AAA Emergency Kit Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Jan 2026 10:04:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vl8we-00000000PZq-3FAj

for dave@doctor.nl2k.ab.ca;

Wed, 28 Jan 2026 10:03:08 -0700

Resent-From: The Doctor

Resent-Date: Wed, 28 Jan 2026 10:03:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [89.185.81.110] (port=47751 helo=maxdulsin.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

id 1vl8Ib-00000000KEt-3HGZ

for doctor@nl2k.ab.ca;

Wed, 28 Jan 2026 09:21:54 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;

h=Date:To:From:Subject:Content-Type:Mime-Version; i=doctor@nl2k.ab.ca;

bh=dvChNaXys5enYm8YiS7ZibX8sSg=;

b=YkInBBrT6a4F4aqqN6j6JbPsrYogHvJZltTZ+/OlIjWNh2YYOBy4k/JUJjI81JJ52e9/fPfSHA39

GaPEtshATMsk1UgGzUTbMCyWL3kC4eP/s+yVtit3jROR5rf4Q7UxrzIGSAzOwHGO5DmR/FkCZueA

29qqdesY2Hcn9JjQkqg=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;

b=2SsbFRwoSpPsArlj1BSrG1fJb2DevYaKG67ErQUkJxzydUaUxtX/MdxMBhQVrxBNzHg9b6KBYHME

dqtxbP0YXvc6mL3Tixfwfc2DUUgJhlMwaQL5irlSI2VwzSzW80O+9Bi8vs6vNS7Iu0P5+jzZon8A

IXjPARE5M7zqXQS/Cos=;

Date: Wed, 28 Jan 2026 16:20:54 +0000

To: doctor@nl2k.ab.ca

From: AAA

Subject: Final notice coming for Car Emergency Kit Reward

Content-Type: text/html

Mime-Version: 1.0

X-Spam_score: 21.6

X-Spam_score_int: 216

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Stocksy Email AAA Member Benefits Hello , Today's Winner

is doctor.



Content analysis details: (21.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[89.185.81.110 listed in will-spam-for-food.eu.org]

[89.185.81.110 listed in will-spam-for-food.eu.org]

[89.185.81.110 listed in will-spam-for-food.eu.org]

[89.185.81.110 listed in will-spam-for-food.eu.org]

[89.185.81.110 listed in will-spam-for-food.eu.org]

[89.185.81.110 listed in will-spam-for-food.eu.org]

[89.185.81.110 listed in will-spam-for-food.eu.org]

[89.185.81.110 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[89.185.81.110 listed in dnsbl.ahbl.org]

[89.185.81.110 listed in dnsbl.ahbl.org]

[89.185.81.110 listed in dnsbl.ahbl.org]

[89.185.81.110 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[89.185.81.110 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[89.185.81.110 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[89.185.81.110 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[89.185.81.110 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.4 HTML_OBFUSCATE_20_30 BODY: Message is 20% to 30% HTML obfuscation

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.5 HTML_TAG_BALANCE_CENTER Malformatted HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 HTML_SINGLET_MANY Many single-letter HTML format blocks

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

3.6 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

1.4 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

Subject: {SPAM?} Final notice coming for Car Emergency Kit Reward

Web/SEO/App Spam from Google Gmail Part 2

We propose to design and develop a small, responsive website (typically 5-10

pages) that includes:



. Custom, modern design aligned with your brand identity.



. Fully responsive layout for desktop, tablet, and mobile devices.



. Easy-to-manage backend (WordPress, Webflow, or custom CMS).



Would you like me to make a customized version (e.g., for a specific client,

business type, or platform like WordPress or Shopify)? I can tailor it with

your brand details and pricing.



Prepared by:

[Antoine]









------=_NextPart_000_002E_01DC906F.FF1E07C0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















 Hello





I hope you are doing well





We propose to design and develop a small, responsive =

website


(typically 5–10 pages) that includes:






lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
style=3D'font:7.0pt "Times New =

Roman"'>        

Custom, modern design aligned with your =

brand

identity.






lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
style=3D'font:7.0pt "Times New =

Roman"'>        

Fully responsive layout for desktop, =

tablet, and

mobile devices.






lfo1'>
style=3D'font-size:10.0pt;font-family:Symbol'>
style=3D'mso-list:Ignore'>·
style=3D'font:7.0pt "Times New =

Roman"'>        

Easy-to-manage backend (WordPress, =

Webflow, or

custom CMS).





