X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 16 Apr 2026 06:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDM5t-00000000MUV-0u2A

for dave@doctor.nl2k.ab.ca;

Thu, 16 Apr 2026 06:45:17 -0600

Resent-From: The Doctor

Resent-Date: Thu, 16 Apr 2026 06:45:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f193.google.com ([209.85.210.193]:53711)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDHpX-000000004kY-3Nze

for sales@nk.ca;

Thu, 16 Apr 2026 02:12:17 -0600

Received: by mail-pf1-f193.google.com with SMTP id d2e1a72fcca58-82cf636dac8so3417492b3a.3

for ; Thu, 16 Apr 2026 01:11:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=oxygentech.in; s=google; t=1776327074; x=1776931874; darn=nk.ca;

h=subject:to:from:mime-version:date:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=mBmjuQ6BWSy4ndmv8W4VE2QjTnOREf8F+/4/YF/VOUc=;

b=nnWGcC/0b3PtKWyBMubtTHdaQcC/riAhaD8lZoGC8vlGqPHQWtQ93leu7z+yhmTCLg

ZHCBHdEajAIALklhXIoqgapHMAgfPexK6EMBL2EM5lkIXFmm05RKwVgkL97VKVOBmacQ

JxN6AE6yTbZSUd4gSzCe37L4FQafCDCmQ6AscVIZAb8NSs6BNhsCPXPNkH9cUgUi+s7w

qNSTTiZXix6+FmwDhiIbIqu3nkNegbn1caGgq+j6nSTd9+yzOyifEMiZALrh3TbfkX8k

No+xVPFEM+i2+u2hGQoIs01wLUglgEeTaBEhHc20LZdNmQhb8ZCr2UR0TvEnkWD0zX4U

EJ6g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776327074; x=1776931874;

h=subject:to:from:mime-version:date:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=mBmjuQ6BWSy4ndmv8W4VE2QjTnOREf8F+/4/YF/VOUc=;

b=da9S8sA7fpJSNzKcipLbSft7yTlZ9TkD/HQ0ZjHuB3TF0HqYYduyJeF3gtDnrWBfCK

fb4SfmZYwAi5ol6YA9bJxrsLj1+LBMTarOh3L/X6lUEoO5ILX29d6FLnmwxZdhsDFcTT

MsJpizgfw6bXuwaSk2Ou/9xng2e2VlnxjQ1MXurxPjwlKtM+qvB6yD11ALBvDm9u02Br

D1Y82TaTGifOXGIRhzO1t7dCKFZcazq1/mlY8WUKBLYLR4YcBhh6Ww/YRtRlJnbv3Gba

GaK84vK8n6/cfqR3ifT4QRUk05ysFJQrPSqZv7KEsthKLdenbi2ktNEU1QQx2qOg1ka5

mHZA==

X-Gm-Message-State: AOJu0YyRvKFMdkEi/t166TFdKDRCUDcaTIWSDZDMPuTDxwIWM2iLYhtW

TlOrrOQdwav1N/1IqYTIpQ5GeqATZeNIIcVNy3SvwFZHxecZpXOosxGhddIZCZqSCGbUlt4t60d

sOxhJGnQ=

X-Gm-Gg: AeBDievQXj8sONYnb8GnUwu+BrHngbTDKPvfU0w6WNOgQR9Lp5HqAziQhGxgVgrf0zf

7CDMgt9jncSBkUw8hkXjq+C3R1Mujti4T7j96IAZwJ8qDjFJ0Wv1nD1ZrU0wkBz48BMu/jt0eCF

xR/LZcwb0sNbzzgmSWmp2itEv9Bs2DdtwmN8y9Jh77NC4uLCcEIGGHAkNnXXXkPV50O1nCidfzV

SAhZ8ichK5qxB1Ey8C8psifb0ZC37DnTCCgRQtt0ry8jOJrP0XjbmaOcsFoY1HAU4Ve5UZXRoWg

zPhbweOOHYB0qRhhafMxQEg9erpQxB37L0FsZshaXGGpOh6zdcnvUHVtWt5pcAhe6Cdpy5xT+MF

3i+3C9c6S+2v1jGPRq1fGrw1AFVZgb6h1gqcCX5rRfCmjkQhXgZ0ScjC2uDiiYbQSs9o5uf5IRW

Iz+EeWDfK5DOXO9zkxXqin9Jaso2fQcqEnNcdeZCH5flPByZPE2o9g+nztJvI=

X-Received: by 2002:aa7:88c1:0:b0:82f:6cd5:1ead with SMTP id d2e1a72fcca58-82f6cd5249bmr4739204b3a.16.1776327073471;

Thu, 16 Apr 2026 01:11:13 -0700 (PDT)

Received: from DESKTOP-OUDJMQ8.lan ([2409:4090:804b:7e02:5441:37c8:48a8:b9a8])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-82f738b399bsm2422367b3a.8.2026.04.16.01.11.12

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Thu, 16 Apr 2026 01:11:13 -0700 (PDT)

Message-ID: <69e099a1.a70a0220.147f44.a2a2@mx.google.com>

Date: Thu, 16 Apr 2026 01:11:13 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============3357741223730013475=="

MIME-Version: 1.0

From: Noelle

To: sales@nk.ca

Subject: Programmer Suggestion - nk.ca ??

X-Spam_score: 15.0

X-Spam_score_int: 150

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, following up briefly would love to hear your thoughts

when you have a moment. Best, Noelle On Monday, 09 March 2026 at 06:35, Noelle

wrote: Hi, I recently had a look at your website www.nk.ca and the services

you offer. It looks like a great platform and I really like the concept you’re

building.



Content analysis details: (15.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

[209.85.210.193 listed in dnsbl.ahbl.org]

[209.85.210.193 listed in dnsbl.ahbl.org]

[209.85.210.193 listed in dnsbl.ahbl.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in dnsbl.ahbl.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in dnsbl.ahbl.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in dnsbl.ahbl.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.193 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in will-spam-for-food.eu.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in will-spam-for-food.eu.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in will-spam-for-food.eu.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in will-spam-for-food.eu.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in will-spam-for-food.eu.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in will-spam-for-food.eu.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in will-spam-for-food.eu.org]

[2409:4090:804b:7e02:5441:37c8:48a8:b9a8 listed]

[in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

[209.85.210.193 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.193 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: oxygentech.in]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: oxygentech.in]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: oxygentech.in]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.193 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Programmer Suggestion - nk.ca ??



Hi, following up briefly would love to hear your thoughts when you have a moment.



Best,

Noelle

On Monday, 09 March 2026 at 06:35, Noelle wrote:

Hi,



I recently had a look at your website www.nk.ca and the services you offer. It looks like a great platform and I really like the concept you’re building.



I’m Noelle, an iOS & Android developer with 8+ years of experience. I help businesses turn their ideas into scalable mobile apps.



If you’re planning to build a mobile app or improve your current digital product, I’d be happy to share some ideas and relevant work examples.

Looking forward to connecting.

Best regards,

Noelle

App Developer

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 19:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDBZx-000000002EX-2pml

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 19:31:37 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 19:31:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f74.google.com ([209.85.161.74]:52480)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD7rI-00000000EKN-3IKU

for doctor@nl2k.ab.ca;

