Health care spam from sendgrid part 2

Content analysis details: (39.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.86.188 listed in will-spam-for-food.eu.org]

[159.183.86.188 listed in will-spam-for-food.eu.org]

[159.183.86.188 listed in will-spam-for-food.eu.org]

[159.183.86.188 listed in will-spam-for-food.eu.org]

[159.183.86.188 listed in will-spam-for-food.eu.org]

[159.183.86.188 listed in will-spam-for-food.eu.org]

[159.183.86.188 listed in will-spam-for-food.eu.org]

[159.183.86.188 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.86.188 listed in dnsbl.ahbl.org]

[159.183.86.188 listed in dnsbl.ahbl.org]

[159.183.86.188 listed in dnsbl.ahbl.org]

[159.183.86.188 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.86.188 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.86.188 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.86.188 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.86.188 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} December Data Drop & Updates =?UTF-8?B?4piD77iP?=



--a426253fb447eac5c8c51b423f8fdab7d892c303138cff7b114c44f10609

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=utf-8

Mime-Version: 1.0



Holiday data drop, video demo, and our January webinar with HCCI.



( https://www.gigasheet.com/ )

Your Holiday Data Drop =F0=9F=8E=81

This month we're serving up hot slices of new data for you to experiment wi=

th. We're also bundling up a great webinar ( https://riverside.com/webinar/=

registration/eyJzbHVnIjoiamFzb24taGluZXNzLXN0dWRpby1iSTFDUSIsImV2ZW50SWQiOi=

I2OTNhZjk2OTk2Yzk5YmI4YjE5ZTZhMTkiLCJwcm9qZWN0SWQiOiI2OTNhZjk2OTMyZmFhNjVmN=

mI5NTRmZGMifQ=3D=3D ) with the Health Care Cost Institute for January.

Explore 800k+ Healthcare Rates

Our latest sample data offers you hands on access to experiment with a slic=

e of real market data. Explore a slice of payer data now, no login required=

.



View Sample Data ( https://www.gigasheet.com/sample-data/price-transparency=

-data-sample-negotiated-rates )



( https://www.gigasheet.com/sample-data/price-transparency-data-sample-nego=

tiated-rates )

Nationwide Hospital Prices, One Giant Sheet

Gigasheet=E2=80=99s latest hospital data analytic capabilities consolidates=

and normalizes market data nationwide. Easily compare across payers, syste=

ms, and procedures in just a few clicks. We're also gearing up for new hosp=

ital data ( https://www.gigasheet.com/post/hospital-price-transparency-chan=

ges-for-2026 ) formats that will go into effect in 2026.

( https://gigasheet.com/videos-webinars?open=3Dhospital )

January Webinar with HCCI

Since 2011, The Health Care Cost Institute ( https://healthcostinstitute.or=

g/ ) has been a trusted source for clear information that researchers, poli=

cymakers, and journalists use to explain what shapes health care spending i=

n the US. Hear their assessment and recommendations for getting the most ou=

t of price transparency analytics.



REGISTER NOW ( https://riverside.com/webinar/registration/eyJzbHVnIjoiamFzb=

24taGluZXNzLXN0dWRpby1iSTFDUSIsImV2ZW50SWQiOiI2OTNhZjk2OTk2Yzk5YmI4YjE5ZTZh=

MTkiLCJwcm9qZWN0SWQiOiI2OTNhZjk2OTMyZmFhNjVmNmI5NTRmZGMifQ=3D=3D )



( https://riverside.com/webinar/registration/eyJzbHVnIjoiamFzb24taGluZXNzLX=

N0dWRpby1iSTFDUSIsImV2ZW50SWQiOiI2OTNhZjk2OTk2Yzk5YmI4YjE5ZTZhMTkiLCJwcm9qZ=

WN0SWQiOiI2OTNhZjk2OTMyZmFhNjVmNmI5NTRmZGMifQ=3D=3D )



Hits from the Blog =E2=86=92 ( https://www.gigasheet.com/blog )



Hospital Price Transparency Changes for 2026 ( https://www.gigasheet.com/=

post/hospital-price-transparency-changes-for-2026 )

What the upcoming 2026 CMS requirements mean for hospitals, payers, and ana=

lytics teams that rely on machine readable files.



Price Transparency Data for Personal Injury Cases ( https://gigasheet.com=

/post/price-transparency-data-for-personal-injury-cases-practical-applicati=

ons )

How attorneys and experts apply payer negotiated rate data to evaluate reas=

onable value in medical damages disputes.



Contract Data Analysis for Self Insured Employers ( https://gigasheet.com=

/post/contract-data-analysis-self-insured-employers )

How self funded employers combine claims and contract data to benchmark the=

ir networks and negotiate better deals with payers.



Meme of the Month



Follow us on Instagram for more @gigasheet ( https://instagram.com/gigashee=

t )



( https://instagram.com/gigasheet )



Have questions? Need help with Gigasheet? Check out our Support site ( http=

s://support.gigasheet.com/support/home ).



Wishing you happy holidays,

The Sheetheads



Love Gigasheet?

Leave us a review ( https://www.g2.com/products/gigasheet/take_survey )



Follow Us On



( https://www.linkedin.com/company/gigasheet ) ( http://www.instagram.com/g=

igasheet ) ( http://www.x.com/gigasheet ) ( https://www.youtube.com/channel=

/UCqDnctrE3ZN4pEsLeJ1aCtQ )



Website ( https://www.gigasheet.com/ ) | Support ( https://gigasheet.freshd=

esk.com/support/home ) | Blog ( https://www.gigasheet.com/blog ) | Login ( =

https://app.gigasheet.com/login )



Message sent by Gigasheet, Inc. at 25 Catoctin Circle Southeast #1086, Lees=

burg, VA, USA. Copyright =C2=A92025 Gigasheet, Inc., All rights reserved.



You are receiving this email because you opted in via our website. DGAF abo=

ut these emails? Update your subscription preferences ( https://u21900510.c=

t.sendgrid.net/asm/?user_id=3D21900510&data=3DD8PDZ_eSUHOU8-0zjVL-9lopSH1jo=

qeiPM4qnSxy1KBoMDAwdTAwMAYoJiS9Ot7sd32uGC6ySiDAkBcjoIe9Fsb8bZCit-2ePMCFeY8P=

MoAQfzzfJT95yscg5hOyv1XaYyEyVGdWnaIhlXDiGbRhPTzGVQz-BKiXWBAWEM7mur-g2lY8xT8=

m6X7khKWGjHzCcZoFR_DYsd_d_blbwzhnjYi6Tp1eAKLAfpRG1MJ6ywbX6WYBoUAVtViFcj8vhB=

Igx5MD1i-kPZTnwrli834XduMPYb5K2AeJWNAUy7Yf3OruGlQkzCUactH2OqTOIT2CZjYw295Sl=

Lr-iKz5DbFDc9Q2bl1IN_CP3PvvoOROuIZcAZIvpaECbgV8NJWBXzafOFZmWkpxG5bJ_nsxNgRB=

Health care spam from sendgrid part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Wed, 17 Dec 2025 09:29:00 -0700

Received: from wfbtrsbc.outbound-mail.sendgrid.net ([159.183.86.188]:10342)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVuNu-00000000PeH-18N0

for dave@nk.ca;

Wed, 17 Dec 2025 09:28:26 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gigasheet.com;

h=content-type:date:from:mime-version:subject:reply-to:to:

list-unsubscribe:list-unsubscribe-post:cc:content-type:date:from:subject:to;

s=s1; bh=ofMHPqiz2YILwfkFZq6w4CFPgcu/4xxw334r9C/DSR8=;

b=DG3QeDAxge6Cp7gcU0zDzuIHHhTeI4UuCODDNvrS0fYPQ6IkcVhDppTJLxtgDA8UwKZQ

vX5pCJgiwhezbR8EBBbtfRwNi6y0HthHJwZ0/2RtyYlk7p+7M2BxDjcycohAcETzgXHEy4

bAmaFkyS+kHeqpZmwm2jL/2bCF9pNst5S8cfPFtpivAB+VVYE0RGS2C1yPmkCYjw0btJX1

N+lY1b+dbMGJJqdbcMlmOkm7CoxTfRSgOlJzNXSSrTGXeSpAKcldj4imSRde2uVXNSohxB

ju5ftobBnQ6fmMruDN3+be1F9tBLOMaFE/W/Xx9lihcL6R2ItXRdJcNAP3rByoIA==

Received: by recvd-5f4d8d6f66-cnbhh with SMTP id recvd-5f4d8d6f66-cnbhh-1-6942D9E3-66

2025-12-17 16:27:15.304810818 +0000 UTC m=+2575914.121180360

Received: from MjE5MDA1MTA (unknown)

by geopod-ismtpd-12 (SG) with HTTP

id oOVJSmoqTlyxmwG7ykhlaw

Wed, 17 Dec 2025 16:27:15.226 +0000 (UTC)

Content-Type: multipart/alternative; boundary=a426253fb447eac5c8c51b423f8fdab7d892c303138cff7b114c44f10609

Date: Wed, 17 Dec 2025 16:27:16 +0000 (UTC)

From: Gigasheet

Mime-Version: 1.0

Message-ID:

Subject: December Data Drop & Updates =?UTF-8?B?4piD77iP?=

Reply-To: info@gigasheet.com

X-SG-EID:

=?us-ascii?Q?u001=2E+dEkkip2xPYWyzQ39Mqhd5sShWKtdOhoo0yTKU3Nmh5w3Sk1LJwZno3fF?=

=?us-ascii?Q?8TiYE3dqrZKgwcwbc0Uv9ViZ54PbZel7NWl6HOC?=

=?us-ascii?Q?0zP8xM+Mo58Xm1RfeKp=2F9c21WxmN9ai6aJ5EzSS?=

=?us-ascii?Q?peEjaG4h7lK6oYjan62PhS+BVkSLWGNLWQRF0XG?=

=?us-ascii?Q?unqwAmz+e6E12tOnET=2FnfiC5B5DVPnz4SF0WgWf?=

=?us-ascii?Q?n7vJzqd+b+ZaMvKb5U49l4=3D?=

X-SG-ID:

=?us-ascii?Q?u001=2EXwhBPNhCejkv4+fVosb2QVfR16Qxp9CrA7PjDe5zzeI=2F0IZCBsPXtgHbA?=