Would you like me to make a
style=3D'font-family:

"Calibri","sans-serif"'>customized version
(e.g., for a

specific client, business type, or platform like WordPress or Shopify)? =

I can

tailor it with your brand details and pricing.






style=3D'font-family:"Calibri","sans-serif"'>Prepared

by:



[Antoine]





















------=_NextPart_000_002E_01DC906F.FF1E07C0--

Web/SEO/App Spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Jan 2026 07:13:02 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vl6Hh-00000000Em6-28tu

for dave@doctor.nl2k.ab.ca;

Wed, 28 Jan 2026 07:12:41 -0700

Resent-From: The Doctor

Resent-Date: Wed, 28 Jan 2026 07:12:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f181.google.com ([209.85.214.181]:61586)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vl2ut-00000000Jt3-0ZyK

for sales@nk.ca;

Wed, 28 Jan 2026 03:37:16 -0700

Received: by mail-pl1-f181.google.com with SMTP id d9443c01a7336-2a0ac29fca1so50074875ad.2

for ; Wed, 28 Jan 2026 02:36:07 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1769596561; x=1770201361; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=Il+TwGvWveFWET8oRAyC3aFezoRBFigfcJOQ0Lkb8uI=;

b=gLfPD404w8prwiDL/tQeoKO62g4Oa92abJVseurr1UpGg4pTOxo6/Ec878pnI/JBPd

lUkFWa6t7GaOXv198Be/ICtvPedX59j1SMI53PMiZO8Ev8bpNH73Q87j6fhiLtGDrgFG

GILBlLGO+MY2v8nzyLaYpk9IhqPUwZm5lGFINQ9IBroAgWSLCd9zefKfsh7QA/mjCrBn

WVY/lQ25WpTvUnrwWu5VAfjS8nPqnhxypTh1jneoYkML6YDOguwG23iAB/doimMDPJMP

P7RA+7KhCQrOBeey1VUso2GWqCatkgIAO5+B5pdzPOwC+J/nBK9+cv6np8P2Zx+3BnAj

GqXw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769596561; x=1770201361;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=Il+TwGvWveFWET8oRAyC3aFezoRBFigfcJOQ0Lkb8uI=;

b=pmmHHIBVfh6lymaLBB+DeBns5iMT13e4xf4+jon/Pz+Fh73Xo5bF6HYr+MMVqoix7H

ORAInqiLizu063V3y/PASe9PQYfDMmkC6yq3GiB6iMEFSxDVeeqCl3Npqwfwmvq5BtRP

JHWS6BfzYSrkG647qVfCjryxUQWDCk67BqSancX1W42G3OiN5stdLyx8/0S0CwCmPeCp

4kWOyNfXwRaC2H4wY4sANe5j91msCdfX0v1Ip7qDvfz4JsurmDa6qFARw1W/LPYWCCTT

7ng96oDsPc1kuXX9R5XaVJzMDtxfJev+9zOnTY1pB/KAaHin8X650bx2aKcFdklF0ruS

6faw==

X-Gm-Message-State: AOJu0YxjF1NswjiiA+Ev71/OUb07KFw22CGMhIBIZpjtbs2hy98o7YYc

Hm4PugfPUXr77Du47tjmmzLeks6ebGoZwtMyHY1Zb9ZCVhFNFJY3ajwGzDjst4Cl

X-Gm-Gg: AZuq6aLozxsMJgZcs87/DOATiFrVlk89LssE9QtHaryXQvIcZyJDW1qf0ueuOZ3hIox

y0gFdLCj1dA1kJDaPtMxjN7qaihPNTOYBmBhqfredBrIf1CzlsdhaXiycCdZ06/iotHrUSorQOW

5mskw+Xf0TW3vt5bKs0Eaoin/VihYS9kyXvREmtEdEgweJY9nraQVIIypzEBApYrGrptZz6MKXb

5pCPWHZQ7+v5KQwOQQesq3MI+CD2KGZuMhFKV+vcnYGwswkg4DaingA1NKgvvJmGZ/9a9XXz23Y

cD7fXnGFetDdACyQrndiXOBg7/BN5t7xQUkgYyjFMaCqxpnjkexlzWHHNFibSkB0qOcHQ21hQ9R

Df9XyQgNCZfttZgyN2mODCryKOt3bwKgK8uyFqtm+A3UERirwd8qH1cUeL6Xz/2GABug9LWvwQa

DrPi4ABE4E4cuGYR+Mp8TfBHLrnbumcEE=

X-Received: by 2002:a17:902:da82:b0:2a1:3e15:380e with SMTP id d9443c01a7336-2a870dc88aemr43870355ad.34.1769596560670;

Wed, 28 Jan 2026 02:36:00 -0800 (PST)

Received: from DESKTOP34DRMQP ([2409:40e4:27:c334:f56b:fe80:48d3:e19d])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2a88b5d9a70sm19206805ad.77.2026.01.28.02.35.58

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 28 Jan 2026 02:36:00 -0800 (PST)

From: "Antoine"

To:

