Bitcoin Paypal phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5ph-00000000MJu-02gO

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f181.google.com ([209.85.210.181]:56575)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5aG-00000000GJw-09X9

for doctor@nl2k.ab.ca;

Tue, 06 Oct 2026 07:51:34 -0600

Received: by mail-pf1-f181.google.com with SMTP id d2e1a72fcca58-88aea027391so1437931b3a.0

for ; Tue, 06 Oct 2026 06:50:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791294631; x=1791899431; darn=nl2k.ab.ca;

h=subject:to:from:date:message-id:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=BKCtVGfhvIbcv7tEukp5LEGsx4Zn5SM4hs7B6rk/BHs=;

b=sZXOmhB2N1iV8nlDpfxxAVD95J+7WULJ+nsN1/hX7C9j6BPd71swwuk6buHJeBc6g1

aeJ0W9b/ZHbNkBy7Uf/35zqdoFfZv8RKP4SCHQkfnlUFRVUhyCMgLBqn9tsIBYqjMM0x

JvsHECo+w3CIbbqpJtb8V58iA9+AURSY6ZCUtDVQGdGXxtuDp7DI3DCfZzfD7r2hqLFe

ZwrMasIH6wMXZDi29NO5U+HVs0rhrekxeh/gfjgFEs1pdSFN3GHjZ76gO/IRjALyRPGY

a6SjTDsyBfElWAl/ZtlAF5S6uiDVW5inaf1twtysIkIGt9WoqrIYi8hxk1uVpi+8woWu

2BqA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791294631; x=1791899431;

h=subject:to:from:date:message-id:x-gm-gg:x-gm-message-state:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=BKCtVGfhvIbcv7tEukp5LEGsx4Zn5SM4hs7B6rk/BHs=;

b=zR560fPBjAv/vzZJdrDrQUOuw8UbsnGu+xMlWZHA8iwPHAN2C9EocJrR93jv/iTSKH

veLP2xlN9DoJAlOprIyh1H5qeBMYMHhfy4txuTwLw556469hXQ5SSc8A3w/G34Dlr0GO

D+zeS8FAXLS6286b53V5T6bJ5s8AxVtEKH/0473w5kGxFcptT/0rM+oJ4TQoeKtUk8vd

49XxUr+66+RYB6spQVeETQQ+E8hZ6b1BZh8GPUrFN+l2rcxVnccy6dkKS8Bq3zBaUuge

BcM5IEIh7ulTWiI8mjJdkYqEWGTEAyFtE+hQcymGAX4reNr0uFz2ykfKeOEGHYbPHhDg

MmOQ==

X-Gm-Message-State: AFuF++nnLp4wQvPFHx/I0ZSXXXPGcjqq/jIEpaMi2dXJfikBf8zTTwMh

dz55X4BPcmyVne/2N4y32pFAjlS87H+Bsiq2XlinlSEz6E9DMKSCmbNv9oY6lCYI

X-Gm-Gg: AYBFou2X6iGmLlL0De7Hu4UZUQ8BgFkalAvuzHBYjgHW0UGKAJaTIx8OjalQWqE5OCO

lx9Jvga92rcNjQfa+4ffCrIipmpim6mhdDLGka6QCUffhnMc9xtmacLjHy3pMts2EmbMplptLeG

Rt5J+wC6JyguDuAAQD1prrbOxO6abgnzJMHUaZwv+/qyUIbHB37WvMAVRp+9IrEOWcMHkRz+yrN

aarpKeByhKfTg5EXJcFYSnlvohLaQW+RFHj0KnUOfsYISr2GrTCgKiBrlpDX/KfH83bScya6RTF

2QntahdjTDrVZW3EwJEK9rDlckRiCwA2SjUuZZf1/vQg4ePiaQTLvSq9cXuD0B7ww6Hb6AgCejE

piwVBoh5Br3Uqw5zSzHlYpMNedwNgCOxkTLeubCD/ep7Z57/IOAxUvLxHU1QPB4om7f8cZiYRTw

KtQu7h4tIBDcRL9CO1/c+LHax0GBCkcDKiyF3EjtkZ9qV9CGGgbVLKZ6Pu4k0QE8DZmFzn9U5gr

xj8xIyCyhAZHr/BvQM4w0jiBs+HdnS0dPWTtatI4/GRaGVGKaskKS3ogg2iwwT3k0u5dqj8H3E=

X-Received: by 2002:a05:6a00:3e19:b0:880:4b56:dc28 with SMTP id d2e1a72fcca58-88c62315dffmr9694403b3a.15.1791294631013;

Tue, 06 Oct 2026 06:50:31 -0700 (PDT)

Received: from localhost (ec2-35-88-121-53.us-west-2.compute.amazonaws.com. [35.88.121.53])

by smtp.gmail.com with UTF8SMTPSA id d2e1a72fcca58-88b0ca7c6b7sm4961188b3a.44.2026.10.06.06.50.30

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 06:50:30 -0700 (PDT)

Message-ID: <6ac4fca6.72aa5310.fd419.6a93@mx.google.com>

Date: Tue, 06 Oct 2026 06:50:30 -0700 (PDT)

From: salahulla33@gmail.com

X-Google-Original-From: PayPal

To: doctor@nl2k.ab.ca

Subject: Payment Success | $419.33 | Ref: I-JRM9COL3E947HQ



Dear doctor,



Your PayPal subscription is scheduled for renewal, and a payment of 419.33 USD will be processed within the next 24 hours for another year of service.



Renewal Details:



Service: Bitcoin



Account: doctorHello doctor,



Thank you for your recent purchase with PayPal.

We’re confirming that your payment has been successfully received via PayPal.



Transaction Details

Date: 2026-10-06

Transaction ID: I-F6H7606E8XC9WYBEP

Payment Method: Pay.Pal

Amount Charged: $419.33 USD

Item: Bitcoin

Quantity: 0.05 BTC

Total: $419.33 USD



A confirmation receipt has been sent to your registered email address: doctor@nl2k.ab.ca.



If you have any questions or need assistance, feel free to contact our support team at 1(828) 579-6365.

You may also view your order or manage preferences by logging into your account.



Merchant: doctor

Shipping/Billing Address: 3070 Ridgeview Rd Reva Va 22735 United States



Thank you for choosing PayPal.



Best regards,

The PayPal Team

Indian Education spam from Yahoo! Mail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5pJ-00000000MHa-0THg

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic-asso1-0020.asd.mail.yahoo.com ([34.2.90.19]:1536 helo=sonic.asd.mail.yahoo.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE53B-0000000045T-3stt

for root@nk.ca;

Tue, 06 Oct 2026 07:17:24 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791292576; bh=nwQF3HimN5Ebgb8+gfB8a43K+LvjQJRCxrWDxZMkmjs=; h=Date:From:References:Subject:From:Subject:Reply-To; b=DQ21n1KkdHUsiKSKpQhEyNWU0DG/4X6HByCujnQGYub55HwTAtUZvCtIu0+HzT1vw6p6mWojkn11nlGEaD4EzhiOSdD5XIyvU+17YON/TAgbThF9kBoq7Vdle1FTUouUgckErziq8EYUWGjGb8EC8R7LU0FZSF+1t/o+6hMJrj/6XNJDl/J7d+HtDQl6zwdH0GVGGq74qmrzEWprOOWxX0y2LvHNlneiWMNpfqw7XhJV0JNjFjU7M3ZhHikfl7x15TkDMm5utUMhDR6iaHZiUDOQoJAZmpD/7b5YkmWSvyREHstonjGiSIc1Yg3AAzo719n60LFK3haui92gOxPZHw==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791292576; bh=JSP2IheKODUxp6A+U9qWFuVv9YgvOWbneMW/O7PBWgg=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=gBcYUFvz90OAK6aBMiZxVc/56reHIZnchrQTykzANN5n4v34nmDoq2GiuQnZlxyFca7Z2zeO3iwjxUo8hChKNV+12Z9QOHRn2e4pqIFsU6YS1XXqvWf5cdeFncoXh434Epy0/mNuND4tksUW3/2tzSRWGhrHSjlCQL+sUd33nJ9f8zHFfC705e/AMWCONZ3mU2mhXpyoW1gf489IZyg1/pPscyLz8syb8NH4bO5PCWl45AJQp0WF4qDc0Nroqtx0ML6rfbulPGABn5GKBRK2S6+M9Vl0fPcsTp0PPASffvFCw5FsI8SFya5giOj0dHrm9/0ZOzfkUal1x2e45m+IiA==

X-YMail-OSG: Ug4vHz0VM1kaQ3zbueD6ETD4.tCN68wgzvoMrCvIyv6hHFvIqGhrHIEx0xzrAY0

eCcPC51Y69tzspyfdgZgPSowncSrdmEh_NyiXgf9g4gx2MjDufqXKwRpVS0miek_jSh4lHAtiU0Q

NjAuEnuuLeUUEfW0hkyWWABFVatithdVUaDgNqe5BxeZsBDaInOpCyBuqw9My7YKmX..PBLTu93f

uFcNLXuj3my4D2cNycCy3zUMCN5ifO0RjrCbUwL.R4PUEYvBrNp2tZLoWK0ZAVA.7BP7UmhBLfKK

IUQCH7w0re7HHTU7LNUF94UH4dceJAAfLcLqRQ9tlKiAx06eZYtOQ70Ed4xCmykyiUXT1_UmXZ80

KD1FtTjXooYQDElZ7FxP6Hitg2SP1Wl48LzTQoQOZV4UNw.gxF7hakWILnMWGZLimjC_i8LOECP3

AH7o8IvitFoYVAA3n5Hdcqj4T97nXcoJwUrLimgbkQMaUGNyiVaXsyYlZB9qSm_CMlFVBt33GPid

IhgrcnU48VxFLO55YzuCoaodUpSFJZ9FGa2XXbCsRckZBmcpBfgTVBZ3o9nRn89vDlJa72Q4C.rU

o7BoavJI6.voMP9C8sYBeSY__pTCfm3cAcGP21voO.YwJIfjqN2BIseBID3QUzdNuiaW3Sy5OOaY

aExCmKGcNEzUhnttVUipyLkbfdUAFfyPt14NYrurJmE0UQRoL8SBciAVGp5yxNCaPW4.YXqOdrkR

5kzC0B5dCG01U.aguNEU5KHQ29qhIkihU0DJaZB0e_z37p0VYLXAmKmqH2sA5RG7BbhjwidQzZW6

s2sAcX38blnfSjvYIRGmjp6eEovZPafp6G3Ewp0vmZY82HS5xFf9QCrA4tT3mOETX0OErXDyQhrq

QW95ZE81vpK51Z5Lfuq9nUvU.T5PINRqRYDGH0vhpYt4WycgMePBGUUvQHA3ae9SPnIMwPQx9uhW

mqBQMP0TQl6a4Wz75Pk3W0VkXoxlPDOcvrKw2GH2J60gsugV5K2W0EYUkQAAFCDGcRqbNak9eBnb

yUmkepkdubcpjYABR5oAzrrbPFcVr1z33BsCIqLm9ikmewtioNyZbeYZKwI_lyiqJkH4FEZ96ZvH

Ps8lZc_zSUVKYmTY3.XaEZhK1iJWgXMGdRdauz3S0bgTTeEuh37oUnAYKB6dTpALrifdr4W24d3c

2pi3hYDj_uBtNYNpEeFa74jVRSqvbpI75MVwpv6Nl3XdoJDJiJcuVUfJ5miGy_6gAxEBzkNY17UM

GKRy.dm67RLTbavV6Fr_X1.LdnkjWJ2lvgEc57iZhY9t0tv45xL.tSW7QrGAs0IFU1AXLweLho5d

c18WmbuTWoAVfywi3dJoy9CFs2LkidThQJAZup65d7HGlYhAsv13A1GGakGZrmWk4_Q9mH_WjDGQ

HSNnDqNm9o.wER9oiedZDY30Wij.JKDNVboTdDlgkUECg1TZqvCQURX3u_657pf5DH6Fm.L.VwWm

9D6HXKXRlyCiU_Mtr9XBRk5bFK6BSRzuXlqzFGdUQmDu6vDaIcyrktrKMFaoQm9pRxwAFRb.KVPn

.hSLzoLcz634iXAJ32u6mlyvfXZ0avufvny9izlv0.CFm7M07PbuWXff_fu9pv_eVoUPSGRI8oOm

dJ96Eu5P8wZ0s1JTyYGzcOR83IDP.arHdFKPtj4HAXw2td3w2SNfI4gD2w1iBn7q0P09MGXVnh3X

ttylIIuTAZWmzTuxnZU0qFWjg87kKhz0iJnhgJ20FIgei_DfMen8_cXwgyIu.mINIUlkuhJkZiCt

xED3uCBprdOYTokS1QBpTnrCQ7Gc7WvumsVTm61FlrzIYvGXxtwBQnMGrT6N.hWuDkqCEeIbg5tT

tfENOxCGxXo4EXAM5HdlRzGH6ViIT4VrRbCVyPXKsY1xmSUPsD8FLziAO6hwyVSEQLRGoRIGKlAA

82Dy09MjOEjNgE3dGvwSAFeygQwt7SxKLQT0oO9dvY0W7SXufPcePqhlyMynL2iEvYOg0eAyzDKL

28suFphh4zZAsQoQboHDCLeSBWRBhDDOCIT14p.yM6bbbCoOO9.t0wdSiS_2GNUlCS0esADWCuY6

CbCUvLcNuCenIGIIKkjJ_a_CPNECp6Y4Dy__kh5lmJgV0egMX

X-Sonic-MF:

X-Sonic-ID: 1453dbf3-ab33-4d8a-83da-1e6010e3c2b9

Received: from sonic.gate.mail.ne1.yahoo.com by mail-asdoutdeli-p-cin-asso1-prod-sonicconsumer-svc-101 with HTTP; Tue, 6 Oct 2026 13:16:16 +0000

Date: Tue, 6 Oct 2026 13:16:10 +0000 (UTC)

From: "Chirag Saiya (Speaker&Writer)"

Message-ID: <1954634498.516185.1791292570602@mail.yahoo.com>

References: <1954634498.516185.1791292570602.ref@mail.yahoo.com>

Subject: Tuition Classes for Kids Up to 4th Grade - Admissions Open

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_Part_516184_949650396.1791292570602"

X-Mailer: WebService/1.1.26668 YMailCLDNovation



------=_Part_516184_949650396.1791292570602

Content-Type: multipart/alternative;

boundary="----=_Part_516181_1171333317.1791292570578"



------=_Part_516181_1171333317.1791292570578

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





NAMASTE.



