Spotify Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 May 2026 04:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQ0aF-00000000OTr-3Uwc

for dave@doctor.nl2k.ab.ca;

Thu, 21 May 2026 04:24:55 -0600

Resent-From: The Doctor

Resent-Date: Thu, 21 May 2026 04:24:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [38.242.154.47] (port=54634 helo=server.34sayfam.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQ06G-00000000KNM-30JL

for root@nk.ca;

Thu, 21 May 2026 03:54:05 -0600

Received: by server.34sayfam.net (Postfix, from userid 1014)

id 521F2104029B; Thu, 21 May 2026 11:53:06 +0200 (CEST)

To: root@nk.ca

Subject: =?UTF-8?B?RmluYWwgd2FybmluZzogUGF5bWVudCBmYWlsZWQgLSBBY2Nlc3MgRmluYWwgTm90aWNl?=

From: Support AB

To: root@nk.ca

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

List-Unsubscribe: ,

Message-Id: <20260521095306.521F2104029B@server.34sayfam.net>

Date: Thu, 21 May 2026 11:53:06 +0200 (CEST)

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You no longer have Spotify Premium. Due to a payment issue,

your Spotify Premium account has been suspended. Your subscription has been

changed to the free Spotify version. With the free plan, you will start hearing

ads, lose the ability to listen offline, and will no longer be able to skip

songs at will.



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[38.242.154.47 listed in dnsbl.ahbl.org]

[38.242.154.47 listed in dnsbl.ahbl.org]

[38.242.154.47 listed in dnsbl.ahbl.org]

[38.242.154.47 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[38.242.154.47 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[38.242.154.47 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[38.242.154.47 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[38.242.154.47 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[38.242.154.47 listed in will-spam-for-food.eu.org]

[38.242.154.47 listed in will-spam-for-food.eu.org]

[38.242.154.47 listed in will-spam-for-food.eu.org]

[38.242.154.47 listed in will-spam-for-food.eu.org]

[38.242.154.47 listed in will-spam-for-food.eu.org]

[38.242.154.47 listed in will-spam-for-food.eu.org]

[38.242.154.47 listed in will-spam-for-food.eu.org]

[38.242.154.47 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[38.242.154.47 listed in bl.score.senderscore.com]

0.0 TVD_PH_7 BODY: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_MXG_BING_REDIR_SUSP BODY: Suspicious Bing redirect

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

4.0 WIKI_IMG Image from wikipedia

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} =?UTF-8?B?RmluYWwgd2FybmluZzogUGF5bWVudCBmYWlsZWQgLSBBY2Nlc3MgRmluYWwgTm90aWNl?=







































































You no longer have Spotify Premium.



Due to a payment issue, your Spotify Premium account has been suspended. Your subscription has been changed to the free Spotify version.



With the free plan, you will start hearing ads, lose the ability to listen offline, and will no longer be able to skip songs at will.



Choose a plan that suits you and get your Premium benefits back today.



View Plans



Spoy



Download Spotify: iPhone | iPad | Android | Other





This message was sent to your email address. Have questions? Contact us.







Spotify AB, Regeringsgatan 19, 111 53, Stockholm, Sweden
















Unsubscribe
ID #TE6FssoQ4qg8LrpdtlU0NFWL5O



Who's Who spam Part 2



From: Sophie Baker

Sent: 1 May 2026 10:34

To: sales@nk.ca

Subject: Canada Prestige Awards 2026



Hi



Just to update you, the awards event calendar has now been finalised for the year. You will be very welcome to any UK or international events for free so if you do want to view this let me know and I’ll send it over. The events offer a great networking opportunity to meet with businesses across a wide range of industries.



We do also have the late nomination process open for the awards if you felt you still want to take part.



I will look forward to hearing from you.



Kind regards,



Sophie Baker

Awards Coordinator

Landline: +44 (0) 121 638 0411

sophie@prestigeawardsguide.co.uk



(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.



To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.



From: Sophie Baker

Sent: 24 April 2026 09:22

To: sales@nk.ca

Subject: Canada Prestige Awards 2026



Hi



I did approach you about being involved in the awards. I am not sure if you saw any of my messages?



We are still accepting entries in a number of categories so if taking part was of interest then do let me know.



Kind regards,



Sophie Baker

Awards Coordinator

Landline: +44 (0) 121 638 0411

sophie@prestigeawardsguide.co.uk



(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.



To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.



From: Sophie Baker

Sent: 25 February 2026 10:23

To: sales@nk.ca

Subject: Canada Prestige Awards 2026



Hi



The nomination stage of our Canada Prestige Awards 2026 is open and we would like to invite to you to take part.



We are reviewing submissions for companies, individuals, products and services. The awards are open to all SMEs who provide a product or service to people or businesses in Canada and therefore can of course be based in other regions.



After the decision making is completed then all winners will be invited to our annual awards event. This gives all of those involved an opportunity to network, meet the judges and take part in promotional press activities which we organise for winners and their guests. All of which is arranged on a complimentary basis.



The Prestige Awards provide the latest news and developments in a variety of industries. Content is available in hard copy print media as well as online features, interviews, competitions and much more. The awards recognise the important work of SME’s and celebrate their many successes and outstanding service over the year.



To learn more about the media platform then please visit www.prestigeawardsguide.co.uk



If you wish to access any subscriber-only content on the website then please let me know and I will provide this on a complimentary basis.



What do I need to do?



Please reply back to us confirming you wish to be considered in this year’s programme.



After we receive your acceptance, you will be placed on the list of shortlisted nominees. Once the allocation of nominations is met, all organisations within that particular category are then passed to our panel of industry expert judges who will ultimately pick a winner. Publicly sourced information is used such as reviews, testimonials, information on the company’s website as well as social media accounts.