Subject: Website

Date: Wed, 28 Jan 2026 16:05:57 +0530

Message-ID: <002d01dc9041$e565cbc0$b0316340$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_002E_01DC906F.FF1E07C0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdyQPzv9yimK5y7cStK8xRQ9dkUQgg==

Content-Language: en-in

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello I hope you are doing well We propose to design and

develop a small, responsive website (typically 5-10 pages) that includes:



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[will-spam-for-food.eu.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[will-spam-for-food.eu.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[will-spam-for-food.eu.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[will-spam-for-food.eu.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[will-spam-for-food.eu.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[will-spam-for-food.eu.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[will-spam-for-food.eu.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[will-spam-for-food.eu.org]

[209.85.214.181 listed in will-spam-for-food.eu.org]

[209.85.214.181 listed in will-spam-for-food.eu.org]

[209.85.214.181 listed in will-spam-for-food.eu.org]

[209.85.214.181 listed in will-spam-for-food.eu.org]

[209.85.214.181 listed in will-spam-for-food.eu.org]

[209.85.214.181 listed in will-spam-for-food.eu.org]

[209.85.214.181 listed in will-spam-for-food.eu.org]

[209.85.214.181 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.181 listed in dnsbl.ahbl.org]

[209.85.214.181 listed in dnsbl.ahbl.org]

[209.85.214.181 listed in dnsbl.ahbl.org]

[209.85.214.181 listed in dnsbl.ahbl.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[dnsbl.ahbl.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[dnsbl.ahbl.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[dnsbl.ahbl.org]

[2409:40e4:27:c334:f56b:fe80:48d3:e19d listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.181 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.181 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.181 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[antoinettebr98(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[antoinettebr98(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Website



This is a multipart message in MIME format.



------=_NextPart_000_002E_01DC906F.FF1E07C0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello



I hope you are doing well

Nigerian spam from Google Gmail part 2

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.68 listed in dnsbl.ahbl.org]

[209.85.128.68 listed in dnsbl.ahbl.org]

[209.85.128.68 listed in dnsbl.ahbl.org]

[209.85.128.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.68 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.68 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrjohnbenson82(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mrjohnbenson82(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.68 listed in wl.mailspike.net]

2.5 HK_SCAM_N2 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 HK_SCAM No description available.

1.0 FREEMAIL_REPLY From and body contain different freemails

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Greetings,



--0000000000006b84d006496fbb80

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings,



My name is John Benson and I work with Truist Financial Bank USA, I have an

interesting business proposal for you. Reply to me if you are interested.

If not, kindly ignore it.



Mr. Scott A. Stengel (the bank's Chief Legal Officer) discovered a customer

whose account has been dormant for years thus having the same surname as

you. The customer left the sum of $150,000,000.00 usd at the bank over the

years. Although, the client and his family member died in a plane crash in

2009 with no heir to claim the fund. After a long search, we saw your name

closely related to the customer=E2=80=99s name which is what we need to mak=

e the

transfer into your bank account.



Therefore, we wish to present you before the board of directors as the next

of kin since no one is here to inherit the funds. The bank policy says

after 10years, money deposited will be shared within the board of directors

if dormant.



Now Mr. Scott will be available to attend to you with further details upon

this transaction and you shall have no risk on this transaction. Contact

him now on (mr.scotstengel@gmail.com) for details. This is an opportunity

for you my friend. I am glad to inform you.



Do let me know for a follow up once you contact him.



Thank you and have a nice day,

Mr. John Benson.



--0000000000006b84d006496fbb80

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





Greetings,





My name is John Benson and I work with Truist Financial Bank USA, I have

an interesting business proposal for you. Reply to me if you are=20

interested. If not, kindly ignore it.





Mr. Scott A. Stengel (the bank's Chief Legal Officer) discovered a=20

customer whose account has been dormant for years thus having the same=20

surname as you. The customer left the sum of $150,000,000.00 usd at the=20

bank over the years. Although, the client and his

family member died in a plane crash in 2009 with no heir to claim the=20

fund. After a long search, we saw your name closely related to the=20

customer=E2=80=99s name which is what we need to make the transfer into you=

r=20

bank account.





Therefore, we wish to present you before the board of directors as the=20

next of kin since no one is here to inherit the funds. The bank policy=20

says after 10years, money deposited will be shared within the board of=20

directors if dormant.





Now Mr. Scott will be available to attend to you with further details=20

upon this transaction and you shall have no risk on this transaction.=20

Contact him now on (
blank">mr.scotstengel@gmail.com
) for details. This is an opportunity

for you my friend. I am glad to inform you.





Do let me know for a follow up once you contact him.





