iCloud Storage phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 21:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDCms-000000007Rd-0ubv

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 21:21:18 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 21:21:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [210.79.190.171] (port=56471 helo=daum.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

id 1xDCG0-0000000031y-3rel

for doctor@nl2k.ca;

Sat, 03 Oct 2026 20:46:56 -0600

Date: Sat, 03 Oct 2026 22:44:30 -0400

From: =?UTF-8?B?U3RvcmFnZSBBbGVydCBUZWFt?=

Reply-To: =?UTF-8?B?VXctY2xvdWRhY2NvdW50?=

To: doctor@nl2k.ca

Message-ID:

Subject: =?UTF-8?B?U3RvcmFnZSB3YXJuaW5nOiBZb3VyIGlDbG91ZCBzdG9yYWdlIGlzIGFsbW9zdCBmdWxs?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.w0myGv0UgnVV5t8FgeZRnU41qXGvGcLQ.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@Swee.fr

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 27.2

X-Spam_score_int: 272

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Storage Warning iCloud Storage



Content analysis details: (27.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

[210.79.190.171 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[210.79.190.171 listed in dnsbl.ahbl.org]

[210.79.190.171 listed in dnsbl.ahbl.org]

[210.79.190.171 listed in dnsbl.ahbl.org]

[210.79.190.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[210.79.190.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[210.79.190.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[210.79.190.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[210.79.190.171 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[210.79.190.171 listed in bl.score.senderscore.com]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

2.5 WIKI_IMG Image from wikipedia

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?B?U3RvcmFnZSB3YXJuaW5nOiBZb3VyIGlDbG91ZCBzdG9yYWdlIGlzIGFsbW9zdCBmdWxs?=

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean
















PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">











Storage Warning

































Cloud



iCloud Storage




Alert













Because you've exceeded your storage plan, your documents, contacts, and device data are no longer

backing up to iCloud and your photos and videos are not uploading to iCloud Photos. iCloud Drive and

iCloud-enabled apps are not updating across your devices.





Your data will be lost without security protection if no urgent action is taken.













Recommendation


250 GB


Unlock space for 10,000+ Photos












Feature

Current

New





Total Space


5 GB


250 GB






Photo Sync


Paused


Active






Protection


Standard


Pro










Activate Upgrade























Nigerian spam from Yahoo! mail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 21:21:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDCmj-000000007QT-2mt9

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 21:21:09 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 21:21:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic317-27.consmr.mail.bf2.yahoo.com ([74.6.129.82]:41415)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDC61-000000000E3-2yzM

for doctor@nl2k.ab.ca;

Sat, 03 Oct 2026 20:36:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791081335; bh=ZRUkw4dMJoJzD58h52kZE+tr1KEVgmwMHk4sOxkX6ds=; h=Date:From:Reply-To:References:Subject:From:Subject:Reply-To; b=LkP0TGW+uKrLAnPU90eePWgziKcCOMBqhq2zw9DR4tCtBCdVRCckgKDLFrhqZBQgahnga/I2uupDWbgLSPv/xH5zBLmucQTtBCeHOxVujrq9NXbp9d16W0iUc5t0yAfl42vp40n+23VQPJMc8HHNI+TaZT/5Nuk+iz505V6EYe5/CFvGNB01kxHXuR9L5+T8yOU589pRLfa/xIrdgkKBSQsYbANWZjPhoEYLLBp0hvOKWSJpeyXyCRtecOEbRVNofrRhrAygvi92lmBOTDHuK30frvdAIwcVWCQ1wF+F1Ty6zN4Tp5CaCzE/rDnU4hOKzNFCUaCT/mcgVJUyjue6BA==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791081335; bh=9to6T2scqipTi9QMRYW2IYyI8VHx2q1T5UYuXjL+pKZ=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=O4Je/V6OPYGZd9PfcICcGe4e1l+2kuKQCo6ebzBpkSaO5Jtx1pFmzYfhUk4ZKdVlFsFTKqLCOYuhffKIKKmDUEypk1ORI/Zc0IBHiPUl3p4NV39m7eO/GMh4ZaVkcIp2qDzIOtUYgjWpKZ69eY7qjfq++UmBHLoPgUb/aqGAXOvipamltbGVIUeWFDhX2+f1QGyURiUQLJZunezpWGoKj7RJ1mjslNt2gKDKKGM/Knd5NzLqD1yrr4GKwhphf7nfgLJJIOvYW3cXdqmY/G9Un7eOrQtOCkYxfFFMVw5agGYiL6rUjm3pgM0ja70z/BYZmUtIK38VdQK3LzMPCp+yzg==

X-YMail-OSG: 3WDoHtIVM1lxzvOYIBJxTkaDuGPqNfL5h.KRrSH2yilrAXUx2FO078yg1ftukFm

XBcEV255QVKGVCbI397FATHCQKq2iF_kRlbJ15Sva0vQ2QKqLU9Sj1ZV86bcv8cufkfTDUciImAR

1c1cD.uyxdyNnsom3d7anSDyHJ3Q1kDw0mYrW5zdCgUYwQQ7znvpIwZeGcoT4Z2b1jL2ZCB7ei2j

yaJ9v.3uE8Pzl3W.CYm4cRElq0qQirrT8VFmsxj5qi39vLi_XRkg3YHL_LwKy79ghW85V030f83m

SeKWlQjcj6fxUYNIdZenrpVxgIuIxZh2HgXrL0f7sdOmu2SccGghAw2n2CghbdxQIjuQRIV7zxQV

AFNuZ9idOt2Xx8zgrvLeJdCfy67mYMylpgp6cM7vb4dvA7iR0VTC40MJT7oF3Fb4DF71uzH6W8yk

rm4WFZ79CEcI1nN.rnDtswDvZu.aFSqedXUFNC9eQPAjO98YjsdY6j7x11rGaBOhGbEtWndV3AI6

JpsWo227e6JXMVGN0RzPW_._otgbOpLHUEZ5_P1xoFF6P4biZkXhPeYfAlXeeyubz10Ub1muSdQX

zUXx6mpfa1yGT7OgQ2m5wLxUXLVcNtH.CaNLfgZM_HcF5aI9_gb5EfA7E0vWlHiLE1CYzONYzRnV

_gLHlpsnQkp79mAiU0DGoSuNjIgABwxW480nN6qNskPxXTWM4CoCVS_jDZA9RQ.XQZmM0C_Eo93f

jc.TJmoIQuXibz9MJW4GlTlUkT_PCdgO5NljjPqnQuxtDSMecoZBACVMXu5YKVLsGAVzpYER2Z2T

_oSTR4kN_rxkxH0iFT2HiAcW3DY_j0KzOavri3tMYwaYgbW3NJ.aRvnLzwianRJeN7EQOHeNuitr

mY9bu_D_S.1lHMCqCnbIbk31PQQy0HyxL6ePC2CFNt4.I9iZLSTEjuvlfp8IY2HJA19rq3wjrMxV

bE3u9_QIJvmVNZRsFLQriilesld59dj.E7g8KIywP0HyS__SgyRgLwEIyBto3EHe5xJDcgdBY.pl

hHV4DD0oBTEvkCUkbYlZDj5PwSIyqtqLhFoqlt_3SOFjeYPi45yarJR2zKn8Q8tYpHiTxEuXAYLp

THn2akwW6DZi.VQ1Lppsgk63RQEPGVj.LCxT4UtNHU1EK97UpWxSYETOg0X6k_1.Ego__Shqw3JV

TW.NeFQG7LGPcwW.JSzM3i1eVWni4lIR.SbjMAZx1cqyi8x0.kN9ZRFU4H5HiFr8y4JNULXo8cD7

AiOAiHsMkDmrOb4pH0t6Nhlx6OREAiU3fQfzfSYNgf3zZSFaA4DAX8MImHZkpIAUq9s28dmJNsns

WLDBqnHFeYFeoZGyMoNqU9Or1vJYxkYRE73j.eBZJ7SrPHZd8_guh9DQC4iidxV84sr6sVMlXszS

ejiEQGveIMXBgkS5J4OxZqjUFVk7vMujAnXIyT8BT_XRtY9f7azX7GvFA6ARdKT0t1aNbgfR1BsO

4BmhDoX301lvSN5iZiy0BT0Z4SfQqCm6XrKDqRtmddBVo8c_ZUBC3HJBIFMTvzBXUPYJN6ObxA.q

FLxk68fEVGhM4LWjcVz4IVTGPMt6rl7RIIC24QWVc0LpUrkm.gkQNC00PfR_QU_u319zIFSH.CQT

dq16RBQyhVYgGzvpXyYgK2H8jIMwVfepLdj5ir1IEX70.DQ2WL2hSxCO_UJAjMPtXVoJn2LYHzNc

pa.CbEVms6a9yiX6a_aWhIHX5fRHjC2OD2rg13yjhV76kVqew42JP5unlH2rj0mtMwEEm_73e_VV

GUObk2.1di8RkHOu5R.kZiu7.Ag8.qIW8fDgqoHUM0Ab12kOIeJGWxWO4cpUx86w9cnvBq.g8fzu

gtegg0a5YxxPAdWdaCBQXHPPLBX.SMTdf9Ww7YdHIdC21PMO3RmTqz21qvvj8TMSs5qgDTyKNPN7

KhGJ7xKivzHSjI_LozBQlGTfPFmEHgrYDv3scCyz64dXFEt7DyvW3NpZGYGXmY5Yc7RVW21AP8xW

6crKSKH2A4.oaycvx0aXTPXM062t42CDUUodiqQm4ZKa1sShc6unWMmMBW8j_pdi5jf3Gw6pPIv9

b8WHKesioPAGjbMPfr4u3m8IB.cIyMYDw24E2nxgZ9opMXEk1zxy2vr_zzWhh72lx_PW3KXs7gmT

.oxna0z_9tsbIkosAyPZDHY.HUcLgkoZ6fKI1qsUZxfTSM8PmJ1PSVFvZGHdwn2N5K2rH1o9CO0e

XYV7UtV7Dg9L2EidcfS6xHyL6eAW8WUmxNN6jsCRLvoxSN.G0.yix7Ccd3tJFyEti

X-Sonic-MF:

X-Sonic-ID: dc6b5684-213b-4405-a75c-246444b1a9e9

Received: from sonic.gate.mail.ne1.yahoo.com by sonic317.consmr.mail.bf2.yahoo.com with HTTP; Sun, 4 Oct 2026 02:35:35 +0000

Date: Sun, 4 Oct 2026 02:35:31 +0000 (UTC)

From: myriam.lee002@yahoo.com

Reply-To: myriam.lee002@yahoo.com

Message-ID: <1455376361.198396.1791081331348@mail.yahoo.com>

References: <1455376361.198396.1791081331348.ref@mail.yahoo.com>

Subject: Dear Beloved One,

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Mailer: WebService/1.1.26668 YMailMini

X-Spam_score: 13.1

X-Spam_score_int: 131

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beloved One, Greetings in the name of our lord Jesus

Christ and my name is Mrs. Myriam Lee, an aging widow of (69 years old) and

I am from Ukraine, and I am suffering from the serious Bullet wound I sustained

duri [...]



Content analysis details: (13.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.6.129.82 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[myriam.lee002(at)yahoo.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[myriam.lee002(at)yahoo.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[myriam.lee002(at)yahoo.com]

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.6.129.82 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.6.129.82 listed in bl.score.senderscore.com]

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.1 HK_SCAM No description available.

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dear Beloved One,

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean



Dear=C2=A0Beloved=C2=A0One,



Greetings=C2=A0in=C2=A0the=C2=A0name=C2=A0of=C2=A0our=C2=A0lord=C2=A0Jesus=

=C2=A0Christ=C2=A0and=C2=A0my=C2=A0name=C2=A0is=C2=A0Mrs.=C2=A0Myriam=C2=A0=

Lee,=C2=A0an=C2=A0aging=C2=A0widow=C2=A0of=C2=A0(69=C2=A0years=C2=A0old)=C2=

=A0and=C2=A0I=C2=A0am=C2=A0from=C2=A0Ukraine,=C2=A0and=C2=A0I=C2=A0am=C2=A0=

suffering=C2=A0from=C2=A0the=C2=A0serious=C2=A0Bullet=C2=A0wound=C2=A0I=C2=

=A0sustained=C2=A0during=C2=A0the=C2=A0ongoing=C2=A0Ukraine=C2=A0and=C2=A0R=

ussia=C2=A0war,=C2=A0and=C2=A0I=C2=A0am=C2=A0currently=C2=A0admitted=C2=A0i=

n=C2=A0a=C2=A0private=C2=A0hospital=C2=A0here=C2=A0in=C2=A0Ukraine.



I=C2=A0have=C2=A0some=C2=A0funds=C2=A0I=C2=A0inherited=C2=A0from=C2=A0my=C2=

=A0late=C2=A0loving=C2=A0husband=C2=A0who=C2=A0also=C2=A0died=C2=A0of=C2=A0=

the=C2=A0war=C2=A0a=C2=A0few=C2=A0months=C2=A0ago=C2=A0and=C2=A0the=C2=A0su=

m=C2=A0of=C2=A0US$=C2=A04.700.000=C2=A0which=C2=A0he=C2=A0deposited=C2=A0wi=

th=C2=A0a=C2=A0Bank=C2=A0in=C2=A0Panama.



I=C2=A0am=C2=A0looking=C2=A0for=C2=A0an=C2=A0honest=C2=A0and=C2=A0God-feari=

ng=C2=A0person=C2=A0that=C2=A0can=C2=A0use=C2=A0these=C2=A0funds=C2=A0for=

=C2=A0God's=C2=A0work,=C2=A0also=C2=A0creating=C2=A0a=C2=A0charitable=C2=A0=

organization=C2=A0for=C2=A0the=C2=A0less=C2=A0privileged,=C2=A0helping=C2=

=A0the=C2=A0elderly,=C2=A0the=C2=A0poor,=C2=A0and=C2=A0also=C2=A0the=C2=A0w=

ar=C2=A0victims=C2=A0and=C2=A015%=C2=A0out=C2=A0of=C2=A0the=C2=A0total=C2=

=A0funds=C2=A0will=C2=A0be=C2=A0for=C2=A0your=C2=A0compensation=C2=A0for=C2=

=A0doing=C2=A0this=C2=A0work.



I=C2=A0found=C2=A0your=C2=A0email=C2=A0address=C2=A0from=C2=A0the=C2=A0inte=

rnet,=C2=A0and=C2=A0I=C2=A0decided=C2=A0to=C2=A0contact=C2=A0you=C2=A0after=

=C2=A0my=C2=A0prayers=C2=A0hoping=C2=A0that=C2=A0you=C2=A0will=C2=A0not=C2=

=A0betray=C2=A0the=C2=A0trust.



If=C2=A0you=C2=A0could=C2=A0be=C2=A0able=C2=A0to=C2=A0do=C2=A0this=C2=A0wor=

k,=C2=A0please=C2=A0email=C2=A0me=C2=A0back=C2=A0for=C2=A0more=C2=A0detail=

=C2=A0on=C2=A0how=C2=A0it=C2=A0could=C2=A0be=C2=A0done.



My=C2=A0warmest=C2=A0regards=C2=A0to=C2=A0you=C2=A0and=C2=A0your=C2=A0famil=

y=C2=A0and=C2=A0I=C2=A0wait=C2=A0for=C2=A0your=C2=A0positive=C2=A0reply.



Your=C2=A0Sister=C2=A0in=C2=A0Christ,



Mrs.=C2=A0Myriam=C2=A0Lee.

