McAfee Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: ddave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 20:52:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKoLT-00000000GDP-1oEJ

for ddave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 20:52:27 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 20:52:27 -0600

Resent-Message-ID:

Resent-To: ddave@doctor.nl2k.ab.ca

Received: from [130.49.219.81] (port=45411 helo=stonehaven.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

id 1xKnDO-000000009eo-3pHK

for doctor@mail.nl2k.ab.ca;

Sat, 24 Oct 2026 19:40:04 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=mail.nl2k.ab.ca;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=doctor@mail.nl2k.ab.ca;

bh=+XFZWxO7ViNlOmQdaCgMVhnLb7E=;

b=gNnu30GaorPDKpQIgJB7gQrvfMvLx7PQC2A0bEtTii0qeLsas4G6luI4q7VVaS45ukgGC0nHRcMH

vLrC3u/UEJtldosHARlCBoyU2yc4Y6LoUKk21a20UsTJiWT+U1diRDcdUlF3SYyox4T6DJ/NXaRU

w6OGX36PszswEAm4flc=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=mail.nl2k.ab.ca;

b=TDYCtGfe0s6JPUPGZ7Ux0MAx8Er1b3b7Jb5QBm+NDATQI6jmYmIGRsu8zlCGHmYJKgntf/Qe32vJ

noDfW6k9DvEgl/DecFCRE/H3yXMfao24h6uqfR6ChvRd9j2Nmef1fwTwgBbgFidYTc4JooQS2eCy

9H2g2TZBtrv6HsypxMY=;

Date: 10-25-2026

From: McAfee Protection

To: doctor@mail.nl2k.ab.ca

Cc: doctor@mail.nl2k.ab.ca

Subject: Your antivirus protection has expired!

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

X-Spam_score: 14.9

X-Spam_score_int: 149

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: McAfee Subscription Expired McAfeeâ„¢



Content analysis details: (14.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

[130.49.219.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

[130.49.219.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.49.219.81 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: keymart.net]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: keymart.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: keymart.net]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: keymart.net]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.49.219.81 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

Subject: {SPAM?} Your antivirus protection has expired!

X-Antivirus: AVG (VPS 261024-6, 10/24/2026), Inbound message

X-Antivirus-Status: Clean













McAfee Subscription Expired























McAfeeâ„¢



Together is power.












Your McAfee Security subscription has expired!











Your McAfee subscription expired on Oct 20, 2026.







After the expiry date Your Device will become susceptible to many different virus threats.







Your Device might be unprotected, it can be exposed to viruses and other malware...







You are eligible for discount: 62% 1yr Renewal Discount







Offer will expire at: 10-27-2026 23:59











Renew Subscription























NIgerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 10:00:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKeAm-00000000CjB-3ksd

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 10:00:44 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 10:00:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out12-14.antispamcloud.com ([185.201.16.14]:33836)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKcRz-00000000MIV-0lzn

for root@nk.ca;

Sat, 24 Oct 2026 08:10:35 -0600

Received: from [103.16.79.227] (helo=zmta1.mahkamahagung.go.id)

by mx297.antispamcloud.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.94.2)

(envelope-from )

id 1xKcNa-006rIf-1X; Sat, 24 Oct 2026 16:05:53 +0200

Received: from localhost (localhost [127.0.0.1])

by zmta1.mahkamahagung.go.id (Postfix) with ESMTP id 49CB06345084;

Sat, 24 Oct 2026 21:05:17 +0700 (WIB)

Received: from zmta1.mahkamahagung.go.id ([127.0.0.1])

by localhost (zmta1.mahkamahagung.go.id [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id r0cS1ui_uxgv; Sat, 24 Oct 2026 21:05:11 +0700 (WIB)

Received: from localhost (localhost [127.0.0.1])

by zmta1.mahkamahagung.go.id (Postfix) with ESMTP id 23B8C63412DC;

Sat, 24 Oct 2026 20:52:17 +0700 (WIB)

DKIM-Filter: OpenDKIM Filter v2.10.3 zmta1.mahkamahagung.go.id 23B8C63412DC

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mahkamahagung.go.id;

s=4D836520-7DC5-11EC-BCEE-C2064D5E8D39; t=1792849937;

bh=1wHmw3w29TvUvZ/smmD9LGQjqHwVWvzr7E3JaRa2qFg=;

h=Date:From:Message-ID:MIME-Version;

b=O+tu22QjEvWDkzSKzqfbzC1jkWVmFN+sZv/0RBYvFUqF2LdnSWD5sx573+BOs8pzc

Pgp4GQ1DblgWjiXqWHm4HJAYxonH2AaGuKMBR9BTl06SOlQsoRcJDv1YD2INRH9RUR

/DtGQxIDj8DBdOWTeykFNW2zRav7A1wKdcmY/3ks=

X-Virus-Scanned: amavisd-new at

Received: from zmta1.mahkamahagung.go.id ([127.0.0.1])

by localhost (zmta1.mahkamahagung.go.id [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id FM3j2IdVMc-U; Sat, 24 Oct 2026 20:52:14 +0700 (WIB)

Received: from zmta3.mahkamahagung.go.id (zmta3.mahkamahagung.go.id [192.168.112.39])

by zmta1.mahkamahagung.go.id (Postfix) with ESMTPS id 4051363412E3;

Sat, 24 Oct 2026 20:40:45 +0700 (WIB)

Received: from localhost (localhost [127.0.0.1])

by zmta3.mahkamahagung.go.id (Postfix) with ESMTP id D50A26435280;

Sat, 24 Oct 2026 20:40:44 +0700 (WIB)

Received: from zmta3.mahkamahagung.go.id ([127.0.0.1])

by localhost (zmta3.mahkamahagung.go.id [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id hkXmrn0jjk2s; Sat, 24 Oct 2026 20:40:44 +0700 (WIB)

Received: from localhost (localhost [127.0.0.1])

by zmta3.mahkamahagung.go.id (Postfix) with ESMTP id 471B1643528B;

Sat, 24 Oct 2026 20:40:44 +0700 (WIB)

DKIM-Filter: OpenDKIM Filter v2.10.3 zmta3.mahkamahagung.go.id 471B1643528B

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mahkamahagung.go.id;

s=4D836520-7DC5-11EC-BCEE-C2064D5E8D39; t=1792849244;

bh=1wHmw3w29TvUvZ/smmD9LGQjqHwVWvzr7E3JaRa2qFg=;

h=Date:From:Message-ID:MIME-Version;

b=tfv2s1tkS5ygU1ICDI+oPr2PtHcUleC5dnyY4+1cxwb8hRSXuUYijS8zvwbLn2oQi

k9qoHQmSgQqwyXPo9Rz3CG2vWfV7B22O0loSY7FvjZ/Afkc0/K7j4zgBu65bU9oR/a

aUfzHAeBLmQm85SpQVLKO5e/hvMpvOGEkIvxU4nY=

X-Virus-Scanned: amavisd-new at

Received: from zmta3.mahkamahagung.go.id ([127.0.0.1])

by localhost (zmta3.mahkamahagung.go.id [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id cD9AweCJHmrq; Sat, 24 Oct 2026 20:40:44 +0700 (WIB)

Received: from zmailbox1.mahkamahagung.go.id (zmailbox1.mahkamahagung.go.id [192.168.112.43])

by zmta3.mahkamahagung.go.id (Postfix) with ESMTP id F346D6435280;

Sat, 24 Oct 2026 20:40:41 +0700 (WIB)

Date: Sat, 24 Oct 2026 20:40:41 +0700 (WIB)

From: Abdul Rahman Consultancy Firm

Reply-To: sulimanconsultancyfirm4@gmail.com

Message-ID: <1000919325.897921.1792849241976.JavaMail.zimbra@mahkamahagung.go.id>

Subject: Dept Finance Partner

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_3f79b26b-8ef3-4281-aea3-d0a5befdaf41"

X-Originating-IP: [192.168.112.42]

X-Mailer: Zimbra 8.8.15_GA_4372 (ZimbraWebClient - FF158 (Win)/8.8.15_GA_4372)

Thread-Index: SEjRckW2j6bpvM7X2Fpx9UlHzWo8RA==

Thread-Topic: Dept Finance Partner

X-Originating-IP: 103.16.79.227

X-PT.TaffetaForaSistem-Domain: mahkamahagung.go.id

X-PT.TaffetaForaSistem-Username: 103.16.79.227

Authentication-Results: antispamcloud.com; auth=pass smtp.auth=103.16.79.227@mahkamahagung.go.id

X-PT.TaffetaForaSistem-Outgoing-Class: unsure

X-PT.TaffetaForaSistem-Outgoing-Evidence: Combined (0.80)

X-Recommended-Action: accept

X-Filter-ID: 9kzQTOBWQUFZTohSKvQbgI7ZDo5ubYELi59AwcWUnuVxKIol4QmqlvK7gMgtU31e3MnLNHEed/eU

ad+L7HnpPCu2SmbhJN1U9FKs8X3+Nt2py22w/baIgeMJGeiFTAv2OdOkJ8QamxowkQ0L2/QRrcX5

AdMIM6kOV3g+HTPQpFfQbC+NdI5012ilndYo90GsWmuNA8WTybi1JN85FSnfKQyGnwCXPnkvaKEy

1gpKyTdJACQDOO7sLntZ9iC+4p145/ggznp8cD4sCMuGFzpVLgRo87oeATC+hGtbNyLqD7/24jaV

iqhs1uSZX5KUPoZYGAMA7pbGOB6N79DhlbzdEdzZqrrsu03WRFccpjwfEvGUpeoV1G+lFmBvSFOb

0PfLeQ26l+6g7IYTcpkQV1OwCOMTbkn6z1fsm8NoMVdUr8MDPUrsZkS8fIjQg/OlnCq9FX3HrL7T

jHJ366YMknpZt+oUQJ043knrsfz/x96RZUJpM3JimvHjEv84hVOjGsGmYfe3/JYMXMIIq30N8yVG

gt+yPhHB9QUUeOpBOnfrXB+Nc1vgTDsYVqBo0Ii0PzNx6w9ODg/MSFWg4t3WbxN/uB5RU5NMigmo

E8ucVBMkBHyM55OAhAt5L3wJeDaG589TAbunzx6h/hp+JmFNSUgu0Y31//rbAtKZfolUZUccCrC8

ntNQHTi2tRePWia6DLKiaybF+9S1gXllZZmwwHVn+9/2ZHhRLcfXeqlhLEagbqYmjHXrStTxS4xv

/bonRTdMulwmB+AHaFPpFJZIIzVRgHfv43Px2qE1HNhS+Xce1KEJGi57JuV/Fb/dEojIFg4cSjeG

2v9w0hdGYpe9MTzdQ3VYqMRbCve/9dLOjFw4HKi4jqQaI1YntoSmCnKZU4i8Xt5bEUHNoSips8dj

0G4awqH7Xuz9CEacbshQcHCZoPOawTkQ8idFExJzU/6MgpfgHvsZYabnwzuyQMS8Eh22/YPRGiVi

f/mbtvlP99pdcUbQSnov/SjP2TqzbCPF7A3pQ6SSYSpPgNf7tkQYM1nsMWoUpwjwOtUoc4T4Crit

M7y0dW5/dQoD5Ve3VgkMHlmwkPE31Ea4xdUi6lVeGVw8OuGhbd6NrwnuCkMkSTOtx3zlYduAdMXw

E/+pIdHcncrHQ/VgoOuWMGVw9HI/9u7gX5nnaDbuT2MH3+1yrlMzpAIyMuOniFsghqN7TB15IzNP

ak0xSNG6LJS9VZczxQ7aYAX86oUBItwXWxq2GQGJdLih5wmxvNMydoxlrHII4jFxG/Oqw5pSib3b

bgn+l/5PHcOcp8FsDqFDztWy451baYl72FokTTMjPdc7ZR4eYjH8VRaI0DWOvgHcfsfeeq+hvfw1

Be9HJaiYxkV2DTgAX7cBUD6dTRzgDkP4N9VZsXoCKikF6q/mFPc0I/lNq2ycvHxFXRCJRT8X2Hwe

ihyUav8FbVgA6Hzqwxz07FknWELWoQ6QSMVN/ZNVhtxz4Hhi9mUFS4PwWA/CTwWioDsSplM0rZiv

kv223NdTGsbh+w5VWw3vXNMj84QCD0dciDiEpijaiR53tDeNjzNOVKpzDOSHSYUgn2CGS27J/r4C

cnUw0phVluzEB1Jn1y8eNm5x61kyXmhTQ+v7sh3H3UMd2LjEIl+iXSTetNW4hHx3g9iA8YyGl32x

zRdtVGWEleg1QxBOm4UP9D5XQ0xms0cbr8XQ7f5DQWVy2I1uRVDj/9OngsyjRRPXrkwmWNCCSnh2

CBdDF4I6cQPhpmIvOdsEKGBXeTpqnUFqN08Gxn08dy6QhZGAVDQpvlA5iEbZrxsDtSm5IFsbQI+M

uugIh6ytFPAu0wEqgruvsR3av7eDmPj3b+EeCW5bmMZ3X6IRW0gkTJd42PesF+V/sHKdzUkEM1ay

bZY90HkdsjM/Vvxk+NIwuu7P2bqxIddC96c8pCjrnf1kO7M7G4rzHhOzU93YV6BCkv3fK81Z6fi+

ZbKQUXF6OdWtstp5fKPhK98fF99dIqBGE9bDdkK26cmWfHIIr0sZnQJqvsglHbcHXNMJYYZwP8J5

58fQBxj0iNTs95Rw0IH8QLqEp0233u0q3/tG6KqIajJc0xYyVhLwbVXtsRLvJMQXZzxPZEJNsXJY

mD2EmYN8oSzOHA8cQc2DIm4EXXJ4oMv+v6cVvcypcEwyFiEitkymtT/sCEfjpYhXtt6dkCy8Y/p9

ugH9qCKwYiFVaKSyV0lBUSMMwB5FgLG8lR6IQFfOGpCvns0proPlTtu5GL0D+ZlGIgWelBxU5hDm

c37LRXms3czZNn2CuxoFXuE6IlQT2NdHwwrt/PBPolVNxqmted5NZSAEPCRfnj49PEwG8AMX/S4Y

S3Shwc6QoS6TEo6Fw5tldaeQTD7oX0IbJu6m8zd5ELijAa30l/GpULaL6d7WMtKCuarvYqhKsFal

zuhrip6EQ+8aYe5fr/4v4p2jcrgOen228hu3D9K96qvbUr8tgsf7gakWsqZtiOMY0OJo6LRTr0An

oLWmMbDpHhEVniihuDwEGDcmr6e3OPQP+DGakXhzHkzCBaXdIwSMJ8h8qWAMUDvFSbiOHmKLms7z

Do1XizfIKpBwWql+vBxi6lp8P1o6mEaUsANMCFodrX307GlM2mPXhILPp+n9/EjLGecyIFbb1U7p

rrd3ZoQ/Vy1kNbpmh8rGq27NYRH8ULwL8kg9aw/mNgO7Gt0EmkeoQJ0m9aGG2QF+qnm/HYb/asDO

0V6SUvEY03codo+Qwhv0VXpGKo4ocP5QJaXz0tA8P9X1CEEX1Aaydq5ahTphoXsNswPtMDx5ZDSW

vQTEMS+4ayUpOtEhdxekWDmK9g==

X-Report-Abuse-To: spam@quarantine16.antispamcloud.com

X-Complaints-To: abuse@master.antispamcloud.com

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, I am a consultant for a regulated Kuwait-based

investment group that specializes in structured debt financing. The group

offers competitive facilities at fixed rates of 3.5-4.5% to support business

gr [...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.16.79.227 listed in will-spam-for-food.eu.org]

[103.16.79.227 listed in will-spam-for-food.eu.org]

[103.16.79.227 listed in will-spam-for-food.eu.org]

[103.16.79.227 listed in will-spam-for-food.eu.org]

[103.16.79.227 listed in will-spam-for-food.eu.org]

[103.16.79.227 listed in will-spam-for-food.eu.org]

[103.16.79.227 listed in will-spam-for-food.eu.org]

[103.16.79.227 listed in will-spam-for-food.eu.org]

[185.201.16.14 listed in will-spam-for-food.eu.org]

[185.201.16.14 listed in will-spam-for-food.eu.org]

[185.201.16.14 listed in will-spam-for-food.eu.org]

[185.201.16.14 listed in will-spam-for-food.eu.org]

[185.201.16.14 listed in will-spam-for-food.eu.org]

[185.201.16.14 listed in will-spam-for-food.eu.org]

[185.201.16.14 listed in will-spam-for-food.eu.org]

[185.201.16.14 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.201.16.14 listed in dnsbl.ahbl.org]

[185.201.16.14 listed in dnsbl.ahbl.org]

[185.201.16.14 listed in dnsbl.ahbl.org]

[185.201.16.14 listed in dnsbl.ahbl.org]

[103.16.79.227 listed in dnsbl.ahbl.org]

[103.16.79.227 listed in dnsbl.ahbl.org]

[103.16.79.227 listed in dnsbl.ahbl.org]

[103.16.79.227 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.201.16.14 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.201.16.14 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.201.16.14 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.201.16.14 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.201.16.14 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.201.16.14 listed in bl.score.senderscore.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[sulimanconsultancyfirm4(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 MXG_THREAD_INDEX_BAD Invalid Thread-Index header

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Dept Finance Partner

X-Antivirus: AVG (VPS 261024-2, 10/24/2026), Inbound message

X-Antivirus-Status: Clean



--=_3f79b26b-8ef3-4281-aea3-d0a5befdaf41

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit







Good day,



I am a consultant for a regulated Kuwait-based investment group that specializes in structured debt financing. The group offers competitive facilities at fixed rates of 3.5-4.5% to support business growth, acquisitions, and streamlined closing timeline of approximately 30 days.



