=EF=BB=BF
name=3D"viewport" />
=EF=BB=BF
name=3D"viewport" />
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Jul 2026 17:44:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whFRN-00000000EGG-2qEX
for dave@doctor.nl2k.ab.ca;
Tue, 07 Jul 2026 17:43:01 -0600
Resent-From: The Doctor
Resent-Date: Tue, 7 Jul 2026 17:43:01 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f231.google.com ([209.85.160.231]:44052)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whEfM-00000000I6L-1MgR
for doctor@mail.nl2k.ab.ca;
Tue, 07 Jul 2026 16:53:36 -0600
Received: by mail-qt1-f231.google.com with SMTP id d75a77b69052e-51c0c45c580so45541cf.0
for ; Tue, 07 Jul 2026 15:52:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sabeng.it; s=google; t=1783464750; x=1784069550; darn=mail.nl2k.ab.ca;
h=mime-version:date:content-transfer-encoding:message-id:subject:to
:from:from:to:cc:subject:date:message-id:reply-to;
bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;
b=aPkBxf3+4gPyhhzjYYmIZUSQTJxnhGc0JbD9cvuRA+IGnpIOWUUt6ax3s9dBZQm+OS
AQhXO9h59Ho8n+49039GKx71tBSDD1qZ9MdhN2Tfr9VGwMxY3cLg/E1uTcyxOwRH36Th
ThTqAPCjLeqnBZfWnU5ae/LV/XIpjrNE9MagY=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1783464750; x=1784069550;
h=mime-version:date:content-transfer-encoding:message-id:subject:to
:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;
b=LbdKKJegiAfJmxWMJKbahsTELsgX8sBH7q0r+jCd3MImcgGF8KQR16sjl5zkzf9zeO
6NVEV44jchrv/q08yz6EoLPjP1R2fPnqLFAcwOj3qwZgepERgL6zu2vzdUxNc7poeBlD
qjaiK1xLOn5MsxUpvs2vci5eU8O2/Am9MWDSnIBaxBcRbetxj/qshdzljHDaT3mkp3I0
pN45BxgyehmIuQPnsUpbLnWfX2S7ga9dIgA8l76PmSrIzrUNFhaUFScnxDPqyCt8jopH
ivxldLiQ2RX/XS/ei2XrE2IioUsnwEyzttdnBbwzfbHxkcUQHT4T/CiEvAc90ULK8biz
E7jw==
X-Gm-Message-State: AOJu0Yx161qSAZ0Tx/tgfAX+5mNqXgsnB8emyLwTrUKL22jnE+zy4+gL
g/7GoMjLXWXp7JGAtfkI4y15QLGOb0tTnJ0uCsWIFE1aZuP0ht2S9GAp5QAM0kms7kLTTPcWAYo
chMZlqO1ayjgsanXo4PdvrPGPYMahjf1Qff8YulzR1RfsM7M=
X-Gm-Gg: AfdE7cnaDfl//Dgg8BRo+B1KckyFSwdIqxQACgIQpCLMVVqLSSoBnkbohCLLLdZ1eFZ
hBfWWh2ooPIL8c7tb1W9Q+/xt3ZvyPxrx+f61B1POclRCQ6FC21USK/rmk0NZeImSaKHRosRS82
f4h2mY5A30TuWcxL4HJ0jimerdHLka2lpqVvwkVv6EcUjNKtQRA9YC/2HVEY9zXG4ij2ngU7m0A
QU3QFyN29TTczlhYvkjwUCy6mGJvM0yYmLiyqiIRLm3J6YqrPxL9O4VQhPWqLSCnoi0K6tUf2TO
P2BnWRCmRrbExgZxLlX3gwMlViWpW879hxkpO7tQCJ8Q4QC9dNqFr5/1e/RDE8O2tU1avN5v6xW
4GG6VCOEWst/7ZfvpMqjAQM8=
X-Received: by 2002:a05:622a:1e0d:b0:51c:136a:c870 with SMTP id d75a77b69052e-51c8b2e2fecmr2076071cf.26.1783464750325;
Tue, 07 Jul 2026 15:52:30 -0700 (PDT)
Received: from sabprogetti.com ([192.210.236.148])
by smtp-relay.gmail.com with ESMTPS id d75a77b69052e-51c41cb32a4sm7702111cf.15.2026.07.07.15.52.30
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 07 Jul 2026 15:52:30 -0700 (PDT)
X-Relaying-Domain: sabeng.it
From: "Incoming_Payment | EFT Portal/OU=EXCHANGE ADMINISTRATIVE GROUP
(FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-57042"
To: doctor@mail.nl2k.ab.ca
Subject: =?UTF-8?Q?Attached_Payment_Report_for_Your_Review_?=
=?UTF-8?Q?=EF=BF=BD_07/07/2026_=EF=BF=BD_doctor=40?=
=?UTF-8?Q?mail=2Enl2k=2Eab=2Eca?=
Message-ID: <6f7146d8-bed0-4ed3-b053-2a408a471643@sabeng.it>
Content-Transfer-Encoding: quoted-printable
Date: Tue, 07 Jul 2026 22:52:28 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam_score: 8.8
X-Spam_score_int: 88
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:  A document has been sent for your review View Document
Please review the attached document at your convenience. Contact the sender
if you have questions.
