QqgRADNQrfkF

T7hz5U9IUgdSHFbJHb4XZrPxUUDzkEZf8gaEm/6hcSHVBgNmCpzpYQw+G/jcqOrvn10A

XzFDoQITu9hOvK3IAOfMo2C/ulXlqDjmvmf6jpL1U2oXFvNZQnUEu2xsrULpk+KyJ+pX

GiPsTExsFxDg3527h81pD7u6lqdaRiuKFkaf3M7OzbnOeJ7I5QoGsAw4YqdYOMcIfmu4

Mmcw==

X-Gm-Message-State: AOJu0YzAIMyc3z2U1m2ZpaDTmZlPEaj4HzAdsghtVOz4rjLYxG48HtGV

/PvfNEoEKoe9pFbGbNtBtrR223KtFdaCsxKMBY6tSu7St02vYBG6xF2XLHHOqouIUBV5E2z1k/z

8HI8lO52+xGCcmQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6122:2883:b0:56c:d623:896e with SMTP id

71dfb90a1353d-56cde465491mr3357172e0c.14.1774140340217; Sat, 21 Mar 2026

17:45:40 -0700 (PDT)

Reply-To: infos@spierengenharia.com

Message-ID: <000000000000c2a8ab064d923cfc@google.com>

Date: Sun, 22 Mar 2026 00:45:40 +0000

Subject: =?UTF-8?B?U8+Bb3RpZnk6IM+BYXltZW50IPCdlqXwnZa68J2XgvCdl4XwnZa+8J2WvSE=?=

From: No-reply

To: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000c2a8a2064d923cf9"

X-Spam_score: 11.2

X-Spam_score_int: 112

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Spotify Premium Update Your Payment Method Dear Customer,



Content analysis details: (11.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

[209.85.221.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

[209.85.221.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.199 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.199 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?B?U8+Bb3RpZnk6IM+BYXltZW50IPCdlqXwnZa68J2XgvCdl4XwnZa+8J2WvSE=?=

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 21 Mar 2026 19:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w47YH-00000000AbO-10hI

for dave@doctor.nl2k.ab.ca;

Sat, 21 Mar 2026 19:24:25 -0600

Resent-From: The Doctor

Resent-Date: Sat, 21 Mar 2026 19:24:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f50.google.com ([209.85.167.50]:49298)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w46CT-000000000Ec-0I0z

for doctor@doctor.nl2k.ab.ca;

Sat, 21 Mar 2026 17:57:59 -0600

Received: by mail-lf1-f50.google.com with SMTP id 2adb3069b0e04-5a27b5ad832so2901370e87.2

for ; Sat, 21 Mar 2026 16:57:01 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1774137414; cv=none;

d=google.com; s=arc-20240605;

b=CRJ3rQN47zCFjY4CTB3HtHVASD3TrgoDaG3s+OXRLtfQewybG7P+RK0kO+JCY9mg+2

I3A8kcorqryW+l0+rSdzTl0jZFo42KzKxzXI9kCKM1MgIceDHJRIrbe1ptTxgVemwD4V

0SYabOarkzbq7wj0D5EziBenGKKiZ3+sLAVBwe6Vx0H8Cykmyxjz+Oe2tM39E/NV7CsY

bqpd+e5j534k7NAG+MGV+ezOgfa0Pax9d9iLa4tUY4ZM7R9kr1lnJPUyZEzU3Afx+1Fc

i3jAybIXPQARDOdenIYmHvBRS1XJXk6HgQcz13nqHBBzWm37a9yAECXSvh2YnQ9I9AGW

p19Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=4XFB/kVSCpsSQOX9u/SOF70Ppa16ZTiQHeG6hnDDGuI=;

fh=orQndFsvf9zXb0UFqfR6B3GkBRr4wXjerEB+5FZH1oI=;

b=UeWQmI+pOMaDo+ofJgfuMatTnSk8oZ8kD5VI22yitvKA/M0lPP3+vhc8taFfSlBzZL

PJlxY63LnHE+yTbPUwp3nYXgEK40DZvJryARlDf9U3SbnU3753DfRM8CG5usmtWONvE0

L5KrKg1TNcxUJ9/mDnb5vp9s3TW55Rkvi0gT1JSbO5SzkimGOJRkvvVNLdYKH8gZutDy

UeHSYVThNSCc6/whnSYHgesjkZSEL0yWa5Dxhf5qGPE1muiiT7/W5G0+T5KeL70xtE2Q

1a8vvYe6EZa8SEJfza5eroD8SlqKn92IINLuiLz7W7CVgsFA1WKIKvZa9iVaqkhftiXg

2/1Q==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1774137414; x=1774742214; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=4XFB/kVSCpsSQOX9u/SOF70Ppa16ZTiQHeG6hnDDGuI=;