Thank you and have a nice day,


Mr. John Benson.=20







--0000000000006b84d006496fbb80--

Nigerian spam from Google Gmail part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Jan 2026 07:13:01 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vl6HJ-00000000Ek6-1qiF

for dave@doctor.nl2k.ab.ca;

Wed, 28 Jan 2026 07:12:17 -0700

Resent-From: The Doctor

Resent-Date: Wed, 28 Jan 2026 07:12:17 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f68.google.com ([209.85.128.68]:39008)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vl2hr-00000000IVs-2jfP

for doctor@doctor.nl2k.ab.ca;

Wed, 28 Jan 2026 03:23:38 -0700

Received: by mail-wm1-f68.google.com with SMTP id 5b1f17b1804b1-4806b8fca44so698715e9.0

for ; Wed, 28 Jan 2026 02:22:40 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1769595754; cv=none;

d=google.com; s=arc-20240605;

b=e1R/5eQTZvMHS+IEQSW+mn6Y9m81Yqe7hXYsyT77wf1WKDnwwn10I+i9oxfeEbQQPy

vtH8ffl/++eRx0UJ5W7d0dwXgVOBFd8VJH3SMmRn8SObrez3IvvzLvTyGsv2Tkn8wjH3

nrUBfNQ4fh0uE6Tisjf6yKxYTN9wSE0/Rsy4VT01A7JL6f4q39Z34B0ouR2gJL864JAf

uTRtrdXtJ1n34+0riVptiLEkQQIt3V5uzCyxPPe7vBx9acNwDj3pnC992QhRQ6j9OTLb

i5Ow6MbUDkuu26wBso6hdestDa4pdccQMpBma17q2244ojtIOQ5h+u5cIgwogXJ4bxN4

kaSw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=VZY0EMft1BJO9vxQyMvbfGyeGC5HAih8w3oryx60s44=;

fh=l1ou4/Ah9zTTEsrB9Mq9Ep1pW/dlYb0wzhdfqExwvA4=;

b=aDN8rR/Bgx3j3mRGHnZLuMOIL4Poy4eYLn6KxEsJoSblCrlZ6ytFmHoPletCzcUydN

X5HeGMzXHOD8Wpbskxa4lzEyqOwxkXb0sZp+SJGndr14gVdaGSiGj+cBdPj9s2iPIOAo

jWLIPaLVSLL/acvGDn5b+7m0Gl6x1jdHh0jQgGOfrTQFAG2F31hF4quh2MQlzoeS0b3D

xuvNwd1/Uubn8XkRJR2COOjfCVnCN6//D0fm444hB2xoeDsAYh/9Xebitl01RNySCsQ3

Cq5KO4Hku88F0zameG0abbbpZRfHgKfk4dLiT33GRoFT1l5y6FTGVNG3CoQBqUMTSY2m

H1Sw==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1769595754; x=1770200554; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=VZY0EMft1BJO9vxQyMvbfGyeGC5HAih8w3oryx60s44=;

b=O4UzphU8K2iNve0pN7K61zywbXInuNc/vcp7k2L2yFLrrqSPPNRehWHh38EmucmHZ0

/PxD6oVAzKkq1kRB0WYMHWStIwwZfRcLObv10p2J5ogB2eo8Epu/xQYSwvjniMqtSeSo

zLwSYucOAA+8+NRVDMT5uHdmE85u7EMK3T7UOn0V43Gh0ZfSKiLbox1PFsGpiko75nRn

7quohLbE6Xv+s4crpj0MdTkkTYpnelDKJkkLGMnIRGubHfWJ64CXTkXK6/khR1mNbBN9

XwQhBHqUp9fYOWfF8kpcsJFh8pVPdB3cuEZlqryJ++0p1/Q9d+3Qmm6nU7wDfLW0lYpf

lXnA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769595754; x=1770200554;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=VZY0EMft1BJO9vxQyMvbfGyeGC5HAih8w3oryx60s44=;

b=Bt2EladvzP/7aY+jLy7EAoqxAZT6I4WXErCewkTp6uC66a6lQRjYFCQMTRTImw+IP1

XWopTO3MM2O0tHS7t/rk4/QTCqaTvKb1TxKYrldeLeR5aXHtUxORSu6bTRIR4DdgvxMI

hVO6JINyr01INzGYhU9/zB20qX1z4RP02N1ZxaAWTOAVWOEBbGwWBr5bqbpAfM1ryYug

UhdD3Rw1jYYxiDN9YcBQWRWK/eXgkFvxVWzf+aQkSJFqnDBTf7nto/VynQLKkaMNPOkF

/7/SLr/l9xfOijLCVLnzwgT5Es8yz4Ci3zHXF78PdnvSRcSLQNGnN2/ua5rBRuZkTFs3

bw0w==

X-Forwarded-Encrypted: i=1; AJvYcCV4ubTar7nAcqt6mHOV7kaJA72Ic9T+NpaFmtGic6XhyLofqGOPhqGJJUQ5H3VJ01zhE2fjNoM=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YzkVDd4DAYj9q5P+m1tS/Vo5nrBAV0JsIZk1IcOOWxzltMlWmXy

