Docusign phish from Google Gmail Part 2

Posted by Dave Yadallee on




=EF=BB=BF


name=3D"viewport" />

Docusign phish from Google Gmail Part 3

Posted by Dave Yadallee on








3D"Logo"
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/email-logo.png" width=3D"116" />






3D""
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.76.=

0/email/iconFileWithCheckWhite.png" width=3D"75" />

A document has been sent for your review



target=3D"_blank">View Document








Please review the attached document at your convenience. Contact the =

sender if you have questions.





This invitation is intended only for the recipient and contains secure =

access information.











Confidential: Do not share this email or link with =

others.





Alternative signing:
class=3D"alt-sign-link" href=3D"https://app.docusign.com/documents" =

target=3D"_blank"> 3D"DocuSign"
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/email-logo.png" /> Access documents on =

DocuSign and use code:
padding:2px 8px; border-radius:12px; font-weight:bold; =

color:#260559;">{docu-id}




About Docusign: Sign securely and legally in minutes, =

from anywhere.





Need help? Contact the sender or visit our support page=

.






com/en/guides/Declining-to-sign-DocuSign-Signer-Guide" =

target=3D"_blank">Decline to sign |
href=3D"https://support.docusign.com/en/articles/How-do-I-manage-my-email-n=

otifications" target=3D"_blank">Manage notifications




Download the app:
.com/features-and-benefits/mobile" target=3D"_blank"> 3D""
height=3D"18" src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/icon-download-app.png" width=3D"18" />Get =

Docusign





Sent by Ashley Allen via Docusign. To unsubscribe, =

contact the sender.





This message contains =

confidential information. If you are not the intended recipient, please =

delete immediately.











Docusign phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 17:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whFRa-00000000EGz-1SII

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 17:43:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 17:43:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f229.google.com ([209.85.214.229]:56404)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whEfM-00000000I6M-1hvA

for doctor@nk.ca;

Tue, 07 Jul 2026 16:53:36 -0600

Received: by mail-pl1-f229.google.com with SMTP id d9443c01a7336-2cca0c5799eso747575ad.0

for ; Tue, 07 Jul 2026 15:52:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sabeng.it; s=google; t=1783464750; x=1784069550; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;

b=e90ZA+Gol0yXRXQCRjT+RRivkK6H7zgqbGa20p41vBjRC6eKLzvnlOG6kXO9PtDHJ9

pWxiCXrB3TSXkHA29l35b2XN4sGmR/SID4nBhWaBoF47qfsvD59nIUqryitR5tL6Dho9

uaURnz7rKnNe8UXfhb70l1ck/1s/pshiIt5wc=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783464750; x=1784069550;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;

b=tBP39U9kuba+lya+6grO9u2/76PUlYu1l3cGFQTvUacIv5Y/We82xtolkSXF9Ri/8V

HOs+K0CEyp7XZ6N91NhbQ8RGGW+nlVrvFMKse/XhNTAWoOBg3VeEcPKQyWAxCerQ/oem

h8YaEI2f6T4i9XgQLP73i25SsLqVLO3DLM8Av4ePc6dBmOIXBF2DFVV4yr3wzp+LMMbP

6SsYyjGE+7XYK4ANx87pvY+gijTwTdBJDYVQib6loFhLW/sG+xkGIgxDyJbBVZ8fNG+z

l4hBVI9t8/YP5q1fYzY18liRgGS83BcqXXrwVqe01Khq44BFL6z5VPttBUvvsh+m+5Qa

YRgw==

X-Gm-Message-State: AOJu0YxULub1rLrejIy4sJdMc9TRGvlJ0sbRNgL/hn0cK8LjxWu0wcLR

AsfNIMAGcD46AIpPsoJB3RcLSU5vuaT4sz0FRKUMEiAywI0NKcnXa8ViBdunvKatzTYWI1ix0FD

pDv4l5Fl5CpemhZH/lvoJ+t6fTYuRAzHQVkNe73yKyi8Vn8Q=

X-Gm-Gg: AfdE7ckgEKENE6zSoMkgdNudRIeuj62P5YBcRtHJk9o9+QueKd3wpOfdew0fmFhZ4iw

nVplVhod8nWQrqhYr1bwJXoFuyMQZ2nPdogbWbfrufC4R6t2MERU/6biaq4l1JCMKygvLE63X8V

m6m1x26H/ZHJBeYjuvtm5fmSHhEGEFuRhxTJJTrfI7Bvblx3f8kNgZqME5VM/6WSu6Pn5iYyt2c

bi+ta7+b8ZYYh5KKG7QxXxKR3soskmulEhUaEwjEeSZ0mkcPW35Bgjny9hgOhWzfKXv9EGgrTVo

c1lFJT//fRJxtjbOyM2jdBjQ1fBq/nSdZ4r5N8DhFrqVh9UzS92cg3LxELuG9+mlHrZOeAyohsq

9gHkXqQJwu17xhRpgpg==

X-Received: by 2002:a17:902:ebd1:b0:2c9:ed16:8d8d with SMTP id d9443c01a7336-2ccbf1890d3mr68975175ad.38.1783464750587;

Tue, 07 Jul 2026 15:52:30 -0700 (PDT)

Received: from sabprogetti.com ([192.210.236.148])

by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-2ccc9bdd019sm3313665ad.13.2026.07.07.15.52.30

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 07 Jul 2026 15:52:30 -0700 (PDT)

X-Relaying-Domain: sabeng.it

From: "Incoming_Payment | EFT Portal/OU=EXCHANGE ADMINISTRATIVE GROUP

(FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-27559"

To: doctor@nk.ca

Subject: =?UTF-8?Q?Attached_Payment_Report_for_Your_Review_?=

=?UTF-8?Q?=EF=BF=BD_07/07/2026_=EF=BF=BD_doctor=40?= =?UTF-8?Q?nk=2Eca?=

Message-ID: <31213b49-f665-fd68-977f-edfe928d705a@sabeng.it>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 07 Jul 2026 22:52:29 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  A document has been sent for your review View Document

Please review the attached document at your convenience. Contact the sender

if you have questions.