Would you be open to a brief, no-obligation introductory call to explore whether their financing solution could align with your objectives?



We also welcome any referrals you may have.



Best Regards,



Abdul Rahman Consultancy firm

Marina Mall

Salem Mubarak Street

Arabian Gulf St

kuwait



--=_3f79b26b-8ef3-4281-aea3-d0a5befdaf41

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit





 Good day,

I am a consultant for a regulated Kuwait-based investment group that specializes in structured debt financing. The group offers competitive facilities at fixed rates of 3.5-4.5% to support business growth, acquisitions, and streamlined closing timeline of approximately 30 days.

Would you be open to a brief, no-obligation introductory call to explore whether their financing solution could align with your objectives?

We also welcome any referrals you may have.

Best Regards,

Abdul Rahman Consultancy firm
Marina Mall
Salem Mubarak Street
Arabian Gulf St
kuwait


--=_3f79b26b-8ef3-4281-aea3-d0a5befdaf41--

French english demand phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 06:37:00 -0600

Received: from mail-westcentralusazon11023117.outbound.protection.outlook.com ([40.93.201.117]:61475 helo=CY3PR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKazH-00000000Aqa-0A8O

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 06:36:43 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=MA1xuGOo1ov6EyLGeD6ZxXBaKtZFlYvziZYr15ievFBXB7jo+o27554TChF8GdD0q/vuEmX+VjhaSlKNR8yodQ42w5xxXLx7RytnzcHccF1hA5IWm0aD5TOyLZzXBnTVvTCs2XUDddNpaOmiTtBbMAT3mcyW1ez5Ar/SA9taatpDutHooJtnwGNWuuKOHAsTBJRsOVpb0Nn54Ux3NJopSWc9Pb2rYxYjCovjQI0B5HMEzPBsjlCm7eKW/gx4/Y3/lGrMTfmfX3d2UP2w4PAfgs5WM1WEGmXU8P0sYeLZsKdBuf2XuNrYGL1/57mSvORt78WHNjjNtjD+KloQvFwWHA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=+6zcXMRrdhoEOyd4NwiQ1/DpeB5iab4SykT+JoxH7AE=;

b=tN+m++CfguInucu1gjYArSVxF9nW4nodGoeOlOd+pSyTBTSudg3CY3mgTpWe820qDSh57EVmPXosRe/qjbDObIheMGE+6F2GPKOXkykgEbvkx5UGWB6dLMUPSac2UOX7RQYWTRVSM5PU4b57l1ZOj489/hwWWMSOAzt4zxenvWv/o70VRs33smHB5+Qj+tvdHUzrb6K3uTScHPAt9T21omebL6g0BEpqgPqvgSF4mptXCznCwxSYUWdr/xs/gvFyLkWvqHIk9essomqpmqKYdaxIDNsZVwwiSacKH4JuL0ChBQMe5LFzGZZgLvl97HeIp4gNYEDr17Bszq6X50/o0g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=inacapmail.cl; dmarc=pass action=none

header.from=inacapmail.cl; dkim=pass header.d=inacapmail.cl; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=inacapmail.cl;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=+6zcXMRrdhoEOyd4NwiQ1/DpeB5iab4SykT+JoxH7AE=;

b=D2MYWxcYd96s4m3LJ4+GNJRiNqS/Bxdu2NOaSe/24XOqbhRqpJLFvRULML+cU2xqwPQ7K7g4OYKHTuK7uI1d4jfFQuQgYD2rdI/VlzdEmUgfNkq9OAr++R4Iuo0nxR8seX1Ts592+h+mxi6xOyZmWM+yyAlkc3u2m8+y3JB7XSk=

Received: from DS0PR02MB9197.namprd02.prod.outlook.com (2603:10b6:8:13e::9) by

PH0PR02MB7814.namprd02.prod.outlook.com (2603:10b6:510:58::20) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.21.546.19; Sat, 24 Oct 2026 12:35:34 +0000

Received: from DS0PR02MB9197.namprd02.prod.outlook.com

([fe80::d5b6:c39c:5293:54f8]) by DS0PR02MB9197.namprd02.prod.outlook.com

([fe80::d5b6:c39c:5293:54f8%4]) with mapi id 15.21.0522.016; Sat, 24 Oct 2026

12:35:34 +0000

From: PABLO GUILLERMO AVALOS JARA

To: "actu@actu.ca"

Subject:

=?Windows-1252?Q?Paiement_de_votre_facture_de_d=E9neigement_/2026_-_2027?=

Thread-Topic:

=?Windows-1252?Q?Paiement_de_votre_facture_de_d=E9neigement_/2026_-_2027?=

Thread-Index: AQHdY7QqSc9VI7x3EUG+Hz+gC5UIDQ==

Date: Sat, 24 Oct 2026 12:35:34 +0000

Message-ID:



Accept-Language: es-ES, en-US

Content-Language: es-ES

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

authentication-results: mx.microsoft.com 1; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=inacapmail.cl;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DS0PR02MB9197:EE_|PH0PR02MB7814:EE_

x-ms-office365-filtering-correlation-id: df76f226-4083-43b0-f234-08df31cb4cd5

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|786006|23010399003|7416014|376014|1800799024|366016|19033499003|261022113327099003|261022105027099003|261022075727099003|261021121427099003|10067099003|56012099006|8096899003|18002099003|3613699012|5023799004|11063799006|38070700021;

x-microsoft-antispam-message-info:

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

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:fr;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DS0PR02MB9197.namprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(786006)(23010399003)(7416014)(376014)(1800799024)(366016)(19033499003)(261022113327099003)(261022105027099003)(261022075727099003)(261021121427099003)(10067099003)(56012099006)(8096899003)(18002099003)(3613699012)(5023799004)(11063799006)(38070700021);DIR:OUT;SFP:1102;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?2Ff86UopeG3T2FW3BpuWEtQy5yB/oxwlAgFPit6AuybbnLtAsp0AyCWX?=

=?Windows-1252?Q?OLvCup3ljxzh8hV5uuMY4fpAZI4AAIVyuwr+6w6MHHE7gY2l45K4+2EP?=

=?Windows-1252?Q?xX931LpCw7qzASVY+FTpnSIlZaJV9/wI0OlJj+rKfQY40LkFuWyUtRkD?=

=?Windows-1252?Q?6IDuv7G0++AkArENAyU2eNouKmGlDPGZWjs9xR4mzQKi2jnKxEsXHn89?=

=?Windows-1252?Q?EU3cGPznfTgEfLqYO5nLg2Fdv+WRd+FF50HnhTtMvYEQaYEAB709RFE6?=

=?Windows-1252?Q?svBs7SyaoWwi8C8N1AbT2fmmHQDEyimfZVjcoS00XJ9WEJrTrauA6M1p?=

=?Windows-1252?Q?OF+jmiStfGy6Ou4vt9wrxqdjouFTEE+Q5zRKvjHKMl5qk1Mq0sZr7LJv?=

=?Windows-1252?Q?b+iCwfHgCMAbiN4IT7O/hFJojYR7QfshO81wrLwBVaHFkhik+bX1oEG0?=

=?Windows-1252?Q?WMFY+iXGpOzviNIElvciogTKXdwV9C8HRi2d+vbQs4/4D/YuOufYpSQe?=

=?Windows-1252?Q?DHyFPaUeHtFhydW0mJ3mcmSKGnxGRGkpMN5YArw1RUly0xAZoAImagI4?=

=?Windows-1252?Q?kFcFQz/9Txm7rHfPBY62kpMct36gn3UX10OkrS+hXcx9SdBCUlZD7J56?=

=?Windows-1252?Q?fsp+m/L3CADJH3fNg5J3/UgHQHI6t+XYfAIXHBHHMTjFtd0k5A0rbOtz?=

=?Windows-1252?Q?LO7qzXQhhUBCRQg4LptQNCorr4Zy1RAltsbw4JQHdDULBIivzy/gM1ye?=

=?Windows-1252?Q?cpTzLw+NGsPKw60nMQsNS7Hn/Zwt5a8H45t5THcPstrxmf1UVL5zoIHz?=

=?Windows-1252?Q?RaTzdn2av9BtIgm/zNXv9og8sakAq/aNDzbqpdIrddJVJuuWUYHpPl9+?=

=?Windows-1252?Q?/+nJL4mTA/iRerr3qZJjlgnQtxVVGn3lGnzJ/KsLLmgGzvyaCVYnC4PD?=

=?Windows-1252?Q?Z0Y3it/xoOtTC3nxkOYLXqF834fuEBBC51B1QyXjoapaOxHdaE+52LhK?=

=?Windows-1252?Q?A42YSYOBSqkm3FoFgzbC+mkrN6ER5NML9onvxrsQbZy6cy8oj/X32tFp?=

=?Windows-1252?Q?tmuFSNjievMqIGOgTFOAH/6iCTAPlmLwpNG5PdipBpRjhH8qvU6UHt3V?=

=?Windows-1252?Q?VWCFyPsVO2vSo05qM29Tt5gTNqTA6u+tGEWhOUM56UJ3C55HbHX+oJwZ?=

=?Windows-1252?Q?tdjje3DjDaIAgQu2I3lKnJZ9Y3mi7PwpjLO77E+YqLPJ3PuwOXsMolCG?=

=?Windows-1252?Q?fnSyJkzNkIkRpJQ6PzwemlBA2b7YpMjqgsAdVaXiHx0J7vC/I+h0iw5t?=

=?Windows-1252?Q?po08eG2WMRIlpaVOrLpCvr+6zBENx5Z8mAhlPhtUyhB4MK7eX5wP8wZA?=

=?Windows-1252?Q?WNN/6m1vOJp+v3MCSs2InYc/gSxruEx/DuaaNYU1rZPFvZdgNkL50agb?=

=?Windows-1252?Q?sLj1PxzbOnYkW4tTqJqzRfifCBXM0/9CQ73nPEhdFYdT7YVlYFZ3nnlU?=

=?Windows-1252?Q?Eme2ooCemgvUtr5/PcwD6BG+syBc14GjqmZvvIuv7Fq7smHGTbGyweVx?=

=?Windows-1252?Q?+WPYz8kwKg8E+AHEtboXmbVhF4ZekGG6H3pVhZwUyNvPjb37gFMC/4Dj?=

=?Windows-1252?Q?5MFMNHvZsVwITBhnkUwupMRRgiOnsBawQo2yO084n4jWT/IU9TfNmfg6?=

=?Windows-1252?Q?jT8YiryCBXsto7pXCrmcoqCSSSDU/EmoFsI6JmmEMkMTWlBEmBxFaOFg?=

=?Windows-1252?Q?oZYDfyeuhnIcRTwmBMrsghmjv68LFywXpwdhXuo0FAhX32+Src+e3NiF?=

=?Windows-1252?Q?LZptbud2CEO+KSoUeYXsdRl/zSjfHcz+PHsnBThZ+wfIn8Y1PfryEOvo?=

=?Windows-1252?Q?s40Y0Dq58R67iQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_DS0PR02MB9197E8C4A6137124122147749B632DS0PR02MB9197namp_"

MIME-Version: 1.0

X-OriginatorOrg: inacapmail.cl

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DS0PR02MB9197.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: df76f226-4083-43b0-f234-08df31cb4cd5

X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2026 12:35:34.6387

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 38a1e0a1-b6b1-42e9-b3a9-597626670b17

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: +YNaVzTwicwLkOgkLsrmQciPYnYVPddwVUojytXU/CZdLlgd0INGnqqew3iR08SdHw1oaZ47VOav2ZbwR9L4e0JvstR9zci+52JO6S5HuzM=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR02MB7814

X-Antivirus: AVG (VPS 261024-0, 10/23/2026), Inbound message

X-Antivirus-Status: Clean



--_000_DS0PR02MB9197E8C4A6137124122147749B632DS0PR02MB9197namp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Madame, Monsieur,

Votre facture

R=E9f=E9rence : IRL-D=C9NEIGEMENT N=B02026-10

Titre : LANCEMENT DE LA CAMPAGNE DE LA MISE =C0 JOUR POUR LES D=C9NEIGEMEN=

T .



Nous tenons =E0 vous rappeler que la date limite pour la r=E9ception de vot=

re facture de d=E9neigement pour l'ann=E9e 2026-2027 a =E9t=E9 d=E9pass=E9e=

.



Selon nos nouvelles m=E9thodes de paiement, il est imp=E9ratif de proc=E9de=

r au r=E8glement en utilisant uniquement le virement Interac.



Veuillez noter que les paiements par ch=E8que, d=E9bit pr=E9autoris=E9 ou c=

arte de cr=E9dit ne peuvent plus =EAtre effectu=E9s =E0 partir de maintenan=

t.



Nous vous remercions de bien vouloir proc=E9der au paiement dans les plus b=

refs d=E9lais afin d'=E9viter l'application de frais de retard.



Coordonn=E9es pour le virement INTERAC :



Adresse Interac :

bureau.property@hotmail.com



Question : Deneigement



R=E9ponse : 2026



Nous vous serions reconnaissants de bien vouloir nous confirmer une fois le=

virement effectu=E9 en nous renvoyant un courrier.



Cordialement,

L'=E9quipe de Groupe d=E9neigement C.D



...........................................................................=

...........................................................................=

...........................................................................=

.......................................



Dear Sir or Madam,

Your Invoice

Reference: IRL-SNOW REMOVAL No. 2026-10

Subject: LAUNCH OF THE SNOW REMOVAL UPDATE CAMPAIGN.

We would like to remind you that the deadline for receiving your snow remov=

al invoice for the 2026=962027 season has passed.

Under our new payment methods, payment must be made exclusively via Interac=

e-Transfer.

Please note that payments by check, pre-authorized debit, or credit card ar=

e no longer accepted.

We kindly ask that you make your payment as soon as possible to avoid late =

fees.

Interac Transfer Details:

Interac Address:

Bureau.property@hotmail.com



Question: Snow Removal

Answer: 2026

We would appreciate it if you could confirm once the transfer has been made=

by sending us an email.

Sincerely, The C.D. Snow Removal Group Team



--_000_DS0PR02MB9197E8C4A6137124122147749B632DS0PR02MB9197namp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">

Madame, Monsieur,



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Votre facture



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

R=E9f=E9rence : IRL-D=C9NEIGEMENT =

; N=B02026-10



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">

Titre : LANCEMENT DE LA CAMPAGNE DE LA=

MISE =C0 JOUR POUR LES  D=C9NEIGEMENT .



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">

Nous tenons =E0 vous rappeler que la d=

ate limite pour la r=E9ception de votre facture de d=E9neigement pour l'ann=

=E9e 2026-2027 a =E9t=E9 d=E9pass=E9e.



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">

Selon nos nouvelles m=E9thodes de paie=

ment, il est imp=E9ratif de proc=E9der au r=E8glement en utilisant uniqueme=

nt le virement Interac.








d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">

Veuillez noter que les paiements par c=

h=E8que, d=E9bit pr=E9autoris=E9 ou carte de cr=E9dit ne peuvent plus =EAtr=

e effectu=E9s =E0 partir de maintenant.