Content analysis details: (8.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[209.85.160.231 listed in dnsbl.ahbl.org]
[209.85.160.231 listed in dnsbl.ahbl.org]
[209.85.160.231 listed in dnsbl.ahbl.org]
[209.85.160.231 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.231 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[209.85.160.231 listed in will-spam-for-food.eu.org]
[209.85.160.231 listed in will-spam-for-food.eu.org]
[209.85.160.231 listed in will-spam-for-food.eu.org]
[209.85.160.231 listed in will-spam-for-food.eu.org]
[209.85.160.231 listed in will-spam-for-food.eu.org]
[209.85.160.231 listed in will-spam-for-food.eu.org]
[209.85.160.231 listed in will-spam-for-food.eu.org]
[209.85.160.231 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} =?UTF-8?Q?Attached_Payment_Report_for_Your_Review_?=
=?UTF-8?Q?=EF=BF=BD_07/07/2026_=EF=BF=BD_doctor=40?=
=?UTF-8?Q?mail=2Enl2k=2Eab=2Eca?=
=EF=BB=BF
name=3D"viewport" />
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Jul 2026 17:44:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whFRT-00000000EGW-0C5P
for dave@doctor.nl2k.ab.ca;
Tue, 07 Jul 2026 17:43:07 -0600
Resent-From: The Doctor
Resent-Date: Tue, 7 Jul 2026 17:43:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f103.google.com ([209.85.160.103]:44088)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whEfM-00000000I5n-1eMI
for doctor@netknow.ca;
Tue, 07 Jul 2026 16:53:36 -0600
Received: by mail-oa1-f103.google.com with SMTP id 586e51a60fabf-44cb057311bso47222fac.0
for ; Tue, 07 Jul 2026 15:52:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sabeng.it; s=google; t=1783464750; x=1784069550; darn=netknow.ca;
h=mime-version:date:content-transfer-encoding:message-id:subject:to
:from:from:to:cc:subject:date:message-id:reply-to;
bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;
b=TxUiOsRG5ygsTTp2Rem1eBNX6+1Xz5n4OuY64F5df7ztgP2AaIlbN9KXJVt58Y5dOI
c3C/JGRTuM32pBOtHhFA7htCRgPLJQZnnDucgcKQPzMdIDdL3IwdRJljHUhyN6bz90yL
rER8P6jzMoGcqcrCjpKJ5WlYn48cF5JaU8pAM=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1783464750; x=1784069550;
h=mime-version:date:content-transfer-encoding:message-id:subject:to
:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;
b=sBppQyZ4EiAXEX11IYOudUKF6qztdUVnoCLv+yqBCL5tWiVh+eh23mKcATD4aTA8wB
wxN5kVfGfxburGz5z4FRlyLxCyv0sTKI1TA+PXNP4tJIAW5MgWRS8hAhZx7wH6l06yvI
1yTsgX6BHVE0XK391T8hCkdU5k03E10E1APd6P8M+Su5FQRbKyuZoAHY1USfwBmGRc1U
GDcK9UNIpp/w3bu/S9I9uKn1YpwxiAkUHHNp4692Iw9mb4LR767ibfWMFliCZJkyWBxF
YsoBcMmSFVFB8T0NQqFLbJ6KXM657nvPN+2vKoiuKG1mhzT1hxnHne0y9l8aDvnRUVjE
ZB0w==
X-Gm-Message-State: AOJu0Yw6UrylTifmhetURbAosa7pD+huhNKEgZiHmLsZRakV+dfkpgxW
OPKtmugX7RW7qwjoiRhcp8YCZxNyVLQpPPs8D/GXS0ErtzyJfTJrvYmQ5D1XNprcgGpKTilmf3H
LlyyClRC7TtOrcvAxxJZHBAvrlSTbauRiCiIEtDWFXlotQ58=
X-Gm-Gg: AfdE7ckzm0bLM6hoAEFvGDPZvwYTjR3dOd9TDZDWV+GUDOjPS6K3/Sjm4RVimbVXwZa
Hkz7fUiYJvKgzTtW27+HWBT/Zib4RE682ldor2Qj6T0nkLp2sMiU1XFKaXFIMmb9o7GGPMmRY4/
a9wasBM+nG8Jxae4mXQm4cMgC6X4GLQdBJS58N9/Fg8F3h745APHzAYRWBgdCOcc1AOPwrUZx6s
455dg2F8HOtk9dmlA8Eg2yWgsUG2SjRKV8vpKoFtzC5meXoEmLj/O0MxS4dJpvdhdu4vllFoO+V
nYG3WrMN+0Crs2CdAKMgolqatZP9yl5Av/wGQcblQivfP9uZ3mQUWumJacV3EFFQFulOwa+Muo1
LIz90rhNxVkUGKmvEabjmwNk=
X-Received: by 2002:a05:6871:2e94:b0:448:558c:d850 with SMTP id 586e51a60fabf-4510637007fmr4485748fac.43.1783464750358;
Tue, 07 Jul 2026 15:52:30 -0700 (PDT)
Received: from sabprogetti.com ([192.210.236.148])
by smtp-relay.gmail.com with ESMTPS id 586e51a60fabf-44cfb5ab52asm1591009fac.3.2026.07.07.15.52.30
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 07 Jul 2026 15:52:30 -0700 (PDT)
X-Relaying-Domain: sabeng.it