Questionnaire & Categories



During the nomination process we give companies and individuals the opportunity to specify the categories they wish to be considered for. We also provide all nominees with the opportunity to submit additional information that may support them being successful in the awards. This could include details on the company, new projects, positive media attention/ other recognition or direct us to online testimonials and customer reviews. This may all have a positive impact on the decision making. Please fill in the short questionnaire provided and include any information you feel relevant.



The questionnaire will be provided once you confirm your participation.



Tell me more about the award programme & who votes



Every year, we invite companies to talk to us about themselves and provide information on why they are worthy of recognition in the awards. We receive submissions from SMEs in all industries who provide products and services to the region. The judges pick a selection of winners in a range of categories.



The awards are a free to enter programme that provide exposure to subscribers looking for information on the very best companies and services.



Once the submissions have been reviewed then winners will be notified by a member of the awards team. Each winner will receive coverage in the awards magazine as well as the website, press releases and will be able to attend the free winner’s event. As previously highlighted, this will give each winner the opportunity to network with other winners, meet the judges and have a photo-shoot with their teams.



For more information on events then please visit our website



Are there any costs?



Unlike many award programmes, we offer no options for companies or individuals to make any financial contributions prior to this year’s decisions being made. This includes the booking of advertorial space or partnership opportunities of any kind.



Winners are chosen by our independent panel made up of select industry experts and our editor-in-chief. This ensures the most deserving are picked each year and decisions cannot be influenced by current relationships.



Not for this year



Although we make every effort to only approach organisations which are relevant to the award categories, we are running this year, you may feel the timing isn’t right for you are the moment. We do not wish to contact people who would rather not be considered so please do let us know if that is the case. You will then be immediately removed and not contacted again about the opportunity.



I do hope we can consider you in the programme and I would be happy to answer any other questions you may have.



Kind regards,



Sophie Baker

Awards Coordinator

Landline: +44 (0) 121 638 0411

sophie@prestigeawardsguide.co.uk



(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.



To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.





Who's Who spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 May 2026 04:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wQ0V8-00000000NSE-1ucU

for dave@doctor.nl2k.ab.ca;

Thu, 21 May 2026 04:19:38 -0600

Resent-From: The Doctor

Resent-Date: Thu, 21 May 2026 04:19:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from fenicemedia-smtp7.myhyve.com ([5.255.58.143]:47445)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPxi3-0000000019I-2hL8

for sales@nk.ca;

Thu, 21 May 2026 01:21:05 -0600

Received: from fenicemediawin7.myhyve.com (unknown [172.19.12.98])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(Client did not present a certificate)

by fenicemedia-smtp7.myhyve.com (Postfix) with ESMTPS id 257AD3152093

for ; Thu, 21 May 2026 05:42:39 +0100 (BST)

MIME-Version: 1.0

From: "Sophie Baker"

Reply-To: sophie@prestigeawardsguide.co.uk

To: sales@nk.ca

Subject: Canada Prestige Awards 2026

Content-Type: multipart/alternative;

boundary="----=_NextPart_001_7744_7D67714B.5CA777AE"

X-Mailer: Smart_Send_4_4_2

Date: Thu, 21 May 2026 05:42:38 +0100

Message-ID: <435647289259214517763@fenicemediawin7>

X-Spam_score: 19.6

X-Spam_score_int: 196

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi The deadline for submitting entries into this year’s

awards is May 22nd. If you do wish to be considered then please let us know

in this time.



Content analysis details: (19.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

[5.255.58.143 listed in dnsbl.ahbl.org]

[5.255.58.143 listed in dnsbl.ahbl.org]

[5.255.58.143 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

15 GR_DOMAIN_SILLYS1 Spammer tool signature (sillysend)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[5.255.58.143 listed in bl.score.senderscore.com]

1.0 OPT_OUT BODY: No description available.

1.6 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Canada Prestige Awards 2026









Hi



This is the final opportunity to be involved in this year’s awards. Unfortunately, as the deadline is May 22nd then no further entries will be accepted after this time.



If you have any questions whatsoever about how the awards work or the value of being involved then please let me know.



If you can’t be involved for this year then I wish you all the best and hope we can consider you in the future.



Kind regards,



Sophie Baker

Awards Coordinator

Landline: +44 (0) 121 638 0411

sophie@prestigeawardsguide.co.uk



(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.



To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.



From: Sophie Baker

Sent: 8 May 2026 09:42

To: sales@nk.ca

Subject: Canada Prestige Awards 2026



Hi



The deadline for submitting entries into this year’s awards is May 22nd.



If you do wish to be considered then please let us know in this time.



As mentioned, there are no fees to take part or to attend the events and meet all of those involved.



If you feel this isn’t the right time to be involved or you simply don’t want to take part in any awards then do let me know so I can ensure you aren’t contacted again for this year.



Kind regards,



Sophie Baker

Awards Coordinator

Landline: +44 (0) 121 638 0411

sophie@prestigeawardsguide.co.uk



(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.



To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.

Chinese products spam Part 3

Hi. We recently published A Global and Regional Market Report on Wafer Defect Inspection System 2026. It analyzes the major market players in the industry, which may bring you new information about the global market.

.

If you have further interest in this report or related reports, we would be happy to share the Sample Report and Quotation for your reference.

.

The following manufacturers are covered:

KLA Corporation

Applied Materials

Lasertec

Hitachi High-Tech Corporation

ASML

Onto Innovation

Camtek

SCREEN Semiconductor Solutions

Skyverse Technology

Toray Engineering

NEXTIN

Suzhou TZTEK (Muetec)

Microtronic

Bruker

SMEE

Hangzhou Changchuan Technology

Wuhan Jingce Electronic Group

Angkun Vision (Beijing) Technology

Nanotronics

Visiontec Group

Hefei Yuwei Semiconductor Technology

Suzhou Secote (Optima)

DJEL

Jiangsu VPTEK

Ever Red New Technology

Confovis

Zhongdao Optoelectronic

Suzhou Xinshi Technology

RSIC scientific instrument (Shanghai)

Gaoshi Technology (Suzhou)

Unity Semiconductor SAS

JUTZE Intelligence Technology

Chroma ATE Inc

CMIT

Engitist Corporation

HYE Technology

Shuztung Group

Cortex Robotics

Takano

Shanghai Techsense

......