=?us-ascii?Q?oGIj+Rs6OlRm=2FcaEsw=2FcuQFYvtovQxG2Eq1SU7B?=

=?us-ascii?Q?65rZKu5ZeoNq8Ti1S9MX+R5OO9Fx46CNs71NU03?=

=?us-ascii?Q?3kDYd9CU4A8isODR7epi2=2FS62DCv2XHHE=2FncSiw?=

=?us-ascii?Q?GJu2cAbcIvubYBFYVwqU6RHTlF4mx1woydqJSa6?=

=?us-ascii?Q?0107hE3HZNnvMC82bgg19RUjdbaJgNnO7F5z=2FW1?=

=?us-ascii?Q?fZzBlidrtM6H+rC016defEQWDXA+HcPVuksyaZA?=

=?us-ascii?Q?TADW6Mro2drbc81kHD20Py2PqtU616NSoTNntTy?=

=?us-ascii?Q?ahNfFluss5yCIUZeliwk2WZfgk+5AvBCpjp8jeC?=

=?us-ascii?Q?t2GIpaOEJjmC4NI1HleNfV4c2iY3iy3ROWyYhVJ?=

=?us-ascii?Q?X4u8pFREMEF0StBNqCbV1WkWrPV3SYFRVVZOn4a?=

=?us-ascii?Q?KGhp=2F7A0akt0eL7yMe50aEcRjRYemsHa2kP2bQq?=

=?us-ascii?Q?XMROxC52YLj+yaMhqsgGJMrR0r=2Fno=2FIZ3Otr2Vv?=

=?us-ascii?Q?gt=2F7G1yAlWevAPapixid6tD539skflShAJT2Mex?=

=?us-ascii?Q?mMoUMi40AUWEEX=2FLyM0e+8sSr=2F=2Fv72qZjzdYzvB?=

=?us-ascii?Q?Po2X+TAK95IZL=2FWgVBYtuTpwnNLfU2ODaJBVDrk?=

=?us-ascii?Q?IhioOf5pYKy64IV=2FbavGlySiS6NFwl=2FclcWb3zO?=

=?us-ascii?Q?kKoj2pjBALxhq=2FUnZgQH9kHlrBGMQG8A2vUm7vy?=

=?us-ascii?Q?A=2Fl1G6K=2FvXBi0igQ+Mq0owen35UVoTBwwNZznQI?=

=?us-ascii?Q?E3QKAgqX1pEwcPHyizkq0Rs2xiclZRw=3D=3D?=

To: dave@nk.ca

X-Entity-ID: u001.kxJLst92F2EA+lhscpZ01Q==

List-Unsubscribe:

=?us-ascii?Q?=3Chttps=3A=2F=2Fu21900510=2Ect=2Esendgrid=2Enet=2Flu=2Funsubscribe=3Foc=3Du001=2EmfFD?=

=?us-ascii?Q?AxB-G7MVy4GmjDQnXiV5dcV7RLO1Ww9bOzhTtN8?=

=?us-ascii?Q?KGokyM4YGpSj3NoT2oVJUks2vXUWJJZgZs9bwng?=

=?us-ascii?Q?g25HCcvNZ7DgGfq-gzmXeVIYe4FRS8Y2Q25tiN0?=

=?us-ascii?Q?6s94hLxKka553Un2ptvWEeBXr3dybFKOHWKVbdl?=

=?us-ascii?Q?homaxHgUgY0nMYWGGcCC5RghfNvxiY4eYqeo05b?=

=?us-ascii?Q?bB7BbDNI3j9GHTYhJQI8Ew7BvSSOI2OcUyhi5mM?=

=?us-ascii?Q?gLNE3aizX-yUA=5FVrE-kStm3hFQvKpSxNRUHnLzP?=

=?us-ascii?Q?69VVYo3LMxRuvSTZEON9ula1fpbcmvxSNjq=5FAPX?=

=?us-ascii?Q?0bT4gb25gaPad=5Fw79-2CnoVyxwAAeiOE9lIXGaG?=

=?us-ascii?Q?TBI2HuKV6IW-K1nRR6qMNHKmOhObxy-SR2fS8pJ?=

=?us-ascii?Q?euiBp7eytXEQatzbdBRNRPTor9PexejoZ6TEh47?=

=?us-ascii?Q?kDZnoN8GYIOgCAIVbrJqooGFR1ORcQEpwkNJeHx?=

=?us-ascii?Q?qU1BNvbMNWAikhsYCsaWUAjbMiJfCGqlhy8Peog?=

=?us-ascii?Q?58ZEtDdFTwtiIbSv7hRKgSpZKDBBJvS0TU37ZDO?=

=?us-ascii?Q?pYG3gu2wsVCL7bVvpuK7dgV5aNsld8ll2fL-eJ3?=

=?us-ascii?Q?gc7KRbYwHHFkK-0oRVkqS0FaENGRe3gGvyLrkAJ?=

=?us-ascii?Q?54aqPuS5NRkx5ANz5ebUVFsa7Rbdv-=5F3u8VQJRY?=

=?us-ascii?Q?slQ0LHYgOtAk6cu7FkpnThmGRtkYzCVtr7VMuPF?=

=?us-ascii?Q?gG1VJNBDuj-am9AjZXS=5F9TSIpw0jgrMbYLpcQVI?=

=?us-ascii?Q?lELDDgsExk-zrVXT7m-ohGLTjTH4o1eY74Z0Dvs?=

=?us-ascii?Q?XpYEWi6a-cR2thQu5kEWj=5F6D-U4y0T6h=5FGPbsKA?=

=?us-ascii?Q?WISAfdazMo8pU=5FqDAdBM786TR9UU7GPf5TjEu9d?=

=?us-ascii?Q?bfKm7CkWdHCIKB04XdiZCBWL2-x5K4VWOohIDsb?=

=?us-ascii?Q?0vtqGL3xsg8JH2qgj1=5FXqX5zqx6Xjh4vgA9nu40?=

=?us-ascii?Q?GAo14PdkHiO2FGmgtiKia7jKUaro1fWchgAPM8C?=

=?us-ascii?Q?smoTiYOd3WJlpeceD2=5F8MvxVIqNy57EHiRW=5FG40?=

=?us-ascii?Q?3nBMcWbD0o5yc6B=5Fx09xXAaBuaesvBWpUm13VXY?=

=?us-ascii?Q?fP5=5FolfvpVkBrQOg6qhePIGOk3HD-NZwv6fZP0m?=

=?us-ascii?Q?DjTE=5FbnTj73t83zmXmtIAGY=5F3QhgGRHqgQdHPIC?=

=?us-ascii?Q?g58Xwqg3H1GECD7MKwbD09ZNafmb=5FJtcC5hpfHS?=

=?us-ascii?Q?c0zo3GJTDn=5FTzEyqnPv=5FSrx1a5qA3pnf9DSUY=5F9?=

=?us-ascii?Q?2mRMkZiXJ1nCVj3OCmbMjNIGM17d8ATYER=5FsfhE?=

=?us-ascii?Q?4Ld-6-U0afY=5Fh-YPONvK0jcVqt4tfUppL1yR=5FKk?=

=?us-ascii?Q?vxG1ZogRE92GDJOksiKUe=5FVd4jxKq=5FHLGuPse6N?=

=?us-ascii?Q?8SzPsCoW7IaC0OuM3j5a3QXahRPGKHtdTpp5jjf?=

=?us-ascii?Q?17TRUrqBK4KS3WdxFIS0D5F4beJbIp1nNTdBVjE?=

=?us-ascii?Q?0pu9YFgZfT=5FP9V1TpMS5QshvhDEUqBx7Lya2Dl3?=

=?us-ascii?Q?zH44OhFqUS0a0-UPMFUrMLpFlxzIiCkNgX2bs0F?=

=?us-ascii?Q?5jtL6pqm866ePS11MuPyBtkwXvMzT-fJEeGxo5W?=

=?us-ascii?Q?zkE5eVEzlA-=5Fj8wIvttgv-qc3Jv3UJLid5km3m6?=

=?us-ascii?Q?XbXKq8jSQvAk0zqzX2BAuUaJMvqbJ-TFbJSU3t0?=

=?us-ascii?Q?AJGnYnUiZ6gD7O3Xt7ICVXznMCjSJToZTo9SHEC?=

=?us-ascii?Q?PpuDKDjJr9RMHRVmDG0IjNkr0Lns1PFpl9DruaW?=

=?us-ascii?Q?Exe=5FA=3E=2C=3Cmailto=3Aunsubscribe=40em9249=2Egigas?=

=?us-ascii?Q?heet=2Ecom=3Fsubject=3D21900510=2ES-Vy9u0WavE8-?=

=?us-ascii?Q?4s0prstDDJufDGuwTNHXaqPiQ9OfNloMDAwdTAw?=

=?us-ascii?Q?MECg5k-23rHSb42XOle9J1Hd7r7esVM56zgexdS?=

=?us-ascii?Q?nALmk5pHFJ=5Fo3UoHfR=5FAmitufYo6qhRWJdIXD2v?=

=?us-ascii?Q?U6iKhp5m9RjpDteY1aLUAS70veVAKE=2EMh3F5b1u?=

=?us-ascii?Q?XwVV7fKPKUf-LgZTwx3xBfBYta01GDQmdYtoMDA?=

=?us-ascii?Q?wdTAwMMBijtDtB3NUJiVFlnY=5FxkvO3CM9lGginz?=

=?us-ascii?Q?g7AQeixZN-lFrrRmxLInpAAYDWr2ojt4kGWzY-e?=

=?us-ascii?Q?Lgt2eL4xsKmtGgMBKUWhYNcotD=5FK34B7keV9swh?=

=?us-ascii?Q?Wv7iqSLlueq2SW--57V8OO3LJP=5FGPm1xF1AL14q?=

=?us-ascii?Q?9HeLXv1q8K9uH9d2yY0XfkWlsNV4mNRap8RqzUD?=

=?us-ascii?Q?u=5FO2HHzEh8rbQ8CKQj2N9f73QA8oePe0HJWLNGD?=

=?us-ascii?Q?M1Oz2dy=5FPsz75=5FBHnDmRxWSljcxMLHfMsPI5Yso?=

=?us-ascii?Q?0A3mV2ZULD0J2CYc7TIr0kIyjVdRhLGvhEJxSIV?=

=?us-ascii?Q?f5wJcFpQHzgigiVXBbaEbgs1tIgXxBtQwOtNO3d?=

=?us-ascii?Q?RiQ=5FlMbaGj68ICRdiGksYV=5FayWUtqKelhQE64gu?=

=?us-ascii?Q?1oL4gZp5fSKZa1RBZ0yCV4WYH7VSz2BzPHACsd1?=

=?us-ascii?Q?hV0GmB8F9w4FeA7KuPAbXIaEqkvsYO-feGwFTGC?=

=?us-ascii?Q?iE01cFFR-jZVnhAd8D0Z=5FAvezNekRnGsnXNiEX0?=

=?us-ascii?Q?68LgM0EzC=5FUQqkrBLNcS8IxWGJa9c9jC5woRgdy?=

=?us-ascii?Q?BHCfHqnq5L7zLEn02QrjsHnS85HZbuk2e5MfhPz?=

=?us-ascii?Q?xZZ5MnhCx27H2dfLPiCMxml3OQosyPkHgbgQlrJ?=

=?us-ascii?Q?JWYf3zcgQe2hnxKGfdUCkEbfcUGMslThHckZFrA?=

=?us-ascii?Q?IoN--HHAmiTiymVqeM0L1OiYYGFvaqEVltRdDMz?=

=?us-ascii?Q?4vKJ21fjjACZvFdE=5Fha2OJOY7QSxY2ese5qQ7JJ?=

=?us-ascii?Q?0OfV465xDj2DaIj1XNeOAlaTAuTdlm2Kmil2bdj?=

=?us-ascii?Q?dpWhkEeR0Sq260d0DHx3rvNJcjlh-d7owTKCieE?=

=?us-ascii?Q?SLZWSOYPBRDEhhBlNF0br1cpC-71vGMRN=5FmnPEm?=

=?us-ascii?Q?SxL3cJe9mvsrahoc7Ca3vSxY9z9Gg1BlPfVCHC9?=

=?us-ascii?Q?dGqPgSeqYDYuDEXvi9BC7=5FwAF7Y3cJljYDTMVic?=

=?us-ascii?Q?JPVm-nRIv5JMAdHEqKSl=5FeyAEY0IpUE=5FMiI=5FOSI?=

=?us-ascii?Q?PjHbrkiQxkFJY=3D=3E?=

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Spam_score: 39.1

X-Spam_score_int: 391

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Holiday data drop, video demo, and our January webinar with

HCCI. ( https://www.gigasheet.com/ ) Your Holiday Data Drop 🎁 This month

we're serving up hot slices of new data for you to experiment with. We're

also bundling up a great webinar ( https://riverside.com [...]

