Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZrO-00000000KFS-0Vu4

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:58 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f70.google.com ([209.85.216.70]:51468)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3EAfraggRBikOFQJRFSHZHaaNWYZFQ.JIZ.UJITHYTWSP.HF@maestro.bounces.google.com>)

id 1xOY84-00000000M2t-0GSQ

for doctor@nk.ca;

Wed, 04 Nov 2026 04:22:05 -0600

Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-3ac8f449d1bso486053a91.3

for ; Wed, 04 Nov 2026 02:21:10 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ucvvirtual-edu-pe.20260707.gappssmtp.com; s=20260707; t=1793787664; x=1794392464; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=bP8q8CPiS3l5XwQ2C/AZjsMwHmKi5IUfNsyyGmKbIcY=;

b=K8Jvy9ALLfUGHrcStbdKzOHYZjnxg5q699YqM7UV1c7ysazMpWOm/X666652btcehU

6R9wUhcOaaJ2R7dsyFYO7s7bI1nJ2mbqPBk8eaR1t8t4nx42cTL0fim6X3zbu2kAx0md

OYh9iGvwigFdDRGEO6MgSCFATkaNCeLW0J38L+OZRsoorvOFbHMa3dSAXU/skcAtpDD+

ndPH2B42sZm9rxBYMyfcUbAuaHC0nXYES4rPWiWMDu5gbtN5SBHKdN4B+f2sRY5c7kbZ

Kck0yZmav3Hzk6aZTNEnLIGIMSE3VLM57zduJ7LSI3595yFB5LPG2idXRXEynbMOu1F+

nQRQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793787664; x=1794392464;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=bP8q8CPiS3l5XwQ2C/AZjsMwHmKi5IUfNsyyGmKbIcY=;

b=YfhdN+CdaGHV4N+N0ZnTmKsAzv4D+XSnuTxTuE65wDIt72YgPPjx9FfbKfovJAVNFS

C4oImZs8jRZ0iXiNq/0i7J/DT6LAA1AurIpSLCjwSIsoRZuVxyVv5xNaiPC8E5AfPkX8

lXkzoMVVmDaBeGwciHXdYTKC8sRGYaQCndoS+U/obccwqTVAFpXj1N5kOXJsVqmmASRq

0RR7ANe5D2rcxuw9N1MpgTB9vJJeThBFrFLVSLKbIjbfHDfeqx2ykaOK7xLZ8xzKSW0W

fH4+vErdmfgrjGYPdpaQzgugvY819HhKxe8PVudVBr9kelxWjqQBHw1IGM+mYI1Ud8Ms

fqdg==

X-Gm-Message-State: APuU4Z8jOCqtPfU7dDXy8SOkBDJ+yYzU5ouIHjc2Sc8hIUGJ/NWAkXR8

NKuzVtw0lx/e1of5uOd5H/Qau51BrrkgFnoR0fhEYCWpL6NJkP1b0ecpVp11+tpBz0KkhLASRJD

D1RVowobZT7BsCU1f7kPJ2/Hu

MIME-Version: 1.0

X-Received: by 2002:a17:90a:dfc4:b0:3aa:fdad:7d6c with SMTP id

98e67ed59e1d1-3ae897c190bmr13319653a91.58.1793787664127; Wed, 04 Nov 2026

02:21:04 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 10:21:04 +0000

Subject: =?UTF-8?B?RW5lcmdpZXRhcmlldmVuIGRhYWxkZW4gb3BuaWV1dzogYmV0YWFsdCB1IG5vZyBoZXQgb3VkZSB0YXJpZWY/?=

From: Tariefwijzer Energie

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000085f3ba065f70bca5"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: De energiemarkt is opnieuw gedaald, maar uw leverancier past

het tarief niet automatisch aan. Als uw contract ouder is dan 6 maanden,

betaalt u waarschijnlijk nog het oude tarief. Het verschil kan opl [...]



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: cozyday.click (click)]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_JN BODY: Odd Letter Triples with JN

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.70 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.70 listed in wl.mailspike.net]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.70 listed in bl.score.senderscore.com]

Subject: {SPAM?} =?UTF-8?B?RW5lcmdpZXRhcmlldmVuIGRhYWxkZW4gb3BuaWV1dzogYmV0YWFsdCB1IG5vZyBoZXQgb3VkZSB0YXJpZWY/?=



--00000000000085f3ba065f70bca5

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RGUgZW5lcmdpZW1hcmt0IGlzIG9wbmlldXcgZ2VkYWFsZCwgbWFhciB1dyBsZXZlcmFuY2llciBw

YXN0IGhldCB0YXJpZWYgIA0KbmlldCBhdXRvbWF0aXNjaCBhYW4uIEFscyB1dyBjb250cmFjdCBv

dWRlciBpcyBkYW4gNiBtYWFuZGVuLCBiZXRhYWx0IHUgIA0Kd2FhcnNjaGlqbmxpamsgbm9nIGhl

dCBvdWRlIHRhcmllZi4gSGV0IHZlcnNjaGlsIGthbiBvcGxvcGVuIHRvdCBob25kZXJkZW4gIA0K

ZXVyb3MgcGVyIGphYXIuDQoNCkNoZWNrIGluIDIgbWludXRlbiB3YXQgaGV0IGxhYWdzdGUgdGFy

aWVmIGlzIHZvb3IgdXcgc2l0dWF0aWUuDQpUYXJpZWYgY2hlY2tlbg0KVWl0c2NocmlqdmVuIMK3

IE5pZXQgbWVlciBvbnR2YW5nZW4NCg0K

--00000000000085f3ba065f70bca5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




dding:20px;color:#1a1a1a">

De energiemarkt=

is opnieuw gedaald, maar uw leverancier past het tarief niet automatisch a=

an. Als uw contract ouder is dan 6 maanden, betaalt u waarschijnlijk nog he=

t oude tarief. Het verschil kan oplopen tot honderden euros per jaar.



Check in 2 minu=

ten wat het laagste tarief is voor uw situatie.




:inline-block;background:#14746f;color:#fff;padding:12px 28px;text-decorati=

on:none;border-radius:4px;font-size:15px;font-weight:bold">Tarief checken
a>


ozyday.click#t/u/2515815d8290e3ee2e42" style=3D"color:#999">Uitschrijven
> =C2=B7
=3D"color:#999">Niet meer ontvangen




ght=3D"1" style=3D"display:none" alt=3D"">



--00000000000085f3ba065f70bca5--

WEb/SEo/App spam from Microsoft outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZrD-00000000JnW-3e23

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:47 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012062.outbound.protection.outlook.com ([52.103.66.62]:5731 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOXtL-00000000Krw-42xG

for root@nk.ca;

Wed, 04 Nov 2026 04:06:56 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=M3N2xCq4kPFAdxkYT7qRLXy4TIDkOMU7zBsHvrHVgiKIMLfH1CzF+yuHavJ11VVSrm9l+9ZPXIBS/Zz+RNNlANvncqQ7BXuIxZGiV9WlsG40s8M6UF9+C4V8kcXwc/LDFZT1D/AC2H5lFJQZ/nTpeErps4Bm8Y3mSJ+Wfbhuz/jOokNiUvmrFashMGabrVd3gfNOpfVyOWO1DNBWEKRM89Oxeob4MJ3OetphHIiyVErozwxYRnVM14ls2Ni1mkI6tTil4+C3GbNVZtvafhd6CUvMdT6HHJojB4NkxUsrVTVOo7qtmk/mcCD6sM4GtJUQNSiV70QOprDyF9ldbpj8dw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=+RZ8w6+Y/NeXReBK/KWMiL8axwWJB/lz3qcwG/thMjI=;

b=uqMPRbZtzKbesACgowtUbZ1K/VA8UHz8ABiXSvuvwLlwePw+ilNQc3Sp8EgN9IUUe8mya4kdAVCJPez3S2C4xuBsASPNVkaZiGT3EfYGenP4hikopiUJKKmCZTVpLuxYOTHmWLGaMkvg8hbYYwyHVvyxjnWWIQ4ygI04qTOmyjfsWrm0M993CzN5rWBFVrt2TzHLyk+2XlrePjxw2HAfGJJNh5+hs7jZMsLDzgD9isuQhJ5PdvajBAI9qOD9wKZbBXZkfOir08wwbUEXMBE9gsD+YVsuNB+SS8QTxcf2FUgf4LphBYSDemOBDGrLj45X6+cNcUC7DKfr3MvqUphA/g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=+RZ8w6+Y/NeXReBK/KWMiL8axwWJB/lz3qcwG/thMjI=;

b=eDB5qzWebc10Yot4SveMdiBtajR0Vn1YMoLOF6miAK1+hOQc2HPGnUnu4QahrACmEQLMgtjDcyBIYB6onX6dif0vYoM+FidGPiKbIpFgokmR8Cy2OoCjv6RAkfT3V1M6qNSBJ8QU3ezQTaIpq/Mn5R5pLExQycSBI+GSAECUB8jFsPkbBoVdLqrRKcTYh00jBT8fIg//pi7EELsui1evChj7u7I7hgfQbmSrmnPb0wBGM4uOtiwEJjgf+fbuwjtyJuHSQ/Jl4D7Is6NiNs+kX7B+IBXKd9EWEglU2S7A9TKT/7knCW3ru11ChUxFlfFiEw87Gv4ehgPyb4c4ErI6OA==

Received: from OS8PR01MB6858.apcprd01.prod.exchangelabs.com

(2603:1096:604:2a6::10) by SEZPR01MB4230.apcprd01.prod.exchangelabs.com

(2603:1096:101:38::12) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.8; Wed, 4 Nov 2026

10:05:25 +0000

Received: from OS8PR01MB6858.apcprd01.prod.exchangelabs.com

([fe80::e530:a439:a6a8:4ccf]) by OS8PR01MB6858.apcprd01.prod.exchangelabs.com

([fe80::e530:a439:a6a8:4ccf%5]) with mapi id 15.21.0569.011; Wed, 4 Nov 2026

10:05:25 +0000

From: Orpha Tisdale

To: Orpha Tisdale

Subject: Price....?

Thread-Topic: Price....?

Thread-Index:

AQHdYsFfDOqRLC9LyUOrreX3TMKNPrcK09ltgAAYlUWAABKOboAAE537gARjb2CAABTVmIAAF6jLgAAVa6GAABKJPoABOz90gAAVwgWAACzag4AAE7o9gAE8I2OAABa8cIAAGi4zgAAUBwGAABLxPoABOG+XgAAWgTeAABtj+IAAGHL/gAFHrJSAABfnJYAAGSd+gAAncPeABHg/xYAAI/DNgAAVl++AAUGTg4AAEwAmgAAXb5mAABU5ooAAFU5agAE5kgCAABZgIYAAFyqY

Date: Wed, 4 Nov 2026 10:05:25 +0000

Message-ID:



References:















































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OS8PR01MB6858:EE_|SEZPR01MB4230:EE_

x-ms-office365-filtering-correlation-id: 4e62843f-6ea5-4e89-cc05-08df3a5b257e

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|8062599012|8060799015|25010399006|15001099006|16051099003|55001999006|4140399003|19110799012|15030799006|15080799012|2604032031799003|22091999003|37011999003|24121999003|39105399006|24021099003|51015399003|40105399003|26121999007|18071099003|102099032|3412199025|440099028|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?P8UEzHHrsBuVgUtv9tTXpAqgPt9wmeClU6wF6mUfSO67pwI3IxiY3Xdc?=