b=X0dw7lr8zLrZhdifPL72ZtuESENkBcLU6ZUhwm3msdwVLCO5i6pPskQ0WJ6VRjLEeH

AgQGnk62YLEHa3UaxvbabtSPTXd/BnMG1LhvyC0OQnIzvg8QWiSEUhNn2PmTmdmv4MY6

HhQ5dO6xFQTI2OQ27f9kfUWOdEiA/a2/zB7HDhGLDyhHvQuDPXsmWDVzdPLH4FLIjRad

QeBlXR0dhfPvBpUDNlRnls4nXeTSPk9bkTCJSsYuPkIRhq8wsFuSVZucf5IL6BEwgfmY

WLsIaYZiDHNfqqkc363HulOa/pn8YPFh8oBG/0FrlTk9bJMVlndmmNvHPSQFa9Xv2Xwl

xiOg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774137414; x=1774742214;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=4XFB/kVSCpsSQOX9u/SOF70Ppa16ZTiQHeG6hnDDGuI=;

b=K6P1sjkQ4SWnLVj8x/0E9GWMjJLIVikIIR+cHRR6AdfGpbonkM2dBi2XvU7I4JJJJ9

oP50zqramY6iM0wnCHWgYC0rh/UDP+5UkIV6t/udpBH+hYhWzSRFIc8J9f16HUH161dX

G0IzD/rIsKrfdGEPAqN82/9ZCNNi7Tx24E6fYsNEARzf7jrU6OZnkLYhIq6xdZm94VU3

zxajacNFh4Mr+oWDF9LPr2i3I4hkdg5BMoEUhhplqNcVa+wEXYo/d/4zEuacix7neGxO

lXgNdyr+2aiyyvgiWWIXaVA5024s6JWrjURoPDFxonc7FBrxurwN8ZepDeqLYAiQUVun

b3IA==

X-Forwarded-Encrypted: i=1; AJvYcCVw+2OaHPyCcQwlvQ/reBMVj/fP0GBpceNAFWENfazzJ4d6cFOSCjdxCNa9ahbmddqgdm/+a1U=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YzC8njJSFOoGc58x0Pavs4HWzl3yVpAP7xCf8Iu5ppLEssxYkqm

b52+wEvTu1+SAT89TVKk0efJUsyan726HhP9m62iDs5FA2DnWjjyRNnSMJu0jT4AwMXpxpmt7UJ

Lj3u7zJjWHe1Hh4jVoH9xfy0gtuXEONo=

X-Gm-Gg: ATEYQzy490JnnzAfv/NgRSQ+9knXDAyfNJAKkb9BZhc8w/bZLhMmp44T43gnik7AeEC

phnshCb2Da5qpZKD2kfA5dEUJDqGQR0CzxPU38ewEWsOS9vt2Y8Q1lu0/y2kwBC9ONecHWWGd25

LWKRbNmle3FHnsPPu1/Bu389/NBcfSAthTpKuVMU4WQS9E4rTgBuNJ2sBrrLkkpb2PJLpe8572q

5fYA1U/SwzGmDCaG2bhYeNL4LVaODYECyQG2+Jr0Mo+ZWb9cuobwupvdQC3CB1ZkflXUhonyRNK

YF97oIVwidwF48fV2XzEivP17vuNJ3C1BEDP0x/ypCZnj+09RTgb5H23

X-Received: by 2002:a05:6512:3d23:b0:5a1:4570:a8c0 with SMTP id

2adb3069b0e04-5a285b5da3fmr2072163e87.41.1774137413734; Sat, 21 Mar 2026

16:56:53 -0700 (PDT)

MIME-Version: 1.0

Reply-To: maviswancykp@gmail.com

From: "Mrs. Mavis L. Wanczyk"

Date: Sat, 21 Mar 2026 16:56:36 -0700

X-Gm-Features: AaiRm51w0UUQokOQ5pqAZRaKQ7-7tH2rE3Xk35c6xsWfaX2Fr56cHVmpGUVbgQ8

Message-ID:

Subject: Charity purposes only.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000005412ce064d918e93"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 18.7

X-Spam_score_int: 187

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I am Mrs. Mavis L. Wanczyk, a widow and childless woman who

lost his husband in a car accident. I want to know if you received my donation

message of 2.500.000 million USD which I sent to you on 3/ 7/ [...]