Follow up spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Dec 2025 06:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVrlM-00000000DNc-3vpN

for dave@doctor.nl2k.ab.ca;

Wed, 17 Dec 2025 06:40:20 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Dec 2025 06:40:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f52.google.com ([209.85.216.52]:48464)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVr48-0000000031n-2MQN

for doctor@doctor.nl2k.ab.ca;

Wed, 17 Dec 2025 05:55:50 -0700

Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-34c277ea011so4664067a91.1

for ; Wed, 17 Dec 2025 04:54:55 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765976089; x=1766580889; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=4olvvuiY/FGW/ogYbNupiys/WSsDTevY5mmuS95qLDo=;

b=k4UBCFOvz5o+pjNYZ6aiz488KZI08dIKXRJjs9/EY05AUAy19pxaC9J+59sbbHJcrD

w0+m3fpRmHRUScYTwZE8xiBAO5T/joiVgGsqezPSsIBuV5UGBvokCfGMnvIXFFWgvWgW

pUw37cqTGmh+TMFeQ9PKisHHK+szKITIyKBCX/nxOB3+lU2WunE/2+rBM52jsDozTNtI

Cgtvu+jF63LiChyMcGeBl5kMCF8yI2yxr+w7g+edcakc4h4uFEL7np/kJkAh7NMVMGHW

OlDo9pzh5fu/ObvJnKjd3brJ6k3R++zHODGvoVf4TCQFfkMkNtnxgvqSsFV4knRPQKyU

MC3w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765976089; x=1766580889;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=4olvvuiY/FGW/ogYbNupiys/WSsDTevY5mmuS95qLDo=;

b=f5WbBs0Ul46jbPUN/GQGaddnRJTH3PDH4xks+S28bWtdpdUHIEhedcXPQIqV93AEJI

8beh5SGRTgrI6NOTwa6/6+8KeWKP/m9e96ob7n3WJkUuU/b5ksxOIfZc+mDmd+glTwZi

z///QD0FNYD+GsuQzBoK0sCt+ZGOkXnFDa3opX6QfqqPSaOUHy2JxnbxnNL0Xa5jZveq

HkfEFMgdzshxkEODXAalalA+sReSanBmIJq9j+d3xw9xkW7MwPFxGUBTjddcvQRAsTG9

hQi8tpdnEl2eMnuwENYPoIBWKzI4gXFd/KCIfFjQ+EKGtF7/s2w2SsoiJNDeOloCX4GC

xapQ==

X-Forwarded-Encrypted: i=1; AJvYcCXhPEUROk8c441+9Z9C8PwTEBGXhRleLqa0nWP9uFDryiSXyQ1Ds7U0hhntEL9DVbvYgpvNfCA=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxUUGmwQFnnegGO+e7KCx8/QaTiI8dkl9DsECaGW5pXgNNILMmM

6bhKA/1GhJv4zAQ7A5bvl4UU1tKc3WObXW1hz24KFowgl9kmtmLGCs+gnx9P2Fw8tHbvybxWmER

LyYoUmn9ysvMdnGshEO3MwTZNRNh0RKs=

X-Gm-Gg: AY/fxX5JPa7mC+rP3EAffZjI+td8a5wzuHu3EsACV2HDkhbk6hBrmHVIvn6qQNMS6s2

efEWnqRgP2iMJdxAT/LT+9s4cdZFgQOTf1SUNVplAfFmHN7jW+4YxjO/CA6TPqh6mvYAoDxtGZp

miE0QzJRgiphgfztS+TNuokJaTG9mT6wK4g58UZknw/oKbCjzMcIYklNhFyFHWBdX/5SrJ83/BY

/Os91rfCjw7gDCWvPqC8fy1/wogX6HcMAs51sssdeFEoIGtY8mghRRcKnpOk/N12YafTEqJTPDt

GVzCWsnqECqMWwL9JtYD6GE1D7pN/h1mlZyFd0/zntM9pKXj39K89bsbQiQooo2hWdz0EWco8jT

C

X-Google-Smtp-Source: AGHT+IHkEIyAlQPO4/CdHmWqcwlDd8QbYoOZ+mfUtQwaAXohiUuc5QoCAbcCJL8GaR4iCFUf0B9J7NuZiS37noPr174=

X-Received: by 2002:a17:90b:4c:b0:340:c64d:38d3 with SMTP id

98e67ed59e1d1-34abd6e0220mr18323269a91.12.1765976089099; Wed, 17 Dec 2025

04:54:49 -0800 (PST)

MIME-Version: 1.0

Reply-To: danielharris40000@gmail.com

From: Daniel Harris

Date: Wed, 17 Dec 2025 13:54:37 +0100

X-Gm-Features: AQt7F2oh2lpOb4cQkvdQZOEu9ro9zK7jIrC4AE62NSiCEsDhK9hAP0KyoUPvjGE

Message-ID:

Subject: Did you receive the message I sent earlier?

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000007902c906462559e2"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 10.5

X-Spam_score_int: 105

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Did you receive the message I sent earlier? Did you receive

the message I sent earlier?



Content analysis details: (10.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.52 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.52 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[danielharris40000(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[andrewthomas1840(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[andrewthomas1840(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} Did you receive the message I sent earlier?



--0000000000007902c906462559e2

Content-Type: text/plain; charset="UTF-8"



Did you receive the message I sent earlier?



--0000000000007902c906462559e2

Content-Type: text/html; charset="UTF-8"



Did you receive the message I sent earlier?




--0000000000007902c906462559e2--

Followup spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Dec 2025 06:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVrlM-00000000DNc-3vpN

for dave@doctor.nl2k.ab.ca;

Wed, 17 Dec 2025 06:40:20 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Dec 2025 06:40:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f52.google.com ([209.85.216.52]:48464)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVr48-0000000031n-2MQN

for doctor@doctor.nl2k.ab.ca;

Wed, 17 Dec 2025 05:55:50 -0700

Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-34c277ea011so4664067a91.1

for ; Wed, 17 Dec 2025 04:54:55 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765976089; x=1766580889; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=4olvvuiY/FGW/ogYbNupiys/WSsDTevY5mmuS95qLDo=;

b=k4UBCFOvz5o+pjNYZ6aiz488KZI08dIKXRJjs9/EY05AUAy19pxaC9J+59sbbHJcrD

w0+m3fpRmHRUScYTwZE8xiBAO5T/joiVgGsqezPSsIBuV5UGBvokCfGMnvIXFFWgvWgW

pUw37cqTGmh+TMFeQ9PKisHHK+szKITIyKBCX/nxOB3+lU2WunE/2+rBM52jsDozTNtI

Cgtvu+jF63LiChyMcGeBl5kMCF8yI2yxr+w7g+edcakc4h4uFEL7np/kJkAh7NMVMGHW

OlDo9pzh5fu/ObvJnKjd3brJ6k3R++zHODGvoVf4TCQFfkMkNtnxgvqSsFV4knRPQKyU

MC3w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765976089; x=1766580889;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=4olvvuiY/FGW/ogYbNupiys/WSsDTevY5mmuS95qLDo=;

b=f5WbBs0Ul46jbPUN/GQGaddnRJTH3PDH4xks+S28bWtdpdUHIEhedcXPQIqV93AEJI

8beh5SGRTgrI6NOTwa6/6+8KeWKP/m9e96ob7n3WJkUuU/b5ksxOIfZc+mDmd+glTwZi

z///QD0FNYD+GsuQzBoK0sCt+ZGOkXnFDa3opX6QfqqPSaOUHy2JxnbxnNL0Xa5jZveq

HkfEFMgdzshxkEODXAalalA+sReSanBmIJq9j+d3xw9xkW7MwPFxGUBTjddcvQRAsTG9

hQi8tpdnEl2eMnuwENYPoIBWKzI4gXFd/KCIfFjQ+EKGtF7/s2w2SsoiJNDeOloCX4GC

xapQ==

X-Forwarded-Encrypted: i=1; AJvYcCXhPEUROk8c441+9Z9C8PwTEBGXhRleLqa0nWP9uFDryiSXyQ1Ds7U0hhntEL9DVbvYgpvNfCA=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxUUGmwQFnnegGO+e7KCx8/QaTiI8dkl9DsECaGW5pXgNNILMmM

6bhKA/1GhJv4zAQ7A5bvl4UU1tKc3WObXW1hz24KFowgl9kmtmLGCs+gnx9P2Fw8tHbvybxWmER

LyYoUmn9ysvMdnGshEO3MwTZNRNh0RKs=

X-Gm-Gg: AY/fxX5JPa7mC+rP3EAffZjI+td8a5wzuHu3EsACV2HDkhbk6hBrmHVIvn6qQNMS6s2

efEWnqRgP2iMJdxAT/LT+9s4cdZFgQOTf1SUNVplAfFmHN7jW+4YxjO/CA6TPqh6mvYAoDxtGZp

miE0QzJRgiphgfztS+TNuokJaTG9mT6wK4g58UZknw/oKbCjzMcIYklNhFyFHWBdX/5SrJ83/BY

/Os91rfCjw7gDCWvPqC8fy1/wogX6HcMAs51sssdeFEoIGtY8mghRRcKnpOk/N12YafTEqJTPDt

GVzCWsnqECqMWwL9JtYD6GE1D7pN/h1mlZyFd0/zntM9pKXj39K89bsbQiQooo2hWdz0EWco8jT

C

X-Google-Smtp-Source: AGHT+IHkEIyAlQPO4/CdHmWqcwlDd8QbYoOZ+mfUtQwaAXohiUuc5QoCAbcCJL8GaR4iCFUf0B9J7NuZiS37noPr174=

X-Received: by 2002:a17:90b:4c:b0:340:c64d:38d3 with SMTP id

98e67ed59e1d1-34abd6e0220mr18323269a91.12.1765976089099; Wed, 17 Dec 2025

04:54:49 -0800 (PST)

MIME-Version: 1.0

Reply-To: danielharris40000@gmail.com

From: Daniel Harris

Date: Wed, 17 Dec 2025 13:54:37 +0100

X-Gm-Features: AQt7F2oh2lpOb4cQkvdQZOEu9ro9zK7jIrC4AE62NSiCEsDhK9hAP0KyoUPvjGE

Message-ID:

Subject: Did you receive the message I sent earlier?

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000007902c906462559e2"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 10.5

X-Spam_score_int: 105

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Did you receive the message I sent earlier? Did you receive

the message I sent earlier?



Content analysis details: (10.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.52 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.52 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[danielharris40000(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[andrewthomas1840(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[andrewthomas1840(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} Did you receive the message I sent earlier?



--0000000000007902c906462559e2

Content-Type: text/plain; charset="UTF-8"



Did you receive the message I sent earlier?



--0000000000007902c906462559e2

Content-Type: text/html; charset="UTF-8"



Did you receive the message I sent earlier?




--0000000000007902c906462559e2--

German language spam from Google Gmail part 2

ANMERKUNG: Sie k=C3=B6nnen nach =E2=80=9EEdwin Castro=E2=80=9C suchen, dem =

Gewinner des

Rekord-Powerball-Jackpots in H=C3=B6he von 2,04 Milliarden US-Dollar, der a=

m 7.

November 2022 in Kalifornien gewonnen hat.