Nigerian spam from Yahoo! mail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 21:21:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDCmg-000000007Q9-185l

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 21:21:06 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 21:21:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic317-27.consmr.mail.bf2.yahoo.com ([74.6.129.82]:37272)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDC61-000000000E5-2zPB

for doctor@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 20:36:39 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791081335; bh=ZRUkw4dMJoJzD58h52kZE+tr1KEVgmwMHk4sOxkX6ds=; h=Date:From:Reply-To:References:Subject:From:Subject:Reply-To; b=LkP0TGW+uKrLAnPU90eePWgziKcCOMBqhq2zw9DR4tCtBCdVRCckgKDLFrhqZBQgahnga/I2uupDWbgLSPv/xH5zBLmucQTtBCeHOxVujrq9NXbp9d16W0iUc5t0yAfl42vp40n+23VQPJMc8HHNI+TaZT/5Nuk+iz505V6EYe5/CFvGNB01kxHXuR9L5+T8yOU589pRLfa/xIrdgkKBSQsYbANWZjPhoEYLLBp0hvOKWSJpeyXyCRtecOEbRVNofrRhrAygvi92lmBOTDHuK30frvdAIwcVWCQ1wF+F1Ty6zN4Tp5CaCzE/rDnU4hOKzNFCUaCT/mcgVJUyjue6BA==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791081335; bh=9to6T2scqipTi9QMRYW2IYyI8VHx2q1T5UYuXjL+pKZ=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=O4Je/V6OPYGZd9PfcICcGe4e1l+2kuKQCo6ebzBpkSaO5Jtx1pFmzYfhUk4ZKdVlFsFTKqLCOYuhffKIKKmDUEypk1ORI/Zc0IBHiPUl3p4NV39m7eO/GMh4ZaVkcIp2qDzIOtUYgjWpKZ69eY7qjfq++UmBHLoPgUb/aqGAXOvipamltbGVIUeWFDhX2+f1QGyURiUQLJZunezpWGoKj7RJ1mjslNt2gKDKKGM/Knd5NzLqD1yrr4GKwhphf7nfgLJJIOvYW3cXdqmY/G9Un7eOrQtOCkYxfFFMVw5agGYiL6rUjm3pgM0ja70z/BYZmUtIK38VdQK3LzMPCp+yzg==

X-YMail-OSG: 3WDoHtIVM1lxzvOYIBJxTkaDuGPqNfL5h.KRrSH2yilrAXUx2FO078yg1ftukFm

XBcEV255QVKGVCbI397FATHCQKq2iF_kRlbJ15Sva0vQ2QKqLU9Sj1ZV86bcv8cufkfTDUciImAR

1c1cD.uyxdyNnsom3d7anSDyHJ3Q1kDw0mYrW5zdCgUYwQQ7znvpIwZeGcoT4Z2b1jL2ZCB7ei2j

yaJ9v.3uE8Pzl3W.CYm4cRElq0qQirrT8VFmsxj5qi39vLi_XRkg3YHL_LwKy79ghW85V030f83m

SeKWlQjcj6fxUYNIdZenrpVxgIuIxZh2HgXrL0f7sdOmu2SccGghAw2n2CghbdxQIjuQRIV7zxQV

AFNuZ9idOt2Xx8zgrvLeJdCfy67mYMylpgp6cM7vb4dvA7iR0VTC40MJT7oF3Fb4DF71uzH6W8yk

rm4WFZ79CEcI1nN.rnDtswDvZu.aFSqedXUFNC9eQPAjO98YjsdY6j7x11rGaBOhGbEtWndV3AI6

JpsWo227e6JXMVGN0RzPW_._otgbOpLHUEZ5_P1xoFF6P4biZkXhPeYfAlXeeyubz10Ub1muSdQX

zUXx6mpfa1yGT7OgQ2m5wLxUXLVcNtH.CaNLfgZM_HcF5aI9_gb5EfA7E0vWlHiLE1CYzONYzRnV

_gLHlpsnQkp79mAiU0DGoSuNjIgABwxW480nN6qNskPxXTWM4CoCVS_jDZA9RQ.XQZmM0C_Eo93f

jc.TJmoIQuXibz9MJW4GlTlUkT_PCdgO5NljjPqnQuxtDSMecoZBACVMXu5YKVLsGAVzpYER2Z2T

_oSTR4kN_rxkxH0iFT2HiAcW3DY_j0KzOavri3tMYwaYgbW3NJ.aRvnLzwianRJeN7EQOHeNuitr

mY9bu_D_S.1lHMCqCnbIbk31PQQy0HyxL6ePC2CFNt4.I9iZLSTEjuvlfp8IY2HJA19rq3wjrMxV

bE3u9_QIJvmVNZRsFLQriilesld59dj.E7g8KIywP0HyS__SgyRgLwEIyBto3EHe5xJDcgdBY.pl

hHV4DD0oBTEvkCUkbYlZDj5PwSIyqtqLhFoqlt_3SOFjeYPi45yarJR2zKn8Q8tYpHiTxEuXAYLp

THn2akwW6DZi.VQ1Lppsgk63RQEPGVj.LCxT4UtNHU1EK97UpWxSYETOg0X6k_1.Ego__Shqw3JV

TW.NeFQG7LGPcwW.JSzM3i1eVWni4lIR.SbjMAZx1cqyi8x0.kN9ZRFU4H5HiFr8y4JNULXo8cD7

AiOAiHsMkDmrOb4pH0t6Nhlx6OREAiU3fQfzfSYNgf3zZSFaA4DAX8MImHZkpIAUq9s28dmJNsns

WLDBqnHFeYFeoZGyMoNqU9Or1vJYxkYRE73j.eBZJ7SrPHZd8_guh9DQC4iidxV84sr6sVMlXszS

ejiEQGveIMXBgkS5J4OxZqjUFVk7vMujAnXIyT8BT_XRtY9f7azX7GvFA6ARdKT0t1aNbgfR1BsO

4BmhDoX301lvSN5iZiy0BT0Z4SfQqCm6XrKDqRtmddBVo8c_ZUBC3HJBIFMTvzBXUPYJN6ObxA.q

FLxk68fEVGhM4LWjcVz4IVTGPMt6rl7RIIC24QWVc0LpUrkm.gkQNC00PfR_QU_u319zIFSH.CQT

dq16RBQyhVYgGzvpXyYgK2H8jIMwVfepLdj5ir1IEX70.DQ2WL2hSxCO_UJAjMPtXVoJn2LYHzNc

pa.CbEVms6a9yiX6a_aWhIHX5fRHjC2OD2rg13yjhV76kVqew42JP5unlH2rj0mtMwEEm_73e_VV

GUObk2.1di8RkHOu5R.kZiu7.Ag8.qIW8fDgqoHUM0Ab12kOIeJGWxWO4cpUx86w9cnvBq.g8fzu

gtegg0a5YxxPAdWdaCBQXHPPLBX.SMTdf9Ww7YdHIdC21PMO3RmTqz21qvvj8TMSs5qgDTyKNPN7

KhGJ7xKivzHSjI_LozBQlGTfPFmEHgrYDv3scCyz64dXFEt7DyvW3NpZGYGXmY5Yc7RVW21AP8xW

6crKSKH2A4.oaycvx0aXTPXM062t42CDUUodiqQm4ZKa1sShc6unWMmMBW8j_pdi5jf3Gw6pPIv9

b8WHKesioPAGjbMPfr4u3m8IB.cIyMYDw24E2nxgZ9opMXEk1zxy2vr_zzWhh72lx_PW3KXs7gmT

.oxna0z_9tsbIkosAyPZDHY.HUcLgkoZ6fKI1qsUZxfTSM8PmJ1PSVFvZGHdwn2N5K2rH1o9CO0e

XYV7UtV7Dg9L2EidcfS6xHyL6eAW8WUmxNN6jsCRLvoxSN.G0.yix7Ccd3tJFyEti

X-Sonic-MF:

X-Sonic-ID: dc6b5684-213b-4405-a75c-246444b1a9e9

Received: from sonic.gate.mail.ne1.yahoo.com by sonic317.consmr.mail.bf2.yahoo.com with HTTP; Sun, 4 Oct 2026 02:35:35 +0000

Date: Sun, 4 Oct 2026 02:35:31 +0000 (UTC)

From: myriam.lee002@yahoo.com

Reply-To: myriam.lee002@yahoo.com

Message-ID: <1455376361.198396.1791081331348@mail.yahoo.com>

References: <1455376361.198396.1791081331348.ref@mail.yahoo.com>

Subject: Dear Beloved One,

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Mailer: WebService/1.1.26668 YMailMini

X-Spam_score: 13.1

X-Spam_score_int: 131

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beloved One, Greetings in the name of our lord Jesus

Christ and my name is Mrs. Myriam Lee, an aging widow of (69 years old) and

I am from Ukraine, and I am suffering from the serious Bullet wound I sustained

duri [...]



Content analysis details: (13.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

[74.6.129.82 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

[74.6.129.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.6.129.82 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.6.129.82 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[myriam.lee002(at)yahoo.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[myriam.lee002(at)yahoo.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[myriam.lee002(at)yahoo.com]

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.6.129.82 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.6.129.82 listed in bl.score.senderscore.com]

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.1 HK_SCAM No description available.

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dear Beloved One,

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean



Dear=C2=A0Beloved=C2=A0One,



Greetings=C2=A0in=C2=A0the=C2=A0name=C2=A0of=C2=A0our=C2=A0lord=C2=A0Jesus=

=C2=A0Christ=C2=A0and=C2=A0my=C2=A0name=C2=A0is=C2=A0Mrs.=C2=A0Myriam=C2=A0=

Lee,=C2=A0an=C2=A0aging=C2=A0widow=C2=A0of=C2=A0(69=C2=A0years=C2=A0old)=C2=

=A0and=C2=A0I=C2=A0am=C2=A0from=C2=A0Ukraine,=C2=A0and=C2=A0I=C2=A0am=C2=A0=

suffering=C2=A0from=C2=A0the=C2=A0serious=C2=A0Bullet=C2=A0wound=C2=A0I=C2=

=A0sustained=C2=A0during=C2=A0the=C2=A0ongoing=C2=A0Ukraine=C2=A0and=C2=A0R=

ussia=C2=A0war,=C2=A0and=C2=A0I=C2=A0am=C2=A0currently=C2=A0admitted=C2=A0i=

n=C2=A0a=C2=A0private=C2=A0hospital=C2=A0here=C2=A0in=C2=A0Ukraine.



I=C2=A0have=C2=A0some=C2=A0funds=C2=A0I=C2=A0inherited=C2=A0from=C2=A0my=C2=

=A0late=C2=A0loving=C2=A0husband=C2=A0who=C2=A0also=C2=A0died=C2=A0of=C2=A0=

the=C2=A0war=C2=A0a=C2=A0few=C2=A0months=C2=A0ago=C2=A0and=C2=A0the=C2=A0su=

m=C2=A0of=C2=A0US$=C2=A04.700.000=C2=A0which=C2=A0he=C2=A0deposited=C2=A0wi=

th=C2=A0a=C2=A0Bank=C2=A0in=C2=A0Panama.



I=C2=A0am=C2=A0looking=C2=A0for=C2=A0an=C2=A0honest=C2=A0and=C2=A0God-feari=

ng=C2=A0person=C2=A0that=C2=A0can=C2=A0use=C2=A0these=C2=A0funds=C2=A0for=

=C2=A0God's=C2=A0work,=C2=A0also=C2=A0creating=C2=A0a=C2=A0charitable=C2=A0=

organization=C2=A0for=C2=A0the=C2=A0less=C2=A0privileged,=C2=A0helping=C2=

=A0the=C2=A0elderly,=C2=A0the=C2=A0poor,=C2=A0and=C2=A0also=C2=A0the=C2=A0w=

ar=C2=A0victims=C2=A0and=C2=A015%=C2=A0out=C2=A0of=C2=A0the=C2=A0total=C2=

=A0funds=C2=A0will=C2=A0be=C2=A0for=C2=A0your=C2=A0compensation=C2=A0for=C2=

=A0doing=C2=A0this=C2=A0work.



I=C2=A0found=C2=A0your=C2=A0email=C2=A0address=C2=A0from=C2=A0the=C2=A0inte=

rnet,=C2=A0and=C2=A0I=C2=A0decided=C2=A0to=C2=A0contact=C2=A0you=C2=A0after=

=C2=A0my=C2=A0prayers=C2=A0hoping=C2=A0that=C2=A0you=C2=A0will=C2=A0not=C2=

=A0betray=C2=A0the=C2=A0trust.



If=C2=A0you=C2=A0could=C2=A0be=C2=A0able=C2=A0to=C2=A0do=C2=A0this=C2=A0wor=

k,=C2=A0please=C2=A0email=C2=A0me=C2=A0back=C2=A0for=C2=A0more=C2=A0detail=

=C2=A0on=C2=A0how=C2=A0it=C2=A0could=C2=A0be=C2=A0done.



My=C2=A0warmest=C2=A0regards=C2=A0to=C2=A0you=C2=A0and=C2=A0your=C2=A0famil=

y=C2=A0and=C2=A0I=C2=A0wait=C2=A0for=C2=A0your=C2=A0positive=C2=A0reply.



Your=C2=A0Sister=C2=A0in=C2=A0Christ,



Mrs.=C2=A0Myriam=C2=A0Lee.

NIgerian spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 21:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDCmZ-000000007PV-2Env

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 21:20:59 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 21:20:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed2-f10.google.com ([74.125.228.74]:34639)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDBmI-00000000EnU-1Fsy

for doctor@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 20:16:15 -0600

Received: by mail-ed2-f10.google.com with SMTP id 4fb4d7f45d1cf-6aaf76d8881so501028a12.1

for ; Sat, 03 Oct 2026 19:15:16 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1791080109; cv=none;

d=google.com; s=arc-20260327;

b=ilCExb0uj5THCSr2lPmnI/Jt4W3FYmF3FehUqQ19GXczBhJnTiJ5rnEdFew4v52Ck2

IvBSSM4zXZRqcly1/bip+UeILmHdXk4AqKW8Q/ad/NKUspvp3bYdISrIeB5BvwFpUJ6c

a9DTXWbFpMBRAaq23u0i8S/ZqurRFWbcwet/KH9lhfxwRvMV2dOshyb+m9tI5uoR9PEj

bVFq3BBuPolJzfcwYBum7jJcguTOtoMV66CbNydhOtaDq7vBYHuaGfgbK1YtYwiL3wuj

tJBWs7AEjqqEm0xJeXufIdqGYOymvd60FGCQ0nxWVFQPebLSMLvORm02mXL3zzWUkKXY

0cuw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=y2ch/CoE7ZfIHLUQN8BV5R7Z7kB/cR6JF083adORKJs=;

fh=zRxMrV6KwBKvYOJanreRE+DWFBBjfWr6/fX8UbxOWX0=;

b=R4DdQr8Lydo70+pusJJfnR48emyDf25bSx7JJJgrsTIS0AW7w/p85HSQMXh5o7Te10

8yXP6KcCyj71RTDenDf6MaKd2wBKEeL9fcGuoAkvAK3gdM2gNywDcMHvf13dixXLCdN/

XVZ8FevL824j7H/j/BtpYxaF9mRRSTXyQtSa1JDK0iX93FLEXoW33DUpyhNcki8YUwhC

agyzx7Vu5uEboHCDdzI35Oq3EY4AUKS2eSLqdQ8YCyRORL4f0y7gKpJqjL9p1Mi3jaV0

3/d/cwbH4YmIKgeOBHWgycFj8a8MUxWjwEJ58wyXlRTBupuma0INlYueqUdEhbJQDP8W

vHiw==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791080109; x=1791684909; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=y2ch/CoE7ZfIHLUQN8BV5R7Z7kB/cR6JF083adORKJs=;

b=gtLRr/86ZBBrMmbx2UluIcrVJoWV1r1Y965Ih+XuFznv8n9IOPM+xfER3nhTJTQCTa

HFk/mT0rRl+KTxhEC+10YFWcnyOSw3Ei6kFYVqguvPFxVnW4/ql52d521ufrX21RWWxW

J2nl6IzYMPCvjP4xTNMroiSJAxDuAb9b/0N6wSnslLb5M9op3j+yGW4Hjf2unCW7dyx4

4vl+mMY81cYaQaB8f99leh/62qaKbEHNIz2MKa+wdkwPriliWogHe9PEM11ehkXUCZjy

s5t4TpHZ2Dqdbc+1mf36h3bYyqKogkDWPAEp0RQ2wAReoMlY3iYS659MYudaWeSK4kvm

NbLA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791080109; x=1791684909;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=y2ch/CoE7ZfIHLUQN8BV5R7Z7kB/cR6JF083adORKJs=;

b=q763QNWdC9cVwwpABlMC0D6tvViowNYHO3qfufPP+LdPyGncFsQjvTQU5ZaNm2lg7F

hpxUhymQZAmdyV9KBViwTRRmcXU66o9RpGcy8vK4GeZhbVyYtMHKgXNtF+1WRQv4hhpe

PBXmDOS1HUN/YtaQ2rkyDPYiB7bhDeQpvBKwxUIXZ65CJAuJK2+9p0KiSaSRs0nAmyph

pjta8P+WyCXXw6TZc7p5L1xdYgTW8QDRJRCM6j6jyoyd1n3pfJvUUGVZRp/BkY/B7EHj

OuYbG4DyiMfBsDZupRlCyriaN/ifyfcTbdpJquMv8yHTTy8xD38MdVttCaw/HJ4LP1i5

V3yA==

X-Forwarded-Encrypted: i=1; AKwUvBzDKaedWuYW9YwFqDxkXQ0LcOka3bNb/9xaVd3X92+vyXpj8jjVd4YmrO7PZAkHBMnukmFElSU=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFq9FYLFkfTmSbj3u7n3ADYB7ShzcTv5LqEsVq0quNKk5sod1JQ7W9XI

/+N9YrP3UQ7iSL7dVMxvp1lxZRkmBtKJrHpK6XWb7wUP60uTqC47ijEhCOH1deowYqSAsyflcdb

9KyCZOF4D3RDIMErrabkFsmwSvtDd1qw=

X-Gm-Gg: AYBFou2oVw+QB39yRboOh04lFsa1QP3Q5huB32+HCx/Cxb590k0ZzEkooCMPpQ5dlXe

bz0HmwhCDWY7yQoDPgpxTPmoW2zRPjVwKCY38Un5uWbtSU6kl6nUHCvJBn1V9LrDSJcjEbj+Vgw

jWs9+qgUpSmJT2FerGtlR7/TbaInXT1MpFDsgZuKEpcUH0JIseywNs8QWBTi/fH9LEpMTQdH4+e

yUWVTTsaF27BuF5zTvlYFEHWeuoQxLq8IzJ7jQPtGmM5Dx35uXwOIf7Ee20h/nN1uooFrVyp8lE

7eApk7wfhzaU3MbdAQCLMkYyabKHklsQzqhkag/Uzc+OfguCcnwbs3CIZg==

X-Received: by 2002:a05:6402:5d6:b0:6ac:776a:23db with SMTP id

4fb4d7f45d1cf-6af9e317e92mr5028897a12.18.1791080108923; Sat, 03 Oct 2026

19:15:08 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrdavidmorrison33@gmail.com

From: Mr David Morris

Date: Sat, 3 Oct 2026 19:15:00 -0700

X-Gm-Features: AclHuK9IlsEAYWk1Ee8_c33o6htgyfnbaYtasVJVP40N-CtApzbqTbuPrZQQOvM

Message-ID:

Subject: Your Abandoned shipment

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a821ca065cfa5517"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 14.5

X-Spam_score_int: 145

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I am MR DAVID MORRIS, Inspection Unit Manager United Nations

Inspection Agency in Harts-field Jackson International Airport Atlanta, Georgia.