Wed, 15 Apr 2026 15:33:26 -0600

Received: by mail-oo1-f74.google.com with SMTP id 006d021491bc7-688c232dd72so12622436eaf.1

for ; Wed, 15 Apr 2026 14:32:28 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1776288742; x=1776893542; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=F66GNn2UA3912mETT2w9yTSr8QyzPTg7oG/JMZxr0Ro=;

b=jLNIpcK4+M1SfVJ9x3BqAsa8ln2yKYShWu5FhMFBTFCW2ZAaMIKOP9pJv4isP+I8T6

sVA/KmGR+s9apXGkg3+ohsJ/P0zkvHLqQiaqO8YXm3Kz3ST4Nph2O1jLbZ5YYGCh+StD

GP9Wtxft1AW2DX1Ewc/LWOqrmAoVD7oLUqRkuOl1KbgXzr4DYGntW5hO8i6CUNQKprTV

Ziti1wnmPZepqxSS3PwkxPnhhzqW8moiR6g75aGcQlblQUdgLWsrokb1L99xscIZISIv

085Si5whwnB6XUZytPihabGJDRdrheFrWOeaQ1XfVxuQaU8LnPRPAYKOQ2bA8KL1I+S1

Xnog==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bajikj-com.20251104.gappssmtp.com; s=20251104; t=1776288742; x=1776893542; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=F66GNn2UA3912mETT2w9yTSr8QyzPTg7oG/JMZxr0Ro=;

b=QwzhK9baeVbBoR7LLuREQFNdIswBtHFBhsEA5qG08T9qS5Il4rlW7z2+OM8x6kOzfY

pAxYaBJXbcypDRRVJFNjznfH2BE+/rvtXNzfXBVtUV0fF6m5JpSlZIQR9j6BjPlxtr8Z

4R1cwgg+nd6wfaRMTxN8tW2I3CODfDqIQ4OKh8GqHO08AqvGS4a8j4uPEYzbMJZsfa6w

qvL5Y1aon3aMaEW695VzbXaai4IydZnOqRyix23CbSASTwN0JmCxBMJSkukba+wOMNQk

VreIlwJj61eSOyTAHJ0ZbG8qvGnrne5J1nHIRMK7B4OPO6U55Y5teY79D/U8dY6vW8GV

qM/w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776288742; x=1776893542;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=F66GNn2UA3912mETT2w9yTSr8QyzPTg7oG/JMZxr0Ro=;

b=UwGYvbEFBua/sUd9+wiwZ/ARN2XJVv9NZNf7d7KhT8Z8CIb+hmMSTnHLmYGafP9L63

RN95rm97tMe7b7iho0zfrsFTlTyvRf/XvbkFoeVd9fkqtgoIlvhw5qJODcRDEN7xtcV3

zVUi+mD+O9YWiFUPo07JHwQuuKfXMaUFUuJPvzFHn1GZFaeqlrH35nJZZzoq81aQremn

iu8OlQfd0DTNTrr96CELHVTELSKupSjk9KtvZksvX9vLt5rrQEHWCzupLeeu3cbfaK4V

1HnbBFEOMDO4lVQ1NbnqAL+vZONM0jZAwREfDGYG/w4iiNev/9vvTtB2eyDFbvLeOC99

lWEQ==

X-Forwarded-Encrypted: i=1; AFNElJ+l7jwMlbAzRD3Nju34qXeZFu2WTcoMH3iuCELHvIJlBxhDwAff8cu5F8PPK3f0ljwHnHDGTXk=@nl2k.ab.ca

X-Gm-Message-State: AOJu0Yz4GXcVOl2Ld/f/OiaRj4n7DZA6kVsBC7PTt+pJOAw8/+d3pd6j

uD8YfsJG4V8EgrpMOjeqIoqSMKh9GyX2PpicZGjbbmFR0/4jdDpwdJmDPAU+WdaIA1gvT17ho5J

9qVr0gEtTN2xtl4HUTOygBlGPMO5BO5n/TmEto5+6jLsnfA==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:4b15:b0:67e:2ff7:2a6e with SMTP id

006d021491bc7-68be6335cf7mt15037228eaf.18.1776288742338; Wed, 15 Apr 2026

14:32:22 -0700 (PDT)

Reply-To: ANDERSONHACKNEY Wolkov

Sender: Google Calendar

Message-ID:

Date: Wed, 15 Apr 2026 21:32:22 +0000

Subject: subscription renewal is scheduled soon

From: ANDERSONHACKNEY Wolkov

Content-Type: multipart/alternative; boundary="00000000000083bd61064f8673ea"

X-Spam_score: 12.3

X-Spam_score_int: 123

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: subscription renewal is scheduled soon subscription renewal

is scheduled soon Thursday Apr 16, 2026 â‹… 6:32am Eastern Time - New York

Dear Account Holder,



Content analysis details: (12.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.74 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.74 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} subscription renewal is scheduled soon





subscription renewal is scheduled soon





subscription renewal is scheduled soon

subscription renewal is scheduled soon

Thursday Apr 16, 2026 ⋅ 6:32am (Eastern Time - New York)

Dear Account Holder,



Kindly note that your Avas t One subscription will renew on Thursday, 16 April 2026. The total amount of $489.88 will be processed according to your billing preferences.



**Transaction Analytics Center:**



Quantity: x2 Device

Product: CyberMatrix Guard

Subscription Length: Four Years

Billing Method: Auto Debit

* Total Amount Due: $489.88



Client ID: WQ6H8VM4HD

Activation Key: bb023ee1-4ee7-41c6-9e3e-05244f1b3f1f



If you intend to modify or cancel your subscription, please do so at least 24 hours in advance.



For any queries, please contact 1{810} 219-4169.



With respect,,

Avast Premium

Manage by: Lakita Stafford

Support Desk Number: 1{810} 219-4169

Compliance Team: 6450A Cr 305 South Martinez Lake Az 85365 USA

Service Timing: 6 AM – 6 PM

Guests

(Guest list has been hidden at organizer's request)

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 20:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDCfh-000000006BA-2y8o

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 20:41:37 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 20:41:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from belcat.hlubina.com ([178.238.45.141]:34832 helo=cloud7.inett.no)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDCGj-000000004H5-0j8Z

for sales@nk.ca;

Wed, 15 Apr 2026 20:15:57 -0600

Received: by cloud7.inett.no (Postfix, from userid 33)

id 0163E31180C; Wed, 15 Apr 2026 16:27:24 +0000 (UTC)

To: sales@nk.ca

Subject: =?UTF-8?Q?Alerte_de_s=C3=A9curit=C3=A9_:_mise_=C3=A0_jour_de_s=C3=A9curit?= =?UTF-8?Q?=C3=A9_urgente_/_Security_Alert:_Emergency_Security_Update.?=

Date: Wed, 15 Apr 2026 15:45:01 +0000

From: =?UTF-8?Q?Banque_Nationale_du_Canada_=7C_National_Bank_of_Canada=C2=A9?=

Message-ID: <03f37f76a78a768fdc6218ec00db195b@nbc.ca>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="16228124ab11741e0af7f7faf3121225c"

Content-Transfer-Encoding: 8bit

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: National Bank of Canada English version follows



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

[178.238.45.141 listed in dnsbl.ahbl.org]

[178.238.45.141 listed in dnsbl.ahbl.org]

[178.238.45.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[178.238.45.141 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: scanned.page]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[178.238.45.141 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[178.238.45.141 listed in sa-trusted.bondedsender.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: scanned.page]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[178.238.45.141 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[178.238.45.141 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

[178.238.45.141 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.8 A_HREF_NOWHERE A link tag with empty href

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?Q?Alerte_de_s=C3=A9curit=C3=A9_:_mise_=C3=A0_jour_de_s=C3=A9curit?= =?UTF-8?Q?=C3=A9_urgente_/_Security_Alert:_Emergency_Security_Update.?=



National Bank of Canada



English version follows

Banque Nationale du Canada



Nos termes et conditions d'utilisation ont changé !

Bonjour sales@nk.ca,



Dans le cadre de notre nouvelle réglementation pour l'année 2026, nous prions tous nos utilisateurs de bien vouloir se conformer aux nouvelles directives de sécurité afin de garantir une plus grande sécurité pour leurs transactions et de lutter contre le blanchiment d'argent, conformément à nos conditions générales d'utilisation, en cliquant sur le bouton ci-dessous depuis votre téléphone portable, votre tablette ou votre ordinateur :

Mettre à jour maintenant



Veuillez ne pas répondre à ce courriel.



Ce courriel est destiné à sales@nk.ca.





La Banque Nationale peut toutefois insérer des liens vous redirigeant vers des pages de notre plateforme sécurisée dans ses messages.



MD BANQUE NATIONALE et le logo BANQUE NATIONALE sont des marques de commerce déposées de la Banque Nationale du Canada.



Conditions d’utilisation | Protection des renseignements personnels | ABC de sécurité



Banque Nationale du Canada,

800, rue Saint-Jacques,

Montréal, Québec, H3C 1A3

National Bank of Canada



Our Terms and Conditions of use have changed!

Hello sales@nk.ca,



As part of our new regulations for 2026, we ask all our users to comply with the new security guidelines to ensure greater security for their transactions and to combat money laundering, in accordance with our Terms of Service, by clicking the button below from your smartphone, tablet, or computer:

Update now



Please do not reply to this email.



This email is intended for sales@nk.ca.