Bitte senden Sie uns die folgenden Informationen, damit wir Ihre Daten an

die Bank weiterleiten k=C3=B6nnen, um Ihnen eine Bankkarte mit einem Guthab=

en

von 2,5 Millionen US-Dollar auszustellen.

VOLLST=C3=84NDIGER NAME:

TELEFONNUMMER:

ADRESSE:

NATIONALIT=C3=84T:

GESCHLECHT:

ZIVILSTAND:

BERUF:



Mit freundlichen Gr=C3=BC=C3=9Fen,

Edwin Castro Stiftung

Edwin Castro, Jackpot-Gewinner



--000000000000e9d06a064624a539

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv style=3D"color:rgb(34,34,34)">Herzlichen Gl=C3=BCckwunsch! Sie geh=C3=B6=

ren zu den ausgew=C3=A4hlten Beg=C3=BCnstigten.

b(34,34,34)">Diese Nachricht erhalten Sie im Namen von Edwin Castro, dem Ge=

winner des Powerball-Jackpots in H=C3=B6he von 2,04 Milliarden US-Dollar. I=

ch bin der gr=C3=B6=C3=9Fte Powerball-Jackpot-Gewinner in der Geschichte de=

r USA. Ich habe diese Lotterie am 7. November 2022 gewonnen.

e=3D"color:rgb(34,34,34)">Ich m=C3=B6chte Sie informieren, dass Google in Z=

usammenarbeit mit Microsoft auf meinen Wunsch hin Ihre E-Mail-Adresse erhal=

ten hat, damit Sie eine Spende von 2,5 Millionen US-Dollar erhalten k=C3=B6=

nnen. Ich m=C3=B6chte Ihnen diese 2,5 Millionen US-Dollar f=C3=BCr wohlt=C3=

=A4tige Zwecke und zur Unterst=C3=BCtzung Bed=C3=BCrftiger in Ihrer Region =

zukommen lassen, um die Welt f=C3=BCr alle zu einem besseren Ort zu machen.=



34,34,34)">Weitere Informationen finden Sie auf der folgenden Website, dami=

t Sie an der Spende von 2,5 Millionen US-Dollar nicht zweifeln.


=3D"color:rgb(34,34,34)">ANMERKUNG: Sie k=C3=B6nnen nach =E2=80=9EEdwin Cas=

tro=E2=80=9C suchen, dem Gewinner des Rekord-Powerball-Jackpots in H=C3=B6h=

e von 2,04 Milliarden US-Dollar, der am 7. November 2022 in Kalifornien gew=

onnen hat.


color:rgb(34,34,34)">Bitte senden Sie uns die folgenden Informationen, dami=

t wir Ihre Daten an die Bank weiterleiten k=C3=B6nnen, um Ihnen eine Bankka=

rte mit einem Guthaben von 2,5 Millionen US-Dollar auszustellen.

style=3D"color:rgb(34,34,34)">VOLLST=C3=84NDIGER NAME:

olor:rgb(34,34,34)">TELEFONNUMMER:
=

ADRESSE:
NATIONALIT=C3=84T:

iv style=3D"color:rgb(34,34,34)">GESCHLECHT:

4,34,34)">ZIVILSTAND:
BERUF:
<=

div style=3D"color:rgb(34,34,34)">

4)">Mit freundlichen Gr=C3=BC=C3=9Fen,

4)">Edwin Castro Stiftung
Edwin Cas=

tro, Jackpot-Gewinner




--000000000000e9d06a064624a539--

German language spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Dec 2025 06:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVrfp-00000000AvX-0UXH

for dave@doctor.nl2k.ab.ca;

Wed, 17 Dec 2025 06:34:37 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Dec 2025 06:34:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f177.google.com ([209.85.128.177]:51369)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVqHZ-00000000MjQ-06cA

for bin@nl2k.ab.ca;

Wed, 17 Dec 2025 05:05:38 -0700

Received: by mail-yw1-f177.google.com with SMTP id 00721157ae682-78c6a53187dso59520167b3.2

for ; Wed, 17 Dec 2025 04:04:43 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765973077; x=1766577877; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=LYjT9vludADb+M/QGIHEzo4moGy11Q1PyrEa3gkS3IE=;

b=Mw1fjpi+Q/NtZa9NKvEvSmDTBXtqVnvNAZh0TLTuKLq1nbEUQ6UlhuJsl/eYPTYWgb

8e4HIs8dUkxAfAOkjDURtDGOTh5AutmMgGlENz4M7h6F5PPFx9DFp4HaRCJMDCP3QbfM

ZWrHI4i59/RLOeUKVs4Cbn9bqbU6JaaqfRQuC+FzWvSn970D8UIDdaF3vZhBulJ3K9Jw

bAB9sM1ZnTyJ6ay3EXs+OrV7W+goNCXecGGoR0TPECBST8KFwBex3RYUtnP9fRyyzCVI

uKguQ5QIMOz01/8LgJypUnQu4l1P3p+P7/v6EFpGJtRXZ8oI5tr3Br/OZxvebo6B/Q0D

scbQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765973077; x=1766577877;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=LYjT9vludADb+M/QGIHEzo4moGy11Q1PyrEa3gkS3IE=;

b=I6J+yfRA2RlLuJgfJEj9RlEKGuNS8XE4S5VAEbX4ifZZ2r1seaEV3afz6Bjt8OdhYf

p8Wsild8v0NG33qTM0KuNMVXBsTniXW0C1hIwWLG6yhGFMOuqv7tRWW03SrdLwYWIsC/

bCZYyHTsHutfCXua1OrGvTN6iKcQgveZXhpViQYQMtumo1CxpdvHAGzuqkE5CKVUw4QG

sVups7R7wEMm3PftRotLFMuJLHGC0NA6rRwFCPnidP74792kA7DzOufXWvG/w7W1b5MK

7RtPl8kNiyddwWLwxopeKpGJ3NkdpwM7WU9GuyUTOMjUXYiYSr2WEgg9ckG87SsPhOrV

2i8A==

X-Forwarded-Encrypted: i=1; AJvYcCUdPxdM7jMxJAT7Zp3JHtii76zc5lte27qrGFOVEoClasYkCDzwOEqPyr6gEArIQKAY2hc=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YzObrCiynmLOOsCAhcB7cUb4PjP9H0wl3umY3/ocEnIqDN+LQcj

HGmI10xY+4o4IRKhMdyWf3WnBkSwBqeB6DWKWLeLYdq9+FjN7rRBVL7DrRYxXzqjMcrtuOqX8ML

A2xdbIfMTM328XGrDAgDLoHr30vcYcv4=

X-Gm-Gg: AY/fxX7idXEZZNrJgbq0KR9KVdAp/BhVJIkvi6+jzbyXvaMsAriGEEQBpCcP728NP4N

VQxEbg6ElSaoRm1lhh2i5eLFJtshq1RvOklTqweAzH4pmREPVtYwOBqjz8zxTkb3PWT7rebaNwV

uWCX+xQlVZbxv1wHfQgLGOcAnIddQOWHzMQXNDGhUayZ4Xg6fn5alKh/Pd2hyjVqJitQMQgsCkn

5tgJa6u5pDN44VspMfdNJSyr7HaGrONxIJzjwkECUDvdHk1kAetBDu9TFTDsXfcGeKJFNs=

X-Google-Smtp-Source: AGHT+IEpDqV4Ac62XljhhEi9fgKrzNPtt1qI9j52aXMdLrxSoeiQOrWNuPnA+k8Ud6B2o9GdrkzqqaDslKvsiLqTrM4=

X-Received: by 2002:a05:690c:6993:b0:78c:6805:3d20 with SMTP id

00721157ae682-78e66c26922mr131331887b3.39.1765973076593; Wed, 17 Dec 2025

04:04:36 -0800 (PST)

MIME-Version: 1.0

Reply-To: privatedonation7@gmail.com

From: EDWIN CASTRO DONATION

Date: Wed, 17 Dec 2025 05:04:19 -0700

X-Gm-Features: AQt7F2pxMlHsJDJL9JhNQvXf_zGpYN04Dd2vENe6mnGQTPv-LPPg-YqtqQuX8-I

Message-ID:

Subject: SPENDE

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000e9d06a064624a539"

Bcc: bin@nl2k.ab.ca

X-Spam_score: 15.4

X-Spam_score_int: 154

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Herzlichen Glückwunsch! Sie gehören zu den ausgewählten

Begünstigten. Diese Nachricht erhalten Sie im Namen von Edwin Castro, dem

Gewinner des Powerball-Jackpots in Höhe von 2,04 Milliarden US-Do [...]



Content analysis details: (15.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

[209.85.128.177 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.177 listed in dnsbl.ahbl.org]

[209.85.128.177 listed in dnsbl.ahbl.org]

[209.85.128.177 listed in dnsbl.ahbl.org]

[209.85.128.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.177 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.177 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.177 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.177 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.177 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[privatedonation7(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[christianstolte172(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[christianstolte172(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} SPENDE



--000000000000e9d06a064624a539

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Herzlichen Gl=C3=BCckwunsch! Sie geh=C3=B6ren zu den ausgew=C3=A4hlten Beg=

=C3=BCnstigten.

Diese Nachricht erhalten Sie im Namen von Edwin Castro, dem Gewinner des

Powerball-Jackpots in H=C3=B6he von 2,04 Milliarden US-Dollar. Ich bin der

gr=C3=B6=C3=9Fte Powerball-Jackpot-Gewinner in der Geschichte der USA. Ich =

habe diese

Lotterie am 7. November 2022 gewonnen.

Ich m=C3=B6chte Sie informieren, dass Google in Zusammenarbeit mit Microsof=

t auf

meinen Wunsch hin Ihre E-Mail-Adresse erhalten hat, damit Sie eine Spende

von 2,5 Millionen US-Dollar erhalten k=C3=B6nnen. Ich m=C3=B6chte Ihnen die=

se 2,5

Millionen US-Dollar f=C3=BCr wohlt=C3=A4tige Zwecke und zur Unterst=C3=BCtz=

ung Bed=C3=BCrftiger

in Ihrer Region zukommen lassen, um die Welt f=C3=BCr alle zu einem bessere=

n Ort

zu machen.