From: "Incoming_Payment|Schedule| Online Review/OU=EXCHANGE ADMINISTRATIVE
GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-55757"
To: doctor@netknow.ca
Subject: =?UTF-8?Q?Invoice_and_Payment_Documentation_Enclos?=
=?UTF-8?Q?ed_for_Review_=EF=BF=BD_07/07/2026_?=
=?UTF-8?Q?=EF=BF=BD_doctor=40netknow=2Eca?=
Message-ID: <8d32afef-ddf7-68df-e16d-9a0dadf3d89b@sabeng.it>
Content-Transfer-Encoding: quoted-printable
Date: Tue, 07 Jul 2026 22:52:28 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:  A document has been sent for your review View Document
Please review the attached document at your convenience. Contact the sender
if you have questions.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[209.85.160.103 listed in dnsbl.ahbl.org]
[209.85.160.103 listed in dnsbl.ahbl.org]
[209.85.160.103 listed in dnsbl.ahbl.org]
[209.85.160.103 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[209.85.160.103 listed in will-spam-for-food.eu.org]
[209.85.160.103 listed in will-spam-for-food.eu.org]
[209.85.160.103 listed in will-spam-for-food.eu.org]
[209.85.160.103 listed in will-spam-for-food.eu.org]
[209.85.160.103 listed in will-spam-for-food.eu.org]
[209.85.160.103 listed in will-spam-for-food.eu.org]
[209.85.160.103 listed in will-spam-for-food.eu.org]
[209.85.160.103 listed in will-spam-for-food.eu.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see ]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.103 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.160.103 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.103 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Subject: {SPAM?} =?UTF-8?Q?Invoice_and_Payment_Documentation_Enclos?=
=?UTF-8?Q?ed_for_Review_=EF=BF=BD_07/07/2026_?=
=?UTF-8?Q?=EF=BF=BD_doctor=40netknow=2Eca?=
=EF=BB=BF
name=3D"viewport" />
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Tue, 07 Jul 2026 16:17:00 -0600
Received: from mail-qt1-f230.google.com ([209.85.160.230]:59466)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whE5u-00000000BbR-1Qui
for dave@nl2k.ab.ca;
Tue, 07 Jul 2026 16:16:54 -0600
Received: by mail-qt1-f230.google.com with SMTP id d75a77b69052e-51c01089e8aso37212361cf.2
for ; Tue, 07 Jul 2026 15:15:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sabeng.it; s=google; t=1783462553; x=1784067353; darn=nl2k.ab.ca;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;
b=GENNvtqnoWR9+jgmfuYywMh3O5DZiOXQ8zmqxWxL8snCQoLXwiMFQGKyYhIUrALYiV
pXPlQekIT81nYfTa6rG0KgMEp40zq7FQ9rPJY2YPuKbA+unBooMTI85bEWFNq71Cpy5O
1veJ5IB8cXXhTKbsaZt1pncUFToATjmSs+M3A=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1783462553; x=1784067353;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to:content-type;
bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;
b=SUAZx86PttUbJcLKM78Ov2WDY0EXdxXECUFRVnZU6DH4A3NvBzo78kELuldgI7Ppsl
eRTAw9OwLF2tK1wZKYj9Na6f1Bp192dfwO1/wdB63tMXOWzTeuth/bUisPz6wuWAFF1/
8Selx0nQCkfkd2fUQn7A7pVhqRotHx+x1Ki6ctbmtWLeH8EV8GafdodCQkAsztStGV2A
i2Hgfb8uwJtW4XfaUWYzhjnM4ZdboWd6huHOYA6ITIb5xJe0uqcva3iHkk1BxfjqQN6J
sUyQddzg6PfWZGdFpqjs0YZYOGHBB47/XiviRMFDLkesmdaCkE2cJ0s32aURxpurTXb2
NMCg==
X-Gm-Message-State: AOJu0YzrAhewClnI2S8p5LACnkBzlJoVm80cgULu2d8Te5i21A8sMGGf
yGrY2YlL1QmFGjb3kilhFvYHw72YpaAUXtNCCRSvW1JjcPb655ydrQje8q8pq4GQWYNS5g9aM45
CteAK2mCb2gzpMbelsZRCnk/Wcba+ycqp6XCS/I0ej9On2bc=
X-Gm-Gg: AfdE7cnu/ApLB5Pc2cETU014pwxfOP+Nufp89hshtVWJOPsnqHldWVTCkLbsDAm+GFm
nrSffKjYn91rri5yeUfuK+W9ul73sAP6bU8QwFrgp+DPCm0vfI5akwwxa45KoV6zQPesl2lQ80A
rVJ6Jw8+K22/9lhe1wlEGk1gIoTSRl47fRQYBNhQh2C7SBPmcnhBhti2vHX1G/JXSco/1SYLZ6a
ja7MdQ386adAC7WUCUQ8oEbtMibIHj2dkHZDcO3G59yxwpjDo/hD9lOihiSlN08xd8F32SPmh3j