Content analysis details: (18.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

[209.85.167.50 listed in dnsbl.ahbl.org]

[209.85.167.50 listed in dnsbl.ahbl.org]

[209.85.167.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.50 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.50 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[aminatasawadogo111(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[aminatasawadogo111(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Charity purposes only.



--0000000000005412ce064d918e93

Content-Type: text/plain; charset="UTF-8"



I am Mrs. Mavis L. Wanczyk, a widow and childless woman who lost his

husband in a car accident. I want to know if you received my donation

message of 2.500.000 million USD which I sent to you on 3/ 7/ 2026, get

back to me quickly.



Please this Donation is for charity purposes only.



Mrs. Mavis L. Wanczyk.



--0000000000005412ce064d918e93

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

I am Mrs. Mavis L. Wanczyk, a widow and childless woman wh=

o lost his husband in a car accident. I want to know if you received my don=

ation message of 2.500.000 million USD which I sent to you on 3/ 7/ 2026, g=

et back to me quickly.

Please this Donation is for chari=

ty purposes only.

t color=3D"#888888">

Mrs. Mavis L. Wanczyk.

=

--0000000000005412ce064d918e93--

body{

margin: 0;

padding: 0;

}



a[x-apple-data-detectors] {

color: inherit !important;

text-decoration: inherit !important;

}



#MessageViewBody a {

color: inherit;

text-decoration: none;

}



p{

line-height: inherit

}



.desktop_hide,

.desktop_hide table{

mso-hide: all;

display: none;

max-height: 0px;

overflow: hidden;

}



.image_block img + div{

display: none;

}



sup, sub {

font-size: 75%;

line-height: 0;

}

@media (max-width:670px) {

.desktop_hide table.icons-inner {

display: inline-block!important;

}



.icons-inner {

text-align: center;

}



.icons-inner td {

margin: 0 auto;

}



.mobile_hide {

display: none;

}



.row-content {

width: 100%!important;

}



.stack .column {

width: 100%;

display: block;

}



.mobile_hide {

min-height: 0;

max-height: 0;

max-width: 0;

overflow: hidden;

font-size: 0px;

}



.desktop_hide,

.desktop_hide table {

display: table!important;

max-height: none!important;

}

}


d>
ng: 0; -webkit-text-size-adjust: none; text-size-adjust: none;">
s=3D"nl-container" width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacin=