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">

Nous vous remercions de bien vouloir p=

roc=E9der au paiement dans les plus brefs d=E9lais afin d'=E9viter l'applic=

ation de frais de retard.



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">

Coordonn=E9es pour le virement INTERAC=

:  



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">

Adresse Interac :  
div>


d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

;" class=3D"elementToProof">


doramail.com" id=3D"OWA1fa3289d-8773-5a6e-2c6f-16d082138f43" class=3D"x_x_x=

_OWAAutoLink" title=3D"mailto:bureau_property@doramail.com" data-linkindex=

=3D"0" style=3D"margin: 0px;">bureau.property@hotmail.com=







Question :  Deneigement=




d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">




R=E9ponse :   2026



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">




Nous vous serions reconnaissants de bien vouloir nous confirmer une fois le=

virement effectu=E9 en nous renvoyant un courrier.





Cordialement,



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">

L'=E9quipe de Groupe d=E9neigement C.D=




d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">







d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">

......................................=

...........................................................................=

...........................................................................=

...........................................................................=

.



d-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Aptos_Embedde=

dFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt=

; color: rgb(0, 0, 0);" class=3D"elementToProof">







d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Dear Sir or Madam,



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Your Invoice 



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Reference: IRL-SNOW REMOVAL No. 2026-1=

0



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Subject: LAUNCH OF THE SNOW REMOVAL UP=

DATE CAMPAIGN.



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

We would like to remind you that the d=

eadline for receiving your snow removal invoice for the 2026=962027 season =

has passed.



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Under our new payment methods, payment=

must be made exclusively via Interac e-Transfer.



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Please note that payments by check, pr=

e-authorized debit, or credit card are no longer accepted.



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

We kindly ask that you make your payme=

nt as soon as possible to avoid late fees.



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Interac Transfer Details:



=3D"elementToProof">


px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Interac Address:



px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(17, 85, 204);">


-fc5f-e7cdd1f2c3d4" class=3D"x_x_x_OWAAutoLink" title=3D"mailto:bureau_prop=

erty@doramail.com" data-linkindex=3D"1" style=3D"margin: 0px;">Bureau=

.property@hotmail.com



px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Question: Snow Removal



em 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibr=

i, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Answer: 2026





d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

We would appreciate it if you could co=

nfirm once the transfer has been made by sending us an email.



d-color: rgb(255, 255, 255); margin: 1em 0px; font-family: Aptos, Aptos_Emb=

eddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: =

12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Sincerely, The C.D. Snow Removal Group=

Team








--_000_DS0PR02MB9197E8C4A6137124122147749B632DS0PR02MB9197namp_--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 07:05:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKbRV-00000000O6v-1RVw

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 07:05:49 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 07:05:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f52.google.com ([209.85.128.52]:57633)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKaA8-000000005hz-3COO

for doctor@mail.nl2k.ab.ca;

Sat, 24 Oct 2026 05:43:52 -0600

Received: by mail-wm1-f52.google.com with SMTP id 5b1f17b1804b1-49d0da752ffso14438115e9.3

for ; Sat, 24 Oct 2026 04:42:53 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1792842167; cv=none;

d=google.com; s=arc-20260327;

b=f3pLEKLvB8oAVjEFf5Bz2WOEyABU6Nd9iR7XK8L1Y5rZcrUyD8lAVbttd4JbmkE2qv

L7ZCJMiAkbnc5P6TTR2BmmfuiWMT1S6rlkGjBC8w7T+ji4xsl8NVcr1vUGX4DEZ1cO0J

lIFovJygLsz+X2YFWNRP1QOcEawafRMZ3hkxe2KOrwxUV8nrRm1SAa4EzCRO8SCemFpD

2WNy75ihTNhtoG0QT3UWhfV1n7RF005nlf6BD0BMPaFBEU6Kh4fqCJ7MPxaZgVYF+YYx

/b4XAgS6juEbPer+lqQfJfrciCISFs8moCVBaa/P0QD2NZT+FHUoGaFnrPSLeOnA1PQP

EUJQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;

fh=40tEnhC7lt6WZEpLOc/9iys9wOYzz9RZUtwhWluMo+4=;

b=HocgkgHIHaTUkI4kXBe+KBv227QlZTK9XQ27i6OBQlNMJxcynDX+ZlnXroLImhnWrs

l50oafsHRyON2q4dX+Op8fqDYEdpto9uJ7SLanw00a8KqNZZrCFyLs/zR6vb6b/h1uaH

Ru25PR5Eyv4BiD83s1yQ/JGGrQxD4w3uk4TeKlCBslSlK3qgiT3OpzmkZNfSyqtaRtEm

ue4+zrgPmJ9yS+VkLBuuyX+b5cIXTKEZH6l08gKjGZDQJ47XbDqgqy+WE1hzmsFiIKBR

z5rcIxhTUEJfpuubK49Mu0XWVjlvzJtGEGAM0km7dMYkelx6GlyNhIdiR97h00vP1vt+

c8vg==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1792842167; x=1793446967; darn=mail.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;

b=YB4HR+cgvOb21epgnrDA9ouE4tJQDzjJeNiV8NL86KeoBgF6Dmgcb6SQnAhN3JLqNG

QDXE4WPiU3oObmyWt5rlFXwjVLS1tqBD5dBX55Uj7xTZMgYk9swJ5AIfRljVMR0rgA71

oYj3M5GLFxUqhFYZmHpOskzx7gloDTHSKBGZiYEmh4VGauCG0lnVfGl1xZpehmf1LNAs

2Qbs009o4epudEXuu1aTZ1RrgKKqeZobSxLeMwr7kfT687KK0ulc7qeZMHk76SJ1jhsQ

w2nuBLkdQAXiq1u81jx67C2gwvdJjBfWG4zGsGa7Pe+lxJqOwi/1QApH1DEkUBgmB+gg

aX+g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792842167; x=1793446967;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;

b=jaU+na/r5M8IYqRiNuGE/fsk3gOMwiIhGF2GlHXM3++WdziCLSqWYUiiazGGsoQnIT

NvyaW4D81DeLKRTyMUg4tWnC5aq4+VfgqZEEzcYFnGy97PFkj27vjzVQ74YAPwTmTKKg

mVc7/0qK3sw1RY2IZFji45pe6N2uBiA820FcBIKBA3uFCVdBg/NyJ1M9aa3bMLTmzphZ

prEbmnv8fo1LH58Nv7dXGckJrDW18PDR3FDOX1ownv4c7uXENA2j0XEKe+oR5/sC9fXV

3Q1WkhD5ogXafHqK6ZtEDEZw4jLqbC4jfb/FhDVhKsfIwcsmSR5YpW5yC6SmFTS2BJLP

H8qQ==

X-Forwarded-Encrypted: i=1; AKwUvBxNG98LMeg38oGSFQehGHMWa8tY9sz7M9IVSu22sNrb0r1ESkdJ6JkhDeviot+xQoPJhFd5bUA=@mail.nl2k.ab.ca

X-Gm-Message-State: AFq9FYL2+MDXPk00SJ3LmHf8crOfesOrtFDnw5Xb3gd9TiTKPZGu6SYl

WKzUaubCSqr2sYSOYv5aoAN/kNgJn8NDU9DU3v80Y5KHilcKjHWrood3PWx5/aBkHOKEouQK7NC

/sBA0fZPyBQG7B88CGzO7aPaD8ZRI+/o=

X-Gm-Gg: AYBFou2sYebqEdkquTaEv7kz9nBsa9DTDkF3E/StGKG0T5A7BznkrbJOJ0IwyJ+iW9W

aT6FY5JDPeB2DtSYRuLPygsVrEC5LfjNgGQ5G3dDpl0GsCAleNDPPDZ0cKaVAV6N9iQaj8ZTYH4

OLD37+tziJ+9AJPvpraEC+gs2za1do1iL+Fd+nsTcuKwRMKas3EKcX/GBUNbkvFGzI+0unr+iMO

gMgI3y3pcfsZDyromhVICA6S5AXxZEwoZRkcWBdpviRp/e0n1FTAQ6mYowM9D7/9XhvdV6RUqsm

d49oWGKNmDrkSyOIfsr9lrrbfZqGIW/NqqB3LjrNviDTyRlz9CyXnXBhmLotkGESHVpZ2gSXNL5

I52gumCzyAdRJZjzX10wiS2q72qjNWuaVRwCI

X-Received: by 2002:a05:600c:8488:b0:4a1:e0d5:293e with SMTP id

5b1f17b1804b1-4a35aca1366mr24733935e9.21.1792842166335; Sat, 24 Oct 2026

04:42:46 -0700 (PDT)

MIME-Version: 1.0

Reply-To: colemanperry334@gmail.com

From: COLEMAN PERRY

Date: Sat, 24 Oct 2026 04:42:33 -0700

X-Gm-Features: AclHuK_isFblrXeZTIpHcvbbgB63ZIyeTSzJhr_V3YD7q9a-qu11MK6Zf1WsTSA

Message-ID:

Subject: Request for cooperation

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000767b8d065e9498c4"

Bcc: doctor@mail.nl2k.ab.ca

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, I hope this email finds you well and is given rapt

attention . I am an employee of a British pharmaceutical company and would

like to present a promising business opportunity related to the supply of

[...]



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.52 listed in dnsbl.ahbl.org]

[209.85.128.52 listed in dnsbl.ahbl.org]

[209.85.128.52 listed in dnsbl.ahbl.org]

[209.85.128.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.52 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.52 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.52 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[williamsgraham202020(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[williamsgraham202020(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[colemanperry334(at)gmail.com]

0.3 OFFER BODY: Offers you Something

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.52 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

[209.85.128.52 listed in will-spam-for-food.eu.org]

Subject: {SPAM?} Request for cooperation

X-Antivirus: AVG (VPS 261024-0, 10/23/2026), Inbound message

X-Antivirus-Status: Clean



--000000000000767b8d065e9498c4

Content-Type: text/plain; charset="UTF-8"



Good day,



I hope this email finds you well and is given rapt attention . I am an

employee of a British pharmaceutical company and would like to present a

promising business opportunity related to the supply of key raw materials

for the production of human pharmaceuticals. No special professional

qualifications are required for this initiative.



Upon conclusion of a supply agreement, my company is willing to pay a

deposit of 70% to 100% of the product value.



Please contact me for further information about this offer.



Thank you for your time and interest.



Mr. Perry Coleman

191 High St, Barnet,

Greater London,

EN5 5SU



--000000000000767b8d065e9498c4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




rif;font-size:large">Good day,

lack",sans-serif;font-size:large">

black",sans-serif;font-size:large">
rial black",sans-serif;font-size:large">I hope this email finds you we=

ll and is given rapt attention . I am an employee of a =C2=A0British pharma=

ceutical company and would like to present a promising business opportunity=

related to the supply of key raw materials for the production of human pha=

rmaceuticals. No special professional qualifications are required for this =

initiative.

if;font-size:large">

erif;font-size:large">
ns-serif;font-size:large">Upon conclusion of a supply agreement, my company=

is willing to pay a deposit of 70% to 100% of the product value.
style=3D"font-family:"arial black",sans-serif;font-size:large"><=

br style=3D"font-family:"arial black",sans-serif;font-size:large"=

>
rge">Please contact me for further information about this offer.

style=3D"font-family:"arial black",sans-serif;font-size:large">
r style=3D"font-family:"arial black",sans-serif;font-size:large">=


ge">Thank you for your time and interest.

uot;arial black",sans-serif;font-size:large">

"arial black",sans-serif;font-size:large">
ily:"arial black",sans-serif;font-size:large">Mr. Perry Coleman
span>

large">
ize:large">191 High St, Barnet,

black",sans-serif;font-size:large">
ial black",sans-serif;font-size:large">Greater London,

=3D"font-family:"arial black",sans-serif;font-size:large">
tyle=3D"font-family:"arial black",sans-serif;font-size:large">EN5=

5SU




--000000000000767b8d065e9498c4--

NIgerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 07:05:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKbRZ-00000000OKx-2hti

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 07:05:53 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 07:05:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f49.google.com ([209.85.128.49]:57482)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKaA8-000000005i0-3BBc

for doctor@nl2k.ab.ca;

Sat, 24 Oct 2026 05:43:52 -0600

Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-4a3517554f7so5984945e9.2

for ; Sat, 24 Oct 2026 04:42:53 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1792842167; cv=none;

d=google.com; s=arc-20260327;

b=of7KX5O+oy2G0ioH9wfRXIab6ZvRF4Pmvnpy9e2Gn36krfnLE7EwCq4urTeUBA3wTc

lPhsucNHIuE5uxRULpur9GouC9KcNMAZfiucm3oiJYD3T3/7zfTDRh6/y05D+tTVkAFi

Sy32v4fmT2weXT3gaNZVv/r/ABBEdOMQk8yTonHw7/83AzXI8v+5dp3YxtXgtYPEhcdA

m9+Wjt16IToCNkKglIeCX1yVSM6fuNx2KO4OHMFGcwfFMCugoZfJeGywFsYxKjnJ+zhQ

V5/o+lh4VPRpfwHfn3GjAXhFfO7efJyVOmcCIMvDFAf7CzsQAM9Im6kar2cErARLQQH2

txGA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;

fh=lP6rwSERjIFxv1b6i8YXaCO5TwUgGj6DHUcItOQxoGs=;

b=hWqhHOjgQXG1uVwDInJZB2D9PazXeFdZTkCOiFtNZyeAB89wEbfXKpcpGH/+ok2m7X

8wQlwAP2nOcAN1L43hQPPmbPCmLKiyRSOz4lacnX2yq/dvhZTk3M75aaaLULt8VvU7gt

VOzaPXpLr1B8dHE8hzpAFQ67WIYGDJ8PviNfL9aWBr3i4uy0hthtu+HjcgnYBpkWVlzt

P1RIo6I738+eots1rM1n7hZyx+yeJd9krHpbRoa0O8wXuGgMUPEuTyKsFyBSEHoEjgjg

kSMlmFJDPLoEjmGLM97wIV2g8wajkWEADbq+XwWYA5C3d7H+MSahZ9w/FW+fnWlFiS70

qx/Q==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1792842167; x=1793446967; darn=nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;

b=T4cuivqytedfuT7mAkF8XA3KPkZb3W54jXge9PHB6sswfXqZZdRcspmJEbs0gIgbaW

Pn5eKn6CTCQiLlep7G+73TKU5IC1h+coZScuDkbBgCoJK0/b3+hjKtFOANaeu8DGWt7g

bajZ9yMcITIQ9+PJTFI/NXkhsdUP74IAHisGEHMr6r5whNjF+pL7XvlEigVgqU1+lb38

/OMLdBljLGvfGjY2TEZOyYk1vqVxbL8Otn8gayxWsOcxND5FfcLO4YkHR1ajjoIvglxy

Lxhs6wyr/OOjD14RmqqJvYWz5U5Abooj0Tf2z9/uuAajIIqssR1xvzKwLfBa1lcCIuXn

lEQA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792842167; x=1793446967;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;

b=Ba4664beykuIPruLfXIeMZ1hrrm9ehgRzzY8kPWvZD04DsUb/klcXEC/5VFyOQpy6y

Y03vPLO1+Vu71fHIRykXu4bwQx9CuAVkC7JhcpInK8eRmYs7hfFTyHo+SHMNHB2jJZRn

eKNSPuIUSpkrjQu09DwZ96DpuF72iRMI4fDVb++eoeOXVDFZUPNRPdFv8I13DiK+sp13

AuwuMh7teNSUWFar45qHkVBNuPXdzkulUSocPA8K6xoDLq6h2721C+LyZ/WA6zzDHlen

+ny+KyacrgzZkyoK0BYJ3t/NdmQf6GKfbQkOYa5pGRGOQI0Ub3C3GVvATmFaSdDhFRbK

V0gg==

X-Forwarded-Encrypted: i=1; AKwUvBwHStBNFoEPcov1BxpE8WmKA9/UaEEGu10wSDsmz8TFOYsSw0szkJAZQiFmUkuTPHv/HhOzIOs=@nl2k.ab.ca

X-Gm-Message-State: AFq9FYKH2pmvC5ctZ4kHi+/389lPCYa1wJxV0Vvl88PWkwN1a7ZDzIwb

epzNPM4yl922erGnMMGq59qnK24M3qkQWZRMo1AyE22MqnM1H0OOBXnWRWIGQGNOD18VKBo3oGq

DUjE6kMVv1fqGb3mpE1InTnwvKpJ2pnY=

X-Gm-Gg: AYBFou0rDf/MuZX9AkafIMRZDyemWstBgd2ko6ZO1Fms9l1WtPjKWvSPdGd/J+McSrJ

cp/5NlKvzT2JZXYDx2I1M3fu8Hfwp7TvIGrlIG3NHoCHBHZEzVNThVcBLrkNsyC6rEc0QQlOZVt

4Xla20DEA2HIN7iTD8dPENLFQq7+9hPX38+zBsxWKiewZODJKL3wr/d7TeqyOPyDSNRDoMGlEDj

nkEAXJ9uG4Dzd07VvqDdRWU8LxfHcN1/FAV8yDZBSDx9doAb1lHOa3N3sJWtCxmk57NgoxI/KH7

HkY90+MEpRP49fY77lVgGrpt5bUSmOHqn319NB3YgLnPPx9AK4CDsyL1if2e/i/p3qW2BIYZsWk

Q1PZMhksSbVkJtCl6qUsQJ+Bt6cOfYFbs2VF/

X-Received: by 2002:a05:600c:8488:b0:4a1:e0d5:293e with SMTP id

5b1f17b1804b1-4a35aca1366mr24733935e9.21.1792842166335; Sat, 24 Oct 2026

04:42:46 -0700 (PDT)

MIME-Version: 1.0

Reply-To: colemanperry334@gmail.com

From: COLEMAN PERRY

Date: Sat, 24 Oct 2026 04:42:33 -0700

X-Gm-Features: AclHuK_isFblrXeZTIpHcvbbgB63ZIyeTSzJhr_V3YD7q9a-qu11MK6Zf1WsTSA

Message-ID:

Subject: Request for cooperation

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000767b8d065e9498c4"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, I hope this email finds you well and is given rapt

attention . I am an employee of a British pharmaceutical company and would

like to present a promising business opportunity related to the supply of

[...]