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[209.85.214.229 listed in dnsbl.ahbl.org]

[209.85.214.229 listed in dnsbl.ahbl.org]

[209.85.214.229 listed in dnsbl.ahbl.org]

[209.85.214.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.229 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.229 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.229 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Attached_Payment_Report_for_Your_Review_?=

=?UTF-8?Q?=EF=BF=BD_07/07/2026_=EF=BF=BD_doctor=40?= =?UTF-8?Q?nk=2Eca?=

Desperate to coomunicate spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 17:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whFRt-00000000EHo-3KBd

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 17:43:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 17:43:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f41.google.com ([209.85.218.41]:50301)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whFM3-00000000DjC-2iHB

for doctor@nk.ca;

Tue, 07 Jul 2026 17:37:33 -0600

Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-c1276f8414bso5984666b.0

for ; Tue, 07 Jul 2026 16:36:27 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783467380; cv=none;

d=google.com; s=arc-20260327;

b=m4bZIshYL/Y9g+F9T+Sy//YyGo9TWaxHUBMbIAFGPmG09JBjWYJQcaOGoHR2R8C/US

UnZJ/n9hpg/qQ/godCaPGHmT1nnOK6tftQtXLB26bjoGewo0gGr5mxHuariiRSgkBwNx

u57QYMFyg7LxQiNLdOQ475PbK/sOhIKPP4w5e02VDtm0N26zirApWVBFf22QvDD43fFF

XImamdkdwHqMFeezDc4LLYf3MdT3qXvLIPr/H7+EbLqNho5XyqonbYmf97+DJDdk7nXO

nEn9LP7osJJ8k3aLTR8R1eM+hXlXiZmrtmQHTykCm4H4TnMTkxqvusS4G3o2kIgvyGK+

TS2g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;

fh=OQ46c1PzsJkng+bk9UdWxmIgl/cFRynZeJQlAMibJO4=;

b=MskBl7iMKRp7iw9pA0A5c/M7Fk+hTezjfrAeUVuM4O3HW7LFi7KtVgxKTuI0pACKoL

/dm6gDrRDxNqT3CvUoK57PkgmZ/Oqjw/tfXvgcCI+YG+udRV/cFXzRqFVLn3yMWcNS3G

VzWO7RI26u8PrA5SerxNoVo1nHodFF29UiVxvY6ss7Q0IBqrLOSGdp0KMwJCNmJoQom5

9btnChuM7yB7FtnOa/yN4PyBgdgHz77UOhPAxQsxDUvC2+t6/h2Nn7O9PluE+p+lZti2

yBxWayNVBPLp5iIREY0SiDiCqkERgnT3eOQ0DL2V/6KeO/EzaybUvYLEROsnmd3t0gSA

becg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783467380; x=1784072180; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;

b=RVEsGKYC+5x3LF2spOmNPwq6AK0HfsEmxsTUWkF9kdYy1WMx29sbEkdvhJA/g8jeYz

57Y4DnbyvzUSkNVSHJ9jTKX3ndQvf1/+cTaA7JaHv59ym+gc7NZ6FY1t8IRReLt044n0

XNbhKOIRI93R6+Mzt+ETQLpda/uKo16+mUfIYFW1/S/fsujdcPTsC6ICy9KYbNS0m9Fo

CPHX7O9BhXAdq6O+fUz7R7vjBzpSB/YTCGexjwpZJNM0/JMHq/vPTmy2QzbOD8UffW7X

Oz0qLE42D2ARgYG6wAmbu0ps1I0MvmcX2+5SYN4uRJUHPpwG52SV+J/fwxrDgEHfm2nw

dw4w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783467380; x=1784072180;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;

b=VXqoER291MRUTth9uiWxLA8pLpxmuLxUoVTAcwuWcNIlfQ/ZWtopcLiQH0ZrYuqsTn

qY/yWalQEfJbS9lF61EOHMozGVYSG5kZK1L81KC4jXTvx74cbNfZW9q++USAaZy9OPd8

WVoj+yjLxRMaLO0W2AEAaitGL3Y+Orf8HL+xWG2RdnVVVZzeA4z+JYvaskZ6nKM1U7EP

PNLLugzJvPf082QxrDnfYHF2LKU4tqJZjMNNov3A5hBVPbhB8/2ikTqKuiVZ88uZOmlD

vz1lyY+aVVT52mZQi3FQnQtgk0CMUbqxMtS131RQhpP6bZ9RnhjRi1dFs/NO2fD9Kxou

rTxg==

X-Forwarded-Encrypted: i=1; AHgh+RqQzD2bMpP8mSt1ppL5zuJXMCYn6b5Xjz8tPfEFmBwIuVDYs/6o2s+uio4Drj+nT6EQYnW+Gbw=@nk.ca

X-Gm-Message-State: AOJu0YxN46zVPQ3WbWy6G2Nq06ZZGwtKvx9TfGOvqj6yV1qglMywmCJG

qcsclmLUUnBvQWayoHAqRkbCxD+nYcZVgdpq0I/7aClovjo9EF+kIBVi1tejLjmu5PJ7tSK1F6l

Wz8xzvZRuD2nQAhw33SWHwjuENTvPVHc=

X-Gm-Gg: AfdE7cmWZzktscs2njOkO5ALBW/cwxjSY7WMrNcaRuj2gRnxpHzlatOKWe+ELRzO06l

LvnsmY7bW8GYdByO1fzxvaWpTQjXIMuoI/YHL9xnCgeqdXuVZJpkpIjNAD2v653p8Q5GVS8F+Eo

LKXTBbPwr9yV11EWEGlOcQb+wnJD3g757DXMRN0Z4kyn9DXryk3Ke+NvtmSxiKjyUaP8881JjIr

gSMBsUMnMwUfzH47vbMTIYoJBc5yUiRMRNlHJQX5uuSxMWCaL9W5dh0uRsuoZ9bgn6xSm0=

X-Received: by 2002:a17:907:6e8e:b0:c12:7d53:cc88 with SMTP id

a640c23a62f3a-c15ce22a26dmr7815866b.58.1783467380137; Tue, 07 Jul 2026

16:36:20 -0700 (PDT)

MIME-Version: 1.0

From: Patrick Eagles

Date: Tue, 7 Jul 2026 20:36:08 -0300

X-Gm-Features: AVVi8CcCnIW_I5SsAwifTpVhUZkGJ19J_k0iTYl9B6lDXmn8O143ZhaY_H-mUD0

Message-ID:

Subject: Good Day

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a961d806560ddbe4"

Bcc: doctor@nk.ca

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good morning, I hope you received my previous message to you

? Pls reply . Good morning, I hope you received my previous message to you

? Pls reply .



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[whoreliefund2022(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[eaglespatrick5(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.41 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Good Day



--000000000000a961d806560ddbe4

Content-Type: text/plain; charset="UTF-8"



Good morning, I hope you received my previous message to you ? Pls reply .