Segment by Type

Patterned Wafer Defect Inspection System

Non-patterned Wafer Defect Inspection System

E-beam Wafer Defect Inspection and Classification System

Wafer Macro Defects Detection and Classification

Wafer Inspection System for Advanced Packaging

......

Segment by Application

300mm Wafer Size

200mm Wafer Size

Others

.

This report will walk you through the Wafer Defect Inspection System market from the following aspects in: Consumption, Sales, Revenue, Price, Cost, Gross Margin, Market size, Market share, Growth Rate, Trends, etc.

.

In addition, we can also provide customized market research information on demand, covering customized reports, management consulting, IPO consulting, industry chain investigations, as well as database and research services.

.

Thank you for reading.



Best Regards / Cordiali saluti / 谨致问候

Annie Zhang | Global Sales Manager

E-mail: Annie@winmarketresearch.com

Phone: +86-15812413698 (7*24)

TEL: US: +1-888-365-4458(US) +1-202-499-1434(Int'L)

EU: +44-808-111-0143(UK) +44-203-734-8135(EU)

Asia: +86-20-8520-6863(CN) +852-30628839(HK)

USA Office: 17890 Castleton Street Suite 369 City of Industry CA 91748 United States

China Office: VILI International Building No.167 Tianhe District Guangzhou City China

Chinese products spam Part 2

Content preview: Hi. We recently published A Global and Regional Market Report

on Wafer Defect Inspection System 2026. It analyzes the major market players

in the industry, which may bring you new information about th [...]



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[59.82.0.15 listed in dnsbl.ahbl.org]

[59.82.0.15 listed in dnsbl.ahbl.org]

[59.82.0.15 listed in dnsbl.ahbl.org]

[59.82.0.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[59.82.0.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[59.82.0.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[59.82.0.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[59.82.0.15 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[59.82.0.15 listed in will-spam-for-food.eu.org]

[59.82.0.15 listed in will-spam-for-food.eu.org]

[59.82.0.15 listed in will-spam-for-food.eu.org]

[59.82.0.15 listed in will-spam-for-food.eu.org]

[59.82.0.15 listed in will-spam-for-food.eu.org]

[59.82.0.15 listed in will-spam-for-food.eu.org]

[59.82.0.15 listed in will-spam-for-food.eu.org]

[59.82.0.15 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[59.82.0.15 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[59.82.0.15 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[59.82.0.15 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.5 MIME_BAD_LINEBREAK Message body with fishy line breaks

Subject: {SPAM?} =?utf-8?B?UmVsZWFzZXMgTmV3IFJlcG9ydCAtIFdhZmVyIERlZmVjdCBJbnNw?=

=?utf-8?B?ZWN0aW9uIFN5c3RlbSAyMDI2LTIwMzEg5rW36YeP5pWw5o2u5aSE55CG?=

Chinese products spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Wed, 20 May 2026 21:33:00 -0600

Received: from out0-15.static.mail.aliyun.com ([59.82.0.15]:54019)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPu8z-00000000M7b-25m3

for dave@nk.ca;

Wed, 20 May 2026 21:32:31 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.7876297|0.1049292;BR=01201311R711S98rulernew999_84748_200303;CH=yellow;DM=|AD|false|;DS=CONTINUE|ham_enroll_verification|0.0509211-0.0254323-0.923647;FP=13099583996740149947|5|1|97|0|-1|-1|-1;HT=maildocker-contentspam033032062159;MF=annie.f@winglobalinc.com;NM=1;PH=DS;RN=200;RT=0;SR=0;TI=SMTPD_---.hcapp7J_1779334216;

Received: from DESKTOP-JHFQFMI(mailfrom:annie.f@winglobalinc.com fp:SMTPD_---.hcapp7J_1779334216 cluster:ay29)

by smtp.aliyun-inc.com;

Thu, 21 May 2026 11:30:25 +0800

Date: Thu, 21 May 2026 11:30:16 +0800

From: Annie Zhang

Message-ID:

Subject: =?utf-8?B?UmVsZWFzZXMgTmV3IFJlcG9ydCAtIFdhZmVyIERlZmVjdCBJbnNw?=

=?utf-8?B?ZWN0aW9uIFN5c3RlbSAyMDI2LTIwMzEg5rW36YeP5pWw5o2u5aSE55CG?=

Disposition-Notification-To: Annie Zhang

X-Mailer: MailMasterPC/4.19.4.1001 (Win10 22H2)

X-MailMaster-ShowOneRcpt: 1

X-CUSTOM-MAIL-MASTER-SENT-ID: FCA3C376-2954-45E2-8CDE-A300F76D6A3A

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi. We recently published A Global and Regional Market Report

on Wafer Defect Inspection System 2026. It analyzes the major market players

in the industry, which may bring you new information about th [...]