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.49 listed in dnsbl.ahbl.org]

[209.85.128.49 listed in dnsbl.ahbl.org]

[209.85.128.49 listed in dnsbl.ahbl.org]

[209.85.128.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.49 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.49 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.49 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[williamsgraham202020(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[williamsgraham202020(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[colemanperry334(at)gmail.com]

0.3 OFFER BODY: Offers you Something

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.49 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

Subject: {SPAM?} Request for cooperation

X-Antivirus: AVG (VPS 261024-0, 10/23/2026), Inbound message

X-Antivirus-Status: Clean



--000000000000767b8d065e9498c4

Content-Type: text/plain; charset="UTF-8"



Good day,



I hope this email finds you well and is given rapt attention . I am an

employee of a British pharmaceutical company and would like to present a

promising business opportunity related to the supply of key raw materials

for the production of human pharmaceuticals. No special professional

qualifications are required for this initiative.



Upon conclusion of a supply agreement, my company is willing to pay a

deposit of 70% to 100% of the product value.



Please contact me for further information about this offer.



Thank you for your time and interest.



Mr. Perry Coleman

191 High St, Barnet,

Greater London,

EN5 5SU



--000000000000767b8d065e9498c4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




rif;font-size:large">Good day,

lack",sans-serif;font-size:large">

black",sans-serif;font-size:large">
rial black",sans-serif;font-size:large">I hope this email finds you we=

ll and is given rapt attention . I am an employee of a =C2=A0British pharma=

ceutical company and would like to present a promising business opportunity=

related to the supply of key raw materials for the production of human pha=

rmaceuticals. No special professional qualifications are required for this =

initiative.

if;font-size:large">

erif;font-size:large">
ns-serif;font-size:large">Upon conclusion of a supply agreement, my company=

is willing to pay a deposit of 70% to 100% of the product value.
style=3D"font-family:"arial black",sans-serif;font-size:large"><=

br style=3D"font-family:"arial black",sans-serif;font-size:large"=

>
rge">Please contact me for further information about this offer.

style=3D"font-family:"arial black",sans-serif;font-size:large">
r style=3D"font-family:"arial black",sans-serif;font-size:large">=


ge">Thank you for your time and interest.

uot;arial black",sans-serif;font-size:large">

"arial black",sans-serif;font-size:large">
ily:"arial black",sans-serif;font-size:large">Mr. Perry Coleman
span>

large">
ize:large">191 High St, Barnet,

black",sans-serif;font-size:large">
ial black",sans-serif;font-size:large">Greater London,

=3D"font-family:"arial black",sans-serif;font-size:large">
tyle=3D"font-family:"arial black",sans-serif;font-size:large">EN5=

5SU




--000000000000767b8d065e9498c4--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 07:05:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKbRZ-00000000OKx-2hti

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 07:05:53 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 07:05:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f49.google.com ([209.85.128.49]:57482)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKaA8-000000005i0-3BBc

for doctor@nl2k.ab.ca;

Sat, 24 Oct 2026 05:43:52 -0600

Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-4a3517554f7so5984945e9.2

for ; Sat, 24 Oct 2026 04:42:53 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1792842167; cv=none;

d=google.com; s=arc-20260327;

b=of7KX5O+oy2G0ioH9wfRXIab6ZvRF4Pmvnpy9e2Gn36krfnLE7EwCq4urTeUBA3wTc

lPhsucNHIuE5uxRULpur9GouC9KcNMAZfiucm3oiJYD3T3/7zfTDRh6/y05D+tTVkAFi

Sy32v4fmT2weXT3gaNZVv/r/ABBEdOMQk8yTonHw7/83AzXI8v+5dp3YxtXgtYPEhcdA

m9+Wjt16IToCNkKglIeCX1yVSM6fuNx2KO4OHMFGcwfFMCugoZfJeGywFsYxKjnJ+zhQ

V5/o+lh4VPRpfwHfn3GjAXhFfO7efJyVOmcCIMvDFAf7CzsQAM9Im6kar2cErARLQQH2

txGA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;

fh=lP6rwSERjIFxv1b6i8YXaCO5TwUgGj6DHUcItOQxoGs=;

b=hWqhHOjgQXG1uVwDInJZB2D9PazXeFdZTkCOiFtNZyeAB89wEbfXKpcpGH/+ok2m7X

8wQlwAP2nOcAN1L43hQPPmbPCmLKiyRSOz4lacnX2yq/dvhZTk3M75aaaLULt8VvU7gt

VOzaPXpLr1B8dHE8hzpAFQ67WIYGDJ8PviNfL9aWBr3i4uy0hthtu+HjcgnYBpkWVlzt

P1RIo6I738+eots1rM1n7hZyx+yeJd9krHpbRoa0O8wXuGgMUPEuTyKsFyBSEHoEjgjg

kSMlmFJDPLoEjmGLM97wIV2g8wajkWEADbq+XwWYA5C3d7H+MSahZ9w/FW+fnWlFiS70

qx/Q==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1792842167; x=1793446967; darn=nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;

b=T4cuivqytedfuT7mAkF8XA3KPkZb3W54jXge9PHB6sswfXqZZdRcspmJEbs0gIgbaW

Pn5eKn6CTCQiLlep7G+73TKU5IC1h+coZScuDkbBgCoJK0/b3+hjKtFOANaeu8DGWt7g

bajZ9yMcITIQ9+PJTFI/NXkhsdUP74IAHisGEHMr6r5whNjF+pL7XvlEigVgqU1+lb38

/OMLdBljLGvfGjY2TEZOyYk1vqVxbL8Otn8gayxWsOcxND5FfcLO4YkHR1ajjoIvglxy

Lxhs6wyr/OOjD14RmqqJvYWz5U5Abooj0Tf2z9/uuAajIIqssR1xvzKwLfBa1lcCIuXn

lEQA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1792842167; x=1793446967;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=/tGrYOpu+Gmyn32k8uMC3Qp/afGr9B7N6M5QlBeGRiE=;

b=Ba4664beykuIPruLfXIeMZ1hrrm9ehgRzzY8kPWvZD04DsUb/klcXEC/5VFyOQpy6y

Y03vPLO1+Vu71fHIRykXu4bwQx9CuAVkC7JhcpInK8eRmYs7hfFTyHo+SHMNHB2jJZRn

eKNSPuIUSpkrjQu09DwZ96DpuF72iRMI4fDVb++eoeOXVDFZUPNRPdFv8I13DiK+sp13

AuwuMh7teNSUWFar45qHkVBNuPXdzkulUSocPA8K6xoDLq6h2721C+LyZ/WA6zzDHlen

+ny+KyacrgzZkyoK0BYJ3t/NdmQf6GKfbQkOYa5pGRGOQI0Ub3C3GVvATmFaSdDhFRbK

V0gg==

X-Forwarded-Encrypted: i=1; AKwUvBwHStBNFoEPcov1BxpE8WmKA9/UaEEGu10wSDsmz8TFOYsSw0szkJAZQiFmUkuTPHv/HhOzIOs=@nl2k.ab.ca

X-Gm-Message-State: AFq9FYKH2pmvC5ctZ4kHi+/389lPCYa1wJxV0Vvl88PWkwN1a7ZDzIwb

epzNPM4yl922erGnMMGq59qnK24M3qkQWZRMo1AyE22MqnM1H0OOBXnWRWIGQGNOD18VKBo3oGq

DUjE6kMVv1fqGb3mpE1InTnwvKpJ2pnY=

X-Gm-Gg: AYBFou0rDf/MuZX9AkafIMRZDyemWstBgd2ko6ZO1Fms9l1WtPjKWvSPdGd/J+McSrJ

cp/5NlKvzT2JZXYDx2I1M3fu8Hfwp7TvIGrlIG3NHoCHBHZEzVNThVcBLrkNsyC6rEc0QQlOZVt

4Xla20DEA2HIN7iTD8dPENLFQq7+9hPX38+zBsxWKiewZODJKL3wr/d7TeqyOPyDSNRDoMGlEDj

nkEAXJ9uG4Dzd07VvqDdRWU8LxfHcN1/FAV8yDZBSDx9doAb1lHOa3N3sJWtCxmk57NgoxI/KH7

HkY90+MEpRP49fY77lVgGrpt5bUSmOHqn319NB3YgLnPPx9AK4CDsyL1if2e/i/p3qW2BIYZsWk

Q1PZMhksSbVkJtCl6qUsQJ+Bt6cOfYFbs2VF/

X-Received: by 2002:a05:600c:8488:b0:4a1:e0d5:293e with SMTP id

5b1f17b1804b1-4a35aca1366mr24733935e9.21.1792842166335; Sat, 24 Oct 2026

04:42:46 -0700 (PDT)

MIME-Version: 1.0

Reply-To: colemanperry334@gmail.com

From: COLEMAN PERRY

Date: Sat, 24 Oct 2026 04:42:33 -0700

X-Gm-Features: AclHuK_isFblrXeZTIpHcvbbgB63ZIyeTSzJhr_V3YD7q9a-qu11MK6Zf1WsTSA

Message-ID:

Subject: Request for cooperation

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000767b8d065e9498c4"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, I hope this email finds you well and is given rapt

attention . I am an employee of a British pharmaceutical company and would

like to present a promising business opportunity related to the supply of

[...]



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.49 listed in dnsbl.ahbl.org]

[209.85.128.49 listed in dnsbl.ahbl.org]

[209.85.128.49 listed in dnsbl.ahbl.org]

[209.85.128.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.49 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.49 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.49 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[williamsgraham202020(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[williamsgraham202020(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[colemanperry334(at)gmail.com]

0.3 OFFER BODY: Offers you Something

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.49 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

[209.85.128.49 listed in will-spam-for-food.eu.org]

Subject: {SPAM?} Request for cooperation

X-Antivirus: AVG (VPS 261024-0, 10/23/2026), Inbound message

X-Antivirus-Status: Clean



--000000000000767b8d065e9498c4

Content-Type: text/plain; charset="UTF-8"



Good day,



I hope this email finds you well and is given rapt attention . I am an

employee of a British pharmaceutical company and would like to present a

promising business opportunity related to the supply of key raw materials

for the production of human pharmaceuticals. No special professional

qualifications are required for this initiative.



Upon conclusion of a supply agreement, my company is willing to pay a

deposit of 70% to 100% of the product value.



Please contact me for further information about this offer.



Thank you for your time and interest.



Mr. Perry Coleman

191 High St, Barnet,

Greater London,

EN5 5SU



--000000000000767b8d065e9498c4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




rif;font-size:large">Good day,

lack",sans-serif;font-size:large">

black",sans-serif;font-size:large">
rial black",sans-serif;font-size:large">I hope this email finds you we=

ll and is given rapt attention . I am an employee of a =C2=A0British pharma=

ceutical company and would like to present a promising business opportunity=

related to the supply of key raw materials for the production of human pha=

rmaceuticals. No special professional qualifications are required for this =

initiative.

if;font-size:large">

erif;font-size:large">
ns-serif;font-size:large">Upon conclusion of a supply agreement, my company=

is willing to pay a deposit of 70% to 100% of the product value.
style=3D"font-family:"arial black",sans-serif;font-size:large"><=

br style=3D"font-family:"arial black",sans-serif;font-size:large"=

>
rge">Please contact me for further information about this offer.

style=3D"font-family:"arial black",sans-serif;font-size:large">
r style=3D"font-family:"arial black",sans-serif;font-size:large">=


ge">Thank you for your time and interest.

uot;arial black",sans-serif;font-size:large">

"arial black",sans-serif;font-size:large">
ily:"arial black",sans-serif;font-size:large">Mr. Perry Coleman
span>

large">
ize:large">191 High St, Barnet,

black",sans-serif;font-size:large">
ial black",sans-serif;font-size:large">Greater London,

=3D"font-family:"arial black",sans-serif;font-size:large">
tyle=3D"font-family:"arial black",sans-serif;font-size:large">EN5=

5SU




--000000000000767b8d065e9498c4--

NIgerian spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 06:57:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKbJA-00000000CoC-3Awp

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 06:57:12 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 06:57:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southcentralusazolkn19011063.outbound.protection.outlook.com ([52.103.14.63]:57332 helo=SN4PR0501CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKXpi-00000000Ena-3Vlu

for root@nk.ca;

Sat, 24 Oct 2026 03:14:43 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=wtxWZMLhBJqD3qQV5EW9C+N2JAANNM7sP4paE5ECwdoFomizjLjrBWjryLLjImsn9ujIQ2qE/eq2q7i6wXhPNFRLyvJTcA33IILUz2hhi1WAYRooOGGvAO/VGyjunPrshw+wk2AjFh5gVMe9XRHXY9k7gvwQuB+APz0y/CF8FEnG6W4CSFfquaRT8Mnd8wpr9yizfFFkfeQ/ex0debQtgt6Og8U7qLFyYPxLpxrYBVIZTdBtUIjeztx1ZG5DwjT1byjm1O2Q3dG+nHngTv1kSVI7Hjq2Ufobjerx+2Mk23CKPTQFqYXuif2IJQkXiiGWhrv3t9VV3GMbp369mVXyQw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kaM4Qek/v2grhcBsxKyCvWZp3ZrOAKVIlyNtjy9vYyQ=;

b=zISVp4x8wpre5kbrVmI9MtZrwK6ue33TSSNrapR6IrJiJBWwowoBqku7NyqnmSsr2e6rWxFgLywOAvPQnsbgV89FhCqAru0oQWzT9bxVED3r8qM7bteW2vx7LzlU792F3hyuD4Dmgrk8n9MtYa3Eh/iHGWZVp+uQVEloP1NfVQ/7I2ecza3/8EylSQdt+2CHpVTasBBHYAIoKqsPXSiVmIHmeciXXLLxlxWNSxS7+q+28cfJ78uwiJreHxtahi3/1hf4bGZwOSx2D+ayr5ooff+ZZcqm/bALXZN/Z+q8itWLHxvMifaGV1KHwo/wrJLdhla8fKzjpDme5GavcE3Ipg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kaM4Qek/v2grhcBsxKyCvWZp3ZrOAKVIlyNtjy9vYyQ=;

b=QfUn3fBQJXgeXesKGwwDNK7cKRruofzDVDkuoN8g/TAwS2djtWtlQs5Lv89b39WxkP00gyvLeA1o0lEjdY9mROQFf6uXYCY2YPU+uVHPRlZN/FtYES0n8tCfD8HmqJUKhwpDVA8uTXIDe6rAE9rFWOA1F3SpSSFtoEbydC5tcbKgok4WhnBCEAzppqd9mRt79qCNTAlmurczuktjll5Rf3pMcQMAseU/kY4fkz46od8mo9LqTdXTdiVw51le3hAjtFzBIZM6+adv5K0mmTLX1xTHOQyOUWxXWEVkvSeOI3/Z+m0RqUPRBfc2a+aX8qobs1rLejg/SnLMVDQXEcD0YQ==