--000000000000a961d806560ddbe4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




=3D"font-family:"Google Sans",Roboto,RobotoDraft,Helvetica,Arial,=

sans-serif;direction:ltr;margin:8px 0px 0px;padding:0px;font-size:0.875rem;=

overflow-x:hidden">

le=3D"direction:ltr;font-variant:normal;font-size-adjust:none;font-kerning:=

auto;font-feature-settings:normal;font-stretch:normal;font-size:small;line-=

height:1.5;font-family:Arial,Helvetica,sans-serif;overflow:auto hidden">
v id=3D"gmail-avWBGd-18">
Good morning, I hope you received=

my previous message to you ? Pls reply .
<=

/div>


ple-interchange-newline">




--000000000000a961d806560ddbe4--

Desperation for communication spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 17:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whFRt-00000000EHo-3KBd

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 17:43:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 17:43:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f41.google.com ([209.85.218.41]:50301)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whFM3-00000000DjC-2iHB

for doctor@nk.ca;

Tue, 07 Jul 2026 17:37:33 -0600

Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-c1276f8414bso5984666b.0

for ; Tue, 07 Jul 2026 16:36:27 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783467380; cv=none;

d=google.com; s=arc-20260327;

b=m4bZIshYL/Y9g+F9T+Sy//YyGo9TWaxHUBMbIAFGPmG09JBjWYJQcaOGoHR2R8C/US

UnZJ/n9hpg/qQ/godCaPGHmT1nnOK6tftQtXLB26bjoGewo0gGr5mxHuariiRSgkBwNx

u57QYMFyg7LxQiNLdOQ475PbK/sOhIKPP4w5e02VDtm0N26zirApWVBFf22QvDD43fFF

XImamdkdwHqMFeezDc4LLYf3MdT3qXvLIPr/H7+EbLqNho5XyqonbYmf97+DJDdk7nXO

nEn9LP7osJJ8k3aLTR8R1eM+hXlXiZmrtmQHTykCm4H4TnMTkxqvusS4G3o2kIgvyGK+

TS2g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;

fh=OQ46c1PzsJkng+bk9UdWxmIgl/cFRynZeJQlAMibJO4=;

b=MskBl7iMKRp7iw9pA0A5c/M7Fk+hTezjfrAeUVuM4O3HW7LFi7KtVgxKTuI0pACKoL

/dm6gDrRDxNqT3CvUoK57PkgmZ/Oqjw/tfXvgcCI+YG+udRV/cFXzRqFVLn3yMWcNS3G

VzWO7RI26u8PrA5SerxNoVo1nHodFF29UiVxvY6ss7Q0IBqrLOSGdp0KMwJCNmJoQom5

9btnChuM7yB7FtnOa/yN4PyBgdgHz77UOhPAxQsxDUvC2+t6/h2Nn7O9PluE+p+lZti2

yBxWayNVBPLp5iIREY0SiDiCqkERgnT3eOQ0DL2V/6KeO/EzaybUvYLEROsnmd3t0gSA

becg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783467380; x=1784072180; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;

b=RVEsGKYC+5x3LF2spOmNPwq6AK0HfsEmxsTUWkF9kdYy1WMx29sbEkdvhJA/g8jeYz

57Y4DnbyvzUSkNVSHJ9jTKX3ndQvf1/+cTaA7JaHv59ym+gc7NZ6FY1t8IRReLt044n0

XNbhKOIRI93R6+Mzt+ETQLpda/uKo16+mUfIYFW1/S/fsujdcPTsC6ICy9KYbNS0m9Fo

CPHX7O9BhXAdq6O+fUz7R7vjBzpSB/YTCGexjwpZJNM0/JMHq/vPTmy2QzbOD8UffW7X

Oz0qLE42D2ARgYG6wAmbu0ps1I0MvmcX2+5SYN4uRJUHPpwG52SV+J/fwxrDgEHfm2nw

dw4w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783467380; x=1784072180;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=9izsVGAPMplK+brqLDlGV4XPoiyvmCwVCug6OlgvbxQ=;

b=VXqoER291MRUTth9uiWxLA8pLpxmuLxUoVTAcwuWcNIlfQ/ZWtopcLiQH0ZrYuqsTn

qY/yWalQEfJbS9lF61EOHMozGVYSG5kZK1L81KC4jXTvx74cbNfZW9q++USAaZy9OPd8

WVoj+yjLxRMaLO0W2AEAaitGL3Y+Orf8HL+xWG2RdnVVVZzeA4z+JYvaskZ6nKM1U7EP

PNLLugzJvPf082QxrDnfYHF2LKU4tqJZjMNNov3A5hBVPbhB8/2ikTqKuiVZ88uZOmlD

vz1lyY+aVVT52mZQi3FQnQtgk0CMUbqxMtS131RQhpP6bZ9RnhjRi1dFs/NO2fD9Kxou

rTxg==

X-Forwarded-Encrypted: i=1; AHgh+RqQzD2bMpP8mSt1ppL5zuJXMCYn6b5Xjz8tPfEFmBwIuVDYs/6o2s+uio4Drj+nT6EQYnW+Gbw=@nk.ca

X-Gm-Message-State: AOJu0YxN46zVPQ3WbWy6G2Nq06ZZGwtKvx9TfGOvqj6yV1qglMywmCJG

qcsclmLUUnBvQWayoHAqRkbCxD+nYcZVgdpq0I/7aClovjo9EF+kIBVi1tejLjmu5PJ7tSK1F6l

Wz8xzvZRuD2nQAhw33SWHwjuENTvPVHc=

X-Gm-Gg: AfdE7cmWZzktscs2njOkO5ALBW/cwxjSY7WMrNcaRuj2gRnxpHzlatOKWe+ELRzO06l

LvnsmY7bW8GYdByO1fzxvaWpTQjXIMuoI/YHL9xnCgeqdXuVZJpkpIjNAD2v653p8Q5GVS8F+Eo

LKXTBbPwr9yV11EWEGlOcQb+wnJD3g757DXMRN0Z4kyn9DXryk3Ke+NvtmSxiKjyUaP8881JjIr

gSMBsUMnMwUfzH47vbMTIYoJBc5yUiRMRNlHJQX5uuSxMWCaL9W5dh0uRsuoZ9bgn6xSm0=

X-Received: by 2002:a17:907:6e8e:b0:c12:7d53:cc88 with SMTP id

a640c23a62f3a-c15ce22a26dmr7815866b.58.1783467380137; Tue, 07 Jul 2026

16:36:20 -0700 (PDT)

MIME-Version: 1.0

From: Patrick Eagles

Date: Tue, 7 Jul 2026 20:36:08 -0300

X-Gm-Features: AVVi8CcCnIW_I5SsAwifTpVhUZkGJ19J_k0iTYl9B6lDXmn8O143ZhaY_H-mUD0

Message-ID:

Subject: Good Day

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a961d806560ddbe4"

Bcc: doctor@nk.ca

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good morning, I hope you received my previous message to you

? Pls reply . Good morning, I hope you received my previous message to you

? Pls reply .