During our investigation, I discovered An abandoned shipment through a Diplomat

from United Kingdom which was transferred from JF Kennedy Airport to our

facility here in Atlanta, The two consignment b [...]



Content analysis details: (14.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

[74.125.228.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.228.74 listed in dnsbl.ahbl.org]

[74.125.228.74 listed in dnsbl.ahbl.org]

[74.125.228.74 listed in dnsbl.ahbl.org]

[74.125.228.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.228.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.228.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.228.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.228.74 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.228.74 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.228.74 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.228.74 listed in bl.score.senderscore.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrdavidmorrison33(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[gayladirector(at)gmail.com]

0.6 J_CHICKENPOX_73 BODY: 7alpha-pock-3alpha

0.6 J_CHICKENPOX_43 BODY: 4alpha-pock-3alpha

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 HK_NAME_FM_MR_MRS No description available.

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Your Abandoned shipment

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean



--000000000000a821ca065cfa5517

Content-Type: text/plain; charset="UTF-8"



I am MR DAVID MORRIS, Inspection Unit Manager United Nations

Inspection Agency in Harts-field Jackson International Airport

Atlanta, Georgia.



During our investigation, I discovered An abandoned shipment through a

Diplomat from United Kingdom which was transferred from JF Kennedy

Airport to our facility here in Atlanta, The two consignment boxes is

worth $8 million,And I Ascertain you that the consignment is in your

name,you are advise to provide Clearance and yellow tag certificate

for claim.





Best Regards,Email me (mrdavidmorrison33@gmail.com)





David Morris



INSPECTION OFFICER



--000000000000a821ca065cfa5517

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=C2=A0I am MR DAVID MORRIS, Inspection Unit Manage=

r United Nations
Inspection Agency in Harts-field Jackson International =

Airport
Atlanta, Georgia.

During our investigation, I discovered =

An abandoned shipment through a
Diplomat from United Kingdom which was t=

ransferred from JF Kennedy
Airport to our facility here in Atlanta, The =

two =C2=A0consignment boxes is
worth $8 million,And I =C2=A0Ascertain yo=

u that the consignment is in your
name,you are advise to provide Clearan=

ce and yellow tag certificate
for claim.


Best Regards,Email m=

e (mrdavidmorrison33@gmail.c=

om
)


David Morris

INSPECTION OFFICER





--000000000000a821ca065cfa5517--

loan spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 19:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDBAH-000000005Ae-0BFn

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 19:37:21 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 19:37:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [90.147.112.74] (port=42392 helo=mab.lngs.infn.it)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDA5i-00000000BST-1H9F

for root@nk.ca;

Sat, 03 Oct 2026 18:28:12 -0600

Received: from mab.lngs.infn.it (localhost [127.0.0.1])

by mab.lngs.infn.it (Proxmox) with ESMTP id 9F9A0C04225A9

for ; Sun, 4 Oct 2026 02:04:07 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lngs.infn.it; h=

cc:content-transfer-encoding:content-type:content-type:date:from

:from:message-id:mime-version:reply-to:reply-to:subject:subject

:to:to; s=pmg1; bh=/OPxHU8mwtXiToxsxLbPfZHIhED3GXYaLijrl1t2rTY=; b=

vWfvbzzCTcl2sQPcldt4eg9I7SPHxL7FYfzP5/qMENsRGTrBs9UTI3F2477jgHiO

/kyknku7qF51oajDZZ6riyI85zYWTnmuuz8tG2lLXj069Bq2WrTcRdo8Z5hiogkG

uGx88tK8jiPrB9tbmTaKflUhYkSCgBE7lLzJyGXKEI9U4y6Xtk+e+ZkPMprAHhMi

bMAIL6bNYTyNy6f4UsTq7Krj4RpbKtjZakWrSKWsRzxc7EhW1IpFiSWSoFvsHykS

glaYJeI3kWjWbeuBqZWGg+vZiPv6QJG01adc/xJ4S1J/y9QYLkyq7fZMFXtBrdTG

7YJBTRMt8muBdl/sjj9btg==

Received: from puck.lngs.infn.it (puck.lngs.infn.it [192.84.135.115])

by mab.lngs.infn.it (Proxmox) with ESMTPS

for ; Sun, 4 Oct 2026 02:04:05 +0200 (CEST)

Received: from smtp2.lngs.infn.it (smtp2.lngs.infn.it [192.84.135.130])

by puck.lngs.infn.it (8.18.1/8.18.1/Debian-6) with ESMTP id 69401LM9868712

for ; Sun, 4 Oct 2026 02:03:56 +0200

Received: from lngs.infn.it (unknown [87.249.134.39])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(No client certificate requested)

by smtp2.lngs.infn.it (Postfix) with ESMTPSA id D63F5B0FA4

for ; Sun, 4 Oct 2026 02:03:54 +0200 (CEST)

Reply-To: cjoe30487@gmail.com

From: Joe Cross

To: root@nk.ca

Subject: Hello.

Date: 03 Oct 2026 17:03:44 -0700

Message-ID: <20261003170344.1E3571794E736E4A@lngs.infn.it>

MIME-Version: 1.0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-SPAM-PROXMOX-LEVEL:

X-PROXMOX-SPAM: no

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Looking for flexible financing to meet your personal and business

financial needs? Explore our loan options with competitive rates and flexible

repayment terms designed to suit your budget. Apply Today Fast Flexible

Convenient



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[87.249.134.39 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.130 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[192.84.135.115 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

[90.147.112.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[90.147.112.74 listed in dnsbl.ahbl.org]

[90.147.112.74 listed in dnsbl.ahbl.org]

[90.147.112.74 listed in dnsbl.ahbl.org]

[90.147.112.74 listed in dnsbl.ahbl.org]

[192.84.135.115 listed in dnsbl.ahbl.org]

[192.84.135.115 listed in dnsbl.ahbl.org]

[192.84.135.115 listed in dnsbl.ahbl.org]

[192.84.135.115 listed in dnsbl.ahbl.org]

[87.249.134.39 listed in dnsbl.ahbl.org]

[87.249.134.39 listed in dnsbl.ahbl.org]

[87.249.134.39 listed in dnsbl.ahbl.org]

[87.249.134.39 listed in dnsbl.ahbl.org]

[192.84.135.130 listed in dnsbl.ahbl.org]

[192.84.135.130 listed in dnsbl.ahbl.org]

[192.84.135.130 listed in dnsbl.ahbl.org]

[192.84.135.130 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[90.147.112.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[90.147.112.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[90.147.112.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[90.147.112.74 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[90.147.112.74 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[cjoe30487(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Hello.

X-Antivirus: AVG (VPS 261003-4, 10/3/2026), Inbound message

X-Antivirus-Status: Clean



Looking for flexible financing to meet your personal and business=20

financial needs?



Explore our loan options with competitive rates and flexible=20

repayment terms designed to suit your budget.



Apply Today

Fast Flexible Convenient



Eligibility, rates, terms, and approval are subject to applicable=20

requirements and conditions.















Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 10:35:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD2hS-00000000L21-0xWJ

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 10:35:02 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 10:35:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f72.google.com ([209.85.222.72]:39270)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD1a6-00000000E76-0xRG

for doctor@nk.ca;

Sat, 03 Oct 2026 09:22:58 -0600

Received: by mail-ua1-f72.google.com with SMTP id a1e0cc1a2514c-98c49d39760so5307241.1

for ; Sat, 03 Oct 2026 08:22:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=smhcostadelsol-com.20251104.gappssmtp.com; s=20251104; t=1791040914; x=1791645714; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=7EpxVTK7Luf7mc0OkJgXGGtswbhflRWL0p/tYWQWUQg=;

b=NzgmKEl4eYkXAIyN0PdfRMe50rQ+intRdL5cwBSBWtWZ3W2WCGhSIcYHTzuLJABVdv

CcZ0MlR+IIsR01tivduM3b/icJTqJOJPqEPiVFkPr6mPh2nzxd7OpxaY4ZTO/oO3x10m

QBcboZqQHF+0ZxVCQWnu7NFTmYKtypssyt3oRZrzq4syOiDR3if4FZc02WwbwWHHHMPg

VTDPtbh7X2rwUlJKY1DgNBTStYTJZg0wzh+4tSeAeRMwbyjlq2At53w0WjDjgza+Ie75

XxOcygMex1FvH+DnF9AgQayCtW1/DskaS2zj40qkvRtEJFBR5BeGejxz0p7t9hztqhP8

kS2w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791040914; x=1791645714;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=7EpxVTK7Luf7mc0OkJgXGGtswbhflRWL0p/tYWQWUQg=;

b=ft5K0e+qmmWm6DhfvbLgiQYJ4XIDU97fsCdn0u7m2Wig9YQaxJzBM1WZbHQXDPoRq3

AwCINBtnnz5xioHkqvcggYU12mAocgzTp9Bo3+XJh/ptgb2j+iyxXn3PrI76BQLMoJXj

5bmY+SUQu9bxlmJXXK6oba+FkSyRKpHjL9HFFVWfHnE1wFXTf586wu5bYbAcKyKUqQH8

QqGPU7PBcWGvruK8y6akh3cVJvmhpTRGDpTMxJrMi+lh3mIUHdHcNU8Pe3xowsK+HYt/

fnTTzvQzjnYlCJJxzBPkAgYIUPMdBAmiLtErPpLNqdK5d0r7z7Q0+RY0M/kaEDWwYXYz

J+Cg==

X-Gm-Message-State: AFq9FYIHwJ8ka7ktBDwzmNTy33D6APljlzaT7OhKcRhguLcKiVNuhtJt

AbFvK5pxFRKIZnFVTS6r5WevKTWwrAwmrbkeNTqlS7Da4F3lsMohR3QeYmDLSUVenpLfkqAers9

N8TeAaBrw/i11R4fGOvJsnyvO

MIME-Version: 1.0

X-Received: by 2002:a05:6102:4493:b0:7b4:9633:2dcd with SMTP id

ada2fe7eead31-7c0ef231831mr1093462137.0.1791040914668; Sat, 03 Oct 2026

08:21:54 -0700 (PDT)

Message-ID:

Date: Sat, 03 Oct 2026 15:21:54 +0000

Subject: =?UTF-8?Q?Uw_muur_lekt_warmte_=E2=80=94_en_subsidie_dekt_tot_30=25_van?=

=?UTF-8?Q?_de_kosten?=

From: Isolatie Advies NL

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000007f4415065cf13583"

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Isolatie Advies NL · Spouwmuurisolatie Als uw buitenmuur

koud aanvoelt van binnen, gaat er warmte verloren — elke dag, elke maand.

Spouwmuurisolatie is één van de meest effectieve woningverbeteringen die

u kunt doen. Woningen van vóór 1990 met een spouwmuur kunnen jaarlijks

€250 tot €500 besparen op stookkosten.



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.72 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: cedarshadowland.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.72 listed in bl.score.senderscore.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: cedarshadowland.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.72 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 TW_JB BODY: Odd Letter Triples with JB

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Uw_muur_lekt_warmte_=E2=80=94_en_subsidie_dekt_tot_30=25_van?=

=?UTF-8?Q?_de_kosten?=



--0000000000007f4415065cf13583

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SXNvbGF0aWUgQWR2aWVzIE5MIMK3IFNwb3V3bXV1cmlzb2xhdGllDQoNCg0KDQpBbHMgdXcgYnVp

dGVubXV1ciBrb3VkIGFhbnZvZWx0IHZhbiBiaW5uZW4sIGdhYXQgZXIgd2FybXRlIHZlcmxvcmVu

IOKAlCBlbGtlICANCmRhZywgZWxrZSBtYWFuZC4NCg0KU3BvdXdtdXVyaXNvbGF0aWUgaXMgw6nD

qW4gdmFuIGRlIG1lZXN0IGVmZmVjdGlldmUgd29uaW5ndmVyYmV0ZXJpbmdlbiBkaWUgdSAgDQpr

dW50IGRvZW4uIFdvbmluZ2VuIHZhbiB2w7PDs3IgMTk5MCBtZXQgZWVuIHNwb3V3bXV1ciBrdW5u

ZW4gamFhcmxpamtzIOKCrDI1MCAgDQp0b3Qg4oKsNTAwIGJlc3BhcmVuIG9wIHN0b29ra29zdGVu

Lg0KDQpWaWEgZGUgSVNERS1zdWJzaWRpZXJlZ2VsaW5nIHZlcmdvZWR0IGRlIG92ZXJoZWlkIHRv

dCAzMCUgdmFuIGRlIGtvc3Rlbi4gIA0KRWVuIHZyaWpibGlqdmVuZGUgb2ZmZXJ0ZSBoZWxwdCB1

IHRlIHppZW4gd2F0IGhldCB2b29yIMO6IGJldGVrZW50Lg0KDQpWcmFhZyB1dyBncmF0aXMgd29u

aW5nY2hlY2sgYWFuIOKAlCB3aWoga2lqa2VuIG9mIHV3IGh1aXMgaW4gYWFubWVya2luZyBrb210

Lg0KDQoNCkdyYXRpcyB3b25pbmdjaGVjayBhYW52cmFnZW4g4oaSDQoNCg0KDQoNCg0KSW4gw6nD

qW4gb29nb3BzbGFnOg0KDQrinJMgQmVzcGFyaW5nOiDigqwyNTAg4oCTIOKCrDUwMCBwZXIgamFh

ciBvcCBzdG9va2tvc3Rlbg0KDQrinJMgSVNERS1zdWJzaWRpZTogdG90IDMwJSB2ZXJnb2VkIGRv

b3IgZGUgb3ZlcmhlaWQNCg0K4pyTIEVuZXJnaWVsYWJlbCB2ZXJiZXRlcnQgZGlyZWN0DQoNCuKc

kyBLbHVzIGR1dXJ0IHZhYWsgc2xlY2h0cyDDqcOpbiBkYWcNCg0KDQoNCg0KDQpJc29sYXRpZSBB

ZHZpZXMgTkwgaXMgZWVuIG9uYWZoYW5rZWxpamsgYWR2aWVzcGxhdGZvcm0uIFN1YnNpZGllYmVk

cmFnZW4gIA0KemlqbiByaWNodGxpam5lbiBlbiBhZmhhbmtlbGlqayB2YW4gYWN0dWVsZSByZWdl

bGdldmluZy4gQWZtZWxkZW4/IEtsaWsgIA0KaGllci4NCg0KDQoNCg0K

--0000000000007f4415065cf13583

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




content=3D"width=3Ddevice-width,initial-scale=3D1">
rgin:0;padding:0;background:#f5f0ea;font-family:Arial,sans-serif">


center" style=3D"padding:24px 16px">


:600px;background:#fff;border-radius:6px;overflow:hidden">










;color:#fff;font-size:13px;font-weight:bold;letter-spacing:1.5px;text-trans=

form:uppercase">Isolatie Advies NL =C2=B7 Spouwmuurisolatie




;line-height:1.35">Als uw buitenmuur koud aanvoelt van binnen, gaat er warm=

te verloren =E2=80=94 elke dag, elke maand.



S=

pouwmuurisolatie is =C3=A9=C3=A9n van de meest effectieve woningverbetering=

en die u kunt doen. Woningen van v=C3=B3=C3=B3r 1990 met een spouwmuur kunn=

en jaarlijks =E2=82=AC250 tot =E2=82=AC500 besparen op stookkosten<=

/strong>.



V=

ia de ISDE-subsidieregeling vergoedt de overheid tot 30% van de kos=

ten
. Een vrijblijvende offerte helpt u te zien wat het voor =C3=BA=

betekent.



V=

raag uw gratis woningcheck aan =E2=80=94 wij kijken of uw huis in aanmerkin=

g komt.




94c00;border-radius:4px">
fe68f7c80b4a9" style=3D"display:block;padding:15px 34px;color:#fff;font-siz=

e:15px;font-weight:bold;text-decoration:none">Gratis woningcheck aanvragen =

→





ound:#fdf3ee;border-left:4px solid #b94c00;border-radius:0 4px 4px 0"><=

td style=3D"padding:18px 20px">


0">In =C3=A9=C3=A9n oogopslag:



=

=E2=9C=93 Besparing: =E2=82=AC250 =E2=80=93 =E2=82=AC500 per jaar op stookk=

osten



=

=E2=9C=93 ISDE-subsidie: tot 30% vergoed door de overheid



=

=E2=9C=93 Energielabel verbetert direct



=E2=9C=

=93 Klus duurt vaak slechts =C3=A9=C3=A9n dag






#eee">

Isolatie =

Advies NL is een onafhankelijk adviesplatform. Subsidiebedragen zijn richtl=

ijnen en afhankelijk van actuele regelgeving. Afmelden?
cedarshadowland.org/t/c/523d680fe68f7c80b4a9" style=3D"color:#bbb">Klik hie=

r
.