=C2=A0



Please Find Attached:



=C2=A0



=C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Chirag Saiya Tuition Classes Mul=

und - West (Mumbai)



=C2=A0



Kindly Read + Do Share WithAll & Oblige.



=C2=A0



Thank You.



Best Wishes!



Love &Light=E2=80=A6



=C2=A0



Chirag Saiya(Philosopher)



Spiritual Speaker & Writer



Website:http://sites.google.com/site/chiragsaiya



Whats-App: +919819210230 / chiragsaiya@gmail.com



=C2=A0



Save The Soul. Change The World.



Protect The Future Of All Innocent AngelKids.



Where There Is A Will There Is A Way. WayTo Freedom=E2=80=A6



May All Living-Beings Be Delivered FromSuffering & Be Liberated!



=C2=A0

Truth- Justice - Equality - Freedom - Peace - Happiness - Joy - Health For =

All LivesWith Right Vision & True Mission Of Well-Being Of All Living-Being=

s AlwaysForever & Ever=E2=80=A6!!!

------=_Part_516181_1171333317.1791292570578

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable




ly:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">

=3D"ltr" data-setdir=3D"false">


style=3D"font-size:12.0pt;line-height:115%;font-family:Verdana,sans-serif;=

mso-bidi-font-family:Arial">NAMASTE.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial"> 
span>






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">Plea=

se Find Attached:






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">&nbs=

p;






amily:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol;col=

or:red">=C2=B7
nt-stretch: normal; font-size: 7pt; line-height: normal; font-family: Times=

New Roman;">      
s-serif;color:red;background:white">Chirag Saiya Tuition Classes Mulund - W=

est (Mumbai)






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">&nbs=

p;






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial">Kindly R=

ead + Do Share With

All & Oblige.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial"> 
span>






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Thank You.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Best Wishes!






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Love &

Light=E2=80=A6






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0"> 






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#C0=

0000">Chirag Saiya

(Philosopher)






ht:115%;font-family:Verdana,sans-serif;color:#1D1B11;mso-themecolor:backgro=

und2;mso-themeshade:26;background:white">Spiritual Speaker & Writer
an>
s-serif;mso-bidi-font-family:Arial;color:#1D1B11;mso-themecolor:background2=

;mso-themeshade:26">






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#98=

4806;mso-themecolor:accent6;mso-themeshade:128">Website:
=3D"font-size:12.0pt;line-height:115%;font-family:Verdana,sans-serif;mso-bi=

di-font-family:Arial">


" target=3D"_blank">
amily:Verdana,sans-serif;mso-bidi-font-family:Arial">http://sites.google.co=

m/site/chiragsaiya
5%;font-family:Verdana,sans-serif">






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#4F=

6228;mso-themecolor:accent3;mso-themeshade:128">Whats-App: +919819210230
pan>
ns-serif;mso-bidi-font-family:Arial"> /
a@gmail.com" rel=3D"nofollow" target=3D"_blank">
.0pt;line-height:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:A=

rial;color:#E36C0A;mso-themecolor:accent6;mso-themeshade:191">chiragsaiya@g=

mail.com
mily:Verdana,sans-serif">






ht:115%;font-family:Verdana,sans-serif"> 






ht:115%;font-family:Verdana,sans-serif;color:#002060">Save The Soul. Change=

The World.






ht:115%;font-family:Verdana,sans-serif;color:#002060">Protect The Future Of=

All Innocent Angel

Kids.






ht:115%;font-family:Verdana,sans-serif;color:#002060">Where There Is A Will=

There Is A Way. Way

To Freedom=E2=80=A6






ht:115%;font-family:Verdana,sans-serif;color:#002060">May All Living-Beings=

Be Delivered From

Suffering & Be Liberated!






ht:115%;font-family:Verdana,sans-serif;color:#002060"> 






erif;mso-fareast-font-family:Times New Roman;mso-fareast-theme-font:minor-f=

areast;mso-bidi-font-family:Times New Roman;mso-bidi-theme-font:minor-bidi;=

mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA"=

>Truth

- Justice - Equality - Freedom - Peace - Happiness - Joy - Health For All L=

ives

With Right Vision & True Mission Of Well-Being Of All Living-Beings Alw=

ays

Forever & Ever=E2=80=A6!!!


------=_Part_516181_1171333317.1791292570578--



------=_Part_516184_949650396.1791292570602

Content-Type: image/jpeg

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="Chirag Saiya Tuition Classes Mulund

- West (Mumbai).jpg"

Content-ID: <853dba1a-1d62-3244-5502-db3d78c4a48a@yahoo.com>

...



------=_Part_516184_949650396.1791292570602--

WEb/SEo/App Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5p8-00000000MGg-0Aag

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:18 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f52.google.com ([209.85.216.52]:42157)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4q5-000000002xX-1U9W

for root@nk.ca;

Tue, 06 Oct 2026 07:03:50 -0600

Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-39647aa9d52so702595a91.0

for ; Tue, 06 Oct 2026 06:02:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mindswebsolutiion-com.20251104.gappssmtp.com; s=20251104; t=1791291751; x=1791896551; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=rsgC2Sx4fVLlDbUyRf8U5JlTTBjwWV8hIagsACZvNs4=;

b=EYg7t5+TzFHWp21Ar4mY99+7KN6RWK9oyOx36Q1Z8tOq8G86fFW2ZpgV+IY/ONKx/n

Ka/xDeawYZz+YLoTLnO+VZwXbrSzsPl7ROvH9LQmpLFAd31ld49A4a30O5wxQECJ98wr

84L6uM3tgzg50s5rb+NMvZVCub931YE04Ld4eUnc4r+WW3Xk5EwN3tVNbf8xWOOMju/c

v7+E4L/nEXQydIe67cVP+8l4avcU3XPHP8ikFMsJVZ/qaFycfj7JRzoVgrRYOTqw6WeT

fR9jy/oNXDBzn7m6jkEjbzNtM67aj1/0giPmebEE0aZ0dl+IJTvQZADxIRB9OwuuI9OZ

K//w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791291751; x=1791896551;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=rsgC2Sx4fVLlDbUyRf8U5JlTTBjwWV8hIagsACZvNs4=;

b=qs6thc4vezzpNdjNaavbos2FegxE4wJRlEimAcaelwAOxUQK9rJfTj4EW9NDOIFAtf

utUU2YlR/JB+YswD0+6bLWHYj0TWFaElPBDSMWklPy1Og2xsi+YcBVZlWl6a41fIsct8

x/nN28Wa0DczkQ1xlksstb8Sa643EdENY+SQ5Gulb7RB9+8J1+QEaB15mR+PZxyTXCBS

9UGhHaUZZbPPWcbZbhta8Ai4qGyDFWCAdoHLVgoTMRnl4nX/pXh4i3GcOL2Ec7OiuxvY

F20UfUPj1Fn979ChVV8Mx5XBc5LymIV1N1reOcvxP/dNa+hJhb3j17OR3mx6Vw03Hj+o

hQMg==

X-Gm-Message-State: AFq9FYLz+sz8ydt5VVbK7QSD1mB5x6qqBCO2fpR2t8IyKKeH4AdGQ0ce

btAGN4A3UVa8ycpMNxQE1+lpQS3Z0M9Jq0mbUbRiJxZiPH+H8FZvlj/KYhvJpnZWtR30G0PnBle

ymEmE

X-Gm-Gg: AYBFou0hDV4SLcRtvJsREhX2U3MODDgvziC+zxQyPysvX5cQ9Z/j+uCRXNIdaqjqFXp

r2X1uRJ3PCEfreySwQUWa6iWi5GnVldKaUjcb5MbhD4tJbPgGJWNWz0vMb3nFfhDsKM/jsAaCl0

olaBnBIhqwl9GHyuiAt4/qCsP54WfQd9Uwm9iBpqGaGYS6u0VTBBNTFaTdzmeVYVF+7mrSCaE31

5M8b5sn+Hu7zGqZcSdYHxxamcxuPlxA4R7eOpWlBMweXBOHdBDsSY5gbBefuoUc6ca4wUMQyrxm

Q9zCBOw8UpHN7sH18Up6JgBhbVyOhUMmWIWRrtRW2VwV6N2h9Kh0Jk7i5YTvFyWGsl+JCrAyUWk

ESyDwwyT+RRzSBjHIhpiYg2LcogVPwNTPhnjK4euc1RN/y3w+ZQA3MUJgvJilVB5vwGfEYQ9oG/

rHcROkRIHPbagsyj1hpgCIdlhpkEz4kYs7eEKTDCzerAgr8WSxJGfztWvChNlICuM1+hsozCYsf

wSlUbhlAAcc+5rhA7En

X-Received: by 2002:a17:90b:3b8f:b0:3a7:96d:feaf with SMTP id 98e67ed59e1d1-3a87368575emr666527a91.16.1791291751275;

Tue, 06 Oct 2026 06:02:31 -0700 (PDT)

Received: from [127.0.0.1] ([103.106.232.126])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a8543b0c1fsm6538153a91.14.2026.10.06.06.02.30

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 06:02:30 -0700 (PDT)

From: Shaun

To: root@nk.ca

Subject: Get Ranking Report - www.nk.ca?

Message-ID: <9f79cda1-df76-2449-26f6-311a43047b0e@mindswebsolutiion.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 06 Oct 2026 13:02:28 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, With your permission, I would like to send you an SEO

report www.nk.ca with prices showing you a few things to greatly improve

these search results for you. These things are not difficult, and my repo

[...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.52 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.106.232.126 listed in sbl-xbl.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.52 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.52 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Get Ranking Report - www.nk.ca?



Hi,

With your permission, I would like to send you an SEO report =

www.nk.ca with prices showing you a few things to greatly improve these =

search results for you. These things are not difficult, and my report will =

be very specific.

We can place your website on Google's 1st page. =

Yahoo, Bing etc.

May I send you a quote, previous work and our =

proposal?

Kind Regards,

Shaun,



Geek squad phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:07:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5p1-00000000MF7-2Pwo

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:11 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f41.google.com ([209.85.216.41]:47402)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4mG-000000002ae-3dzi

for doctor@nl2k.ab.ca;

Tue, 06 Oct 2026 06:59:55 -0600

Received: by mail-pj1-f41.google.com with SMTP id 98e67ed59e1d1-3a6cf104827so426065a91.3

for ; Tue, 06 Oct 2026 05:58:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791291500; x=1791896300; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=HA6BFvZLuIteIfa1z6TcVJK9y44bulEU8LHBGWyjlm4=;

b=eLXpkaW9AABTsJqeTKlqZvbzhSgB2MZnjcS2A1TTpFG+dMMZtZFFwfi4hoOJQJdqDp

tsM2StbAry7tu+d9lsxjD1JL5SJSohkTiCSDlw3WoHDCuqj/nCleYePZzR2UfxLrnlld

KpmaFdmvYcj8lqtqqcCDO+ot4h1T2mWdYyI0XzxNehdxx9mXu31CVux6jfb6BR0yfEdy

dTBYJSuLFe5ylXH6ZTKtyXDPZ4QFIcYLXHt8LDJC/odL8s10lGDG6PF8wmFC3Y4o07w7

zst6KPrwACE/HfMSKudlLPdDaR/R+3zRzQx5YwadEUx9syUSPdzIqSl0KkSF4AZWm6dI

3mLg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791291500; x=1791896300;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=HA6BFvZLuIteIfa1z6TcVJK9y44bulEU8LHBGWyjlm4=;

b=T8oVhDW4cyDzd9BFfllw/K0N1xf/sMMEV541tI2vBoxeWpNz/sefcPAZ2usYXuzkft

i9wk9TlsGStG3jPIsR1sDHMSb5PtcyxHb4BHTtDNT1ulC+3Yx5O31X+I8qHBZ/R9FRoH

4WzQQU2YaY+TFdaRQDjieeIch8eT6p1c2+q1qzRQQMRuszwx1gAmmAz7lSwNQ/seNlZk

52umF09r9ygWoK6CnXHFdvVfVwqHypHOHZ/4igEm/aHVQ1BaLIzzHlwCoP7486VW9MB6

hjDIN03ZYUXZTRf0IjTKySKm7Gwzv79AAZpTjwTmyS03nHgHvu5Yf54wzS1NnMLzzN3L

v+1A==

X-Gm-Message-State: AFq9FYIDUDV1d+FTZMWVXOixLU2aeLbhHxzY6+/v5FQvKNoJCg9Apit5

F8YElkXoynXsySjMWMQCc2howdDR23T4KIKi0Ch+shcnOxeU1QTKenZOmdhoiX620lo0Gw==

X-Gm-Gg: AYBFou3kFLCmwjhVOcQ3k0aNnsCS+iKLUE+F7WnpW02CxJeFQc20xNTsqWBMZ9DV6H1

9rK0OqtH79QSMayUAWpqoUlfxw3aPzbdcVaJ+Fefoc6aQMKmitq/ZiJRw2s9vgboKrjIJG/PUnx

eOUxuEQW82G3th75THHDhBjRFSrJetxqIrzAr9hM0zSxIlJOrADxBnEvENtF9qKq7TWdK5vq8/S

yT0urEt8ZX2usS1auaBhvJFf2lcd0bm3auv28ODSas9XRXEKlDZEspBatj5suIYCglpR86pEhem

XF5FCuAnE4ChxkxLwElDcM0Z7OCs6nBKxq5LtdsoIAOoCgJzRG/iS3C4pHkFHPByTOZJSuX6qEe

+9swLCLau4Ms+WyXHQfChQIozRRpDk1GlHobaSXD8EBCpe8cbF2z1nqVYOWrimaHQrJpE2KkvFY

spK4vVcWaG0nAZgsA0rf98mUuMBWEiJMXhlvwkZE4ndW8l+0MyxBWX4yqtTgZis0vp3Rz027gYY

23rQKk5Bsi7LxCHQGoQOL01XV+J/MRfWskDbQ==

X-Received: by 2002:a17:90b:2c90:b0:3a8:1a1a:7895 with SMTP id 98e67ed59e1d1-3a87350ac2emr461501a91.18.1791291499583;

Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Received: from [10.203.1.48] ([43.167.223.122])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a853cafddesm7101151a91.10.2026.10.06.05.58.18

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Message-ID: <6ac4f06b.0a1c4297.15ce81.c8c6@mx.google.com>

Date: Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============0833806656785191990=="

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: We updated arrangement No #34399956

Importance: normal

Priority: normal



--===============0833806656785191990==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













































--===============0833806656785191990==--

Virtual Assistant spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:07:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5ou-00000000MEU-1HRM

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:04 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f176.google.com ([209.85.215.176]:58604)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4V6-00000000178-3p1P

for root@nk.ca;

Tue, 06 Oct 2026 06:42:11 -0600

Received: by mail-pg1-f176.google.com with SMTP id 41be03b00d2f7-cc4c7fab7b6so1925103a12.0

for ; Tue, 06 Oct 2026 05:40:44 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791290439; x=1791895239; darn=nk.ca;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=4WBpCrNm9OIUiVDc/hV2evamZRzUH0C92RMA2TYtbEw=;

b=fIsoY3IRrg7bYNlX3RaBqwEu07CUSlyb4RZqI1+eovjU7t7zX0kbGHixQIv4SujfWh

wRAdKByx0Ze84uaZ/DdDlNl+cCfUW2NkgpR7wVHS76VwUVhTLN4kvYDK50TW2kA4xPDY

NNxb5YKm5zWQssZqt906/uH6RVa1xqY93j0UJDMkChL+vOLhdX4jWTwoPEC5g0AhMgf+

gWPPYPavf+KcN6fyh6jkJ2pg8dpUSBnlKADijd41ihvMJUqRTseugvZtmgUtTXQ7K61h

/3CW0JR4APaYejXbtIKPiv8BhY8Oz1AhewVK8ubz9tc7bmI5WarIigEvTtchGmaKkB8V

iU7Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791290439; x=1791895239;

h=date:organization:mime-version:content-type:to:subject:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=4WBpCrNm9OIUiVDc/hV2evamZRzUH0C92RMA2TYtbEw=;

b=iiUOOSSJeviWdzywWwPjkkhQp+R1Jy6TEKd4zBFFNgQcUe6PJG0gR0Ti9GDbYi+wj6

ha5rbG9Iq9ZoKzG/+PuGHkIytYh1VQ4LjgC+C8CFAXmXlomxQzAXm9BVwYDzJ34WK0aY

w64zeEeTci259ZDAaS0HmwNnf0CG66Ab6y4gjIVpR0CYXeDWqzsHKYDn9wL7oiKoHi62

ygWWrrGpvXyLr5EJijrAddx+0Bc5QXllm4Lw33kEm5H/FBCcZa1oBFFsipeKMOFqtI8y

9onIrnU5NFgoyUocqBRxOUY1uGnBRSbrgEN+aVDSffGqJ+WRkKDg9MJch+bP6q61Lz6C

Bg9g==

X-Gm-Message-State: AFq9FYKT5fvC7iGNY4yPZEcwtrfE8oHwWkgTljdJaOLVRGd9V+zM2lJt

8Zb+m5qXpJsXjCQbf6gc/Nyc6EHwms+dDYQQODSle4El/b6uu/IPfFnSB3Xg3g==

X-Gm-Gg: AYBFou11o6Vc4zp4uMOBcRyOaiOJi4jejr3y5Js9rT1qtg9ehAd3Ep9Eh+lQlv7xSgc

/v72wSK3Y38KSGSYlX0jkTtFOJ6j3JscMIPbM/0eSrShe+ZjEuTM4eu0pwgXCIIqy8MUF5XGABc

mytu8pdpE9bhzhd3riy8+CzDsMUxDr59ZKsg5AAH0U5c65niglTtAZH0M7Wvf6hAF/TQVX70xfQ

mYTCRC+fxz/BHj6fOPE0b6UD+mIYF6+fQzpCG2/XAvGnbK+QZIAB8Zq2yNH/UupadSnocTNl+Kl

fTfToHFK5a3tSW3FyVE9nW+tjr/RkU3hglwrR0tbxJN/dqo2PFHdSjiYjsMtVnz1+q9rxrcaX/D

d1oRkCQpaBX12R/0es3XZq0tDhbjrjn2gVHTzCJ37vg7IaAHU5qcgQjft4/nT04bIiJX4A0GN7g

yduaz2kI0sITs3lZMkadXcb3SX72KiD5nHgbZMrRU+U/dP09aG+aH4m6TUlp81t0tA/8jA0N+rk

B6+EQNPYeIQfZvgrtLZ

X-Received: by 2002:a17:90b:164b:b0:3a4:d338:4136 with SMTP id 98e67ed59e1d1-3a78779e4e0mr8661328a91.66.1791290438752;

Tue, 06 Oct 2026 05:40:38 -0700 (PDT)

Received: from gmail.com ([122.160.196.13])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a8543ab76bsm4768047a91.13.2026.10.06.05.40.33

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 06 Oct 2026 05:40:37 -0700 (PDT)

Message-ID: <6ac4ec45.0d0da1c3.2f63f8.ec6b@mx.google.com>

From: "Kanhaya"

Subject: Re: Dear, Good Morning, Reminder # root@nk.ca My Name is Kanhaya

To: "root"

Content-Type: multipart/alternative; boundary="Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt"

MIME-Version: 1.0

Organization: Headfield Solutions Pvt Ltd

Date: Tue, 6 Oct 2026 18:10:34 +0530



This is a multi-part message in MIME format



--Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Dear, Good Morning,



Any Update.?



Let me know if you=E2=80=99d like quick support or more details.



Thank you!

Kanhaya

VA Team



On Fri, Jun 19, 2026, at 10:45=E2=80=AFAM Kanhaya
9@gmail.com> wrote:



Hi, root@nk.ca



Please could you let me know whether you are interested in hiring a Re=

mote Virtual Assistant (like Cold Callers, Appointment setters, Marke=

ting associates, social media managers, administrative executives, dig=

ital marketing, lead generation, data entry, etc.) to work at a reason=

able cost?



Can we schedule a quick call this week/next.?



Sincerely,

Kanhaya

VA Team

Note: If this isn=E2=80=99t relevant, feel free to reply =E2=80=9COpt-=

out=E2=80=9D





--Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline




sform: none; text-indent: 0px; letter-spacing: normal; font-family: Ar=

ial, Helvetica, sans-serif; font-style: normal; font-weight: 400; word=

-spacing: 0px; white-space: normal; orphans: 2; widows: 2; background-=

color: rgb(255, 255, 255); font-variant-ligatures: normal; font-varian=

t-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickn=

ess: initial; text-decoration-style: initial; text-decoration-color: i=

nitial;">Dear, Good =

Morning,


ext-transform: none; text-indent: 0px; letter-spacing: normal; font-fa=

mily: Arial, Helvetica, sans-serif; font-style: normal; font-weight: 4=

00; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; bac=

kground-color: rgb(255, 255, 255); font-variant-ligatures: normal; fon=

t-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoratio=

n-thickness: initial; text-decoration-style: initial; text-decoration-=

color: initial;">Any=

Update.?


text-transform: none; text-indent: 0px; letter-spacing: normal; font-f=

amily: Arial, Helvetica, sans-serif; font-style: normal; font-weight: =

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; ba=

ckground-color: rgb(255, 255, 255); font-variant-ligatures: normal; fo=

nt-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorati=

on-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial;">Le=

t me know if you=E2=80=99d like quick support or more details.<=

u>


one; text-indent: 0px; letter-spacing: normal; font-family: Arial, Hel=

vetica, sans-serif; font-style: normal; font-weight: 400; word-spacing=

: 0px; white-space: normal; orphans: 2; widows: 2; background-color: r=

gb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: =

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: ini=

tial; text-decoration-style: initial; text-decoration-color: initial;"=

>Thank you!
Kanha=

ya
VA Team


4); text-transform: none; text-indent: 0px; letter-spacing: normal; fo=

nt-family: Arial, Helvetica, sans-serif; font-style: normal; font-weig=

ht: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2=

; background-color: rgb(255, 255, 255); font-variant-ligatures: normal=

; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco=

ration-thickness: initial; text-decoration-style: initial; text-decora=

tion-color: initial;">
">On Fri, Jun 19, 2026, at 10:45=E2=80=AFAM Kanhaya  <kanhayak=

umari778899@gmail.com> wrote:


olor: rgb(34, 34, 34); text-transform: none; text-indent: 0px; letter-=

spacing: normal; font-family: Arial, Helvetica, sans-serif; font-style=

: normal; font-weight: 400; word-spacing: 0px; white-space: normal; or=

phans: 2; widows: 2; background-color: rgb(255, 255, 255); font-varian=

t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;">
alibri, sans-serif;">Hi, root@nk.ca


rgb(34, 34, 34); text-transform: none; text-indent: 0px; letter-spacin=

g: normal; font-family: Arial, Helvetica, sans-serif; font-style: norm=

al; font-weight: 400; word-spacing: 0px; white-space: normal; orphans:=

2; widows: 2; background-color: rgb(255, 255, 255); font-variant-liga=

tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;">
, sans-serif;">Please could you let me know whether you are interested=

in hiring a Remote Virtual Assistant  (
lor: red; font-family: Calibri, sans-serif;">like Cold Callers, Appoin=

tment setters, Marketing associates, social media managers, administra=

tive executives, digital marketing, lead generation, data entry, etc.<=

/span>) to work at a reasonable cost?
>


: 0px; letter-spacing: normal; font-family: Arial, Helvetica, sans-ser=

if; font-style: normal; font-weight: 400; word-spacing: 0px; white-spa=

ce: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255=

); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-=

text-stroke-width: 0px; text-decoration-thickness: initial; text-decor=

ation-style: initial; text-decoration-color: initial;">
font-family: Calibri, sans-serif;">Can we schedule a quick call this w=

eek/next.?


text-transform: none; text-indent: 0px; letter-spacing: normal; font-=

family: Arial, Helvetica, sans-serif; font-style: normal; font-weight:=

400; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; b=

ackground-color: rgb(255, 255, 255); font-variant-ligatures: normal; f=

ont-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=

ion-thickness: initial; text-decoration-style: initial; text-decoratio=

n-color: initial;">S=

incerely,
Kanhaya
VA Team
Note: If this isn=E2=80=99t relevan=

t, feel free to reply =E2=80=9COpt-out=E2=80=9D


l>





--Pk1hNnKXCGX=_1PepTgadx8VApKDdIx1bt--



Web/SEo/app spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5oP-00000000MBp-2kPO

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:06:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:06:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dl1-f46.google.com ([74.125.82.46]:46310)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE3H4-00000000JbP-21yY

for sales@nk.ca;

Tue, 06 Oct 2026 05:23:34 -0600

Received: by mail-dl1-f46.google.com with SMTP id a92af1059eb24-1517bda04a0so185224c88.0

for ; Tue, 06 Oct 2026 04:21:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=amysoftsolution.info; s=google; t=1791285699; x=1791890499; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=AO0yaYJu2hCsokJkjhgD0CMb5NhpHBGTwPc2cgSaJ9k=;

b=WkjwO1tyKj5KV6mKIdnG0KvJeU9Ff6V0L431bafSF7DMJ7lQW8b9ItlieKHY66EPF4

2qjrZ8U/wI0Zo5ioheAmbYn6KnH+rx9v2Soj299EeBllUHMKK4T27iggc+5lHr/0oumz

DFGSpVsoUHsBXW0GeyeOLi5Ldf3woyoOZEGS8=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791285699; x=1791890499;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=AO0yaYJu2hCsokJkjhgD0CMb5NhpHBGTwPc2cgSaJ9k=;

b=W6zK74jEeOG+uZWOY+UWE3Ok19Hg4XqB2Zm8pUJKdIGn7YwxTkyj8TEtZE8yYWru98

jzCd1I/lG9EOPuzDLr9QXIjtlB7JsXFrUxqAPNuBPWDPOm0oTo7wOTTXkn7WOxQKZstu

+6vRjEOGJvPOjr+gr9H9SoQDAHvgxEvxpCC/j/rFMIrGCVdK239hGnJ0jhxwlxKuzB7h

zbmjUO12eDgPODehJ6JsTRLxxeA2NTfdrlgV8isgP1sppjmUYb+Hu5aS2b/dySsYjOto

AMoDHXXWGrHoT3eapTgtCQ4iB0U905hSPPpwNOZLrpyziHiPeM+pnCI4r17ZtcmoZYUO

6C8Q==

X-Gm-Message-State: AFuF++krGB5SknUAxfIQ/TtCqpLyb9a1jm4DrvtRZTH3qVs/gZ1+E3j+

kgDYthKZftvyUQQqhQsenB+VQxsDw3wKP9hLcjH+2P+BHVgkotic5vVlSpvjGCXJaoknwLCI2p6

jOFyt

X-Gm-Gg: AYBFou3bhi0eTrv11C9LjWabKgoAm9YmFJiUDLsAXbhGMGxyHwbOmgnAbN8c75N2d27

k6DlYBa6f2z6GrafmPSO+KEgu0++bYGzWzXyk4R5Zi44RjlKt/qp+22JgOotczw08ZnKZ1RNiEm

Jbb2iv8gySvXowq4IffhLEPRvWyyXK1ttxT1Pcbmph7I0NlNLhkZXqRWE57dKhfugy1ZvccxvWc

SXenZAqK+y4KiM8rfjKiUHjSN+kbqw/TEQL+wE1xymb+tEFlyrQ36Jv6EkGdq8dMuGW0wsrRhe0

jD+aVO/Eayr6KpLmWO/cgZfry7E1HAERzrY0U6pT057fcP9xBqeOsfVTn//C402jn5iWZEcL20V

HAKVhkjjR8J0qb9JDOv7sB1lQ7Y3vJB2r1UTted+ByMw9qm37M9a7GanV265vRVX/QUR67b70nv

dTH9hNOi1AfrPOcBVYIYXqAX/EpWHRePP/i/VWTdA0mMIeSXTzHY6ImJ35XFTc/ku4MeNlM2CLX

9oluFvcg3MQ6fNj7cPZ6mkecCk=

X-Received: by 2002:a05:7022:383:b0:15e:9126:c60f with SMTP id a92af1059eb24-15ecb3bab4fmr1615963c88.29.1791285699199;

Tue, 06 Oct 2026 04:21:39 -0700 (PDT)

Received: from [127.0.0.1] ([122.161.50.206])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-16044b97384sm575561c88.1.2026.10.06.04.21.37

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 04:21:38 -0700 (PDT)

From: Lane

To: sales@nk.ca

Subject: =?UTF-8?Q?Need_a_Custom_Android_App=3F_=E2=80=93_w?=

=?UTF-8?Q?ww=2Enk=2Eca?=

Message-ID: <57f6311f-dbbf-c88c-571a-b4a8d934b641@amysoftsolution.info>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 06 Oct 2026 11:21:36 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 20.2

X-Spam_score_int: 202

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Sorry for disturbing you,



Content analysis details: (20.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

[74.125.82.46 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

[74.125.82.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.46 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.50.206 listed in sbl-xbl.spamhaus.org]

[122.161.50.206 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[122.161.50.206 listed in zen.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: amysoftsolution.info]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: amysoftsolution.info]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: amysoftsolution.info]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.46 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.46 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} =?UTF-8?Q?Need_a_Custom_Android_App=3F_=E2=80=93_w?=

=?UTF-8?Q?ww=2Enk=2Eca?=



Hi,

=C2=A0

Sorry for disturbing you,

=C2=A0

Do =

you want to develop a mobile app for your business?