B2B spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 21:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPtiR-00000000JSU-1VFn

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 21:04:55 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 21:04:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f194.google.com ([209.85.128.194]:51570)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPrKx-00000000Pu0-2qFj

for sales@nk.ca;

Wed, 20 May 2026 18:32:39 -0600

Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-79a535e7c00so54686757b3.3

for ; Wed, 20 May 2026 17:31:13 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1779323468; cv=none;

d=google.com; s=arc-20240605;

b=I+7AY8WLYtfmf0BUqXXYkC5OaQHmXy0a5y6ZKQoQ+/C2ee7LZTkGExSCTRRTsFm1N7

pdufJEsEq7b8KGbUDJn2PA2twMzll5q/XdEi2CiI6McQP0U9a8lqL/de+NnoQQAu3jN5

Rp03bglF0Sq5G9LTC/b/o2P6DmI4QkOfeVb7vfun7gwsmHWnjDoj+31JPGmBo2YIOfWk

97TMFprVW7k1F3Z8w0GPElJIoE/GcrBNFv1LYnttGhmWjp5SX6ho3tK34nc0f+hrCwt9

As+owATTny+P00eykSwsfMOpa5K3KB00I/u9xcKuoRXV9BJ154JcLBxyEmRwUzLVqKcb

I+4w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=t3ObNNsQLPKdPGggweXHFLdbFaJKUtXUcFik3SpWUis=;

fh=SbdvE6ALrfgtYdNRIY5pAlGANFNICGF3/4YPW7cyh8E=;

b=kmKFeOpA+IpS6zCgIEnwCg+n1TTJVgvRioUdZ/4+EaxVH9IN0Bpp3Zfa9nAS94tbU0

KN40JFJ4PDG7G+so3e/gXUtbkZ1LLtkn1ZNXfZ88y+3b304wklI4IxtqO8sM1tKJCDsf

/8+2zj0cErw6zTDeCnFPMlSogp0KYrXGbKnHNTWEvyz9qBbbqWs3GdfCPZyb8AcaHXkp

cwcvefBiRISrQuDzkmBJxKmOh7f3URkTWmRtXCs0KRuH3K+OvZOjLsxsxLSOV3JvLhiA

IX7mQ5tdbrkiELokN2IMCzFA72Rhf4NSxciXFr0y5IfjP6VHBBnJEDufYdKIAmTUE2S0

3Gww==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=globistictec.com; s=google; t=1779323468; x=1779928268; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=t3ObNNsQLPKdPGggweXHFLdbFaJKUtXUcFik3SpWUis=;

b=KKKPTMujDaMIMfmHbzAxBELS5bCwDqKhwj8OKortbo79HaYXaR3FaT3xHTOw8eByNg

uySWHufpHx1rzZNFigMXj7XKwCRHL4ZU6fdyXbnmpQ6dEkMqQAFZdYaGi/rU3ze3PefP

sUX9Zd6RVaSXbV1am1o9va11IqjutauXndwySXDmR8H+uv0Mm7iQPsKH/8hEIlawWUVG

iV8FORO/YnvlDUdDeARTPV0j/jkqFatNw3wB4fZGVf6M8aW2w4/sRhlcc/g1muu9ZMvT

viqiAWj7WLqx6CVw4DC19CDfdFo9rS9AgjkmNAL0tV11S65EEexfkxiM0T6zEhxm1vWG

Mmog==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1779323468; x=1779928268;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=t3ObNNsQLPKdPGggweXHFLdbFaJKUtXUcFik3SpWUis=;

b=SIlfpTcwxCQNJ1VUr7bNIZqbcQ4YlPwNk6wag9f7tAvzUqSP78oF9HjfIY8C0I79hw

ZP5+wCuy9Tgm1fJjp6aJgAXLmaSCUfIqRgHKthyG6mqH0TMq35ZfpBqf0GA6454CfT9J

Qt7282CHWgLrKTmY436tfSR6G4Rq30i1FlQqdGY1VmjHxh8mWze3MSSg/mpnlabKwsng

iyzrwDyGO/4/3RUeb7GHFMeGs6RIsmTSJch2KzjHUZ/Evgf0eHR1PTECdfI7uZydU285

6mDeNkYKzkpZlq2Hcb2jNBIkGtWQFCpVPDt67CXu9PH76ifDTS+l0toTmw6T4DZG8gDy

17PQ==

X-Forwarded-Encrypted: i=1; AFNElJ+mTDIJOlFPU3jGZitrQv7WHqTLszKHKzuBj/b/nyYgkBXcKqFcSCvDTPsV44LlmQGXzK+XTg==@nk.ca

X-Gm-Message-State: AOJu0Yy8x7LZWQMQbuaSpdzYRujVG8IkmIrl25E161zdVKSmSIshSPfB

NGxjX+soYMtMxPkvPVLvFTNou7QKnjB9lW5yabSIy24cLgw/94ne6azE+w9E04AM6796nq0Ha52

gZNeiPgUI7ZR++41mzkmZUgmvt6fljcD5fyis0DUKKQ==

X-Gm-Gg: Acq92OEC6baa1W4uQlExPKR2PT4Bj+6N8GnZ12ISmRlctVdX4pCq0vfMXZQyM+4k3Nq

v7O3QZ6I5wCcx3Et6f/q97D3CjrDQhDqGkuip72iO6QWh9z+j4dNRnTgaBHEsbuhIu8h68q4OrB

bMdZpWHPmfkQGVjnMwtpIm/s3+hqSEm4A1ej2EJep8B6ibVcf3wiJbvwm3lyY7/NeffLo7mBTGe

VvEYELrxlnw6AKEduZZ0vibemdCbmCd/AdWy3Li31DSuUixTVpL8lSULDPtPD0BKQ2ySuL/gr0J

d34Qsmktpl5WXFtRB2Z/g7EYcWn2sU8o5pMvHIfD1A==

X-Received: by 2002:a05:690c:281:b0:7cf:d242:d94a with SMTP id

00721157ae682-7d20cb3bb93mr8861157b3.25.1779323466726; Wed, 20 May 2026

17:31:06 -0700 (PDT)

MIME-Version: 1.0

From: caroline jones

Date: Thu, 21 May 2026 06:00:00 +0530

X-Gm-Features: AVHnY4Lh2dtaFDs0uUviLIRBVgupt9pVRcYljZggWk1mXme3oJ4yI22ibv7VvAg

Message-ID:

Subject: Updated B2B Contact List for Your Ideal Audience

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000002cd86e06524907ee"

Bcc: sales@nk.ca

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Hope you're doing well! I’d love to send you a free

sample
of our B2B marketing database — packed with high-quality contacts

from industries like *Healthcare, Tech, Finance, Retail, Automotive*, and

more.