Weitere Informationen finden Sie auf der folgenden Website, damit Sie an

der Spende von 2,5 Millionen US-Dollar nicht zweifeln.

https://edition.cnn.com/2023/02/14/us/powerball-winner-named/index.html

Virtual Assistant spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Dec 2025 06:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVrg2-00000000BFU-2udV

for dave@doctor.nl2k.ab.ca;

Wed, 17 Dec 2025 06:34:50 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Dec 2025 06:34:50 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f69.google.com ([209.85.210.69]:47180)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVo1q-00000000HPP-1Y2x

for root@nk.ca;

Wed, 17 Dec 2025 02:41:16 -0700

Received: by mail-ot1-f69.google.com with SMTP id 46e09a7af769-7cb133bc2d0so1743404a34.2

for ; Wed, 17 Dec 2025 01:40:19 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765964413; x=1766569213; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;

b=GTewut6TQZHPJt5sF+AsqARWOdEa1jnWFM0riEH0HtT0eu3479bot7SuJBD+0XCJ4E

MEJVsLT88/ZKn0qTlUn4L1h10sqQl7Yi1BDiDS6P0s6RsWjY9h3Og51BXUjquQEXvioN

UrEJdeZHGGg308z/bwzHuQ2Fj61raut2/8Fq+a6ipVptTbS185jLWsA7hlgzp5EZ45j8

AuV1lRnU06P+r/YDyjwQszYaNXMlNmgATRDNo+1lyHY98u5UDjfcoz6gLCy7NJ6x0Rg/

28Xc2zZb/V1OmDd6q1WCfbE35ukG69ZFD6xgR4PNmthHh2f2OQycm0xZy85XeH6sQvu1

K3dA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765964413; x=1766569213;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;

b=FNRUuFrw7n8jJR+J6dhbbAhd56YmwUlARzedZy81T/AxRXXNIJOKNXx7YbI6gSexPf

PxrJn5HpuoFGxdC2KIdL+M3VR2lso3eSzY6xqNm6OlDuJqyDUNveVY7XbgnLqZ3jRBgg

PyLNdpETFzu8eIhW/Tt/XPprZhI+9zNqt0fHo2/GGTZN2RZifSypBG3x4qVXYHsxfDnn

e5VsJyWt+4D7sBV/hMXtm4/x2K3khOI5LTzc7DpbpLEDunkBAqnRkePiQ/P4kbLwRzkA

RL6ZehiJzdI+yR2PNNAddER7I2zSES/EYVOy4nguNwu88x5nskE5WajlfHlNFOA5O7Ns

udWg==

X-Gm-Message-State: AOJu0Yx6VRP43/zk2UM7uAZhviy9fHJK5/dcbWZFCGaj+JXKNzVvPs4N

ovvhwcaHOMirJEssJ4MtohCcySU82xLtheHz/WC2pNe52zEmSWTEkMXMU4ZxTBQcsXgHT22FuXl

hnoc=

X-Google-Smtp-Source: AGHT+IEL5Fi6EsKsvKFQIXXT8eg92KoKBW6235PvtoFhEjLmy0XBUOUIVuZxFZCWytgAlm87qTKAjgJmRw==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:2003:b0:659:9a49:90c9 with SMTP id

006d021491bc7-65b4521362bmr7127238eaf.72.1765964413122; Wed, 17 Dec 2025

01:40:13 -0800 (PST)

Message-ID:

Date: Wed, 17 Dec 2025 09:40:13 +0000

Subject: Re: Follow Up / Remote Support ? root@nk.ca

From: kundankumarheadfield@gmail.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="00000000000087be90064622a1df"

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Just following up on my email from Friday. Limited-time

Christmas offer: Save 20% on Virtual Assistant & Remote Support services.

Would you be available for a quick call this week/ next? Thank you [...]



Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.69 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kundankumarheadfield(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.69 listed in wl.mailspike.net]

1.0 SAVE_PERCENT BODY: Save some percentage

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Re: Follow Up / Remote Support ? root@nk.ca



--00000000000087be90064622a1df

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,

Just following up on my email from Friday. Limited-time Christmas offer:

Save 20% on Virtual Assistant & Remote Support services.

Would you be available for a quick call this week/ next?

Thank you,

Kundan

VA Team!!



On Fri, Dec 5, 2025, at 9:43 AM < > wrote:



Hi root@nk.ca,



Are you looking to hire an affordable Remote Virtual Assistant?

We support bookkeeping, CRM, lead generation, calls, email management, SEO,

digital marketing, design, and more.



May I share our pricing or schedule a quick call?



Best regards,

Kundan

VA Team!!



--00000000000087be90064622a1df

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,
Just following up on my email from Friday. Limited-time Christmas of=

fer: Save 20% on Virtual Assistant & Remote Support services.
Would you =

be available for a quick call this week/ next?
Thank you,
Kundan
V=

A Team!!

On Fri, Dec 5, 2025, at 9:43=E2=80=AFAM < > wrote:

H=

i root@nk.ca,

Are you looking to hire an affordable Remote Virtual A=

ssistant?
We support bookkeeping, CRM, lead generation, calls, email man=

agement, SEO, digital marketing, design, and more.

May I share our p=

ricing or schedule a quick call?

Best regards,
Kundan
VA Team!=

!

--00000000000087be90064622a1df--

Virtual Assistant spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 17 Dec 2025 06:31:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVrc6-000000008tz-1eiA

for dave@doctor.nl2k.ab.ca;

Wed, 17 Dec 2025 06:30:46 -0700

Resent-From: The Doctor

Resent-Date: Wed, 17 Dec 2025 06:30:46 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f69.google.com ([209.85.210.69]:47180)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVo1q-00000000HPP-1Y2x

for root@nk.ca;

Wed, 17 Dec 2025 02:41:16 -0700

Received: by mail-ot1-f69.google.com with SMTP id 46e09a7af769-7cb133bc2d0so1743404a34.2

for ; Wed, 17 Dec 2025 01:40:19 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765964413; x=1766569213; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;

b=GTewut6TQZHPJt5sF+AsqARWOdEa1jnWFM0riEH0HtT0eu3479bot7SuJBD+0XCJ4E

MEJVsLT88/ZKn0qTlUn4L1h10sqQl7Yi1BDiDS6P0s6RsWjY9h3Og51BXUjquQEXvioN

UrEJdeZHGGg308z/bwzHuQ2Fj61raut2/8Fq+a6ipVptTbS185jLWsA7hlgzp5EZ45j8

AuV1lRnU06P+r/YDyjwQszYaNXMlNmgATRDNo+1lyHY98u5UDjfcoz6gLCy7NJ6x0Rg/

28Xc2zZb/V1OmDd6q1WCfbE35ukG69ZFD6xgR4PNmthHh2f2OQycm0xZy85XeH6sQvu1

K3dA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765964413; x=1766569213;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=VTcXzatXwbJbd1ioQUkbiDUhSFlkAxjf0JIerrhHO4Q=;

b=FNRUuFrw7n8jJR+J6dhbbAhd56YmwUlARzedZy81T/AxRXXNIJOKNXx7YbI6gSexPf

PxrJn5HpuoFGxdC2KIdL+M3VR2lso3eSzY6xqNm6OlDuJqyDUNveVY7XbgnLqZ3jRBgg

PyLNdpETFzu8eIhW/Tt/XPprZhI+9zNqt0fHo2/GGTZN2RZifSypBG3x4qVXYHsxfDnn

e5VsJyWt+4D7sBV/hMXtm4/x2K3khOI5LTzc7DpbpLEDunkBAqnRkePiQ/P4kbLwRzkA

RL6ZehiJzdI+yR2PNNAddER7I2zSES/EYVOy4nguNwu88x5nskE5WajlfHlNFOA5O7Ns

udWg==

X-Gm-Message-State: AOJu0Yx6VRP43/zk2UM7uAZhviy9fHJK5/dcbWZFCGaj+JXKNzVvPs4N

ovvhwcaHOMirJEssJ4MtohCcySU82xLtheHz/WC2pNe52zEmSWTEkMXMU4ZxTBQcsXgHT22FuXl

hnoc=

X-Google-Smtp-Source: AGHT+IEL5Fi6EsKsvKFQIXXT8eg92KoKBW6235PvtoFhEjLmy0XBUOUIVuZxFZCWytgAlm87qTKAjgJmRw==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:2003:b0:659:9a49:90c9 with SMTP id

006d021491bc7-65b4521362bmr7127238eaf.72.1765964413122; Wed, 17 Dec 2025

01:40:13 -0800 (PST)

Message-ID:

Date: Wed, 17 Dec 2025 09:40:13 +0000

Subject: Re: Follow Up / Remote Support ? root@nk.ca

From: kundankumarheadfield@gmail.com

To: root@nk.ca

Content-Type: multipart/alternative; boundary="00000000000087be90064622a1df"

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Just following up on my email from Friday. Limited-time

Christmas offer: Save 20% on Virtual Assistant & Remote Support services.

Would you be available for a quick call this week/ next? Thank you [...]



Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

[209.85.210.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

[209.85.210.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.69 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.69 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kundankumarheadfield(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.69 listed in wl.mailspike.net]

1.0 SAVE_PERCENT BODY: Save some percentage

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Re: Follow Up / Remote Support ? root@nk.ca



--00000000000087be90064622a1df

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,

Just following up on my email from Friday. Limited-time Christmas offer:

Save 20% on Virtual Assistant & Remote Support services.

Would you be available for a quick call this week/ next?

Thank you,

Kundan

VA Team!!



On Fri, Dec 5, 2025, at 9:43 AM < > wrote:



Hi root@nk.ca,



Are you looking to hire an affordable Remote Virtual Assistant?

We support bookkeeping, CRM, lead generation, calls, email management, SEO,

digital marketing, design, and more.



May I share our pricing or schedule a quick call?



Best regards,

Kundan

VA Team!!



--00000000000087be90064622a1df

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,
Just following up on my email from Friday. Limited-time Christmas of=

fer: Save 20% on Virtual Assistant & Remote Support services.
Would you =

be available for a quick call this week/ next?
Thank you,
Kundan
V=

A Team!!

On Fri, Dec 5, 2025, at 9:43=E2=80=AFAM < > wrote:

H=

i root@nk.ca,

Are you looking to hire an affordable Remote Virtual A=

ssistant?
We support bookkeeping, CRM, lead generation, calls, email man=

agement, SEO, digital marketing, design, and more.

May I share our p=

ricing or schedule a quick call?

Best regards,
Kundan
VA Team!=

!

--00000000000087be90064622a1df--

Chinese products spam

Evidence at Spamcop

Digital art phisher from Google Gmail Part 3

>=20




>> Send me a message here on my telegram link




>>=20




>>
er noreferrer noreferrer noreferrer noreferrer" target=3D"_blank">https://t=

.me/gardenermstar





>>=20




>> On Thu, 7 Aug 2025 at 23:06, dave <
o:dave@nk.ca" rel=3D"noreferrer noreferrer noreferrer noreferrer" target=3D=

"_blank">dave@nk.ca
> wrote:




>>=20




>>> On 2025-08-08 09:01, Madeline Gardener wrote:




>>>> Do you use telegram?




>>>=20




>>> yes.




>>>>=20




>>>> On Thu, 7 Aug 2025 at 22:49, dave <
=3D"mailto:dave@nk.ca" rel=3D"noreferrer noreferrer noreferrer noreferrer" =

target=3D"_blank">dave@nk.ca
> wrote:




>>>>=20




>>>>> On 2025-08-08 08:37, Madeline Gardener wro=

te:




>>>>>> Hello dave




>>>>>>=20




>>>>>> I'm not able to use my whatsapp ri=

ght now and that's why I




>>> used a




>>>>>> different number earlier but it seems =

the problem persists so




>>>>> let's




>>>>>> talk here on email.




>>>>>=20




>>>>> No problem.




>>>>>=20




>>>>>>=20




>>>>>> On Sun, 27 Jul 2025 at 16:13, Madeline=

Gardener




>>>>>> <
29@gmail.com" rel=3D"noreferrer noreferrer noreferrer noreferrer" target=3D=

"_blank">madelinegardener29@gmail.com
> wrote:




>>>>>>=20




>>>>>>> Send it to my whatsapp




>>>>>>>=20




>>>>>>> On Sun, 27 Jul 2025 at 16:05, dave=

<
noreferrer" target=3D"_blank">dave@nk.ca
> wrote:




>>>>>>>=20




>>>>>>>> On 2025-07-26 20:07, Madeline =

Gardener wrote:




>>>>>>>>> Hello I am Madeline garden=

er from Canada and I have




>>> intentions




>>>>>>>> of




>>>>>>>>> buying your artworks I fou=

nd online. Kindly send me a




>>> whatsapp




>>>>>>>> message




>>>>>>>>> so we can discuss about my=

request.