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[whoreliefund2022(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[eaglespatrick5(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.41 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Good Day



--000000000000a961d806560ddbe4

Content-Type: text/plain; charset="UTF-8"



Good morning, I hope you received my previous message to you ? Pls reply .



--000000000000a961d806560ddbe4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




=3D"font-family:"Google Sans",Roboto,RobotoDraft,Helvetica,Arial,=

sans-serif;direction:ltr;margin:8px 0px 0px;padding:0px;font-size:0.875rem;=

overflow-x:hidden">

le=3D"direction:ltr;font-variant:normal;font-size-adjust:none;font-kerning:=

auto;font-feature-settings:normal;font-stretch:normal;font-size:small;line-=

height:1.5;font-family:Arial,Helvetica,sans-serif;overflow:auto hidden">
v id=3D"gmail-avWBGd-18">
Good morning, I hope you received=

my previous message to you ? Pls reply .
<=

/div>


ple-interchange-newline">




--000000000000a961d806560ddbe4--

Transfer.it phish Part 3

Posted by Dave Yadallee on





0" cellspacing=3D"0">








=3D"padding-top: 48px;">


cellspacing=3D"0">










center" style=3D"padding: 0 4px;">


target=3D"_blank" style=3D"color: #080A0D; font-size: 16px; line-height: =

24px; font-family: sans-serif, Helvetica, Arial; text-align:center; text-de=

coration: none; display: inline-block; font-weight: bold; vertical-align: m=

iddle;">Powered by
center" style=3D"padding: 0 4px;">


target=3D"_blank" style=3D"text-decoration: none; display: inline-block; v=

ertical-align: middle; font-size: 0;">3D"MEGA
=3D"cid:mega_logo.png-z38e84aad3dce2005" style=3D"width: 24px; height: 24px=

;" />







; color: #595C61; font-size: 14px; line-height: 24px; font-family: sans-ser=

if, Helvetica, Arial; text-align: center;">
" target=3D"_blank" style=3D"color: #595C61; font-size: 14px; line-height:=

24px; font-family: sans-serif, Helvetica, Arial; text-align:center; text-d=

ecoration: underline; display: inline-block;">About
-space: nowrap;">    •    
an>
95C61; font-size: 14px; line-height: 24px; font-family: sans-serif, Helvet=

ica, Arial; text-align:center; text-decoration: underline; display: inline-=

block;">Privacy   &=

nbsp;•    
target=3D"_blank" style=3D"color: #595C61; font-size: 14px; line-height: =

24px; font-family: sans-serif, Helvetica, Arial; text-align:center; text-de=

coration: underline; display: inline-block;">Terms
space: nowrap;">    •    
n>
1; font-size: 14px; line-height: 24px; font-family: sans-serif, Helvetica,=

Arial; text-align:center; text-decoration: underline; display: inline-bloc=

k;">Report this transfer



































--b2_1vAnPWGg84QRZFdtHMMCqtsHOmwVOIh99U7XfBR3Uo

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



...





--b2_1vAnPWGg84QRZFdtHMMCqtsHOmwVOIh99U7XfBR3Uo

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline





Transfer.it phish Part 2

Posted by Dave Yadallee on









8px 0;" class=3D"main">


ng=3D"0">
















8px; border-radius: 24px; background-color: #FFF;" class=3D"box">




al;font-size:24px;line-height:32px;font-weight:700;color:#333333;">

Heads-up =E2=80=93 your transfer=E2=80=99s expi=

ring soon








t;">


k" aria-label=3D"Transfer it">3D"Transfer
sferit_logo.png-z38e84aad3dce2005" style=3D"width: 48px; height: 48px;" /><=

/a>








al; font-size: 18px; line-height: 24px; color: #080A0D; padding: 0; margin:=

0; margin-top: 36px; font-weight: 400; text-align: left;">

Hi there,






al; font-size: 18px; line-height: 24px; color: #080A0D; padding: 0; margin:=

0; margin-top: 36px; font-weight: 400; text-align: left;">

Just a quick reminder: your transfer, =E2=80=

=9CWCC443-I HAVE SOMETHING IMPORTANT AND INTERESTING TO TELL YOU ABOUT YOUR=

LIFE. PLEASE REPLY TO ME IMMEDIATELY AT MY EMAIL ADDRESS donaldaalan@outlo=

ok.com BY CLICKING ON IT TO REPLY TO ME DIRECTLY.-ANE858=E2=80=9D, will exp=

ire in 3 days =E2=80=93 on 2026-07-10.






al; font-size: 18px; line-height: 24px; color: #080A0D; padding: 0; margin:=

0; margin-top: 36px; font-weight: 400; text-align: left;">

If your recipient hasn=E2=80=99t accessed it ye=

t, now=E2=80=99s a good time to nudge them. Once it expires, the files will=

no longer be available.








=3D"0" width=3D"100%">








lvetica, sans-serif; font-size: 16px; vertical-align: top; padding-top: 36p=

x;" valign=3D"top">


ellspacing=3D"0" width=3D"100%">








serif, Helvetica, Arial; font-size: 16px; vertical-align: top; border-radiu=

s: 8px; text-align: center; background-color: #1875FF" valign=3D"top" align=

=3D"center" bgcolor=3D"#1875FF">
ST" target=3D"_blank" style=3D"border: solid 2px #1875FF; border-radius: 8p=

x; box-sizing: border-box; cursor: pointer; display: inline-block; font-siz=

e: 16px; line-height: 24px; font-weight: 400; margin: 0; padding: 14px 14px=

; text-decoration: none; background-color: #1875FF; color: #fff; width: 100=

%;">View your transfer









al; font-size: 16px; line-height: 24px; color: #595C61; padding: 0; margin:=

0; margin-top: 12px; font-weight: 400; text-align: center;">

1 item

 &nbs=

p;  •    183 B in total
an>

 &nbs=

p;  •    Expires on 2026-07=

-10

=20






al; font-size: 18px; line-height: 24px; color: #080A0D; padding: 0; margin:=

0; margin-top: 36px; font-weight: 400; text-align: left;">

If the button doesn=E2=80=99t work, you can cop=

y and paste this link into your browser:

t/upQhKWwH1DST">https://transfer.it/t/upQhKWwH1DST






al; font-size: 18px; line-height: 24px; color: #080A0D; padding: 0; margin:=

0; margin-top: 36px; font-weight: 400; text-align: left;">

Need more time? You can always re-upload after =

it expires, or upgrade to=

Pro for flexible expiry options.