1" height=3D"1" alt=3D"">

--0000000000007f4415065cf13583--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 10:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD2h5-00000000Kze-33Q7

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 10:34:39 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 10:34:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f71.google.com ([209.85.217.71]:57752)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD0mj-00000000OOM-39mR

for doctor@nk.ca;

Sat, 03 Oct 2026 08:31:57 -0600

Received: by mail-vs1-f71.google.com with SMTP id ada2fe7eead31-7bf21ebcc4aso501013137.3

for ; Sat, 03 Oct 2026 07:31:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=aluno-mg-gov-br.20251104.gappssmtp.com; s=20251104; t=1791037855; x=1791642655; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=o7KtsxZAITdLEV5CasGfLFEkrrcblayuKOEswaObRFs=;

b=rKPGnVnoFNdUgejpno2saTqwHyBTpZiPZ6/+Rz/5bGgrRgE5StYPO15rNjVrsmCJFv

0S2TYNT7+SBF7essBkoLz2RuND6MKiBbfp2OLhGhgW9Tu+oZ3po1Sa+Yy8yDzJ8pLBHk

BRENt5DRStBWWtiCfp1T7mU6xeWLVNiwrneR4hKKzkZ4IckgQS6PYpXiDiqPWfK6w4UQ

Kjt5OwarH7rAEwwqOXLdQ9R5OG1pFirX3S2WRaMFAruO88yg6lc6MEnRmp6hXr/ykg4K

UEXc6NAnXUN566smEuXUJ+acucJfo9kiSlJJHnXBagDC2aOichrzUGSmO7svW5vN2q2j

ooow==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791037855; x=1791642655;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=o7KtsxZAITdLEV5CasGfLFEkrrcblayuKOEswaObRFs=;

b=GRnkSc+BoEyegEREZm9hAEcozt4Xy6Vtm2LLPi0szGFwJV7medM26U0IUPF1Itutq1

dIdlacwUMX0oUlzlEh1VnBXVINHEewpmwoTxA9PrfyaZhWjCIRMIuUz0rNMtGvSw2Jsf

neXSeAk8DWROCv1cpCj6ft3aHugi+eDuQ9IE9YqDbZQ65X6ZuOdrgzgwgQgxFPlyU2hU

lal43nnDeetC0DJwO1oeFGbcY8jiwueEKNTvk4GCj2j5X3Chbi1RjZXoOm0vsCoVwBqr

ok0FjTJgU3MEErie1VbGOjmk76wssdIRTMYZ34mhieN4RaTHhyvBlnEHcyx590dkNC3T

t68Q==

X-Gm-Message-State: AFq9FYJu6B8onBA+Q2lzHt8r6jR20TbtSuxsqy8dfDjyx8vPWlocq7VU

/wfN0TEPlpPegzutKfrMFeuhEUIwzmw+mtkqou0FQ7FQX6Gc+M7yUn/v66IpIDcTtcLqXZv/Xei

mbW/KH16L6QO58COtPOKrJwJxUWphgnA4aSX/6fTuBP6A8dXNYML6R6p8JMCEbxD61hxSxg==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:915:b0:7bf:7f78:8617 with SMTP id

ada2fe7eead31-7c2425ee438mr722171137.5.1791037854695; Sat, 03 Oct 2026

07:30:54 -0700 (PDT)

Message-ID:

Date: Sat, 03 Oct 2026 14:30:54 +0000

Subject: Bespaar tot 30% op uw energierekening met isolatie

From: Isolatie Expert NL

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000001bdf25065cf07f43"

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: IsolatieExpert Nederland · Energiebesparing Warmer wonen,

lagere rekening Bespaar tot 30% op uw energierekening met goede isolatie



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

[209.85.217.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

[209.85.217.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.71 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.71 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: brandarealtor.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.217.71 listed in bl.score.senderscore.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: brandarealtor.com]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: brandarealtor.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.71 listed in wl.mailspike.net]

0.1 TW_JB BODY: Odd Letter Triples with JB

0.1 TW_JD BODY: Odd Letter Triples with JD

0.1 TW_JK BODY: Odd Letter Triples with JK

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Bespaar tot 30% op uw energierekening met isolatie



--0000000000001bdf25065cf07f43

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: quoted-printable



IsolatieExpert Nederland =C2=B7 Energiebesparing















Warmer wonen, lagere rekening



Bespaar tot 30% op uw energierekening met goede isolatie



Een slecht ge=C3=AFsoleerde woning laat kostbare warmte ontsnappen via het =

dak, =20

de muren en de vloer. Met de juiste isolatie houdt u de warmte binnen en =

=20

gaat uw stookkostenrekening merkbaar omlaag.











=E2=9C=93 Tot ~30% lagere stookkosten =E2=80=94 indicatief, afhankelijk van=

uw woning



=E2=9C=93 Subsidie mogelijk =E2=80=94 check of u in aanmerking komt voor ee=

n bijdrage



=E2=9C=93 Meer wooncomfort =E2=80=94 geen tocht en een aangenamere temperat=

uur











Ontvang een gratis vrijblijvende check van uw woning. Een isolatie-adviseur=

=20

kijkt naar uw situatie en berekent welke besparing en welke subsidie voor u=

=20

haalbaar zijn. U zit nergens aan vast.











Bekijk mijn mogelijkheden =E2=86=92











Gratis & vrijblijvend =C2=B7 Onafhankelijk advies =C2=B7 Geen verplichtinge=

n











De genoemde besparings- en subsidiebedragen zijn indicatief en afhankelijk =

=20

van uw woning en persoonlijke situatie; er kunnen geen rechten aan worden =

=20

ontleend. Aan een gratis check zijn geen kosten of verplichtingen verbonden=

.



U ontvangt deze e-mail omdat u zich heeft aangemeld voor aanbiedingen over =

=20

wonen en energie.



Uitschrijven











--=20





PRESERVE A NATUREZA, EVITE O DESPERD=C3=8DCIO DE PAPEL E PENSE ANTES DE=20

IMPRIMIR.



"Responsabilidade com o MEIO AMBIENTE"



Esta mensagem e=20

quaisquer arquivos em anexo podem conter informa=C3=A7=C3=B5es confidenciai=

s e/ou=20

privilegiadas. Se voc=C3=AA n=C3=A3o for o destinat=C3=A1rio ou a pessoa au=

torizada a=20

receber esta mensagem, por favor n=C3=A3o leia, copie, repasse, imprima, gu=

arde,=20

nem tome qualquer a=C3=A7=C3=A3o baseada nestas informa=C3=A7=C3=B5es. Por =

favor notifique o=20

remetente imediatamente por e-mail e apague a mensagem permanentemente.=20

Este ambiente est=C3=A1 sendo monitorado para evitar o uso indevido de noss=

os=20

sistemas.



--0000000000001bdf25065cf07f43

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" border=3D"0" style=3D"margin:0;padding:0;background-color:#eceae3;">










ing=3D"0" border=3D"0" style=3D"width:600px;max-width:600px;background-colo=

r:#ffffff;border-radius:10px;overflow:hidden;font-family:Arial,Helvetica,sa=

ns-serif;border:1px solid #dcd9cf;">






















































































ellspacing=3D"0" border=3D"0">










s-serif;font-size:19px;font-weight:bold;color:#ffffff;letter-spacing:0.3px;=

">

IsolatieExpert


ns-serif;font-size:12px;color:#c8d3c4;">

Nederland · Energiebesparing




lor:#8bbf5a;"> 



ellspacing=3D"0" border=3D"0">




















s-serif;font-size:13px;font-weight:bold;color:#5c7a4a;text-transform:upperc=

ase;letter-spacing:1.2px;padding-bottom:10px;">

Warmer wonen, lagere rekening


Roman',serif;font-size:29px;line-height:1.25;color:#2f3a33;font-weight:bold=

;padding-bottom:16px;">

Bespaar tot 30% op uw energierekening met goede isolatie


s-serif;font-size:16px;line-height:1.6;color:#48524a;padding-bottom:8px;">

Een slecht geïsoleerde woning laat kostbare warmte o=

ntsnappen via het dak, de muren en de vloer. Met de juiste isolatie houdt u=

de warmte binnen en gaat uw stookkostenrekening merkbaar omlaag.






ellspacing=3D"0" border=3D"0" style=3D"background-color:#f3f6ee;border-radi=

us:8px;border:1px solid #dfe8d4;">




















sans-serif;font-size:15px;line-height:1.5;color:#2f3a33;border-bottom:1px s=

olid #e2ead8;">

✓ =

Tot ~30% lagere stookkosten
— indicatief, afhankelijk van uw w=

oning


sans-serif;font-size:15px;line-height:1.5;color:#2f3a33;border-bottom:1px s=

olid #e2ead8;">

✓ =

Subsidie mogelijk
— check of u in aanmerking komt voor een bij=

drage


sans-serif;font-size:15px;line-height:1.5;color:#2f3a33;">

✓ =

Meer wooncomfort
— geen tocht en een aangenamere temperatuur






ellspacing=3D"0" border=3D"0">








s-serif;font-size:16px;line-height:1.6;color:#48524a;">

Ontvang een gratis vrijb=

lijvende check
van uw woning. Een isolatie-adviseur kijkt naar uw =

situatie en berekent welke besparing en welke subsidie voor u haalbaar zijn=

. U zit nergens aan vast.






" border=3D"0">








dius:6px;">


ae22" style=3D"display:inline-block;padding:16px 38px;font-family:Arial,Hel=

vetica,sans-serif;font-size:17px;font-weight:bold;color:#ffffff;text-decora=

tion:none;border-radius:6px;background-color:#5c7a4a;">Bekijk mijn mogelijk=

heden →







ellspacing=3D"0" border=3D"0" style=3D"border-top:1px solid #e6e3da;">








Arial,Helvetica,sans-serif;font-size:13px;line-height:1.5;color:#7a8378;">

Gratis & vrijblijvend · Onafhankelijk advies &=

middot; Geen verplichtingen






ellspacing=3D"0" border=3D"0">








s-serif;font-size:11px;line-height:1.6;color:#a9b3a4;">

De genoemde besparings- en subsidiebedragen zijn indicati=

ef en afhankelijk van uw woning en persoonlijke situatie; er kunnen geen re=

chten aan worden ontleend. Aan een gratis check zijn geen kosten of verplic=

htingen verbonden.





U ontvangt deze e-mail omdat u zich heeft aangemeld voor =

aanbiedingen over wonen en energie.






ae22" style=3D"color:#c8d3c4;text-decoration:underline;">Uitschrijven









height=3D"1" alt=3D"">





le=3D"font-size:11px">PRESERVE A NATUREZA, EVITE O DES=

PERD=C3=8DCIO DE PAPEL E PENSE ANTES DE IMPRIMIR.



=3D"font-family:Arial">"Responsabilidade com o MEIO AMBIENTE"
an>


255)">Esta mensagem e q=

uaisquer arquivos em anexo podem conter informa=C3=A7=C3=B5es confidenciais=

e/ou privilegiadas. Se voc=C3=AA n=C3=A3o for o destinat=C3=A1rio ou a pes=

soa autorizada a receber esta mensagem, por favor n=C3=A3o leia, copie, rep=

asse, imprima, guarde, nem tome qualquer a=C3=A7=C3=A3o baseada nestas info=

rma=C3=A7=C3=B5es. Por favor notifique o remetente imediatamente por e-mail=

e apague a mensagem permanentemente. Este ambiente est=C3=A1 sendo monitor=

ado para evitar o uso indevido de nossos sistemas.



--0000000000001bdf25065cf07f43--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 08:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD0b2-0000000040r-3bXF

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 08:20:16 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 08:20:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f200.google.com ([209.85.128.200]:55755)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3mgnBag0ZBg8p2vvxt.89t78px278x8983p1pE32xr3.ts9.4ts3r8362z.rp@maestro.bounces.google.com>)

id 1xD0Fc-000000001O6-445R

for doctor@nk.ca;

Sat, 03 Oct 2026 07:57:44 -0600

Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-8ae99a44bdbso1616017b3.3

for ; Sat, 03 Oct 2026 06:56:48 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=institutoamazonico-edu-pe.20251104.gappssmtp.com; s=20251104; t=1791035802; x=1791640602; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=LKi65VNtrCloscndkrS077NQOw5neF3JJ2BbVcUYSrw=;

b=mxAnm48+ehhfHMXxw7xvT+PGnfjSquZwuzkjbZfDdAoRqLy7EAkhfFgWvG/sfrCtCR

iOIk+FAdI3aYg1LIcY3eILuipKEg+zu1mrsjV61h3tCBrC28T/SioaYGPjM8d5WYNjgh

wyZkl5cLD4FLygotaEzgZQBveb+F78wyjjwe72KE4oYqyCMzLoPIpLEcPZLfKwqWAaNs

DD437238VzACu4g4XXPWg41c1ywGYQuZPyaFGw72WveHXI2wWbtWSg9WT5dO5ViyWZM1

VZxvRwPryrJDWZqVhQ9LHk4lHsMFBxOXYM8jt7DgNgREyqGqlFeB8h5+PUhxAeuJOMwT

t0eA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791035802; x=1791640602;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=LKi65VNtrCloscndkrS077NQOw5neF3JJ2BbVcUYSrw=;

b=J2XO0rU1nG9A/9hALIpfsMS7/95MqwvbSQy5Ulutv6fp/TKj/+ZQkAnvvsDLQaN7Av

tbo88ApPH0lBDiS1iGa5ikpesoLIEo0l03bQuD1WT/TtG7BBp+IhpXsRcdKpQfLrXTP8

8L/Fk9pXzr7pZYHFNkGew+Td1VilRw6cBDHatrfhE0kW8Ff/4XO+ZFiWA6yVYuoNOgzH

4YPZikzU7NsK+uCr3VVCWqObHZPqX2EMIcmPw0bHmHYlyX87WaLsvV7Qc+ZHqbH4WLSI

r2HX7o7DRg3SJ3NmVc2jTCWARuya599/Yl2LyUwZ6TKMHT7iBUB/EcgRBcaMW3f1iIIL

rLYg==

X-Gm-Message-State: AFq9FYJGD/dmJUNCbG4br8YlAl+kyBSMZPA3TT5XC34Zi+aNc16CWSrM

EVMvw5kasZp2XK6RBdYQ21wzrsmvDl4o3LaWaxC4q366hhwXP0FHvNzkvSk4TaVgPSNLQ4gu0wf

Rz/92mMMg2Lwo1ThK9ef5EWGH

MIME-Version: 1.0

X-Received: by 2002:a05:690e:4395:b0:671:3e25:ec33 with SMTP id

956f58d0204a3-677abe020a0mr1110688d50.18.1791035802185; Sat, 03 Oct 2026

06:56:42 -0700 (PDT)

Message-ID:

Date: Sat, 03 Oct 2026 13:56:42 +0000

Subject: Uw gemeente in beeld: thuisbatterij zonder investering mogelijk?

From: Landelijk Energieopslag Loket

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c504f6065cf00415"

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Landelijk Energieopslag Loket Straat in het donker tijdens

stroomuitval UW GEMEENTE IN BEELD



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

[209.85.128.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.200 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.200 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: carrotshard.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: carrotshard.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: carrotshard.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.200 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_JF BODY: Odd Letter Triples with JF

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_IK BODY: Odd Letter Triples with IK

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.200 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

[209.85.128.200 listed in will-spam-for-food.eu.org]

Subject: {SPAM?} Uw gemeente in beeld: thuisbatterij zonder investering mogelijk?