>>>>>>>>>=20




>>>>>>>>> +1 (226) 829-6043




>>>>>>>>=20




>>>>>>>>
htcafe.studio/u/rootnk" rel=3D"noreferrer noreferrer noreferrer noreferrer =

noreferrer" target=3D"_blank">https://creator.nightcafe.studio/u/rootnk
=

is the link you




>>> are




>>>>>>>> looking




>>>>>>>> for.




>>>>>>>> --




>>>>>>>> Created by round cube




>>>>>=20




>>>>> --




>>>>> Created by round cube




>>>=20




>>> --




>>> Created by round cube







--=20




Created by round cube




































--0000000000009a3b6e06461b325c--

Digital art phisher from Google Gmail Part 2



>>>>>>>>> >>>>>

>>>>>>>>> >>>>>>

>>>>>>>>> >>>>>> On Sun, 27 Jul 2025 at 16:13, Madeline Gardener

>>>>>>>>> >>>>>> wrote:

>>>>>>>>> >>>>>>

>>>>>>>>> >>>>>>> Send it to my whatsapp

>>>>>>>>> >>>>>>>

>>>>>>>>> >>>>>>> On Sun, 27 Jul 2025 at 16:05, dave wrote:

>>>>>>>>> >>>>>>>

>>>>>>>>> >>>>>>>> On 2025-07-26 20:07, Madeline Gardener wrote:

>>>>>>>>> >>>>>>>>> Hello I am Madeline gardener from Canada and I have

>>>>>>>>> >>> intentions

>>>>>>>>> >>>>>>>> of

>>>>>>>>> >>>>>>>>> buying your artworks I found online. Kindly send me a

>>>>>>>>> >>> whatsapp

>>>>>>>>> >>>>>>>> message

>>>>>>>>> >>>>>>>>> so we can discuss about my request.

>>>>>>>>> >>>>>>>>>

>>>>>>>>> >>>>>>>>> +1 (226) 829-6043

>>>>>>>>> >>>>>>>>

>>>>>>>>> >>>>>>>> https://creator.nightcafe.studio/u/rootnk is the link

>>>>>>>>> you

>>>>>>>>> >>> are

>>>>>>>>> >>>>>>>> looking

>>>>>>>>> >>>>>>>> for.

>>>>>>>>> >>>>>>>> --

>>>>>>>>> >>>>>>>> Created by round cube

>>>>>>>>> >>>>>

>>>>>>>>> >>>>> --

>>>>>>>>> >>>>> Created by round cube

>>>>>>>>> >>>

>>>>>>>>> >>> --

>>>>>>>>> >>> Created by round cube

>>>>>>>>>

>>>>>>>>> --

>>>>>>>>> Created by round cube

>>>>>>>>>

>>>>>>>>



--0000000000009a3b6e06461b325c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello=C2=A0DAVE


quote_container">
On Wed, Aug 20, 2025=

, 3:46 PM Madeline Gardener <
com">madelinegardener29@gmail.com
> wrote:

=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padd=

ing-left:1ex">
Hello Dave can we cancel the transaction so=

I can get my money back?


=3D"ltr" class=3D"gmail_attr">On Sat, 16 Aug 2025 at 18:02, Madeline Garden=

er <
l=3D"noreferrer">madelinegardener29@gmail.com
> wrote:

kquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-=

width:1px;border-left-style:solid;padding-left:1ex;border-left-color:rgb(20=

4,204,204)">
Hello Dave how are you?

">Why have you not responded to any of my messages?


s=3D"gmail_quote">
---------- Forwarde=

d message ---------
From:
">Madeline Gardener
<
inegardener29@gmail.com" target=3D"_blank" rel=3D"noreferrer">madelinegarde=

ner29@gmail.com
>

Date: Tue, 12 Aug 2025 at 15:59
Subjec=

t: Re: Hello Dave
To: DAVE y <
"_blank" rel=3D"noreferrer">dave@nk.ca
>



"auto">Hello dave I'm not comfortable with the manner at which you go w=

ith this, I've been deducted a huge amount of money and you're not =

making any move to redeem the NFT or even give me back. Why?


class=3D"gmail_quote">
On Sat, Aug 9, =

2025, 10:45=E2=80=AFPM Madeline Gardener <
ener29@gmail.com" target=3D"_blank" rel=3D"noreferrer">madelinegardener29@g=

mail.com
> wrote:

"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;pad=

ding-left:1ex;border-left-color:rgb(204,204,204)">
Come on=

line on Whatsapp=C2=A0


class=3D"gmail_attr">On Sat, Aug 9, 2025, 10:35=E2=80=AFPM DAVE y <
ref=3D"mailto:dave@nk.ca" rel=3D"noreferrer noreferrer" target=3D"_blank">d=

ave@nk.ca
> wrote:

=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;=

padding-left:1ex;border-left-color:rgb(204,204,204)">

>
Got it. Also multifailure authenticAtion happening on si=

gnal and telegram





On Aug 8, 2025, at 12:38 p.m., Madeline Gardener=

<
ferrer noreferrer" target=3D"_blank">madelinegardener29@gmail.com
> w=

rote:

rder-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-co=

lor:rgb(204,204,204)">



Hello dave I sent you a message on Whatsapp=C2=A0











-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-color:=

rgb(204,204,204)">



Hello Dave=C2=A0












You know I'm not happy when you leave me unreplyed and now I've =

been deducted 24 ETH for the purchase so let me direct you how to confirm t=

he transaction and receive the amount deducted from=C2=A0my account.













der-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-col=

or:rgb(204,204,204)">



Hello dave













border-left-width:1px;border-left-style:solid;padding-left:1ex;border-left-=

color:rgb(204,204,204)">



Do you have signal?





It's a chat app like WhatsApp=C2=A0













ex;border-left-width:1px;border-left-style:solid;padding-left:1ex;border-le=

ft-color:rgb(204,204,204)">

On 2025-08-07 18:49, Madeline Gardener wrote:




> Are you there?







Yes I am but telegram is not letting me back in.







>=20




> On Fri, 8 Aug 2025 at 16:18, Madeline Gardener




> <
"noreferrer noreferrer noreferrer noreferrer" target=3D"_blank">madelinegar=

dener29@gmail.com
> wrote:


Digital art phisher from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 16 Dec 2025 17:50:00 -0700

Received: from mail-qk1-f177.google.com ([209.85.222.177]:58498)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVfit-00000000Ch3-1oYL

for dave@nk.ca;

Tue, 16 Dec 2025 17:49:07 -0700

Received: by mail-qk1-f177.google.com with SMTP id af79cd13be357-8b5ed9e7500so398434785a.0

for ; Tue, 16 Dec 2025 16:48:14 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765932487; x=1766537287; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=QglbnY6004aKYcEYmuZws4/I6w9eli0HiWPEkVxnQSc=;

b=IOCzop8zvc0Icgt6M+0fQI8e9yij5x0hda72iDzWNjWUErx5WmQeDjIkjdLGOv4Wpv

2JM2oIJowrT+9nwyDFus7Vh9Royh5tqApJmeS9DIKrNPYHauKSey747gcAfwqz1dARmR

xA+hrIJ1WvulqVGiogg3/FOZTlFYk4RYKxYS1XKqw6zrwNBVpwS/8EnDOvctISgTc4h7

yzoINYpY1t2WVUpZkGuwfOpN+iWl/qWZSaXS8Jg+J+zKEaP2dQGBGpmTrizf8uVog+i6

IaYu5r86i2QnEuPeot3Q8VHY0GdCUn4Nb2ZeGBSLv9R4Ga7Ui1QNs6tq8l0VP5Fepqc4

8srA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765932487; x=1766537287;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=QglbnY6004aKYcEYmuZws4/I6w9eli0HiWPEkVxnQSc=;

b=ItSHAInMhJDC4lTByZORUWEXM4bukE+2eALB0Ur1bsfO8ekAWVyLlfn/n6xyXGGPy5

s9wtxdy5tbIXkmr+utPiJ69iU3ESjBARCO3i2BaHMBhDkwhWJaXV6pTeOBN9nzddfibL

zuWAedHOgJq1xXxjpHd8wJGkLzvXLmL+OoiKOeyoz//nFwTUQQ2rTlfT2yuxeo57xktw

Rb2iqRmF+48FVJJwep+yRkSW1KajXkWK2A75ruZpJLWfR7AObGHAsemyLTXSMDcBdvJl

eOXBYn9Rb2trcOYHWI60v9UoxiAl1GAOA4o88E1P9M6F5dudgZxFpyV9r5/FxaE1NLuL

Eb2w==

X-Gm-Message-State: AOJu0YzZOuVY3YT325a7pIU+p4gf19YQ8ugainOCo7XNU909Vk0HaXK4

UYiZOD+h0UzS1X99ovVBeBjd6ZUqmaLNXx7NCVrEdbIGWlABdgGnZuny8Rh5XmE3L7uM2h1rIPO

pTBV7mzf8K0xRd20+jVsiWwJr/jCq6tg9B1y8

X-Gm-Gg: AY/fxX5uSFdowSLX+dSz0CuwZgJ3TuEB/MvjyXLjUwjrQsL0z0Ojf//dhVBNJQ9TpXw

FnQ4C+NAfD7stPms96pom+N/v4n+xNvdAXNnNPnXZq4cahKoUOH0BEAJjrFG1sNDFfGzVnGwk1q

6sbfGOLdsZOLux1wo/SxgtNFxYe02yUG2bkGtBt7Q4uwx6L7Dw4O95q8QUWD32VxzghLmK1KtxI

wKQpgrbNTfj+4EFB6maZg/MgVkUFpLxEoiWbq90SOSdjq+mRH1wPvAMaoks6u/3aruF0TcGFfq+

o1DWFnAGms3gWnIZX6cD1nPB9WwnAvITvZn+f9lH6Mk=

X-Google-Smtp-Source: AGHT+IEHp3OTqXUoDokKEDDoEdlE4HVe+5rA3VflipG+C8xcKAeZEpI+vuVsA1JyUigVvy4owGnvq5Nc4fnnhG8XrPM=

X-Received: by 2002:a05:6214:5191:b0:7f5:eda2:a54b with SMTP id

6a1803df08f44-8887e7fb301mr236689146d6.62.1765932487292; Tue, 16 Dec 2025

16:48:07 -0800 (PST)

MIME-Version: 1.0

References:

<73aade3baea0c30b1fff80932e961b88@nk.ca>









<5b29740c3f70603dd26de1abc4f4e039@nk.ca>







<724cc1cc-f7b1-4d7d-92a9-3a603d426a63@nk.ca>





In-Reply-To:

From: Madeline Gardener

Date: Wed, 17 Dec 2025 01:47:56 +0100

X-Gm-Features: AQt7F2rem1pwowj8y5ydWse7YulUWZGlwSmHgXL_Hwi5N4ESITc-GdW0ne4xbWI

Message-ID:

Subject: Re: Hello Dave

To: DAVE y

Content-Type: multipart/alternative; boundary="0000000000009a3b6e06461b325c"



--0000000000009a3b6e06461b325c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello DAVE



On Wed, Aug 20, 2025, 3:46 PM Madeline Gardener <

madelinegardener29@gmail.com> wrote:



> Hello Dave can we cancel the transaction so I can get my money back?

>

> On Sat, 16 Aug 2025 at 18:02, Madeline Gardener <

> madelinegardener29@gmail.com> wrote:

>

>> Hello Dave how are you?

>> Why have you not responded to any of my messages?