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.194 listed in dnsbl.ahbl.org]

[209.85.128.194 listed in dnsbl.ahbl.org]

[209.85.128.194 listed in dnsbl.ahbl.org]

[209.85.128.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.194 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.194 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.194 listed in wl.mailspike.net]

Subject: {SPAM?} Updated B2B Contact List for Your Ideal Audience





B2B spam from Google Gmail Part 2

--0000000000002cd86e06524907ee

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



Hope you're doing well!



I=E2=80=99d love to send you a free sample of our B2B marketing database=

=E2=80=94

packed with high-quality contacts from industries like Healthcare, Tech,

Finance, Retail, Automotive*, and more.







Just let me know what you=E2=80=99re looking for*:




Industry: _________? (Any industry you're targeting)



Location: _________? (Example: USA, UK, Canada, etc.)



Job Titles: _________? (Example: CEOs, Managers, Directors)







Once I have this info, I=E2=80=99ll send over the contact counts, pricing =

for your

review.




Let me know what you need =E2=80=94 happy to help you reach your ideal audi=

ence!



Best regards,

Caroline Jones



--0000000000002cd86e06524907ee

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




ight:13.91px">Hi,
t>


x">Hope you're doi=

ng well!


height:13.91px">I=E2=

=80=99d love to send you a=C2=A0free sample=C2=A0of our=C2=A0B2B =

marketing database
=C2=A0=E2=80=94 packed with high-quality contacts fro=

m industries like=C2=A0Healthcare, Tech, Finance, Retail, Automotive=

, and more.


ne-height:13.91px">=C2=

=A0


t:13.91px">Just let me=

know what you=E2=80=99re looking for:


al" style=3D"margin:0cm 0cm 8pt;line-height:13.91px">
sans-serif" color=3D"#073763">Industry: _________?=C2=A0(Any indust=

ry you're targeting)


cm 0cm 8pt;line-height:13.91px">
"#073763">Location: _________?=C2=A0(Example: USA, UK, Canada, etc.)=


3.91px">Job Titles:=

=C2=A0_________?=C2=A0(Example: CEOs, Managers, Directors)
>


">=C2=A0


class=3D"MsoNormal" style=3D"margin:0cm 0cm 8pt;line-height:13.91px">
face=3D"verdana, sans-serif" color=3D"#073763">Once I have this info,=C2=A0=

I=E2=80=99ll send over the contact counts, pricing for your review.<=

/font>


.91px">Let me know wha=

t you need =E2=80=94 happy to help you reach your ideal audience!

>


ont face=3D"verdana, sans-serif" color=3D"#073763">Best regards,
Caro=

line Jones





--0000000000002cd86e06524907ee--

Nigerian Spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 21:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPthp-00000000JOZ-2iKp

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 21:04:17 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 21:04:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [71.19.249.163] (port=51548 helo=mail02.viralinbox.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPpnJ-00000000OSR-16XU

for root@nk.ca;

Wed, 20 May 2026 16:53:49 -0600

Received: from [::1] (port=39520 helo=int.viralinbox.com)

by mail02.viralinbox.com with esmtp (Exim 4.99.1)

(envelope-from )

id 1wPpmI-0000000018s-1OhD;

Wed, 20 May 2026 18:52:36 -0400

MIME-Version: 1.0

Content-Type: text/plain; charset=US-ASCII;

format=flowed

Content-Transfer-Encoding: 7bit

Date: Wed, 20 May 2026 22:52:35 +0000

From: Sokrith Seng

To: undisclosed-recipients:;

Subject: I NEED YOUR ASSISTANCE !!!

Reply-To: sokrith_s@yahoo.com

Mail-Reply-To: sokrith_s@yahoo.com

Message-ID: <4a3e33ad4f08bbda0c6cec846c611170@ezvib.com>

X-Sender: namesokrithseng50.reward@ezvib.com

User-Agent: ViralinBox/1.3.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - mail02.viralinbox.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - ezvib.com

X-Get-Message-Sender-Via: mail02.viralinbox.com: acl_c_authenticated_local_user: ivib2017

X-Authenticated-Sender: mail02.viralinbox.com: ivib2017

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 20.9

X-Spam_score_int: 209

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Dear Friend, My Name is Mr.Sokrith Seng, a personal Accountant

working with Foreign Trade Bank of Cambodia (FTB). A late investor and a

reputable customer in our bank died and left $31,640,000.00 Million dollars

i [...]



Content analysis details: (20.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[71.19.249.163 listed in dnsbl.ahbl.org]

[71.19.249.163 listed in dnsbl.ahbl.org]

[71.19.249.163 listed in dnsbl.ahbl.org]

[71.19.249.163 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[71.19.249.163 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[71.19.249.163 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[71.19.249.163 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[71.19.249.163 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[71.19.249.163 listed in will-spam-for-food.eu.org]

[71.19.249.163 listed in will-spam-for-food.eu.org]

[71.19.249.163 listed in will-spam-for-food.eu.org]

[71.19.249.163 listed in will-spam-for-food.eu.org]

[71.19.249.163 listed in will-spam-for-food.eu.org]

[71.19.249.163 listed in will-spam-for-food.eu.org]

[71.19.249.163 listed in will-spam-for-food.eu.org]

[71.19.249.163 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.5 HK_SCAM_N2 BODY: No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[71.19.249.163 listed in bl.score.senderscore.com]

0.0 ODD_FREEM_REPTO Has unusual reply-to header

0.0 LOTS_OF_MONEY Huge... sums of money

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 HK_SCAM No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} I NEED YOUR ASSISTANCE !!!