National Bank may, however, insert redirection links to our secure plateform webpages in its communications.



® NATIONAL BANK and the NATIONAL BANK logo are registered trademarks of National Bank of Canada.







Terms of Use | Privacy Policy | ABCs of Security







National Bank of Canada,

800 Saint-Jacques Street,

Montreal, Quebec, H3C 1A3

: initial; text-decoration-style: initial; text-decoration-color: initial;"=

data-mce-style=3D"color: #000000; font-family: Verdana, Arial, Helvetica, =

sans-serif; font-size: 13.3333px; font-style: normal; font-variant-ligature=

s: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: nor=

mal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none;=

widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space:=

normal; background-color: #ffffff; text-decoration-thickness: initial; tex=

t-decoration-style: initial; text-decoration-color: initial;">We look forwa=

rd to the opportunity of working together and achieving new milestones in 2=

026.

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[13.213.174.202 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Emirates Flight Catering (EKFC) Invites You.



--=_a15a796c-8773-4163-afba-2f79bd4e760c

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit



Dear Valued Partner,



As Emirates Flight Catering (EKFC) continues its commitment to excellence in aviation and hospitality, we invite your company to join our network of trusted vendors. We partner only with suppliers who share our high standards for quality, reliability, and innovation.



If you are interested in becoming a registered vendor, please express your interest by contacting us mansour.a@emirateflight.com so we can provide the necessary registration documents, including the Vendor Questionnaire Form and Policy Assessment Letter.



We look forward to the opportunity of working together and achieving new milestones in 2026.



Warm regards,

Mansour Abdullah

Vendor Coordinator, Procurement & Contract

Emirates Flight Catering (EKFC)

mansour.a@emirateflight.com

P.O. Box 22525

Dubai, United Arab Emirates



--=_a15a796c-8773-4163-afba-2f79bd4e760c

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 19:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wDBZk-000000002EC-1jGy

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 19:31:24 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 19:31:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from repost.tmes-sg.trendmicro.com ([13.213.174.202]:51849)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD9bc-00000000Lwj-0Za0

for root@nk.ca;

Wed, 15 Apr 2026 17:25:21 -0600

Received: from 148.113.12.218_.trendmicro.com (unknown [172.25.200.48])

by repost.tmes-sg.trendmicro.com (Postfix) with SMTP id B817B10000698;

Wed, 15 Apr 2026 23:24:15 +0000 (UTC)

X-TM-MAIL-RECEIVED-TIME: 1776295447.695000

X-TM-MAIL-UUID: ca597160-8dd9-428c-806e-69c2f873ab44

Received: from mail.matrixbsindia.com (unknown [148.113.12.218])

by repre.tmes-sg.trendmicro.com (Trend Micro Email Security) with ESMTPS id A9DEA100002FD;

Wed, 15 Apr 2026 23:24:07 +0000 (UTC)

Received: from localhost (localhost [127.0.0.1])

by mail.matrixbsindia.com (Postfix) with ESMTP id A85891026F697;

Wed, 15 Apr 2026 19:27:10 +0530 (IST)

Received: from mail.matrixbsindia.com ([127.0.0.1])

by localhost (mail.matrixbsindia.com [127.0.0.1]) (amavis, port 10032)

with ESMTP id sY8OsfNfFWDY; Wed, 15 Apr 2026 19:27:10 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by mail.matrixbsindia.com (Postfix) with ESMTP id ED0DD1027433A;

Wed, 15 Apr 2026 19:27:09 +0530 (IST)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.matrixbsindia.com ED0DD1027433A

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=matrixbsindia.com;

s=46E7D5C2-22FB-11F1-83C8-1A2CD42F77B3; t=1776261430;

bh=WX4ay2hzjcCXkyZ7rKo+iROC6XbIHrBk1Ri+y5h3W+M=;

h=Date:From:Message-ID:MIME-Version;

b=WvDTGGu7X+qOoh5QDzFB6rX79zzCqUJdJP9y9Pm6ICybH/PhUg0m0ooN+x6KPmTCC

20i83nxQ8Jd06tVKz/kiI7uH78tE6Fq58QS+Qc4IT0se4UmLk2WVRp3ensLskt7K4d

euQSpJDLbYganiG+KXA16BBUL3DfQnXZY7MObfknTeQDtXkRCwzZatJW7rOX3aaDet

lOp/peNlXYjghbK71UvL3tl+kNCGaau6FK3PgDl9WZ9/zVJt7BNJISHDM3prhuaws/

5qlSSKcNPxvnlfdRK7c5Puctt6nQUqa8qnfZtr3ljEhvtJzWsj0tTKW9wwbozfD8Z1

2uKaB08a8hX6g==

X-Virus-Scanned: amavis at mail.matrixbsindia.com

Received: from mail.matrixbsindia.com ([127.0.0.1])

by localhost (mail.matrixbsindia.com [127.0.0.1]) (amavis, port 10026)

with ESMTP id sQ6A9SLED4JQ; Wed, 15 Apr 2026 19:27:09 +0530 (IST)

Received: from mail.matrixbsindia.com (mail.matrixbsindia.com [148.113.12.218])

by mail.matrixbsindia.com (Postfix) with ESMTP id 0B79010242DA2;

Wed, 15 Apr 2026 19:27:09 +0530 (IST)

Date: Wed, 15 Apr 2026 19:27:09 +0530 (IST)

From: Mansour Abdullah

Reply-To: Mansour Abdullah

Message-ID: <1526707590.246609.1776261429021.JavaMail.zimbra@matrixbsindia.com>

Subject: Emirates Flight Catering (EKFC) Invites You.

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_a15a796c-8773-4163-afba-2f79bd4e760c"

X-Originating-IP: [148.113.12.218]

X-Mailer: Zimbra 8.8.15_GA_4717 (ZimbraWebClient - GC146 (Win)/8.8.15_GA_4717)

Thread-Index: +OCcA41iRVm9HlOljxV+KPt/VuPR0Q==

Thread-Topic: Emirates Flight Catering (EKFC) Invites You.