>>

>> ---------- Forwarded message ---------

>> From: Madeline Gardener

>> Date: Tue, 12 Aug 2025 at 15:59

>> Subject: Re: Hello Dave

>> To: DAVE y

>>

>>

>> Hello dave I'm not comfortable with the manner at which you go with this=

,

>> I've been deducted a huge amount of money and you're not making any move=

to

>> redeem the NFT or even give me back. Why?

>>

>> On Sat, Aug 9, 2025, 10:45=E2=80=AFPM Madeline Gardener <

>> madelinegardener29@gmail.com> wrote:

>>

>>> Come online on Whatsapp

>>>

>>> On Sat, Aug 9, 2025, 10:35=E2=80=AFPM DAVE y wrote:

>>>

>>>> Got it. Also multifailure authenticAtion happening on signal and

>>>> telegram

>>>>

>>>> Get BlueMail for Android

>>>> On Aug 8, 2025, at 12:38 p.m., Madeline Gardener <

>>>> madelinegardener29@gmail.com> wrote:

>>>>>

>>>>> Hello dave I sent you a message on Whatsapp

>>>>>

>>>>> On Fri, Aug 8, 2025, 2:08=E2=80=AFPM Madeline Gardener <

>>>>> madelinegardener29@gmail.com> wrote:

>>>>>

>>>>>> Hello Dave

>>>>>>

>>>>>> You know I'm not happy when you leave me unreplyed and now I've been

>>>>>> deducted 24 ETH for the purchase so let me direct you how to confirm=

the

>>>>>> transaction and receive the amount deducted from my account.

>>>>>>

>>>>>> On Fri, 8 Aug 2025 at 02:40, Madeline Gardener <

>>>>>> madelinegardener29@gmail.com> wrote:

>>>>>>

>>>>>>> Hello dave

>>>>>>>

>>>>>>> On Fri, 8 Aug 2025 at 01:55, Madeline Gardener <

>>>>>>> madelinegardener29@gmail.com> wrote:

>>>>>>>

>>>>>>>> Do you have signal?

>>>>>>>> It's a chat app like WhatsApp

>>>>>>>>

>>>>>>>> On Fri, 8 Aug 2025 at 01:54, dave wrote:

>>>>>>>>

>>>>>>>>> On 2025-08-07 18:49, Madeline Gardener wrote:

>>>>>>>>> > Are you there?

>>>>>>>>>

>>>>>>>>> Yes I am but telegram is not letting me back in.

>>>>>>>>>

>>>>>>>>> >

>>>>>>>>> > On Fri, 8 Aug 2025 at 16:18, Madeline Gardener

>>>>>>>>> > wrote:

>>>>>>>>> >

>>>>>>>>> >> Send me a message here on my telegram link

>>>>>>>>> >>

>>>>>>>>> >> https://t.me/gardenermstar

>>>>>>>>> >>

>>>>>>>>> >> On Thu, 7 Aug 2025 at 23:06, dave wrote:

>>>>>>>>> >>

>>>>>>>>> >>> On 2025-08-08 09:01, Madeline Gardener wrote:

>>>>>>>>> >>>> Do you use telegram?

>>>>>>>>> >>>

>>>>>>>>> >>> yes.

>>>>>>>>> >>>>

>>>>>>>>> >>>> On Thu, 7 Aug 2025 at 22:49, dave wrote:

>>>>>>>>> >>>>

>>>>>>>>> >>>>> On 2025-08-08 08:37, Madeline Gardener wrote:

>>>>>>>>> >>>>>> Hello dave

>>>>>>>>> >>>>>>

>>>>>>>>> >>>>>> I'm not able to use my whatsapp right now and that's why I

>>>>>>>>> >>> used a

>>>>>>>>> >>>>>> different number earlier but it seems the problem persists

>>>>>>>>> so

>>>>>>>>> >>>>> let's

>>>>>>>>> >>>>>> talk here on email.

>>>>>>>>> >>>>>

>>>>>>>>> >>>>> No problem.

German language spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Dec 2025 19:56:59 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVhi4-0000000053T-26gG

for dave@doctor.nl2k.ab.ca;

Tue, 16 Dec 2025 19:56:16 -0700

Resent-From: The Doctor

Resent-Date: Tue, 16 Dec 2025 19:56:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [195.83.153.8] (port=49779 helo=smtp-out2-webmail-8.u-picardie.fr)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vVdzD-0000000014c-2lHW

for doctor@doctor.nl2k.ab.ca;

Tue, 16 Dec 2025 15:57:53 -0700

Received: from passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142])

by smtp-out2-webmail-8.u-picardie.fr (Postfix) with ESMTP id 4dWC1X4LM3zBtg0;

Tue, 16 Dec 2025 23:54:56 +0100 (CET)

X-Virus-Scanned: Debian amavisd-new at u-picardie.fr

Received: from smtp.u-picardie.fr ([10.0.132.227])

by passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142]) (amavisd-new, port 10048)

with LMTP id QuiKsw4jPj_p; Tue, 16 Dec 2025 23:54:52 +0100 (CET)

Received: from horde-ext-01 (horde-ext-01.vm.u-picardie.fr [10.0.132.193])

(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))

(No client certificate requested)

(Authenticated sender: c22407550)

by smtp.u-picardie.fr (Postfix) with ESMTPSA id 4dWC182vZ2z3yq9;

Tue, 16 Dec 2025 23:54:36 +0100 (CET)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=u-picardie.fr;

s=smtp; t=1765925692; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type: content-transfer-encoding:content-transfer-encoding;

bh=D6incc/GghzehHq9Te79Od6jonpbqGIJcQRXtO0RfmI=;

b=waMfIKQns2r8ZYpVwDrZEwP44B9pKF1K5P/Fa7+2WDELO0Rpv13E1aXXGzjNdycBE/Q33U

MdfyAZ5183LnqXGVxq53KkPL0XSDf9ba9ZQ0LD2jwDuKrVYpVEwl1TsyP+QMTi7wfScVD+

MJgg+mczISHGLviRNEl6g7BUYRaZapIe1YAdwE4NFORwJjhdeFF24EbBYkuCwN+E0eYsv7

nHAW6rW2+qiaRYH4UZBDREXyIO8Qdamqmu4IDg2ezf6M3/mJR1lhhiUwz8fyELuLXVxxnY

4RZdg/gXUOIeCZOK2SEgj3p6gl8UJvWdJ72OLrEmTAwWfiT/mIqIpfPNnoUecA==

Received: from ec2-3-70-126-251.eu-central-1.compute.amazonaws.com

(ec2-3-70-126-251.eu-central-1.compute.amazonaws.com [3.70.126.251]) by

webmail.etud.u-picardie.fr (Horde Framework) with HTTPS; Tue, 16 Dec 2025

23:54:36 +0100

Date: Tue, 16 Dec 2025 23:54:36 +0100

Message-ID: <20251216235436.Horde.LWwow1SAUdlktIoHaQEnWQr@webmail.etud.u-picardie.fr>

From: Hallo

To: tungs6771@gmail.com

Subject: Investitionsprojekt

Reply-to: stung@shuntung-hk-cn.com

User-Agent: Horde Application Framework 5

Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes

MIME-Version: 1.0

Content-Disposition: inline

Content-Transfer-Encoding: 8bit

X-Spamd-Bar: +++++

Authentication-Results: smtp.u-picardie.fr;

auth=pass smtp.auth=c22407550 smtp.mailfrom=lou.carpentier-pichard@etud.u-picardie.fr

X-Rspamd-Server: passoire-04

X-Rspamd-Queue-Id: 4dWC182vZ2z3yq9

X-Spamd-Result: default: False [5.90 / 1000.00];

BAYES_SPAM(6.00)[99.99%];

MIME_GOOD(-0.10)[text/plain];

DKIM_SIGNED(0.00)[u-picardie.fr:s=smtp];

MID_RHS_MATCH_FROMTLD(0.00)[];

RCPT_COUNT_ONE(0.00)[1];

ARC_NA(0.00)[];

NEURAL_HAM(-0.00)[-0.994];

FROM_EQ_ENVFROM(0.00)[];

FREEMAIL_TO(0.00)[gmail.com];

MIME_TRACE(0.00)[0:+];

RCVD_COUNT_TWO(0.00)[2];

ETUD_FROM(0.00)[etud.u-picardie.fr];

REPLYTO_DOM_NEQ_FROM_DOM(0.00)[];

RCVD_VIA_SMTP_AUTH(0.00)[];

HAS_REPLYTO(0.00)[stung@shuntung-hk-cn.com];

TO_DN_NONE(0.00)[];

FROM_HAS_DN(0.00)[];

TO_MATCH_ENVRCPT_ALL(0.00)[];

FREEMAIL_ENVRCPT(0.00)[gmail.com,yahoo.com.au,yahoo.co.uk,gmx.de,web.de,phreaker.net,operamail.com,earthlink.net,hotmail.com,mail.com,yahoo.com,mac.com,bellsouth.net,club-internet.fr,compuserve.com,me.com,xtra.co.nz,xs4all.nl,iname.com,sci.fi,outlook.com,bigfoot.com,engineer.com,juno.com,ftml.net,gmx.net,mindspring.com,t-online.de,rocketmail.com,btinternet.com,op.pl,aol.com,mail.ru,optusnet.com.au,freesurf.fr,onet.pl,att.net,arcor.de,centrum.cz,worldnet.att.net,libero.it,gmx.at,laposte.net,yahoo.ca,yahoo.co.jp,neuf.fr,hotmail.fr,caramail.fr];

TAGGED_RCPT(0.00)[];

RCVD_TLS_ALL(0.00)[]

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Guten Morgen, mein Name ist Shun Tung, und ich vertrete die

Interessen der Familie Wing Mau, die an verschiedenen Investitionsmöglichkeiten

in Ihrem Land interessiert ist. Besonders interessieren wir uns für die

[...]



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[3.70.126.251 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

[195.83.153.8 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[195.83.153.8 listed in dnsbl.ahbl.org]

[195.83.153.8 listed in dnsbl.ahbl.org]

[195.83.153.8 listed in dnsbl.ahbl.org]

[195.83.153.8 listed in dnsbl.ahbl.org]

[3.70.126.251 listed in dnsbl.ahbl.org]

[3.70.126.251 listed in dnsbl.ahbl.org]

[3.70.126.251 listed in dnsbl.ahbl.org]

[3.70.126.251 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[195.83.153.8 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[195.83.153.8 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[195.83.153.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[195.83.153.8 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[3.70.126.251 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 T_TVD_FUZZY_SECTOR BODY: No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Investitionsprojekt



Guten Morgen,



mein Name ist Shun Tung, und ich vertrete die Interessen der Familie

Wing Mau, die an verschiedenen Investitionsmöglichkeiten in Ihrem Land

interessiert ist. Besonders interessieren wir uns für die Sektoren

Immobilien, Tourismus, erneuerbare Energien und Fertigung.



Aufgrund politischer Herausforderungen in unserem Heimatland suchen

wir einen zuverlässigen und vertrauenswürdigen Partner im Ausland, der

diese Investitionen in unserem Auftrag verwaltet und absichert.



Ihre Rolle würde darin bestehen, die Investitionen zu überwachen und

sicherzustellen, dass sie erfolgreich sind. Im Gegenzug würden Sie

einen vereinbarten Prozentsatz der Managementgebühren erhalten,

während die Gewinne gleichmäßig zwischen beiden Parteien aufgeteilt

werden.



Falls dieses Angebot Ihr Interesse weckt, würde ich mich über ein

weiteres Gespräch freuen. Ich freue mich auf Ihre Antwort.