Received: from BL1PPF06689D6DE.namprd22.prod.outlook.com

(2603:10b6:20f:fc04::f05) by CO6PR22MB2914.namprd22.prod.outlook.com

(2603:10b6:303:14d::16) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.21; Sat, 24 Oct

2026 09:13:21 +0000

Received: from BL1PPF06689D6DE.namprd22.prod.outlook.com

([fe80::9154:6106:343b:7d5b]) by BL1PPF06689D6DE.namprd22.prod.outlook.com

([fe80::9154:6106:343b:7d5b%6]) with mapi id 15.21.0546.017; Sat, 24 Oct 2026

09:13:21 +0000

From: In fo

Subject: UNCLAIMED FUNDS

Thread-Topic: UNCLAIMED FUNDS

Thread-Index: AQHdXSBBoKURy1OVkU22Pio9j14mJg==

Date: Sat, 24 Oct 2026 09:13:21 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: BL1PPF06689D6DE:EE_|CO6PR22MB2914:EE_

x-ms-office365-filtering-correlation-id: 02b68294-23a5-4f97-6d68-08df31af0ccb

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|15080799012|22091999003|12121999013|24121999003|51005399006|16051099003|55001999006|704163111799003|2604032031799003|4140399003|25010399006|24021099003|18010799003|11091999009|31061999003|5062599005|19110799012|8060799015|8062599012|261005200801699003|40105399003|26121999007|11120399003|260806224601699006|102099032|440099028|3412199025|26104999009;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?dQifnQLKHtMlcZYAvWM4FFUuEB5sXMme+XB2a/7E37WSn515TwHnpYfYqk?=

=?iso-8859-1?Q?nVbHFYqD99GZ/WaBpL05SyOfNk4/0IlAW4upz3CwKRd2xGIJAzS2J+/yi3?=

=?iso-8859-1?Q?OZhykXEIu1/29F74akdlcmGKMW33XxDAMGJdjr6LP0hFjKsbK9zTnPa1Wg?=

=?iso-8859-1?Q?VVVTF+2urkjrb2ozpasBRQyW0Yr6zxbXe3NuCHwFCgttf7118SAE5aSQzq?=

=?iso-8859-1?Q?NPSdVAmWQGr9sh3WaJRZZve5fEAvSqCZhBhDixSMvsCa7N0tQiYDObT7KM?=

=?iso-8859-1?Q?F7iezSMzFU0hQIIF4j7Nba5c5ENRuUKMWpeve/yBTBO1oEiEjiH+0ZdxcS?=

=?iso-8859-1?Q?pHJT79sVA8Dv9bLyLNBQBah1jyRhKhjwHnd1k5ngx2LSOfAJUncAMvMWoF?=

=?iso-8859-1?Q?A6SqfOSvo3kNjEgENgnLFaqshKukBHnrYwuwlHSg3INeqpR8BojKxD0c0k?=

=?iso-8859-1?Q?hb/IY0KpxwpONpTSeYCCxJ9mb8dUNsyI2kIRJufrcpp4MXxsgRvbBp9y1S?=

=?iso-8859-1?Q?coIrj3hYPWTtyv3EYDelvObRX63m2LD1+46nlxuwI0jvEn42etwtPeWJq1?=

=?iso-8859-1?Q?IzeqDay2rr8NC3oCzkfmbXDChd+Qh0Kr+a9nsY+4dX/Umsk2Y/flzTCG7n?=

=?iso-8859-1?Q?9fmDwbalEDESOVVHaWV9bzwRI82XMZbshy9wZwyJ/Q0h5FhHPJpCOY6LUF?=

=?iso-8859-1?Q?dpDcDTasEuWeWWDoLB6S+nSjDUV8HTJvZJtzYLx0EC7fs8x8p+Df/B1Q2W?=

=?iso-8859-1?Q?u628dlceDvJMDJS8ZpDCWJtOP+9NMM25ZBqE76D5VWZIuq1fL6sqLDWZK0?=

=?iso-8859-1?Q?tdkp6k4lCR4g+Rm9lqnIkeDZeXhELr8Sh6SWaYiu/ro4j5P8uIMVZfd2s0?=

=?iso-8859-1?Q?e+PYf2uSwV2onfcO9QkTsP0od/NAHhfOKFKfXDEPuDJJ/NUZetxGjUx/Zv?=

=?iso-8859-1?Q?nMpMYd3NC4mkGU3v2Dp69DF/xFbdDs62Q/lkufGbi3Squdi/o+6VnMrjEm?=

=?iso-8859-1?Q?/7TZTcftgubUHcanqMbm9Ik44qN1ky7WZya8NZT6eK4I1vollg4zSlwR3O?=

=?iso-8859-1?Q?24uJUYLHv2PgMtfjVml7gSS0V4TbuMYQ2t7pHhyJXbgCZLBBaLtxNjvKK8?=

=?iso-8859-1?Q?fAyBvxVBKSAarcGmFsFOBTTgClFCgrhUqwheoFumGPU3eXq71E+MzQDl7M?=

=?iso-8859-1?Q?I8Ebs+zuIgDDwDFyTVyS7+L9f/4uNlo/aJeOmtJCvWpPMKqC5gxlb6tPvw?=

=?iso-8859-1?Q?Ywpk9qAUzgQmRpdFoylsfmWOd1M/QhjDR16Z6Szj4Cn3qLTCmsXZJAswgN?=

=?iso-8859-1?Q?U6mYm7v0og4qwlkmrB+1+Pq9JAEaDdenDuxEC7tFUqz86kG4hinrqY5w6H?=

=?iso-8859-1?Q?GoTR8C6udKcL+Ra3xNrZb+UowPxxibXuCHGO2Jj2nhJBv53vSngbVpABA4?=

=?iso-8859-1?Q?a753531Rk+t/atph16ZV6oQifNTvk3JFG88CkZ0j0ZoVN/37dO+4qItmlH?=

=?iso-8859-1?Q?HwvzryA6/KBHyIup+uM3Of?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?YTzO/vyvDZ4+bMsCQHcTYcLYIy5hj9HhOi9/+JQKEqoU4wZcWCo/+E6nDx?=

=?iso-8859-1?Q?+GSpXLBkM23KegTC07NDZ1mEGZ4pdaz4cd+ejUa93VkFytmSMIs2XHZW6c?=

=?iso-8859-1?Q?+VIhC5Uk2hKGbs189IqKXa1GXuXEEgdRL/toORf5Drv3HWCF65Kwkjmafg?=

=?iso-8859-1?Q?AKNVIxO/vyTzV7+0r1Tn143FAtslae65aSzPYlQsWQuKiBrHHPfnEZnS/T?=

=?iso-8859-1?Q?Y2ivjrtYsnxSv3ydnj12/PGh3zfyL/1S3epRzUubzEtrt3gEjU2DleD1/w?=

=?iso-8859-1?Q?5FnxJJumv9LDpj6weHCtZOjrKGnkXn8ToaEgPKnLJwmf/k9PT4aqMtz2AC?=

=?iso-8859-1?Q?fh0MWKrciGAP7HZKDZFVf4pThqW7sHP+Jx9+c5/keGRZkAy3+fmzUAfINr?=

=?iso-8859-1?Q?iUZNjtvcK4CsXlaOkW8H3w3T9C31OSuLC/tuRtN+NNOOYJBGL2pvgStR7v?=

=?iso-8859-1?Q?0EjSfEZx5JUM26RsUfNVgQtMvsTqmIXWy+rDZ5CjZf+8T3EGf4hg01hbc3?=

=?iso-8859-1?Q?q3159y/8CyrVADfElb6diW4cC513peMuj7G7t6twLf3l5/79XpqKkaJ6eA?=

=?iso-8859-1?Q?Eiao9VAmQsHLrGl6AqWIjq8K5ojtja3tZDvZQGq0bkDdlVDb2En923KTSo?=

=?iso-8859-1?Q?+pJHNJsjp9uFux5Wgfabv6GCt7IENcGsCrkoXTLq5obhXwpKkq+qYkrai3?=

=?iso-8859-1?Q?t/1Y1EtwKdG9VRGXxhQRygAEa0FobSK1ZnTd7AOanLzRfVNX03CohAz3m2?=

=?iso-8859-1?Q?R70toNtBcIoi+M7D5Ol+mDMLaS30WsOuQEHrG/WkirPncF/XS5fw2UluHx?=

=?iso-8859-1?Q?4wOkXPHWM49Pwlt5lRhwVVobsizAqEZSGm/AgwUBTUopbOn4JGJyoYtiiV?=

=?iso-8859-1?Q?SQisRsv4e4tg4BW2CxpkihZnI8z4rcTzLu1GOuNcOVJqZCEketwaN3w44+?=

=?iso-8859-1?Q?PRZyyOEZDExGwjxV8//LwBa5WnYTib82Ws3Hf2VfvpxLH6D/RioNWQxS5N?=

=?iso-8859-1?Q?I5FrIGXBRIhU8xGJhGpeBG5Ep+89fs9VfZfuqklxzIhpO3sJLqTnZzcQIp?=

=?iso-8859-1?Q?DRoWpSQuEk09OSoKD/YpW2j5lLfsW62nTZ8sXo4gYEU+1ZThG3rZbe6Kag?=

=?iso-8859-1?Q?+kptOItGEWk4Mf+v7JakaAVdd4nvpL4F12QP/nkUKBacjZlweYUFcqciqK?=

=?iso-8859-1?Q?E/e65ZnLcK8kNWeG4hE079wRWJ2fQpscoiKo63/a+Qu6cOS5/UtWJpqKZD?=

=?iso-8859-1?Q?sw6HvWA9FsWSHsK1Hm3YqegF5XojjafI/lRwR+UIvm/9XB+gra+rVYfY7u?=

=?iso-8859-1?Q?3UvtjOIGkQQSki+VEQ+yhmO2soObuW9fk9UQBnAIjrOnVsVdqhjxyQvS7I?=

=?iso-8859-1?Q?ABrlTheY4WCoy7FuVNr7rADLK+oslwGrhVi6zIAII3Lkm4UGQXSswOHZiA?=

=?iso-8859-1?Q?yZJuR08PSdbN+fev3nzCcJjCh3Yr/w0DOkQc1w=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_BL1PPF06689D6DE99804F2CA4A8D4FA9FECC09B2BL1PPF06689D6DE_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: BL1PPF06689D6DE.namprd22.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 02b68294-23a5-4f97-6d68-08df31af0ccb

X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2026 09:13:21.2846

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR22MB2914

X-Spam_score: 14.0

X-Spam_score_int: 140

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Kindly contact Mrs. Katherine Thorn at thornkatherine32@gmail.com

regarding the unclaimed funds of our late client, which have been registered

under your name. Your prompt response is urgently required to facilitate

further clarification and processing.



Content analysis details: (14.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[will-spam-for-food.eu.org]

[52.103.14.63 listed in will-spam-for-food.eu.org]

[52.103.14.63 listed in will-spam-for-food.eu.org]

[52.103.14.63 listed in will-spam-for-food.eu.org]

[52.103.14.63 listed in will-spam-for-food.eu.org]

[52.103.14.63 listed in will-spam-for-food.eu.org]

[52.103.14.63 listed in will-spam-for-food.eu.org]

[52.103.14.63 listed in will-spam-for-food.eu.org]

[52.103.14.63 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.14.63 listed in dnsbl.ahbl.org]

[52.103.14.63 listed in dnsbl.ahbl.org]

[52.103.14.63 listed in dnsbl.ahbl.org]

[52.103.14.63 listed in dnsbl.ahbl.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[dnsbl.ahbl.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[dnsbl.ahbl.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[dnsbl.ahbl.org]

[2603:10b6:20f:fc04:0:0:0:f05 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.14.63 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.14.63 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.14.63 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.14.63 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.14.63 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.14.63 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[hilbnmioivbnmnbcdeiqwi(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.14.63 listed in bl.score.senderscore.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} UNCLAIMED FUNDS

X-Antivirus: AVG (VPS 261024-0, 10/23/2026), Inbound message

X-Antivirus-Status: Clean



--_000_BL1PPF06689D6DE99804F2CA4A8D4FA9FECC09B2BL1PPF06689D6DE_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Kindly contact Mrs. Katherine Thorn at thornkatherine32@gmail.com regarding=

the unclaimed funds of our late client, which have been registered under y=

our name.



Your prompt response is urgently required to facilitate further clarificati=

on and processing.



Thank you.





--_000_BL1PPF06689D6DE99804F2CA4A8D4FA9FECC09B2BL1PPF06689D6DE_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Kindly contact Mrs. Katherine Thorn at thornkatherine32@gmail.com regarding=

the unclaimed funds of our late client, which have been registered under y=

our name.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Your prompt response is urgently required to facilitate further clarificati=

on and processing.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thank you.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_BL1PPF06689D6DE99804F2CA4A8D4FA9FECC09B2BL1PPF06689D6DE_--

charity spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 06:56:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKbIL-00000000CjV-0Udu

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 06:56:21 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 06:56:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mailgate1.umcs.pl ([87.246.207.245]:28304)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKWNu-00000000650-0aPJ

for root@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 01:41:48 -0600

Received: from exch-edge2.umcs.local ([10.128.2.32])

by mailgate1.umcs.pl with ESMTPS id 69O7XZBO020298-69O7XZBQ020298

(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=CAFAIL);

Sat, 24 Oct 2026 09:33:35 +0200

Received: from exch-db4.umcs.local (10.128.2.14) by exch-edge2 (10.128.2.32)

with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.53; Sat, 24 Oct

2026 09:33:35 +0200

Received: from exch-db8.umcs.local (10.128.2.18) by exch-db4.umcs.local

(10.128.2.14) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.53; Sat, 24 Oct

2026 09:33:35 +0200

Received: from exch-db8.umcs.local ([fe80::bf99:d88e:1c81:c7e4]) by

exch-db8.umcs.local ([fe80::bf99:d88e:1c81:c7e4%15]) with mapi id

15.02.2562.053; Sat, 24 Oct 2026 09:33:35 +0200

From: Barbara Gawda

To: "adminfo@lpjobs.com"

Subject: Good News

Thread-Topic: Good News

Thread-Index: Ad1jifaZhH+i3J3CQRC9qrZs8H4rnw==

Date: Sat, 24 Oct 2026 07:33:35 +0000

Message-ID: <812bdbc7aa6b49ec83f9f81009583470@umcs.pl>

Accept-Language: pl-PL, en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [10.128.2.5]

Content-Type: multipart/alternative;

boundary="_000_812bdbc7aa6b49ec83f9f81009583470umcspl_"

MIME-Version: 1.0

X-FEAS-BEC-Info: WlpIGw0aAQkEARIJHAEHBlJSCRoLAAEeDUhZUEhYSFhIWkhZXkguLT4lWFpYWFhYWlleUV5aSFhISFpZSAoJGgoJGglGDwkfDAkoHQULG0YYBEhZSFlfSAwJBgsNGgwY

AygJBwRGCwcFSFhIWkhZWUhZWEZZWlBGWkZbWkhQSFhIWEhaXlpIWEhYSFhIWlxIWVtbWFBQXFtRWVgoEQZZW1tZXl1GCwcFSFhIWVBIXQ8RGBsBDRsoDwUJAQRGCwcF

SFhIW1hIKUYrABoRGwcbHAcFBx0oBAcGDAcGBQ0cRgkLRh0DSFhIWVBICUYNRgoaBx8GWygcCx1GDQwdSFhIWl9ICQoAAQIBHBsBBg8ACQYBEQkoEQkABwdGCwcFSFhI

Wl9ICQodCwAJBgkGKB8AARwNDQYNGg8RCwdGCwcFSFhIWVBICQsJBAQBGwcGKAIdBgdGCwcFSFhIWVtICQsdGhoRKB0ARg0MHUhYSFpYSAkNBAUJEgYBKA0PCRtGCwcF

Rg0PSFhIWltICQ8GDRsMCR0eDRoPBg0oEQkABwdGDhpIWEhZUEgJDxoJESgFCQtFHA0LAEYLBwVIWEhZW0gJAA0LAygEAR4NRgwDSFhIWV5ICQMJAwEoDAkARg0MHUYb