=?Windows-1252?Q?QoyVLEwEkLsUJG0m2iuYWHKiBSxD5rz8guzoWl2sbCMCcAKspkA6aW4g?=

=?Windows-1252?Q?f1y65NRPCC1KxG83yMdHu87HkyfjldtjIzLOAtAy9c1jEgwuPjcURgDa?=

=?Windows-1252?Q?yjw7YK45KtZtexWpDKfub1+kQXybBLVylP244QTb599e0j93H3WHBa1B?=

=?Windows-1252?Q?/07fymTAbEd2QNhdqayPUcgUEia/R5e35JsJkgmCwC6b54wy+9KAbecT?=

=?Windows-1252?Q?kwPD4TEKZ+5Qf1rrnI6lwXcIrWKi1zAJDEDnpJPtaH+9e4ACIFeUoYFp?=

=?Windows-1252?Q?GsNYH5h1DmGqHTD5w1xkD869SsLWeTGq4SyeOrCJ4T04BsbYYryFE6UT?=

=?Windows-1252?Q?rEDjs0anUoX1+iHedh/CHAkjtzblrdZ01NtE2GKXyPWfiEmzUCtzrhOV?=

=?Windows-1252?Q?Ny4NakasJ6st9WD3T+V/cQdx5IryFGoYWTcxJVW2gVmvd4d3XQbmM/Kv?=

=?Windows-1252?Q?NZeyoHNktIrcWpHH+fRk2pVjYzc6BQoCMhWdS3jCImbQOBuJFXXwpgcx?=

=?Windows-1252?Q?GwL6KXCJYttHyDMUBEO8d78rcf6aAKEjZYoBbmjekMe4NlGcXkPPmt9V?=

=?Windows-1252?Q?+Jxf4Ct/LAuyYJ5hPtd4SYwTKNdzoj0CBZqMOuNMeXAE69glgmXgxRj8?=

=?Windows-1252?Q?p/ISQYwGzCFlZWerxtfuD17jTT4eBxBZ1G0gBEvJlRV2+wrwqKopOZxc?=

=?Windows-1252?Q?W653DrVamex/IaLH2YtiIxD+rsir4HYGjQ7FMzzr/el3R9fjUkk0qSUn?=

=?Windows-1252?Q?XIFkKjGaGQRyGxVy809hL9f+3p+hqoFm+qgD8Y/Zpux+KvqNbwvt1Pde?=

=?Windows-1252?Q?LwWgWNDcKd9xnaeetjUgVA7GSa+S44CBI2ORU+jZR5NP+RIhpfmV5RZr?=

=?Windows-1252?Q?mzTLVRGiCRNprwWpgdEmk0aoXJCqIkmCU56MsHkfMVaLJmD3WTTNGP2V?=

=?Windows-1252?Q?qqcC9x3nCWBMKFOh9hWb/eSQZD4rYIRN/9NXVwLNdgaeO1wy1tLpyYyF?=

=?Windows-1252?Q?JJVK42NOibLbWApNV7TV8/yL2nDVCEaTHzlVJY1IAE/S1FCUReOA8TSf?=

=?Windows-1252?Q?D1+5Nsb80RVpkd/am3Zl57vSy+mihqVgqUIgl/ItyPH+etudVbRv42Vk?=

=?Windows-1252?Q?zQgnkUCWHLGmPe63LzQAUJKXYqC7jszDgiC5SjeDPdRhtM+K+qH30GLV?=

=?Windows-1252?Q?k1HblMEbB4gqabZCARuxCXAD1Rtt11jr/RTZyjbi0Kn8uoToTbEiVSmI?=

=?Windows-1252?Q?b2k5vr5eEAWTHUAjEKoeh9DOHu23BKjGd4e4kktiuNyenoZ86Xf+wz/I?=

=?Windows-1252?Q?b1ppP3WVzN20MLb2J5PUYot5EebNfMxp0bexYKr4dwbIbuDKynXqs/CK?=

=?Windows-1252?Q?WcfL8WkW4/SieR55mpWqeg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?h80Dg+WKzGYO7gtJQtD6bqVnAKu01FwTcHEo9OwvPGMiJBsJuYNGdagG?=

=?Windows-1252?Q?2LgGdROzh1S957YmfSTAW97xokF1f4cOIev0r6+E7CEArZ378HCVKq8N?=

=?Windows-1252?Q?VqgOzWkGg0zzWSiXpcG/grnzLZXF+btP/ksl4sTq1wEOLUlm84+h3AB6?=

=?Windows-1252?Q?sIwsdP3eUn4lIMaWSWlHGV7PmWfgh00SxgivS8nw1dGMaSLIfseBqdgQ?=

=?Windows-1252?Q?1gVhlEwtGmJ2WpDqmLo0SKs8qoUjobNi1e8bBKkAm4GThI4CgbOkUaWs?=

=?Windows-1252?Q?q0qGrI5pO0iGD4TtuZd0Z8J3MYKe05GXhxZexWp6h6LD7qidASPpP/sJ?=

=?Windows-1252?Q?SNhJ9CdtuHNz2WBg+LyjKkwcBXtJyH2ewFDD4n6FG30GGJ/yhtwN+2wU?=

=?Windows-1252?Q?PMB08CcmxRH/t/R1eI/+G/xaIoVkveIdbIY0LymoAkTJyOs+Tyzenbue?=

=?Windows-1252?Q?x0saxEkxO5PEFm2IvCUKcF1KIjesHkj065xV1UbeOX8W5t/c+til5gzB?=

=?Windows-1252?Q?2atzYSzEV9gp3AvGB5zXl9QlfQ2jC2Bd7Ryk9Bl43IiT3/78g0Eh+xxu?=

=?Windows-1252?Q?upXbYhKV6qdHtK5G5yGyGW38oZcSvQMPKtqa1HsKMOI7UDI0DakneRGn?=

=?Windows-1252?Q?UWYoKYSNVP9WC6tgJjW3Vzy/RIsJkJnEDdrg9eSbjnVXzJWcbh3hkPRL?=

=?Windows-1252?Q?Fj9t0SKxXS2i3BIypMCJXWOEfgugC3LFCyatG4B7w4vDTE9QrZh7GOwH?=

=?Windows-1252?Q?dw+NZptZaZSYp9hYRs71n41S6a1D4UJeozbUBbus/gA7C7VS47vYVxbu?=

=?Windows-1252?Q?JAFt+X3VirGncrFWzZN6yXpFSSUgO0qOvhDwOiAmLplGZDmZIXVPjOI+?=

=?Windows-1252?Q?/26XRldAEsT9nU14zbndNQRWRK7RGIXQJsx0ZVgu7CXkArlZ/Q6M2zeH?=

=?Windows-1252?Q?myJtRzOB5hHNs5r8uG9glfiENTataECiDK0a+Z/pmBtt+Ih8HTJ4OD7X?=

=?Windows-1252?Q?gIoiu1Lc6Q69IUUQf/YioQLcpg5Elt3sEqHGJpp4O2H51E+H+z+IMkOF?=

=?Windows-1252?Q?X6109rP+BH3zqVTUhnrRmHMiGua6NjTMfjTbHdGoBFGf57jB7wBDEW1a?=

=?Windows-1252?Q?MREJ/KJbQRyeR/c4O6s1/u20wN1zzpDQYwOO9IS+bWgA/vUTfYD66glC?=

=?Windows-1252?Q?004CdgpE2fADl0lat7EmL/I6dPwJ9IeyDbrwAMMzJPKwG2LSUk2Ux7uo?=

=?Windows-1252?Q?lggs1Ro/FDsBh3ICHZ6f4bWvzcBhS2oAIYYXs4FtmIUdm+J3XNgoO/qt?=

=?Windows-1252?Q?KWy1OvwKDFoKsI2bz8jWyB5vjLkWfM7L1ml6He7IfaHBWOsSRAlZnSjm?=

=?Windows-1252?Q?XdbUlj21e0LHWSj5lLbtE/7e3ORncA1P4qjJZE0fsYiJo6jIZKTusNnA?=

=?Windows-1252?Q?3lbNs+Dg303rFMIBTI7Oqy5q/xyl2pqHKn8/a8ZKkccNTHJLAXAeUPn7?=

=?Windows-1252?Q?aFUTytUs?=

Content-Type: multipart/alternative;

boundary="_000_OS8PR01MB6858E7FEFFF3CEE00551975CDA682OS8PR01MB6858apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OS8PR01MB6858.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 4e62843f-6ea5-4e89-cc05-08df3a5b257e

X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2026 10:05:25.4930

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB4230



--_000_OS8PR01MB6858E7FEFFF3CEE00551975CDA682OS8PR01MB6858apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Just a quick follow up.



Can I send the details?



Thanks.

________________________________

From: Orpha Tisdale

Sent: Wednesday, November 04, 2026, 4:21 PM

To: Orpha Tisdale

Subject: YES!





Hii,







I looked over your website and believe that both it and your company have a=

lot of potential.



If you don=92t mind, I=92d like to send you an audit report of your website=

and some suggestions for how to significantly improve your visibility in t=

hese search results.







With a few simple changes, you may double your organic traffic



Should I provide a quote to you?





Thank you!



Orpha Tisdale





--_000_OS8PR01MB6858E7FEFFF3CEE00551975CDA682OS8PR01MB6858apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

Hi,



_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

 



_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

Just a quick follow up.



_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

 



_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

Can I send the details?



_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

 



_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

Thanks.





x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRp=

lyFwdMsg">


11pt; color: rgb(0, 0, 0);">

From: Orpha Tisdale <OrphaTisdale@outlook.com>


Sent: Wednesday, November 04, 2026, 4:21 PM


To: Orpha Tisdale <OrphaTisdale@outlook.com>


Subject: YES!



rgb(0, 0, 0);">

 





color: rgb(255, 255, 255); margin: 0px;">


color: rgb(38, 40, 42);">Hii,




color: rgb(255, 255, 255); margin: 0px;">


color: rgb(38, 40, 42);"> 




color: white; margin: 0px 0in;">


color: rgb(38, 40, 42);">I looked over your website and believe that both =

it and your company have a lot of potential.




color: white; margin: 0px 0in;">


color: rgb(38, 40, 42);">If you don=92t mind,


: 11pt; color: rgb(91, 136, 40);">I=92d like to send you an audit report of=

your website and some suggestions
ntia, "serif"; font-size: 11pt; color: rgb(38, 40, 42);"> fo=

r

how to significantly improve your visibility in these search results.
n>




color: white; margin: 0px 0in;">


color: rgb(38, 40, 42);"> 




color: white; margin: 0px 0in;">


color: rgb(38, 40, 42);">With a few simple changes, you may double your or=

ganic traffic




color: white; margin: 0px 0in;">


quot;serif"; font-size: 11pt; color: rgb(38, 40, 42); background-color=

: rgb(253, 239, 43);">Should I provide a quote to you?




d-color: white; margin: 0px 0in; font-family: Constantia, "serif"=

; font-size: 11pt; color: rgb(38, 40, 42);">


239, 43);">





color: white; margin: 0px 0in;">


color: rgb(38, 40, 42);">Thank you!




_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">







_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

Orpha Tisdale



_msfontservice, calibri, helvetica, sans-serif; font-size: 10pt; color: rgb=

(0, 0, 0);">

 








--_000_OS8PR01MB6858E7FEFFF3CEE00551975CDA682OS8PR01MB6858apcp_--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZqy-00000000J6a-0MPu

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:32 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f200.google.com ([209.85.215.200]:43151)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <171088@eru.edu.eg>)

id 1xOXXN-00000000J4H-1p24

for doctor@nk.ca;

Wed, 04 Nov 2026 03:44:11 -0600

Received: by mail-pg1-f200.google.com with SMTP id 41be03b00d2f7-cdb061cc4dbso1029981a12.0

for ; Wed, 04 Nov 2026 01:43:15 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=eru.edu.eg; s=google; t=1793785389; x=1794390189; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=H+9BzbJKH4GrS+wAWXndwPClX5AbYUmpxIrQUJASPWs=;

b=MjtOqomYyTItMod9JQTz8iXVqeFb3bu4zMlM1W26Ndka5QYq2vkUAXkWqxDijfHiHm

rXPsHIxTqgVy9HyPaDyoB+CK/lRd5AXZm+1oTrh1TF3+iPl7VnNHC6We12NHPENQd/PK

kIw+9v5nXQ4LknDgtD5ONej7pb6gYBLNZ+DBhtfVb0ysKN7DxeYghG//4udO8XhUH65C

j0G6jVT1aw/wfCFuscqoXTy8Rd1TNNe+xYXRVV1caLwl9yjmdNMUYvi911ckjKWvQwSd

37PDVLy3D2tsmCydpZQxVuLfAPCKdHmWdqGiDtOhFVxdk4smVK1450b40jBw/QFWkRxE

4LiA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793785389; x=1794390189;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=H+9BzbJKH4GrS+wAWXndwPClX5AbYUmpxIrQUJASPWs=;

b=dvoCRPbqobFaYv1YDbLoGjFuyRsmI0UZ7v5R5R+K6e///BaUnW5VE78o4NjdfvNFxu

LsfGTKcWG+GeOPl7omICkf1vMMx+EqXx+6GZcjEVkReYtr5bH3Bv+xbZJuX+wX7Y5os2

44VF3LyTRB8Xle0qbLdzw37KY4M+Mmgc7GIjDq6f8OCoxR/a+X1R1Dbhl6SoQ1pA9sQw

0WFg6yhtUtdxlKztnKTNiivj2IMzx/WV6/QzmV+4F8TeEPFV3XJLBmKPniKrM96wUFxw

/vxlTHJbwTGsF/1tM1oW9amyf51emVNvRDKy6BwGGks3AMXjjk3lzMV1pZ2ddM9PzboL

MpTg==

X-Gm-Message-State: APuU4Z8cYiUztyNoqxwNZz/XQ6s2yxNxxQ0RCEWjWB8JBHvXpo0m6B1t

vCXF/cE2Tit2BQRjG9p3On8nJQLfJTNJSiaTp72Hcu91jGZrzigHwcazAc0r/A2v3u+7HmWj2fE

sTWZFAGHgYXTB+lxmuAxZBhuz

MIME-Version: 1.0

X-Received: by 2002:a17:90a:e7c5:b0:3a8:337d:228a with SMTP id

98e67ed59e1d1-3ae89559886mr8685192a91.6.1793785389074; Wed, 04 Nov 2026

01:43:09 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 09:43:09 +0000

Subject: =?UTF-8?B?VXcgem9ubmVwYW5lbGVuIGxldmVyZW4gc3Ryb29tIG9wIGRpZSB1IG5pZXQgZ2VicnVpa3Q=?=