Mit freundlichen Grüßen,



Shun Tung



CAA phish Part 6



follow" href=3D"mailto:Campbell=EF=BF=BCdistribution.manager@fremantleheral=

d.com">
distribution.manager@fremantlehe=

rald.com
=0D=0A=0D=0A=0D=0A=0D=0A
table>=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=3D"presentation" border=3D"0" class=3D"container" align=3D"center" cellpad=

ding=3D"0" cellspacing=3D"0" style=3D"margin-bottom: 0px; position: static;=

padding-top: 5px; padding-bottom: 5px;" eo-row=3D"one-column" bgcolor=3D""=

width=3D"100%">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

ntainer" style=3D"padding: 0 15px 15px;" eo-block-container=3D"">=0D=0A
>=0D=0A
=0D=0A=0D=0A=0D=0A
>=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=3D"background: none;">=0D=0A
eo-footer=3D"" bgcolor=3D"">=0D=0A
=3D"0" cellpadding=3D"0" border=3D"0" align=3D"center" width=3D"100%" eo-ro=

w=3D"one-column">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=

=0A
=

=0D=0A
ellpadding=3D"0" border=3D"0" align=3D"center" width=3D"100%" eo-block=3D"s=

ocial-follow" bgcolor=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

" valign=3D"top" style=3D"padding-top: 5px; padding-bottom: 5px;">=0D=0A
ble class=3D"social-links-container" align=3D"center" border=3D"0" cellpadd=

ing=3D"0" cellspacing=3D"0" style=3D"border-collapse: collapse;" role=3D"pr=

esentation">=0D=0A
=0D=0A
=0D=0A
=3D"0" border=3D"0" align=3D"center" width=3D"100%" eo-block=3D"text" style=

=3D"position: static;" bgcolor=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

=3D"container" style=3D"padding-top: 20px;padding-bottom: 10px;">=0D=0A
class=3D"text-block fr-inner" style=3D"font-size: 11px; text-align: center=

; color: #313638">=0D=0A
=0D=

=0A
container" align=3D"center" cellpadding=3D"0" cellspacing=3D"0" width=3D"10=

0%" style=3D"margin-bottom: 10px;margin-top: 0px;" eo-block=3D"image">=0D=

=0A=0D=0A=0D=0A=0D=0A=0D=0A

er-collapse: collapse; border-spacing: 0; margin: 0;padding: 0;" valign=3D"=

top">=0D=0A
mw~~/AAAHUQA~/RgRooWqEP0TSaHR0cHM6Ly9iYWxib2FpLmVvY2FtcGFpZ24xLmNvbS9yZXdhc=

mRzP2xjPTY1OWQxMzY4LTUzYmEtMTFlZi1iMDY3LWNkZjYzMjIzMjc3YiZwPTI0NzVhYjJlLTVi=

OTAtMTFlZi1hNGZiLWIxODg4ZDdiNzNiNiZwdD1jYW1wYWlnbiZ0PTE3MjM3ODY2Mjgmcz03ZDJ=

jZDM1NmM2ZTA3MWZkMzVhMDE2MWFjOWVmY2VhYzIwOGRkYmNmZTBhODZlMzBlYjNhOTVjMmIxOD=

NkMWZhVwVzcGNldUIKZryE5b5mxulv2VIWam9lLndha2Vyc2VuQHlhaG9vLmNvbVgEAACPDQ~~"=

style=3D"display: block;">=0D=0A
2-72c3-11ea-a3d0-06b4694bee2a%2F1586536266496-bottom-badge.png" alt=3D"Powe=

red by EmailOctopus" width=3D"150" style=3D"width: 150px;object-fit: cover;=

padding: 0;outline: none;border: none;display: block;">=0D=0A
=0D=0A
>=0D=0A
=0D=0A=0D=0A=0D=0A
>=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
>=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=3D"1" height=3D"1" alt=3D"" src=3D"https://sptr.eocampaign1.com/q/_RCMwXi8=

ZV9whFOI5NXUWw~~/AAAHUQA~/RgRooWqEPlcFc3BjZXVCCma8hOW-Zsbpb9lSFmpvZS53YWtlc=

nNlbkB5YWhvby5jb21YBAAAjw0~">=0D=0A=0D=0A

--h7hQwmWe--

CAA phish Part 5



er: none;=0D=0Adisplay: block;=0D=0A">=0D=0A=0D=0A=0D=0A
dy>=0D=0A
=3D"0" border=3D"0" align=3D"center" width=3D"100%" eo-block=3D"text" bgcol=

or=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

ng-top: 15px; padding-bottom: 15px;">=0D=0A

r">
Click the cover to read your latest ed=

ition!
=0D=0A

width=3D"100%" style=3D"=0D=0Atable-layout: fixed;=0D=0Awidth: 100%;=0D=0A"=

eo-block=3D"divider" role=3D"presentation" aria=3D"hidden">=0D=0A=

=0D=0A=0D=0A=0D=0A=0D=0A
y>=0D=0A

m:15px;">=0D=0A
n=3D"center" style=3D"border-top:1px solid #DCD6D1;border-collapse:collapse=

; width:100%">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=0D=0A=0D=0A
d>=0D=0A
=0D=0A

llpadding=3D"0" cellspacing=3D"0" width=3D"100%" style=3D"margin-bottom: 5p=

x;margin-top: 5px;" eo-block=3D"image" role=3D"presentation" bgcolor=3D"">=

=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

order-collapse: collapse; border-spacing: 0px; margin: 0px; padding: 0px;" =

valign=3D"top">=0D=0A
1MRNe2cUAoEg~~/AAAHUQA~/RgRooWqEP0UgMTAzMzFkNmM4YThmZGJjZTc5NTRiYjE1MmRmMDA=

4ZDBEKWh0dHBzOi8vd3d3LmluZGlhbm9jZWFuZXhwZXJpZW5jZXMuY29tLmF1VwVzcGNldUIKZr=

yE5b5mxulv2VIWam9lLndha2Vyc2VuQHlhaG9vLmNvbVgEAACPDQ~~" >
//gallery.eocampaign1.com/a9b87556-3763-11ef-8fd1-fb3aafa3750b%2Fmedia-mana=

ger%2F1723786243372-Screenshot%202024-08-16%20at%201.29.48%20pm.png" width=

=3D"600" style=3D"=0D=0Awidth: 100%;=0D=0Amax-width: 100%;=0D=0Aobject-fit:=

cover;=0D=0Apadding: 0;=0D=0Aoutline: none;=0D=0Aborder: none;=0D=0Adispla=

y: block;=0D=0A">
=0D=0A

le role=3D"presentation" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" a=

lign=3D"center" width=3D"100%" eo-block=3D"text" bgcolor=3D"">=0D=0A=

=0D=0A=0D=0A
-bottom: 15px;">=0D=0A

-align: center">ADVERTISEMENT: Click to find out more abou=

t Indian Ocean Experiences.
Would you like this space to promote=

your business=3F
 
Email matt.eeles@fremantleherald.com to=

find out how. 
=0D=0A=0D=0A=0D=0A=0D=0A<=

/table>
: 100%;=0D=0A" eo-block=3D"divider" role=3D"presentation" aria=3D"hidden">=

=0D=0A=0D=0A=0D=0A=0D=0A
>=0D=0A=0D=0A

padding-bottom:15px;">=0D=0A
ng=3D"0" align=3D"center" style=3D"border-top:1px solid #DCD6D1;border-coll=

apse:collapse; width:100%">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A
=0D=0A
pan>=0D=0A
=0D=0A

s=3D"container" align=3D"center" cellpadding=3D"0" cellspacing=3D"0" width=

=3D"100%" style=3D"margin-bottom: 0px; margin-top: 0px; position: static;" =

eo-block=3D"image" bgcolor=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

enter" class=3D"hero" style=3D"border-collapse: collapse; border-spacing: 0=

px; margin: 0px; padding: 0px;" valign=3D"top">=0D=0A
r.eocampaign1.com/f/a/zz7niI_omIWpqdRllH-kpA~~/AAAHUQA~/RgRooWqEP0UgNDBjZDB=

iODMzZDFlZmNmMmU5M2U1ZjA3NjcyMTYxYWNERmh0dHBzOi8vaGVyYWxkb25saW5lam91cm5hbC=

5jb20vd3AtY29udGVudC91cGxvYWRzLzIwMjQvMDgvdm9pY2UtMS5wZGZXBXNwY2V1QgpmvITlv=

mbG6W_ZUhZqb2Uud2FrZXJzZW5AeWFob28uY29tWAQAAI8N" >
ry.eocampaign1.com/a9b87556-3763-11ef-8fd1-fb3aafa3750b%2Fmedia-manager%2F1=

723786143425-Screenshot%202024-08-16%20at%201.23.09%20pm.png" width=3D"600"=

alt=3D"" style=3D"=0D=0Awidth: 100%;=0D=0Amax-width: 100%;=0D=0Aobject-fit=

: cover;=0D=0Apadding: 0;=0D=0Aoutline: none;=0D=0Aborder: none;=0D=0Adispl=

ay: block;=0D=0A">
=0D=0A

ble role=3D"presentation" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" =

align=3D"center" width=3D"100%" eo-block=3D"text" bgcolor=3D"">=0D=0A
>=0D=0A=0D=0A
g-bottom: 15px;">=0D=0A

t-align: center">Click the cover to read your latest edition!
=

=0D=0A=0D=0A=0D=0A=0D=0A
=3D"container" align=3D"center" cellpadding=3D"0" cellspacing=3D"0" width=

=3D"100%" style=3D"margin-bottom: 5px;margin-top: 5px;" eo-block=3D"image" =

role=3D"presentation" bgcolor=3D"">=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A

=3D"center" class=3D"hero" style=3D"border-collapse: collapse; border-spaci=

ng: 0px; margin: 0px; padding: 0px;" valign=3D"top">=0D=0A
://gallery.eocampaign1.com/a9b87556-3763-11ef-8fd1-fb3aafa3750b%2Fmedia-man=

ager%2F1721969714543-Screenshot%202024-07-26%20at%2012.55.06%20pm.png" widt=

h=3D"600" style=3D"=0D=0Awidth: 100%;=0D=0Amax-width: 100%;=0D=0Aobject-fit=

: cover;=0D=0Apadding: 0;=0D=0Aoutline: none;=0D=0Aborder: none;=0D=0Adispl=

ay: block;=0D=0A">=0D=0A

role=3D"presentation" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" alig=

n=3D"center" width=3D"100%" eo-block=3D"text" bgcolor=3D"">=0D=0A=0D=

=0A=0D=0A

ttom: 15px;">=0D=0A

ign: center">Your family-owned, ind=

ependent newspaper since 1989!

-align: center">
NEWSPAPER HOUSE=


37-45 Cliff Street,&nbs=

p;Fremantle WA 6160
Postal: PO Box 85 North Freman=

tle, WA 6159

ont-size: 14px">
Editor / Chief of Staff: Steve Grant&n=

bsp;

=3D"mailto:Grant=EF=BF=BCnews@fremantleherald.com">
: 14px">
news@fremantleherald.com

px"> or

oreferrer nofollow" href=3D"mailto:news@perthvoice.com">
-size: 14px">news@perthvoice.com
=



Advertising Director: Matt Eeles

et=3D"_blank" rel=3D"noopener noreferrer nofollow" href=3D"mailto:matt.eele=

s@fremantleherald.com">matt.eeles@fremantle=

herald.com


GET PA=

ID TO GET FIT!

Become a

px">Herald
and
style=3D"font-size: 14px">Perth Voice

14px"> distributor today! 
Distribution Manager: =

Stephanie Campbell