CUhYSFpZSAkEDQoaBwwBDSgABxwFCQEERgsHBUhYSFpcSCkEDRBGKwAJBygcDQQNEBgaDRsbRgsHBUhYSFpRSAkEAQkABQkMRgoBBhwJBQEFKAwYHwcaBAxGCwcFSFhI

WlpICQQBGgAJBAQoGwoLDwQHCgkERgYNHEhYSFpQSAkEARsJRgsHGA0ECQYMKAUNDAELHRsGEUYLBwVIWEhZX0gJBAQBDVlfWVkoCQcERgsHBUhYSFpbSAkFCQYDCRoo

AgcABhsHBg4JAQZGCwcFSFhIWV5ICQUHBAQoGgcPDRobRgsHBUhYSFpYSAkFEUYLCRoGCQAJBigJBwZGCwcFSFhIWlFICQYoCwEJBgcFCQ8NBhwJDwEJBAQHBg0aB0YL

BwVIWEhaUUgpBgkbHAkbAQlGLx0bDQEGBx4JKBodRg0RRgsHBUhYSFlRSAkGDBoNCSgYBAkBBg0PD0YLBwVIWEhaWEgJBgwaAQkGRgQNDSgfCQUdRgYNHEhYSFpQSAkG

AwELCUYFCQUBCygBBQtFCQ8NBgsBAglGABpIWEhaW0gJBgYJBQkaAQlGCwkbCRoBKBwBBkYBHEhYSFpdSAkGBg1GCgkcCwANBAcaKB8JBgkMBwdGDhpIWEhaX0gJGxgB

GgkcAQcGEigJGxgBGgkcAQcGEkYHGg9IWEhZXkgJHQQKCQsAKAlFCwcGRg0dSFhIWllICgsHBwMoBg0fCRoDAQYHBg1GCwcFSFhIWl9ICg0cAAYoBQEEHwkdAw0NDAcf

BhwHHwZGCwcFSFhIWlxICg4NHQ0aCg0aDygKDQQEGwcdHABGBg0cSFhIWllICg8dAQQEDQYoCwkaDQ0aDQxGCwcFSFhIWlhICgEGCwEJGgwBKA8FHw0bHEYLBwVIWEhZ

X0gKAQcFAxwoHQcERgsHBUYKGkhYSFpaSAoBGwANBigKCx8NCgwNGwEPBkYGDRxIWEhZUUgqAgkaBg1GIAkPDQYoGwkbRgYHSFhIW1pIChoJDEYDBx0RBx0FAgEJBigb

AA0aAQwJBgtGBwZGCwlIWEhZUUgKGg0GHCgOBwsdGw4HHRpGCwcFSFhIWV9IChoBCQYoEgENGgccAEYGDRxIWEhZUEgKGgEJBgsoDwQJCw0JHUYLBwVIWEhbW0gKGgEP

ARwcDUYbBQEcACgPChseDQYcHRoNG0YLBwVGCR1IWEhaXEgKGwsABw0GDigAHQYcDRpGCx0GEUYNDB1IWEhaW0gKGxwRGgcGKAsJGg0bCwQBBgELRgcaD0hYSFleSCod

HTc+AQYAKAoFC0YLBwVIWEhZW0gKEgEGBygFCQtGCwcFSFhIWl1IC0YYAQ0aGg1FCQYcBwEGDSgJEAEHBkYLCUhYSFleSCtGGw0aHgkNGygaBQpGCg1IWEhaXkgLRhsc

DQ4ODQYoBxgcAQsOCQsBBAEcEUYGBEhYSFpcSCsJBQ0aBwZGJR0aGgkRKAkMDRsJRgsHBUhYSFleSAsNGwkaDQcoHQYBGxtGARxIWEhZX0gLDg0cESgNBQUBGwYRRgsH

BUhYSFpfSAsACRoEDRtGBAEGCwcEBigLBwULCRscRgYNHEhYSFlfSAsADRoRBBgoDw0GDQFGBxoPSFhIWltICwAaARtGGB0aGB0aCSgJDRoBG0YGDRxIWEhaWEgLABoB

G0YbCQsDDQQoBg8LRgsHBUhYSFlQSAsAGgEbKAsPGwELBxoYRgsHBUhYSFtYSAsAGgEbHAEGDUYPAAkaAQooHRtGBg0bHAQNRgsHBUhYSFtZSCsAGgEbHAcYAA1GPgkG

KgcGDBwoBx4NGhwHBwVGCg1IWEhaXUgLBAEGDA0GCg0aDygMDQQBBh4NGxxGCwcFSFhIWVBICxgNBAQJCwMoBQsAGwFGCwcFSFhIWVBICxgEHQUEDQEPACgLBxBGBg0c

SFhIWlhICxoJHw4NKAcYHAcGBAEGDUYGDRxIWEhaW0gLGgYNHwUJBigKHAEGHA0aBg0cRgsHBUhYSFpdSAsaHQ4oChoBDwAcBwYJGg0JDgEaDUYLBwVIWEhaX0gLGhEb

HA0ERh8BAxscGgcFKAcaCQsEDUYLBwVIWEhZWkgLGwooAx0GDA1GDANIWEhaUUgrHRocARtGLQwfCRoMGygdGAAbRh0YDQYGRg0MHUhYSFlQSAseCQYNDwkbKAYHHwsL

RgcaD0hYSFpaSAsRBwcGKA4BBgkGCw1GHQsECUYNDB1IWEhaWEgMNwIJBgwaBxsBHBIoBRsGRgsHBUhYSFpaSAwJHg1GCQQHBhIHKAkKCgccHEYLBwVIWEhaW0gsCR4N

RjsACR8oHA0EDQsHBUYLB0YGEkhYSFpbSAwNCkYbHA0MBQkGKAkLG0UBBgtGCwcFSFhIWV9IDA8YGgkcHCgDGgkOHEYLBwVIWEhaWkgMAQkGDQsKCQoKARwcKAQBHg1G

CwcFSFhIWl9ILAcGBglGOBoNBgwNGg8JGxwoGxsOABtGBxoPSFhIWlhIDAcdD0YaBwcOKAAJBAwNEEYLBwVIWEhaUEgMGAcBGgENGigLAUYbHw0NHEUABwUNRgcaRh0b

SFhIWV5IDBsAWlEoDBoNEA0ERg0MHUhYSFlcSAwdCQZGChooGA9GCwcFSFhIWV5IDB8NGxwoBQARBxoDRgcaD0hYSFtYSA0ERgAHHRsbCQEGRhwJEgEGASgKDQQPCQsH

BUYKDUhYSFlRSA0EGA0SKAEGHA0aCgkdBkYLBwVIWEhaWEgNGgEGKBgaBx0MHAcYBAkGRgsHBUhYSFlcSA4BBAEYKAkKCwEbRgoNSFhIWV9IDgEHBgkoHRgAGkYLBwVG

CwZIWEhaWEgOGgkGCw0bCw8HBQ0SKB0KRg0MHUhYSFpaSA4aCQYGDQMoAA0aHBIBBg8NGkYGDRxIWEhaXEgOGgkRDgENBAwoCwcHA0YDWVpGDwlGHRtIWEhaWEgPCwkG

HAkeDSgJCw1FDgQJRgsHBUhYSFlcSA8BGwQBBigCAB1GDQwdSFhIWV5IDwIADwIAKAIADwIARgsHBUhYSFpaSA8aCQsNRgANGgYJBgwNEigKGEYLBwVIWEhaW0gPGg0P

RhsLBxwcKBsYCRoZRgsHBUYJHUhYSFpYSA8aDRsLACgLCxwaRh0FAwtGDQwdSFhIWlpIDxsJDwwBCygBGwwNBQEaRgsHBUYcGkhYSFpRSAAJAwkGRhscCQMNKBsJHEYb

CQkKDxoHHRhGCwcFSFhIWlxIAAkFARsARgMNCRooAQEGDRxGBg0cRgkdSFhIWl5IIA0PAUYgCRoCBxEHKBsJBRgHDRoGCUYLBwVIWEhaWUggDQQcBwY3IgcRCw0oBh0E

BEYGDRxIWEhaXEggDQYaEQNGLwkEHQAGKAsHBQkaCwBGGARIWEhZXkggIx0cGygFHBtGCwcFRh0JSFhIWVBIAAcaHgkcAAIoHQEGDBFGDQwdSFhIWltIAAcdDwAcBwY3

AAcFDRsoEQkABwdGCwlIWEhbWEgBCQZGHAAHBRsHBigEDRAJHRwHBA0JGw1GCwdGHQNIWEhZUUgBDwkaCwEJWSgJBg8NBAdGDQwdSFhIWlpIAQ8HGkYbBQEaBgceKAYN

HAELCUYbAUhYSFpaSAEFBQYHGgELAygRCQAHB0YLBwVGHB9IWEhbWUgBGwkKDQRGGwkaCQQNDx0BKBwaDQQEDQoHGg9GCwcFSFhIWltIAR4JBkYbHBoJEgYBCwMRKAwR

XEYLBwVIWEhaWUgCRgAJBQ0aKA0LBxscGg0JBUYLBwVIWEhbXUgiCQsZHQ0EAQYNRjwRGw0aKAsHBgYNGhgJGhwGDRobRgsHBUhYSFleSAIJDxsoGAkLCg0EBEYGDRxI

WEhaXEgCCQUNGwAdCQYPKBgJBhwNA0YLBwVGHB9IWEhZUEgiCQUNGyQoGAEYAwEGG0YLBwVIWEhaXEgCCQYNHEYaDQwNGigbHQYcGh0bHEYLBwVIWEhaXkgCCRoNDEYY

CRwcDRobBwYoDgEbDRoeRgsHBUhYSFpQSAIJESgJGg8RBA0OARoNGBoHHA0LHAEHBkYLBwVIWEhaWUgCCgkaWl8oGgcJDBodBgYNGkYLBwVIWEhaWkgCDQkGKAIFGwsH

CQsAAQYPRgsHRh0DSFhIWlxIAg0ODjcFCw8HHwkGKB4NGgESBwZGBg0cSFhIWV5IAg0GGw0GAwIoChEdRgYNHEhYSFpaSAINGgcFDUYLRgUNGxsNGigKHEYLBwVIWEhZ

UEgCDRsbDQwoChIbDQQJH0YLBwVIWEhaW0gCDRsbAQsJHx0oDh0GBQcKAQQNRgsHBUhYSFpZSAIERgkaHAEJDwkoGwkaDQYNHEYNG0hYSFpZSAIEChodBQUNHBwoGwMR

HA0QRgYNHEhYSFpdSAIHAAZGDwkaEgkoBgEbGwkGRR0bCUYLBwVIWEhaXUgCBx0GAUYFEQQEERgNGgMBBygeDQUJRg4BSFhIW1tIAh4BDQAfDQ8oCwQNCQYEAQYNGwsH

BhsdBBwBBg9GCwcFSFhIWltIAh8JHAMBBhsoAA0JBBwAHwEbDUYHGg9IWEhaX0gDCRoNBkYfAQQEAQkFGygfGAkOCkYJDkYFAQRIWEhbWUgDCRoNBigGCR0cAQQdGw0G

HgEaBwYFDQYcCQRGCwcFSFhIWlxIAwkfCRsJAwEoBhwcDAcLBwUHRgsHRgIYSFhIWltIAw0EBBEoGwkaHBEFBx0GHAkBBkYLBwVIWEhaXUgDAAkGGw0GKAAHHwkaDAsJ

GAEcCQRGCwcFSFhIW1tIAwEaCQYMDRsAGAkGDA1ZXFpZKBoNDAEODgUJAQRGCwcFSFhIWltIAwUJCwwHBgkEDCgPBAcKCQQcHkYLBwVIWEhZXkgDBQkaGg0aBygdHw5G

DQwdSFhIWV9IAxoBHAMHKAYdBQkBBEYHGg9IWEhZXkgDGh0PDygdGw4OCx1GBxoPSFhIWlhIBAkdGgEbKB8BBgYbH0YLBwVGCR1IWEhaWkgECwkaBAEGKA0JDwQNG0YG

DgRGCwcFSFhIW1hIBA0JAEYOCRoaDQQEKAoJBgMHDgkFDRoBCwlGCwcFSFhIWl1IJA0bBAENRiMNARwAKAUJGhoBBxwcRgsHBUhYSFldSAQBCQAoAQsLBxoYRgsHBUhY

SFlaSAQBBBEEKBgcHEYRHUhYSFpYSAQHCQYOGgENBgwoGwcGAQtGBg0cSFhIWl5IJB0LCRsjCRoJHBIJGygRCQAHB0YLBwVGGw9IWEhaUUgEHQsBCUYLCRoeDQQEASge

CQYMDRoKAQQcRg0MHUhYSFpQSAQdCwEJBgdGBR0GCRoNHBwHKBwBGwsJBAFGARxIWEhaUEgFRgkGDw0EAQwBGygKBB0NDAcHGhwNCwBGCwcFSFhIWlhIBQkMCQQEHRoJ

KBsDEQAHGEYLBwVIWEhZX0gFCQEEKAsJBQ0aCVtaRgsHBUhYSFpRSAUJGg8JGgEcCUYbCwAfCRocEgUJBigJAQ9GCwcFSFhIWlpIBQkaDwENRgQJHAcoBQELBxoYRgsH

BUhYSFtaSCUJGgEJIjc8ARoHBCgbAQYPCRgHGg0JARpGCwcFRhsPSFhIW1tIJQkaAQ1FIA0EDQYNRi4NGgYJBgwNGygAAQQcBwZGCwcFSFhIWlhIBQkaAQdGAwQJHRso

GwkJCkYLBwVIWEhaWUgFCRoBGygLGg0MARwaDQ4HGgVGBB5IWEhaXUgFCRoDKAAHHxwHCwcFBR0GAQsJHA1GCwcFSFhIW1tIJSk6PCEmRio6Jy8gKSUlLTooBBsPGwMR

CwANDhtGCwcFSFhIWV5IBQwFCRocEigeGxsYRgsHBUhYSFlRSAUMBwwMGygLBwUYGxELAEYLBwVIWEhbWUgFDQsAHA0EDEYGAQINKAYAGgsHBhsdBBwJBgsRRgYESFhI

WltIBQ0BCwANBAooBg0fHAcGGAQDG0YHGg9IWEhZUEgFDRwMHQUJBigFEQYNHEYLBwVIWEhaW0gFAQsADQQNRgsHBAcFCgcoBhsGRgsHBUhYSFpQSAUBCwANBAQNRhgA

ARgYG0UNHgkGGygMC0YPBx5IWEhaXkglAQMNRioNBAQoDQwBBgodGg8ARg8HHkYdA0hYSFpcSCUBIw0GBg0MESgcBxpGDgkbAw0GRgsHBUhYSFpaSCUBGgdGIA0aCw0P

KBgKEgsJGgxGABpIWEhaX0glJQkeGg0cAQsoBgkcDw0HCwAJBgYNBEYLBwVIWEhaWUgFBQcGCQAJBigKHRoGGwULDEYLBwVIWEhaXEgFHgkDHQQ3Ax0FCRooEQkABwdG

CwdGAQZIWEhZXUgGRh8RBg0GKAwBBBtGCg1IWEhaWEgGKAkGAQUJRQcGBAEGDUYLB0YBBEhYSFpQSCYJBgwBHAlGKgkbCQMoHw0EBBsOCRoPB0YLBwVIWEhaWEgGAQMH

BAkBKBgaAQYcAgcKRgsHBUhYSFlfSAYEBxwcKBsJHBBGGhpGCwcFSFhIWltIBgUJAwAJDAcoDA0EBwEcHA1GCwdGEglIWEhZUUgGER0oCgQPGwAJBg8ACQFGCwcFSFhI

W11IBwQBHgENGkYPHQEEBAkBBigJBAsJHA0ERQQdCw0GHEYLBwVIWEhaUEgHBwQNESgLB0YbCQYcCUUKCRoKCRoJRgsJRh0bSFhIWllIGEYeARsbDRooBQkaA0UJGBhG

CwcFSFhIW1hIGAkcGgELA0YcBwYPKA8EBwoNHwEaDQQNGxtGCwcFSFhIWl9IGAkdBEYaAQsACRoMGwcGKBsJBRsDARhGCwcFSFhIWVxIGAkdBCgaGAUfG0YLBwVIWEha