From: Thuisbatterij Kenniscentrum <171088@eru.edu.eg>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000eb5d1d065f703449"



--000000000000eb5d1d065f703449

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



T3ZlcmRhZyB3ZWtrZW4gdXcgcGFuZWxlbiBtZWVyIHN0cm9vbSBvcCBkYW4gdSB2ZXJicnVpa3Qu

IERpZSBzdHJvb20gZ2FhdCAgDQpudSBoZXQgbmV0IG9wLiBNZXQgZWVuIHRodWlzYmF0dGVyaWog

c2xhYXQgdSBoZXQgb3AgZW4gZ2VicnVpa3QgdSBoZXQgemVsZiAgDQphbHMgaGV0IGRvbmtlciB3

b3JkdC4gR2VtaWRkZWxkIGJlc3BhYXJ0IGRhdCAxLjIwMCBldXJvIHBlciBqYWFyLg0KDQpWcmFh

ZyBoZXQgZ3JhdGlzIGluZm9ybWF0aWVwYWtrZXQgYWFuIGVuIG9udGRlayB3YXQgZWVuIHRodWlz

YmF0dGVyaWogdm9vciAgDQp1dyBzaXR1YXRpZSBvcGxldmVydC4NCkluZm9ybWF0aWUgYWFudnJh

Z2VuDQpVaXRzY2hyaWp2ZW4gwrcgTmlldCBtZWVyIG9udHZhbmdlbg0KDQo=

--000000000000eb5d1d065f703449

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




dding:20px;color:#1a1a1a">

Overdag wekken =

uw panelen meer stroom op dan u verbruikt. Die stroom gaat nu het net op. M=

et een thuisbatterij slaat u het op en gebruikt u het zelf als het donker w=

ordt. Gemiddeld bespaart dat 1.200 euro per jaar.



Vraag het grati=

s informatiepakket aan en ontdek wat een thuisbatterij voor uw situatie opl=

evert.




splay:inline-block;background:#386641;color:#fff;padding:12px 28px;text-dec=

oration:none;border-radius:4px;font-size:15px;font-weight:bold">Informatie =

aanvragen


reymattercafe.com#t/u/28b56686a90a45b7a097" style=3D"color:#999">Uitschrijv=

en =C2=B7
7" style=3D"color:#999">Niet meer ontvangen




" height=3D"1" style=3D"display:none" alt=3D"">



--000000000000eb5d1d065f703449--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZqs-00000000Iqg-13Kl

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:26 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f199.google.com ([209.85.222.199]:58648)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOXC1-00000000HKw-2Y8w

for doctor@nk.ca;

Wed, 04 Nov 2026 03:22:07 -0600

Received: by mail-qk1-f199.google.com with SMTP id af79cd13be357-93f2373e9b4so65845485a.1

for ; Wed, 04 Nov 2026 01:21:11 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=chih-nuevaescuela-mx.20260707.gappssmtp.com; s=20260707; t=1793784065; x=1794388865; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=+VgHVt8AIg5+0ThEPe0kGV/N9DsqcpuE5kX1RthnI7Y=;

b=Sew2hkp1j+he0D2pxb4/ivNLANJZYzkqUQHb12pV0At8kzz80gjHyDtcvoTvcaW0yr

fyzKPDwh1wXHSyzOq7taRCqYn9Neub7jOSdTsFlQlRdlQzIyoVUg2ORYncDxI60qjn7p

Ng6q2ZmoK9+icfzZXHDHfII1rcBRdHdi+xlAFswNMo5gqwbX8lMb0Zm1A1bHNzTCKpjW

BCW3TocJNMq8MwYueVoI5c5Eip46MfTTo9uvStHN+my+9//r+YwiIgkl5bfE4BL0XqBx

GG32u+MLaEv/m0n15RZZQL9uH3NUFkqgj+PPVHaHInNTrCZquNKvuPnNHapivIVgx9FZ

UFUg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793784065; x=1794388865;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=+VgHVt8AIg5+0ThEPe0kGV/N9DsqcpuE5kX1RthnI7Y=;

b=f52lbxjUy5ivlOVEXDkSZezZSUJmGiR3vhLI3rmMYalq4O1RzjKOaNNsdjP1zk+QjN

fbhtXwMRYBiMwL8NQl4S2+MnnkbUKrxbxkrdvMgmHiL+Z6zIVA/ryIydDfnZTslvUy7N

6XbzHPKYCjUf5vjKfrX7yM/+zlyfJLkcqNtVgsZEVngsbTpryope2lrej3e6X91Iv6/h

b3loWKSImETKOIOIuxjlJg6MvjrzCxBKwDGRWeMsYNoIM/p8bSaaUliAk0lChcSXT39E

pg8FOuKYWDSFm3eQxbvFDkVdqk7EpFiwJX/bcMFen3s0mKEBM+QGOe+6ygMAAbe9r3ri

1m8w==

X-Gm-Message-State: APuU4Z+l5Zt6d24x7e9FlUwF7ImJqfuaNRZDbL9LlB2DSNU4mKXxDX4F

261XHSWME0lBVWjMndwQQIP1cOtlYrB0+EqzcaEp2wkgJ92Mv6MDPZihTrPuBgeubxk/1zZgeqC

+sfdHaCRQh3II5b/Wx5J1SqFe

MIME-Version: 1.0

X-Received: by 2002:a05:620a:2989:b0:93f:5e6d:880f with SMTP id

af79cd13be357-944217a1992mr2747042785a.74.1793784065131; Wed, 04 Nov 2026

01:21:05 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 09:21:05 +0000

Subject: =?UTF-8?B?UmVzdWx0YWF0IGJlc2NoaWtiYWFyOiB1dyBlbmVyZ2llcmVrZW5pbmcgdmVyZ2VsZWtlbiBtZXQgdXcgYnV1cnQ=?=

From: Energiecheck Nederland

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000019f2b065f6fe6ec"



--000000000000019f2b065f6fe6ec

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SHVpc2hvdWRlbnMgaW4gdXcgcG9zdGNvZGUgYmV0YWxlbiBnZW1pZGRlbGQgNDcgZXVybyBtaW5k

ZXIgcGVyIG1hYW5kIGFhbiAgDQplbmVyZ2llLiBIZXQgdmVyc2NoaWwgeml0IHZhYWsgaW4gZWVu

IGNvbnRyYWN0IGRhdCBuaWV0IGlzIG1lZXZlcmh1aXNkIG9mICANCmVlbiB0YXJpZWYgZGF0IGFs

IG1hYW5kZW4gbmlldCBpcyBnZWNoZWNrdC4gRGF0IGlzIGluIDMwIHNlY29uZGVuIHRlICANCmNv

bnRyb2xlcmVuLg0KDQpEb2UgZGUgZ3JhdGlzIGVuZXJnaWVjaGVjayBlbiB6aWUgZGlyZWN0IHdh

dCB1IGt1bnQgYmVzcGFyZW4uDQpCZXNwYXJpbmcgYmVyZWtlbmVuDQpVaXRzY2hyaWp2ZW4gwrcg

TmlldCBtZWVyIG9udHZhbmdlbg0KDQo=

--000000000000019f2b065f6fe6ec

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




dding:20px;color:#1a1a1a">

Huishoudens in =

uw postcode betalen gemiddeld 47 euro minder per maand aan energie. Het ver=

schil zit vaak in een contract dat niet is meeverhuisd of een tarief dat al=

maanden niet is gecheckt. Dat is in 30 seconden te controleren.



Doe de gratis e=

nergiecheck en zie direct wat u kunt besparen.




y:inline-block;background:#0077b6;color:#fff;padding:12px 28px;text-decorat=

ion:none;border-radius:4px;font-size:15px;font-weight:bold">Besparing berek=

enen


mily-kent.com#t/u/a188fd85c8486d8d1069" style=3D"color:#999">Uitschrijven
a> =C2=B7
=3D"color:#999">Niet meer ontvangen




ight=3D"1" style=3D"display:none" alt=3D"">



--000000000000019f2b065f6fe6ec--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZqf-00000000I7u-1aDL

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:13 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f70.google.com ([209.85.222.70]:46227)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <36_Tqag0ZBt4GERSON.CHAVEZINSTITUTOAMAZONICO.EDU.PEDOCTORNK.CA@maestro.bounces.google.com>)

id 1xOWvB-00000000Fz3-0QQW

for doctor@nk.ca;

Wed, 04 Nov 2026 03:04:43 -0600

Received: by mail-ua1-f70.google.com with SMTP id a1e0cc1a2514c-98c73709b84so389186241.0

for ; Wed, 04 Nov 2026 01:03:46 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=institutoamazonico-edu-pe.20260707.gappssmtp.com; s=20260707; t=1793783020; x=1794387820; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=oVlf9Lz/vQoNjxV2cWSdQGguhHC8xQAZ6SzudovgB+E=;

b=VHOiwjkykkN3864xoZGHwlMObd6zO+RNyu1MZlKMt1ObUZWREI5d0/83enhWB+YFvx

X2LZDYHk0CY196BF8g31QzkspVuXkpnyP4zBGYBvtzD0VR0+epjdtj5bStj5dBeOXxzJ

IdX1TZl5qkP17nfA8qIAt+PsaMDpirdNPdqDGR0avPL4l+LC8hEUdS3iaDOhbxKKj6pj

3PbShwar1BqrUxnfCiNOb6VF+oL4slAUMqWe5jzu5zj1KjaSdDN5kuHurggyVEXllzVa

9zVfHRxrgC5l2nvWe/t46EIzYQU+WTZcNI99vAdEe44/tQG3prFUxt3Q/M5oCGoL3/Hb

13KA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793783020; x=1794387820;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=oVlf9Lz/vQoNjxV2cWSdQGguhHC8xQAZ6SzudovgB+E=;

b=F7fiH7jr2sNIfkgLRgDIpi52fgbwjG5QzAxEn8EqCOCJel+/MFE4U+h51bxOsfFSMN

aW91q637Ys7YSna4EVbpqQGKZep6OjTccg64qh5emhBhT8H79sB3dEXB+KNI5azXyVNo

BK7vd0+6YxLYwzZzhDpj6lnHlf7whNbgCz6FKBqf5bv4noaxL20MZ2cKBx68/cIsR7dK

ta6JaCukIo9lCd/H09E3PPtADDKTLb7FHPffPuxFPX5Os1z1Ctm5KPCF41xz/XJoVTwi

q13QFeVZH4fNGIlTUtiMO9EF2GAisUafuU1GH6TSlT8P6DnLxhHuyUuKchApTG6RFxPT

b2Og==

X-Gm-Message-State: APuU4Z91aABKNSDhS4BRHFwAYs/0QnruvVh8yiC0kr0gZ2fq5bs/sa7i

8LACCHU3U/VEpL7FC81BtaWl5P4TRE8iv6V+JgiKZ2R96grfHZ9qEyWTbodqGbBWMFHWjY6iF6x

iezxlrK/UBqk1N4fjy+LGuLT5

MIME-Version: 1.0

X-Received: by 2002:a05:6102:9d0:b0:7c8:448:5237 with SMTP id

ada2fe7eead31-7d072722ed0mr6907675137.24.1793783019942; Wed, 04 Nov 2026

01:03:39 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 09:03:39 +0000

Subject: =?UTF-8?B?TGFhdHN0ZSBkYWc6IEFOV0IgQXV0b2tvZWxib3ggYWN0aWUgc2x1aXQgdmFuYXZvbmQ=?=

From: ANWB Ledenactie

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000b54a74065f6fa7db"



--000000000000b54a74065f6fa7db

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



VmFuZGFhZyBpcyBkZSBsYWF0c3RlIGRhZyB2YW4gZGUgQU5XQiBBdXRva29lbGJveC1hY3RpZS4g

VnVsIGRlIGtvcnRlICANCmVucXVldGUgaW4gKDQgdnJhZ2VuLCBtaW5kZXIgZGFuIDEgbWludXV0

KSBlbiBtYWFrIGthbnMgb3AgZWVuIEF1dG9rb2VsYm94ICANCnRlciB3YWFyZGUgdmFuIDg5IGV1

cm8uIEVyIHppam4gbm9nIDIzIGV4ZW1wbGFyZW4gYmVzY2hpa2JhYXIuDQoNCkRlIGFjdGllIHNs

dWl0IHZhbmF2b25kIG9tIDIzOjU5Lg0KRW5xdWV0ZSBpbnZ1bGxlbg0KVWl0c2NocmlqdmVuIMK3

IE5pZXQgbWVlciBvbnR2YW5nZW4NCg0K

--000000000000b54a74065f6fa7db

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




dding:20px;color:#1a1a1a">

Vandaag is de l=

aatste dag van de ANWB Autokoelbox-actie. Vul de korte enquete in (4 vragen=

, minder dan 1 minuut) en maak kans op een Autokoelbox ter waarde van 89 eu=

ro. Er zijn nog 23 exemplaren beschikbaar.