jEulkMcfgBGF17VVeD3F+/e9xWSO7JFY0fVyGm4XuAbIGHsCeHOKcfKw2h+lzveJr0DnZaTu+tT
eId1RHTbvjB2AkrhtTvucVg==
X-Received: by 2002:a05:622a:1f88:b0:51c:1c00:e46 with SMTP id d75a77b69052e-51c8b303215mr979411cf.25.1783462552995;
Tue, 07 Jul 2026 15:15:52 -0700 (PDT)
Received: from sabprogetti.com ([192.210.236.148])
by smtp-relay.gmail.com with ESMTPS id d75a77b69052e-51c41931526sm7041581cf.0.2026.07.07.15.15.52
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 07 Jul 2026 15:15:52 -0700 (PDT)
X-Relaying-Domain: sabeng.it
From: "Incoming_Payment|Schedule| Online Review/OU=EXCHANGE ADMINISTRATIVE
GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-70349"
To: dave@nl2k.ab.ca
Subject: =?UTF-8?Q?Please_Review_the_Attached_Slip=2C_Invoi?=
=?UTF-8?Q?ce_=26_Payment_Report_=EF=BF=BD_07/07/20?=
=?UTF-8?Q?26_=EF=BF=BD_dave=40nl2k=2Eab=2Eca?=
Message-ID: <3ee50806-7430-30e4-4715-269876d8abf8@sabeng.it>
Content-Transfer-Encoding: quoted-printable
Date: Tue, 07 Jul 2026 22:15:51 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:  A document has been sent for your review View Document
Please review the attached document at your convenience. Contact the sender
if you have questions.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[209.85.160.230 listed in dnsbl.ahbl.org]
[209.85.160.230 listed in dnsbl.ahbl.org]
[209.85.160.230 listed in dnsbl.ahbl.org]
[209.85.160.230 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see ]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[209.85.160.230 listed in will-spam-for-food.eu.org]
[209.85.160.230 listed in will-spam-for-food.eu.org]
[209.85.160.230 listed in will-spam-for-food.eu.org]
[209.85.160.230 listed in will-spam-for-food.eu.org]
[209.85.160.230 listed in will-spam-for-food.eu.org]
[209.85.160.230 listed in will-spam-for-food.eu.org]
[209.85.160.230 listed in will-spam-for-food.eu.org]
[209.85.160.230 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.230 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.160.230 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.230 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Subject: {SPAM?} =?UTF-8?Q?Please_Review_the_Attached_Slip=2C_Invoi?=
=?UTF-8?Q?ce_=26_Payment_Report_=EF=BF=BD_07/07/20?=
=?UTF-8?Q?26_=EF=BF=BD_dave=40nl2k=2Eab=2Eca?=
=EF=BB=BF
name=3D"viewport" />
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Jul 2026 17:44:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whFRa-00000000EGz-1SII
for dave@doctor.nl2k.ab.ca;
Tue, 07 Jul 2026 17:43:14 -0600
Resent-From: The Doctor
Resent-Date: Tue, 7 Jul 2026 17:43:14 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f229.google.com ([209.85.214.229]:56404)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whEfM-00000000I6M-1hvA
for doctor@nk.ca;
Tue, 07 Jul 2026 16:53:36 -0600
Received: by mail-pl1-f229.google.com with SMTP id d9443c01a7336-2cca0c5799eso747575ad.0
for ; Tue, 07 Jul 2026 15:52:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sabeng.it; s=google; t=1783464750; x=1784069550; darn=nk.ca;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;
b=e90ZA+Gol0yXRXQCRjT+RRivkK6H7zgqbGa20p41vBjRC6eKLzvnlOG6kXO9PtDHJ9
pWxiCXrB3TSXkHA29l35b2XN4sGmR/SID4nBhWaBoF47qfsvD59nIUqryitR5tL6Dho9
uaURnz7rKnNe8UXfhb70l1ck/1s/pshiIt5wc=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1783464750; x=1784069550;
h=content-type:mime-version:date:content-transfer-encoding:message-id
:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to:content-type;
bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;
b=tBP39U9kuba+lya+6grO9u2/76PUlYu1l3cGFQTvUacIv5Y/We82xtolkSXF9Ri/8V