=C2=A0

If =

you are interested, PLEASE=C2=A0SEND ME YOUR =

CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

/>=C2=A0

Regards,

Lane



Sutton hotel Employment phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 02:52:00 -0600

Received: from mout.mail.com ([74.208.4.200]:35417)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE0u2-000000006lZ-1wC2

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 02:51:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=worker.com;

s=s1089575; t=1791276577; x=1791881377;

i=suttonplacehotels@worker.com;

bh=DJTT7TBuCrHIT/gCVklSo1nE6CYGzaK+XAqedNaxfnM=;

h=X-UI-Sender-Class:MIME-Version:Message-ID:From:To:Subject:

Content-Type:Date:Content-Transfer-Encoding:cc:

content-transfer-encoding:content-type:date:from:message-id:

mime-version:reply-to:subject:to;

b=U9FbfIRvV6t9BxGyl92g+XQW97uNHtDccMzV3+Z2XtRw3JGaZ2ZHbWwMjL7xunGM

jjndeAXIoa1izs54ZZRLUD5eqJ3lnGPooWQXweDfq4rel0itco8opz+YJGnZPbqpa

eThOsblyVlbItp+Rs/5DaMrn77/Ntw8xMmosSziw2A8HE1HpIGdMy9iiCg7gM5EHO

/6bbTFDRyhGnaGp3eENQecwnCkgE+/M7KVK0AgqTo+ceoXwwLFbLqw+VDolaT8bPv

ioK90cLN4tzf5G3i9OABbU+Xyy+WtpnXMd+QvfUeTX0LmSjvkNdNXHNF+fU73pFWo

HIGPkoQ/i6jPjMuVBQ==

X-UI-Sender-Class: f2cb72be-343f-493d-8ec3-b1efb8d6185a

Received: from [137.255.195.224] ([137.255.195.224]) by

trinity-msg-rest-gmx-mailcom-live-6b476b5775-26vzt (via HTTP); Tue, 6 Oct

2026 08:49:37 +0000

MIME-Version: 1.0

Message-ID:

From: suttonplace Hotel

To: dave@doctor.nl2k.ab.ca

Subject: JOB @ CANADA HOTEL CANADA 2026/2027

Content-Type: text/html; charset=UTF-8

Importance: normal

Date: Tue, 6 Oct 2026 08:49:37 +0000

Sensitivity: Normal

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-UI-CLIENT-META-MAIL-DROP: W10=

X-Provags-ID: V03:K1:6lpsnnQMw/SwU5Uei2GH/M3IZSl92zvUl0fszYGx7EtNiAr+J6sGIVeTDUjlcVGTwB80A