De actie sluit =

vanavond om 23:59.




lay:inline-block;background:#003580;color:#fff;padding:12px 28px;text-decor=

ation:none;border-radius:4px;font-size:15px;font-weight:bold">Enquete invul=

len


octorfareed.com#t/u/fa290102c2bee17d7a51" style=3D"color:#999">Uitschrijven=

 =C2=B7
tyle=3D"color:#999">Niet meer ontvangen




height=3D"1" style=3D"display:none" alt=3D"">



--000000000000b54a74065f6fa7db--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZqY-00000000HmV-1T9n

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:06 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f200.google.com ([209.85.214.200]:42445)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3IevqahINBgIlcktq.ctkcu.oqpvguwvgnxv.gfw.gefqevqtpm.ec@maestro.bounces.google.com>)

id 1xOWGi-00000000CMd-3odf

for doctor@nk.ca;

Wed, 04 Nov 2026 02:22:58 -0600

Received: by mail-pl1-f200.google.com with SMTP id d9443c01a7336-2ea785a4decso6383315ad.1

for ; Wed, 04 Nov 2026 00:21:59 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=utelvt.edu.ec; s=google; t=1793780513; x=1794385313; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=k+CcfItLUd8sQfLzZ96Eioj/E0/LBN1Mf4e8zSTWWdU=;

b=Cdz8jNh5xu+w/6CtMoVQF6be6bCOBdACgdA+mx3cCzIkf5YUcBwMta/ZS5ZBa9tItT

NSzgGigk+aFKX7pMTdadXIcqhkQbA9vwhIUmWZGJbZlFWgAGMKJpK7xj2tSZDl2PrNc+

Y/UrP+zHqioc7rja5OJf/+C9VvgdFuLmrOmv8=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793780513; x=1794385313;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=k+CcfItLUd8sQfLzZ96Eioj/E0/LBN1Mf4e8zSTWWdU=;

b=yPTo6VC3/E13HmegB3dUjdIsEvfX/7imlSOJw8nf3k9mXQa6vN5/kichvsiBeyPBkY

66bgnt/UfnYZshtvi2TPo8JI+HA9p1Pyk16SfxryYYG8elg6bi+wCi2ia++bv37QU6fg

ZHV7EGLfOfeMug5E9xmWg8r81IUg18R0jXkmiALqXMBfYfmMiS1pyexOfg1kCxHy6YN9

aYH1tFMZh+QskCQz4htbkBjbwzwPMJslDq1gYGnDjCYTZa7F7Y1caxp2k4Q8Jx5SMmm5

tmSY2LkNOmRZgTy79caQu5Fewz2pwDkwW+p7wC6VHyLDqF0M850QXidX2GnmWrdiDUxN

6Hmw==

X-Gm-Message-State: APuU4Z90geoV45KAaeEyziGuAQyX9bn9h2h6H+yD1COIL/atupXzuty/

MXIKD29+inCqFMQUCfmWDJB3GrjHJwcfLIhpnhhDojDW/LIcJfLcTnQDVa8aPf2ajjV1pgai8DQ

nlziJTi46PSlwqog+8RgvxQ/w

MIME-Version: 1.0

X-Received: by 2002:a17:903:1a4e:b0:2df:9e44:32f1 with SMTP id

d9443c01a7336-2eb364e1741mr104679185ad.29.1793780513270; Wed, 04 Nov 2026

00:21:53 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 08:21:53 +0000

Subject: =?UTF-8?B?QmV6b3JncG9naW5nIG1pc2x1a3Q6IHBha2tldCB3b3JkdCA0OHUgYmV3YWFyZA==?=

From: Pakketservice NL

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004c8217065f6f1259"

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Uw pakket kon vandaag niet worden afgeleverd. Het wordt nog

48 uur bewaard bij het sorteercentrum. Daarna wordt het retour gestuurd naar

de afzender. Plan een nieuw bezorgmoment of kies een afhaallocatie bij u

in de buurt. Bezorging plannen Uitschrijven · Niet meer ontvangen



Content analysis details: (6.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.200 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.200 listed in wl.mailspike.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: novellai-market.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.200 listed in bl.score.senderscore.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?B?QmV6b3JncG9naW5nIG1pc2x1a3Q6IHBha2tldCB3b3JkdCA0OHUgYmV3YWFyZA==?=



--0000000000004c8217065f6f1259

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



VXcgcGFra2V0IGtvbiB2YW5kYWFnIG5pZXQgd29yZGVuIGFmZ2VsZXZlcmQuIEhldCB3b3JkdCBu

b2cgNDggdXVyIGJld2FhcmQgIA0KYmlqIGhldCBzb3J0ZWVyY2VudHJ1bS4gRGFhcm5hIHdvcmR0

IGhldCByZXRvdXIgZ2VzdHV1cmQgbmFhciBkZSBhZnplbmRlci4NCg0KUGxhbiBlZW4gbmlldXcg

YmV6b3JnbW9tZW50IG9mIGtpZXMgZWVuIGFmaGFhbGxvY2F0aWUgYmlqIHUgaW4gZGUgYnV1cnQu

DQpCZXpvcmdpbmcgcGxhbm5lbg0KVWl0c2NocmlqdmVuIMK3IE5pZXQgbWVlciBvbnR2YW5nZW4N

Cg0K

--0000000000004c8217065f6f1259

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




dding:20px;color:#1a1a1a">

Uw pakket kon v=

andaag niet worden afgeleverd. Het wordt nog 48 uur bewaard bij het sorteer=

centrum. Daarna wordt het retour gestuurd naar de afzender.



Plan een nieuw =

bezorgmoment of kies een afhaallocatie bij u in de buurt.




isplay:inline-block;background:#d4880f;color:#fff;padding:12px 28px;text-de=

coration:none;border-radius:4px;font-size:15px;font-weight:bold">Bezorging =

plannen


ovellai-market.com#t/u/f87fca94f1f29dfeb4b8" style=3D"color:#999">Uitschrij=

ven =C2=B7
4b8" style=3D"color:#999">Niet meer ontvangen




1" height=3D"1" style=3D"display:none" alt=3D"">



--0000000000004c8217065f6f1259--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:11:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZqG-00000000H0Q-1BSb

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:11:48 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:11:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f179.google.com ([209.85.128.179]:57428)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOUJQ-00000000083-2Gej

for sales@nk.ca;

Wed, 04 Nov 2026 00:17:35 -0600

Received: by mail-yw1-f179.google.com with SMTP id 00721157ae682-8b0a921ee46so3122377b3.2

for ; Tue, 03 Nov 2026 22:16:38 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1793772992; cv=none;

d=google.com; s=arc-20260327;

b=GtIbH5d1R3OVm5ngFzktuerLQ2pVfwl1ImDQHdmR+mM9jGYygU4zsHDTQMhpCvQSJt

mzm9FxYbk9Ec4mERP5o/LYCGAvpynFeeNP/esAdqFASU4id9bKfM5ju7Td1b89YbRWS2

Kys7iqx2y01tHf4JwhsnB/4Bcqgb+7air7L5MFCH5sswGhOrywU/+X4hV6VwXGkyfW1S

a5gD7rKrDgpm5i2kDFPcLjBMICXfmAF3Yyg7yBj63SIgtg+V0C2oKw8O9jdNj4b6fcHO

Y0DajnnzqRueu7CgylfmJY3npfm8ZkG/uMno8wto0T/ENGWUKXpaIyS3TdIZoIQEJNsX

yNEA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=v7GiQRwlON5iC7v8bbHWTyoGNwVAKiZCrF5AE5qOmEA=;

fh=xWbJN/a7gNPjhuK8L0IhsPuNKQ6D33Aso+hrxhE873A=;

b=iGT3fQqGU/fQQcLwpRq53anDpYXRBv9CrvDdibAE2NNTMs5kBeE6GbeadT8u24EnMd

H2iMQ5ylZ84+LwhjCwEloxiebVdRLHHCv2i1+ks4c2CjvknmiAw0Mul2sxWbWk6db2l5

vxl6Cu6h+1FJ7NIObl+uXM1N3ZOjwwNKesUhuof/nQBcJNs3Q5EvdiYda/2FNA8blG/Q

AJXfzcxODSyivmqy7FzTe8tTVGdUlJX0/swai4SXoqe4OLPPOiVnpf/XB4mlNYjxCS08

ez3+Nd/uOP+aLss46Ggo6GvQeIE5pv31PGccjcFcEtBeGprtJbyAushmapQjARnGgAxf

6HtA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793772992; x=1794377792; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=v7GiQRwlON5iC7v8bbHWTyoGNwVAKiZCrF5AE5qOmEA=;

b=Bb46guyJqgoyBT8Zz5EbRCdMAfXdSfyuPkGk+j8PocuaEu+6yJYpX/XD1wOVGyE6iN

pI138MVVT7JEWtMML4+RmAMoPHSPbGx6nFgERFzLNIUgN58yp5b4KFXnqXSJQRsCchnx

K3Kqq0Nx8NFishzWe9RGqpbe9UpGuEuTw1GY5SxHwHyBIPhadx5eK7gjIviWUIaOncdh

FDxQn7KhOcthEftm7AN4xifdtY5BE4QOE9mv2E6UirOntMWiSKPLB1nYW1bJ+ede4b92

d+tGtTgYvxkKWkY9dZUdXISesPDEFu68ew/kRZ6/LcDH/ipjSTseHVtGuDSnGalCHIr1

dfjw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793772992; x=1794377792;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=v7GiQRwlON5iC7v8bbHWTyoGNwVAKiZCrF5AE5qOmEA=;

b=yD5OL8EMHLZEUl3a9aLFchei3KjbRjoz8JO94kcXwQE/xZNp/gi7GgLkNwcnwdkk2m

aEx3ZrAxGBN4jQLKjEOa+CD1dMCJ0HtMpZC0VDslHMwr2dPsJQ1mMa5zXfZiLZh0QlUx

HiMrv6ffRQl1Zyuu7FH7hTtanPXIbYmCu9eZ7DRxOy8WhBWZ5l9UkreF1ayvmKEgpEVw

76EBGBhbueG12NpPX0+7GowtDMATUA6vnAz/yU4/CcKOaWf+osg3si975gIHL+veCucs

TGu1V3r9OSTFx8m6+XQajzYl0N9Iue7OEU/3BhhVKLqaIR82356aG0D3sZkuH5iS8Cg9

hImA==

X-Forwarded-Encrypted: i=1; AKwUvByfOzZgnAPIPH7ijvIwLNNKZV0O3FJXYnc5Mp9ioAY+9O9yvo3YxYDkbFYz3brIYVqN1PlM7Q==@nk.ca

X-Gm-Message-State: APuU4Z8QvLFPO3ZTnwGwE4R/HXUJA6uikefOyXU9nlU35PabqOMddpI9

OwVUcTGBRrdzE4CnS0T2u4IcDKv4kmZUI2m2U+W/Dfob43jyZaXJToQiB/GR5sPjmfj1LUOKrB9

+LbfibQCrWAzev2A1DJh5K+HQTGP8ZVo=

X-Gm-Gg: AYBFou3hQD3FNsY0vjxQpeOVwGKPpAnJpcuBrOpTuOGN0Hem9iT5TI+pf8sgJRimYrS

LiOpT/a73JU2kjEmFVuEqAI+R1AQGJArH0WTsokAgrlUjlwZs+V10lsBr1Nc4Qe4X9ZJYbAbOMd

rv+9WU+3TWxTx9c0rDATiZPh0vdoajdJiDmRkvG7Qa6fcgn8gXnuDgXRJ7OuXTd0++7MZlTbl75

qWNb8JtplBZpiRs5tj0m0mmYADXVEh2BZfeAlf9XwivtDpoaj6IUskGHu2oeGesc2UVMCyKbpLO

oJz2Qfv7BQVwAYfFXJo1V+iQSpUFNQ0nfsntQRKkk6LBitjXy9txq3WVlkbOcYumELT+NRTMDfq

FT1jCZ4j372ch9UVvJWfA1etOhrOOihEtl0agESOQWggjH/BXQzWDfyRRSORDsCraqZpRxybTc/

K4wg==

X-Received: by 2002:a05:690c:6989:b0:8b2:fc97:3af6 with SMTP id

00721157ae682-8b2fc9743c6mr23095507b3.27.1793772992228; Tue, 03 Nov 2026

22:16:32 -0800 (PST)