HOs+K0CEyp7XZ6N91NhbQ8RGGW+nlVrvFMKse/XhNTAWoOBg3VeEcPKQyWAxCerQ/oem
h8YaEI2f6T4i9XgQLP73i25SsLqVLO3DLM8Av4ePc6dBmOIXBF2DFVV4yr3wzp+LMMbP
6SsYyjGE+7XYK4ANx87pvY+gijTwTdBJDYVQib6loFhLW/sG+xkGIgxDyJbBVZ8fNG+z
l4hBVI9t8/YP5q1fYzY18liRgGS83BcqXXrwVqe01Khq44BFL6z5VPttBUvvsh+m+5Qa
YRgw==
X-Gm-Message-State: AOJu0YxULub1rLrejIy4sJdMc9TRGvlJ0sbRNgL/hn0cK8LjxWu0wcLR
AsfNIMAGcD46AIpPsoJB3RcLSU5vuaT4sz0FRKUMEiAywI0NKcnXa8ViBdunvKatzTYWI1ix0FD
pDv4l5Fl5CpemhZH/lvoJ+t6fTYuRAzHQVkNe73yKyi8Vn8Q=
X-Gm-Gg: AfdE7ckgEKENE6zSoMkgdNudRIeuj62P5YBcRtHJk9o9+QueKd3wpOfdew0fmFhZ4iw
nVplVhod8nWQrqhYr1bwJXoFuyMQZ2nPdogbWbfrufC4R6t2MERU/6biaq4l1JCMKygvLE63X8V
m6m1x26H/ZHJBeYjuvtm5fmSHhEGEFuRhxTJJTrfI7Bvblx3f8kNgZqME5VM/6WSu6Pn5iYyt2c
bi+ta7+b8ZYYh5KKG7QxXxKR3soskmulEhUaEwjEeSZ0mkcPW35Bgjny9hgOhWzfKXv9EGgrTVo
c1lFJT//fRJxtjbOyM2jdBjQ1fBq/nSdZ4r5N8DhFrqVh9UzS92cg3LxELuG9+mlHrZOeAyohsq
9gHkXqQJwu17xhRpgpg==
X-Received: by 2002:a17:902:ebd1:b0:2c9:ed16:8d8d with SMTP id d9443c01a7336-2ccbf1890d3mr68975175ad.38.1783464750587;
Tue, 07 Jul 2026 15:52:30 -0700 (PDT)
Received: from sabprogetti.com ([192.210.236.148])
by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-2ccc9bdd019sm3313665ad.13.2026.07.07.15.52.30
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Tue, 07 Jul 2026 15:52:30 -0700 (PDT)
X-Relaying-Domain: sabeng.it
From: "Incoming_Payment | EFT Portal/OU=EXCHANGE ADMINISTRATIVE GROUP
(FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-27559"
To: doctor@nk.ca
Subject: =?UTF-8?Q?Attached_Payment_Report_for_Your_Review_?=
=?UTF-8?Q?=EF=BF=BD_07/07/2026_=EF=BF=BD_doctor=40?= =?UTF-8?Q?nk=2Eca?=
Message-ID: <31213b49-f665-fd68-977f-edfe928d705a@sabeng.it>
Content-Transfer-Encoding: quoted-printable
Date: Tue, 07 Jul 2026 22:52:29 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam_score: 6.3
X-Spam_score_int: 63
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:  A document has been sent for your review View Document
Please review the attached document at your convenience. Contact the sender
if you have questions.
Content analysis details: (6.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[192.210.236.148 listed in dnsbl.ahbl.org]
[209.85.214.229 listed in dnsbl.ahbl.org]
[209.85.214.229 listed in dnsbl.ahbl.org]
[209.85.214.229 listed in dnsbl.ahbl.org]
[209.85.214.229 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[192.210.236.148 listed in dnsbl.ahbl.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see ]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[192.210.236.148 listed in will-spam-for-food.eu.org]
[209.85.214.229 listed in will-spam-for-food.eu.org]
[209.85.214.229 listed in will-spam-for-food.eu.org]
[209.85.214.229 listed in will-spam-for-food.eu.org]
[209.85.214.229 listed in will-spam-for-food.eu.org]
[209.85.214.229 listed in will-spam-for-food.eu.org]
[209.85.214.229 listed in will-spam-for-food.eu.org]
[209.85.214.229 listed in will-spam-for-food.eu.org]
[209.85.214.229 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.229 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries | ]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries | ]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.214.229 listed in bl.score.senderscore.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.229 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Subject: {SPAM?} =?UTF-8?Q?Attached_Payment_Report_for_Your_Review_?=
=?UTF-8?Q?=EF=BF=BD_07/07/2026_=EF=BF=BD_doctor=40?= =?UTF-8?Q?nk=2Eca?=
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Jul 2026 17:44:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whFRt-00000000EHo-3KBd