--000000000000c504f6065cf00415

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TGFuZGVsaWprIEVuZXJnaWVvcHNsYWcgTG9rZXQNCg0KU3RyYWF0IGluIGhldCBkb25rZXIgdGlq

ZGVucyBzdHJvb211aXR2YWwNCg0KDQpVVyBHRU1FRU5URSBJTiBCRUVMRA0KDQpFZW4gdGh1aXNi

YXR0ZXJpaiB6b25kZXIgZWlnZW4gaW52ZXN0ZXJpbmcg4oCUIGtvbXQgdXcgYWRyZXMgaW4gYWFu

bWVya2luZz8NCg0KDQoNCkJpaiBzdHJlbmdlIGtvdSByYWFrdCBoZXQgc3Ryb29tbmV0IG9wIHN0

ZWVkcyBtZWVyIHBsYWF0c2VuIG92ZXJiZWxhc3QuICANClZhbHQgZGUgc3Ryb29tIHdlZywgZGFu

IGdhYW4gdmVyd2FybWluZywgd2lmaSBlbiBsaWNodCBtZWUuIE1ldCBlaWdlbiAgDQpvcHNsYWcg

aW4gaHVpcyBob3VkdCB1IGRlIGJhc2lzIGRyYWFpZW5kZSDigJQgZW4gdmlhIGhldCBsb2tldCBr

YW4gZGF0IGluICANCnZlZWwgZ2VtZWVudGVuIHpvbmRlciBpbnZlc3RlcmluZyB2b29yYWYuDQoN

Cg0KDQoNCg0KTGljaHQgYmxpamZ0IGFhbg0KDQpCaWogZWVuIHN0b3JpbmcgYmxpanZlbiB1dyBi

YXNpc3Zvb3J6aWVuaW5nZW4gd2Vya2VuLg0KDQoNClpvbmRlciBpbnZlc3RlcmluZw0KDQpJbiB2

ZWVsIGdlbWVlbnRlbiBtb2dlbGlqayB6b25kZXIgYWFua29vcCB2b29yYWYuDQoNCg0KDQoNCkxh

Z2VyZSBsYXN0ZW4NCg0KR2VicnVpayB1dyBlaWdlbiBzdHJvb20gb3AgaGV0IG1vbWVudCBkYXQg

aGV0IHRlbHQuDQoNCg0KQmVwZXJrdCBiZXNjaGlrYmFhcg0KDQpQbGVra2VuIGVuIGJ1ZGdldCB2

ZXJzY2hpbGxlbiBwZXIgcmVnaW8uDQoNCg0KDQoNCg0KRG9lIGRlIHdvbmluZ2NoZWNrIMK7DQoN

Cg0KQmlubmVuIDEgbWludXV0IHdlZXQgdSBvZiB1dyBhZHJlcyBpbiBhYW5tZXJraW5nIGtvbXQu

DQoNCg0KDQpVIG9udHZhbmd0IGRlemUgZS1tYWlsIG9tZGF0IHUgaW50ZXJlc3NlIHRvb25kZSBp

biBlbmVyZ2llYmVzcGFyaW5nLiAgDQpCZXNjaGlrYmFhcmhlaWQgZW4gdm9vcndhYXJkZW4gdmVy

c2NoaWxsZW4gcGVyIGdlbWVlbnRlIGVuIHppam4gYWZoYW5rZWxpamsgIA0KdmFuIHV3IHNpdHVh

dGllLg0KDQpBZm1lbGRlbg0KDQoNCg0KDQo=

--000000000000c504f6065cf00415

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable








schemas-microsoft-com:office:office">









Thuisbatterij zonder investering






=3D"0" border=3D"0" style=3D"background:#0e1726;">






"0" border=3D"0" style=3D"width:600px;max-width:600px;font-family:Arial,Hel=

vetica,sans-serif;background:#ffffff;border-radius:16px;overflow:hidden;">


















































etlogo.png" alt=3D"Landelijk Energieopslag Loket" width=3D"220" style=3D"di=

splay:block;width:220px;max-width:70%;height:auto;border:0;">




decoration:none;display:block;">


etimg.webp" alt=3D"Straat in het donker tijdens stroomuitval" width=3D"600"=

style=3D"display:block;width:100%;max-width:600px;height:auto;border:0;">






letter-spacing:1px;">UW GEMEENTE IN BEELD




ight:800;">Een thuisbatterij zonder eigen investering — komt uw adres=

in aanmerking?







Bij strenge kou raakt het stroomnet op steeds meer plaatsen overbelast. Val=

t de stroom weg, dan gaan verwarming, wifi en licht mee. Met eigen opslag i=

n huis houdt u de basis draaiende — en via het loket kan dat in veel =

gemeenten zonder investering vooraf.






=3D"0" border=3D"0">






















">Licht blijft aan



Bij ee=

n storing blijven uw basisvoorzieningen werken.










">Zonder investering



In vee=

l gemeenten mogelijk zonder aankoop vooraf.










">Lagere lasten



Gebrui=

k uw eigen stroom op het moment dat het telt.










">Beperkt beschikbaar



Plekke=

n en budget verschillen per regio.














round:#c9862b;border-radius:10px;color:#ffffff;display:block;max-width:440p=

x;font-size:17px;font-weight:bold;line-height:20px;padding:16px 24px;text-a=

lign:center;text-decoration:none;box-sizing:border-box;margin:0 auto;">Doe =

de woningcheck »






Binnen 1 minuut weet u =

of uw adres in aanmerking komt.







U ontvangt deze e-mail omdat u interesse toonde in energiebesparing. Beschi=

kbaarheid en voorwaarden verschillen per gemeente en zijn afhankelijk van u=

w situatie.




:#8a929b;text-decoration:underline;">Afmelden















eight=3D"1" alt=3D"">

--000000000000c504f6065cf00415--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 08:20:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD0ax-0000000040I-3ehG

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 08:20:11 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 08:20:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f198.google.com ([209.85.167.198]:43175)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xCzud-00000000PAw-1OEI

for doctor@nk.ca;

Sat, 03 Oct 2026 07:36:03 -0600

Received: by mail-oi1-f198.google.com with SMTP id 5614622812f47-4f4612a1a5cso1033736b6e.0

for ; Sat, 03 Oct 2026 06:35:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sc.senai.br; s=google; t=1791034500; x=1791639300; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=S1zNXUTffcxLlHw1n1W1dqzwDuICvxaTYi4PAcgEpus=;

b=MU2rpv5DTlr8exx16SKyXJteN2OyHbupxpgLxAuE7ICX5Wzpz5WRHefPdldpJhlImU

WaRpgW2Fqa1xrc7mDhlfvAT29xsMpvc09UwUPVYlMkw1CvucFf3j8s0abmAr1IUcIG+c

Dv77cg0qZ12j3gACtKuadrwmDOCrlNF3f/65o=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791034500; x=1791639300;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=S1zNXUTffcxLlHw1n1W1dqzwDuICvxaTYi4PAcgEpus=;

b=d0DzKE4KmMXo7PruihTmjp5Nv4rwqCuhBYSMhaVul1h1xfG5LWuqLuI6rn+tORtieF

a7U4Ra1Nk9pZLXv41QsjdeuGx4RDsY3R370GbTf/agPHzWMqMa5qBivHT+pYTkUOLOCT

+ZS/55NrOP2HT42H361s8CjgOGLfkV+RqFYJUQojsfhtRO1hZNaplv4nx4tI/V6VV3dP

b//n7B93REH920A5V2XhJfB3y/UXE0Q1QEz2InZ+bGDXO+tuY+yFkdVFHmc4ktiFFVxs

nkl1ioXgDHHkuBw5eT9/5EA5xLCyhtzBkoMl+ge2BUAHNwNfZPb54EzcCQWMdjXQl/BK

VZyw==

X-Gm-Message-State: AFuF++nR0ZsnzTiIGrfkgLf7L5vKmhCs+aKoHwXMg1o1g/Oy0BenPjq0

8roqj315TOxOehOeAhAnD2Jd03XDVZ+LG7k+QUxzNMO0CQBPBkZaS4f8HNlinc2wHgd9RB8zI8b

N579eu+/DEKtupBj+v25+vi2s

MIME-Version: 1.0

X-Received: by 2002:a05:6808:2389:b0:4af:aaca:7be3 with SMTP id

5614622812f47-4f307f076ddmr7602356b6e.12.1791034499907; Sat, 03 Oct 2026

06:34:59 -0700 (PDT)

Message-ID:

Date: Sat, 03 Oct 2026 13:34:59 +0000

Subject: =?UTF-8?Q?Bespaar_tot_30=25_op_uw_stookkosten_=E2=80=94_gratis_advies?=

From: Nationaal Isolatie Advies

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000025d342065cefb753"

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ✓ GRATIS ISOLATIEADVIES · GECERTIFICEERDE INSTALLATEURS

Nationaal Isolatie Advies Bespaar tot 30% op uw stookkosten met goede isolatie.





Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

[209.85.167.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

[209.85.167.198 listed in dnsbl.ahbl.org]

[209.85.167.198 listed in dnsbl.ahbl.org]

[209.85.167.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.198 listed in dnsbl.ahbl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: carrotphantom.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: carrotphantom.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.198 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.198 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 TW_JB BODY: Odd Letter Triples with JB

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.198 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Bespaar_tot_30=25_op_uw_stookkosten_=E2=80=94_gratis_advies?=



--00000000000025d342065cefb753

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



4pyTIEdSQVRJUyBJU09MQVRJRUFEVklFUyDCtyBHRUNFUlRJRklDRUVSREUgSU5TVEFMTEFURVVS

Uw0KDQoNCg0KTmF0aW9uYWFsIElzb2xhdGllIEFkdmllcw0KDQpCZXNwYWFyIHRvdCAzMCUgb3Ag

dXcgc3Rvb2trb3N0ZW4gbWV0IGdvZWRlIGlzb2xhdGllLg0KDQpHcmF0aXMgZW4gdnJpamJsaWp2

ZW5kIGlzb2xhdGllYWR2aWVzIHZvb3IgdXcgd29uaW5nLg0KDQoNCg0KU2xlY2h0IGdlw69zb2xl

ZXJkZSB3b25pbmdlbiB2ZXJsaWV6ZW4gdmVlbCB3YXJtdGUg4oCUIGVuIGR1cyBnZWxkLiBNZXQg

ZGUgIA0KanVpc3RlIGlzb2xhdGllIGt1bnQgdSB0b3QgMzAlIGJlc3BhcmVuIG9wIHV3IHZlcndh

cm1pbmdza29zdGVuLiBWcmFhZyBudSAgDQpncmF0aXMgYWR2aWVzIGFhbiBlbiBvbnRkZWsgd2Vs

a2UgaXNvbGF0aWVtYWF0cmVnZWxlbiB2b29yIHV3IHdvbmluZyBoZXQgIA0KbWVlc3Qgb3BsZXZl

cmVuLg0KDQoNCg0KMzAlDQoNCm1pbmRlciBzdG9va2tvc3Rlbg0KDQrigqwwDQoNCmdyYXRpcyBh

ZHZpZXMNCg0KMiBtaW4NCg0KYWFudnJhZ2VuDQoNCg0KDQoNCk9udHZhbmcgZ3JhdGlzIGlzb2xh

dGllYWR2aWVzIOKGkg0KDQoNCg0KQmVyZWtlbiBtaWpuIGJlc3BhcmluZyDihpINCg0KDQpHcmF0

aXMgZW4gdnJpamJsaWp2ZW5kIGFkdmllcy4gR2VjZXJ0aWZpY2VlcmRlIGlzb2xhdGllYmVkcmlq

dmVuIGluIHV3ICANCnJlZ2lvLiBHZWVuIHZlcnBsaWNodGluZ2VuLg0KDQoNCg0KQWZtZWxkZW4g

dmFuIGRpdCBhYW5ib2QgwrcgQWxsZSBlLW1haWxzIGFmbWVsZGVuDQoNCg0KDQoNCg==

--00000000000025d342065cefb753

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable
















l=3Dno,date=3Dno,url=3Dno">




,Arial,sans-serif;">


=3D"0" border=3D"0" style=3D"background:#0d1a0d;">






"0" border=3D"0" style=3D"max-width:600px;width:100%;">




























255,0.06);padding:10px 24px;">


color:#22c55e;">=E2=9C=93 GRATIS ISOLATIEADVIES =C2=B7 GECERTIFICEERDE INST=

ALLATEURS






g:2px;color:#22c55e;text-transform:uppercase;">Nationaal Isolatie Advies
>


f;line-height:1.3;">Bespaar tot 30% op uw stookkosten met goede isolatie.
p>

Gra=

tis en vrijblijvend isolatieadvies voor uw woning.






8;">Slecht ge=C3=AFsoleerde woningen verliezen veel warmte =E2=80=94 en dus=

geld. Met de juiste isolatie kunt u tot 30% besparen op uw verwarmingskost=

en. Vraag nu gratis advies aan en ontdek welke isolatiemaatregelen voor uw =

woning het meest opleveren.








ng=3D"0" border=3D"0" style=3D"margin-bottom:20px;">
















a(255,255,255,0.08);border-radius:8px;padding:12px 6px;width:31%;">


>30%



minder st=

ookkosten




a(255,255,255,0.08);border-radius:8px;padding:12px 6px;width:31%;">


>=E2=82=AC0



gratis ad=

vies




a(255,255,255,0.08);border-radius:8px;padding:12px 6px;width:31%;">


>2 min



aanvragen=










=3D"0" width=3D"100%" style=3D"margin-bottom:12px;">




r;">


=3D"_blank" style=3D"display:block;font-size:15px;font-weight:700;color:#00=

0;padding:16px 24px;text-decoration:none;">Ontvang gratis isolatieadvies =

=E2=86=92









=3D"0" width=3D"100%" style=3D"margin-bottom:20px;">




center;">


=3D"_blank" style=3D"display:block;font-size:13px;font-weight:700;color:#22=

c55e;padding:12px 24px;text-decoration:none;">Bereken mijn besparing =E2=86=

=92






Gra=

tis en vrijblijvend advies. Gecertificeerde isolatiebedrijven in uw regio. =

Geen verplichtingen.




,0.05);padding:14px 24px;">




=3D"color:#4a7c4a;">Afmelden van dit aanbod
 · 


=3D"color:#4a7c4a;">Alle e-mails afmelden









height=3D"1" style=3D"display:none;border:0;" alt=3D"">





--00000000000025d342065cefb753--

Dutch language phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 08:20:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xD0ar-000000003zz-3iWa

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 08:20:05 -0600

Resent-From: The Doctor

Resent-Date: Sat, 3 Oct 2026 08:20:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f69.google.com ([209.85.216.69]:44315)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <100503pior@depedmarikina.ph>)

id 1xCzhO-00000000NTb-1GIF

for doctor@nk.ca;

Sat, 03 Oct 2026 07:22:22 -0600

Received: by mail-pj1-f69.google.com with SMTP id 98e67ed59e1d1-39de4a68f7cso259125a91.1

for ; Sat, 03 Oct 2026 06:21:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=depedmarikina-ph.20251104.gappssmtp.com; s=20251104; t=1791033680; x=1791638480; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=RKOarflyVP7qDjLqlxE0eNwxPZ2BwNYob/J1UwD69d0=;

b=VdedxYanPiEnHQj41T+B5xxNqscbU1YmtsEu5ioFQJnJM6VHWkCn41B/mqBgUv4Q/E

uM+fN7eHXa9OqP9XUF340PI403PAIKS1XwzSN/Rib1BgLLq0c92xK7VxflhgqMdfISD0

jXT18UQLIcqlohvhUWfMGZLQTXanWNO4zDwNuAIS28RIi39nxgSmJUB/9HFccQqtNIsz

iGrmiFMvweVwGDG4ZyCsxYJj9xkceLUYv9vPeH9Ho1tn7AvQpAuAm924h/8pltxbiKu5

yJ5PnRrFpP4d9FlyScenoJy9uFcKFmss0j+cS0vnef+N6DAsV237qWyjdv04CvNEpwh+

aZ4A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791033680; x=1791638480;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=RKOarflyVP7qDjLqlxE0eNwxPZ2BwNYob/J1UwD69d0=;

b=NZkcuJEIpBnaU8JXXJoS82PZpbnntoeHQnH4W5g3+5YSxVdO/fuB1obsmaokhq15OH

cg69EDEt/rEhht+brGNNO3mUOtEE7LlBAGyT/PDadP93ACKT3+l57+qAA+JRDCY8W9k+

VjrN3GABqUPlB9dMF1fBWAHKxnz4Kh2PGGc//ldE+lFuElyM6dfVPidObHG3lkOSXIXK

SakzE4fZEsySNGMhRfPoP1kTXJd6fLDDxhJNxjzuuqqBwgrVfa8QueQTCqi4uaZJNg9y

Dxc30NYARlZEm+DWnsujh/BiH8Do1916gnZgW/pLZUoKPiNdhgv668IcnJMzJA8+uH57

n2SA==

X-Gm-Message-State: AFq9FYLjHaSRalAUwcJMPTx8xFobhszJDj4VK9DYZ+IgePfBVbatqY3L

zfS2pr78wFgE+gKDkjN/gBYaFFr6o3UFaarlg6TJt0PiFrewCrn4xc9Xx3nIP2As/zQMJqxIIdt

K+wGcwZk+LrrdGKGq3USiieg+

MIME-Version: 1.0

X-Received: by 2002:a17:902:d2c4:b0:2dd:c100:7cc8 with SMTP id

d9443c01a7336-2e49b7f6fe1mr52299405ad.68.1791033680064; Sat, 03 Oct 2026

06:21:20 -0700 (PDT)

Message-ID:

Date: Sat, 03 Oct 2026 13:21:20 +0000

Subject: Schilderwerk voor een vast bedrag per maand - zo werkt het

From: VerfZeker Woningcheck <100503pior@depedmarikina.ph>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000480627065cef865f"

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: VerfZeker Onderhoud buitenschilderwerk Zelf uw schilderwerk

blijven regelen, of een vast bedrag per maand? Beide kan. Maar zet het eens

naast elkaar — het verschil is groter dan u denkt.