MIME-Version: 1.0

Reply-To: relieffunde@outlook.com

From: "relieffunde@outlook.com"

Date: Wed, 4 Nov 2026 11:46:21 +0530

X-Gm-Features: AclHuK8-DkER9XRwesnv30SqAtvBZEyhFPYbCWY2Zi2h8hSFjhL8awweqp2z37Q

Message-ID:

Subject: UN HUMANITARIAN AID PROGRAM 2026

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000027423065f6d5273"

Bcc: sales@nk.ca

X-Spam_score: 24.0

X-Spam_score_int: 240

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR

UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com

YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:





Content analysis details: (24.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.179 listed in dnsbl.ahbl.org]

[209.85.128.179 listed in dnsbl.ahbl.org]

[209.85.128.179 listed in dnsbl.ahbl.org]

[209.85.128.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.179 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.179 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.179 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.179 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.179 listed in bl.score.senderscore.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kouamekouakouemmanuel49(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kouamekouakouemmanuel49(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

3.6 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail

account

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.2 UPPERCASE_75_100 message body is 75-100% uppercase

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 FILL_THIS_FORM Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form

Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026



--000000000000027423065f6d5273

Content-Type: text/plain; charset="UTF-8"



DEAR SIR/ MADAM,



YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO

CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com



YOUR FULL NAME:

ADDRESS:

NATIONALITY:

MOBILE NUMBER:

AGE:

GENDER:

OCCUPATION:



--000000000000027423065f6d5273

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



DEAR SIR=

/ MADAM,

ail=3D"gmail_signature">
=C2=A0=C2=A0
YOUR EMAIL HA=

S BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR W=

INNING PRIZE, EMAIL US.
=3D"_blank">relieffunde@outlook.com

YOUR FULL NAME:
ADDRESS: =


NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0=





--000000000000027423065f6d5273--

dragonfly phish from sendgrid

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 21:39:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xORqt-000000009I0-2ZKF

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 21:39:55 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 21:39:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from xtrwhxqt.outbound-mail.sendgrid.net ([167.89.10.71]:61616)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOPLF-00000000J6v-2wFO

for doctor@nl2k.ab.ca;

Tue, 03 Nov 2026 18:59:06 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lrsmanser.net;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1793753887;

bh=+HAc4YavYUuZi16RxpgBhQNpTMGrNhfkoTReGmVEPDE=;

b=Z/gKJEUOZfOsbGJXVS4MpNIt9wOC+RVF9YU6Yld45xIpa04EiQpuVic6apjdckbHXYsH

k3u99mVoD3qRcPLDTj46vxwxuZY0+fyqJOwYfR8YQ3vSqaD4c3Z+UL83NZqgM1q1QSvBAp

xapG+NhACiYNsqfTbDYd40tfgkj6Wmt+YZznsMekbbgAIc8XSIRo2PQzhjaaHeOo8pwbCb

+XOxtvHC9PZPngybQORMeIfMO7E++rCle1JzQI0e1eFbW2YtvUDlt7WMTZedwNV5I7sg6i

RUR/JdEeUl9XvM4m5a10MR1zy6GXMaqqeitbv9J+0hCAGZC1QMDiFnayGEqGomww==

Received: by recvd-7497f4c48b-d9lkh with SMTP id recvd-7497f4c48b-d9lkh-1-6AEA831E-4B

2026-11-04 00:58:06.684741711 +0000 UTC m=+3052643.065026433

Received: from MTE3OTk5OTk3 (unknown)

by geopod-ismtpd-13 (SG) with HTTP

id 7QsgGWDIRy2i8TmJlpVuNQ

Wed, 04 Nov 2026 00:58:06.499 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 04 Nov 2026 00:58:07 +0000 (UTC)

From: Dragonfly Shipping

Mime-Version: 1.0

Message-ID: <7QsgGWDIRy2i8TmJlpVuNQ@geopod-ismtpd-13>

Subject: Your Package Requires Action

X-SG-EID:

=?us-ascii?Q?u001=2EXaWRkhddM6TCKThGGvxqrHlzxJvECVxh51QOjOtWGXZaNIgYkWoQUJTox?=

=?us-ascii?Q?AOeYfEZdtaS4OealCKpBpK1g39GC0G3IwLdGBue?=

=?us-ascii?Q?dmzuj2+HuXTAaD7i42ruQDWCb7acHYyINSYC6z6?=

=?us-ascii?Q?3CsXlEUDwv1GgY4uycG1pe=2FyILTxQLDINHJHD5A?=

=?us-ascii?Q?t0IRgyYRtI=2Fe+QhV5aHylRHnUgqR+n7+fTWTm0s?=

=?us-ascii?Q?8Fmz8D58oiD3MLXZWFDfNzqkPC3Zepwvm1gmzyp?= =?us-ascii?Q?B3jB?=

To: doctor@nl2k.ab.ca

X-Entity-ID: u001.scLwveDFuF43f0DSa3IILA==

X-Spam_score: 39.6

X-Spam_score_int: 396

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Delivery Notification Your package requires action Hello,





Content analysis details: (39.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.10.71 listed in dnsbl.ahbl.org]

[167.89.10.71 listed in dnsbl.ahbl.org]

[167.89.10.71 listed in dnsbl.ahbl.org]

[167.89.10.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.10.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.10.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.10.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.10.71 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: lrsmanser.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: lrsmanser.net]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.10.71 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[167.89.10.71 listed in bl.score.senderscore.com]

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} Your Package Requires Action




WIDTH: 100%; MAX-WIDTH: 580px; WHITE-SPACE: normal; WORD-SPACING: 0px; TEX=

T-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal;=

ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; font-variant-ligatures: nor=

mal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decora=

tion-thickness: initial; text-decoration-style: initial; text-decoration-co=

lor: initial; margin: 0 auto;">












i", roboto, helvetica, arial, sans-serif; PADDING-BOTTOM: 0px; PADDING-TOP:=

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BACKGROUND-COLOR:=

rgb(248,250,252)'>




FT: 12px; PADDING-RIGHT: 12px; BACKGROUND-COLOR: rgb(248,250,252)" cellSpac=

ing=3D0 cellPadding=3D0 width=3D"100%" border=3D0>














rgb(226,232,240) 1px solid; BORDER-RIGHT: rgb(226,232,240) 1px solid; BORDE=

R-BOTTOM: rgb(226,232,240) 1px solid; BORDER-LEFT: rgb(226,232,240) 1px sol=

id; BACKGROUND-COLOR: rgb(255,255,255); border-radius: 16px; box-shadow: rg=

ba(0, 0, 0, 0.05) 0px 10px 30px -5px" cellSpacing=3D0 cellPadding=3D0 width=

=3D"100%" border=3D0>






























: 0; BACKGROUND-COLOR: rgb(0,166,143)"> 

d; PADDING-BOTTOM: 20px; PADDING-TOP: 28px; PADDING-LEFT: 36px; PADDING-RIG=

HT: 36px">


%" border=3D0>
















ORM: uppercase; FONT-WEIGHT: 700; COLOR: rgb(0,166,143); PADDING-BOTTOM: 5p=

x; PADDING-TOP: 5px; PADDING-LEFT: 12px; DISPLAY: inline-block; LETTER-SPAC=

ING: 0px; PADDING-RIGHT: 12px; BACKGROUND-COLOR: rgb(230,247,245); border-r=

adius: 12px">Delivery Notification



PADDING-LEFT: 36px; PADDING-RIGHT: 36px">


OR: rgb(15,23,42); MARGIN: 0px 0px 14px; LETTER-SPACING: 0px">Your package =

requires action




MARGIN: 0px 0px 14px; LINE-HEIGHT: 1.6">Hello,




MARGIN: 0px 0px 26px; LINE-HEIGHT: 1.6">Your package is currently pending =

final release at the distribution center. Please confirm your delivery deta=

ils and preferences to ensure a smooth final delivery.




b(226,232,240) 1px solid; BORDER-RIGHT: rgb(226,232,240) 1px solid; BORDER-=

BOTTOM: rgb(226,232,240) 1px solid; BORDER-LEFT: rgb(226,232,240) 1px solid=

; BACKGROUND-COLOR: rgb(248,250,252); border-radius: 12px" cellSpacing=3D0 =

cellPadding=3D0 width=3D"100%" border=3D0>












P: 20px; PADDING-LEFT: 24px; PADDING-RIGHT: 24px">


M: 14px; TEXT-TRANSFORM: uppercase; FONT-WEIGHT: 700; COLOR: rgb(0,166,143)=

; MIN-HEIGHT: 1em; LETTER-SPACING: 0px">Your shipment details



h=3D"100%" border=3D0>






























205px; BORDER-BOTTOM: rgb(241,245,249) 1px solid; COLOR: rgb(100,116,139); =

PADDING-BOTTOM: 7px; PADDING-TOP: 7px; PADDING-LEFT: 0px; PADDING-RIGHT: 0p=

x">Tracking number:
MILY: "courier new", courier, monospace; BORDER-BOTTOM: rgb(241,245,249) 1p=

x solid; FONT-WEIGHT: 700; COLOR: rgb(15,23,42); PADDING-BOTTOM: 7px; PADDI=

NG-TOP: 7px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px' align=3Dright>CA0264256=

17NC

BOTTOM: rgb(241,245,249) 1px solid; COLOR: rgb(100,116,139); PADDING-BOTTOM=

: 7px; PADDING-TOP: 7px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px">Delivery lo=

cation:
BOTTOM: rgb(241,245,249) 1px solid; FONT-WEIGHT: 600; COLOR: rgb(15,23,42);=

PADDING-BOTTOM: 7px; PADDING-TOP: 7px; PADDING-LEFT: 0px; PADDING-RIGHT: 0=

px" align=3Dright>Canada

rgb(100,116,139); PADDING-BOTTOM: 7px; PADDING-TOP: 7px; PADDING-LEFT: 0px;=

PADDING-RIGHT: 0px">Status:
DING-TOP: 7px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px" align=3Dright>


DER-TOP: rgb(254,226,226) 1px solid; BORDER-RIGHT: rgb(254,226,226) 1px sol=

id; BORDER-BOTTOM: rgb(254,226,226) 1px solid; FONT-WEIGHT: 700; COLOR: rgb=

(220,38,38); PADDING-BOTTOM: 3px; PADDING-TOP: 3px; PADDING-LEFT: 10px; BOR=

DER-LEFT: rgb(254,226,226) 1px solid; DISPLAY: inline-block; PADDING-RIGHT:=

10px; BACKGROUND-COLOR: rgb(254,242,242); border-radius: 6px">Awaiting Con=

firmation





0 cellPadding=3D0 width=3D"100%" border=3D0>












P: 12px; PADDING-LEFT: 16px; BORDER-LEFT: rgb(245,158,11) 4px solid; PADDIN=

G-RIGHT: 16px; BACKGROUND-COLOR: rgb(255,251,235); border-radius: 0px 8px 8=

px 0px">


,83,9); MARGIN: 0px; LINE-HEIGHT: 1.5">Please confirm your delivery and set=

tle the fee within the next 48 hours to avoid your parcel =

being returned to the sender.






0 cellPadding=3D0 width=3D"100%" border=3D0>














N: none; FONT-WEIGHT: 700; COLOR: rgb(255,255,255); PADDING-BOTTOM: 16px; P=

ADDING-TOP: 16px; PADDING-LEFT: 38px; DISPLAY: inline-block; LETTER-SPACING=

: 0px; PADDING-RIGHT: 38px; BACKGROUND-COLOR: rgb(0,166,143); border-radius=

: 8px; box-shadow: rgba(0, 166, 143, 0.25) 0px 4px 12px" href=3D"https://u1=

17999997.ct.sendgrid.net/ls/click?upn=3Du001.a5WsL0Jw64kAhY2WKdDSHHlY5kZyDi=

ETuLDqvdrdEYA-3DEXqp_GyWe1RRaaz-2B-2B-2Bm2R4SiSUdze5JEo-2BJEvf8HTpyV4CVZd-2=

FOp7qs3yTV8-2FrVtotyzYjTMHx5gjmzVcTCUvsffQ15kpuybG-2BUKxP5TR9c7iMrnNc-2FmQh=

eIzCmziaBjtlFfZvAgHsTlCb3lX9L9JBac-2BecjM31WB25rTTEZLZUJFbtnIGbqUJfkcgCgvTj=

hgLb-2FdvR8BZVAbHfu1OAl7jBqz-2FQ-3D-3D" rel=3D"noopener noreferrer" target=

=3D_blank>Confirm & schedule delivery



; BORDER-RIGHT: medium none; BORDER-BOTTOM: medium none; BORDER-LEFT: mediu=

m none; MARGIN: 24px 0px; border-image: none">


); TEXT-ALIGN: center; MARGIN: 0px">

Questions? Our support team is a=

vailable to help.