--

Dear Friend,



My Name is Mr.Sokrith Seng, a personal Accountant working with Foreign

Trade Bank of Cambodia (FTB). A late investor and a reputable customer

in our bank died and left $31,640,000.00 Million dollars in our bank

some years ago and there was no next of kin to claim this fund.



Please get back to me as soon as possible for more details if you are

interested in my proposal.



Best Regards,



Sokrith Seng

Board member

Foreign Trade Bank of Cambodia

Phnom Penh

Canada REvenue Agency Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 21:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPthG-00000000JL9-3k28

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 21:03:42 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 21:03:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp1.kagoya.net ([153.127.234.3]:39946)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPpTw-000000007Jn-3Hrr

for doctor@doctor.nl2k.ab.ca;

Wed, 20 May 2026 16:33:49 -0600

Received: from kagoya.net (act01.kagoya.net [133.18.75.67])

by smtp1.kagoya.net (Postfix) with ESMTPA id 6299C608C072B;

Thu, 21 May 2026 07:16:40 +0900 (JST)

MIME-Version: 1.0

Message-ID: <20260520221640.0002216D.0533@kagoya.net>

Date: Thu, 21 May 2026 07:16:40 +0900

From: "Canada Revenue Agency (CRA)"

To:

Subject: Important Document

Content-Type: multipart/alternative;

boundary="-----UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D"

X-Priority: 3

X-MAILER: Active! mail



This is a multi-part message in MIME format.



-------UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D

Content-Type: text/plain; charset=US-ASCII

Content-Transfer-Encoding: 7bit





Changes On Your Canada Revenue Agency (CRA)

Canada Revenue Agency (CRA) sent you an important document to review and sign.

Review Document

If you have any questions or need assistance, feel free to contact us.

CRA

Canada Revenue Agency



Please do not reply to this email, as it is for notification purposes only.

This is an automated notification. Please do not reply to this message directly.



-------UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D

Content-Type: text/html; charset=US-ASCII

Content-Transfer-Encoding: 7bit











Changes On Your Canada Revenue Agency (CRA) 




Canada Revenue Agency (CRA) sent you an important document to review and sign.



If you have any questions or need assistance, feel free to contact us.

CRA
Canada Revenue Agency






 



Please do not reply to this email, as it is for notification purposes only.


This is an automated notification. Please do not reply to this message directly.




















-------UY.0W8B9WY0MUD4QBRKA7YXA5KZF2MT_0_0002216D--



Canada REvenue phish from Japan

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 16:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPpSC-0000000079k-3i0a

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 16:31:52 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 16:31:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp2.kagoya.net ([153.127.234.4]:57240)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPpPb-000000006x2-1mjk

for www@doctor.nl2k.ab.ca;

Wed, 20 May 2026 16:29:20 -0600

Received: from kagoya.net (act03.kagoya.net [133.18.75.69])

by smtp2.kagoya.net (Postfix) with ESMTPA id 45B11606EE985;

Thu, 21 May 2026 07:15:38 +0900 (JST)

MIME-Version: 1.0

Message-ID: <20260520221538.0001FA7C.0787@kagoya.net>

Date: Thu, 21 May 2026 07:15:38 +0900

From: "Canada Revenue Agency (CRA)"

To:

Subject: Important Document

Content-Type: multipart/alternative;

boundary="-----LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C"

X-Priority: 3

X-MAILER: Active! mail



This is a multi-part message in MIME format.



-------LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C

Content-Type: text/plain; charset=US-ASCII

Content-Transfer-Encoding: 7bit





Changes On Your Canada Revenue Agency (CRA)

Canada Revenue Agency (CRA) sent you an important document to review and sign.

Review Document

If you have any questions or need assistance, feel free to contact us.

CRA

Canada Revenue Agency



Please do not reply to this email, as it is for notification purposes only.

This is an automated notification. Please do not reply to this message directly.



-------LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C

Content-Type: text/html; charset=US-ASCII

Content-Transfer-Encoding: 7bit











Changes On Your Canada Revenue Agency (CRA) 




Canada Revenue Agency (CRA) sent you an important document to review and sign.



If you have any questions or need assistance, feel free to contact us.

CRA
Canada Revenue Agency






 



Please do not reply to this email, as it is for notification purposes only.


This is an automated notification. Please do not reply to this message directly.




















-------LU8FZ1XFG762G6LQJC29OJUSDUG0AN3_0_0001FA7C--



Canada REvenu Agency Phish from Japan

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 15:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPoqk-000000004r1-37Xp

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 15:53:10 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 15:53:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp2.kagoya.net ([153.127.234.4]:35132)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPoSW-000000003T2-3VZh

for root@mail.nl2k.ab.ca;

Wed, 20 May 2026 15:28:17 -0600

Received: from kagoya.net (act02.kagoya.net [133.18.75.68])

by smtp2.kagoya.net (Postfix) with ESMTPA id DEEB66070A19C;

Thu, 21 May 2026 06:25:52 +0900 (JST)

MIME-Version: 1.0

Message-ID: <20260520212552.000016F4.0680@kagoya.net>

Date: Thu, 21 May 2026 06:25:52 +0900

From: "Canada Revenue Agency (CRA)"

To:

Subject: Important Document

Content-Type: multipart/alternative;

boundary="-----HWI3GNE.QCD4MJM88OXVIS1ICUGFNVZ_0_000016F4"

X-Priority: 3

X-MAILER: Active! mail



This is a multi-part message in MIME format.



-------HWI3GNE.QCD4MJM88OXVIS1ICUGFNVZ_0_000016F4

Content-Type: text/plain; charset=US-ASCII

Content-Transfer-Encoding: 7bit





Changes On Your Canada Revenue Agency (CRA)

Canada Revenue Agency (CRA) sent you an important document to review and sign.