for dave@doctor.nl2k.ab.ca;
Tue, 07 Jul 2026 17:43:33 -0600
Resent-From: The Doctor
Resent-Date: Tue, 7 Jul 2026 17:43:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f41.google.com ([209.85.218.41]:50301)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whFM3-00000000DjC-2iHB
for doctor@nk.ca;
Tue, 07 Jul 2026 17:37:33 -0600
Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-c1276f8414bso5984666b.0
for ; Tue, 07 Jul 2026 16:36:27 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1783467380; cv=none;
d=google.com; s=arc-20260327;
b=m4bZIshYL/Y9g+F9T+Sy//YyGo9TWaxHUBMbIAFGPmG09JBjWYJQcaOGoHR2R8C/US
UnZJ/n9hpg/qQ/godCaPGHmT1nnOK6tftQtXLB26bjoGewo0gGr5mxHuariiRSgkBwNx
u57QYMFyg7LxQiNLdOQ475PbK/sOhIKPP4w5e02VDtm0N26zirApWVBFf22QvDD43fFF
XImamdkdwHqMFeezDc4LLYf3MdT3qXvLIPr/H7+EbLqNho5XyqonbYmf97+DJDdk7nXO
nEn9LP7osJJ8k3aLTR8R1eM+hXlXiZmrtmQHTykCm4H4TnMTkxqvusS4G3o2kIgvyGK+
TS2g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;
fh=OQ46c1PzsJkng+bk9UdWxmIgl/cFRynZeJQlAMibJO4=;
b=MskBl7iMKRp7iw9pA0A5c/M7Fk+hTezjfrAeUVuM4O3HW7LFi7KtVgxKTuI0pACKoL
/dm6gDrRDxNqT3CvUoK57PkgmZ/Oqjw/tfXvgcCI+YG+udRV/cFXzRqFVLn3yMWcNS3G
VzWO7RI26u8PrA5SerxNoVo1nHodFF29UiVxvY6ss7Q0IBqrLOSGdp0KMwJCNmJoQom5
9btnChuM7yB7FtnOa/yN4PyBgdgHz77UOhPAxQsxDUvC2+t6/h2Nn7O9PluE+p+lZti2
yBxWayNVBPLp5iIREY0SiDiCqkERgnT3eOQ0DL2V/6KeO/EzaybUvYLEROsnmd3t0gSA
becg==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1783467380; x=1784072180; darn=nk.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;
b=RVEsGKYC+5x3LF2spOmNPwq6AK0HfsEmxsTUWkF9kdYy1WMx29sbEkdvhJA/g8jeYz
57Y4DnbyvzUSkNVSHJ9jTKX3ndQvf1/+cTaA7JaHv59ym+gc7NZ6FY1t8IRReLt044n0
XNbhKOIRI93R6+Mzt+ETQLpda/uKo16+mUfIYFW1/S/fsujdcPTsC6ICy9KYbNS0m9Fo
CPHX7O9BhXAdq6O+fUz7R7vjBzpSB/YTCGexjwpZJNM0/JMHq/vPTmy2QzbOD8UffW7X
Oz0qLE42D2ARgYG6wAmbu0ps1I0MvmcX2+5SYN4uRJUHPpwG52SV+J/fwxrDgEHfm2nw
dw4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1783467380; x=1784072180;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;
b=VXqoER291MRUTth9uiWxLA8pLpxmuLxUoVTAcwuWcNIlfQ/ZWtopcLiQH0ZrYuqsTn
qY/yWalQEfJbS9lF61EOHMozGVYSG5kZK1L81KC4jXTvx74cbNfZW9q++USAaZy9OPd8
WVoj+yjLxRMaLO0W2AEAaitGL3Y+Orf8HL+xWG2RdnVVVZzeA4z+JYvaskZ6nKM1U7EP
PNLLugzJvPf082QxrDnfYHF2LKU4tqJZjMNNov3A5hBVPbhB8/2ikTqKuiVZ88uZOmlD
vz1lyY+aVVT52mZQi3FQnQtgk0CMUbqxMtS131RQhpP6bZ9RnhjRi1dFs/NO2fD9Kxou
rTxg==
X-Forwarded-Encrypted: i=1; AHgh+RqQzD2bMpP8mSt1ppL5zuJXMCYn6b5Xjz8tPfEFmBwIuVDYs/6o2s+uio4Drj+nT6EQYnW+Gbw=@nk.ca
X-Gm-Message-State: AOJu0YxN46zVPQ3WbWy6G2Nq06ZZGwtKvx9TfGOvqj6yV1qglMywmCJG
qcsclmLUUnBvQWayoHAqRkbCxD+nYcZVgdpq0I/7aClovjo9EF+kIBVi1tejLjmu5PJ7tSK1F6l
Wz8xzvZRuD2nQAhw33SWHwjuENTvPVHc=
X-Gm-Gg: AfdE7cmWZzktscs2njOkO5ALBW/cwxjSY7WMrNcaRuj2gRnxpHzlatOKWe+ELRzO06l
LvnsmY7bW8GYdByO1fzxvaWpTQjXIMuoI/YHL9xnCgeqdXuVZJpkpIjNAD2v653p8Q5GVS8F+Eo
LKXTBbPwr9yV11EWEGlOcQb+wnJD3g757DXMRN0Z4kyn9DXryk3Ke+NvtmSxiKjyUaP8881JjIr
gSMBsUMnMwUfzH47vbMTIYoJBc5yUiRMRNlHJQX5uuSxMWCaL9W5dh0uRsuoZ9bgn6xSm0=
X-Received: by 2002:a17:907:6e8e:b0:c12:7d53:cc88 with SMTP id
a640c23a62f3a-c15ce22a26dmr7815866b.58.1783467380137; Tue, 07 Jul 2026
16:36:20 -0700 (PDT)
MIME-Version: 1.0
From: Patrick Eagles
Date: Tue, 7 Jul 2026 20:36:08 -0300
X-Gm-Features: AVVi8CcCnIW_I5SsAwifTpVhUZkGJ19J_k0iTYl9B6lDXmn8O143ZhaY_H-mUD0
Message-ID:
Subject: Good Day
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000a961d806560ddbe4"
Bcc: doctor@nk.ca
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good morning, I hope you received my previous message to you
? Pls reply . Good morning, I hope you received my previous message to you
? Pls reply .