X-TM-AS-ERS: 148.113.12.218-0.0.0.0

X-TMASE-Version: StarCloud-1.3-9.2.1012-29882.003

X-TMASE-Result: 10--7.288100-7.000000

X-TMASE-MatchedRID: IEKnhW4+dAyUljO9L4lr6gn0lYEeFjuFRtAkSLcpSW/D5bONZUw20clt

D48UWBue1POoAiSkNKtJObIohRCgw1BiJadoHEi3u/wZEqxodZYKxicnNfBGihNjOrRs2JZOEnn

VL/WKKp5/8mw9yF2bKgO3/HJr2EneWmhlXXkrF0uJH8+BWMwgwc+5NKCBTNQNYF2yETON4N8wO7

nOxksNrj9mVpxT6+sujdPu0Ap7+o+G/zKy9nphcshsmkFzr0ceKYobRhdR0GGFxdzLLCkIjhSAV

F5ONnpLZx9ltQs20IbNoGswleq5cS7njpXaoqNaFU5WXGDTR4u2i3k2xHURSo2DpnyjJA+2zEmA

+OOzl5HVpqEcU5aSZfp1u8Y9RwEzxUle0zZp3MY2eDSq/07Mx+ac83o07WJq5TmzyZbI2jHYmzQ

vUsD+uSYKk1JiVJr6tFyEOhRbRirwaMIXsaQmMEI9AEPfED/dqvJX/aNGr9fNRJskm2Jy4rvc+J

sSrEmxPG6hZyIQe6dcCdOe5Y5LZrfEgpY4HY/lJPlTeUnhPwrRDIYuXQcMRGKaajCLWxID8N/TU

LCY4d+5iMh3ZH8eFXTuUCT/rhZacYO7LzLWqS62FEUBwKd8ymK5lgAIAOYL4u2zO5mJQC1cwM8a

eL4Qwsea+aOJHFbsgMP8nbo3B24=

X-TMASE-XGENCLOUD: 1faaba7f-1427-484a-89ea-7ee489639324-0-0-200-0

X-TM-Deliver-Signature: 7FFA0F4409ABE5DACE046B03FDFDB454

X-TM-Addin-Auth: Vl4aRCOsfa3vY2btk2AN81qSVDidpNPBUQFZkYg2Ggs76afeMtyEky9q5PI

wQ3IH3sZaAXbsYFNvLx8cINoiszVFBWXHxaTjfmJOw+/9SI+mqCFGB9xuFE6q04QV3ETWDkEyxi

+kXbeQwK+xwzBajjXZRZdgLhRlUP/HriAB0UQLoQJLRy5x2ajco/l1zUGI/cGaod4bSNo+Yg4pv

GfDwjkRBEiLpejFNLxrtIBWekz5oBJo8Ya4Lv3mNBKkkqkplOT6joHmgMPxZTmgimlTT6qDFF/2

Fmq9pzlSBSBCu66V3LfAks3SpNzm+dsO5VOV.Be9SPv5S7q0BeB+RAfXuK9siAZNQtAkust5/5d

xb5Hv/FquCEeuMghkTXbFSNZv0znnLqHX7lje2LFCOh3mtTqUmN12u0NakTCc6dQ3owWUAeLU2e

CSo1+enx09wXkfHMnklcaTWUKaZTvE1cgr3zpRiBjz/enLoZa01s7jj4IC5odVO2qGLJgblyxSw

tlx+XbSQFAkFFPMAglLPZFYUgFefJbI2+RCXKbZruQ5kcjK9e7RVsLhyd5tl1cHSo6s7U1WH7Ez

JkfX3tRtbD3sUSLOUqt57GpCUBx4++hU3oSC7OAPMORBrK1gYIkyGTeup7ohKfCzeZ2PbaJYBPx

eZYQ==

X-TM-Addin-ProductCode: EMS

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Valued Partner, As Emirates Flight Catering (EKFC) continues

its commitment to excellence in aviation and hospitality, we invite your

company to join our network of trusted vendors. We partner only with suppliers

who [...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[13.213.174.202 listed in dnsbl.ahbl.org]

[13.213.174.202 listed in dnsbl.ahbl.org]

[13.213.174.202 listed in dnsbl.ahbl.org]

[13.213.174.202 listed in dnsbl.ahbl.org]

[148.113.12.218 listed in dnsbl.ahbl.org]

[148.113.12.218 listed in dnsbl.ahbl.org]

[148.113.12.218 listed in dnsbl.ahbl.org]

[148.113.12.218 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[13.213.174.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[13.213.174.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[13.213.174.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[13.213.174.202 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[148.113.12.218 listed in will-spam-for-food.eu.org]

[148.113.12.218 listed in will-spam-for-food.eu.org]

[148.113.12.218 listed in will-spam-for-food.eu.org]

[148.113.12.218 listed in will-spam-for-food.eu.org]

[148.113.12.218 listed in will-spam-for-food.eu.org]

[148.113.12.218 listed in will-spam-for-food.eu.org]

[148.113.12.218 listed in will-spam-for-food.eu.org]

[148.113.12.218 listed in will-spam-for-food.eu.org]

[13.213.174.202 listed in will-spam-for-food.eu.org]

[13.213.174.202 listed in will-spam-for-food.eu.org]

[13.213.174.202 listed in will-spam-for-food.eu.org]

[13.213.174.202 listed in will-spam-for-food.eu.org]

[13.213.174.202 listed in will-spam-for-food.eu.org]

[13.213.174.202 listed in will-spam-for-food.eu.org]

[13.213.174.202 listed in will-spam-for-food.eu.org]

[13.213.174.202 listed in will-spam-for-food.eu.org]

Content analysis details: (18.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.52 listed in dnsbl.ahbl.org]

[209.85.128.52 listed in dnsbl.ahbl.org]

[209.85.128.52 listed in dnsbl.ahbl.org]

[209.85.128.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.52 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.52 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.52 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.52 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.52 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.52 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.52 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[ashaalqaddfi10(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[yomiano3(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[yomiano3(at)gmail.com]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.5 MILLION_USD BODY: Talks about millions of dollars

1.7 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.9 URG_BIZ BODY: Contains urgent matter

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dear Friend,



--000000000000f88b6e064f850559

Content-Type: text/plain; charset="UTF-8"



Dear Friend,



I came across your mail contact prior to a private search while in need of

your assistance. I am Aisha Qaddafi, the only biological Daughter of Former

President of Libya Col. Qaddafi. Am a single Mother and a Widow with three

Children.



I have investment funds worth Twenty Seven Million Five Hundred Thousand

United State Dollar 27.500.000.00 and i need a trusted investment

Manager/Partner because of my current refugee status, however, I am

interested in you for investment project assistance in your country,



If you are willing to handle this project on my behalf kindly reply

urgently to enable me to provide you more information



Your Urgent Reply Will Be Appreciated



Best Regards



Mrs Aisha Al-Qaddafi



--000000000000f88b6e064f850559

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

=C2=A0Dear Friend,

I came across your mail contact =

prior to a private search while in need of your assistance. I am Aisha Qadd=

afi, the only biological Daughter of Former President of Libya Col. Qaddafi=

. Am a single Mother and a Widow with three Children.

I have investm=

ent funds worth Twenty Seven Million Five Hundred Thousand United State Dol=

lar 27.500.000.00 =C2=A0and i need a trusted investment Manager/Partner bec=

ause of my current refugee status, however, I am interested in you for inve=

stment project assistance in your country,

=C2=A0If you are willing =

to handle this project on my behalf kindly reply urgently to enable me to p=

rovide you more information

=C2=A0Your Urgent Reply Will Be Apprecia=

ted

=C2=A0Best Regards

=C2=A0Mrs Aisha Al-Qaddafi

--000000000000f88b6e064f850559--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 13:52:00 -0600

Received: from mail-wm1-f52.google.com ([209.85.128.52]:61552)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD6GP-00000000Pc0-1BTj

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 13:51:14 -0600

Received: by mail-wm1-f52.google.com with SMTP id 5b1f17b1804b1-488d2079582so66776155e9.2

for ; Wed, 15 Apr 2026 12:50:17 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1776282610; cv=none;

d=google.com; s=arc-20240605;

b=AyhUPfiXQlPHa97ZVjk88H44CItOG4ab06SmTe6Frlvwc27yaSIdcEN+QCTJ0tLGE9

Q9/7VrfBsRxnr9C5IVoSks7MFOObCxFWlF8+MgYrSxs2JOsj/yBO96fdz5Ksboud9LWD

QeUrEHmWb+c/Aq0Ylc1lwxkQsMEXVvCcW2YrbQE656kUjmQejNAcfQcbs2Fbs3TGWNSa

KmnuRuJ4eRq3WfdTV4tcnjQ2hxDC2RDSCmg2ASC5gZKqhKBIOtLskMPq/o7MAdFkQCn8

XhVEuFdmDiwqHhL2uheHUBNgja457JrLQwvL0AOpefAWgWSVv/R9NnINFiMCeNFKRxEW

CLug==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=7N9t/V8qrtKT0dBTIXzDarH4O+n4Dv65YRPt/Ay5Ph4=;

fh=a7gAUlILxhP6WjsluIfC0UENioULcn6bLs6ThXjWBaM=;

b=IubsW+co9btaqVzfzxrwnCluJDXduK/fU85Ms+Jt3NlKJjnNxxuE13j8WicxON4pW3

VvoFGa5sk5/20khzqrFkdsmYe++KZh6c1PLFpkyXzhsAsDpzt7PU/lhi7SR4VDL+6GdW

0YZwRyasGAjv+zJc5pxKVsrq1BEonqBp9YdX039ykbOiVITyFIatqsxt+xDLhNhC64IK

SD9WMBZreleLYpLlhPUkYjYGipMpMtj6j00T+Ouh2G05KMChNGqPHYcLy9X9n2y/T0yg

CZYPmFVKK6DI01ihsBrKL1t9uz8tB/kyKLanoisjk6oNA9fuuPU827I5hWSZD+WJdaUs

wChA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1776282610; x=1776887410; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=7N9t/V8qrtKT0dBTIXzDarH4O+n4Dv65YRPt/Ay5Ph4=;

b=O/G3Z9bZGxgnQOecAYbnTGuoUhZDozmmosoj/xgvxdw0HjmFHM1+whWdTyYKc25iov

Q7o3tpeffXrQJjiYyyvVAs3c2qabVpJHPBeU5z2v52I6BGU/bWn6kAZoLFahvxEzZpyq

FGGfHKYzpqA6Mbjn5lmseLLGK/gbGBo/Z+m3b5B5hoEWuC6Q4+FfJtTx7I+/hhTusCe5

mYIgFPUC2GZl0aboF28cJb1tE2HXkzc1WIOGpFjlUsfxuKiQ6ufscdY5LyLuo3MByLUq

g6d+VmgtoViV32jT1VN+LurH29hnVwwmBL0Bv5Ntrdg7T9Gi6ljRqEolfQY6YFyEGt4+

QS/g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776282610; x=1776887410;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=7N9t/V8qrtKT0dBTIXzDarH4O+n4Dv65YRPt/Ay5Ph4=;