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: businesssuccess.xyz]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: businesssuccess.xyz]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.69 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: businesssuccess.xyz (xyz)]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.69 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.69 listed in list.dnswl.org]

0.1 TW_JF BODY: Odd Letter Triples with JF

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_PZ BODY: Odd Letter Triples with PZ

0.1 TW_JB BODY: Odd Letter Triples with JB

0.1 TW_JS BODY: Odd Letter Triples with JS

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Schilderwerk voor een vast bedrag per maand - zo werkt het



--000000000000480627065cef865f

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



VmVyZlpla2VyIE9uZGVyaG91ZCBidWl0ZW5zY2hpbGRlcndlcmsNCg0KDQoNCg0KWmVsZiB1dyBz

Y2hpbGRlcndlcmsgYmxpanZlbiByZWdlbGVuLA0Kb2YgZWVuIHZhc3QgYmVkcmFnIHBlciBtYWFu

ZD8NCg0KQmVpZGUga2FuLiBNYWFyIHpldCBoZXQgZWVucyBuYWFzdCBlbGthYXIg4oCUIGhldCB2

ZXJzY2hpbCBpcyBncm90ZXIgZGFuIHUgIA0KZGVua3QuDQoNCg0KDQoNClplbGYgcmVnZWxlbiBN

ZXQgVmVyZlpla2VyDQoNCktvc3RlbiBFZW5zIHBlciA2LTggamFhciBlZW4gZ3JvdGUgb2ZmZXJ0

ZSBWYXN0IGJlZHJhZyBwZXIgbWFhbmQNCg0KT25kZXJob3VkIFplbGYgaW4gZGUgZ2F0ZW4gaG91

ZGVuIEphYXJsaWprc2UgaW5zcGVjdGllICsga2xlaW4gb25kZXJob3VkDQoNCkdyb3RlIGJldXJ0

IExvc3NlIG9mZmVydGUsIG1hcmt0cHJpanMgdi9kIGRhZyBFbGtlIDYtOCBqYWFyIGluYmVncmVw

ZW4NCg0KVmFzdHppdHRlbiBOZXJnZW5zIGFhbiBOZXJnZW5zIGFhbiDigJQgYWx0aWpkIG9wemVn

YmFhcg0KDQoNCg0KDQpIZXQgd2VyayB3b3JkdCBnZWRhYW4gZG9vciBlcnZhcmVuLCBzdHJlbmcg

Z2VzZWxlY3RlZXJkZSBzY2hpbGRlcnMgdWl0IHV3ICANCmVpZ2VuIHJlZ2lvIOKAlCBtZWVyIGRh

biBkdWl6ZW5kIGRvb3IgaGVlbCBOZWRlcmxhbmQuIEtsYW50ZW4gYmVvb3JkZWxlbiAgDQpWZXJm

WmVrZXIgZ2VtaWRkZWxkIG1ldCBlZW4gOSwxLg0KDQoNCg0KQmVuaWV1d2Qgd2F0IMO6dyB3b25p

bmcgcGVyIG1hYW5kIHpvdSBrb3N0ZW4/IERhdCByZWtlbnQgdSBpbiDDqcOpbiBtaW51dXQgdWl0

Lg0KRG9lIGRlIGdyYXRpcyB3b25pbmdjaGVjayDihpINCjYga29ydGUgdnJhZ2VuIMK3IHZyaWpi

bGlqdmVuZGUgcHJpanNvcGdhdmUgb3AgbWFhdCDCtyB1IGJlc2xpc3QgZGFhcm5hIHplbGYNCg0K

DQoNCg0KUFMgT29rIGFscyB1IGxpZXZlciB6ZWxmIGJsaWpmdCByZWdlbGVuLCBpcyBkZSB3b25p

bmdjaGVjayBudXR0aWc6IHUgd2VldCAgDQpkYW4gdGVubWluc3RlIHdhdCB1dyBzY2hpbGRlcndl

cmsgaMOzw7NydCB0ZSBrb3N0ZW4uDQoNCg0KDQoNClUgb250dmFuZ3QgZGV6ZSBlLW1haWwgb21k

YXQgdSB6aWNoIGhlZWZ0IGluZ2VzY2hyZXZlbiB2b29yIGFhbmJpZWRpbmdlbiAgDQp2YW4gb256

ZSBwYXJ0bmVycy4gQWZtZWxkZW4uDQoNCg0KDQoNCg==

--000000000000480627065cef865f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






=3D"0" style=3D"margin:0;padding:0;background-color:#eef1f4;font-family:-ap=

ple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;=

">










ing=3D"0" style=3D"max-width:600px;width:100%;background-color:#ffffff;bord=

er-radius:12px;overflow:hidden;box-shadow:0 2px 10px rgba(20,40,60,0.07);">








































































ellspacing=3D"0">










etter-spacing:0.5px;">VerfZeker

>Onderhoud buitenschilderwerk





83a;">Zelf uw schilderwerk blijven regelen,
of een vast bedrag per maand=

?




olor:#4b5b68;">Beide kan. Maar zet het eens naast elkaar =E2=80=94 het vers=

chil is groter dan u denkt.






ellspacing=3D"0" style=3D"border:1px solid #e2e8ee;border-radius:10px;overf=

low:hidden;">
















































t-size:12px;font-weight:700;color:#7c8a96;text-transform:uppercase;letter-s=

pacing:0.5px;"> 

t-size:13px;font-weight:700;color:#8a97a3;text-align:center;">Zelf regelen<=

/td>


t-size:13px;font-weight:700;color:#1f7a4d;text-align:center;">Met VerfZeker=


;font-size:13px;font-weight:600;color:#12283a;">Kosten

;font-size:13px;color:#5b6773;text-align:center;">Eens per 6-8 jaar een gro=

te offerte

;font-size:13px;color:#1f5c3a;text-align:center;background-color:#f4faf6;">=

Vast bedrag per maand

;font-size:13px;font-weight:600;color:#12283a;">Onderhoud

;font-size:13px;color:#5b6773;text-align:center;">Zelf in de gaten houden
td>


;font-size:13px;color:#1f5c3a;text-align:center;background-color:#f4faf6;">=

Jaarlijkse inspectie + klein onderhoud

;font-size:13px;font-weight:600;color:#12283a;">Grote beurt

;font-size:13px;color:#5b6773;text-align:center;">Losse offerte, marktprijs=

v/d dag

;font-size:13px;color:#1f5c3a;text-align:center;background-color:#f4faf6;">=

Elke 6-8 jaar inbegrepen

;font-size:13px;font-weight:600;color:#12283a;">Vastzitten

;font-size:13px;color:#5b6773;text-align:center;">Nergens aan

;font-size:13px;color:#1f5c3a;text-align:center;background-color:#f4faf6;">=

Nergens aan =E2=80=94 altijd opzegbaar





b68;">Het werk wordt gedaan door ervaren, streng geselecteerde schilders ui=

t uw eigen regio =E2=80=94 meer dan duizend door heel Nederland. Klanten be=

oordelen VerfZeker gemiddeld met een 9,1
strong>.





Be=

nieuwd wat =C3=BAw woning per maand zou kosten? Dat rekent u in =C3=A9=C3=

=A9n minuut uit.




" style=3D"display:inline-block;background-color:#1f7a4d;color:#ffffff;text=

-decoration:none;font-size:17px;font-weight:700;padding:16px 36px;border-ra=

dius:8px;">Doe de gratis woningcheck →


6 =

korte vragen =C2=B7 vrijblijvende prijsopgave op maat =C2=B7 u beslist daar=

na zelf





ellspacing=3D"0" style=3D"background-color:#f4f7fa;border-radius:10px;">




:1.6;color:#5b6773;">P.S. Ook als=

u liever zelf blijft regelen, is de woningcheck nuttig: u weet dan tenmins=

te wat uw schilderwerk h=C3=B3=C3=B3rt te kosten.





d5;text-align:center;">U ontvangt deze e-mail omdat u zich heeft ingeschrev=

en voor aanbiedingen van onze partners.
xyz/t/u/9844597a7663325df5a4" style=3D"color:#cfe6f4;text-decoration:underl=

ine;">Afmelden
.










1" height=3D"1" alt=3D"">

--000000000000480627065cef865f--

Nigerian Medical supplies spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Oct 2026 06:50:00 -0600

Received: from mail-oa2-f9.google.com ([74.125.231.73]:38054)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xCzBv-00000000KHJ-2nbr

for dave@doctor.nl2k.ab.ca;

Sat, 03 Oct 2026 06:49:52 -0600

Received: by mail-oa2-f9.google.com with SMTP id 586e51a60fabf-47bb3ddaaf6so176243fac.0

for ; Sat, 03 Oct 2026 05:48:55 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1791031729; cv=none;

d=google.com; s=arc-20260327;

b=ixGdqhdDW6/J3XcaXkuogilSVM7QmOVeDer8ZVrHftyecZQ03mS1Pj+7Z3sj4Fe0Sl

dIYCeItbmxC3oj0op7NRsRczkADVr7aFGHCnEdni8AHf96dEyweKmp/1N0tURqz71HQS

6bPkP1Ab6CMHHmJo1+oxLBOGYOFNaDyAGLX6KdMQvkj5VZyP7QYTzC55Xa35LqnBPwt9

/TckQCG4ij3E5BaVvWqn4G67RS3n0yRjQHK5XXqC60BwJ8ZJGRA5QXF90ssJvSpsg09U

vLe1a9IZ86udneZcmFwjvmIT6f8RJMQr9kCj8UzfYQVHJ3CPCg2np5sgy0KXwjIi1xtm

z2Lg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=kh8aRnR99dqfp81NsXjYj4lfRPcKNsTwU4QRFbJCco8=;

fh=RTlCdw1k8A2ycv21P18bcrUtEuhcIw1X/ZNFI4umJNc=;

b=c3vNjjpJ/O60KUV91kBor8YTo/ZkL9op3yq5iLE4ZMAGn/OfCV5NewJVMyt79YHTqh

2karTbvQmP4MhUvv+2TYeCDSgM5hFolAo6S+VZPdJaFlJK9wB0mLyHL6rZepSnxSfvfn

+vsfkGBup0Qx4uAtSFogh9Gb4Vz0jWlW1ZX3Mcsb/xeXHcVDFa0qmdJxMIcW7JfajkO8

ImcMAKlLJNuwmfU1eYaDnVPWBprFXIVzJMbnmIZLiIwLIE+RGMYVzK/HUOcuaimc9kYk

u57TQ65YGVa8aD3yv7cCxzWJ1xqhqTeNxeHnQ9nd2qNtuYxLIbEQtRoLoWkdnrgwE0hR

crlQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791031729; x=1791636529; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=kh8aRnR99dqfp81NsXjYj4lfRPcKNsTwU4QRFbJCco8=;

b=WkACVjL1uZb0pjG2AkHKqQJGpdpkHur6VjznKcjZQ6Jnu9+9GwJSwzlQ5Vj/Jwsen9

Ql0hB8VWEM6k2vXxXd/yUB5OMcMWl1fwOZxNfMDq3QxWNZj0+Cnf38re8imikODQI9pK

qT9YmBgME3ZbqK/8MWnHXOWJtxexHk4lUO9XTTYQ7NKFC6xfRWL2+Nsf2xmeA+QHdiUy

JY16z6IDYq0E/R0gI6xc74RvNHyEf+1uPFqZaVZnV1wOc8rNGVGcktdmFtQ9I8ePccMj

is7ga8lb6Jc05har+vV3GvdWIJaxyXPh1romCOf17q9X4TvDMQB7FdSg7OgJIQFtewFK

/5tg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791031729; x=1791636529;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=kh8aRnR99dqfp81NsXjYj4lfRPcKNsTwU4QRFbJCco8=;

b=Cz9bts3+EFp1bCm9s0bFU1qMfS8YqfjlME4e2ndCcjd+cdpdNGEO+t5wHSpfcFh0Ls

tVlSwM5hlmA3KiCmGh7PRYqw65Ww//iZsvJaLXfQRa0ir070toh0itSBFPMwy6TGmrFq

21VBX7iqS3nauOw+F0fSMMFpcBQOs3bieHT6eyNbh3vDuZEFGWg31NWqTZgjPJgbwiB+

Rd+ObI/jc0Hi3mZp78Fa9ZENeuE2ZHnGX1eOYdbuCTU5/hX+s52OA7arYaawrcKkujDe

zLxOBYbLcaNeI/6Pl3qKZ5E9bjhWMEFqvjHXh4OzTTPsbtvTKiY/LwY5lBQxOwwC4l0o

rKvA==

X-Forwarded-Encrypted: i=1; AKwUvBzqzWF4qkaz+y3hPpn42GfrgK+HkmIpZOvWa9wtHUE4mMOognaCFzAJG4eX3EEItw322Nq+@doctor.nl2k.ab.ca

X-Gm-Message-State: AFuF++keQ+e9L0H8ssntRioylcOomCcXeGKOL/bFdOUd2DFsomP8W9Ls

bC5QQmwHWGpoyKk8oF7mmoZkeKJ+Ti2fqmKhZx3eMqxtgDkRPJMarVAkKVjRpJovLplKK7DEMbH

SUv9izFSK1OWXFnsml6+aFjd5eOOgZ7w=

X-Gm-Gg: AYBFou2YST2Ve+mzexk8y1MZ5Pwkbz3Nkwkxr/ZFVccSrD9PzXRKslkA+WnD39d4Eh8

/+09Y1XYbFm0DrRSxfF7A1l2xq2X1pTOsomSwCN6ae/Hz+KXk0j4H+wed7JEw0dZiH+yau6wyPw

3EEI6k4Kl+KQ6Yt+tIqgSd46M5ZS4NHlDyM04MSpjFWowrlVJcr+CvhTxr07WqYi1JZNRyvCHCq

Kz8kObAELGop/yGdZDowKvmhQyJKTv+DbMhRfWB1SWS280YnzjOMeEgraee7Tq3bLXaVGliOMrS

0orFSpxv7PhvSKr0h8xPSXV4d06LwcmtzOboo+nTngR+jom6WCdThxpdrydezFU84xI5WyMeHHp

ofNn4KLw6LsmqJ8eUirsAn2E7nA==

X-Received: by 2002:a05:6808:1489:b0:4e9:f6e3:1326 with SMTP id

5614622812f47-4f52ab8ba67mr6438029b6e.47.1791031729253; Sat, 03 Oct 2026

05:48:49 -0700 (PDT)

MIME-Version: 1.0

From: Derick kojo

Date: Sat, 3 Oct 2026 08:48:36 -0400

X-Gm-Features: AclHuK_6_5nEENLVwwvyutIR7ciMK0SF31NKTvB2aVbCBWphuYcNS__vv6vQJp8

Message-ID:

Subject: Inquiry for Medical Disposable Products

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000000f0b2065cef12e2"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, I hope this message finds you well. We are

currently seeking for reliable suppliers/manufacturers capable of sourcing

and supplying medical disposable products for hospital use for an upcoming

2027 healthcare infrastructure project here [...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.231.73 listed in dnsbl.ahbl.org]

[74.125.231.73 listed in dnsbl.ahbl.org]

[74.125.231.73 listed in dnsbl.ahbl.org]

[74.125.231.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.231.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.231.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.231.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.231.73 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.231.73 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.231.73 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sofiakosi57(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[derick.kojo.agent(at)gmail.com]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.231.73 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

[74.125.231.73 listed in will-spam-for-food.eu.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Inquiry for Medical Disposable Products



--00000000000000f0b2065cef12e2

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Sir/Madam,

I hope this message finds you well.



We are currently seeking for reliable suppliers/manufacturers capable of

sourcing and supplying medical disposable products for hospital use for an

upcoming 2027 healthcare infrastructure project here in my country republic

of Ghana.



Below are some of the required items with indicative target prices:



- Disposable Syringes (5ml) =E2=80=94 $0.18/pc

- Disposable Examination Gloves =E2=80=94 $0.15/pair

- Surgical Face Masks =E2=80=94 $0.15/pc

- IV Cannula =E2=80=94 $0.38/pc

- Disposable Surgical Gowns =E2=80=94 $3.05/pc

- Disposable Bouffant Caps =E2=80=94 $0.14/pc

- Disposable Shoe Covers =E2=80=94 $0.15/pair

- Urine Collection Bags =E2=80=94 $0.55/pc

- IV Infusion Sets =E2=80=94 $0.40/pc

- Disposable Bed Sheets =E2=80=94 $1.80/pc



If you or your company can supply these items at or around the indicated

target prices, kindly reply to confirm your capability and interest to

proceed. We will then send the complete supply details, specifications,

quantities, and billing information required for preparation of your

Proforma Invoice.



We look forward to your prompt response.



Kind regards,

Mr. Derick Kojo

Procurement & Supply Agent

Address: Accra, Ghana



--00000000000000f0b2065cef12e2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv style=3D"color:rgb(136,136,136)">

size:large">

t">Dear Sir/Madam,

yle=3D"font-size:small">I hope this message f=

inds you well.

rgia, serif">
We are currently seeking for reliable suppliers/manufactur=

ers capable of sourcing and supplying medical disposable products for hospi=

tal use for an upcoming 2027 healthcare infrastructure project here in my c=

ountry republic of Ghana.