Rz6oEvQSrviD4EF6/aFdFUzFCR+HKpIgXg9PPCusc4g3Xhn8XUs7lIhs2zaXOBxWGnzvOdfXiKY

iTR5YOfbfEeOhqU0oizaLIVuXXeNVg2GTEL+o3mTGmoDDwuwpAA==

X-Gm-Gg: AZuq6aKd1bUUqTKxltmYkRn8lnYfKJpBldTRCAplIrHi4tMTHLQyO6ia84cnCnTEnhS

hIXSgbLgCwAw1GHwmKy9KOaq/9h+2WJ00e9C6zLR6TWwjFZVrttxkgwAsFuf94ClOcbBMcmZ/wE

QlXIwCpBfM+StJYE90l1V04HCuNsc1u/EUsGAtGg0q5d27CSDtR+3PXB3DD+Z/PhCVWDmFodN+d

kuMew5asnCWPe7y9ndMT5aW2ZxFYHHd6vRBBAwfVZGQdIpXS7swc86n5XgRbRBXRTDFnQtlGg==

X-Received: by 2002:a17:906:6a1b:b0:b87:3087:54f0 with SMTP id

a640c23a62f3a-b8dc8433d58mr52470366b.3.1769594094845; Wed, 28 Jan 2026

01:54:54 -0800 (PST)

MIME-Version: 1.0

From: John Benson

Date: Wed, 28 Jan 2026 01:54:41 -0800

X-Gm-Features: AZwV_QhIZxk4zbA4IGrXojrpkTj74JYYCvH49QWKSqQcrHLXmJ8txlvWYdDneBI

Message-ID:

Subject: Greetings,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000006b84d006496fbb80"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 19.3

X-Spam_score_int: 193

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, My name is John Benson and I work with Truist

Financial Bank USA, I have an interesting business proposal for you. Reply

to me if you are interested. If not, kindly ignore it. Mr. Scott A. Stengel

(the bank's Chief Legal Officer) discovered a customer whose account has

been dormant for years thus having the same surname as you. The customer left

the sum of $150,000,000.00 u [...]



Content analysis details: (19.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.68 listed in will-spam-for-food.eu.org]

[209.85.128.68 listed in will-spam-for-food.eu.org]

[209.85.128.68 listed in will-spam-for-food.eu.org]

[209.85.128.68 listed in will-spam-for-food.eu.org]

[209.85.128.68 listed in will-spam-for-food.eu.org]

[209.85.128.68 listed in will-spam-for-food.eu.org]

[209.85.128.68 listed in will-spam-for-food.eu.org]

[209.85.128.68 listed in will-spam-for-food.eu.org]

Web/SEO/App Spam Part 3























































--=_3f542121f1d0bb08c22f85213e82966f--

Web/SEO/App Spam Part 2

--=_3f542121f1d0bb08c22f85213e82966f

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8











































Hi,





I came across some technical issues on your website that could be imp=

acting your search visibility.





Can I share a screenshot=

of the problem?





Thanks!


Emma


Marketing Manager





Note: Simple Reply =3D =

Yes/ Okey /Sure





























Web/SEO/App Spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Jan 2026 07:12:02 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vl6H3-00000000Ei1-3B98

for dave@doctor.nl2k.ab.ca;

Wed, 28 Jan 2026 07:12:01 -0700

Resent-From: The Doctor

Resent-Date: Wed, 28 Jan 2026 07:12:01 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [119.252.152.111] (port=58522 helo=f5mail-147-120.rediffmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vl1ub-00000000Dec-3Zjb

for sales@nk.ca;

Wed, 28 Jan 2026 02:32:42 -0700

Received: from f4mail-235-104.rediffmail.com (unknown [10.50.250.70])

by f5mail-147-120.rediffmail.com (Postfix) with ESMTP id 083822AC5B8

for ; Wed, 28 Jan 2026 14:59:30 +0530 (IST)

X-REDIFF-Delivered-Remotely-To: sales@nk.ca

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rediffmail.com;

s=mail; t=1769592695;

bh=VIYbwGMksVRV0Isy/5nvrpIxUrPFU+ZQxEmEj3F9Z7c=;

h=MIME-Version:From:Date:Message-ID:Subject:To;

b=O+PiSdV7GvK7u942QD/5V//HweLTZ18Xo+KYxNzkgzaG0JLKrqEGBatRhQpsGkWKg

W8vkxlQ0XKn1tgqARkOR4dzNDLsUtx/nfRiVMLG+5Px3N96E0hEWl9RR/DBnm+RzGl

XSdh5/JH6N9Nn25TOTW31dtNFtynfgwygyol+h3c=

Received: (qmail 29924 invoked by uid 510); 28 Jan 2026 09:31:35 -0000

x-m-msg: 693090c614647a69a614f632bd08f524; a6da7d6asas6dasd77; 5dad65ad5sd;