b=kq2AvrblQQWQmrQqUC5MS546zi+IcAaHSPkFbdBdLo+F0n4cF9OanYVfTz3i47NTFe

Osio9mDhnJaR26dPNqFECy9M7r6NLG10tIveO7+dc2GnQjA2yuTrm9V7HP4IvAybcs1p

ZiuhltW9eGaVrXaPzDYThSQ9pLT32wLUba1PPHEgWxxAuRBU4FTsJ354fj2/tGaNcYEz

2pycOG1MIa47/Kg2necPU359tsE0vg2qQqUeubEiXMRQwx40Yd8Avbh2BnphEjwip0tH

W/eDmOtQA6/HDnM2GU0VUu79HE/Zlmn3AfFmtLAQyHN2cpoiwB0rVI9nj/aaSLrHesYo

H0+g==

X-Forwarded-Encrypted: i=1; AFNElJ+Arv223+DXS4jKM198oe3I6PsR8QVkH5FLY+w+O95KSDvtttBe/ruWDmfQd+ztS9331u0Z@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxmaZWY/hFnm9rm5sk3JrpcTRqw9SCREjO1OsCTZjFl0ki+2nmx

uQVyq0SAtegbOcg4pxsCh5Im81EQsM3CDQqFE5MwZ2c9BTPnBk6LBG+/uKXS7ly4EFzEK5KUddO

BEQ+RfAOjd/NN3s9dxo6QHLwln+sDY+A=

X-Gm-Gg: AeBDietgwymw5Q4B1tvoKw5NqF+OaaAoJwH7q8kFv6k0/tue65yb5Od3w7vi9Licveu

l0HMBTZbf2CPT84/1/OsFb9wgqFJt3XUWeyXC+8Abw4NMPtW9MU8k8rSqAu7YDrnNnmrYQsvNfV

Rsd9QSibOwa/x7yciKRtpJ8xQLLa3Rfji//OC6NREIr5RT1BintKOIk9DZCJjJm23IQcZl+3mUZ

+wiJlgdEMcO4cay6b8mgsa5PofALSyPMBjGnoCUEHl+c5z1aPQrLuP11UbPAYpmuQd3kKDxQYRp

ZuysIjM+Yo7yLa+zyCKCLo5SWbJ0E8pmzeH2X+F0mQ==

X-Received: by 2002:a05:600c:3149:b0:488:ae6c:42c6 with SMTP id

5b1f17b1804b1-488d684319emr317427215e9.14.1776282609681; Wed, 15 Apr 2026

12:50:09 -0700 (PDT)

MIME-Version: 1.0

Reply-To: ashaalqaddfi10@gmail.com

From: Mrs Aisha Al-Qaddafi

Date: Wed, 15 Apr 2026 12:49:55 -0700

X-Gm-Features: AQROBzC68gcDn6hOzfHkjWANV2Hh3Y322StwXMMuH8_jX2CeP_C-bMODl5tEB4c

Message-ID:

Subject: Dear Friend,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000f88b6e064f850559"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 18.7

X-Spam_score_int: 187

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I came across your mail contact prior to a private

search while in need of your assistance. I am Aisha Qaddafi, the only biological

Daughter of Former President of Libya Col. Qaddafi. Am a single Moth [...]

----186CF532869F87E12B4352AD4A4C

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



IDC CIO Awards Canada 2026: Nominations are now OPEN!





IDC CIO Awards Canada 2026

https://emas.idc.com/c/1pBBPJNbl5d6PpbrHMFQE6ArHD View this email online ht=

tps://emas.idc.com/q/1fergakmrnS3H1CojuhXTxL/wv



IDC Logo https://www.idc.com/



hero_image_link



Deadline: May 29, 2026 at 11:59 PM (ET)



Nominations are now OPEN!



We are thrilled to announce that the IDC CIO Awards Canada 2026

https://emas.idc.com/c/1hadWVTvxVLwtL8VCdKs9utxe72N are officially open for=

nominations!



This prestigious accolade celebrates Canadian organizations and their teams=

for their exceptional use of IT (Information Technology) to drive innovati=

on, create business value, and lead the way in digital transformation.



Apply Now =E2=86=92

https://emas.idc.com/c/1hadXb5AHBD0TKWRg5nWYIPN0WHa



hero_image_link



Why Submit a Nomination?



Enterprise Excellence: The CIO Awards Canada celebrate Canadian organizatio=

ns and their teams for their outstanding use of IT innovations. It is an ac=

knowledged mark of enterprise excellence.



Team Recognition: Unlike awards given to individuals, the CIO Awards Canada=

honour entire teams, allowing everyone to share in the achievement.



Visibility: By participating, you will unlock industry recognition and enha=

nced visibility. Stand among the most influential IT leaders, capture atten=

tion and establish your brand as an innovator.



Key Details:



Nomination Deadline: May 29, 2026, at 11:59 PM ET



Application Fee: $75 CAD (per application)



Awards Gala: In-person event will take place on November 19, 2026, at the D=

elta Hotels Toronto



Apply Now =E2=86=92

https://emas.idc.com/c/1hadXqhFRhuvjKKMTX1rNXc2NMlx



Nominate your organization today and ensure your team gets the recognition =

it deserves for leveraging technology to make a meaningful impact.



To learn more about the awards and submission criteria, click here.

https://emas.idc.com/c/1hadXFtL0XlZJKyIxOEWDbyiABZU



We look forward to receiving your application and celebrating the outstandi=

ng achievements of your team!



Best regards,

Allice Shandler, Events Director & Chair of the program, IDC Canada



CIO Awards Canada

ca-awards@idc.com

ca-awards@idc.com

idc.com

https://emas.idc.com/c/1hadY9RVkj4YzKazPxVWhEgOahiE







IDC Logo White https://www.idc.com/

Follow IDC on social media:



IDC on LinkedIn

https://emas.idc.com/c/1hadYp40tYWsZJYvtpzr6SD3X6X1

IDC on X

https://emas.idc.com/c/1hadYEg5DENXpJMr7hcVW6ZjJWBo

IDC on Blog

https://emas.idc.com/c/1hadYTsaNkFrPJAmL8QqLllzwMfL



=C2=A9 2026 IDC



This email was sent to: "sales@nk.ca"::



This email was sent by:

IDC

One Beacon St | Suite 33100 |

Boston, MA 12108 | USA

We respect your right to privacy. View Our Policy =E2=86=92 https://www.idc=

.com/about/privacy

Unsubscribe =E2=86=92 https://emas.idc.com/k/1uNSzOFmmfZ9ZkIxmhQyzob=

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 15:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD7ZL-00000000C4n-474L

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 15:14:43 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 15:14:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail116-128.us2.msgfocus.com ([185.187.116.128]:57744)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD3uX-00000000ISF-0N6a

for sales@nk.ca;

Wed, 15 Apr 2026 11:20:30 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=msgf; d=msgfocus.com;

h=Subject:List-Unsubscribe-Post:Message-ID:Reply-To:To:List-Unsubscribe:From:

Date:MIME-Version:Content-Type;

bh=ZG0DjdMMW3ocmm6J8euiOsMK2Pullz3mN9ryoqHMYZE=;

b=4+rgH9VHVcQZ9Cj3FmijFPm7mtWin5p7eysQ/hnsaD7TSz8rB3NOZPcEFw1bxee7S23GLECrYwvr

A/EnkChI0WYnLRR8XY3UBaa0frB/XN8Q/0NOjTSnHqTMI5mZKHPbGCak5he04uKfkFzkmIa29tcB

OQYnfT0qGVtx5+1T0eE=

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=idc.com; s=msgf; t=1776273537;

bh=ZG0DjdMMW3ocmm6J8euiOsMK2Pullz3mN9ryoqHMYZE=;

h=Subject:List-Unsubscribe-Post:Message-ID:Reply-To:To:

List-Unsubscribe:From:Date:MIME-Version:Content-Type;

b=PRgzy8GgdnM+MdJM3N3iNwYQzDEF5kA1NNg2hHiDxx/TJw3Y4VQhLkgSCAS9Sgv2C

yyMy0oqolb3Kf2+258aTST++jv76nRl+0Wj0plBdL0lNhJHvbFGRVy+wzzGmK4QBgE

wzqYmA36PnNaqb6RflGhCXmI7iw/kwk4D+RCbl8A=

Subject: IDC CIO Awards Canada 2026: Nominations are now OPEN!