Below are some of the required items wi=

th indicative target prices:

>
- Disposable Syringes (5ml) =E2=

=80=94 $0.18/pc
- Disposable Examination Gloves =E2=80=94 $0.15/pair
=

- Surgical Face Masks =E2=80=94 $0.15/pc
- IV Cannula =E2=80=94 $0.38/pc=


- Disposable Surgical Gowns =E2=80=94 $3.05/pc
- Disposable Bouffant=

Caps =E2=80=94 $0.14/pc
- Disposable Shoe Covers =E2=80=94 $0.15/pair
r>- Urine Collection Bags =E2=80=94 $0.55/pc
- IV Infusion Sets =E2=80=

=94 $0.40/pc
- Disposable Bed Sheets =E2=80=94 $1.80/pc

If you or=

your company can supply these items at or around the indicated target pric=

es, kindly reply to confirm your capability and interest to proceed. We wil=

l then send the complete supply details, specifications, quantities, and bi=

lling information required for preparation of your Proforma Invoice.

>We look forward to your prompt response.

Kind regards,
Mr. Deric=

k Kojo
Procurement & Supply Agent
Address: Accra, Ghana

iv>




--00000000000000f0b2065cef12e2--

Travel agency Docusign phsh

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 02 Oct 2026 19:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xCok4-00000000C5d-1sQQ

for dave@doctor.nl2k.ab.ca;

Fri, 02 Oct 2026 19:40:48 -0600

Resent-From: The Doctor

Resent-Date: Fri, 2 Oct 2026 19:40:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from eliteltravelpaxbookking.com ([85.137.57.219]:37883)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xCjza-000000005Il-3maE

for sales@nk.ca;

Fri, 02 Oct 2026 14:36:07 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=eliteltravelpaxbookking.com; s=dkim; h=Content-Transfer-Encoding:

Content-Type:MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:

Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:

Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=cbYMc9noZLlhPFm5aqdOJD+Rd9qWSoOBxmeTaROVsgk=; b=WSV76tVphOGoul/7ErIzC/PmC5

9GLcHYmd/EgVWFU0NHff2Jobcl9OQujo8Y5CN3hAscHjykIAPTCa0bh3zMS76w7cSUvyaAVDn0Nri

TePL56g4ekBA72Z60VTFQtSM5AiOnzZmNLFW1h0EpWNk7Ir+JP4cmRvkXnap8FrWSUSQ=;

Received: from [192.111.154.91]

by eliteltravelpaxbookking.com with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95)

(envelope-from )

id 1xCjyB-001cLD-Hm

for sales@nk.ca;

Fri, 02 Oct 2026 20:35:04 +0000

From: Elsa Jean

To: sales@nk.ca

Subject: Elite Travel Group: 10 days - 15pax Travel Itinerary

Date: 2 Oct 2026 20:34:51 -0700

Message-ID: <20261002203451.E6829CED7338FCB9@eliteltravelpaxbookking.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-SPF-Fail: YES

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Lnk Elsa Jean sent you an Itinerary to review and Quote.

Review Document



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.111.154.91 listed in will-spam-for-food.eu.org]

[192.111.154.91 listed in will-spam-for-food.eu.org]

[192.111.154.91 listed in will-spam-for-food.eu.org]

[192.111.154.91 listed in will-spam-for-food.eu.org]

[192.111.154.91 listed in will-spam-for-food.eu.org]

[192.111.154.91 listed in will-spam-for-food.eu.org]

[192.111.154.91 listed in will-spam-for-food.eu.org]

[192.111.154.91 listed in will-spam-for-food.eu.org]

[85.137.57.219 listed in will-spam-for-food.eu.org]

[85.137.57.219 listed in will-spam-for-food.eu.org]

[85.137.57.219 listed in will-spam-for-food.eu.org]

[85.137.57.219 listed in will-spam-for-food.eu.org]

[85.137.57.219 listed in will-spam-for-food.eu.org]

[85.137.57.219 listed in will-spam-for-food.eu.org]

[85.137.57.219 listed in will-spam-for-food.eu.org]

[85.137.57.219 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[85.137.57.219 listed in dnsbl.ahbl.org]

[85.137.57.219 listed in dnsbl.ahbl.org]

[85.137.57.219 listed in dnsbl.ahbl.org]

[85.137.57.219 listed in dnsbl.ahbl.org]

[192.111.154.91 listed in dnsbl.ahbl.org]

[192.111.154.91 listed in dnsbl.ahbl.org]

[192.111.154.91 listed in dnsbl.ahbl.org]

[192.111.154.91 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[85.137.57.219 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[85.137.57.219 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[85.137.57.219 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[85.137.57.219 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: eliteltravelpaxbookking.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: www.travelpax.click (click)]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[85.137.57.219 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days

Subject: {SPAM?} Elite Travel Group: 10 days - 15pax Travel Itinerary





Lnk









b(44, 54, 58); text-transform: none; letter-spacing: normal; font-family: H=

elvetica, Arial, "Sans Serif"; font-size: 14px; font-style: normal; font-we=

ight: 400; word-spacing: 0px; white-space: normal; border-collapse: collaps=

e; box-sizing: border-box; orphans: 2; widows: 2; background-color: rgb(255=

, 255, 255); font-variant-ligatures: normal; font-variant-caps: normal; -we=

bkit-text-stroke-width: 0px; text-decoration-thickness:=20

initial; text-decoration-style: initial; text-decoration-color: initial;' b=

order=3D"0" cellspacing=3D"0" cellpadding=3D"0">
border-box;">
border-box;">




>








: border-box;">

able style=3D"border-collapse: collapse; max-width: 640px; box-sizing: bord=

er-box; background-color: rgb(255, 255, 255);">

ox;">


e: none; width: 128px; height: 32px; vertical-align: middle; box-sizing: bo=

rder-box;"=20

src="...">

box-sizing: border-box;">
rder-radius: 16px; color: rgb(255, 255, 255); border-collapse: collapse; bo=

x-sizing: border-box; background-color: rgb(38, 5, 89);" border=3D"0" cells=

pacing=3D"0" cellpadding=3D"0">
style=3D"box-sizing: border-box;">


tr>

width: 536.97px; text-align: center; color: rgb(255, 255, 255); font-famil=

y: Helvetica, Arial, "Sans Serif"; font-size: 16px; box-sizing: border-box;=

background-color: rgb(38, 5, 89);'>


l-align: middle; box-sizing: border-box;"=20

src="...">
collapse; box-sizing: border-box;" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"0">
border-box;">


body>

t-align: center; color: rgb(255, 255, 255); padding-top: 24px; font-family:=

Helvetica, Arial, "Sans Serif"; font-size: 16px; box-sizing: border-box;'>=

Elsa Jean sent you an Itinerary to review and Quote.

sizing: border-box;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
y style=3D"box-sizing: border-box;">


-top: 30px; box-sizing: border-box;">

e=3D'padding: 0px 24px 24px; color: rgb(0, 0, 0); font-family: Helvetica, A=

rial, "Sans Serif"; font-size: 16px; box-sizing: border-box; background-col=

or: white;'>


b(221, 221, 221); border-image: none; box-sizing: border-box;">
=3D"padding-top: 10px; border-collapse: collapse; box-sizing: border-box;" =

border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
: border-box;">


ight: 12px; padding-bottom: 20px; box-sizing: border-box;">


eight: 40px; vertical-align: middle; box-sizing: border-box;" alt=3D"Pictur=

e of Doret Kotherja"=20

src="...">



tica, Arial, "Sans Serif"; font-size: 15px; font-weight: bold; box-sizing: =

border-box;'>Elsa Jean



lvetica, Arial, "Sans Serif"; font-size: 15px; box-sizing: border-box;'>Cor=

porate Travel Coordinator

or: rgb(51, 51, 51); line-height: 20px; font-family: Helvetica, Arial, "San=

s Serif"; font-size: 15px; box-sizing: border-box;'>Dear Team,

box-sizing: border-box;">



ne; text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-ser=

if; font-size: 15px; font-style: normal; font-weight: 400; word-spacing: 0p=

x; float: none; display: inline !important; white-space: normal; orphans: 2=

; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: =

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=

oration-thickness: initial; text-decoration-style:=20

initial; text-decoration-color: initial;">

Please provide your most competitive quote for the attached itinerary at yo=

ur earliest convenience.



yle=3D"box-sizing: border-box;">Sincerely, Elsa Jean


-sizing: border-box;">

vetica, Arial, "Sans Serif"; font-size: 11px; box-sizing: border-box; backg=

round-color: rgb(255, 255, 255);'>
; box-sizing: border-box;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"=

>
ox;">

=


ca, Arial, "Sans Serif"; font-size: 11px; vertical-align: top; box-sizing: =

border-box;'>

02); font-family: Helvetica, Arial, "Sans Serif"; font-size: 11px; box-sizi=

ng: border-box;'>Powered by 

-box;">


t: 19px; vertical-align: middle; box-sizing: border-box;" alt=3D"Docusign"=

=20

src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAOwAAAA2CAYAAADEdnVdAA=

AACXBIWXMAABYlAAAWJQFJUiTwAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAA/8SURBV=