4giov2rHy7TPonn9wnpufVsyqh0SLgkoagGDv8aLaG9fSGqeELrtBSrqtm2q69D3JCoK6DloUeHm

EsJJGpk4D8p5bDOBQi/2ZMVTF+MWl6w0edoEla4K6bCqq5FPSSM2mjWXmIZ517/DeQZEkeA2EotP

YG9QkYojdIsTKUg7SPf2CBacxb6QQxGee26clr1q7fWQkNrLSwZv7Y+QaZfa9thSSycP30E545Mi

HcI+qta49A1r74FpmjjnoBdFQiR8gGO9PWRq87jLmq0Jastes7O1iJtDXpn3ETODrT1e7EeQwWaA

YfSkwcKixHT

X-Spam-Flag: NO

UI-OutboundReport: notjunk:1;M01:P0:f6/ZhzMSmm8=;nBgyQXbDLCLUF3Eb6TLQoJRhNUJ

+YSqlcaUuj7mBpLSwMeiiFRG/wUBFgGjkPKKCso6osjwD+FyoAf414G+tKYSLDpbmmaFiNqg3

5jpYTv1tJRyBUFKj/b7SuqMMdzrSFyxmcUdR5imcCuhhsekvOFhZ2/Wl4vFVc79IvNCmhj9Q2

ZEcgwtkDwSo4oBe4wcOcoyiH5W+E2tmIWezQJItaGgIO3KjrBhmcF/gMhkgoCUxlOXBWk8EBj

0xKWx8hb+eZRaQvWKKzLy9rlC4XBFyl+uopuVc9l6DZsjfMa7cxCGQNLJqjw5Wtqho/FvG4oX

e+WXknElBnfsEDlnSUBLba3Ph3ZZ7ZJGWyLkcnZsMxa7WD5yfkkhIbGIR/nBN4utCzX07vkhH

aI6bDoVCxI+1E8qnrOu2FZfjcx6fEkX5hzSB6tSpYYo2TUWPnNljzDWcJ+io6KJqNGIC/b0RR

iCUZVYH0PhIfwMqMzP5zDeww+SfMvTgyrDsHicLeucvmoN1idtzifHFtwA1K8IT4TIhDOKNso

RCpvok7XrsXwk5ZY6AeF+XkadiFPDO9m+r098rrP06W6u1wxJz9pefbGqf/ltqgP/jeSsSpud

G/+tDOUiX5/KPhzh8yrvTruTy0VnfGddgO7mOgftRVFUzLJQrCVmFXUAYBEZcDgRWJoWN0Wt0

yC1OoWgsu5h5I09XnAPlNxoLmKZYpxW+Y2iBYkGzP8LxPyADp4O2AlF/ByE9ZpLG+dTSI3FQ9

tE0f2dr7q9kk3uoaoPxQX/p0M6EG4sOMQaPE9b9qIWWIbzYf6FoDefmM2JD09aUAuJZKdcPmr

5pHUA3gbAIJqCXtPaGZWf8GgRBd7kRzZvAEVg7S9tsuU9zoBZf0wwEinnJC1F1KFhMKau5bva

98Llj/wzR5712MXuWkpuj82Lecsp4ygidyrqpbCsIMRz7CkTG6LdAPID/IL0aAnCPbTAuLvP/

iXO1ERBgIwO2ZB/LCVxBbhYqEQV0/vvO1+5RYGJLMw9nVfPAG0T/g+zC0I7eH42QS/vpgWxb7

bxUDL0/2ZQehwQaFz+QgkUPXOOvBB1AY5fTvvi+xOcLGl8axq2oUm6h007sZIt8R0+U8LC4hB

qOx/WA81Kwf1QqQlVQme0frrtp4BshZTZEPiN5hfGR8JAMJz55N3Q63aYkYLSy40CaMgQ94g6

yACrgUvwxMOC5HZmp5SXAdprGjG+n0Cp97TQ0W+0Sxu8mHEQ+2UYiB25CDqGZoHNR72PiAh/u

kPgTySzkADY7wYi35bs/kQ/qk5swJ1/VJ7/DBh3pFq/TwxdMojkAUyPC/VOJUrlUAopRXuUlx

HbBF/R6hjZWYmCxRsCAQN2JW7/pR7ICGhKRd7cVi3CPXqm8ZRTmy5sYM/ktrNDtxTYE22a12N

RhQ6VY8j2AmSI+Rgn6qLR+R5qsOnOHO57a1vmQKobGrPdTpBUdtWENnFFBoSMuesBxAAIzP9n

v/GPILv7KE9IJ22oxD/o0SPuLqKhMAIeO+NkDTR2ItqhrDSmg4FQ6U32yK8OgnNgIpXwvda9x

mvpjL9gI8vrQMj8s8mXKD3vvm6VygFgyQ0mGpZgfSMEvjWP4XvDGjY8Y3EW8qTLbZxiTrDgDl

Z2AlG5fFQB2iUuaZKn+fXvx/YXUlvF3D9ShcjQvj/m8zYLU3W/kzJRRCw8e2q0o53LIKiTNiH

7YkZW6QU3xG1lj0mDPkOEeEG/CBuWAja8fvS2nvmRwEUO41xMHRpq+DQE1iFk49Hl67i7lSnQ

udc/jHldgHQSOYOPxsCc9tObItGTkhBUWnDIONP3iE34ukdD3E4IQxIyGdmBY3a/sNtKNVwSf

d0bgqRhjd/GcqfOfCyUP8698DR9e7EtlOEwX9EElZPCCLt1oIxbguBvTcIxrcBdXZOKOghkDU

HU4REqqJMXShZmr5Q3IMsQOkNNBh6+0J6sy/riHOG284kMDvvMr37pdRJ44hVUakspTC7+uLd

BUiumm5W8vn40CpQf1O/rP8NqmRJwPy9hFoi5Ukc9PVLfbWS+HVM9qe9593YnvszsaHEfzUK+

C6Fvt/peNyVyUcWSv0BKAkcVBiXckI8wRqBkuN/OZJQcCqu6JeJNxXlBNu7IKZpGNYi+4NGFb

9kU8TGLEcEytcEF8SswOOtPgHvo6ExjNDcZ+SSrAL5ihGSNrXlVBZltiA7d0BYYLosJLp0z+t

EupN/phsKpeLYIRYVlGBU+j2CTjsCOoVLvJDq/lUwSeqoM5gYMIj2HYFJssvr/lUGVFPx1OUe

pfEv9+n8bUt0EAcCMPh972ORWiRoLM1AsZUynLGuyEJYquzYVXGQTkBAM0LbajLWJn4441pFN

1FUGgjCCofTHeRv8UNZnlXSitm/j7f0o77wXavx7I3OTsmBIojq7DIpOxEEuooXxmlZerb7St

Yo2sn33CYZlx2rr73S5TVP/cjs5KILtzY2a65ZwqV4uRg4+RFooWuxJlFIoENF+CNT6YiC3lG

rpLMs5wSCJetzvxbODmX0fbNlbWN57CKsXPH+bZbiJ2shmgrUk5gv56RRKPF2aINrZXluYSSp

KjXYPKIK8b3OxiNBRPTZ3PQDz0YDAGu/MtDooOruOmvtOnC1N611yenWBH+S3eUAHbrZOLX5g

ZgBy/ddkfKXGW4Q8ukZspWvj3hN41Zru8p7kunvRM1gDMHAYtPXC40z6Dca4VQGl2ADF6bVtm

tHkYcCBybNI4o6+JAjnkxYEYcIZskp5FjjlZoKiXzGa7NECcLSnFhaGKQUJbUVP3t465GRHOx

gW67vkBMVeCcXZCOI/GPxbeayT4EcMwa4mU4T21nSNHT6QuefL4I4KM1ogZ7ENVH8HAVPDuy0

1MaZoxL3jjA8ilgBFj/zO1MwOTzkPnRN/d+wHiqXdpVBIXlVFU/zsbKhkJ/OFTgdwYMKIA1N5

qPEZIB5uIEc4k6oXQTRi9HNdIEy+NGWAPBmjyDiM1lH6o4epdywg+o7sRFnTk2AVqv62Ch4pO

cc+ZSsWvhsAm21rIcCssSxU2rRmg5h+7UhTjLI5rfMGA0seWkk6g0Zh/dWi9SsZRTDaNk6NnQ

L+gDBuxsxVE+Uc0H7hMLa07vO9Zex+/biOOPcwDygFQH0t/CvTZxRqufzQvs+w1IZbNP7AQrF

qRbLOIS0opTSrmKdDwwVODnvJndNNm8y3I62Vq0KX/ufYkDzgoBYr55lfGTJPzWAz3IMLiu7h

f+GWouNTFn1ekm6s7+sw0HqMu7IpPaUEg1JyKD5mr9NMAKMyokPSxkrCfybKVqVFt+uexAhR3

EqxifZYzwoZW+sQbtLOPdQjonKYs+bdNDPCZQ4ixwaMholzkjxnGb0YDeTdr5YcHCcKh8/ELg

+mjZw/NdSbuT6k+HTLZLIzHIBnRvS/hGjO14Iy5OweHEHILZ5mhIqL9LUOilpmkrJ6gH0IqEC

OeQarEsEu18n6bw/cUyxVPFRXICZrpvyGW6rpLGqyMx8wjD5AtNaSD+rz2umz+hp5fqqiBnFH

0h1P7PXlgWf7/Zh5kUPc9AQdf+eKdhl6jst+nv1eGEMPfoxS+SM/rAEmHsBY5z5bY+h4YkCjM

JCQwiBXPr5Z59aypdB74bJdJ3uSgfCaRUNaP7yqs2WapO+e9HEF2K5//yykFTUE2xDfyz+wje

A+XRMG3T+R8LGRxGLTYIgJKzqC+uIpsLsDjx9y9YeRMVfaw8owBRqHsI8ouiFXorG8sR057tJ

4NrIVI3rdS9edMLFOd+PUPSPXsFLGUATX+Qc3nKXk3yxbz6H0krDiTISCvEqie+mUGU/unIlt

zFbWZhd00ruMPcjfqlj465PHk9K7YRA8PxyBoSH9SDDXwckZ1Aa208lFyFz1ywDrmDmcrTi+c

X2CzHimgphUBou81lytp0OaLkzbMVdVfHrmCBU1PMHJeeqpHOXwaeSfSHPmijJYIv0e3A/MpP

KpkApolWQUDhnwEMJPUXACse96zuHUchrqhrGq0XFD9Z16RHVVEMdxl0KlNYeaIlBMx36bfTZ

MYsT+2kOghZ7LYyNPI8rNwQNDHzajaqTORRR2KsI+BFmlT+6FkLt2nOBP5RlKHuahW33vC91E

wx9Vi3IJIci6l9rawlMFJcMgF6rhJW+iIg5ILa+nWmb/kUPHOocZbY2gK4hBQ+fct1hSu3mWo

wOINFkMxEwnSpDkXwoFHgURMVJ6D2kBWB73q07B6vMnyfVfOYFR9c2Fi2mVpxzfV5eXzLKlLg

o6HaDzJHgYMA6wmmw0OONFXcaq2Y5FCuPpkwbL9FpKUjDjH5jl/Uk/iirGPNLmrPyvyL69j9W

uzysXN17XO9EaMqxIpsfb01NlGwVpbGdiLGBdYyagmIKD2qpJHZcMQkEbjtZ1RWloUcD2QZ+e

YVavytj8zZDSL627+m3GXx3gLAOJrRCkC5/78JzawhhfK5vfBEyYBIE5gqJzgKpyyctqbPbN5

WYcFz0hKRz6WusMor4Z3zDW6bHLfN5PF8683+M5gg7DYNvpZIIJR48n/oc7SXNlC+t1kkE4UH

tWIdW3IPOQOj5PsRhf+7oOQCuOC6QrIKfaAffnBkMNvk4KosCBGd/CvK8PsrhyX3LI5YMOs1p

p5klHbJnHO9kNvaNzuShKmLWos35hzb2r7IOQCbRFmGYtUBOfLnh+SfAz7yANh9gxp4/k+4Hb

PmOl84omw4OFvABUu4J0AuULEP/G0N98TkF5lsjA56v9KDmu0C/VzKSxhTXvIDOohzTP66gjt

rdFxcQfq10QRZAqVoAJapblbrj29W9AT6GxmxPggfJjj/JbaqTfPaoXRKmRR/Yyuv0LJPHWHI

61vw2+Rr8N1VV5OH4VISNZ511rE0lmi5v9A2vc18yIQUH/QUGq5ucyYDBUCStYsMQJbclP/X+

0rBXtD9WAk1UO/1GX8lmdeTrPANkbVRAmYk/30rOtrluduqpWQyUj1/+jkPkT29wjYTQrHAre

wSWSLN8V6xOKgHaLQ4pokKuoTQ0nsG1o+zN8Wtf5FCRmGb3KYEAigrGapGzW2mLoVjYkuWjJ/

VQ5tKUnJjj6Uoiqr9S7+hNB2BromHMC6fg0zFbzmoUx6IMs3dpZ41rHGl/CtexrpLEOPBlhRw

8WdrzhUeJrt65Ppo4TN0Bvejs3svseSOKCASt0DzQ1jBa8tYmYjUUrD8wxZEF+zKSUsw+dCfN

1UMrV+eiV+Zr90lnyUGUIgb5kBT4LS+yLRozkImeEe7uRvsgoRC97UF7Hoz56NRQw9L7rtr8/

EF2A2lc9Su1lfzR88iMVoV1g76y9B2Yz2tJ5DExK8F46oYd+irGM9zTjkkebAsbVNmyG8o+y8

w94tGCknXxUviT9wc9Tsy2H3f4hKcdBTRkQXRELIK8J0m1DRE/pNUVUP4T5YRqS4QRsr+UFCM

dJiUJc6KqIcPZ29ofV7V8F/ImFNfFZGNzeEvdUMve+jnMFt5wihGLvCmh8OkERDSN7xpV5kHw

yk74HJSfR6A+DcyyPqtonvo8Dd7DIjFPHQajwb8luegvauym/tjQ0L09RgshifirLvL4d53n3

OLJFL2Vap37Fo5yyyMmVW0GJr2S4HnO4khpsV+Dcif7s6Xt6AEAMpFP9CK5ZOHAwAf/Q7Oyi3

dkyra8Zw6c0b4/hWVwB33MtAXDjicEJJDtuCKovBe/AbDZIgHQyUmBXnCJPcX/8xpSM1IQ==

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PLEASE THE SUTTON PLACE HOTELS CANADA, are recruiting new

workers Opportunities are available We’ll offer You Air Ticket,Accommodation,

Medication, Feeding and other relevant services as attractive [...]



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[137.255.195.224 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

[74.208.4.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

[74.208.4.200 listed in dnsbl.ahbl.org]

[74.208.4.200 listed in dnsbl.ahbl.org]

[74.208.4.200 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

[137.255.195.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.208.4.200 listed in dnsbl.ahbl.org]

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[74.208.4.200 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[suttonplacehotels(at)worker.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.208.4.200 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.208.4.200 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} JOB @ CANADA HOTEL CANADA 2026/2027




#000000;">
ound-color: #ffffff;">
fffff;">
;">
pan style=3D"white-space: normal;">
tyle=3D"float: none;">PLEASE THE SUTTON PLACE HOTELS CANADA, are recruiting=

new workers Opportunities are available We=E2=80=99ll offer You Air Ticket=

,Accommodation, Medication, Feeding and other relevant services as attracti=

ve salary awaits you=2E QUALIFICATIONS, (a) MEN, WOMEN, FRENCH, SPANISH, AR=

ABIC AND ENGLISH SPEAKERS=2E (b) SECONDARY CERTIFICATE TO PhD HOLDERS=2E (c=

) AGE IS FROM 17 yrs TO Unlimited age provided you can render the needed se=

rvice=2E=2E =



style: normal; font-weight: 400; white-space: normal;"> 

color: #000000; font-family: Verdana; font-size: large; font-style: normal;=

font-weight: 400; white-space: normal;">
ffffff;">
style=3D"color: #000000;">
e=3D"font-style: normal;">
white-space: normal;">
: none;">Send your resume CV to this email address for more information wil=

l be send to you,, =



; font-style: normal; font-weight: 400; white-space: normal;"> 

yle=3D"color: #000000; font-family: Verdana; font-size: large; font-style: =

normal; font-weight: 400; white-space: normal;">
ff; background-color: #ffffff;">
ize: large; font-style: normal; font-weight: 400; white-space: normal; back=

ground-color: #ffffff;">
lto:suttonplacehotel@worker=2Ecom" target=3D"_blank" rel=3D"noopener norefe=

rrer" data-href=3D"mailto:suttonplacehotel@worker=2Ecom">suttonplacehotel@w=

orker=2Ecom


Database for sale spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5n8-00000000M6A-1dNv

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:05:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:05:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from relay.idcloudhost.com ([103.193.179.117]:57290)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE0bs-000000005B3-2X6z

for root@nk.ca;

Tue, 06 Oct 2026 02:32:54 -0600

Received: from relay.idcloudhost.com (localhost.localdomain [127.0.0.1])

by relay.idcloudhost.com (Proxmox) with ESMTP id AB1CF1CD71E;

Tue, 06 Oct 2026 15:29:05 +0700 (WIB)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ischotour.com;

h=cc:content-transfer-encoding:content-type:content-type:date

:from:from:message-id:mime-version:reply-to:reply-to:subject

:subject:to:to; s=default; bh=i8vUIrFg1XTDWwzUwj81mlj+P+ocqyupMw

PcRJ7aMAg=; b=qd+jTDq++SWT2qOgw4tEYU/o+BeMmesnnLyMLIhOqDFXr1DYJM

2a3Ws7DF5oIRRIDyIl7QobiNwkM/R9XF/ACjTVog7j0Miiq5jZIqaKcFnJ1rUhVU

Q9QND9jw796bOGRISSGZrp9JsUZSO4/1w+AaLn8QQH+C53pW75NyJ/DXYaFmRIZw

kamO3Se7xLnb4YB6t5TE9WNaOysRswUxKu+I+AdY0UzUGVeAu9GhkURCeeaHQMzr

JlZuONvTlQfBpK1Xu0PERqE7dy0cMqiW6mmly6XNQKSS1yhtsObNRZ0LQI5dHqjl

ztnxVNgDXpae8/Iq2+5sCnVzllzE6MWKtIfA==

Received: from iix1290.idcloudhost.com (iix1290.idcloudhost.com [103.63.24.141])

by relay.idcloudhost.com (Proxmox) with ESMTPS id DF8081C9101;

Tue, 06 Oct 2026 15:28:38 +0700 (WIB)

Received: from [181.36.167.206] (port=36262 helo=googlemail.com)

by iix1290.idcloudhost.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1)

(envelope-from )

id 1xE0W7-00000008qIu-3RpV;

Tue, 06 Oct 2026 15:27:19 +0700

Message-ID: <2d2d70db2febc1caec165ff18084af31c24889@ischotour.com>

Reply-To: Paul

From: Paul

To: Kimberly

Subject: 1win casino database for sale and cryptorino database for sale

Date: Tue, 6 Oct 2026 10:26:18 +0200

MIME-Version: 1.0

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable



hello,



I am selling the following databases



All records contain contact details such as email addresses, names, physi=

cal addresses, phone numbers, and more.



1win.com.sql (An online casino =E2=80=94 very large)

63 million records

Price: $900



cryptorino.io.sql (A crypto casino =E2=80=94 complete database)

Price: $900



If you are interested contact me on Telegram at @paulxq9 or paulxq99 or p=

aulxq999 , if one username does not work try another.



I accept only bitcoin or another cryptocurrency as payment method.



Do not reply to this email, instead, contact me on Telegram if you are in=

terested!









wlnflootvmobcfnnqsymqxckrrmjqusaxliymlcckmfjcsblnakllew



Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:05:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5my-00000000M5D-1WeL

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:05:04 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:05:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f71.google.com ([209.85.210.71]:48486)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <366fEahEPBqoWKbVOXK.ZKbKcMRSfVSMOeVZOMROK.bYNYMdYbXU.MK@maestro.bounces.google.com>)

id 1xE03O-0000000021m-3Dzd

for doctor@nk.ca;

Tue, 06 Oct 2026 01:57:14 -0600

Received: by mail-ot1-f71.google.com with SMTP id 46e09a7af769-82412fd5f11so3225538a34.1

for ; Tue, 06 Oct 2026 00:55:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=liceulpechea-ro.20251104.gappssmtp.com; s=20251104; t=1791273313; x=1791878113; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=pdGX8mjfIP51RhvEDvQQ2rJMWYZfEzeJLz/OLjpDkVw=;

b=O8QAlknmuTtXNHA0UQBj8Rf7qFBX+tNmSuWiD2hVoXrf87E+Xykjj1XDT8/8nuBiLX

zdhclbFwKrMfqoxkUC+ptrn/OithSCfDmfFklFxgK2KarBwB9LXpsH9sl6yshilq4tPK

cILZEhFs4tq3PmkiXcriXIOfdc14pQ8Rr9Fzddp6gDHyf6h6yaSo46fFnTIYXXv6sGZ1

Jk/qOMVp58YjereRR3mwmXbv/tltuiD5KTFVDyTkqgW5o3x1Auyhif8VJKV/pjU+0mTi

F6O4/42pM1E7RjpU4vfJ9D38BDZJWTfM2CzDhtv98wG9peD7OAj3BIVU7GRP6WFaeZI/

WGoQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791273313; x=1791878113;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=pdGX8mjfIP51RhvEDvQQ2rJMWYZfEzeJLz/OLjpDkVw=;

b=bQm3IDKqnccXwGC4oGQrEejL0sDOCml/4XE5aebQbEHfKMARR5orwipM2cUhnPBCwh

gs7hyqln65+YEyWUeDhdrMRd0V0tciHsJXLn29oWp8c51s3Wb+w0Ah+Nhx9Sg6RlqS1K

usLtIn74z6wyHQDItLHfZ8d5wD1Mx4y0OakK8OJ2xWO5jXCNGmRRqJxVbZpWD+2NrU/K

hpZu1SNxMJSSeTSrE4D91/CzdzfAlx+5ME+j7h7mfXZAv7nSnD89OyHJoUSraAcV7lK9

twmp4Q75c+G35yB7zutyfxjQq+2BXOrSnSKawAh85cSE/WBlPmL9vlOBcWlIZZ2fzU6B

rgzg==

X-Gm-Message-State: AFuF++mQWM8/3zs8jfGu/sTIiIt0OI4vIXIQnjr8hxybn3zPrrVXVwAu

CjFpd4ICRQUmFRfe/GGJnD3Sp1qsh7EtQvZoukXTA2gghAFJzL+Qgnnxl8P7C2bDOWnkuhUEB5x

Osz0ugRX58OPGfu+IG6DjUOn4

MIME-Version: 1.0

X-Received: by 2002:a05:690e:1913:b0:677:d478:a0a0 with SMTP id

956f58d0204a3-678fcc5b157mr185719d50.2.1791272939789; Tue, 06 Oct 2026

00:48:59 -0700 (PDT)

Message-ID:

Date: Tue, 06 Oct 2026 07:48:59 +0000

Subject: =?UTF-8?Q?Uw_pakket_is_onderweg_=E2=80=93_bezorgdetails?=

From: Aramex Koerier

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000045b1ee065d273b7b"

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: aramex Koeriersdienst Trackingnummer ARX-94827561-NL Stap

Status Datum



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.71 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.71 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.71 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 IMPRO_URI_2 No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

Subject: {SPAM?} =?UTF-8?Q?Uw_pakket_is_onderweg_=E2=80=93_bezorgdetails?=



--00000000000045b1ee065d273b7b

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



YXJhbWV4IEtvZXJpZXJzZGllbnN0DQoNCg0KDQpUcmFja2luZ251bW1lcg0KQVJYLTk0ODI3NTYx

LU5MDQoNCg0KDQpTdGFwIFN0YXR1cyBEYXR1bQ0KDQpWZXJ6b25kZW4g4pyTIDQgb2t0DQoNClNv

cnRlZXJjZW50cnVtIOKckyA1IG9rdA0KDQpCZXpvcmdpbmcgT25kZXJ3ZWcgNi03IG9rdA0KDQoN

CldpanppZyB1dyBiZXpvcmdhZHJlcyBvZiBraWVzIGVlbiBhZmhhYWxwdW50IHZpYSBvbmRlcnN0

YWFuZGUgbGluay4NCg0KDQpCZWhlZXIgdXcgYmV6b3JnaW5nDQoNCg0KDQpBZm1lbGRlbiB8IE5p

ZXQgbWVlciBvbnR2YW5nZW4NCg0K

--00000000000045b1ee065d273b7b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




h:600px;margin:0 auto;font-family:Arial,Helvetica,sans-serif;background:#ff=

ffff;">









aramex
>

Ko=

eriersdienst




nd:#fff3e0;border-radius:6px;margin-bottom:20px;">





Trackingnummer



:1px;">ARX-94827561-NL




px solid #eee;border-radius:6px;">


















>


nd:#fafafa;">

Stap


und:#fafafa;">

Status


und:#fafafa;">

Datum


e:13px;color:#333;">Verzonden
px;color:#2e7d32;">✓
px;color:#666;">4 okt

e:13px;color:#333;">Sorteercentrum
px;color:#2e7d32;">✓
px;color:#666;">5 okt
Bezorging
d>


d;">Onderweg		 6-7 okt


Wij=

zig uw bezorgadres of kies een afhaalpunt via onderstaande link.