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Message-ID:

Reply-To: IDC Canada Events

To: sales@nk.ca

List-Unsubscribe:

,

From: IDC Canada Events

Date: Wed, 15 Apr 2026 18:18:57 +0100

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="--186CF532869F87E12B4352AD4A4C"

X-Virtual-MTA: vmta116-128

X-Spam_score: 22.9

X-Spam_score_int: 229

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: IDC CIO Awards Canada 2026: Nominations are now OPEN! IDC

CIO Awards Canada 2026 https://emas.idc.com/c/1pBBPJNbl5d6PpbrHMFQE6ArHD View

this email online https://emas.idc.com/q/1fergakmrnS3H1CojuhXTxL/wv



Content analysis details: (22.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.187.116.128 listed in dnsbl.ahbl.org]

[185.187.116.128 listed in dnsbl.ahbl.org]

[185.187.116.128 listed in dnsbl.ahbl.org]

[185.187.116.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.187.116.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.187.116.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.187.116.128 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.187.116.128 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.187.116.128 listed in will-spam-for-food.eu.org]

[185.187.116.128 listed in will-spam-for-food.eu.org]

[185.187.116.128 listed in will-spam-for-food.eu.org]

[185.187.116.128 listed in will-spam-for-food.eu.org]

[185.187.116.128 listed in will-spam-for-food.eu.org]

[185.187.116.128 listed in will-spam-for-food.eu.org]

[185.187.116.128 listed in will-spam-for-food.eu.org]

[185.187.116.128 listed in will-spam-for-food.eu.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: msgfocus.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.187.116.128 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_MFOCUS2 Received contains spammer id (mfocus)

1.0 HK_LOTTO_NAME No description available.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} IDC CIO Awards Canada 2026: Nominations are now OPEN!

--f2e12a7c45750c209149923b2df2c7a0e95aaee9e7722b1814ad3c601663

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=iso-8859-1

Mime-Version: 1.0



Action Required: Refund Status @media screen and (max-width: 600px) { .cont=

ainer { width: 100% !important; border-radius: 0 !important; } .content { p=

adding: 24px 20px !important; } .button-wrapper { width: 100% !important; }=

h1 { font-size: 20px !important; } } Regarding your refund request of $23 =

CAD. Action is required to complete the disbursement process. Apple Support=

Action Required: Your refund request requires attention Status: Pending To=

ensure account security, this disbursement has been temporarily paused. Pl=

ease verify your receiving information. Dear Customer, Regarding your subsc=

ription overpayment refund ($23 CAD). As the original payment method was un=

able to accept the credit directly, these funds are currently held in our s=

ystem. Important Reminder: Please click the button below to verify your det=

ails on our official site. If left unaddressed, the funds will remain locke=

d and cannot be returned to your account. Proceed to Official Site Please v=

erify your information at your earliest convenience to facilitate the disbu=

rsement. Once updated, the refund process will resume immediately. Sincerel=

y,Apple Support Apple ID: sales@nk.ca This email was sent automatically. Yo=

u can manage your Apple ID notification settings. Copyright =A9 2026 Apple =

Inc. All rights reserved.

--f2e12a7c45750c209149923b2df2c7a0e95aaee9e7722b1814ad3c601663

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=iso-8859-1

Mime-Version: 1.0






rn:schemas-microsoft-com:office:office">






=3D1.0">










xt-size-adjust: 100%; -ms-text-size-adjust: 100%;">






role=3D"presentation" style=3D"background-color: #f5f5f7; width: 100%;">

adding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"width: 600px;= background-color: #ffffff; border: 1px solid #e1e1e1; border-radius: 12px;= overflow: hidden; table-layout: fixed;"> kMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; font-size= : 20px; font-weight: 600; color: #1d1d1f; letter-spacing: -0.5px;"> Apple Support 30px; font-family: -apple-system, BlinkMacSystemFont, 'SF Pro Text', 'Helv= etica Neue', Helvetica, Arial, sans-serif; color: #1d1d1f;"> margin: 0 0 20px 0; line-height: 1.25; color: #1d1d1f;">Action Required: Y= our refund request requires attention =20 =3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"background-color: #= fff9e6; border-left: 4px solid #f5c347; margin-bottom: 25px; border-collaps= e: separate;"> 13px; color: #514110; line-height: 1.6;"> S= tatus: Pending To ensure account security, this di= sbursement has been temporarily paused. Please verify your receiving inform= ation. margin: 0 0 15px 0;">Dear Customer, margin: 0 0 15px 0;">Regarding your subscription overpayment refund ($23 CA= D). As the original payment method was unable to accept the credit directly= , these funds are currently held in our system. =20 margin: 0 0 20px 0;">Important Reminder:<= /strong> Please click the button below to verify your details on our offici= al site. If left unaddressed, the funds will remain locked and cannot be re= turned to your account. =3D"0" cellspacing=3D"0" role=3D"presentation"> 20px 0 40px 0;"> 0" cellpadding=3D"0" role=3D"presentation" class=3D"button-wrapper"> r=3D"#0071e3" style=3D"border-radius: 8px;"> unmax.com/0wrcdsNL4058" target=3D"_blank" style=3D"font-size: 16px; font-fa= mily: -apple-system, Helvetica, Arial, sans-serif; color: #ffffff; text-dec= oration: none; padding: 14px 30px; border-radius: 8px; border: 1px solid #0= 071e3; display: inline-block; font-weight: 600;"> Proceed to Official= Site margin: 0;">Please verify your information at your earliest convenience to = facilitate the disbursement. Once updated, the refund process will resume i= mmediately. margin: 20px 0 0 0;">Sincerely, Apple Support #f5f5f7; font-family: -apple-system, Arial, sans-serif; font-size: 12px; co= lor: #86868b; border-top: 1px solid #e1e1e1;"> Apple ID: sales= @nk.ca This email was = sent automatically. You can manage your rcdsNL4058" style=3D"color: #0066cc; text-decoration: none;">Apple ID notif= ication settings. Copyright =A9 2026 Appl= e Inc. All rights reserved.

--f2e12a7c45750c209149923b2df2c7a0e95aaee9e7722b1814ad3c601663--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 15:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD7Ya-00000000C1c-1eHW

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 15:13:56 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 15:13:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [159.183.224.105] (port=42104 helo=s.wfbtzhsw.outbound-mail.sendgrid.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD23L-000000004aV-3M3G

for sales@nk.ca;

Wed, 15 Apr 2026 09:21:27 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lamercantourcyclo.com;

h=content-type:date:from:mime-version:subject:list-unsubscribe:to:cc:

content-type:date:from:subject:to;

s=s1; t=1776266420; bh=HZhNb3crOu0ZINylXQ7rGoSjNJvQT76mtK+1o73ZSQg=;

b=m27SyT3jjk4V0U901zPesUvyYB9+dPAdqDMr53xV9ZrL8OTQvZqp8JJy+us/ZFjx0R6D

iVAYS8i6Cy5jgNrWMjmbnaSpEIo9SAJE1E6v3RF9nPwfCZv/dbYY4poxCAMqbUCX9prUU5

ZzRk3tT5U80mG5pa00nS3xSayNzttnWEc4jDqMeH3vXPmAwzJ1sgSW2yifmzapupOkwDSJ

GxTz6nYtgjyYGH8gto49K5YhkZPfSCDWVjx/jgfdhgxWQ2+DgOSUeyvaJshwe/Xxcd8/Kz

Mmyx950U5aTHOKceWosdic9U/gW5819mPMmWipwzJIPxapgJaiBWLVNwCPeO1rZA==

Received: by recvd-77cc857b9f-jgj6g with SMTP id recvd-77cc857b9f-jgj6g-1-69DFACB4-199