al; font-size: 18px; line-height: 24px; color: #080A0D; padding: 0; margin:=

0; margin-top: 36px; font-weight: 400; text-align: left;">

Enjoy the rest of your day!








al; font-size: 18px; line-height: 24px; color: #080A0D; padding: 0; margin:=

0; margin-top: 36px; font-weight: 400; text-align: left;">

Cheers,
The Transfer.it team






; background-color: #f0f0f0; height: 1px; font-size: 0;">

yle=3D"padding: 0 24px;">



Transfer.it phish Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 16:29:33 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whEHy-00000000CQ4-2uif

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 16:29:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 16:29:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from relay6.api.mega.co.nz ([66.203.124.6]:57939)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whE4W-00000000BYT-159U

for root@nk.ca;

Tue, 07 Jul 2026 16:15:29 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=transfer.it;

s=transferit-api; t=1783462468;

bh=c4IV4EAuyyWzjqWscferD+GalHrYlHf9QaliLW0gumo=;

h=Date:To:From:Subject:From;

b=pYpNIZJewblRB/fOvARJ2HPslVYM5Y8WLeAQofHOrA0dtTOV7nFLtrA5S3mYR/FwW

yBmSFwMKpLJXcR658prUHHzapmMnr7S+jXldRd3UipJp4AdEUXjPddBTnwZeyddstb

OCL9TRohix/+IHZ/tEs3nJY8MfMyYDzj6cBQeGiVD2GN0hXcdG6sPVI+QibqNQdegT

7fmtg02CKNgXsLLNeCb3XN/+xJFINWCY1qbfzzXBzBfAZAvFCahnMom7IMWZb7sNba

AJ2k61VgoOdUO+r4taQAEP7JcgIboGShmlWoRHamVXUQAuLikaMB80CuaKi90l+Ucz

8kJUpyBgBAW3A==

Received: from mega475 (bt7.api.mega.co.nz [66.203.125.17])

by relay6.api.mega.co.nz (Postfix) with ESMTP id B39D2382127

for ; Wed, 8 Jul 2026 00:14:28 +0200 (CEST)

Date: Tue, 7 Jul 2026 22:14:28 +0000

To: root@nk.ca

From: "Transfer.it"

Subject: Transfer.it reminder: Your transfer will expire soon!

Message-ID: <1vAnPWGg84QRZFdtHMMCqtsHOmwVOIh99U7XfBR3Uo@mega475>

Feedback-ID: 125:io:megamailer

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_1vAnPWGg84QRZFdtHMMCqtsHOmwVOIh99U7XfBR3Uo"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--b1_1vAnPWGg84QRZFdtHMMCqtsHOmwVOIh99U7XfBR3Uo

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



Heads-up – your transfer’s expiring soon



Hi there,



Just a quick reminder: your transfer, “WCC443-I HAVE SOMETHING IMPORTANT AND INTERESTING TO TELL YOU ABOUT YOUR LIFE. PLEASE REPLY TO ME IMMEDIATELY AT MY EMAIL ADDRESS donaldaalan@outlook.com BY CLICKING ON IT TO REPLY TO ME DIRECTLY.-ANE858”, will expire in 3 days – on 2026-07-10.



If your recipient hasn’t accessed it yet, now’s a good time to nudge them. Once it expires, the files will no longer be available.



View your transfer



1 item 183 B in total Expires on 2026-07-10



If the button doesn’t work, you can copy and paste this link into your browser:

https://transfer.it/t/upQhKWwH1DST



Need more time? You can always re-upload after it expires, or upgrade to Pro for flexible expiry options.



Enjoy the rest of your day!



Cheers,

The Transfer.it team





--b1_1vAnPWGg84QRZFdtHMMCqtsHOmwVOIh99U7XfBR3Uo

Content-Type: multipart/related;

boundary="b2_1vAnPWGg84QRZFdtHMMCqtsHOmwVOIh99U7XfBR3Uo";

type="text/html"



--b2_1vAnPWGg84QRZFdtHMMCqtsHOmwVOIh99U7XfBR3Uo

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable










=3D1.0">


">

Transfer.it reminder: Your transfer will expire soon!

Gold for sale Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 20:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whHoM-00000000Lzm-3ENv

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 20:14:54 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 20:14:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [195.64.137.83] (port=48304 helo=inpn.org.ua)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whGW9-00000000HnT-2l6r

for bin@nl2k.ab.ca;

Tue, 07 Jul 2026 18:52:10 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=inpn.org.ua; s=mail;

t=1783470627; bh=/eOgGrTddnGaD9Q32v24MrfNLIfYCPvlSJOds9OPe5g=;

h=From:Subject:To:Reply-To;

b=ekoO0REufuFuTNcvqTweUZacnUqG3WW7R2HSMyZjmfo5EBkKY4VRESpeasAj02byw

6C9TPLqlXIfdPfrAM8j9Q4tOAP6TPksrqWUWJVNbJCRUvp9yk7REMuGkt+OZAUDXHX

qExAC4w5WknXtYXJUzyY25oyc4PT5OzksCxyQXVwFO/gcpG6Su0vGq9Oi4u1AM4T41

CFqMwndFh7SWA0lcDQ1HaXblH4be/SRYKHGOZo6C7cG0fgRxkEj2TjFGOngNJ5rove

rzussSy8M+OqumPKu74E013oownH+BSyH0vbTYvz5HnuUV4RXelPhRGzxI0VsCQNvy

Vc5e7aFiyDohA==

From: Mr Owusu Kwesi

Date: Tue, 07 Jul 2026 13:01:04 -0700

Subject: Re Offer of Gold Bars for Sale

Message-Id:

To: bin@nl2k.ab.ca

Sender: Mr Owusu Kwesi

Reply-To: Mr Owusu Kwesi

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, We are pleased to offer for sale high-quality

gold bars mined directly from our concessions. The details of our product

are as follows: Commodity: Gold Form: Alluvial Bar Purity: 22+ Carat (94%)

Quantity Available: 4,000 kilograms Price: USD 95,000 per kilogram Origin:

Ghana Deleterious Elements: 0% Cyanide



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[195.64.137.83 listed in dnsbl.ahbl.org]

[195.64.137.83 listed in dnsbl.ahbl.org]

[195.64.137.83 listed in dnsbl.ahbl.org]

[195.64.137.83 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[195.64.137.83 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[195.64.137.83 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[195.64.137.83 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[195.64.137.83 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

[195.64.137.83 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[195.64.137.83 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[owusukwe65(at)gmail.com]

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[195.64.137.83 listed in bl.score.senderscore.com]

0.0 LOTS_OF_MONEY Huge... sums of money

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 MONEY_NOHTML Lots of money in plain text

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_NAME_MR_MRS No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Re Offer of Gold Bars for Sale



Dear Sir/Madam,



We are pleased to offer for sale high-quality gold bars mined directly from our concessions. The details of our product are as follows:



Commodity: Gold

Form: Alluvial Bar

Purity: 22+ Carat (94%)

Quantity Available: 4,000 kilograms

Price: USD 95,000 per kilogram

Origin: Ghana

Deleterious Elements: 0% Cyanide



A full corporate offer and detailed documentation can be provided upon request. We are committed to professional, secure, and transparent business transactions and would be glad to discuss further steps to facilitate this opportunity.