,240) 1px solid; COLOR: rgb(148,163,184); PADDING-BOTTOM: 22px; PADDING-TOP=

: 22px; PADDING-LEFT: 36px; LINE-HEIGHT: 1.6; PADDING-RIGHT: 36px; BACKGROU=

ND-COLOR: rgb(248,250,252)" align=3Dcenter>=A9 2026 . All rights reserved. =


You received this message because a delivery is associated with your em=

ail address.





AfwyCsv5SKe20dbI9Z6QPR4oa3RFgmOb-2Bwu-2BlwQJRk-2FtpTv4YEkJOKYIUejAg4BO6dDb0=

PfKGSDpLl0gacWgz3fTDpFtVUVSPSHeCTjHm6UzF-2BnYB0uAhCM1aaQnpx4rX-2BXv3i2j6iBO=

E3-2BrssNH3iE2V8LghmS3NS5ub8cbYuUtWKKVzaBAfrJC-2BtJthjjPArliuVul83glcsSDP-2=

Fj8g-3D-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:=

1px !important;width:1px !important;border-width:0 !important;margin-top:0 =

!important;margin-bottom:0 !important;margin-right:0 !important;margin-left=

:0 !important;padding-top:0 !important;padding-bottom:0 !important;padding-=

right:0 !important;padding-left:0 !important;"/>

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 16:48:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xONIb-00000000O4K-17wI

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 16:48:13 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 16:48:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m82152.xmail.ntesmail.com ([156.224.82.152]:27140)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOMOA-00000000EV2-1ovG

for sales@nk.ca;

Tue, 03 Nov 2026 15:50:02 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_854188_1144578958.1793742530437"

To: sales

Subject: =?UTF-8?B?UmU6UmU6UmU6VGlhbmppYW8g4oCTIE1hcmthbsSxemEgw5Z6ZWwgSGlqeWVuIMOccsO8bmxlcmk=?=

X-Priority: 3

MIME-Version: 1.0

Received: from admin@wemakediapers.com( [10.176.106.235] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 4 Nov 2026 05:48:50 +0800 (GMT+08:00)

From: =?UTF-8?Q?admin=E8=B4=A6=E5=8F=B7?=

Date: Wed, 4 Nov 2026 05:48:50 +0800 (GMT+08:00)

X-WM-Tid: 0aa1a362e6e50696kunmb0adef6c11261b

DKIM-Signature: a=rsa-sha256;

b=Bc3+2aB5vlg+VerOF5I7J5T9mE2CV2WL/7XJZQckPet2YfbpXM4zU/u47z6kivwWimLmUlmqvZPXX3IxQzSJIk4gD5GRQNfbNiIkK3GhfLuu3eMRBHPIPiaGEXAeGFGvnfeW1TRYiQxaQZSBV6J5ZYTCqv6A+6bcB7mBYxmNkeI=; s=default; c=relaxed/relaxed; d=wemakediapers.com; v=1;

bh=Ykzyq2Ks226IolBcNClspyiwYcA/TOqqmCJINY2ObcA=;

h=date:mime-version:list-unsubscribe:subject:message-id:list-unsubscribe-post:from;

Message-ID:





Hi sales,

I hope everything is going well for you.

Thank you for recently viewing, Adult pull-up diapers,from the link in our previous email. I wanted to follow up to see if you need any extra details or have any questions about the product.

Please let us know your required quantities and any specific needs.We will provide the best possible discounts.

Adult pull-up diapers

Thank you for giving this your attention. I look forward to your response soon.

Best regards,







Continue to discover our newest features by using . Maintain Updates



Ready to silence these messages? Access Personalize Delivery.







Raziya Kadir

Sales Manager

Quanzhou Tianjiao Lady & Baby's Hygiene Supply Co., Ltd.

raziya@itianjiao.com

+86 19118033095

Industrial Zone, Luojiang District, Quanzhou, Fujian, China









Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 16:47:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xONI8-00000000O14-0mN5

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 16:47:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 16:47:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [156.224.82.47] (port=55624 helo=mail-m8247.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOL3B-000000002Bn-0x7C

for root@nk.ca;

Tue, 03 Nov 2026 14:24:28 -0600

Content-Type: multipart/mixed; BOUNDARY="=_Part_842869_1550928907.1793737380469"

To: root

Reply-To: sylvia.shi@dsmolds.com

Subject: =?UTF-8?B?UkU6IEluamVjdGlvbiBNb2xkcyAmIFBhcnRzX0RTIE1vbGRz?=

X-Priority: 3

MIME-Version: 1.0

Received: from dsmolds@dsmolds.com( [10.176.120.14] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 4 Nov 2026 04:23:00 +0800 (GMT+08:00)

From: =?UTF-8?Q?Sylvia=EF=BD=9CDS_Molds?=

Date: Wed, 4 Nov 2026 04:23:00 +0800 (GMT+08:00)

X-WM-Tid: 0aa1a314521ad095kusyea311b4610e5d3

DKIM-Signature: a=rsa-sha256;

b=RsrGJ4KnQULp3YWJglrIIxquEzvXWUj7zkBy/PTu8i9tvzC85OJWYiSv+vPAId1yUofexNNkSPQbjAJKTTXJzyF9XZJ6QYFyk2oSCbb/w4IAR8fzpez2Zo3jUrLczy59WkqezeGeq319zceY60cULjpXsqw8ckBMXodxbxF/tBw=; c=relaxed/relaxed; s=default; d=dsmolds.com; v=1;

bh=d4+qILBk5F1CSQ5qJZY6My/thsl1WUCyCOs5QWATQ/k=;

h=date:mime-version:list-unsubscribe:subject:message-id:list-unsubscribe-post:from;

Message-ID:





Hi Root,



Hope you are doing well.



Sylvia here. I wanted to follow up on my previous message regarding potential cooperation in injection mold projects.



We understand that companies like yours usually work with experienced tooling partners.



Our goal is not to replace your current suppliers, but to provide additional support when you need:

• Extra mold manufacturing capacity

• Complex mold projects



The attached case studies cover automotive, electronics, medical and home appliance applications, including multi-cavity, 2K and over-molding projects.



I’d be glad to support you with your next mold project.





Best Regards





Sylvia Shi | 施新燕



Business Development Manager



Tel. +86 159 7010 6685



sylvia.shi@dsmolds.com



DENG & STANMET MOLDS INDUSTRY Co, Ltd. | No. 1331, Building 2, Innovation Wisdom Harbour



Xinqiao Street, Bao'an District, 518125 Shenzhen, China www.dsmolds.com





On Fri, Oct 30, 2026, "Sylvia｜DS Molds" wrote:



-----Original Message-----

From: "Sylvia｜DS Molds"

Sent Time: Fri, Oct 30, 2026

To: [root ]

Subject: Tooling Partner_Deng & Stanmet Molds



Hello Root,



Hope you are doing well.



This is Sylvia from Deng & Stanmet Molds.

We support Tooling manufacturers with precision injection molds and mold components for automotive, electronics, packaging, home appliance and industrial applications.



If your team ever needs additional tooling capacity, cost optimization or reliable support for new projects, we would be happy to connect and explore possible cooperation.



Looking forward to staying in touch. 😊







Best Regards





Sylvia Shi | 施新燕



Business Development Manager



Tel. +86 159 7010 6685



sylvia.shi@dsmolds.com



DENG & STANMET MOLDS INDUSTRY Co, Ltd. | No. 1331, Building 2, Innovation Wisdom Harbour



Xinqiao Street, Bao'an District, 518125 Shenzhen, China www.dsmolds.com





Web/SEo/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 16:47:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xONHz-00000000O0G-3G5p

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 16:47:35 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 16:47:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f172.google.com ([74.125.82.172]:42470)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOKZ4-00000000Own-0zMc

for sales@nk.ca;

Tue, 03 Nov 2026 13:53:06 -0600

Received: by mail-dy1-f172.google.com with SMTP id 5a478bee46e88-36c9a93a1abso788902eec.1

for ; Tue, 03 Nov 2026 11:52:08 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=appsifyai-com.20260707.gappssmtp.com; s=20260707; t=1793735523; x=1794340323; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:reply-to:to:from

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=i4YXj6gBmso6ew2hi3Y20bYxi8tr3m15qe/MDKd1wIo=;

b=EuDpxR4e21yvhlXliSgEw0mprDQWuOoDow3M9dV6j6HJIFI6BfY8wrJrTuRh4WGLlL

bxcgyxmLKVOQLD/gcoQ9M48b+9Fo7DGi3HEcNkJaETXGnPwr5J2c+yX4lIhhQfxJWffx

Zqaco6uRzVVxpUKpXbl2A5RJ8MiMBhpnZCxxXc5Cm/knvZUEiHuSExj6ENIjjvhGnUhS

gDUyt5JF/LTU0D38fIRM7TFqiZ6sGNQwsc3V392mqP6ZOGDsLvcfgbaYIgjah17sFG/d

l6PZ2UeYxlIdL6msfDnXMy6g41zpl/5RnaS5RL+zuVmaIGhX5RIYCvbsJR9fECv8J3K6

PWaA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793735523; x=1794340323;

h=content-type:mime-version:date:message-id:subject:reply-to:to:from

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=i4YXj6gBmso6ew2hi3Y20bYxi8tr3m15qe/MDKd1wIo=;

b=Y5/0Ozju8mss4gmJWzKNXhb0+EU5rSGEWwwPHXsEXI2PWpf2LYBuV3krcC3X3KRhWC

/woPoaUwkxJ9vHMnRwzHTUcVB/Xeva+h4q16lQBy/U8PiKuBIdss7Iupwwwbtbnw7TAZ

hmzD1hxhiL0pdS0uSJmtFCvv1TGSwu+n8UfLNyHBUSS8JvBbuXVi2hXEAHtekZTq4otX

0YF4eKFW05gqwy4TFNr5DVQ5CJ14x+GM7OZZVJigzkbLI2mebQIXr3drxK/vTBbxClC/

nTeMvugsYOAG3GyCcD9R6Jexa29v2AGXOVilHUnTFn1ZkXuR0fGM8kbUEw9417SqWS91

XAww==

X-Gm-Message-State: APuU4Z9MIrPYyUbVEd4kXilx2MxQ2zoJprJjYG52ymZTEedows+kJD08

YNJX4nbveXClWUmkt5XbUq7g+BNaep6zI1UaUKbWZbjygPcgYe88KMGa47sq5dINW8iImxed8oH

SRmNh

X-Gm-Gg: AYBFou0BLg7/aL04Ua40Wf1hk0W/0IWpsJHDtTHTy1rqnISW851WCy9JRi9CoWmdHyz

QktBIrmGx9W3z3g1MXa3j3BwBwdFuK0Fvwh2kV/r8DlOVaqaAxS48bRazi7lSSk3RzH27jIuALP

r48Su+0nCX34+L8mMnQCSJGYd6tByEKRB7bb5sAgjUrvMVvXMmnbncl0JZV4QO8TobiHcZ9ZS7F

VJLdPWZnN2V29lhiL7tAymaBl8d8dvr8n4W5o0C8+FjoBAdKoIMSLvP/6Gha9WurUNxPLbyF1dm

XOuoGu6xdsPj/PpmT75GDkUq/gdZLxrRdeTbZnOC5oVN7QD+p+GTbLgJfYh1MWJIPBdTMAIxjP5

by92atAseXGQTFvuerOPN/UtclgXP0dwtu3Dlrq/KCb5oqz/Zftsh7+oIkPHCwOab4a0Laofq5c

EFgbdOpuknR61VUcHwg6X8R6zmH9F4iJFfCzaBXjRPKJXn7wD5DLt3UDCKc/qtamV8zZ6+iseZC

IVHerjn5oEQZbWSp1byeLXmnwOxAJjbcDM53OQIV1ZuQxh6qK58WrERI2ACc3XVLpbRygVT1pyf

2yevp6FKe4kpxXYd6yIAhyqhrOhIb+X5IYw4geE=

X-Received: by 2002:a05:7300:fe87:b0:36b:c4a0:47b8 with SMTP id 5a478bee46e88-36bc4a04a45mr3216344eec.11.1793735522377;

Tue, 03 Nov 2026 11:52:02 -0800 (PST)

Received: from [127.0.0.1] ([122.161.51.52])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-36ca394f297sm223623eec.21.2026.11.03.11.52.00

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 03 Nov 2026 11:52:01 -0800 (PST)

From: Linda

To: sales@nk.ca

Reply-To: lindat@appsifyai.com

Subject: App idea - sales@nk.ca

Message-ID:

Date: Tue, 03 Nov 2026 19:52:00 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-9c9727fcae321891-Part_1"

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi sales@nk.ca I sent you an email a few days ago regarding

mobile app/Redesign/update/add new features. If you are interested?