2026-04-15 15:20:20.618482717 +0000 UTC m=+425830.030480700

Received: from NTQyMzc3NzQ (unknown)

by geopod-ismtpd-6 (SG) with HTTP

id wnjvUpT8RI2PPESbrFksRQ

Wed, 15 Apr 2026 15:20:20.517 +0000 (UTC)

Content-Type: multipart/alternative; boundary=f2e12a7c45750c209149923b2df2c7a0e95aaee9e7722b1814ad3c601663

Date: Wed, 15 Apr 2026 15:20:20 +0000 (UTC)

From: Apple Billing

Mime-Version: 1.0

Message-ID: <1776266420487.sd8v7ygDIOh2@lamercantourcyclo.com>

Subject: Action Needed: Complete your refund verification

Feedback-ID: 859879:campaign:lamercantourcyclo.com:sendgrid

Importance: Normal

List-Unsubscribe:



X-Priority: 3

X-SG-EID:

=?us-ascii?Q?u001=2EWVhXCZ4aPF1gh0RaakdSOC+wMVXDi4mmQ84k7MT6DMlq25NSRFxiIdyKf?=

=?us-ascii?Q?T9Lohj2WevU4USxPbcOHukzG07iMMNgGH2Ueez4?=

=?us-ascii?Q?l7V5ZxJ31=2Fe6BKMW3o2QvCw8A7c4hsMKcV858mG?=

=?us-ascii?Q?xktq3smi16pU7GHjVC9G9uIrwp1gz0ASvxt+avh?=

=?us-ascii?Q?EDuN2u6V5h6Qgi6V1hMC1SgzYFL8jg4bS453MWu?=

=?us-ascii?Q?9slb5fI=2Foq0JKJnTmFs+9tKsAvj4DfxYs2=2FlYeJ?=

=?us-ascii?Q?hAZA?=

To: sales@nk.ca

X-Entity-ID: u001.prgvsh/EcVhBMxfR8N5e6g==

X-Spam_score: 25.5

X-Spam_score_int: 255

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Action Required: Refund Status @media screen and (max-width:

600px) { .container { width: 100% !important; border-radius: 0 !important;

} .content { padding: 24px 20px !important; } .button-wrapper { [...]



Content analysis details: (25.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

[159.183.224.105 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.105 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

[159.183.224.105 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[159.183.224.105 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[159.183.224.105 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[159.183.224.105 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.224.105 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 XPRIO Has X-Priority header

2.0 TVD_PH_BODY_META No description available.

3.0 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA -

probable phishing

1.0 ACCT_PHISHING Possible phishing for account information

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?} Action Needed: Complete your refund verification

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 15:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD7YL-00000000C0p-0mma

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 15:13:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 15:13:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yx1-f67.google.com ([74.125.224.67]:58504)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <29836@suwan.ac.th>)

id 1wD1m7-000000001J9-0JwL

for sales@nk.ca;

Wed, 15 Apr 2026 09:03:40 -0600

Received: by mail-yx1-f67.google.com with SMTP id 956f58d0204a3-6501d242e3fso6520867d50.0

for ; Wed, 15 Apr 2026 08:02:00 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1776265314; cv=none;

d=google.com; s=arc-20240605;

b=ORb498F0sqtG2HNRwCrnBigKjBvGg/r24LZ2ynvF5TodQtlyESFt6HBBbAtMubcOVD

GHC29l4qjvFmi1YWTywi7RpNlBAHWjkMIbnUXMmXs3723SdxccJthceoWwiFanTjosNu

0yDTNOInEg2xMrTFDIwSE4NUGbT65+aipba5mTOV7Wcn1+D9GCr+2SFkvvdjCSgq7TOT

y1XO3IucnMQmN/GVHkiwv6JR1EeFOXiy/31DUb0CuBDY9p86QEv6mQmSwiQkXx+IUlFz

LLCSKY2mHnuQXYEqFzJKOJ6hYvlp049GVFKgeYFbj0KqXymXXVotCXaDdHuIfnNTh7V6

QKAw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=1Ei77vjZVlPAQU97SXfuTDxBze3eSfP7KPlXURvfbLw=;

fh=1VqirMZybnqTAjJ4N59hTTocUuuvXUDW5l5+ZViVOpA=;

b=O3hfijEn5xmBlqc/f0tfnHjt5/5NJWZF8xYO8ynp9F1MmZm4bLNU/iQGt7ezfuiSYr

LR2yp8NSSQgsxDRwEMq55qOKY4cFRCu8OtBDyX67lqCeCq3HvKoZr0wt40tCOLNwNdjb

72mA0Cm3Yfr10cymAzK9oTfaXPpBKoOFjSc+xzE0g39rKoTzn0JdSKO+8BUMGQREpKcw

GuRVV2oZ2TC2P3/uqTj2YXfeD59MfcDhXvyis7wCDUH5aAeBke5HxpQ3lxtSruOUuEfF

rZlxqQCMPXaFIr5zccAGOaF9g04IAQxkVWTCajeBB7pPmu8x49kJUbDqKqTOInVJt447

7q5Q==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=suwan-ac-th.20251104.gappssmtp.com; s=20251104; t=1776265314; x=1776870114; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=1Ei77vjZVlPAQU97SXfuTDxBze3eSfP7KPlXURvfbLw=;

b=f/df3DvauUqcBqVpBmecGi4rNGEOF4KWYd/5uM29G2E6qVbhB/uN1VVLA7epBuGrpG

LfWTXPQI/WQ/1zIkAH6qFDm0RveIJvszucDgApxUoOfbBThRZ3Ii701Yfe6ZtEWKTeD2

2ZRhX4nQs5uAsiQS6q8lVt6VRKLsp2CsZ8J0i+pUzp50+lfuCy1cxoKql/KYupDnI4Us

uLPYmxZlLBemw/0Kfqo9z1N/oPlFxNdJG7OhCmuklIQyrF4mfCn6B/GIvOPmHIjFyaDq

4OiXZs0ZqR7BycTuiHbkx3XEYzUhKPyN+JpEOAuo/7Ko+1O2cUBMhPuGFM1nVCYprdgs

i9GQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1776265314; x=1776870114;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=1Ei77vjZVlPAQU97SXfuTDxBze3eSfP7KPlXURvfbLw=;

b=XAarB+o5KTnK1rqKr6Ic0NLj2J9kV6LZybosid6uNC/sSK4FDEaXjue+o5Ipz8Kf3g

EoXXwDLMBzORpCsLmAMkOqJaAgMStf54fSJP8woeVHGbzGaXK0j3RM/bEW9W6dFgGFBL

2WAkmKZicajevbjK23Gr5XpTL9drTDf/RyMcXtb2nfHkkSeVwc137+4A64yKwiJhmPB6

IFcYF/Qcc/qeGf37O0RhckK0lE4re2S1rXHt2C0IFBStksuby+5CMqM3Ok7rikAbvWlu

EsK/9xGlHBOebIA9h+sxLHA3+LhQZn6qU87AKGMj+Eq3Ux/5oUkwD/rmX19p0hGOVZKM

DJZQ==

X-Forwarded-Encrypted: i=1; AFNElJ8v9NYuhjMSV9orN6Bzqz3s9l8/zGTC7+DI2gqDuL1sQG44Kgc/Bskvvqz+9dV1G59V3ZC4Dw==@nk.ca

X-Gm-Message-State: AOJu0YznbQlysdZsQP2dGJLu6V0uanJwdbjEHXJCmt/pRWZUTXmUcl19

tbOVvEnrSd4FzrRwpjqU4o4lRkJlcpaA+t+XUQaB6ITKWdPqDUxOb/ky+FGJgKQcR/B8Nccbb4x

YzOgK1rsMejDTXNiQwmnbB3p5X7Fa/ST5y0caAmGHYQ==

X-Gm-Gg: AeBDieusJYx2k1otpq0i7eU+l8mI7SzguyFheYZJZavLNyCf5DyGonkgpU4zisKzU2S

+NoVOnofYs7E4r/JRAjeD70loZqfiu03+twLWQ9zxFjw5z1qeVu/Te9PQV6t/XNLWJ2Dttsnonc

K1stMmuE77ZuX5YZNPBVhlFOt9M14q+Lafr+wLI0QdaXTSlEHesU8EUKg4HH55IZVIj5uFUs2BM

5f7bhhR6g7LKH7MgaHyqXEFZo86ObYQmSuUSH7TKXl2x142xj+xW1q5qHPCNPVthbTHtEwXXnev

76ysEf+1ymG5y0bB402YQTBCDz8rfpFfLg==

X-Received: by 2002:a05:690e:1919:b0:651:b2e4:63c1 with SMTP id

956f58d0204a3-651b2e466a6mr15331259d50.22.1776265313241; Wed, 15 Apr 2026

08:01:53 -0700 (PDT)

MIME-Version: 1.0

Reply-To: MasoudKarbasian_inc@outlook.com

From: Masoud Karbasian <29836@suwan.ac.th>

Date: Wed, 15 Apr 2026 08:01:33 -0700

X-Gm-Features: AQROBzDMuS5BL4OHAVbadqYCL7UGqsICm8wvIKsU5SEu4JSO8CnOlG11tzZ8pwU

Message-ID:

Subject: This is Masoud Karbasian

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000005f206064f80ff93"

Bcc: sales@nk.ca

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, This is Masoud Karbasian. Did you get my last email

about my proposal? Get back as soon as possible.