X-OUT-VDRT-SpamState: 0\LEGIT

X-OUT-VDRT-SpamScore: 0

X-OUT-VDRT-SpamCause: "gggruggvucftvghtrhhoucdtuddrgeefuddrtddtucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecutffgfffkhffhnecuuegrihhlohhuthemuceftddtnecunecujfgurhepffggvffkjghsuffhtgesrgdtreertddtjeenucfhrhhomhepfdfgmhhmrgcuufgtohhtthdfuceovghmmhgrshgtohhtthhsmhgrihhlsghogiesrhgvughifhhfmhgrihhlrdgtohhmqeenucggtffrrghtthgvrhhnpedvffeiveejffffffduhfeiuefhkeeggfeifefggfeifeeuudetvdeguddtheevleenucfkphepuddvvddrudeiuddrhedvrddutdegnecuvehluhhsthgvrhfuihiivgepudenucfrrghrrghmpehmrghilhhfrhhomhepvghmmhgrshgtohhtthhsmhgrihhlsghogiesrhgvughifhhfmhgrihhlrdgtohhmpdhnsggprhgtphhtthhopeehpdhmohguvgepshhmthhpohhuthdprhgtphhtthhopehmuhhkvghshhhshhgrrhhmrghrnhhfsehgmhgrihhlrdgtohhmpdhrtghpthhtohepgfhrnhgvshhtohdrifdrnfgrvhgrnhguvghrohesrggvgihprdgtohhmpdhrtghpthhtohepjhgshigtkhesugihmhhonhdrtggrpdhrtghpthhtohepihhnfhhosehfrhgrshgvrhhrvghsthgruhhrrghnthdrtggrpdhrtghpthhtohepihhnfhhosegvrghsthgruhhsthhinhgrthhhlhgvthhitggtlhhusgdrtghomh"

X-Dedup-Identifier: 1769592695_29922_29920_f4-235-104

Date: 28 Jan 2026 09:31:35 -0000

MIME-Version: 1.0

To:

Received: from unknown 122.161.52.104 by rediffmail.com via HTTP; 28 Jan 2026

09:31:35 -0000

Message-ID: <1769592635.S.16739.26421.f4mail-235-104.rediffmail.com.1769592695.29903@webmail.rediffmail.com>

In-Reply-To: <1769592608.S.15896.24556.f4mail-235-104.rediffmail.com.1769592634.26331@webmail.rediffmail.com>

Sender: emmascottsmailbox@rediffmail.com

Sensitivity:

Subject: =?utf-8?B?UmU6IFdlYnNpdGUgRXJyb3IgRGV0YWlscw==?=

From: "Emma Scott"

Content-Type: multipart/alternative;

boundary="=_3f542121f1d0bb08c22f85213e82966f"

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I came across some technical issues on your website that

could be impacting your search visibility.



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[119.252.152.111 listed in will-spam-for-food.eu.org]

[119.252.152.111 listed in will-spam-for-food.eu.org]

[119.252.152.111 listed in will-spam-for-food.eu.org]

[119.252.152.111 listed in will-spam-for-food.eu.org]

[119.252.152.111 listed in will-spam-for-food.eu.org]

[119.252.152.111 listed in will-spam-for-food.eu.org]

[119.252.152.111 listed in will-spam-for-food.eu.org]

[119.252.152.111 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[119.252.152.111 listed in dnsbl.ahbl.org]

[119.252.152.111 listed in dnsbl.ahbl.org]

[119.252.152.111 listed in dnsbl.ahbl.org]

[119.252.152.111 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[119.252.152.111 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[119.252.152.111 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[119.252.152.111 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[119.252.152.111 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[119.252.152.111 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[emmascottsmailbox(at)rediffmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.5 STYLE_GIBBERISH Nonsense in HTML =0A=0A
normal; word-spacing: normal;" dir=3D"ltr">=0A=0A
ellspacing=3D'0' border=3D'0' width=3D'100%'>=0A=0A<=

/tbody>

ff' valign=3D'top'>=0A=0A =0A=0A
e border=3D"0" cellpadding=3D"0" cellspacing=3D"0" align=3D"center" width=

=3D"100%" style=3D"border-collapse: collapse; width: 100%;" class=3D"tnpc-r=

ow tnpc-row-block ui-sortable-handle" data-id=3D"image">=0A

lign=3D"center" style=3D"padding: 0;" class=3D"edit-block">
block-content" border=3D"0" cellpadding=3D"0" align=3D"center" cellspacing=