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.51.52 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.172 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.172 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.172 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} App idea - sales@nk.ca



----_NmP-9c9727fcae321891-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hi sales@nk.ca



I sent you an email a few days ago regarding mobile =

app/Redesign/update/add new features.



If you are interested?



PLEASE SEND ME YOUR CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.



Thanks,=20



---------------------------------------



From: Linda



Sent: Tue, 29 Sept 2026



To: sales@nk.ca



Subject: Mobile Apps!



=20



Hi, sales@nk.ca



=20



My name is Linda, Marketing Manager at an =

international mobile apps development company in India.



=20



We create various types of apps including radio/podcast apps, retail apps, =

delivery apps, booking apps, fashion apps, fitness apps, healthcare apps, =

wedding apps, taxi apps, restaurant apps, etc.



=20



If interested, I can send you samples, our portfolio, and company details.



=20



Thanks,



Linda

----_NmP-9c9727fcae321891-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hi sales@nk.ca

I sent you an email a few days ago regarding =

mobile app/Redesign/update/add new features.

If you are interested?=



PLEASE SEND ME YOUR CONTACT & =

WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

Thanks,=

 

---------------------------------------

From: =

Linda

Sent: Tue, 29 Sept 2026


>To: sales@nk.ca

Subject: Mobile Apps!=

 

Hi, sales@nk.ca

 

My =

name is Linda, Marketing Manager at an international mobile apps =

development company in India.

 

We create various types of=

apps including radio/podcast apps, retail apps, delivery apps, booking =

apps, fashion apps, fitness apps, healthcare apps, wedding apps, taxi apps,=

restaurant apps, etc.

 

If interested, I can send you =

samples, our portfolio, and company details.

 

Thanks,=

Linda



----_NmP-9c9727fcae321891-Part_1--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 11:01:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOHsj-00000000O0g-1LMN

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 11:01:09 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 11:01:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8216.xmail.ntesmail.com ([156.224.82.16]:63696)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOHJ2-000000007Mw-2Zur

for sales@nk.ca;

Tue, 03 Nov 2026 10:24:34 -0600

Content-Type: multipart/mixed; BOUNDARY="=_Part_804354_538100374.1793722991206"

To: sales

Reply-To: sylvia.shi@dsmolds.com

Subject: =?UTF-8?B?UkU6IEluamVjdGlvbiBNb2xkcyAmIFBhcnRzX0RTIE1vbGRz?=

X-Priority: 3

MIME-Version: 1.0

Received: from dsmolds@dsmolds.com( [10.176.120.14] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 4 Nov 2026 00:23:11 +0800 (GMT+08:00)

From: =?UTF-8?Q?Sylvia=EF=BD=9CDS_Molds?=

Date: Wed, 4 Nov 2026 00:23:11 +0800 (GMT+08:00)

X-WM-Tid: 0aa1a238c1a5d0bekusye051094a1021d5

DKIM-Signature: a=rsa-sha256;

b=UQqLZZRWDKy6DweNXb5h8pusz3kDCKmuXPlXBf4vJX2i2BO1ArwfavWLTx+Vb2O885cbGCxst61aEiOw8Rn7pzxkpEFcnPWCANcbfhTs3i8S+vpp8ItZru7rxIVNXh161FqWE4Ca9geecjYABu+PzqfOj8pkAwUxsap5tlAsJ/Y=; c=relaxed/relaxed; s=default; d=dsmolds.com; v=1;

bh=zGGPTLwM1X0Q3/YQ506nfca8E5WkAQ63UHkTgquNaUw=;

h=date:mime-version:list-unsubscribe:subject:message-id:list-unsubscribe-post:from;

Message-ID:



--=_Part_804354_538100374.1793722991206

Content-Type: multipart/alternative; BOUNDARY="=_Part_804355_807449424.1793722991206"





Hi Sales,



Hope you are doing well.



Sylvia here. I wanted to follow up on my previous message regarding potential cooperation in injection mold projects.



We understand that companies like yours usually work with experienced tooling partners.



Our goal is not to replace your current suppliers, but to provide additional support when you need:

• Extra mold manufacturing capacity

• Complex mold projects



The attached case studies cover automotive, electronics, medical and home appliance applications, including multi-cavity, 2K and over-molding projects.



I’d be glad to support you with your next mold project.





Best Regards





Sylvia Shi | 施新燕



Business Development Manager



Tel. +86 159 7010 6685



sylvia.shi@dsmolds.com



DENG & STANMET MOLDS INDUSTRY Co, Ltd. | No. 1331, Building 2, Innovation Wisdom Harbour



Xinqiao Street, Bao'an District, 518125 Shenzhen, China www.dsmolds.com





On Fri, Oct 30, 2026, "Sylvia｜DS Molds" wrote:



-----Original Message-----

From: "Sylvia｜DS Molds"

Sent Time: Fri, Oct 30, 2026

To: [sales ]

Subject: Tooling Partner_Deng & Stanmet Molds



Hello Sales,



Hope you are doing well.



This is Sylvia from Deng & Stanmet Molds.

We support Tooling manufacturers with precision injection molds and mold components for automotive, electronics, packaging, home appliance and industrial applications.



If your team ever needs additional tooling capacity, cost optimization or reliable support for new projects, we would be happy to connect and explore possible cooperation.



Looking forward to staying in touch. 😊







Best Regards





Sylvia Shi | 施新燕



Business Development Manager



Tel. +86 159 7010 6685



sylvia.shi@dsmolds.com



DENG & STANMET MOLDS INDUSTRY Co, Ltd. | No. 1331, Building 2, Innovation Wisdom Harbour



Xinqiao Street, Bao'an District, 518125 Shenzhen, China www.dsmolds.com





MP4 spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 11:00:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOHsW-00000000Nxo-16kk

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 11:00:56 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 11:00:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f180.google.com ([209.85.208.180]:55669)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOGjs-000000004KZ-1E1I

for root@nk.ca;

Tue, 03 Nov 2026 09:48:03 -0600

Received: by mail-lj1-f180.google.com with SMTP id 38308e7fff4ca-3ab27e45e7cso34830191fa.3

for ; Tue, 03 Nov 2026 07:47:02 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1793720815; cv=none;

d=google.com; s=arc-20260327;

b=QVX4IHgqhU4r0Xj385uZbwpWGdCXXWinm6K7Qmzfa6zYTe1nDYgLq7IEy1WVdhBwt+

isxg+UxPPc96DnqdpMUbBmLnpfy9IB+FcXKs4CO8SkrL1IywcrfQKZ6DBRRb54bX3b2O

ccg9RKFcvPaFPto7jHz2I0emM/rl3NceN9wHUX3dCl6WqzT9wmXrPmVTQX4YkcRvFTvX

jpvLANXxtXZKd9/MpiR9pXcpG/OvURzuSrvgVowI1ZaJMXoB3iRr3E6N8WF2DTvFVvV3

YvpUDZ1Z/sF7WF33iuIt9QSE1iNh3fwlwjR6VHEPCU5SVZUHZhpKJxyB5WP5EzkX/93d

VhfQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=EgrWcnCxZDMJs0GdjbsTGijUJ6duZdlsp3A6KWURKtY=;

fh=5l0nUfk24o4MGSld8Rch/TSSeoOUyxd7q30rOktpJgg=;

b=sjL8jY2RAW5ln2Tf2dTv1QK1Y9LQQikokxdtR4VUYx993P29Q4W2THIMCh1XnvO/wQ

YFjy4DqEvdYKT4R0L0/4zAxryYXhDrN17BIfx0t0Dqgm+rYb5MOD0OG8bR+eLUUm0HtN

gDYA9V7n55jQSjg7NxKBi30NdpxCu0lpFTM6Pr4NdhZl4mF6bAuRdNsFSx04WY6ibx6d

ZmgssXq2JhDJFPq4srDRUozYq6JuZbhIhWvlI9jKbIlkqjzddkFKIxOCcy0Z4GOzNhLq

xr2NHoR+PgDRBHoQTLz2CSy9ZTw5Ic+H+72cp6whu2kjgPVubZmwu6TZAUQkjHJybeAs

DGIA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793720815; x=1794325615; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=EgrWcnCxZDMJs0GdjbsTGijUJ6duZdlsp3A6KWURKtY=;

b=HN7SGn1g9Nb3qlpfPLFk2vrnqj2IgI6GwFp3IuKBGaNEjk8csM/c3W9u2YAaQmZ3sG

omd4nW3Cac0DH+YPb8f0IJ/72uyaLUFsRkV/1+oJygzxeDHf93Gh/bC33Gtj2VUo2sZ6

z55ifWJwctat9HgDdf87BIRGX305QQuWKDX1FhxsAsTs/civcUZyANoelq/QRGsU3ixf

wBtqDKuKIsdQ8lXJY+8CufaHPnOeG2iet5Pi1KLdin6vtAHPUW/hAL0zEY2acHPn9HO6

mSaeFFqx07eB1miFPJC1umckTtnR1Bt8X/TQvLw4sXqq5yOumqv3HBC+sxWvllL36We8

B+nw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793720815; x=1794325615;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=EgrWcnCxZDMJs0GdjbsTGijUJ6duZdlsp3A6KWURKtY=;

b=oBj1/AUDXNUU4O6+I3T8li1NxEGtoRvq5iaj175WqTtk/O+It86f9XT9OjwEaN9x67

ksXzM0NgyMu3ufIVO7AKI7mGff2aHa1cmaU7gLWGCu3Mi0xLq6fIq6gqg7WDoxck7KIi

/glM7Lw2/3++dL4OqyZSU5MwH4rdzWZMNQ5HzYkSCJfNHjQKNcqkeGWcC+jbCl20QWIK

VEYMrHFNnksDwN7ZjqYyed2T5BA/ms0rB/kTHXhyOVNYrqo05dgRAvMq+SJ2kINgICl9

BllrVKrEd8rzYSXwwxozxgOtOiv+tyOlnhcK5BmR/sEzkYDUtbcE6KNWl30o1KRsDWn+

s7KQ==

X-Forwarded-Encrypted: i=1; AKwUvBxi7hprvhNk/1JiIh7qosq9Us2v4F3FERa8kQZXE4V3GYK3nbutNIcyxkUtHJq99IlBx7b0@nk.ca

X-Gm-Message-State: APuU4Z/aBA8pDE7sglsj2TRKCxEYn4FBlf5ORNul5+qd+KArBIM0YBdo

epfmBcprQR5/KnoCgT4QnbYO9xpixFNfMWkK1AMjgxWBduT7WDoD2iLj2BkHAvVlpi2I6autmKQ

qzUNZpRlTd86qtty4TsxdlG5NU8tLWpYLfTVfwX2mraC/vA/ZFw==

X-Gm-Gg: AYBFou3RLq37Bp1DbZSF0s2SLcAuW4UQALVPWAjdRlAxCcDHyO1+abFlQCP5V8lmkVT

x44/kCOFmfgiuDX4cctWDPeSHjskH7owHb32OPoRzP0tEvsrFH7jEC47Jtft+gZVpTm/MBCBxei

Lp/bptzhfZVNbHcibCZUAWMLhj2ULv3sSNji0R8wtMXr0mahh6Za3mAGrLUDO0xyVXL/c//Q+QL

tYjoZuGDrM3Iotzee+KlVe336cmf7HU2vB1l0TbZvB262vaLlQEubWT16mLDYQrEfR5glqnqFLx

BPBKlOsBIVoQvdHpQSE5t6ZGRmD4a4CN0yYHVjQF8PPz2WiuVfjo5R/cRGAvIQb4ZBItvKsixRC

KIgP8yOZ+3aAmcTKq+kGWjUIItq2lZsJeXya+ynN2tz9PihGMxgMid70xMA==

X-Received: by 2002:a17:907:72cb:b0:c3e:e677:563a with SMTP id

a640c23a62f3a-c4ca7aee0famr1128737266b.47.1793720813261; Tue, 03 Nov 2026

07:46:53 -0800 (PST)

MIME-Version: 1.0

From: Sanchita Falguni

Date: Tue, 3 Nov 2026 21:16:40 +0530

X-Gm-Features: AclHuK_69WtLe9VmfWVirk-yEXEqy_ey_5Zwlo57Q6tqrInUMtRBccM4RG6N5TY

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/mixed; boundary="000000000000e76d06065f612b24"

Bcc: root@nk.ca



--000000000000e76d06065f612b24

Content-Type: multipart/alternative; boundary="000000000000e76d03065f612b22"



--000000000000e76d03065f612b22

Content-Type: text/plain; charset="UTF-8"







--000000000000e76d03065f612b22

Content-Type: text/html; charset="UTF-8"








--000000000000e76d03065f612b22--

--000000000000e76d06065f612b24

Content-Type: video/mp4; name="DEBIT NEW...mp4"

Content-Disposition: attachment; filename="DEBIT NEW...mp4"

Content-Transfer-Encoding: base64

Content-ID:

X-Attachment-Id: f_mw0v1rvh0



...