WkgYCR0ENwIHBg0bKAkaG0YJBwZGCwcFSFhIWltIGAkdBAk3CTcCBxsNGAAoGh0bAEYNDB1IWEhZUUgYCR8JBgMJBhwoEQUJAQRGCwcFSFhIWVFIGAoHGhwNBAQoHwcf

HwkRRgsHBUhYSFlYSBgNBigFCwBGDANIWEhaWUgYDRwNGgsABwYPKAYLG0YLBwVGGw9IWEhZUEgYDwcGCw0oDA0EBwEcHA1GBB1IWEhaX0gYAAEEKAUHGhwPCQ8NDxoH

HRgEBwkGG0YLBwVIWEhZXUgYBQkoAwkdDgUJBgZGDANIWEhZUUgYGVpZWF4oCwcEHQUKAQlGDQwdSFhIWltIGgkRBg0cHA0MKA4HEBoJCwEGD0YLBwVIWEhaWEgaDQ8B

Rh4JBAQNGigdBg0aAkYKGkhYSFlcSBoODQQDDSgdGwlGBg0cSFhIWltIGgELAAkaDCgbHA0YAA0GGx8NCkYHGg9IWEhaXEgaAQsACRoMAigBBQkPDRwNC0YLBwVGCR1I

WEhZUUgaAx0MBygFXUYPEQkHRgYNRgIYSFhIWlpIGgcKRh9GAA0GDBoBECgJDRAYRgsHBUhYSFpQSBoHCgoBDSgeAQQECQ8NGg0JBA0bHAkcDUYLBwVIWEhaXkgaBwoN

GhxGGR0JCwMNBgodGwAoCRwcRgYNHEhYSFpaSBoHCg0aHAYNCg0EKAwbHwEGC0YLBwVIWEhaX0gaBwZGCgcHHBsoCQoYAQYeDRscBQ0GHBtGBgRIWEhaWkgaBwccKAwH

CxwHGkYGBFoDRgkKRgsJSFhIW1lIOgcbCRoBB0YkKQoKCRwNKAkEDQYBCRsYCRIBB0YBHEhYSFpaSBoHEUYQAQ0oBxoPCQYHBkYLBwVGCwZIWEhaWUgaGgkRBQcGDCgL

BxoHHwkaDUYLBwVIWEhaW0gaHAcaGg0bKBwHHw0aGw8aBx0YRgYNHEhYSFpdSBsJBB4JDAcaRg8JERwJBigeH0YLBwVGBRBIWEhaXUgbCQVGCh0bACgYHRISBA0aBQ0M

AQlGCwcFSFhIWltIGwkFBwYNWlwoCgEPGAcGDEYGDRxGCR1IWEhaWUgbCQYMGgkaCREoDwAPRQEGC0YLBwVIWEhZXkgbCRoJACgKCg9GDR1GCwcFSFhIWlpIGwodGhoH

HQ8AGygPDAEeAQYPRgsHBUhYSFpdSBsMGBoBCh0ECSgcGgkGGxEbHA0FG0YLBwVIWEhaXEgbDQkGRhgJGgYNBAQoHRtGCRoFEUYFAQRIWEhaXEgbDRoPDQsdDRoaAQ0a

KAoNBAQGDRxGCwlIWEhbWEgbDRoPAQcFBxoNARoJKBsNGAQJBkYJBEYPBx5GChpIWEhZX0gbAAkGD0YfHSgNBAkGRgsHBUhYSFtZSBsADQEECQIHESgGDR8YAAkbDQUJ

GgMNHAEGD0YLBwVIWEhZXkgbAA0GDxIACSgFGx1GDQwdSFhIWVFIGwEGDwACARwoBQUbDwceRgsHBUhYSFlRSBsYCQsNKBgNHA0aAgcbHEYLBwVIWEhaXEgbGBoJDA0N

GDcFERsoEQkABwdGCwdGHQNIWEhaWkgbHA0YDQ8ACQQEKAYNHBINGgdGCwcFSFhIWl5IGxwNHg1FHAkRBAcaKA0JGhwABAEGA0YGDRxIWEhbW0gbHA0eDQY3BAceDQQR

KBsYCRocCQYLBwUYHRwNGkYLBwVIWEhZUUgbHQ0ABwQFDxoNBigcDBtGBg0cSFhIWllIGx0DAB0FKBgJCwEOAQtGBg0cRhsPSFhIWlhIHEYeCQZGBA0NHR8NBigAGgdG

BgRIWEhcWUgcCQYRCUYYCQQFDRooHAANCwQBBgELCQQLBwYbHQQcCQYLEUYLB0YdA0hYSFpaSBwKCRsbDRwcKAAHHAUJAQRGCwdGHQNIWEhaWUgcCwcGBgcaGygMDQQH

ARwcDUYLBwVIWEhaUEgcDRoNGwkoCwABBAwaDQYbCQQEAQkGCw1GBxoPSFhIWVFIHA0aAQsbBwYoBREaAQkMRgsHBUhYSFpfSBwAAQQcBwYoCQ8BBAEcEQQHDwEbHAEL

G0YdG0hYSFpaSBwABwUJG0YMDRoaAQsHKA8KDUYLBwVIWEhbWEgcAAcFCRtGAAkKDRobCg0aDw0aKAAJBhsHBkYKARJIWEhbWUgcBwwMRhgHHw0EBCgaARwSCwkaBBwH

BgsEHQpGCwcFSFhIWlBIHAcFKAkbGx0aDQAHBQ0BBhsYDQscAQcGRgsHBUhYSFpQSBwaARgcAUYLAAkcHRoeDQwBKAAdCR8NAUYLBwVIWEhaWUgcGwEKAREJKAIdGAEc

DRpGCwdGEglIWEhaXUgeRhgaCQIJGAkcASgBARwPRg0aBg0cRgEGSFhIWV9IHgELAxEoGwABGBgNAUYLBwVIWEhcWEgeBwQDDRpGGwsABQEMHEUODQAaDQYKCQsADRoo

HgcMCQ4HBg1GCwcFSFhIWV1IHh4NBAcoCQoBBAEbRgsJSFhIWVFIHwkEChoNCwAcBSgdBgsfRg0MHUhYSFlfSB8NBgMoCg0aAw0EDRFGDQwdSFhIWlhIHw0aBg0aKAYN

HA4HGg0bHEYLBwVIWEhaUUgfHx9GCQUFCQoHDwcJBg0oHw0KBQkBBEYLB0YSCUhYSFpdSBEFBwcaDSgbHA0eDQkGDAoJGhoRG0YLBwVIWEhaXUgRGgMoHBoJBhsHDhwb

BwQdHAEHBhtGCwcFSFhIWlxIER0JBhEdCQYoHBsBBg8AHQlGDQwdRgsGSFg=

X-FEAS-Client-IP: 10.128.2.32

X-FE-Policy-ID: 13:26:2:SYSTEM

X-FE-Hostname: mailgate1.umcs.pl

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; d=umcs.pl; s=umcs2; c=relaxed/relaxed;

h=from:to:subject:date:message-id:content-type:mime-version;

bh=7Vgopwa1YnmPR+O+GuHRQiktFDNFtVlUYrmfIcyHphQ=;

b=ZOiUt2hB3f+lMqd3q3ZAMqsfwMnX1MqarIwMESq5G9ZUAUq3vwCQ2ZFv1lGifWljcbDPYsBDTCk/

MLSpIh0u/KH6J0eyo+fFST4ZCXbd8JtkaRwKw762dRKrpMj5TJvX65/pFoWDI/gA5dmZXZF6pHb5

frSMwKyLbJ+asDoiTatsklmQrJGAJRbi2u2r/2kKJeBlMwFxihU7UP1dksbRz+NftbpG9xJFVVBR

lgzDev+GvTxsYIiFXeK8hbdqNvSTOxPcYbbZkFPO9hJxwIWN3aU6f/ifwhPMZDGKxo+MRzTwDiQ0

WrU+vqEzkMPt4cTlqA6K0XihfF/u9QTFWm0vJQ==

X-Antivirus: AVG (VPS 261024-0, 10/23/2026), Inbound message

X-Antivirus-Status: Clean



--_000_812bdbc7aa6b49ec83f9f81009583470umcspl_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



You have been nominated to help the less privilege within your community. R=

eply directly to lpjobswelll@gmail.com for mo=

re details





prof. dr hab. Barbara Gawda (przejd? do profilu osobowego)
.pl/pl/addres-book-employee,746,pl.html>



Uniwersytet Marii Curie-Sk?odowskiej w Lublinie



--_000_812bdbc7aa6b49ec83f9f81009583470umcspl_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>


>



Good News





You have been nominated to help the less privilege within your community. R=

eply directly to

lpjobswelll@gmail.com for more=

details









--_000_812bdbc7aa6b49ec83f9f81009583470umcspl_--

McAfee Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 11:09:00 -0600

Received: from potugalis.xyz ([185.161.251.135]:35981)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKfE2-00000000KhT-1P0c

for dave@nl2k.ab.ca;

Sat, 24 Oct 2026 11:08:15 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=potugalis.xyz;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@potugalis.xyz;

bh=XEj6KhyoY+Ldovn8bsiIAOP/muQ=;

b=ja/yiGkle+AA9t2On6T4CGMrnEbQbRaWxCN9zue78Au6gmHL9H8eDFk+mKSh0ZUikKMbyU0xU4bg

3uAcZWrA0f5QvG/0AwCXi0UsnkIsqd+003KSnjbdt95DPoCs6Z1u0YBHKa8+CZXDeluRqI4Ce14c

XKDx1pBRblQeIFBK+T0r7+yVXp0hNgaC5LJ5MwGS13GFEFABQogkEJ25j+ouh8zFFNCWoc/pgmz1

WmkyzyV+++j1a43n+sgPwx1yeKqlBpR58niNeJH1SbPkP6C6Gy1bmAbg4KMG25vmbNM/6Lt4bgIB

yW+aU1PG+CIO+QIOM9xS948WGFZxk8WM6nPumA==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=potugalis.xyz;

b=fBbjSsf6Da3BZbRPBJkUNjCJRKaJAZuGZvhghqlsD5yn18ZfzH580m+bo35OzKQZFl/V22mdw7qV

K7VB1gwxpqr3n0+8jV7as/wuDHD1VFG5KNKGAVWLIv01RGCCb7tgqgOEyiU2/lG9/Z+TfwZt9Bei

LL3e3iye43AWSo/2n3cZhORdrY3HH/69cP6Yh7Va6CR9rFz0/4Nh9MfgpZ5r/QKgYVPH7z0gUTS1

Nk0ii9l4zc+geBLkFek9NbkrWsBZ7V30w32n9FGgUwA0Kpb0i5Z2UXzllYfSQMNlj4An848cpFsv

2WvWjisrRgR+2nWdkYxMUwhOS3Btptk9f/ZE6A==;

Date: 10-24-2026

From: McAfee Protection

To: dave@nl2k.ab.ca

Cc: dave@nl2k.ab.ca

Subject: dave, Your antivirus protection has expired!!

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100018cbff5f80e-358cfa4d-48ec-4851-b8e8-6fba450ccf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 20.9

X-Spam_score_int: 209

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: McAfee Subscription Expired McAfeeâ„¢



Content analysis details: (20.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.161.251.135 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: keymart.net]

[URI: potugalis.xyz]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: keymart.net]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: keymart.net]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: keymart.net]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: potugalis.xyz]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: potugalis.xyz (xyz)]

0.7 LOCALPART_IN_SUBJECT Local part of To: address appears in Subject

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} dave, Your antivirus protection has expired!!

X-Antivirus: AVG (VPS 261024-4, 10/24/2026), Inbound message

X-Antivirus-Status: Clean













McAfee Subscription Expired























McAfeeâ„¢



Together is power.












Your McAfee Security subscription has expired!











Your McAfee subscription expired on Oct 20, 2026.







After the expiry date Your Device will become susceptible to many different virus threats.







Your Device might be unprotected, it can be exposed to viruses and other malware...







You are eligible for discount: 62% 1yr Renewal Discount







Offer will expire at: 10-25-2026 23:59











Renew Subscription























McAfee phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 12:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKgs1-000000006Wk-4AmB

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 12:53:33 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 12:53:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from potugalis.xyz ([185.161.251.135]:44021)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKfE2-00000000Khe-1P39

for root@mail.nl2k.ab.ca;

Sat, 24 Oct 2026 11:08:12 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=potugalis.xyz;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@potugalis.xyz;

bh=SzTUaZX93hQiWGZPkO89JOyjmG4=;

b=mYRZTrlFL/gm3yjpvtYtsb2aiYL9pKmST6RSCVlGbRaYVzczHBIBollk0elauH0ZMn8VSEnHYmYw

bxykEapYHeiU9Drd0RUDNxRBTLcoleZ6xKbXqdUX/dapxFwSvtG83gPxzRIx7/BG+uy9vvBO/zoe

p/ZF2U3RU9jrgqtNJ7yxbWBN/RXKbCbmb9Toiy7cIavQPc/mQAGfhkPQphqRAU5GkoZkJAwZT/Vz

56bab0LcfoKcA/WDTKX34Mu+IhABJleywemOb0BeCONMpB5JnQYM1+pHvd4rSWKZueTzutpE+5Xt

dU9NLl4fLK4uJnecrvjMuwt19Ex3U4u7jwDQLg==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=potugalis.xyz;

b=Qbs4AG/9ewVsTIRnEfP7FjUFShLIZh6uNE9oEZFVtTiG5OEjxbLw4PBtOoiuB1Ekud4guLphIHqG

w27hoVnKnTZTSfmIUoA1Y09Gesyp/UlefPwKvzZknbVUDJywitmd7UKZYmuGz8iq3f9OcJIGMHNU

yb5XwT2blBiofCyeAGusVD/yDweknx7HxE0knzgLG8p3bhygxKHMHEzg6ovwRE5vYnHNn1+nfP0q

5UrTKVtYQPz8mPH7R2oA3tnN0eePlHPA5bWUnoKVj5lmHIYtf2o1xyu0T4slyNVIkXtAOz0P9xuY

s0uZGpgzFddYnRH0VA4JKJyznCHK6LaBak3o7g==;

Date: 10-24-2026

From: McAfee Protection

To: root@mail.nl2k.ab.ca

Cc: root@mail.nl2k.ab.ca

Subject: root, Your antivirus protection has expired!!

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100018cbff5f80e-358cfa4d-48ec-4851-b8e8-6fba450ccf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 20.9

X-Spam_score_int: 209

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: McAfee Subscription Expired McAfeeâ„¢



Content analysis details: (20.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: keymart.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: keymart.net]

[URI: potugalis.xyz]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: potugalis.xyz]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: keymart.net]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: keymart.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: potugalis.xyz (xyz)]

0.7 LOCALPART_IN_SUBJECT Local part of To: address appears in Subject

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.161.251.135 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

Subject: {SPAM?} root, Your antivirus protection has expired!!

X-Antivirus: AVG (VPS 261024-4, 10/24/2026), Inbound message

X-Antivirus-Status: Clean













McAfee Subscription Expired























McAfeeâ„¢



Together is power.












Your McAfee Security subscription has expired!











Your McAfee subscription expired on Oct 20, 2026.







After the expiry date Your Device will become susceptible to many different virus threats.







Your Device might be unprotected, it can be exposed to viruses and other malware...