1#t/c/c5d7e8f9ea81fd3f0f95" style=3D"display:inline-block;padding:14px 36px=

;color:#ffffff;font-size:15px;font-weight:bold;text-decoration:none;">Behee=

r uw bezorging




1px;color:#999;text-align:center;">


1#t/u/c5d7e8f9ea81fd3f0f95" style=3D"color:#999;text-decoration:underline;"=

>Afmelden  | 
01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/c5d7e8f9ea81fd3f0f95" style=3D"color:#999=

;text-decoration:underline;">Niet meer ontvangen



--00000000000045b1ee065d273b7b--

Dutch language phidh from Google GMail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5mm-00000000M3Z-3b3b

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:04:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:04:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f199.google.com ([209.85.222.199]:47292)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDzlA-000000000Cj-0MJd

for doctor@nk.ca;

Tue, 06 Oct 2026 01:38:23 -0600

Received: by mail-qk1-f199.google.com with SMTP id af79cd13be357-93cbacbb996so412900185a.2

for ; Tue, 06 Oct 2026 00:36:29 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=afu-edu-np.20251104.gappssmtp.com; s=20251104; t=1791272183; x=1791876983; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=HlhxDfAyud7oQ6hAtax4HiK9q2o/CcWJtfFNq3hBMGw=;

b=aq//AXA2SZ21XoTFIwAzHJURMQcAHr6bMN2qsGd202ZJi2eHN1kI4STeUg4h0Yry0C

Mik50shsWQgiNrSXfzcU2Z/L0vtoC6Yr+Z9HEhTtxp2QEPyGuZ1+vZjw3GE7Zfw+kxeg

UiaN7JbJ+HP5/0Sz6HoqszdBHukhUkkQZ/fiBwbpkJz9eqsvkaJIUfmyfLUlt9zjHJ6G

0RVwqbqVXukgjV5qEFvlEspxPnzuRrtkXjQD5DKDPO9j2BlovNMYByXbmejeyeZ0cxc3

x25N5u7qpVM413LAE32lu7Qrtofx2ttY9ZLjYKkOj9nBHha3lFB5Gt6KK72Q02fHkHSq

0h2A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791272183; x=1791876983;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=HlhxDfAyud7oQ6hAtax4HiK9q2o/CcWJtfFNq3hBMGw=;

b=loKHIMMsbhksyYGOmAfFXqPQRWyoGB4QW7UwRgbnEzdZ6AdOP0uhm5vP8sif7+M+Ba

ApN12OnwIGv2EBglOYGPAMW/tPAQe3pbtOZ6fg3YElOYiHGAhZof32PaiBmBMix1CyC9

BaaPxzhzSq+GWd5/it4gak8E24NND3lDm1Rn9Fh/iBEotffTxw9ncIn3zSbcSREgDLE5

3lBoynk3CKy/nts/z0PKzMohlZgieeoGDdelXOZryLHCY8GwoQUCW5TVuHKfEr4mtA++

Rl4B9RYSLFrP21boD5btQTGH5XeMJXWA9Vr+/HyBNjbZghEXKEUauUEQ+KLLe9HYr/eP

8hjQ==

X-Gm-Message-State: AFuF++neUiitVbVQNh6gYIhgj+RPKyTPD9KY4FbiQTUe4bZbnLVVKOBd

0GT8Ng1kUwPfVqQgtMFDEvOqI/l42E/baeyfwsO+g9mOBwbcjvh0IH+2OK7Wt0PTboQvU42+RFh

cSF0OJOtkTB1deFJYrmRawqZJ

MIME-Version: 1.0

X-Received: by 2002:a05:620a:6cc7:b0:93e:7939:acd0 with SMTP id

af79cd13be357-93e8f4a60b4mr98586685a.37.1791272182941; Tue, 06 Oct 2026

00:36:22 -0700 (PDT)

Message-ID:

Date: Tue, 06 Oct 2026 07:36:22 +0000

Subject: =?UTF-8?Q?Beveiligingswaarschuwing_=E2=80=93_uw_wifi=2Dnetwerk?=

From: Digitale Veiligheidsdienst

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000291e62065d270ef8"

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 🔒 Digitale Veiligheidsdienst ⚠KWETSBAARHEID GEDETECTEERD

IN UW NETWERK Uit recente scans blijkt dat miljoenen Nederlandse thuisnetwerken

kwetsbaar zijn voor ongeautoriseerde toegang. De oorzaak: verouderde router-firmware

en standaard wachtwoorden die nooit zijn gewijzig [...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

[209.85.222.199 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

[209.85.222.199 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.199 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.199 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.199 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_JK BODY: Odd Letter Triples with JK

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.199 listed in list.dnswl.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 IMPRO_URI_2 No description available.

Subject: {SPAM?} =?UTF-8?Q?Beveiligingswaarschuwing_=E2=80=93_uw_wifi=2Dnetwerk?=



--000000000000291e62065d270ef8

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



8J+UkiBEaWdpdGFsZSBWZWlsaWdoZWlkc2RpZW5zdA0KDQoNCg0K4pqgIEtXRVRTQkFBUkhFSUQg

R0VERVRFQ1RFRVJEIElOIFVXIE5FVFdFUksNCg0KDQoNCg0KVWl0IHJlY2VudGUgc2NhbnMgYmxp

amt0IGRhdCBtaWxqb2VuZW4gTmVkZXJsYW5kc2UgdGh1aXNuZXR3ZXJrZW4ga3dldHNiYWFyICAN

Cnppam4gdm9vciBvbmdlYXV0b3Jpc2VlcmRlIHRvZWdhbmcuIERlIG9vcnphYWs6IHZlcm91ZGVy

ZGUgcm91dGVyLWZpcm13YXJlICANCmVuIHN0YW5kYWFyZCB3YWNodHdvb3JkZW4gZGllIG5vb2l0

IHppam4gZ2V3aWp6aWdkLg0KDQpNZXQgZWVuIGdyYXRpcyBuZXR3ZXJrc2NhbiBrdW50IHUgaW4g

MzAgc2Vjb25kZW4gemllbiBvZiB1dyB3aWZpLW5ldHdlcmsgIA0KdmVpbGlnIGlzLiBVIGtyaWpn

dCBkaXJlY3QgZWVuIHJhcHBvcnQgbWV0IGV2ZW50dWVsZSByaXNpY28ncyBlbiBhZHZpZXMuDQoN

Cg0KDQpWZWVsdm9vcmtvbWVuZGUgcmlzaWNvJ3M6DQrigKIgT25iZXZlaWxpZ2RlIElvVC1hcHBh

cmF0ZW4gKGNhbWVyYSwgZGV1cmJlbCkNCuKAoiBWZXJvdWRlcmRlIFdQQTItZW5jcnlwdGllDQri

gKIgU3RhbmRhYXJkIHJvdXRlcndhY2h0d29vcmQgYWN0aWVmDQoNCg0KDQoNClN0YXJ0IGdyYXRp

cyBuZXR3ZXJrc2Nhbg0KDQoNCg0KQWZtZWxkZW4gfCBOaWV0IG1lZXIgb250dmFuZ2VuDQoNCg==

--000000000000291e62065d270ef8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




h:600px;margin:0 auto;font-family:Arial,Helvetica,sans-serif;background:#ff=

ffff;">











🔒 Di=

gitale Veiligheidsdienst




nd:#c62828;border-radius:0 0 8px 8px;">





⚠ KWET=

SBAARHEID GEDETECTEERD IN UW NETWERK





Uit=

recente scans blijkt dat miljoenen Nederlandse thuisnetwerken kwetsbaar zi=

jn voor ongeautoriseerde toegang. De oorzaak: verouderde router-firmware en=

standaard wachtwoorden die nooit zijn gewijzigd.



Met=

een gratis netwerkscan kunt u in 30 seconden zien of uw wifi-netwerk veili=

g is. U krijgt direct een rapport met eventuele risico's en advies.




nd:#f5f5f5;border-radius:6px;border-left:4px solid #c62828;">





Ve=

elvoorkomende risico's:
• Onbeveiligde IoT-apparaten (came=

ra, deurbel)
• Verouderde WPA2-encryptie
• Standaard router=

wachtwoord actief












1#t/c/3dd0f4d5688292d705f1" style=3D"display:inline-block;padding:14px 36px=

;color:#ffffff;font-size:15px;font-weight:bold;text-decoration:none;">Start=

gratis netwerkscan




1px;color:#999;text-align:center;">


1#t/u/3dd0f4d5688292d705f1" style=3D"color:#999;text-decoration:underline;"=

>Afmelden  | 
01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/3dd0f4d5688292d705f1" style=3D"color:#999=

;text-decoration:underline;">Niet meer ontvangen



--000000000000291e62065d270ef8--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5me-00000000M2z-0I42

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:04:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:04:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f200.google.com ([209.85.210.200]:42432)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDzOR-00000000O6a-3OBS

for doctor@nk.ca;

Tue, 06 Oct 2026 01:14:55 -0600

Received: by mail-pf1-f200.google.com with SMTP id d2e1a72fcca58-88b9d8c9e55so586730b3a.1

for ; Tue, 06 Oct 2026 00:13:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=afu-edu-np.20251104.gappssmtp.com; s=20251104; t=1791270778; x=1791875578; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=+RDjNda7qEDg1oRh2ccR+hTKDmvxGSxyccjcKmvQ45Q=;

b=R6DqOWA73Oj2UvNtr3e6WepeU4sbbATLdWweX3XAMhFMfKycpG4FgGfirR9ONeyMY4

ll0MHkBh6DmtKhg/EOYUA/xrlEVlSszvgptlx/NwiZEyK2hOmJtFhvHWhg2nUXdnTxD5

elMIv6PC6e7rL1ZsHp2pc1nsfdRoygUwn7xXy51Jnj1qd+K3mMycmwLbM2pOn1JAfK3I

tRfh7mSBgBmamxK9t/KUafjD6mrsIWG0jC/ML61tRkdDkrHW6qKdvtj7i2IXMgR79ZfW

BVqX0fwluSucfWdfT3MEVFjCxb2l8PTwtjWGrFEHSE43ZQf5sE1+A/l/mieGd/2JtPfx

mrCg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791270778; x=1791875578;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=+RDjNda7qEDg1oRh2ccR+hTKDmvxGSxyccjcKmvQ45Q=;

b=zooVJcqLl8R6WC391mMMtD7KGM+3ErCXk7s7kwBetcw4RS+73mflKfHf5p581fVj7A

rbaKcoBU+hD+jZnd3q6tx3Kf8A8g5SIKqnPVflYJYmkT810uknMuHq9IKzn4+ddNXEDX

jEa2mx3Lfq+5rqUmT57ggzwAKXptVRKJxIhA2vwIlHUGYbVeIot5aOA5hkvyBwjXG8T5

23gc8JURxqZHvrXuDfyHgo5gDdL47blNCxPmHI2aoLXpl1H9I3c7R/Sl1uWoIa7wHCBY

X6zZGZY0Oc+pnUdVay1ad3Sw+yNmtNPlBvyxQ2ukAtFWAjp0qgGyF+Dpb97xCdpmNMrM

VZ4A==

X-Gm-Message-State: AFuF++lZdj5XzEiBXPN01E6mwl6YXrRs5Zwz3JiLQn6fEGOoXiqq7u8l

T3EN5gj62ryGArweOYFm2ETkGNVudnoZiji08Z0b1Ve9LyfFkUDrW4WaoXg61axQOCKVEqSYtST

QCPtfJg82I+KMBSGWnoOYWiNa

MIME-Version: 1.0

X-Received: by 2002:a05:6a00:4610:b0:88d:a4c:3a5e with SMTP id

d2e1a72fcca58-8904926965cmr1374422b3a.49.1791270778599; Tue, 06 Oct 2026

00:12:58 -0700 (PDT)

Message-ID:

Date: Tue, 06 Oct 2026 07:12:58 +0000

Subject: Wat betalen anderen voor hun abonnement?

From: Nationaal Telecom Onderzoek

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000748dff065d26ba24"

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Nationaal Telecom Onderzoek Editie oktober 2026 Betaalt u

te veel voor uw telefoonabonnement?



Content analysis details: (6.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

[209.85.210.200 listed in dnsbl.ahbl.org]

[209.85.210.200 listed in dnsbl.ahbl.org]

[209.85.210.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.200 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.200 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.200 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.1 TW_JK BODY: Odd Letter Triples with JK

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 IMPRO_URI_2 No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Wat betalen anderen voor hun abonnement?



--000000000000748dff065d26ba24

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



TmF0aW9uYWFsIFRlbGVjb20gT25kZXJ6b2VrDQoNCkVkaXRpZSBva3RvYmVyIDIwMjYNCg0KDQoN

CkJldGFhbHQgdSB0ZSB2ZWVsIHZvb3IgdXcgdGVsZWZvb25hYm9ubmVtZW50Pw0KDQpVaXQgb25z

IGxhYXRzdGUgb25kZXJ6b2VrIG9uZGVyIDE0LjAwMCBOZWRlcmxhbmRzZSBodWlzaG91ZGVucyBi

bGlqa3QgZGF0ICANCjYyJSBtZWVyIGJldGFhbHQgZGFuIG5vZGlnLiBHZW1pZGRlbGQgZ2FhdCBo

ZXQgb20g4oKsOCw0MCBwZXIgbWFhbmQg4oCUIGRhdCBpcyAgDQpydWltIOKCrDEwMCBwZXIgamFh

ci4NCg0KDQoNCuKCrDI0DQoNCmdlbWlkZGVsZCBiZXRhYWxkDQoNCuKCrDE1LDYwDQoNCmxhYWdz

dGUgdGFyaWVmKg0KDQoNCg0KVmVyZ2VsaWprIHV3IGFib25uZW1lbnQgbWV0IGR1aXplbmRlbiBh

bmRlcmUgTmVkZXJsYW5kZXJzIGVuIG9udGRlayBvZiB1ICANCmt1bnQgYmVzcGFyZW4uDQoNCg0K

VmVyZ2VsaWprIHV3IGFib25uZW1lbnQNCg0KDQoqQnJvbjogTlRPIG9rdG9iZXIgMjAyNiwgc2lt

LW9ubHkgMTBHQisNCg0KDQpBZm1lbGRlbiB8IE5pZXQgbWVlciBvbnR2YW5nZW4NCg0K

--000000000000748dff065d26ba24

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




h:600px;margin:0 auto;font-family:Arial,Helvetica,sans-serif;background:#ff=

ffff;">









Nation=

aal Telecom Onderzoek



Editie oktober 20=

26






argin:0 0 15px;">Betaalt u te veel voor uw telefoonabonnement?