--000000000000e76d06065f612b24--

Web/SEo/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 08:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOFl4-00000000Cm9-0suw

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 08:45:06 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 08:45:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f11.google.com ([74.125.227.139]:58030)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOEfR-00000000IG6-1wsW

for sales@nk.ca;

Tue, 03 Nov 2026 07:35:15 -0600

Received: by mail-pj2-f11.google.com with SMTP id 98e67ed59e1d1-3adfd217146so865916a91.1

for ; Tue, 03 Nov 2026 05:34:19 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=amysoftsolution.info; s=google; t=1793712853; x=1794317653; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:reply-to:to:from

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=oH6zLkpunxjZy+F+Tw9NHag3xh3aCfZlC0alFZQq3nk=;

b=Qiix7ioI4h+UPLnPbvF4sAJc0GG0orbwhMYTgTQlkVz7Bp2eKV1qr3C4VPjnBhb8CR

inoi5xck9XLk7MynCsk7fESRoHjrSYBqFAgdDER3vtD8lNzmOwjTZsD35PWof0W7A0Wx

2/XGLwBZbLYgLO3z6FOXiJqtr+sLfiJ41xWPs=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793712853; x=1794317653;

h=content-type:mime-version:date:message-id:subject:reply-to:to:from

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=oH6zLkpunxjZy+F+Tw9NHag3xh3aCfZlC0alFZQq3nk=;

b=jkQqHqvdPRd8GZY71pq+LHFsP8UpmZrqH/ytkWrpBiq9g5EuSP7Yk+huirlmmw9Ydd

/gC/LFZx8v/XnXSGfOYwWrZKYPxxn6IvGZNGQPQ+ohWvVM8WW5p5YBdTsjOnQuAfXL4s

rGULOt1zeDyhZ16a2TeVlWwatFcuORddFb73rQeii12sieoto5Ki6lmV9wfN8A//PX7C

SexZF8F9ksmiGuG3PjbFHApjxlH8DCJaGHI8y7PKXhAXnSErPQcHHthEG5OBw79FYgrF

hMJwUgk8OnF/ErRSd1Ai7VCZNTCpxW5TS0pXTzp3rWSAuZ4FHqYeVcfSGE5xBTAccLsl

V72g==

X-Gm-Message-State: APuU4Z80gLku0IAFDG7LcYdDX36WurwMMJLhcXw7uQlc7DPHEZO0k0nC

zniBfjRJiONPwUje9+jCOLBln2K/93LaQCcciWNzGdePC6lvMNXOFAK8Zd0ltifbpSYwTYIOnQY

7vVdRiQo=

X-Gm-Gg: AYBFou3vGwMjzZPfbbkTijkKk4T4M4TOsj/UHqKoRUQ/90W/TXBGx9vl0FTB1TchT1M

yFhZVwx6PB81yxY5wbUY7Is7kYG+LwCrtIkIyzU2tc1UavUuXbGODtV+35/B2p7C+UNHa3V9u14

OqkrROFw2Qh+iDJj02oA1sLICnvDMqZ6r/6hK0x/ZmQUXzgjCcVI30NE+FLpFAUkvc4SvKOdUfH

BjZCQhOSN+8UzHS+81H4YZ75amJT/t5u4DRT7m7aIpptwz4WpnGauS37u7eFZgWzr6J5Uqw0HPx

4pAS2NopHR0Sfn6PznhYd1PgbaQY8dTOTqgc9Lmsk8ls0SKL1J/90lBrgxyPP/CmjLEP0OOf7Wx

JxdYWle6GI2JRPijWjT9KiSmc+4yUFHDZ9GKSk/vLSrrG/MpIkgZPbk+Gfgyy9CUKVSBlgR8vbf

S/BlgKqIkri1zQoUF3Em9n61Q0X4QM6Vbyj7iCEaim5o4sJBT26jzcGxhkT72CR/tzA8dV1xZJO

d2hk8QumnGU95gByKa5Sciprw4w1p46Pbxqc/Etu94U3TlwQkwZyoJIuXmJdFKjbEtIDi5rLNNc

hyb7LNXfPHtmBsa4Xp1AxDpV2QeY0REnVcwkvvQE8dY3gA==

X-Received: by 2002:a17:90b:224f:b0:3a0:516d:9f87 with SMTP id 98e67ed59e1d1-3ae897c94cemr11083820a91.13.1793712853551;

Tue, 03 Nov 2026 05:34:13 -0800 (PST)

Received: from [127.0.0.1] ([122.161.51.52])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cdb364480a3sm1427637a12.9.2026.11.03.05.34.11

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 03 Nov 2026 05:34:12 -0800 (PST)

From: Lucy

To: sales@nk.ca

Reply-To: lucy@amysoftsolution.info

Subject: Hi sales@nk.ca

Message-ID:

Date: Tue, 03 Nov 2026 13:34:08 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-ee2930d68bc24d95-Part_1"

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi sales@nk.ca I sent you an email a few days ago regarding

mobile app/Redesign/update/add new features. If you are interested?



Content analysis details: (10.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.51.52 listed in sbl-xbl.spamhaus.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: amysoftsolution.info]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.139 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.139 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.139 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Hi sales@nk.ca



----_NmP-ee2930d68bc24d95-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hi sales@nk.ca



I sent you an email a few days ago regarding mobile =

app/Redesign/update/add new features.



If you are interested?



PLEASE SEND ME YOUR CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.



Thanks,=20



---------------------------------------



From: Lucy



Sent: Tue, 29 Sept 2026



To: sales@nk.ca



Subject: Mobile Apps!



=20



Hi, sales@nk.ca



=20



My name is Lucy, Marketing Manager at an =

international mobile apps development company in India.



=20



We create various types of apps including radio/podcast apps, retail apps, =

delivery apps, booking apps, fashion apps, fitness apps, healthcare apps, =

wedding apps, taxi apps, restaurant apps, etc.



=20



If interested, I can send you samples, our portfolio, and company details.



=20



Thanks,



Lucy

----_NmP-ee2930d68bc24d95-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hi sales@nk.ca

I sent you an email a few days ago regarding =

mobile app/Redesign/update/add new features.

If you are interested?=



PLEASE SEND ME YOUR CONTACT & =

WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

Thanks,=

 

---------------------------------------

From: =

Lucy

Sent: Tue, 29 Sept 2026

=

To: sales@nk.ca

Subject: Mobile Apps!=

 

Hi, sales@nk.ca

 

My =

name is Lucy, Marketing Manager at an international mobile apps development=

company in India.

 

We create various types of apps =

including radio/podcast apps, retail apps, delivery apps, booking apps, =

fashion apps, fitness apps, healthcare apps, wedding apps, taxi apps, =

restaurant apps, etc.

 

If interested, I can send you =

samples, our portfolio, and company details.

 

Thanks,=

Lucy



----_NmP-ee2930d68bc24d95-Part_1--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 08:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOFky-00000000COw-3Tjc

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 08:45:01 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 08:45:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [156.224.81.209] (port=40486 helo=mail-m81209.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOEUQ-00000000HOy-3I6S

for root@nk.ca;

Tue, 03 Nov 2026 07:24:23 -0600

Content-Type: multipart/mixed; BOUNDARY="=_Part_999759_1657007162.1793712161403"

To: root

Reply-To: oml@pyxiwei.com

Subject: =?UTF-8?B?RXhwbG9yZSBPdXIgUFUgTGVhdGhlciBQb3J0Zm9saW8gLSBTdHlsaXNoIGFuZCBGdW5jdGlvbmFs?=

X-Priority: 3

MIME-Version: 1.0

Received: from robert@ease-bizweb.com( [10.176.106.235] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 3 Nov 2026 21:22:41 +0800 (GMT+08:00)

From: summerou

Date: Tue, 3 Nov 2026 21:22:41 +0800 (GMT+08:00)

X-WM-Tid: 0aa1a193819a00f9kunmc738b29e140a93

DKIM-Signature: a=rsa-sha256;

b=tc+SyNp7QSi463eGZ2jGMFaaxv0ahqpk7Q/0oKxXsDPllf+JmSiMcDJF1swMWWYpV/b//liqEW5JPL93nu7mhemoUV71duSM8d9g3G1/yayO3tRapaKVAkVr97ZMOz5yMnwuFx1LFO4tNeEdgahGcBABLLGet7kQvPPQnNTImes=; c=relaxed/relaxed; s=default; d=ease-bizweb.com; v=1;

bh=Jm8NWVXqHo1FaEIJqjCpdhs5B6A+ingVee3Aac75+vE=;

h=date:mime-version:list-unsubscribe:subject:message-id:list-unsubscribe-post:from;

Message-ID:

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Root We are a notepad factory in Wenzhou, Zhejiang, China.

If you need customized notepads, notebook,journal, diary ,planner , Stationery

and office gifts please contact us. Provide pictures and inner pages and

we can quote. We hope for long-term cooperation.



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[156.224.81.209 listed in will-spam-for-food.eu.org]

[156.224.81.209 listed in will-spam-for-food.eu.org]

[156.224.81.209 listed in will-spam-for-food.eu.org]

[156.224.81.209 listed in will-spam-for-food.eu.org]

[156.224.81.209 listed in will-spam-for-food.eu.org]

[156.224.81.209 listed in will-spam-for-food.eu.org]

[156.224.81.209 listed in will-spam-for-food.eu.org]

[156.224.81.209 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[156.224.81.209 listed in dnsbl.ahbl.org]

[156.224.81.209 listed in dnsbl.ahbl.org]

[156.224.81.209 listed in dnsbl.ahbl.org]

[156.224.81.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[156.224.81.209 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[156.224.81.209 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[156.224.81.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[156.224.81.209 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ease-bizweb.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[156.224.81.209 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?B?RXhwbG9yZSBPdXIgUFUgTGVhdGhlciBQb3J0Zm9saW8gLSBTdHlsaXNoIGFuZCBGdW5jdGlvbmFs?=



--=_Part_999759_1657007162.1793712161403





Dear Root



We are a notepad factory in Wenzhou, Zhejiang, China. If you need customized notepads, notebook,journal, diary ,planner , Stationery and office gifts please contact us.



Provide pictures and inner pages and we can quote. We hope for long-term cooperation.



TikTok Whatsapp Facebook Instagram

website： www.wenzhouxiwei.com



subscribe Ask for products list



Name: summer ou

Email: oml@pyxiwei.com

Phone: +8618968802599.

Whatsapp:+8618968802599



Please check the catalog attached



Best regards

Summer







On Fri, Oct 31, 2025, summerou wrote:



-----Original Message-----

From: summerou

Sent Time: Fri, Oct 31, 2025

To: [root ]

Subject: Explore Our PU Leather Notebooks and More



Dear Root



We are a notepad factory in Wenzhou, Zhejiang, China. If you need customized notepads, notebook,journal, diary ,planner , Stationery and office gifts please contact us.



Provide pictures and inner pages and we can quote. We hope for long-term cooperation.



TikTok Whatsapp Facebook Instagram

website： www.wenzhouxiwei.com





Name: summer ou

Email: oml@pyxiwei.com

Phone: +8618968802599.

Whatsapp:+8618968802599



Please check the catalog attached



Best regards

Summer





附件(3)

[云附件]

2025New notebook&diary&portfolio&folder catalogue-Jeffery-Wenzhou Xiwei Stationery.pdf

3.9M | 过期时间：无限期

下载



[云附件]

PU leather product catalogue-Jeffrey-Wenzhou Xiwei Statoinery.pdf

3M | 过期时间：无限期

下载



[云附件]

Wenzhou Xiwei Stationery Co pu leather product.pdf

2.3M | 过期时间：无限期

下载