Please feel free to contact me via email at (kweo296@gmail.com)

or WhatsApp at (+233532452351) for additional information or to request our corporate offer.



Thank you for your time and consideration. We look forward to the possibility of working together.



Yours faithfully,



Owusu Kwesi

[Position, manager]

Tarkwa, Western Region, Ghana

Prject phish spam

Posted by Dave Yadallee on


--000000000000fb512e065609cee2

Content-Type: text/plain; charset="UTF-8"



Hello,





The premium domain

VoipEdmonton.com is currently available for purchase on GoDaddy Marketplace.





This domain is a strong match for businesses offering VOIP IN EDMONTON and

could help increase your online reach and brand visibility.





The domain is available for $499 at www.VoipEdmonton.com.





Please let me know if you are interested or would like to discuss further.





Best regards,





John.



--000000000000fb512e065609cee2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

The premium domain=C2=A0
v>
VoipEdmonton.com is currently available for purchase on=

GoDaddy Marketplace.


r>
This domain is a strong match for businesses offe=

ring VOIP IN EDMONTON and could help increase your online reach and brand v=

isibility.



v dir=3D"auto">The domain is available for $499 at
ipEdmonton.com">www.VoipEdmonton.com.

=


Please let me know if you are=

interested or would like to discuss further.


div>

Best regards,

ir=3D"auto">

John.
div>




--000000000000fb512e065609cee2--

Domain for sale phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 16:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whEEd-00000000C8d-3sal

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 16:25:47 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 16:25:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f177.google.com ([209.85.210.177]:52377)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whApH-00000000NSh-35y3

for root@nk.ca;

Tue, 07 Jul 2026 12:47:31 -0600

Received: by mail-pf1-f177.google.com with SMTP id d2e1a72fcca58-845eb7b96feso4465044b3a.0

for ; Tue, 07 Jul 2026 11:46:33 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783449988; cv=none;

d=google.com; s=arc-20260327;

b=EBMCdsOcytIF8JlUeqTLE8b9fhOdp1bFcWBiq6jC/Wm4SNB6hGUrWQkOVXVn/nBPu3

Zyzyd4BqtZ8wW7NE8bvhL+/0XNqDmvJo0xdoFP8wgGELyREj/hWS0lHWfzwBLLSg+upZ

whhSQ/NkfjP/TdEcKdzl3b0cHCYA0z3vXiP8ghZOFaHnbzLn3wcYTh2SJNQ6U4h3YtVX

5a9Jp/+j+cqmCIx6CYiAiKA8329JVTEniPCat3egZxnIIH2Kmd1wS1RjQQm87l8e42D+

sPdrKF1Z3oUSw3CakjvKHAvBNyt50XIETG6hw9XefE4NuF4eRMaBXHcYp77iUAPeYV95

Q4Pg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=RPh/SbMYk//MyAmrNNKqei8SDL/mlc5J50xeev01zDk=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=af/abhB+7mRD90WI7QQxhvok0B/1ZYk5o2dpC+HW1d2KCFeDofH84WSHOCVig6ovkY

mXdOwwpIqWXlx9NdChOXE2al3x4qdht6vranxIBRgALJOhGK3u1Y6tykxEM9XLbIVRNH

EEhVNklGEx4RrLtyWnUJRFhTJZDf/lYfGFBNRKCP7hCyfDTH65lnQIojs6yEoTWRJPtY

vDslo2t9Gt0zybmJz3upAm0niX/a3iGegUsaIJCkb8p0sPw4ixNRTALCmL1uPLRbR9Cs

rGJyPL7/LrGfAKk5wEIwLP0QbRGSTJ56kuPE5lOCm3b4co3Zl3GfO8G3z794+25PCfFw

QCGg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783449988; x=1784054788; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=RPh/SbMYk//MyAmrNNKqei8SDL/mlc5J50xeev01zDk=;

b=qSh0lYbNUZ3lBLkv2ecpx0J/O+TiUMl5xVmRamT09fPYWKQpwWUee/hBjWtVSsAjrO

WhoNNFQ9iQCpp+wEmOa7/K7BCAdmL9HSc0acND/o6V0Oyvs2mMK19272saCoc8SueXuz

yfgyleAsp4CoGnWfiyvHlHmCoPmRZlxffQYKrEOx8FOIpEELmSr2Z6KqDjevdD+iTBjd

Oor1dim/6i4QeiHnQfdND6ERo83jw+ohjKa3DKoGvNC8giLDFv8+dGdYfV5kRFmDOXdw

cN2eC7uJdHkXeDarP9MIp8SJV8uUXr5T0cCWH3yWhkfWhilmCtNAGvRtEldM6Ks4C/zy

qEfg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783449988; x=1784054788;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=RPh/SbMYk//MyAmrNNKqei8SDL/mlc5J50xeev01zDk=;

b=pq9FhCDu1y208DFd/pS02CSkrwc95SV1uHh73FTF2Ety3ppoLle0r0fjrzb1LLXPoD

bp7L7Clu6M/8Uw921ZuzjMMq8UrpzyK6k16zFxPT08dUgye6hx2a0Y04YIES6wOKalki

rRvyODvKUQvi3KWgGofPFi8a/VyfMqjROMc9Ondjb2coviis4qmkddkofkE/mxa58OdV

iDjMyAhaucJe4kB8Wt4kas7KEEwngz5pxWRsaWvshUQcW1erKPhWx+PoWkqbsFGdrzcL

gj4nUj9gh66FZpWw4UQyjsnsGybhZQzqmaz6FaP/ecaTZXSeLyYVc8R3DzvZgi7EVtqi

nSHA==

X-Gm-Message-State: AOJu0Ywn+am0RgIsC6k0/oN/TDw/Gu9cyF3SbhoXIH4qV2XDv+cQGqvg

e4rhrtvrirKt0LM4Baw99U3ygwNzLh9aOT03hmFXEyAltw5ykdOMnglZwFoMJ8/rxnl84gU4ovL

69cPwdg7YA8Zd/En2fk0zz+yws4mbcpChkX0q

X-Gm-Gg: AfdE7cnJg46dqo9O8P2NJSu0outDo1ohDNXEU25bJJiwm9/px/va3ToctZmJBzULowt

Pj1YqR2yshEYKkrua2bx+6/OBLDmgF0DD1QEKX0y33e9ON5sCklk6lslHEd111Ioarjh4xH7Bj1

RgUYbEHHDo4p0N5dly+kdUG7C3/ttpGITP6UCjBaPnioB9/5qEuoEGp71PGRLR7CDoMX9z5hETu

Bhvmj1wqoM+GDDNqYvnjbi0O5Hfua5+YytD479WOH1pnDu5O282ZpM0Y6B4u0aoJMnHSB6d

X-Received: by 2002:a05:6a00:4fd4:b0:848:2f7a:2e53 with SMTP id

d2e1a72fcca58-8482f7a364amr3918205b3a.66.1783449987533; Tue, 07 Jul 2026

11:46:27 -0700 (PDT)