HgB7Z09bBzHFccfAxsIbMCmkFitTrUNiISDwJV17FwEEGUgdqlTkcKAAVGAqwAGKQOpSQF2zVNp=

N6TqFEc7QFpSsV3fqTEQpyAdQE7hYjO/vZ3z7NzM7Oze7t2K2j8woLQ3O2/mfczHmzezIiWRJEl=

fpZFK58li4P1TlQ5VGqi0Lh06dKgPyqh2k2ZxqFJPVojE3SHx/750WCmUDDayzp20vWpdaTVgTr=

IcYCi7smQYhhpCXzosHQWyOUxeIMNdi82omLKn/vxqSM+eiYzHUhmvvipy/Xoox7FKd9fW1i6kQ=

WTCPlSpH5H9TNVnUzosDVnnvVeQbaLSbSWbM7nkKGOwQ/XnzuzBJ

58sZrAab74psrU1TfNAAFtNGW1mrCOVevZvFxcXcnZ2Jr1eL00=

Grqv6TKRD41DyGci0M40BOrJ52WXzG6kKRtg68P33Ip9/LvLRRyLffWf/uqHSvjQHeu+e+QBDvX=

//vly5ckX1IVvy9ddfS4flI+tMc0sjOlBkc/fuXXn06FEqKwPrdv7LiJekLfjxR8Vuxe8PPhD58=

EPzFxwMT1TPeSD1Y8P8z4MHD+Tg4MBWhA6rQV+MzhRjpQPVshkOh+nM5/T0VNbXZxsM6Mr9ppdR=

q0T1EbYpfPWVyJdf2k93k2a2fWZlTiYT2dvb64y1Pbhl/odR1ZYNMmOktdCXS4z2GSzAaPPTYwx=

rRzq8SMh10IywLjieX+r9/HYaLPjiC/vJvaQLrniR8NT8j+X4m8GYDmtc6inSzGCT6T7rbravNZ=

dUlpuyTLCmHY3MJ0hmIB1eFOSGznv37s1lwFgdzy/11k7qdFIG

Saubc OosBg w2v93 DuqZU PbNRu Zcl/n2RpdoF66AFJtCra4/QoG=

E6zCZ10mgCjnprOUw8WzFDMXYIdnZ2UgN9+PBhunbd2NiQ/f19e+Q98W3rBOifNemkyrzd0KxFH=

17KonfaZ6yALR9G2qtX9ZON2FdVu7bVn3uSZ1btyBRhINPOpB/Ih1KcqPRYCWsoS6RBlJA49pob=

BJ7a40xZ2bsfhOib9ZbM6DAi9fyhTGWYYjAYpCmAu1a5ZfjmMlrf89h8ffG0O6N5rNIj1dYTiQQ=

jbLv3rjDaXw12HSUIbY5nHRBT+J40iEwZUKYdiesQyEMnsp1F7zwoMtwaafRkuQZ7LVtGDSLzz+=

rNf7IgHeq+o/59Q+I8vzmjyYIu5vbZA/Qb69QDNAcy3YoayrS9k6KXMNi+/s+PKvtftyQK//zPP=

+R/6eheUKuXX5ajd96R3iuvSCWo6Y8FRsyJK6tqOFOoHWkYig5

1OJLqRtBTC d8AfgGnoEJ RWCVpYPDLV sZFZ2wDmSr ynvr7QOJmS =

elOgnoH2vvyfPk7BioRL71VZLS5wIl/T6YpBk/lmfwscdFOW998I6N3361mtEyJ85gTXDYSodxz=

U2bWO48fP07/so/HOoh1z82bN9N1UAUwxXOOeGwxEBmlaQFo3bhxI6Xl8HQOxCGorEMYuWjY7Ym=

gkWsk77j2mn1eWBd9G/DU4a3N0YQ3T548yW3DFNQb7ElBPaz36ACZ/kbrwa1bt+Zou3hkt9GVx9=

WGk5OTXLspA93r9/s2z3h5VGi05rGHf6nsf5K49Ir0El6PTcpYk/F77yXJ+++XS59+ah3OSHtdu=

w1HdqbRaJQopgTrxO/j8TjNz19XnuFwmBTh8PCwkJamd3p66ipinI2o+gjZeZX2aBpHR0feulKO=

6z2ex0Ap5dy7al3pzHt+fp7s7e0lSjEL662MNorXNh+0/GLzx8

iF9hTpgSuPyfeDg 4Ngu/kN3riqLAEs bR928vPP6UjL3zq RTNdq2+YzQgwJY6=

N3C4Hfr1+/nuavA npr6BCFU0RL09vc3EzjYS30VELaeqo963rpxaER0x5N4/bt2ym=

NVUZtwRvaGhs9xgiEQwl5OKKXZryO5QMoowfUVetBVb799NNPs3bj1Q6Vw2/wZmv+0Aszrr7vva=

UGTlQyWo7h5WE6FnpiTZtgOowoA/I7jCgIrUCxymOCeGWEaglUT4N7Jg3yVaVhxt4uE7qTcU2fi=

8A7GK4diogRl+FDVT2AbpV6A+KbkZcvKssF2uTQPa8jeOmRTtpoL375Je6FXz3EsyKMf+caBsPK=

Cknj+Pg4Oq821qqCBQiVkdBCblFTB42yHVEd0HuliwBFDq2Li+hX1QN0qIzBmaDOVTpIOleLX/1=

stjWHlZzWwWgf//CD3Ll2rTjzG2/YT1KOZKPrYFamanBoassiH

+cGTg6YiiMA4VQBRuBTS BwP29vbKR2AEwpBuvLzH OVyRfHQFh8NFJlRKIYGb =

cSxQp2WBRdf4Yta66cy0 IZInTEO28D5fTQaSRVQD gbgA3qA04f6aD2gs25iJgIteE=

97KD/UkfEbgSDm6+IK7jFXu006new0fPvtOKfTt9/mVuRGvQ/M52rN4KWlGOFa3KcOC6XI4Xpaz=

gYcTFXouJwUkjkfcM7Y+X00lHGXbguOoplHo2GnE84bV/lFziH4qst28REHTUy5Pj7XrQchOrTD=

x0+fnpoy0iwRB9ob/A+YDr/1lvnkxPj3TfMH35SWXgsHgAv0ssqzl/aEsXA5RMDu7m6QDqOLa5T=

TPa8J30wBGr7RI9QWevWq07yy8G0ZFW0bMWNgVIVPPj7GwLfOrVsPQqANvrKQoWuqb27TZXBOid=

ttsFwfkweha3rfddYg33QQJYgRPgyOATRcCoFwYtZM0HEJy55C

umigVGVp8BcFUSNI1T3n0vApY 4zDiDYWhB4GUYceVF03a9Aphw xfL2dccNygMYd2G=

yy3T+Shh9G c9vmucblz547EQK87i+BTOtca 1AWfsFAyrWghpYsBbWE0YbRSU =

+3UyGODIuoAtFxKj4MttC6vAz49iJVPrB6EwJq1CNr3YMPizXNmsBhr3kNsnsTIGaxruofSlJni=

xDAaB4ULZej48uo2+GjgKIkFxl3X9K4s4Ltv6k/nwT4rWx8YMEuBKltWPvj0oMzsogyfXYjhO/e=

FVUU7DRZDzd/rBMyFXa73ca2byk4BY/K7RgfT6xkDX+/69On0vLbPW7kqA6wCx7G3HDAsfA5MU9=

m6wogX2f/UWJYehBAzm3n99dclAk5FaJ/BYqzzTpdh6AhSHS75GKNz0Sm75vEJVJfd5JRxWdDbM=

mXik1nHL2q4dfBukTXsMpYe7TJYnEwYa34qPJH86NoqlO0sivI

v6vRoC1BenF04csooMoZbNWCkDt61/ RK+dhgshvrxxyKffWYbK9y7XXTkyOe ZLIOY=

/C7Fq4uOLtundHUp0rI7BNbTG C7XkTJVdpxSmQM8YqQtizrko5cmbUX lSKc/yJH8d=

4FbVn639XuRP1+Fy67wQ 4CGbnmu0piY//EJSh+jioHP2VNEBxrQih1FfPuh17Kor2ue6C+=

cM3VEK61qBGdtSNLbK/CBxJE31x467SWVWbv79KCMfMqEqK4ClQ32NeWofS3+xpY5/JZ4iD96f5=

5I+Fspuec+RwFBDrEu/VA4m4bPgwgd9jtj4Au80IqJUbpGFzyqsQbLlBLDZFvLfsdnsLEjyyJna=

U1oA2YE1occ7LIx5jIG63PoxcoH+nV6rZtA25xOSIz16mbokqrst5l0fVsysbf4s26KmTr5PMKO=

4G0vHV/ghYZvO0qPOLE0GCnYOrEdOfrgto2YSKjJfDROCttQoG

lHb4XgC5gouwzwdWix8qnj0ELTaJPBYqh8a Gov8ha7mYYhcF9IXtFplTInWlB2V8QMioVx=

hBQsdDjBDvDwKV6RB9VFQ3tgTbhmJDGdlq/ +Znk68AM+hQ5J2KjDA+/r7GKO+1U5j=

tcwuL 9sZCTOS/cqB/8vmv4+nIuL7pVpTTL9qO8Mv qB28QRjx96GYAd9857vHei48o=

foOIK+03dcQfZVadg3QvgOMLjKBqHDC9wUYcIOotdlhoL/+d1VNvXUiA3+D+mB5gV5eI/ELRExN=

3nEBP+7ZOnCAgcwxs+zwdID5Y65FDEehSaPzxhiBAU49RFDB2Uu6hB8ilykeGZbiq4isWmEOh39=

DnUnFfHKNKrQKSMS9cXweIfEyZWQzMx6xxosCJ3cqppaYrBJe75eVxLGvbW7+hl7fqGpT8ipoKd=

fMesmpntMpX0OpFjnRSgiiKkdjhLfNDSWhmsfVB8K8C0F9KVpR

XCtPXnm43/sOhxQv6qBCLyrz9qWRaj+bUC7g/8Lw HpXjC0efUyqrKB1ZE6ZsDTWfIscA/M=

c98rtKbCmi vU++2j41sPQXqRseGwfMu9ln39c5MQNYE2/yHqyi jwBnST6s0roSw30=

92/tQeG5NtgM3LMyGxYRUhlhI SSUrGxMMMAgykbyaHoOY+V+YtqSkxCKW7YT0jxw0 =

Dixy65itLTBF3oID+EJv1eJf6Y+VW8CsesBn33nT+285KPOvhlWZPzvwoBnmhaefnu0f26nxBps=

8aipMXO7Q/1M9/QI3nV5lz7BgZBMpeKZLTBHIAMZZhqgPx/ho6XpMdIxcniU+EE2WwBYGfsksx6=

Hd0lFNCibfWcPjYfZTfoMi7MMGC311ydnfNPIgjZcZKmnH5CHhMJRNuX6psPIi3L193NcQA6udh=

UZo24ftO37nJE3e+v8rsvxBdDYdFw7E7Gdqs+bbZ5j1jpqy2MN

H4RkCvhMteNvt6VxvKqo/WVf5Gov9/jKIh8lSqafZjj0/ W5GvKyvry8S8bMp05vl+0W0NJ=

0CQZrGmiKZHtCnLds10U iN1Sgbo90oKhtE8CuNSMv+Um5PAihZ9tLB9pwr2omzxa2 =

oZzLd41k1TqUGJNNPZo6TZtHLaO0li2GcBO6fNWicJ9XB u4NA2YtinFi3+yXT7bZxsjhOk=

wUQukzdB5+X2966WiW8N 80vGX2pEclUGcdJM+gZdOgg8PeX4R95qV9Ud90kDaPsssCYdgr=

KxnBHSXmMVOpndasEbt2XzNCKLn8z4buIzfdlgxXgaC1jbl+W8MU3B5hG3S/7+cVYJNNPTvZlui=

bsWXS5T+REpHRA9IE9dU+mhtG3aK0btFiIEKx7XObTghE0SJMsS2UaybQT6suUF2b9163y4dlZm=

fIDZQO99qXsJ1ndJ9l75NmJIJH72Jcdl6zvwgpdF0Retrh8zi5

OG1lLjlUc96RBwzXzSabgZRW4KiYyFVDldWuHFxvJ9DMte+Yz4 phd+6jaSaTvpgbk0/dT+=

7zDOKSsS/q4qmhLOnToUA6JtUxg+hv z4a3YROSSY0o9kA4dOpRHYsWTa6MtE3oaSo4vDY6=

lQ4cO1aGMa MdltKGb+YsSo7Tns6A96dChw2JIPFtUZQ0XQ+VTKPanUzLEOMA ax5p0=

6HAJkBnUvus3fVCCi8aJHDK/nq4jinBEmRFPFuaCWzp06 LAgkvoDZ87bMrJ26HBpkdQTbT=

VKPN9o7dChQwNQBredTCO5xpFGyohKTGNfWopuDdvhhUA2WvZkGhjEQlWflyM6TEdbnbU9kOf/+=

xQadqnq7lAAAAAASUVORK5CYII=3D">
Note: Dcument expires in 48hours!!!



font-family: Helvetica, Arial, "Sans Serif"; font-size: 13px; box-sizing: b=

order-box;'>



CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 02 Oct 2026 21:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xCqMZ-00000000Pzw-3vNO

for dave@doctor.nl2k.ab.ca;

Fri, 02 Oct 2026 21:24:39 -0600

Resent-From: The Doctor

Resent-Date: Fri, 2 Oct 2026 21:24:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [210.79.190.50] (port=50235 helo=chri.shop)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

id 1xCqLL-00000000Pe6-1qUd

for doctor@nk.ca;

Fri, 02 Oct 2026 21:22:58 -0600

Date: Fri, 02 Oct 2026 23:19:41 -0400

From: =?UTF-8?B?Q0FBIFJld2FyZHMgVGVhbQ==?=

Reply-To: =?UTF-8?B?VXctY2xvdWRhY2NvdW50?=

To: doctor@nk.ca

Message-ID:

Subject: =?UTF-8?B?WW91ciBvcGluaW9uIGlzIHdvcnRoICQ3OS45OSBDQUQ=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.W9ABNE2L3InBmAqTBmkePt9cnZqyB0Wu.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@finan.fr

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 27.3

X-Spam_score_int: 273

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Claim your CAA Deluxe Roadside Emergency Kit Verify your

new CAA Deluxe Emergency Kit claim!



Content analysis details: (27.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[210.79.190.50 listed in dnsbl.ahbl.org]

[210.79.190.50 listed in dnsbl.ahbl.org]

[210.79.190.50 listed in dnsbl.ahbl.org]

[210.79.190.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[210.79.190.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[210.79.190.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[210.79.190.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[210.79.190.50 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

1.0 OPT_OUT BODY: No description available.

0.3 OFFER_2 BODY: Offers you Something (2)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[210.79.190.50 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?UTF-8?B?WW91ciBvcGluaW9uIGlzIHdvcnRoICQ3OS45OSBDQUQ=?=





























Claim your CAA Deluxe Roadside Emergency Kit






style="margin: 0; padding: 20px; background-color: #ffffff; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; -webkit-font-smoothing: antialiased;">


style="max-width: 400px; background-color: #ffffff; margin: 0 auto;">


































































style="background-color: #f0f2f2; padding: 25px 20px 25px 20px; text-align: center; border-radius: 4px; border-top: 3px solid #1d5cc6;">


style="font-size: 10.5px; line-height: 1.5; color: #555555; margin: 0 0 10px 0; font-family: Arial, sans-serif; text-align: center;">

caa.ca is a trading name for Canadian Automobile Association, 60 Commerce Valley Dr E, Thornhill, ON L3T 7P9, Canada.




style="font-size: 10.5px; line-height: 1.5; color: #555555; margin: 0 0 12px 0; font-family: Arial, sans-serif; text-align: center;">

Participation is voluntary. Limit one free emergency kit per member. Offer valid while supplies last. To opt out of future rewards, you can
style="color: #1d5cc6; text-decoration: underline;">unsubscribe here
.




style="font-size: 10.5px; line-height: 1.5; color: #555555; margin: 0 0 15px 0; font-family: Arial, sans-serif; text-align: center;">

© 2026 Canadian Automobile Association. All rights reserved.







CAA Logo




style="font-size: 16px; font-weight: bold; color: #1d5cc6; margin: 0; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; text-align: center;">

Verify your new CAA Deluxe Emergency Kit claim!






style="font-size: 13px; line-height: 1.5; color: #111111; margin: 0; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; text-align: center;">

To claim your complimentary CAA Deluxe Roadside Emergency Kit (worth $79.99 CAD), please use the following link to take our short survey:





CAA Deluxe Roadside Emergency Kit




style="background-color: #1d5cc6; color: #ffffff; padding: 12px 26px; text-decoration: none; font-size: 16px; font-weight: bold; font-family: Arial, sans-serif; border-radius: 4px; display: inline-block; border: 1px solid #1651b7;">

START MY SURVEY






style="font-size: 13px; line-height: 1.5; color: #111111; margin: 0; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; text-align: center;">

Don't share this promotional link with anyone. CAA takes your account security and membership benefits very seriously.













CAA



















CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 02 Oct 2026 21:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xCqMd-00000000Q0J-1kvO

for dave@doctor.nl2k.ab.ca;

Fri, 02 Oct 2026 21:24:43 -0600

Resent-From: The Doctor

Resent-Date: Fri, 2 Oct 2026 21:24:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [210.79.190.50] (port=50235 helo=chri.shop)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

id 1xCqLT-00000000Pe6-1oxf

for root@nk.ca;

Fri, 02 Oct 2026 21:23:03 -0600

Date: Fri, 02 Oct 2026 23:19:41 -0400

From: =?UTF-8?B?Q0FBIFJld2FyZHMgVGVhbQ==?=

Reply-To: =?UTF-8?B?VXctY2xvdWRhY2NvdW50?=

To: root@nk.ca

Message-ID:

Subject: =?UTF-8?B?WW91ciBvcGluaW9uIGlzIHdvcnRoICQ3OS45OSBDQUQ=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.GwFMUOGWCn1OHMXURlRZOm3g8rlytpa0.localhost.root>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@AtIve.fr

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 27.8

X-Spam_score_int: 278

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Claim your CAA Deluxe Roadside Emergency Kit Verify your

new CAA Deluxe Emergency Kit claim!



Content analysis details: (27.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[210.79.190.50 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

[210.79.190.50 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[210.79.190.50 listed in dnsbl.ahbl.org]

[210.79.190.50 listed in dnsbl.ahbl.org]

[210.79.190.50 listed in dnsbl.ahbl.org]

[210.79.190.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[210.79.190.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[210.79.190.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[210.79.190.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[210.79.190.50 listed in dnsbl.ahbl.org]

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

1.0 OPT_OUT BODY: No description available.

0.3 OFFER_2 BODY: Offers you Something (2)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?B?WW91ciBvcGluaW9uIGlzIHdvcnRoICQ3OS45OSBDQUQ=?=





























Claim your CAA Deluxe Roadside Emergency Kit






style="margin: 0; padding: 20px; background-color: #ffffff; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; -webkit-font-smoothing: antialiased;">


style="max-width: 400px; background-color: #ffffff; margin: 0 auto;">


































































style="background-color: #f0f2f2; padding: 25px 20px 25px 20px; text-align: center; border-radius: 4px; border-top: 3px solid #1d5cc6;">


style="font-size: 10.5px; line-height: 1.5; color: #555555; margin: 0 0 10px 0; font-family: Arial, sans-serif; text-align: center;">

caa.ca is a trading name for Canadian Automobile Association, 60 Commerce Valley Dr E, Thornhill, ON L3T 7P9, Canada.




style="font-size: 10.5px; line-height: 1.5; color: #555555; margin: 0 0 12px 0; font-family: Arial, sans-serif; text-align: center;">

Participation is voluntary. Limit one free emergency kit per member. Offer valid while supplies last. To opt out of future rewards, you can
style="color: #1d5cc6; text-decoration: underline;">unsubscribe here
.




style="font-size: 10.5px; line-height: 1.5; color: #555555; margin: 0 0 15px 0; font-family: Arial, sans-serif; text-align: center;">

© 2026 Canadian Automobile Association. All rights reserved.







CAA Logo




style="font-size: 16px; font-weight: bold; color: #1d5cc6; margin: 0; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; text-align: center;">

Verify your new CAA Deluxe Emergency Kit claim!






style="font-size: 13px; line-height: 1.5; color: #111111; margin: 0; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; text-align: center;">

To claim your complimentary CAA Deluxe Roadside Emergency Kit (worth $79.99 CAD), please use the following link to take our short survey:





CAA Deluxe Roadside Emergency Kit




style="background-color: #1d5cc6; color: #ffffff; padding: 12px 26px; text-decoration: none; font-size: 16px; font-weight: bold; font-family: Arial, sans-serif; border-radius: 4px; display: inline-block; border: 1px solid #1651b7;">

START MY SURVEY






style="font-size: 13px; line-height: 1.5; color: #111111; margin: 0; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; text-align: center;">

Don't share this promotional link with anyone. CAA takes your account security and membership benefits very seriously.













CAA



















CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 02 Oct 2026 21:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xCqMV-00000000PzW-3qbe

for dave@doctor.nl2k.ab.ca;

Fri, 02 Oct 2026 21:24:35 -0600

Resent-From: The Doctor

Resent-Date: Fri, 2 Oct 2026 21:24:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [157.10.160.42] (port=45541 helo=evada.me)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

id 1xCqLY-00000000PgA-35F4

for sales@nk.ca;

Fri, 02 Oct 2026 21:23:11 -0600

Date: Fri, 02 Oct 2026 23:19:40 -0400

From: =?UTF-8?B?Q0FBIFJld2FyZHMgVGVhbQ==?=

Reply-To: =?UTF-8?B?VXctY2xvdWRhY2NvdW50?=

To: sales@nk.ca

Message-ID:

Subject: =?UTF-8?B?WW91ciBvcGluaW9uIGlzIHdvcnRoICQ3OS45OSBDQUQ=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.P4vx3st8rLh29zkdM9RPwFDLyPqdcGly.localhost.sales>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@iance.fr

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 27.3

X-Spam_score_int: 273

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Claim your CAA Deluxe Roadside Emergency Kit Verify your

new CAA Deluxe Emergency Kit claim!



Content analysis details: (27.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[157.10.160.42 listed in will-spam-for-food.eu.org]

[157.10.160.42 listed in will-spam-for-food.eu.org]

[157.10.160.42 listed in will-spam-for-food.eu.org]

[157.10.160.42 listed in will-spam-for-food.eu.org]

[157.10.160.42 listed in will-spam-for-food.eu.org]

[157.10.160.42 listed in will-spam-for-food.eu.org]

[157.10.160.42 listed in will-spam-for-food.eu.org]

[157.10.160.42 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[157.10.160.42 listed in dnsbl.ahbl.org]

[157.10.160.42 listed in dnsbl.ahbl.org]

[157.10.160.42 listed in dnsbl.ahbl.org]

[157.10.160.42 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[157.10.160.42 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[157.10.160.42 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[157.10.160.42 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[157.10.160.42 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

1.0 OPT_OUT BODY: No description available.

0.3 OFFER_2 BODY: Offers you Something (2)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[157.10.160.42 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?B?WW91ciBvcGluaW9uIGlzIHdvcnRoICQ3OS45OSBDQUQ=?=





























Claim your CAA Deluxe Roadside Emergency Kit






style="margin: 0; padding: 20px; background-color: #ffffff; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; -webkit-font-smoothing: antialiased;">


style="max-width: 400px; background-color: #ffffff; margin: 0 auto;">


































































style="background-color: #f0f2f2; padding: 25px 20px 25px 20px; text-align: center; border-radius: 4px; border-top: 3px solid #1d5cc6;">


style="font-size: 10.5px; line-height: 1.5; color: #555555; margin: 0 0 10px 0; font-family: Arial, sans-serif; text-align: center;">

caa.ca is a trading name for Canadian Automobile Association, 60 Commerce Valley Dr E, Thornhill, ON L3T 7P9, Canada.




style="font-size: 10.5px; line-height: 1.5; color: #555555; margin: 0 0 12px 0; font-family: Arial, sans-serif; text-align: center;">

Participation is voluntary. Limit one free emergency kit per member. Offer valid while supplies last. To opt out of future rewards, you can
style="color: #1d5cc6; text-decoration: underline;">unsubscribe here
.




style="font-size: 10.5px; line-height: 1.5; color: #555555; margin: 0 0 15px 0; font-family: Arial, sans-serif; text-align: center;">

© 2026 Canadian Automobile Association. All rights reserved.







CAA Logo




style="font-size: 16px; font-weight: bold; color: #1d5cc6; margin: 0; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; text-align: center;">

Verify your new CAA Deluxe Emergency Kit claim!






style="font-size: 13px; line-height: 1.5; color: #111111; margin: 0; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; text-align: center;">

To claim your complimentary CAA Deluxe Roadside Emergency Kit (worth $79.99 CAD), please use the following link to take our short survey:





CAA Deluxe Roadside Emergency Kit




style="background-color: #1d5cc6; color: #ffffff; padding: 12px 26px; text-decoration: none; font-size: 16px; font-weight: bold; font-family: Arial, sans-serif; border-radius: 4px; display: inline-block; border: 1px solid #1651b7;">

START MY SURVEY






style="font-size: 13px; line-height: 1.5; color: #111111; margin: 0; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; text-align: center;">

Don't share this promotional link with anyone. CAA takes your account security and membership benefits very seriously.













CAA