=3D"0" width=3D"100%" style=3D"width: 100%!important; max-width: 600px!impo=

rtant">=0A=


-height: normal !important; letter-spacing: normal; mso-line-height-rule: e=

xactly; outline: none; padding: 15px 0px 15px 0px;background-color: #ffffff=

;" bgcolor=3D"#ffffff">
=3D"0" border=3D"0">

k.canadiancarshipping.cc/wp-json/wp-mail-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19p=

ZCU1RD0xNjY4NTM0JmRhdGElNUJldmVudF90eXBlJTVEPWNsaWNrLWxpbmsmZGF0YSU1Qm9iamV=

jdF9pZCU1RD04MzMzMjg4JmRhdGElNUJ1cmwlNUQ9aHR0cHMlMjUzQSUyNTJGJTI1MkZjbGljay=

5jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHIlMjUzRE1UYzdNVE01TkRRMU1qd=

G9kSFJ3Y3pvdkwzZDNkeTVqWVc1aFpHbGhibU5oY25Ob2FYQndhVzVuTG1OdmJUczdNek5rTVdW=

aE5qTTRZek5qTURWaE9ESXlZbVUxWVRFME5HSXhOVGRpTWpNJTI1MjUzRCZoYXNoPTgzZmJiZWI=

1MGY5NmY1YjZmZDNjYzZkYTY4M2Y4ODM4MTg4YTg2OTY0ODQ4Zjg4ZTYwYmMxYWRkNjE0OTI4ZG=

M=3D" target=3D"_blank" rel=3D"noopener nofollow" style=3D"display: block; =

font-size: 0; text-decoration: none; line-height: normal!important">
c=3D"https://click.canadiancarshipping.cc/wp-content/uploads/2025/07/Canadi=

an-logo.png" width=3D"354" height=3D"115" alt=3D"" border=3D"0" style=3D"di=

splay: block; height: auto; max-width: 354px !important; width: 100%; paddi=

ng: 0; border: 0; font-size: 12px">

n=3D"center" width=3D"100%" style=3D"border-collapse: collapse; width: 100%=

;" class=3D"tnpc-row tnpc-row-block ui-sortable-handle" data-id=3D"text">=

=0A

k">
ions" class=3D"tnpc-block-content" border=3D"0" cellpadding=3D"0" align=3D"=

center" cellspacing=3D"0" width=3D"100%" style=3D"width: 100%!important; ma=

x-width: 600px!important">=0A

align: center; line-height: normal !important; letter-spacing: normal; mso-=

line-height-rule: exactly; outline: none; padding: 20px 15px 20px 15px;back=

ground-color: #ffffff;" bgcolor=3D"#ffffff">
width: 100%!important" border=3D"0" cellpadding=3D"0" cellspacing=3D"0">=0A=

=0A

ext" style=3D"mso-line-height-rule: exactly; font-size: 16px;font-family: V=

erdana, Geneva, sans-serif;font-weight: normal;color: #222222; line-height:=

1.5;">=0A

Looking to ship your vehi=

cle from the US to Canada?
At
g data-start=3D"447" data-end=3D"472">Canadian Car Shipping, we sp=

ecialize in fast, secure, and affordable cross-border vehicle transport.
>=0A

Whether you=E2=80=99re relocatin=

g, purchasing a car from the US, or managing fleet logistics, our expert te=

am ensures a smooth and hassle-free experience every time.

=0A


art=3D"712" data-end=3D"885">Wh=

at we offer:

=E2=9C=94 Door=

-to-door vehicle transport
=E2=9C=

=94 Full customs documentation assistance

"810">=E2=9C=94 Licensed and insured carriers

d=3D"844">=E2=9C=94 Transparent pricing and timely delivery

=0A


tart=3D"887" data-end=3D"1026">We=E2=80=99ve helped thousands of individual=

s and businesses transport vehicles safely between the US and Canada =

=E2=80=94 and we=E2=80=99re ready to help you too.

=0A


028" data-end=3D"1133">=F0=9F=91=89 Get a free quote today:
ref=3D"https://click.canadiancarshipping.cc/wp-json/wp-mail-smtp/v1/e/ZGF0Y=

SU1QmVtYWlsX2xvZ19pZCU1RD0xNjY4NTM0JmRhdGElNUJldmVudF90eXBlJTVEPWNsaWNrLWxp=

bmsmZGF0YSU1Qm9iamVjdF9pZCU1RD04MzMzMjg5JmRhdGElNUJ1cmwlNUQ9aHR0cHMlMjUzQSU=

yNTJGJTI1MkZjbGljay5jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHIlMjUzRE=