MIME-Version: 1.0

From: Peter John

Date: Tue, 7 Jul 2026 19:46:16 +0100

X-Gm-Features: AVVi8CfCp4B_z6EQcX3h_fUujEqIyD10oMaP6Ku4GQSn92IOVwK-cN9FRIDkKSY

Message-ID:

Subject: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000fb512e065609cee2"

Domain for sale phish from Google GMail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 16:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whEEa-00000000C8Q-2Hfk

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 16:25:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 16:25:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f174.google.com ([209.85.214.174]:58561)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whAow-00000000NRv-3A8Q

for sales@nk.ca;

Tue, 07 Jul 2026 12:47:11 -0600

Received: by mail-pl1-f174.google.com with SMTP id d9443c01a7336-2c7c61b5292so65578585ad.0

for ; Tue, 07 Jul 2026 11:46:15 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1783449970; cv=none;

d=google.com; s=arc-20260327;

b=TFcE1YXSSMneQiHYfanxRrz5X3pl614l+fLMp+nDGR3KcdIji3KCOXmDa3OivHwJqk

8bjvTzhurA5uzHQHfw0/Mly/XJB2StTat7nVTxoiRrcoX8AD8QydQTcpxmuTdQ6X1KB5

wHpvInM9UZT3QK3/cOjR4pyIJL9meO18iDG828WveyKwR6uB33sSY7eLe41OJlShis2P

PfgCr/Csxk+wbfCCChMi7iwLc4ncaaMLxIzbN0HuCLp2sMe5WUE4wrl14asYyY9dkE8X

+W/EHARDk41OL6ZZ5srxkwJycbkZteqDTsPB3WcGKHK4UiBAppYS6blWP8C4Ckpjm8hg

VObg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=8hgiwdtbtnMRzxsiQZL0+D8wDzHjaTBX3ZOOzoGdLGc=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=TTrlZ+sbSC1aYgZkT32D23Kh4eIoMn1R7HCKDNAGhAxUjb1lhZakmkBxlc1FKm/xok

mq/V9TzDKwv4IDNZIALto2EWa3grqZ3LM8wygrC6AebbJwZwrYC9nMvTC92dnyOgLeOF

WZDEtxAsMn56Y698W5G8lWViuaR7obwfYuMOImwsTm/QZGg+dg3bKC1qTs4yFF3HQ4zr

FJus+hiUxR6CnVjXF2MllRgDF55wbLlXTm/6dTSTl7Udn30scNHhWPIhbWlGX6hIiK4y

0pqoNN0E+q+xGxhdOmCEPpFQbrV2a16xE+AwIXp8iKuiYiAIq3KH5u77J7TbmtQDqVU9

G3Lg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783449970; x=1784054770; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=8hgiwdtbtnMRzxsiQZL0+D8wDzHjaTBX3ZOOzoGdLGc=;

b=cmfSpfhxoc5F3q49iLIiyA4nX77HuGZWcdKG+SPqTOBo5QovCtQ5rKIj4VdkIjacTQ

Rpqsz6nbvHAhSHv9grJSMhNvhPRT4aof0YE+uYbBADrYmPHwi8kA1TRhCh+bU0qda7vh

xO5ACcAVlEIB3SRGTLD3Pi/NCrpvodt6/TKqrhrRDaWEBCcFcYzEDcMhZt1Z0HrftSEf

SM1GicjhGDC5uVrI7ZyfiT7oUCe+2EvHLMjZ6g+lA7Z67UYW/peayeKUsTX54DZHC3eG

VlFq77Wlgusa98FD4fs3ZRrYOFBMlYeizPMzArt7NlQ+CGkGIacEvaZwbUkmXOG26J3x

7KEA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783449970; x=1784054770;

h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=8hgiwdtbtnMRzxsiQZL0+D8wDzHjaTBX3ZOOzoGdLGc=;

b=qBdTBfFgmi1lTRiE0i9PGNbX7k+IRj1Xv5TyMoq++GNscDu1nPGtZqtUULcBPctcTM

E0QHsUNbocOgVfawqotmpBDXAv1TCc6yPG/F+m8cr+XTHYGcHPmRmPNh+Q+fe62JzzI/

cWk10rs2XcFf6lH6IkhoXZ2JZRV388vs1HnHxqOMYBk4Zn+mTDERviiavQmBYuxwWMXd

nfETHUylJ8/ZvJ2Q2k53qtSUQBzmkDm5Nwn8Yidkx0SB6Q048b/Y1dT3p0MT3kECrW4V

mBZora5RyBqkqEdwW3pr6qFGgK64e3e967BnKpbxOJ0O09grzaDFNqe67+L7bFFugZD8

YV3Q==

X-Gm-Message-State: AOJu0Yzdi6ZaLsBZpdp98HtGvc77Bohjegz57y2JSXFMQ9WBrO6cuHN5

QwaprWy300YcZfLABb1FfPnAxjeHUYKh634b3otKjNJO6CUsGicoXMEupmEBpljPT49UojRfYka

q56nnesEy21KFCGq3sxo3XvW6YolIen03no2m

X-Gm-Gg: AfdE7clXkMJbfp+UVGuUmLTzfZJpWpNgI+mxG015m5aQvAaIUvzVmSUOFTocciJASH4

ij7hiXXG6QuCx3trq+PaHy/ZLvYu8GdpvLbtJolfYrNmfmb6L+kPBf6jygfRbx6haaquhrzvOZJ

MsFiIaBQOWi+AauIP1PWrgW4SeFbbzt6As+G/iYdX2sNg4+5ehjdK5ji7L3IL1xTbQujhhgTHyj

ZlMR6QtaG13H0m4Fe76whldRyUkBg+JKr0CChXZ9EBhgPK8fmrB8crEkdIO/dOIZJc7R1uh

X-Received: by 2002:a17:903:41cd:b0:2c9:d55d:2d1 with SMTP id

d9443c01a7336-2ccbf07a42fmr65348945ad.33.1783449969527; Tue, 07 Jul 2026

11:46:09 -0700 (PDT)

MIME-Version: 1.0

From: Peter John

Date: Tue, 7 Jul 2026 19:45:57 +0100

X-Gm-Features: AVVi8CfGGfPH3nEAcjaKg2dUIj60GUZ2aroDjKBg9MOglyXfhdAnnIdu7NeJkmE

Message-ID:

Subject: EDMONTON VOIP

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000e88f2e065609cd31"



--000000000000e88f2e065609cd31

Content-Type: text/plain; charset="UTF-8"



Hello,





The premium domain

VoipEdmonton.com is currently available for purchase on GoDaddy Marketplace.