Review Document

If you have any questions or need assistance, feel free to contact us.

CRA

Canada Revenue Agency



Please do not reply to this email, as it is for notification purposes only.

This is an automated notification. Please do not reply to this message directly.



-------HWI3GNE.QCD4MJM88OXVIS1ICUGFNVZ_0_000016F4

Content-Type: text/html; charset=US-ASCII

Content-Transfer-Encoding: 7bit











Changes On Your Canada Revenue Agency (CRA) 




Canada Revenue Agency (CRA) sent you an important document to review and sign.



If you have any questions or need assistance, feel free to contact us.

CRA
Canada Revenue Agency






 



Please do not reply to this email, as it is for notification purposes only.


This is an automated notification. Please do not reply to this message directly.




















-------HWI3GNE.QCD4MJM88OXVIS1ICUGFNVZ_0_000016F4--



Canada Revenue Agency Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 15:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPoqP-000000004pb-0FZf

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 15:52:49 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 15:52:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp3.kagoya.net ([153.127.234.5]:34700)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPo6m-000000002IR-2wb0

for support@nk.ca;

Wed, 20 May 2026 15:05:49 -0600

Received: from kagoya.net (act03.kagoya.net [133.18.75.69])

by smtp3.kagoya.net (Postfix) with ESMTPA id A5012663258B5;

Thu, 21 May 2026 06:00:31 +0900 (JST)

MIME-Version: 1.0

Message-ID: <20260520210031.00018235.0272@kagoya.net>

Date: Thu, 21 May 2026 06:00:31 +0900

From: "Canada Revenue Agency (CRA)"

To:

Subject: Important Document

Content-Type: multipart/alternative;

boundary="-----D4PPTRAR32HCQSVLYPF5EWGZWPBTQF7_0_00018235"

X-Priority: 3

X-MAILER: Active! mail



This is a multi-part message in MIME format.



-------D4PPTRAR32HCQSVLYPF5EWGZWPBTQF7_0_00018235

Content-Type: text/plain; charset=US-ASCII

Content-Transfer-Encoding: 7bit





Changes On Your Canada Revenue Agency (CRA)

Canada Revenue Agency (CRA) sent you an important document to review and sign.

Review Document

If you have any questions or need assistance, feel free to contact us.

CRA

Canada Revenue Agency



Please do not reply to this email, as it is for notification purposes only.

This is an automated notification. Please do not reply to this message directly.



-------D4PPTRAR32HCQSVLYPF5EWGZWPBTQF7_0_00018235

Content-Type: text/html; charset=US-ASCII

Content-Transfer-Encoding: 7bit











Changes On Your Canada Revenue Agency (CRA) 




Canada Revenue Agency (CRA) sent you an important document to review and sign.



If you have any questions or need assistance, feel free to contact us.

CRA
Canada Revenue Agency






 



Please do not reply to this email, as it is for notification purposes only.


This is an automated notification. Please do not reply to this message directly.




















-------D4PPTRAR32HCQSVLYPF5EWGZWPBTQF7_0_00018235--



Canada Revenue Agency Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 15:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPoqD-000000004oy-2eSk

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 15:52:37 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 15:52:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp2.kagoya.net ([153.127.234.4]:40180)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPo3w-00000000283-1qUt

for doctor@mail.nl2k.ab.ca;

Wed, 20 May 2026 15:02:53 -0600

Received: from kagoya.net (act02.kagoya.net [133.18.75.68])

by smtp2.kagoya.net (Postfix) with ESMTPA id B7163607070AD;

Thu, 21 May 2026 05:58:23 +0900 (JST)

MIME-Version: 1.0

Message-ID: <20260520205823.0003B24C.0785@kagoya.net>

Date: Thu, 21 May 2026 05:58:23 +0900

From: "Canada Revenue Agency (CRA)"

To:

Subject: Important Document

Content-Type: multipart/alternative;

boundary="-----IQZ99.4IZ80MU6YR8C7FNFHZ.BZ9DRA_0_0003B24C"

X-Priority: 3

X-MAILER: Active! mail



This is a multi-part message in MIME format.



-------IQZ99.4IZ80MU6YR8C7FNFHZ.BZ9DRA_0_0003B24C

Content-Type: text/plain; charset=US-ASCII

Content-Transfer-Encoding: 7bit





Changes On Your Canada Revenue Agency (CRA)

Canada Revenue Agency (CRA) sent you an important document to review and sign.

Review Document

If you have any questions or need assistance, feel free to contact us.

CRA

Canada Revenue Agency



Please do not reply to this email, as it is for notification purposes only.

This is an automated notification. Please do not reply to this message directly.



-------IQZ99.4IZ80MU6YR8C7FNFHZ.BZ9DRA_0_0003B24C

Content-Type: text/html; charset=US-ASCII

Content-Transfer-Encoding: 7bit











Changes On Your Canada Revenue Agency (CRA) 




Canada Revenue Agency (CRA) sent you an important document to review and sign.



If you have any questions or need assistance, feel free to contact us.

CRA
Canada Revenue Agency






 



Please do not reply to this email, as it is for notification purposes only.


This is an automated notification. Please do not reply to this message directly.




