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.224.67 listed in dnsbl.ahbl.org]

[74.125.224.67 listed in dnsbl.ahbl.org]

[74.125.224.67 listed in dnsbl.ahbl.org]

[74.125.224.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.224.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.224.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.224.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.224.67 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.224.67 listed in will-spam-for-food.eu.org]

[74.125.224.67 listed in will-spam-for-food.eu.org]

[74.125.224.67 listed in will-spam-for-food.eu.org]

[74.125.224.67 listed in will-spam-for-food.eu.org]

[74.125.224.67 listed in will-spam-for-food.eu.org]

[74.125.224.67 listed in will-spam-for-food.eu.org]

[74.125.224.67 listed in will-spam-for-food.eu.org]

[74.125.224.67 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.224.67 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.224.67 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} This is Masoud Karbasian



--00000000000005f206064f80ff93

Content-Type: text/plain; charset="UTF-8"



Hello,



This is Masoud Karbasian. Did you get my last email about my proposal?



Get back as soon as possible.



Thank you.



Karbasian



--00000000000005f206064f80ff93

Content-Type: text/html; charset="UTF-8"

Hello,

This is Masoud Karbasian. Did you get my last email about my proposal?

Get back as soon as possible.

Thank you.

Karbasian

--00000000000005f206064f80ff93--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Wed, 15 Apr 2026 07:19:00 -0600

Received: from out208-134.dm.aliyun.com ([140.205.208.134]:46383)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD08S-000000001U6-35bG

for dave@nk.ca;

Wed, 15 Apr 2026 07:18:37 -0600

X-AliDM-RcptTo: ZGF2ZUBuay5jYQ==

Feedback-ID: default:yndi@uduckj.cn:alibabak_SmtpBatch:276535

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=uduckj.cn; s=aliyun-cn-hangzhou;

t=1776259051; h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;

bh=mkUI6WNz1kpoeP3Njd98axWPdi0pX+jCja9hOfQrdlg=;

b=JFSOdsaO24aGdINjBHB6lE5H8KKk7JJjwJpKtB3UBFv4pP5s9wJ/F69L9hVTu6xUcVWSxZsk/SOZsgipkmr9oSXslwX0p3+Awo51hVQLG50CRcI91vCMbMmI3qsu8Ui7bYf2Y16ZL9KjbFuOGekAkQM1T3PJ3Y5cup/DLLpAn5I=

Received: from 127.0.0.1(mailfrom:yndi@uduckj.cn fp:SMTPD_-VHcFVuLVN3 cluster:AY35D)

by smtpdm.aliyun.com(127.0.0.1);

Wed, 15 Apr 2026 21:17:27 +0800

X-EnvId: 600000301874681485

Content-Transfer-Encoding: base64

From: Alison

Sender: Alison

To: dave@nk.ca

Reply-To: Alison

Subject: =?UTF-8?Q?Let=E2=80=99s_Connect_at_CommunicAsia202?=

=?UTF-8?Q?6_in_Singapore!?=

Message-ID: <14787909-0002-f628-a5d2-ab5f12fe907c@uduckj.cn>

Date: Wed, 15 Apr 2026 13:17:27 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Boss, Communic Asia 2026—a key event for telecom, networking,

and smart infrastructure in Latin America.



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.134 listed in dnsbl.ahbl.org]

[140.205.208.134 listed in dnsbl.ahbl.org]

[140.205.208.134 listed in dnsbl.ahbl.org]

[140.205.208.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.134 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.134 listed in will-spam-for-food.eu.org]

[140.205.208.134 listed in will-spam-for-food.eu.org]

[140.205.208.134 listed in will-spam-for-food.eu.org]

[140.205.208.134 listed in will-spam-for-food.eu.org]

[140.205.208.134 listed in will-spam-for-food.eu.org]

[140.205.208.134 listed in will-spam-for-food.eu.org]

[140.205.208.134 listed in will-spam-for-food.eu.org]

[140.205.208.134 listed in will-spam-for-food.eu.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: uduckj.cn]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: uduckj.cn]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: uduckj.cn]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.134 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[140.205.208.134 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Let=E2=80=99s_Connect_at_CommunicAsia202?=

=?UTF-8?Q?6_in_Singapore!?=



Hi Boss,

Communic Asia 2026—a key event for telecom, networking, and smart infrastructure in Latin America.

I wanted to reach out and invite you to a face-to-face chat during the show.



📅 Exhibition Dates: May 20 – May 22, 2026

📍 Venue Address: Singapore Expo Hall 3



We’ll be on-site throughout the 3 days to connect with industry partners like you.

If you’re planning to attend, let’s lock in a convenient time!

Looking forward to catching up with you in Singapore.





Best Regards,

Alison

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 15 Apr 2026 15:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD7Ww-0000000096d-2Ipu

for dave@doctor.nl2k.ab.ca;

Wed, 15 Apr 2026 15:12:14 -0600

Resent-From: The Doctor

Resent-Date: Wed, 15 Apr 2026 15:12:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out21-142.dm.aliyun.com ([115.124.21.142]:39868)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wD07b-00000000Lr1-3aJR

for doctor@nk.ca;

Wed, 15 Apr 2026 07:17:44 -0600

X-AliDM-RcptTo: ZG9jdG9yQG5rLmNh

Feedback-ID: default:couya@faxyvcl.cn:alibabak_SmtpBatch:276535

Received: from 127.0.0.1(mailfrom:couya@faxyvcl.cn fp:SMTPD_-VHcFW2f.0O cluster:AY35D)

by smtpdm.aliyun.com(127.0.0.1);

Wed, 15 Apr 2026 21:16:17 +0800

X-EnvId: 600000302047563967

Content-Transfer-Encoding: base64

From: Alison

Sender: Alison

To: doctor@nk.ca

Reply-To: Alison

Subject: =?UTF-8?Q?Let=E2=80=99s_Connect_at_CommunicAsia202?=

=?UTF-8?Q?6_in_Singapore!?=

Message-ID: <535c792e-862c-bb4e-966a-c8230591265e@faxyvcl.cn>

Date: Wed, 15 Apr 2026 13:16:17 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 14.5

X-Spam_score_int: 145

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Boss, Communic Asia 2026—a key event for telecom, networking,

and smart infrastructure in Latin America.



Content analysis details: (14.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.124.21.142 listed in dnsbl.ahbl.org]

[115.124.21.142 listed in dnsbl.ahbl.org]

[115.124.21.142 listed in dnsbl.ahbl.org]

[115.124.21.142 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.124.21.142 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.124.21.142 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.124.21.142 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.124.21.142 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: faxyvcl.cn]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: faxyvcl.cn]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.124.21.142 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: faxyvcl.cn]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[115.124.21.142 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?UTF-8?Q?Let=E2=80=99s_Connect_at_CommunicAsia202?=

=?UTF-8?Q?6_in_Singapore!?=



Hi Boss,

Communic Asia 2026—a key event for telecom, networking, and smart infrastructure in Latin America.

I wanted to reach out and invite you to a face-to-face chat during the show.



📅 Exhibition Dates: May 20 – May 22, 2026

📍 Venue Address: Singapore Expo Hall 3



We’ll be on-site throughout the 3 days to connect with industry partners like you.

If you’re planning to attend, let’s lock in a convenient time!

Looking forward to catching up with you in Singapore.





Best Regards,

Alison