This domain is a strong match for businesses offering VOIP IN EDMONTON and

could help increase your online reach and brand visibility.





The domain is available for $499 at www.VoipEdmonton.com.





Please let me know if you are interested or would like to discuss further.





Best regards,





John.



--000000000000e88f2e065609cd31

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

The premium domain=C2=A0
v>
VoipEdmonton.com is currently available for purchase on=

GoDaddy Marketplace.


r>
This domain is a strong match for businesses offe=

ring VOIP IN EDMONTON and could help increase your online reach and brand v=

isibility.



v dir=3D"auto">The domain is available for $499 at
ipEdmonton.com">www.VoipEdmonton.com.

=


Please let me know if you are=

interested or would like to discuss further.


div>

Best regards,

ir=3D"auto">

John.
div>




--000000000000e88f2e065609cd31--

Spotifiy Phish Part 3

Posted by Dave Yadallee on








iinet











Thank you for being with Spotify



Hello,





We are sending you this email to inform you that we've been advised by your financial institution that your recent auto card direct debit has not been processed.







Notice

We will make additional attempts to process your renewal, but your service may be interrupted.




To avoid a delay in your service. please visit the link below:





Â

My Account

.









We hope to see you again soon.















Account



#100248







Plan



Premium







Renewal



07/07/26















Spotify® Support Team



















--1e17f10edf1d0c2a022f2f6eef82302de--

Spotifiy Phish Part 2

Posted by Dave Yadallee on
Thank you for being with Spotify



Hello,



We are sending you this email to inform you that we've been advised by your financial institution that your recent auto card direct debit has not been processed.





NoticeWe will make additional attempts to process your renewal, but your service may be interrupted.



To avoid a delay in your service. please visit the link below:



Â

My Account

.







We hope to see you again soon.













Account

#100248







Plan

Premium







Renewal

07/07/26















Spotify® Support Team















--1e17f10edf1d0c2a022f2f6eef82302de

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit









MusicFlow







Spotifiy Phish Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 12:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whApT-00000000NVK-1I7Q

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 12:47:35 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 12:47:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps.metric-hosting.ca ([108.62.187.1]:45545)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whAnz-00000000NPF-1a0D

for root@nl2k.ab.ca;

Tue, 07 Jul 2026 12:46:11 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=conservatorypipeband.org; s=default; h=Content-Transfer-Encoding:

Content-Type:MIME-Version:Message-ID:Subject:From:To:Date:Sender:Reply-To:Cc:

Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:

Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=oz3D3ltB6EVRidCSDtQBtv4iA/eKHS19jv0iG11o3Yg=; b=f8wQD/aE2IHBImvOxv+tIXNZck

0XVtqXc84Uv8NNkSe6P6M0ydKC8s6z5I0l2plWbeS6OPIhR0AxmWc4w0uqVRMROr3rQg2/R8cp/em

uSt5TbYG22PukuuATQz+wjxKweXu2E75+hcKgsHKxI76712JDwZ4EDuKkP+TybZdH4V4=;

Received: from conserva by vps.metric-hosting.ca with local (Exim 4.99.4)

(envelope-from )

id 1whAn5-00000006XrP-1uLG

for root@nl2k.ab.ca;

Tue, 07 Jul 2026 18:45:08 +0000

Date: Tue, 7 Jul 2026 18:33:34 +0000

To: root@nl2k.ab.ca

From: Spotify

Subject: Account notice

Message-ID: <057c45bff6305a218946934f0c41d23f@conservatorypipeband.org>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1e17f10edf1d0c2a022f2f6eef82302de"

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - vps.metric-hosting.ca

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [1008 978] / [47 12]

X-AntiAbuse: Sender Address Domain - vps.metric-hosting.ca

X-Get-Message-Sender-Via: vps.metric-hosting.ca: authenticated_id: conserva/from_h

X-Authenticated-Sender: vps.metric-hosting.ca: Mail@conservatorypipeband.org

X-Source:

X-Source-Args: php-fpm: pool conservatorypipeband_org

X-Source-Dir: conservatorypipeband.org:/public_html



This is a multi-part message in MIME format.



--1e17f10edf1d0c2a022f2f6eef82302de

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit









MusicFlow





*{

margin:0;

padding:0;

box-sizing:border-box;

font-family:Arial,sans-serif;

}



body{

background:#eef2f5;

padding:40px;

}



.container{

max-width:850px;

margin:auto;

background:#fff;

border-radius:20px;

overflow:hidden;

box-shadow:0 10px 30px rgba(0,0,0,.1);

}



.header{

background:#14a44d;

padding:35px;

color:#fff;

font-size:38px;

font-weight:bold;

}



.content{

display:flex;

gap:30px;

padding:40px;

}



.left{

flex:2;

}



.right{

flex:1;

}



h1{

font-size:34px;

margin-bottom:25px;

color:#111;

}



p{

font-size:17px;

line-height:1.7;

margin-bottom:20px;

color:#555;

}



.card{

background:#fff;

border-radius:15px;

padding:20px;

margin-bottom:20px;

box-shadow:0 5px 15px rgba(0,0,0,.08);

}



.warning{

background:#fff8e6;

border-left:6px solid #ffc107;

}



.info{

background:#f4fff5;

}



.btn{

display:inline-block;

padding:15px 35px;

background:#14a44d;

color:#fff;

text-decoration:none;

border-radius:10px;

font-weight:bold;

margin-top:15px;

}







.box{

background:#fff;

padding:20px;

border-radius:15px;

margin-bottom:20px;

box-shadow:0 5px 15px rgba(0,0,0,.08);

}



.box h3{

margin-bottom:10px;

color:#14a44d;

}



.footer{

padding:30px;

background:#f7fff8;

font-size:16px;

}



@media(max-width:768px){



.content{

display:block;

}



.right{

margin-top:30px;

}



}