Uit=

ons laatste onderzoek onder 14.000 Nederlandse huishoudens blijkt dat 62% =

meer betaalt dan nodig. Gemiddeld gaat het om €8,40 per maand — =

dat is ruim €100 per jaar.




px solid #e3f2fd;border-radius:8px;">










solid #e3f2fd;">

€=

24



gemiddeld betaald
>

€=

15,60



laagste tarief*


Verge=

lijk uw abonnement met duizenden andere Nederlanders en ontdek of u kunt be=

sparen.










1#t/c/ce4bffee27c7ec4e8bd3" style=3D"display:inline-block;padding:14px 36px=

;color:#ffffff;font-size:15px;font-weight:bold;text-decoration:none;">Verge=

lijk uw abonnement



*Bron: NTO oktober =

2026, sim-only 10GB+




1px;color:#999;text-align:center;">


1#t/u/ce4bffee27c7ec4e8bd3" style=3D"color:#999;text-decoration:underline;"=

>Afmelden  | 
01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/ce4bffee27c7ec4e8bd3" style=3D"color:#999=

;text-decoration:underline;">Niet meer ontvangen



--000000000000748dff065d26ba24--

Dutch language phishing from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5mS-00000000M24-24Eh

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:04:32 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:04:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f72.google.com ([209.85.161.72]:45442)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDzIt-00000000Nal-1Sri

for doctor@nk.ca;

Tue, 06 Oct 2026 01:09:14 -0600

Received: by mail-oo1-f72.google.com with SMTP id 006d021491bc7-6df538053fcso3952150eaf.3

for ; Tue, 06 Oct 2026 00:07:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=pacioli.net; s=google; t=1791270432; x=1791875232; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=nyETHLua6RKonvYOpIkeDJiEBPXRnJ10oEwYBQb+6i0=;

b=ixH8xYieaNdmuatMQcc8yFVyFHz505yg5WiJ3vDaLwKZUCA4wKAHahcSks644uSCpU

UYD3nCUg1/Kxv2gJ0y/0TJzMiXWNtJ+Y2rGalFLCpXRVC6dFj33/6YsH6VO0xVBTzbd5

O6ZSb5PhNdmc9o/FkXofGA5P8/sopUoOEILhw=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791270432; x=1791875232;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=nyETHLua6RKonvYOpIkeDJiEBPXRnJ10oEwYBQb+6i0=;

b=w8coBlFYgwjfTiQ9ZSTQ+caKYGBkERTMiC+rMz/Hi9FBGDDOm3W1V7czNxNOC7NPV7

zS4cGnFE0GTSuCGgNpOxdkaQVxK7Z0B7YLI5RQlBuZmnJTxPqcQfdR3a2oy6dzNdSi6I

uAx5uHrbbRqAaLy4dNPfzjtve6Qe+P+Zy4ekGjyOV0kh1fypqKPVbY171txuFjx1xIix

TQbsNhQIP1KqYAq+9Bp36WYrkciCJYnv1CaPaE7rdMDBDDw+IKfvinAJAKtj/+4PYME3

wpK9mLX9uN4OhH9Nus2ubIn3dvX6KM4dzJkHKu6XPPdLsitxykS0Fi0+KmgoTdqrogax

1wKQ==

X-Gm-Message-State: AFuF++nhwX461gbEKH3wRjxt7KZKdKpXHPiBqTEI7do4hcOZ4McSO34e

sR+27VDd3d/qeoz1XOUzslSNWTj9Rpk0ijxKsx4D1kiU8cFmSDs9EmOJv8GYqNH2LBREPLpDfrc

noO1Faqb8wu1k0vpJ93dKQKut

MIME-Version: 1.0

X-Received: by 2002:a05:690e:440b:b0:677:b9d8:a472 with SMTP id

956f58d0204a3-678fcf062e7mr118931d50.79.1791269979821; Mon, 05 Oct 2026

23:59:39 -0700 (PDT)

Message-ID:

Date: Tue, 06 Oct 2026 06:59:39 +0000

Subject: Gratis EHBO-gids voor uw gezin

From: Zilveren Kruis Preventie

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000d82782065d268aaa"

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Zilveren Kruis · Preventie Beste lezer, Wist u dat 80% van

de Nederlanders niet weet hoe te handelen bij een hartstilstand? Of dat kinderen

onder de 5 het hoogste risico lopen op verstikking in huis?



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

[209.85.161.72 listed in dnsbl.ahbl.org]

[209.85.161.72 listed in dnsbl.ahbl.org]

[209.85.161.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.72 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.72 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.1 TW_IK BODY: Odd Letter Triples with IK

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 IMPRO_URI_2 No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Gratis EHBO-gids voor uw gezin



--000000000000d82782065d268aaa

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WmlsdmVyZW4gS3J1aXMgwrcgUHJldmVudGllDQoNCg0KDQpCZXN0ZSBsZXplciwNCg0KV2lzdCB1

IGRhdCA4MCUgdmFuIGRlIE5lZGVybGFuZGVycyBuaWV0IHdlZXQgaG9lIHRlIGhhbmRlbGVuIGJp

aiBlZW4gIA0KaGFydHN0aWxzdGFuZD8gT2YgZGF0IGtpbmRlcmVuIG9uZGVyIGRlIDUgaGV0IGhv

b2dzdGUgcmlzaWNvIGxvcGVuIG9wICANCnZlcnN0aWtraW5nIGluIGh1aXM/DQoNCldpaiBoZWJi

ZW4gZWVuIGJla25vcHRlIEVIQk8tZ2lkcyBzYW1lbmdlc3RlbGQgbWV0IGRlIGJlbGFuZ3Jpamtz

dGUgIA0KbGV2ZW5zcmVkZGVuZGUgaGFuZGVsaW5nZW4uIFZhbiByZWFuaW1hdGllIHRvdCBicmFu

ZHdvbmRlbiwgdmFuIGFsbGVyZ2lzY2hlICANCnJlYWN0aWVzIHRvdCB2YWwtb25nZWx1a2tlbi4N

Cg0KRGUgZ2lkcyBpcyBncmF0aXMgYmVzY2hpa2JhYXIgdm9vciBpZWRlcmVlbiBkaWUgZGUgZ2V6

b25kaGVpZCB2YW4gemlqbiAgDQpnZXppbiBzZXJpZXVzIG5lZW10Lg0KRG93bmxvYWQgZGUgZ3Jh

dGlzIEVIQk8tZ2lkcyDihpINCk1ldCB2cmllbmRlbGlqa2UgZ3JvZXQsDQpUZWFtIFByZXZlbnRp

ZQ0KWmlsdmVyZW4gS3J1aXMNCg0KDQpBZm1lbGRlbiB8IE5pZXQgbWVlciBvbnR2YW5nZW4NCg0K

--000000000000d82782065d268aaa

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




h:600px;margin:0 auto;font-family:Georgia,'Times New Roman',serif;backgroun=

d:#ffffff;">










uppercase;margin:0 0 20px;font-family:Arial,sans-serif;">Zilveren Kruis &mi=

ddot; Preventie





Bes=

te lezer,



Wis=

t u dat 80% van de Nederlanders niet weet hoe te handelen bij een hartstils=

tand? Of dat kinderen onder de 5 het hoogste risico lopen op verstikking in=

huis?



Wij=

hebben een beknopte EHBO-gids samengesteld met de belangrijkste levensredd=

ende handelingen. Van reanimatie tot brandwonden, van allergische reacties =

tot val-ongelukken.



De =

gids is gratis beschikbaar voor iedereen die de gezondheid van zijn gezin s=

erieus neemt.




1#t/c/cec6f5c8b4b17c4d1807" style=3D"color:#00857c;font-size:15px;font-weig=

ht:bold;text-decoration:underline;">Download de gratis EHBO-gids →

Met=

vriendelijke groet,
Team Preventie

ont-size:13px;color:#888;">Zilveren Kruis




1px;color:#999;text-align:center;font-family:Arial,sans-serif;">


1#t/u/cec6f5c8b4b17c4d1807" style=3D"color:#999;text-decoration:underline;"=

>Afmelden  | 
01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/cec6f5c8b4b17c4d1807" style=3D"color:#999=

;text-decoration:underline;">Niet meer ontvangen



--000000000000d82782065d268aaa--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 00:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDyxb-00000000LBP-1BZ9

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 00:47:35 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 00:47:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f70.google.com ([209.85.222.70]:50649)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDyvJ-00000000Khm-03DT

for doctor@nk.ca;

Tue, 06 Oct 2026 00:44:48 -0600

Received: by mail-ua1-f70.google.com with SMTP id a1e0cc1a2514c-98331b577e4so1806606241.1

for ; Mon, 05 Oct 2026 23:42:57 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=aluno-mg-gov-br.20251104.gappssmtp.com; s=20251104; t=1791268971; x=1791873771; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=jg4qvfhAncNapEsp15VDs6ALrxTkMu1qArgnRbXxYME=;

b=yx6/hTJKbA59zr3iPMO/+dVJtYIQisi/6ig8/s+Gfg2PDu7WpSJ+khXFfYM+vPYASk

IgSo3G2YIby5WQ5SuALpUeZB7IGLguUGvS0TTute0xdOdDCtEOXXQAUg4ERrStpLc5Rg

64Z8Pxo7jpbApgxhu21hpYScfGiBslkPOkbzRvvhGJhAK7PZEDRAgYoLDuAWjABfM3KX

ajamQJ1xfA9fNhv+dwD4opfyIU4BlWyJiFg/I9kXDaflqtkVaVuq1L7fJMRMTflis51P

JLeAUIuUuRhcVz8ridK1vu/vKyh5DF0TSMFdHVpA1iLiUnQru8JeSIaxc92UsTDVDHwV

eSSQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791268971; x=1791873771;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=jg4qvfhAncNapEsp15VDs6ALrxTkMu1qArgnRbXxYME=;

b=vO8Jp50B4eSyL7fFs7ieC07qxYX89yeKTOqgKd5JnnCATgRxEKLgMywAmlypmNHJ6h

v53ubNXQz90uP3FL2A/UHm50Hk3e767qptS0iCDE3hDxJyIjiMTItP3mpETPWjhHNMYw

93HYcTc4FGwngq1X2L17XgthppPqi5kH/TPo4sndA9TITGSLv8KgmonCpN75xcIIUM2r

n+k+N1dRBbvOzfofoC5TT5AwWXi51JbWuMeoFPhosMpH8+L7PoWw6n6dKi35jwZf0INF

ES7stfhP1dAxI8vJqs0DAB3yUmngfG0oti1gUEpIcOVDFhqtgEAmdF7VS/EqQCXYFmT6

BvSg==

X-Gm-Message-State: AFq9FYLOOpYFWX2IEbLzzroB1xag9MhY9X9oHoQd2UONtaqzWeYqrYrn

LyGWAD/Ip9KSxS6i4KS/BNnHJB/slx+RG0xw4PqS56MZxuly5GS7Ejshs9A8HoWBzFPcwxiytfx

B2bni2yNAIxxCVkN+3cdSJagg+zGXs06HQN1UAmG50G2GkQIfvxu+Y/bmLYP4qmt7MkJy9w==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:f9f:b0:79f:3bbd:aa3f with SMTP id

ada2fe7eead31-7c8799fa46dmr90294137.6.1791268971118; Mon, 05 Oct 2026

23:42:51 -0700 (PDT)

Message-ID:

Date: Tue, 06 Oct 2026 06:42:51 +0000

Subject: =?UTF-8?Q?Tariefwijziging_per_1_november_=E2=80=93_check_uw_besparin?=

=?UTF-8?Q?g?=

From: Sanne van Energiecheck

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000b89501065d264e1f"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Energietarieven wijzigen per 1 november Controleer of u nog

wel het voordeligste tarief heeft Hallo,



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

[209.85.222.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

[209.85.222.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.70 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: klclick.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.70 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.70 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.70 listed in wl.mailspike.net]

0.1 TW_IJ BODY: Odd Letter Triples with IJ

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_JZ BODY: Odd Letter Triples with JZ

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 IMPRO_URI_2 No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Tariefwijziging_per_1_november_=E2=80=93_check_uw_besparin?=

=?UTF-8?Q?g?=



--000000000000b89501065d264e1f

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: quoted-printable



Energietarieven wijzigen per 1 november



Controleer of u nog wel het voordeligste tarief heeft







Hallo,



Per 1 november wijzigen veel energieleveranciers hun tarieven. Gemiddeld =

=20

stijgt de energierekening met =E2=82=AC12 per maand. Maar dat hoeft niet vo=

or u te =20

gelden =E2=80=94 mits u tijdig vergelijkt.







=E2=82=AC463



gemiddelde jaarlijkse besparing bij overstappen*









Bereken uw besparing





*Bron: ACM Energiemonitor Q3 2026





Sanne =E2=80=93 Energiecheck

Afmelden | Niet meer ontvangen





--=20





PRESERVE A NATUREZA, EVITE O DESPERD=C3=8DCIO DE PAPEL E PENSE ANTES DE=20

IMPRIMIR.