g=3D"0" role=3D"presentation" style=3D"mso-table-lspace: 0pt; mso-table-rsp=

ace: 0pt; background-color: #FFFFFF;">

w-1" align=3D"center" width=3D"100%" border=3D"0" cellpadding=3D"0" cellspa= cing=3D"0" role=3D"presentation" style=3D"mso-table-lspace: 0pt; mso-table-= rspace: 0pt;"> nter" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation= " style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; color: #000000; wi= dth: 650px; margin: 0 auto;" width=3D"650"><= /tbody> olumn-1" width=3D"100%" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0= pt; font-weight: 400; text-align: left; padding-bottom: 5px; padding-top: 5= px; vertical-align: top;"> "100%" border=3D"0" cellpadding=3D"10" cellspacing=3D"0" role=3D"presentati= on" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; word-break: brea= k-word;"> r;font-family:'Open Sans', 'Helvetica Neue', Helvetica, Arial, sans-serif;f= ont-size:12px;font-weight:400;letter-spacing:0px;line-height:1.2;text-align= :center;mso-line-height-alt:14px;"> Can't see images= , F-2BzqiGw3CIXpbHrtYHfLDtAIsYdtG4g9hue17UWvLxDlhB9MvwdyvvF_A3nRQoop3xGTTNLdb= AlLJcD2sfZwkYwAzGLsVwWWgkysJsC7wSRYpipBhGB05ZVytHg8U4lxnVQgLrb1mKX9FHel3RYz= kuQ7bb8o4coPfiWKjZDGo6Z0DBH1SeyI2OiHiqR3fSrdjspwxa3iA2RqQj2jfq8L0ZOtCDc5dkD= Hj-2FwXnoF-2BUUa0PE-2Booxrda4CNAx2EiuPMQTHrtj-2FZm6SW272kk0wBNv9k6cAFyt8uAN= gVW8qSQ9XKsAWirdUzxtxEG0KUI-2B97SyfFGF51msV9kWfeL2GTkiaeExWuwpOewY-2F6pBK-2= Fz4pJCQGdykynS2zW8rTBgEWV7g83klyBDJJ57MOMMeuRXeNIz74IiUzHVTOYrZJtRmzG0-2Bw-= 2F1ES0iuz8KY2yQjhcIDGWfPwswtOop5A3CSCplrqBUuxiGDUWwUqHuXPeU-2FS9hFJdcE1XuV3= c" target=3D"_blank" style=3D"text-decoration: underline; color: #000;" rel= =3D"noopener">Click here s=3D"image_block block-2" width=3D"100%" border=3D"0" cellpadding=3D"0" cel= lspacing=3D"0" role=3D"presentation" style=3D"mso-table-lspace: 0pt; mso-ta= ble-rspace: 0pt;"> lass=3D"alignment" align=3D"center"> f=3D"https://click.suprsend.com/ls/click?upn=3Du001.i-2BRQJxtL1ha3gF-2BzqiG= w3CIXpbHrtYHfLDtAIsYdtG4g9hue17UWvLxDlhB9MvwdyvvF_A3nRQoop3xGTTNLdbAlLJcD2s= fZwkYwAzGLsVwWWgkysJsC7wSRYpipBhGB05ZVytHg8U4lxnVQgLrb1mKX9FHel3RYzkuQ7bb8o= 4coPfiWKjZDGo6Z0DBH1SeyI2OiHiqR3fSrdjspwxa3iA2RqQj2jfq8L0ZOtCDc5dkDHj-2FwXn= oF-2BUUa0PE-2Booxrda4CNAx2EiuPMQTHrtj-2FZm6SW272kk0wBNv9k6cAFyt8uANgVW8qSQ9= XKsAWirdUzxtxEG0KUI-2B97SyfFGF51msV9kWfeL2GTkiaeExWuwpOewY-2F6pBK-2Fz4pJCQG= dykynS2zW8rTBgEWV7g83klyBDJJ57MOMMeuRXeNIz74IiUzHVTOYrZJtRmzG0-2Bw-2F1ES0iu= z8KY2yQjhcIDGWfPwswtOop5A3CSCplrqBUuxiGDUWwUqHuXPeU-2FS9hFJdcE1XuV3c" targe= t=3D"_blank"> e21b58ba9a8f420e4bd0/69be358ac01d5abad40427dd/164422049fb905b52bf34e9c3aaf4= cbd.original.jpeg" style=3D"display: block; height: auto; border: 0; width:= 100%;" width=3D"650" alt=3D"" title=3D"" height=3D"auto"> <= /td> " border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" st= yle=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt;"> =3D"pad" style=3D"width:100%;"> iv style=3D"max-width: 650px;"> fer-media-uploads.s3.amazonaws.com/69b0e21b58ba9a8f420e4bd0/69be358a13e65a8= 61c00487a/2b996a9cf773854d5eafd3dc099ee411.original.jpeg" style=3D"display:= block; height: auto; border: 0; width: 100%;" width=3D"650" alt=3D"" title= =3D"" height=3D"auto"> =3D"center" width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"= role=3D"presentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0p= t; background-color: #ffffff;"> tack" align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" rol= e=3D"presentation" style=3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; c= olor: #000000; background-color: #ffffff; width: 650px; margin: 0 auto;" wi= dth=3D"650">= =3D"mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-weight: 400; text-al= ign: left; padding-bottom: 5px; padding-top: 5px; vertical-align: top;"> ble class=3D"icons_block block-1" width=3D"100%" border=3D"0" cellpadding= =3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"mso-table-lspace: 0= pt; mso-table-rspace: 0pt; text-align: center; line-height: 0;"> ily: 'Inter', sans-serif; font-size: 15px; padding-bottom: 5px; padding-top= : 5px; text-align: center;"> --00000000000070b2a1064d853d0e--