1UYzdNVE01TkRRMU1qdG9kSFJ3Y3pvdkwzZDNkeTVqWVc1aFpHbGhibU5oY25Ob2FYQndhVzVuT=

G1OdmJTOTFjeTEwYnkxallXNWhaR0V2T3pzMU9UYzRPVFF6WWpGbFlUUTVZelEwTjJJMU56bG1P=

VFJqTlRRNE5tWXpaUSUyNTI1M0QlMjUyNTNEJmhhc2g9YTc5MWMzMTI5N2UzNzIwMWE0YjhkMzl=

jMDlkYjViZjJiMmNlYzcyMDU0ZDI0YjA4OTI3OGI3ZmI3OTVkMDI2OQ=3D=3D" target=3D"_n=

ew" rel=3D"noopener" data-start=3D"1055" data-end=3D"1133">Click here to ge=

t started

=0A

Best regards,<=

br data-start=3D"1148" data-end=3D"1151">
nd=3D"1185">The Canadian Car Shipping Team

=0A

"1187" data-end=3D"1190">=0A

 

=0A


=3D"1364">Canadian Car Shippi=

ng

860 Boardman Canfield =

Rd.
Youngstown, Ohio 44512

-start=3D"1270" data-end=3D"1273">(800) 381-6907

a-end=3D"1290">
p-json/wp-mail-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19pZCU1RD0xNjY4NTM0JmRhdGElNU=

JldmVudF90eXBlJTVEPWNsaWNrLWxpbmsmZGF0YSU1Qm9iamVjdF9pZCU1RD04MzMzMjg4JmRhd=

GElNUJ1cmwlNUQ9aHR0cHMlMjUzQSUyNTJGJTI1MkZjbGljay5jYW5hZGlhbmNhcnNoaXBwaW5n=

LmNjJTI1MkYlMjUzRm5sdHIlMjUzRE1UYzdNVE01TkRRMU1qdG9kSFJ3Y3pvdkwzZDNkeTVqWVc=

1aFpHbGhibU5oY25Ob2FYQndhVzVuTG1OdmJUczdNek5rTVdWaE5qTTRZek5qTURWaE9ESXlZbV=

UxWVRFME5HSXhOVGRpTWpNJTI1MjUzRCZoYXNoPTgzZmJiZWI1MGY5NmY1YjZmZDNjYzZkYTY4M=

2Y4ODM4MTg4YTg2OTY0ODQ4Zjg4ZTYwYmMxYWRkNjE0OTI4ZGM=3D" target=3D"_new" rel=

Car shipping phish from Google Gmail Part 2

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: canadiancarshipping.cc]

[URI: click.canadiancarshipping.cc]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.229 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.229 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.229 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.229 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.229 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.229 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Canadian_Car_Shipping_=E2=80=93_Reliable_Vehicle_Transport_from_the_US_to_Canada?=



--b1=_GMpimkQGjXeFWB2aGetmUcCMHaUBpABZkOaA8U3MT6Y

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



Looking to ship your vehicle from the US to Canada?

At Canadian Car Shipping , we specialize in fast, secure, and affordable cross-border vehicle transport.



Whether you’re relocating, purchasing a car from the US, or managing fleet logistics, our expert team ensures a smooth and hassle-free experience every time.



What we offer:

✔ Door-to-door vehicle transport

✔ Full customs documentation assistance

✔ Licensed and insured carriers

✔ Transparent pricing and timely delivery



We’ve helped thousands of individuals and businesses transport vehicles safely between the US and Canada — and we’re ready to help you too.



👉 Get a free quote today: Click here to get started (https://www.canadiancarshipping.com/us-to-canada/)



Best regards,

The Canadian Car Shipping Team



Â



Canadian Car Shipping

860 Boardman Canfield Rd.

Youngstown, Ohio 44512

(800) 381-6907

https://www.canadiancarshipping.com (https://www.canadiancarshipping.com)



Unsubscribe (https://click.canadiancarshipping.cc/?na=u&nk=1394452-a426793b30&nek=17-) Â Â Â |Â Â Â Manage your subscription (https://click.canadiancarshipping.cc/?na=p&nk=1394452-a426793b30&nek=17-) Â Â Â |Â Â Â View online (https://click.canadiancarshipping.cc/?na=v&nk=1394452-a426793b30&id=17)





--b1=_GMpimkQGjXeFWB2aGetmUcCMHaUBpABZkOaA8U3MT6Y

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=0A
urn:schemas-microsoft-com:office:office">=0A=0ACanadian Car Sh=<br /><br /> ipping =E2=80=93 Reliable Vehicle Transport from the US to Canada=

=0A=0A
vice-width, initial-scale=3D1">=0A
ent=3D"IE=3Dedge">=0A
o">=0A=0A
ame=3D"format-detection" content=3D"email=3Dno">=0A
sable-message-reformatting">=0A=0A