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.218.41 listed in dnsbl.ahbl.org]
[209.85.218.41 listed in dnsbl.ahbl.org]
[209.85.218.41 listed in dnsbl.ahbl.org]
[209.85.218.41 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.218.41 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.218.41 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.218.41 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.218.41 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[whoreliefund2022(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[eaglespatrick5(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.41 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Good Day
--000000000000a961d806560ddbe4
Content-Type: text/plain; charset="UTF-8"
Good morning, I hope you received my previous message to you ? Pls reply .
--000000000000a961d806560ddbe4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=3D"font-family:"Google Sans",Roboto,RobotoDraft,Helvetica,Arial,=
sans-serif;direction:ltr;margin:8px 0px 0px;padding:0px;font-size:0.875rem;=
overflow-x:hidden">
le=3D"direction:ltr;font-variant:normal;font-size-adjust:none;font-kerning:=
auto;font-feature-settings:normal;font-stretch:normal;font-size:small;line-=
height:1.5;font-family:Arial,Helvetica,sans-serif;overflow:auto hidden">
v id=3D"gmail-avWBGd-18">
Good morning, I hope you received=
my previous message to you ? Pls reply .
ple-interchange-newline">
--000000000000a961d806560ddbe4--
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Jul 2026 17:44:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whFRt-00000000EHo-3KBd
for dave@doctor.nl2k.ab.ca;
Tue, 07 Jul 2026 17:43:33 -0600
Resent-From: The Doctor
Resent-Date: Tue, 7 Jul 2026 17:43:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f41.google.com ([209.85.218.41]:50301)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from )
id 1whFM3-00000000DjC-2iHB
for doctor@nk.ca;
Tue, 07 Jul 2026 17:37:33 -0600
Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-c1276f8414bso5984666b.0
for ; Tue, 07 Jul 2026 16:36:27 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1783467380; cv=none;
d=google.com; s=arc-20260327;
b=m4bZIshYL/Y9g+F9T+Sy//YyGo9TWaxHUBMbIAFGPmG09JBjWYJQcaOGoHR2R8C/US
UnZJ/n9hpg/qQ/godCaPGHmT1nnOK6tftQtXLB26bjoGewo0gGr5mxHuariiRSgkBwNx
u57QYMFyg7LxQiNLdOQ475PbK/sOhIKPP4w5e02VDtm0N26zirApWVBFf22QvDD43fFF
XImamdkdwHqMFeezDc4LLYf3MdT3qXvLIPr/H7+EbLqNho5XyqonbYmf97+DJDdk7nXO
nEn9LP7osJJ8k3aLTR8R1eM+hXlXiZmrtmQHTykCm4H4TnMTkxqvusS4G3o2kIgvyGK+
TS2g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;
fh=OQ46c1PzsJkng+bk9UdWxmIgl/cFRynZeJQlAMibJO4=;
b=MskBl7iMKRp7iw9pA0A5c/M7Fk+hTezjfrAeUVuM4O3HW7LFi7KtVgxKTuI0pACKoL
/dm6gDrRDxNqT3CvUoK57PkgmZ/Oqjw/tfXvgcCI+YG+udRV/cFXzRqFVLn3yMWcNS3G
VzWO7RI26u8PrA5SerxNoVo1nHodFF29UiVxvY6ss7Q0IBqrLOSGdp0KMwJCNmJoQom5
9btnChuM7yB7FtnOa/yN4PyBgdgHz77UOhPAxQsxDUvC2+t6/h2Nn7O9PluE+p+lZti2
yBxWayNVBPLp5iIREY0SiDiCqkERgnT3eOQ0DL2V/6KeO/EzaybUvYLEROsnmd3t0gSA
becg==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1783467380; x=1784072180; darn=nk.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;
b=RVEsGKYC+5x3LF2spOmNPwq6AK0HfsEmxsTUWkF9kdYy1WMx29sbEkdvhJA/g8jeYz
57Y4DnbyvzUSkNVSHJ9jTKX3ndQvf1/+cTaA7JaHv59ym+gc7NZ6FY1t8IRReLt044n0
XNbhKOIRI93R6+Mzt+ETQLpda/uKo16+mUfIYFW1/S/fsujdcPTsC6ICy9KYbNS0m9Fo