"Responsabilidade com o MEIO AMBIENTE"



Esta mensagem e=20

quaisquer arquivos em anexo podem conter informa=C3=A7=C3=B5es confidenciai=

s e/ou=20

privilegiadas. Se voc=C3=AA n=C3=A3o for o destinat=C3=A1rio ou a pessoa au=

torizada a=20

receber esta mensagem, por favor n=C3=A3o leia, copie, repasse, imprima, gu=

arde,=20

nem tome qualquer a=C3=A7=C3=A3o baseada nestas informa=C3=A7=C3=B5es. Por =

favor notifique o=20

remetente imediatamente por e-mail e apague a mensagem permanentemente.=20

Este ambiente est=C3=A1 sendo monitorado para evitar o uso indevido de noss=

os=20

sistemas.



--000000000000b89501065d264e1f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




h:600px;margin:0 auto;font-family:Arial,Helvetica,sans-serif;background:#ff=

ffff;">








:30px;text-align:center;">

=

Energietarieven wijzigen per 1 november



Controleer of u nog wel=

het voordeligste tarief heeft





Hal=

lo,



Per=

1 november wijzigen veel energieleveranciers hun tarieven. Gemiddeld stijg=

t de energierekening met €12 per maand. Maar dat hoeft niet voor u te =

gelden =E2=80=94 mits u tijdig vergelijkt.




nd:#e8f5e9;border-radius:8px;">





=

€463



gemiddelde jaarlijkse besp=

aring bij overstappen*












1#t/c/e4325b3094b65ea1e1bd" style=3D"display:inline-block;padding:14px 36px=

;color:#ffffff;font-size:15px;font-weight:bold;text-decoration:none;">Berek=

en uw besparing



*=

Bron: ACM Energiemonitor Q3 2026




1px;color:#999;text-align:center;">

Sanne =E2=80=93 Energiecheck



1#t/u/e4325b3094b65ea1e1bd" style=3D"color:#999;text-decoration:underline;"=

>Afmelden  | 
01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/e4325b3094b65ea1e1bd" style=3D"color:#999=

;text-decoration:underline;">Niet meer ontvangen







le=3D"font-size:11px">PRESERVE A NATUREZA, EVITE O DES=

PERD=C3=8DCIO DE PAPEL E PENSE ANTES DE IMPRIMIR.


=3D"font-family:Arial">"Responsabilidade com o MEIO AMBIENTE"
an>


255)">Esta mensagem e q=

uaisquer arquivos em anexo podem conter informa=C3=A7=C3=B5es confidenciais=

e/ou privilegiadas. Se voc=C3=AA n=C3=A3o for o destinat=C3=A1rio ou a pes=

soa autorizada a receber esta mensagem, por favor n=C3=A3o leia, copie, rep=

asse, imprima, guarde, nem tome qualquer a=C3=A7=C3=A3o baseada nestas info=

rma=C3=A7=C3=B5es. Por favor notifique o remetente imediatamente por e-mail=

e apague a mensagem permanentemente. Este ambiente est=C3=A1 sendo monitor=

ado para evitar o uso indevido de nossos sistemas.



--000000000000b89501065d264e1f--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 00:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDyxR-00000000LAV-25Gs

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 00:47:25 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 00:47:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f200.google.com ([209.85.128.200]:52234)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDyiq-00000000JZm-3Co9

for doctor@nk.ca;

Tue, 06 Oct 2026 00:32:01 -0600

Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-8afde3fe132so7551557b3.0

for ; Mon, 05 Oct 2026 23:30:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=usmba.ac.ma; s=google; t=1791268200; x=1791873000; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Mc43BANQZ86xEXyiXR8XzZoFaJrcucgKsMPhSBvR+O0=;

b=N4j6eV4E7eYc5hQMXV9oPnO9wuUIXwSqo22GSBPVvuhN0ppgTKEs5bp3Gn4NL3Gin/

QFOZegOfK8o5c+Ds8FFL/h0PoSWeM8v5wKyiarQLflOHbbxlqoM9fFBsamJtRhxIICMS

Bp61COONR4YVNS0rAgjmT4CxSeub0eYYcg2hs=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791268200; x=1791873000;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Mc43BANQZ86xEXyiXR8XzZoFaJrcucgKsMPhSBvR+O0=;

b=DyWqdw6C8LwBBLCBOPTVpjRfoFFRY/YC0hzvgV+vs0CPOpDRgX5SniAS318AME75Y+

UFhc4glw4EnKWk1n99gsqjr83vuPSKTGWCLJzD+Y6RhC2BKiYuCA2tw8ti+AnaSMKldg

JLTJ2/6woZePXfBe3NYd/gsVTCRdszhMnSdE4J7aTtg9eAKVkLtvb08ie3rdpPkiVEgZ

Q0TAd2KtjNZI+N+de8uKr5SZZiKn8Z7Om4oZj/jaBapCosDmT1+wmKCoO46Wp2jKXaYA

GES3C1sNX7h3np5XrxkOSJPaITIiAEc5VwoTN5mYQ6QW+kErh5yZU+nT/76mzpa+quad

Bt4Q==

X-Gm-Message-State: AFq9FYJn7ic1uodXB3vm9kTI5GeDB58rkCAji+mc9YSHQ9vEFoMYV01/

mDszrrjDF7AbQgWg9JjMebOrlhLIh/NAl5DKRe8/EQtA3HG9qWStxUkeF7Ge01QeBdgZbKQ/vWB

LE2bg40Cf9tM6RZWmvThCv7QF

MIME-Version: 1.0

X-Received: by 2002:a05:690c:9988:b0:887:f4fc:ee35 with SMTP id

00721157ae682-8b04f39cb91mr1707387b3.19.1791268200111; Mon, 05 Oct 2026

23:30:00 -0700 (PDT)

Message-ID:

Date: Tue, 06 Oct 2026 06:30:00 +0000

Subject: Actie vereist voor uw levering

From: DHL Bezorgservice

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c3ef81065d26207e"



--000000000000c3ef81065d26207e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



REhMIEJlem9yZ3NlcnZpY2UNCg0KDQpFciBpcyBlZW4gYWN0aWUgbm9kaWcgb20gdXcgcGFra2V0

IHRlIGt1bm5lbiBiZXpvcmdlbi4gQ29udHJvbGVlciBoaWVyb25kZXIgIA0KZGUgYmV6b3Jnb3B0

aWVzIGVuIGtpZXMgdXcgdm9vcmtldXIuDQoNCg0KU3RhdHVzDQpXYWNodCBvcCB1dyBrZXV6ZQ0K

DQpWZXJ3YWNodGUgbGV2ZXJpbmcNCk1hYW5kYWcgNyBva3Qg4oCTIERpbnNkYWcgOCBva3QNCg0K

QmV6b3Jnb3B0aWVzDQpUaHVpc2Jlem9yZ2VuIOKAoiBESEwgUHVudCDigKIgQnVyZW4NCg0KDQoN

CktpZXMgdXcgYmV6b3Jnb3B0aWUNCg0KDQoNCkFmbWVsZGVuIHwgTmlldCBtZWVyIG9udHZhbmdl

bg0KDQo=

--000000000000c3ef81065d26207e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




h:600px;margin:0 auto;font-family:Arial,Helvetica,sans-serif;background:#ff=

ffff;">









DHL

Bezor=

gservice



Er =

is een actie nodig om uw pakket te kunnen bezorgen. Controleer hieronder de=

bezorgopties en kies uw voorkeur.




px solid #e8e8e8;border-radius:6px;">








id #e8e8e8;">

Status


Wacht op uw =

keuze



Verwachte levering


Maandag 7 okt =E2=80=93 Dinsdag =

8 okt



Bezorgopties


Thuisbezorgen • DHL Punt &b=

ull; Buren










1#t/c/17d547cea71ccf7cf222" style=3D"display:inline-block;padding:14px 36px=

;color:#ffffff;font-size:15px;font-weight:bold;text-decoration:none;">Kies =

uw bezorgoptie




1px;color:#999;text-align:center;">


1#t/u/17d547cea71ccf7cf222" style=3D"color:#999;text-decoration:underline;"=

>Afmelden  | 
01KCGS3SY4J36RX5JNAPV4X2XB_11#t/p/17d547cea71ccf7cf222" style=3D"color:#999=

;text-decoration:underline;">Niet meer ontvangen



--000000000000c3ef81065d26207e--

Web/SEo/App sapm from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Oct 2026 23:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDxnl-00000000Dar-0yhq

for dave@doctor.nl2k.ab.ca;

Mon, 05 Oct 2026 23:33:21 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Oct 2026 23:33:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f173.google.com ([74.125.82.173]:46378)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xDxS3-00000000AjB-1vEJ

for sales@nk.ca;

Mon, 05 Oct 2026 23:10:32 -0600

Received: by mail-dy1-f173.google.com with SMTP id 5a478bee46e88-34ef8f66a6bso191386eec.1

for ; Mon, 05 Oct 2026 22:08:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=appatozsolutions-com.20251104.gappssmtp.com; s=20251104; t=1791263310; x=1791868110; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=LuRxWn5L8YS8du9xI7m+o6mTsO5dn/u/2ftmII1OqzA=;

b=gKfm8KXrS3QJ2+1W83kinhjsU1RPIVpzuycO4ltySR4W3DNY/PiZ8GKNbVWK61ZPR8

ff/5hynNVAljj4/o1MuOCS1a5maD+FwCM69gwQF0V+32hgJO7tJVHGZJPiFULieM5h9I

+pRfymdf+LlTPjDrLTD+mDM3Sl6XXBgLHPy9BZcwMZ9ddtwHaVWYRwNZesc2cPryObsZ

iLFBYC3URT20SE9LsG5FDBj6oYvQFB31PVK6QT0ooN7BJJNvoeh0a+4bwzrP/kWoDIVt

vae1+9tu5JYRccoFIW4ydvWWiF5fgFuVn9AUMwt+9u5Ke9rbfx1v4GIL57fzdQ/RvuPn

HQog==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791263310; x=1791868110;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=LuRxWn5L8YS8du9xI7m+o6mTsO5dn/u/2ftmII1OqzA=;

b=wNZTn2TloDVoERdwbE6+7IjKpAOskB/1PgZi5GqFjCrhUzu2D08t1Rx6Y0W7bkqVSG

jOQIuG5TWcsW4fm5luxazbnCY+luevm54Dghq7hWBnArJbS11FoMeF4GuISiJXtDzFdr

ZojDIcEKSfIvR1ppKs6g5eUBIRafq5ZIyIggmdSUey0sywwjIEt2Zrcgw/KhxF1u72G8

045AR214MjyKPG84IJBU/7nRplMQYfYFNZNLBkD7oRe4iF+U4RxQ7BWZzDPEvJGBdM2K

9Z1q6uqyiNMkbg/37T8p12eW2c7vqcrZ4sWnMJWro8h5rm0nPd5NR+tdbnv5G3yqthhn

L9UQ==

X-Gm-Message-State: AFuF++m1eGNHDwgFRw2bcAnBTpQhawix9fbU3imNLMTjTFcwTJVBq3kB

vQb5YnS4KJHKNvR+1TqkLFBvMu8m/i1UiUxUJa0fVvX1kd+whwkBVtpowadqBilDPCau2sFM8eM

K3pFa

X-Gm-Gg: AYBFou09O8+ZTTwyWcXSe4GfPUkUFQqgJ2Q4sCyUANpIqVbfvwgR4vhS37CUPWxkZxh

zi6FIfoyyxlI7ldCOSHlo3Nf0z6ulahZKLJEO+b/t4TzibhG318Kl66bxzKLXmCah0KkfroFTBi

U2+GqPk+OixC3Lmjg4s9xDI+2iReLAnFMNlCRl9m0DGwZO5D9/Y95SkUKRFfLQbcg690o8tBUWh

zc9djqjXj1jcIdOHwdzqtX7/50mxHmpY9lFCL/lH78wQnIo/3jXlVM/l0mTZOCMFWJfAOuJTLQ8

LQ1dFdyFLzGf/Tq1RahmFAm1H+x8YX1oy0uIpIzy5laGb9fRhsb6angR5CF0ZD/JxK8vYr0jQ8R

TSVfO6eygLxh1W0Lm8NsBBm6l7u9UbVdEOKjuOJdWUGh4EE+6ornR5xqaV9iVGWYOG98YX+sO84

NtTfJTqrc3dBfZ5GVf5dZlT0umMP+XuiCmF7bH+EpZTQXYMUUmD2xo6IbPn9n1pzpzLEYalWKyk

yTwkYUhve/7Ydonix01/4BA+N2Syw==

X-Received: by 2002:a05:7301:618a:b0:348:201a:6c8b with SMTP id 5a478bee46e88-3514e383e91mr157826eec.38.1791263310021;

Mon, 05 Oct 2026 22:08:30 -0700 (PDT)

Received: from [127.0.0.1] ([122.161.50.206])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-35146b5ee6bsm5356793eec.30.2026.10.05.22.08.28

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Mon, 05 Oct 2026 22:08:29 -0700 (PDT)

From: Edith

To: sales@nk.ca

Subject: Hi - www.nk.ca ?

Message-ID: <0b85616c-cb95-ec91-e67e-71aa115efbaf@appatozsolutions.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 06 Oct 2026 05:08:27 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 14.0

X-Spam_score_int: 140

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Want to grow your business with a custom mobile app?



Content analysis details: (14.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[122.161.50.206 listed in will-spam-for-food.eu.org]

[74.125.82.173 listed in will-spam-for-food.eu.org]

[74.125.82.173 listed in will-spam-for-food.eu.org]

[74.125.82.173 listed in will-spam-for-food.eu.org]

[74.125.82.173 listed in will-spam-for-food.eu.org]

[74.125.82.173 listed in will-spam-for-food.eu.org]

[74.125.82.173 listed in will-spam-for-food.eu.org]

[74.125.82.173 listed in will-spam-for-food.eu.org]

[74.125.82.173 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[122.161.50.206 listed in dnsbl.ahbl.org]

[74.125.82.173 listed in dnsbl.ahbl.org]

[74.125.82.173 listed in dnsbl.ahbl.org]

[74.125.82.173 listed in dnsbl.ahbl.org]

[74.125.82.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.50.206 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.50.206 listed in sbl-xbl.spamhaus.org]

[122.161.50.206 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[122.161.50.206 listed in zen.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.173 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.173 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.173 listed in bl.score.senderscore.com]

1.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days

Subject: {SPAM?} Hi - www.nk.ca ?



Hi,

Want to grow your business with a custom mobile app?

/>
I'd be happy to share our previous work and development packages.=



Thanks,

Edith