You are eligible for discount: 62% 1yr Renewal Discount







Offer will expire at: 10-25-2026 23:59











Renew Subscription























McAfee Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 12:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKgro-000000006Sz-3f5c

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 12:53:20 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 12:53:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from potugalis.xyz ([185.161.251.135]:35981)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKfES-00000000KhT-3Q7L

for doctor@nl2k.ab.ca;

Sat, 24 Oct 2026 11:08:31 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=potugalis.xyz;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@potugalis.xyz;

bh=wNV/mNi5amWz9JZkEKSZ/otEDvE=;

b=XD4WtEWFvrz4s8islvsduWhsr8C+sRzNr7m/qkYL9CLDWrw4hscx2Nb50TemcB1V/xQPYvZgfPRf

fvoOs4dL90JbN3w1c+pUlvx7YmwDovYDQEaMlI46ghee2vXr09cQrOIyPjGU1xkgLsgcazB56L5a

lUQraLKnt5ttxAVbaKSn5HdA1SjJbJRiZd7n/Gvo8ArAN7dQpLBoV/+I/8XCljK945RpXTDd9TjO

IvP75GfVKa0G3yTwfOz5J/IxsuvI0rC3KifgwzW9XcgLL0AQUOz4ZGPM1/qQEbztipH08mDl7p0y

CAanu/tJN329J40zM3hnFs+5LlP4cpuBMTQfCg==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=potugalis.xyz;

b=WurtbxQlUg1vXAPcTPHVEHRNeyAdGkx7vH+Ma5daZEANpF4jCceRXKImnsY8Bx8JR7tOJMi9kWy2

PV0asjk8PSI3fBChZDE8ACBNemOIkmQD0GWfrqvTBQKWVjePhdgrOPI6XuvaOxiZUEuE1j3h5yz4

bShgHPuYE3lzKugfFvC9H61g1qZLDHJcoSOB0W6V6IlnC2E1xir4vIFzJdWpK5Mk9rny6sfyEvEh

xYpwY3BMxMSlZevyknk/Z37s+hc1/Zr1Cc7vDQEonA25wo1fmZL5+7UfIDNBVNuYsA4iL2V44g/c

usjPI+kqWcFqGV3yggkuTk6mEKbPcZeulN6kWw==;

Date: 10-24-2026

From: McAfee Protection

To: doctor@nl2k.ab.ca

Cc: doctor@nl2k.ab.ca

Subject: doctor, Your antivirus protection has expired!!

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100018cbff5f80e-358cfa4d-48ec-4851-b8e8-6fba450ccf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 20.9

X-Spam_score_int: 209

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: McAfee Subscription Expired McAfeeâ„¢



Content analysis details: (20.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.161.251.135 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: keymart.net]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: keymart.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: keymart.net]

[URI: potugalis.xyz]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: keymart.net]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: potugalis.xyz]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: potugalis.xyz (xyz)]

0.7 LOCALPART_IN_SUBJECT Local part of To: address appears in Subject

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} doctor, Your antivirus protection has expired!!

X-Antivirus: AVG (VPS 261024-4, 10/24/2026), Inbound message

X-Antivirus-Status: Clean













McAfee Subscription Expired























McAfeeâ„¢



Together is power.












Your McAfee Security subscription has expired!











Your McAfee subscription expired on Oct 20, 2026.







After the expiry date Your Device will become susceptible to many different virus threats.







Your Device might be unprotected, it can be exposed to viruses and other malware...







You are eligible for discount: 62% 1yr Renewal Discount







Offer will expire at: 10-25-2026 23:59











Renew Subscription























McAfee phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 12:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKgry-000000006Vc-28ml

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 12:53:30 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 12:53:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from potugalis.xyz ([185.161.251.135]:35981)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKfEN-00000000KhT-3gAg

for games@nl2k.ab.ca;

Sat, 24 Oct 2026 11:08:30 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=potugalis.xyz;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@potugalis.xyz;

bh=QHXo81j5iN5QZQpkSBGweVGuofM=;

b=ljPoAxguMEHHFlbPcBx3srNRRz9QJHyCQnlmxg3bDMDiNfnUELEw0JptcqOGMrE/vVNlXKZLZHF8

ZWunlxw2IZD2642LOLE7ecPOavNHBQVY+l01SopiGP7xPootCbIyVWA3b9heUKrRDO+5XH1CHbYH

LYdpqxlaDIzwoFChcs0/cmwUHPAY5oB4qhAargVZO8P6pmYDCkDDL0+Qh2tJ763/RzgouAtFVihF

qu6XZC7M6js7MaMw9a4XLZXcccbLJMIR9Vl8sGjFxJFVovFCvIBbKaD1ZPHqKUs2Bp08pMDGIj8A

8yF2moNEyxlwezj/6erzMkeW7ft+AzAdi7ImJQ==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=potugalis.xyz;

b=ueUAGm3X/Kw+r9sD1ANgtw6DJ9odJ+4vZMPc5hacqHNv4c5FRnsOgdaYerS0NNsKxLda9zBNvRo6

C1Cl4cTon5CANf7GiKoau9jge0YleIvlTBK/4x6Dm5A+8K/NZ3SUO4LGo9BAbONyPgbt4RtCtPGa

cEATR9MCqof/2/DmVVrvOz5//mErdLnk66B9NGuuFj6asA17i4mUnRFsTeLhkSy8mKMNxvLcrDky

/QZ9CHGN3I+ZpDC9v5+RLPVel7pO7B7uq/yLTJ9OAHrUGQ0KL/LAgkS+tbBauriNL93U7xPmND1f

pJq97av6aIAfx3Ntx/FiH52ARgpUioiJ1pRRng==;

Date: 10-24-2026

From: McAfee Protection

To: games@nl2k.ab.ca

Cc: games@nl2k.ab.ca

Subject: games, Your antivirus protection has expired!!

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100018cbff5f80e-358cfa4d-48ec-4851-b8e8-6fba450ccf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 20.9

X-Spam_score_int: 209

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: McAfee Subscription Expired McAfeeâ„¢



Content analysis details: (20.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.161.251.135 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: keymart.net]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: keymart.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: keymart.net]

[URI: potugalis.xyz]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: keymart.net]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: potugalis.xyz]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: potugalis.xyz (xyz)]

0.7 LOCALPART_IN_SUBJECT Local part of To: address appears in Subject

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} games, Your antivirus protection has expired!!

X-Antivirus: AVG (VPS 261024-4, 10/24/2026), Inbound message

X-Antivirus-Status: Clean













McAfee Subscription Expired























McAfeeâ„¢



Together is power.












Your McAfee Security subscription has expired!











Your McAfee subscription expired on Oct 20, 2026.







After the expiry date Your Device will become susceptible to many different virus threats.







Your Device might be unprotected, it can be exposed to viruses and other malware...







You are eligible for discount: 62% 1yr Renewal Discount







Offer will expire at: 10-25-2026 23:59











Renew Subscription























McAfee Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 12:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKgs5-000000006bN-0o5I

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 12:53:37 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 12:53:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from potugalis.xyz ([185.161.251.135]:54327)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKfE2-00000000KhS-1OwG

for support@nk.ca;

Sat, 24 Oct 2026 11:08:12 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=potugalis.xyz;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@potugalis.xyz;

bh=q04Tj3fXRi0pYcmlOXfcAj+jlq8=;

b=wr5DwXsfzNDhx91xkey2Tn+EJz7NJlHywnMlusVKC16Vn+CZXbGo4/ITHh4pktouxcIyKu7YZZdF

ulywwlY8nlUTP3zPVNuXScb3zP2+h4aD3lfV8NA/RZB5oxm2Cq6XpykN/8Mxr1na+Apss5KXd8ti

UPTamgGPTHos1/LaSvGgYwR4PPeNBOzsBNPRAymILWrYeMT/rn1Keu3t/bCYpRZv9jqYYFZxnjRm

TMf0PaS1EF6sXFwFjN1LbvhM1rHBdSWSI+LgpC5HM9AvWXLdypbHXYpR28qm9VJXTtZxADJTk0Zx

glWnuTq/DLA12UMj7jKlm/vglLlW7FTo9A3Bug==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=potugalis.xyz;

b=jLu+tGeU+08CdWtzJOZITgPK7QI+eKv5MrV57BjjAZ4sB24MrvF15yw+xl4RiklAm0bOnPMwA3Pz

Tmylf+4V/+2NcsSJrJd0Gz3tepMEUXhO1c0qI1Kh9w9KzK2X14DriKG8fgQdUUBl3nPtnTk3Lxkc

E/xmvoQxjYKpsYtGdxdKIRet505GHyD9uMml37Kb6AekM+HVRF3ispCFdstHCGAzSkDnDLnl0HRb

sm7ju+G7AFQUS91WKUeWB/grXq/vWCPSDDtvozC3Z5VOr1twVIphZ6ss8/gJI6lWt7EST/4YOakz

sf2puxmn73bdIMhdVg12uCCYrYlWI9fG5OIAUA==;

Date: 10-24-2026

From: McAfee Protection

To: support@nk.ca

Cc: support@nk.ca

Subject: support, Your antivirus protection has expired!!

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100018cbff5f80e-358cfa4d-48ec-4851-b8e8-6fba450ccf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 20.9

X-Spam_score_int: 209

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: McAfee Subscription Expired McAfeeâ„¢



Content analysis details: (20.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: keymart.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: keymart.net]

[URI: potugalis.xyz]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: potugalis.xyz]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: keymart.net]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: keymart.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: potugalis.xyz (xyz)]

0.7 LOCALPART_IN_SUBJECT Local part of To: address appears in Subject

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.161.251.135 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} support, Your antivirus protection has expired!!

X-Antivirus: AVG (VPS 261024-4, 10/24/2026), Inbound message

X-Antivirus-Status: Clean













McAfee Subscription Expired























McAfeeâ„¢



Together is power.












Your McAfee Security subscription has expired!











Your McAfee subscription expired on Oct 20, 2026.







After the expiry date Your Device will become susceptible to many different virus threats.







Your Device might be unprotected, it can be exposed to viruses and other malware...







You are eligible for discount: 62% 1yr Renewal Discount







Offer will expire at: 10-25-2026 23:59











Renew Subscription























McAfee Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 12:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKgs8-000000006dH-1rHN

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 12:53:40 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 12:53:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from potugalis.xyz ([185.161.251.135]:35981)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKfEF-00000000KhT-2WK5

for root@nl2k.ab.ca;

Sat, 24 Oct 2026 11:08:25 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=potugalis.xyz;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@potugalis.xyz;

bh=qC7D51yhkzipxOWKtZCXSkBcvEk=;

b=PjCNmbTc223yc4bXxUVPFRJi+NwcRpGviYQ4Rsmzgw49Oc/Mi31lbD0sigUiqLjMteAAzMA3C0kv

4g7aPbUVwC7d/U+256aSfhm5nRGLxxdj3nM5c8fvGyMZPCn93vNaN7rBBZLcyU9RwGu/6J52SzlQ

oZ3csIwBdTJmcr3SExSqPml7VN58iEbq7YXqzSPJWdcxH2ljZjF3vJlchCwBb8ZeAMFM0yeLJU6Y

xEJCdva09Sa+21yzkbO41Y9Ny7qEPyAgxDv68jPxHnAMBRAh2bLTZlvv6GPM5ZjULPY4m8h/cbWT

kZu7hBnK3fLOfaZCQy51ttAZMyzUidy26K9KKQ==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=potugalis.xyz;

b=ps3naOtoj6CfHNDhdSIxPsxvtYcQKwOkiyVs+zX5wMg1uaC6tbDNcoZTOFW/Q52y9r+suvnvZg+6

aWsGhd/SsKL4WOviK5PqgxbVgdL4PABVv+brvXjUYUorWcTlvtOI26JVxw0k4GeLEmDxcTUAeg6q

pUKHvIPCsSiohBlHoGe2kS3IAer/eD6wmZFjmR1nwngSL1lxq4FgtQbN+WhaJNaIFXawCxD9lK2P

iGIqv1lyF3KJYpYkPiTiucY/sJR+Bejox1Z8T0Ux5CBAnzcW3XBSdR8X03pVpgJGDE+2PhHLbnVw

ZrYKT5TfgU6M4630nZglmNVXP9Lh9K3YUl3/Og==;

Date: 10-24-2026

From: McAfee Protection

To: root@nl2k.ab.ca

Cc: root@nl2k.ab.ca

Subject: root, Your antivirus protection has expired!!

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100018cbff5f80e-358cfa4d-48ec-4851-b8e8-6fba450ccf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 20.9

X-Spam_score_int: 209

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: McAfee Subscription Expired McAfeeâ„¢



Content analysis details: (20.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: keymart.net]

[URI: potugalis.xyz]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: keymart.net]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: keymart.net]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: keymart.net]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: potugalis.xyz]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: potugalis.xyz (xyz)]

0.7 LOCALPART_IN_SUBJECT Local part of To: address appears in Subject

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.161.251.135 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} root, Your antivirus protection has expired!!

X-Antivirus: AVG (VPS 261024-4, 10/24/2026), Inbound message

X-Antivirus-Status: Clean













McAfee Subscription Expired























McAfeeâ„¢



Together is power.












Your McAfee Security subscription has expired!











Your McAfee subscription expired on Oct 20, 2026.







After the expiry date Your Device will become susceptible to many different virus threats.







Your Device might be unprotected, it can be exposed to viruses and other malware...







You are eligible for discount: 62% 1yr Renewal Discount







Offer will expire at: 10-25-2026 23:59











Renew Subscription























McAfee Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 24 Oct 2026 12:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKgs8-000000006dH-1rHN

for dave@doctor.nl2k.ab.ca;

Sat, 24 Oct 2026 12:53:40 -0600

Resent-From: The Doctor

Resent-Date: Sat, 24 Oct 2026 12:53:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from potugalis.xyz ([185.161.251.135]:35981)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xKfEF-00000000KhT-2WK5

for root@nl2k.ab.ca;

Sat, 24 Oct 2026 11:08:25 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=potugalis.xyz;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:List-Unsubscribe:Message-ID; i=admin@potugalis.xyz;

bh=qC7D51yhkzipxOWKtZCXSkBcvEk=;

b=PjCNmbTc223yc4bXxUVPFRJi+NwcRpGviYQ4Rsmzgw49Oc/Mi31lbD0sigUiqLjMteAAzMA3C0kv

4g7aPbUVwC7d/U+256aSfhm5nRGLxxdj3nM5c8fvGyMZPCn93vNaN7rBBZLcyU9RwGu/6J52SzlQ

oZ3csIwBdTJmcr3SExSqPml7VN58iEbq7YXqzSPJWdcxH2ljZjF3vJlchCwBb8ZeAMFM0yeLJU6Y

xEJCdva09Sa+21yzkbO41Y9Ny7qEPyAgxDv68jPxHnAMBRAh2bLTZlvv6GPM5ZjULPY4m8h/cbWT

kZu7hBnK3fLOfaZCQy51ttAZMyzUidy26K9KKQ==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=potugalis.xyz;

b=ps3naOtoj6CfHNDhdSIxPsxvtYcQKwOkiyVs+zX5wMg1uaC6tbDNcoZTOFW/Q52y9r+suvnvZg+6

aWsGhd/SsKL4WOviK5PqgxbVgdL4PABVv+brvXjUYUorWcTlvtOI26JVxw0k4GeLEmDxcTUAeg6q

pUKHvIPCsSiohBlHoGe2kS3IAer/eD6wmZFjmR1nwngSL1lxq4FgtQbN+WhaJNaIFXawCxD9lK2P

iGIqv1lyF3KJYpYkPiTiucY/sJR+Bejox1Z8T0Ux5CBAnzcW3XBSdR8X03pVpgJGDE+2PhHLbnVw

ZrYKT5TfgU6M4630nZglmNVXP9Lh9K3YUl3/Og==;

Date: 10-24-2026

From: McAfee Protection

To: root@nl2k.ab.ca

Cc: root@nl2k.ab.ca

Subject: root, Your antivirus protection has expired!!

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <0100018cbff5f80e-358cfa4d-48ec-4851-b8e8-6fba450ccf1a-000000@email.amazonses.com>

Feedback-ID: ::1.us-east-1.Z66o7be85LNljN8JtXY0Tr/N3zGCoTPem8L/XbSgE7E=:AmazonSES

X-SES-Outgoing: 2026.03.05-54.240.11.18

X-Spam_score: 20.9

X-Spam_score_int: 209

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: McAfee Subscription Expired McAfeeâ„¢



Content analysis details: (20.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

[185.161.251.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.161.251.135 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: keymart.net]

[URI: potugalis.xyz]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: keymart.net]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: keymart.net]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: keymart.net]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: potugalis.xyz]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: potugalis.xyz (xyz)]

0.7 LOCALPART_IN_SUBJECT Local part of To: address appears in Subject

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.161.251.135 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} root, Your antivirus protection has expired!!

X-Antivirus: AVG (VPS 261024-4, 10/24/2026), Inbound message

X-Antivirus-Status: Clean













McAfee Subscription Expired























McAfeeâ„¢



Together is power.












Your McAfee Security subscription has expired!











Your McAfee subscription expired on Oct 20, 2026.







After the expiry date Your Device will become susceptible to many different virus threats.







Your Device might be unprotected, it can be exposed to viruses and other malware...







You are eligible for discount: 62% 1yr Renewal Discount







Offer will expire at: 10-25-2026 23:59











Renew Subscription