CPHX7O9BhXAdq6O+fUz7R7vjBzpSB/YTCGexjwpZJNM0/JMHq/vPTmy2QzbOD8UffW7X
Oz0qLE42D2ARgYG6wAmbu0ps1I0MvmcX2+5SYN4uRJUHPpwG52SV+J/fwxrDgEHfm2nw
dw4w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1783467380; x=1784072180;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;
b=VXqoER291MRUTth9uiWxLA8pLpxmuLxUoVTAcwuWcNIlfQ/ZWtopcLiQH0ZrYuqsTn
qY/yWalQEfJbS9lF61EOHMozGVYSG5kZK1L81KC4jXTvx74cbNfZW9q++USAaZy9OPd8
WVoj+yjLxRMaLO0W2AEAaitGL3Y+Orf8HL+xWG2RdnVVVZzeA4z+JYvaskZ6nKM1U7EP
PNLLugzJvPf082QxrDnfYHF2LKU4tqJZjMNNov3A5hBVPbhB8/2ikTqKuiVZ88uZOmlD
vz1lyY+aVVT52mZQi3FQnQtgk0CMUbqxMtS131RQhpP6bZ9RnhjRi1dFs/NO2fD9Kxou
rTxg==
X-Forwarded-Encrypted: i=1; AHgh+RqQzD2bMpP8mSt1ppL5zuJXMCYn6b5Xjz8tPfEFmBwIuVDYs/6o2s+uio4Drj+nT6EQYnW+Gbw=@nk.ca
X-Gm-Message-State: AOJu0YxN46zVPQ3WbWy6G2Nq06ZZGwtKvx9TfGOvqj6yV1qglMywmCJG
qcsclmLUUnBvQWayoHAqRkbCxD+nYcZVgdpq0I/7aClovjo9EF+kIBVi1tejLjmu5PJ7tSK1F6l
Wz8xzvZRuD2nQAhw33SWHwjuENTvPVHc=
X-Gm-Gg: AfdE7cmWZzktscs2njOkO5ALBW/cwxjSY7WMrNcaRuj2gRnxpHzlatOKWe+ELRzO06l
LvnsmY7bW8GYdByO1fzxvaWpTQjXIMuoI/YHL9xnCgeqdXuVZJpkpIjNAD2v653p8Q5GVS8F+Eo
LKXTBbPwr9yV11EWEGlOcQb+wnJD3g757DXMRN0Z4kyn9DXryk3Ke+NvtmSxiKjyUaP8881JjIr
gSMBsUMnMwUfzH47vbMTIYoJBc5yUiRMRNlHJQX5uuSxMWCaL9W5dh0uRsuoZ9bgn6xSm0=
X-Received: by 2002:a17:907:6e8e:b0:c12:7d53:cc88 with SMTP id
a640c23a62f3a-c15ce22a26dmr7815866b.58.1783467380137; Tue, 07 Jul 2026
16:36:20 -0700 (PDT)
MIME-Version: 1.0
From: Patrick Eagles
Date: Tue, 7 Jul 2026 20:36:08 -0300
X-Gm-Features: AVVi8CcCnIW_I5SsAwifTpVhUZkGJ19J_k0iTYl9B6lDXmn8O143ZhaY_H-mUD0
Message-ID:
Subject: Good Day
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000a961d806560ddbe4"
Bcc: doctor@nk.ca
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good morning, I hope you received my previous message to you
? Pls reply . Good morning, I hope you received my previous message to you
? Pls reply .
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.218.41 listed in dnsbl.ahbl.org]
[209.85.218.41 listed in dnsbl.ahbl.org]
[209.85.218.41 listed in dnsbl.ahbl.org]
[209.85.218.41 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.218.41 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.218.41 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.218.41 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.218.41 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[whoreliefund2022(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[eaglespatrick5(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.41 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Good Day
--000000000000a961d806560ddbe4
Content-Type: text/plain; charset="UTF-8"
Good morning, I hope you received my previous message to you ? Pls reply .
--000000000000a961d806560ddbe4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=3D"font-family:"Google Sans",Roboto,RobotoDraft,Helvetica,Arial,=
sans-serif;direction:ltr;margin:8px 0px 0px;padding:0px;font-size:0.875rem;=
overflow-x:hidden">
le=3D"direction:ltr;font-variant:normal;font-size-adjust:none;font-kerning:=
auto;font-feature-settings:normal;font-stretch:normal;font-size:small;line-=
height:1.5;font-family:Arial,Helvetica,sans-serif;overflow:auto hidden">
v id=3D"gmail-avWBGd-18">
Good morning, I hope you received=
my previous message to you ? Pls reply .
ple-interchange-newline">
--000000000000a961d806560ddbe4--