-------IQZ99.4IZ80MU6YR8C7FNFHZ.BZ9DRA_0_0003B24C--



Foreign language spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 May 2026 15:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPopq-000000004nk-0GUe

for dave@doctor.nl2k.ab.ca;

Wed, 20 May 2026 15:52:14 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 May 2026 15:52:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [216.238.75.135] (port=36436 helo=cloud.pesqueria.gob.mx)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wPnBI-00000000OjD-1i5r

for root@nk.ca;

Wed, 20 May 2026 14:06:24 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=pesqueria.gob.mx; s=default; h=Content-Transfer-Encoding:Content-Type:

MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=TpImFOEBRT6qx2y8iwwpA40KAwnl/WOJQtyxPZrQMFg=; b=Ec4d7TCq3dkUtMyhW1Wqcz6ly1

mjEnmbBw2BXx8KLgBgosYgc1zQWT7Wq9hrMguXgkkaZ1ZOqsaxl5tqOtBaegUDbpyIkngCVBUVsPQ

YuOvDdgGmkfm9H4GW3LM3vBDIE8Kj+Ra0DTCZL6pbsfL0XG+VmonUx0cfzEc7caCdkTW+oaBJWvhW

C0SZmUJ65awR5OsevVqyKDwU2exbIfMccccNTs6/9D3ULSSlUnXS4CD9iG82zZ57bajWUT0AhIxop

MxNliGmFZ0EXOtdKUuGNfzdz68I76cPofA1UHP6Vqr2Z34J30FzRrwM8z1gamgUDMDF4k22cRaw3p

i5eZqkmA==;

Received: from ec2-16-59-125-90.us-east-2.compute.amazonaws.com ([16.59.125.90]:51213)

by cloud.pesqueria.gob.mx with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.1)

(envelope-from )

id 1wPnAJ-0000000EhPV-1p3m

for root@nk.ca;

Wed, 20 May 2026 14:05:13 -0600

Reply-To: verarbeitungabteilung@gmail.com

From: Patricia Muller Dos Santos

To: root@nk.ca

Subject: =?UTF-8?B?TWVkZGVsYW5kZSBvbSBlbiBkb25hdGlvbiBww6UgMyAwMDAgMDAwIGV1cm8u?=

Date: 20 May 2026 20:05:12 +0000

Message-ID: <20260520200512.54ABA2B592C14241@pesqueria.gob.mx>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - cloud.pesqueria.gob.mx

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - pesqueria.gob.mx

X-Get-Message-Sender-Via: cloud.pesqueria.gob.mx: authenticated_id: sipinna@pesqueria.gob.mx

X-Authenticated-Sender: cloud.pesqueria.gob.mx: sipinna@pesqueria.gob.mx

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Grattis, Vi väntade på att du skulle meddela oss när du ville

att vi skulle skicka dig det donerade beloppet på 3 000 000,00 euro (tre

miljoner euro), vilket ONU-organisationen hade för överföring. Din e-posta

[...]



Content analysis details: (10.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[216.238.75.135 listed in dnsbl.ahbl.org]

[216.238.75.135 listed in dnsbl.ahbl.org]

[216.238.75.135 listed in dnsbl.ahbl.org]

[216.238.75.135 listed in dnsbl.ahbl.org]

[16.59.125.90 listed in dnsbl.ahbl.org]

[16.59.125.90 listed in dnsbl.ahbl.org]

[16.59.125.90 listed in dnsbl.ahbl.org]

[16.59.125.90 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[216.238.75.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[216.238.75.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[216.238.75.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[216.238.75.135 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.3 MANGLED_FORM BODY: mangled form

0.6 J_CHICKENPOX_31 BODY: 3alpha-pock-1alpha

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[216.238.75.135 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[216.238.75.135 listed in will-spam-for-food.eu.org]

[216.238.75.135 listed in will-spam-for-food.eu.org]

[216.238.75.135 listed in will-spam-for-food.eu.org]

[216.238.75.135 listed in will-spam-for-food.eu.org]

[216.238.75.135 listed in will-spam-for-food.eu.org]

[216.238.75.135 listed in will-spam-for-food.eu.org]

[216.238.75.135 listed in will-spam-for-food.eu.org]

[216.238.75.135 listed in will-spam-for-food.eu.org]

[16.59.125.90 listed in will-spam-for-food.eu.org]

[16.59.125.90 listed in will-spam-for-food.eu.org]

[16.59.125.90 listed in will-spam-for-food.eu.org]

[16.59.125.90 listed in will-spam-for-food.eu.org]

[16.59.125.90 listed in will-spam-for-food.eu.org]

[16.59.125.90 listed in will-spam-for-food.eu.org]

[16.59.125.90 listed in will-spam-for-food.eu.org]

[16.59.125.90 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

Subject: {SPAM?} =?UTF-8?B?TWVkZGVsYW5kZSBvbSBlbiBkb25hdGlvbiBww6UgMyAwMDAgMDAwIGV1cm8u?=













Grattis,

Vi väntade på att du skulle meddela oss =

när du ville att vi skulle skicka dig det donerade beloppet på 3=

000 000,00 euro (tre miljoner euro), vilket ONU-organisationen hade fö=

;r överföring. Din e-postadress var den enda information som ONU =

gav oss så att vi kunde överföra medlen till dig. Jag har i=

nformerats om att du är förmånstagare till donationsint&aum=

l;kterna..



Din e-postadress root@nk.ca valdes från ONU:s donationsformulär.=


            =

;            &n=

bsp;            =




Obs: Du har blivit utvald bland mottagarna av ONU-donationer, och jag uppm=

untrar dig personligen att använda medlen klokt. Vi behöver dock =

din information enligt följande för att påbörja transa=

ktionsprocessen..

Nedan hittar du information om den advokat/skadeomb=

ud som du behöver kontakta för att hjälpa dig med att behand=

la din donation..


EFTERNAMN:
EFTERNAMN:
FÖDELSEDATUM:<=

br>ARBETE:
ADRESS:
TEL:
MOBIL:


FAX:
Direkt e-postadress: root@nk.ca
Datum:
Pass eller körko=

rt:

Uppmärksamhet!!

För att inleda din ansökan &=

auml;r det viktigt att du omedelbart sätter dig ner och ber din ombud =

att fylla i formuläret nedan och följa instruktionerna för e=

n snabb och enkel överföring av dina vinster..
 
Med v=

änliga hälsningar,
Fru Christina Huber Keiser


>