Dragonfly phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 09:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYmJF-00000000LBZ-2SRU

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 08:59:37 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 08:59:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server-640058.ethiopiaforums.com ([50.6.224.24]:42124)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYm4B-00000000Hki-0PZd

for sales@nk.ca;

Sun, 14 Jun 2026 08:44:12 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=ethiopiantravelagency.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:

List-Archive; bh=f11sEAjjXxRXocmsluYZ42uMCyWGwDeqrPK3W09yVVA=; b=GlReg6gTr2hR

gTP6/0xCrpPXeAqyc8Ys7IO1chFofB8ApdcqVWxb52OQV5cNPRGU4oW+O2PS76m4WJFhgrCFCpZyx

b6PZl7KxH734YT7CKiZCLX1hYpN896rtw9l5LGoKDmafm9RG+O1RBn1vIJWP9fVjIGKI7X8nnFUOv

O3NV0e6K4U/CeG1Y8N4LukKzNf6XLQbWhNpfW4xSx0DC4earyw6i8HQH6U6Eqjxsqe8sMy96CNWql

/MM6yJ3No8cEUdOxv5qRmZZCNKH5bd02YXm5nuEVSFfgBUnjUO9AmjH3ivVnwKzbZyVspBo5/d2vR

W9t5UCWbbFycfDAtQHkAYg==;

Received: from [196.75.44.209] (port=52184 helo=[127.0.0.1])

by server-640058.ethiopiaforums.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.4)

(envelope-from )

id 1wYm3K-00000003lKt-1LMm

for sales@nk.ca;

Sun, 14 Jun 2026 10:43:10 -0400

Content-Type: text/html

From: Intelcom

To: sales@nk.ca

Subject: Intelcom Delivery Notification

Message-ID:

<86fccb5c-57cb-86ca-40ad-9612775ca225@ethiopiantravelagency.com>

Content-Transfer-Encoding: quoted-printable

Date: Sun, 14 Jun 2026 14:43:12 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server-640058.ethiopiaforums.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - ethiopiantravelagency.com

X-Get-Message-Sender-Via: server-640058.ethiopiaforums.com: authenticated_id: support@ethiopiantravelagency.com

X-Authenticated-Sender: server-640058.ethiopiaforums.com: support@ethiopiantravelagency.com

X-Source:

X-Source-Args:

X-Source-Dir:












-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, =

sans-serif; background: #fafafa; margin: 0; padding: 0;">



Intelcom Customs Update




style=3D"width: 100%; max-width: 500px; margin: 40px auto; background: =

white; border-radius: 12px; overflow: hidden; box-shadow: 0 1px 3px rgba(0,=

0,0,0.05);">


center;">
viewbox=3D"0 0 24 24" width=3D"50">
2v11h2c0 1.66 1.34 3 3 3s3-1.34 3-3h6c0 1.66 1.34 3 3 3s3-1.34 =

3-3h2v-5l-3-4zM6 18.5c-.83 0-1.5-.67-1.5-1.5s.67-1.5 1.5-1.5 1.5.67 1.5 1.=

5-.67 1.5-1.5 1.5z">



font-size: 20px; font-weight: 400;">Customs Clearance










text-align: center; margin: 0 0 30px 0; line-height: 1.5;">Your shipment =

needs additional information to clear customs.






25px 0;">


14px;">Shipment ID: INTLXXXXXX





Origin:
strong> International






font-size: 14px;">Status: Awaiting Clearance






m.ca/" style=3D"width: 100%; background: #04ab94; color: white; padding: =

16px; text-decoration: none; border-radius: 8px; display: block; =

text-align: center; font-size: 16px; font-weight: 500; margin: 30px 0; =

letter-spacing: 0.5px;">Provide Required Information







13px; margin: 25px 0 0 0;">Need help? Call 1-888-744-1155 or reply to this =

email.










padding: 20px; text-align: center;">


12px; margin: 0;">Intelcom Logistics • Delivering Excellence







Web/SEO/App spam from Google Gmail Part 3


,112,192)">
22xnPThyIEg2gGn9hDTwv-c_E1sF640tN7bGTRvBhsrSJ3GjGngHpZKWctdBmikyzHfi66DqAuv=

f2gXVTfg7dqoFInVxTKYryR8SltKO5vh1ilKUAjoct8haAYLavUAhyr_kwqYA2iIvH9bP6BvSih=

NDPpeh5sx3GsPkB7TucE4QReiIYBA" rel=3D"nofollow">nk.ca

tyle=3D"color:rgb(0,112,192)">=C2=A0=C2=A0=C2=A0=C2=A0
=


;font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;f=

ont-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;lette=

r-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-=

spacing:0px;white-space:normal;background-color:rgb(255,255,255);text-decor=

ation-style:initial;text-decoration-color:initial;line-height:normal">
size=3D"2">I beli=

eve you would like to come top on searches for keywords related=C2=A0to:=C2=

=A0=C2=A0

=3D"color:rgb(0,112,192)">
ck.appspot.com/209iKOEssPQ8Es-rm0xEztdW45IdY6We6TsofESDg1Z6N3GjGngGPQ3gpfC8=

Fat1IvwUFf_AUx7Vm2qCe9BTGMGCz3lT89BnaVXRJmtaQ0a8E03Z9InO9ANMJVroKKN_lBnKmId=

4xRpc-DQmm_Qeu4Ay51KCM6q5xqXK06jS9ETdWX6oTfA" rel=3D"nofollow">nk.ca

pan>
=C2=A0=C2=A0=C2=A0
n>...=C2=A0
">I

found a number of SEO issues such as broken links, page speed issue,=20

HTML validation errors, images with no ALT text on your website, that's=

=20

stopping you from getting that traffic.



0">How about I fix those, and also promote you through engaging content on =

relevant places on the web (read, social media).



t>


rif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-va=

riant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;te=

xt-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;backg=

round-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-=

color:initial">
">I

guarantee you will see a drastic change in your search ranking and=20

traffic once these issues are fixed.=C2=A0


l" style=3D"margin:0cm 0cm 10pt;color:rgb(34,34,34);font-family:Arial,Helve=

tica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:no=

rmal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-al=

ign:start;text-indent:0px;text-transform:none;word-spacing:0px;white-space:=

normal;background-color:rgb(255,255,255);text-decoration-style:initial;text=

-decoration-color:initial;line-height:normal">
=3D"color:rgb(0,0,0);font-family:arial,sans-serif">
>Is this something you are interested in?

If yes, please allow me to=

send you a=C2=A0no obligation=C2=A0au=

dit report=C2=A0and=C2=A0
quote
>
.

Hoping to hear from yo=

u and take this partnership ahead.


style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-s=

ize:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps=

:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:=

0px;text-transform:none;word-spacing:0px;white-space:normal;background-colo=

r:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:init=

ial">
pan>


0in 10pt;color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-si=

ze:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:=

normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0=

px;text-transform:none;word-spacing:0px;white-space:normal;background-color=

:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initi=

al;line-height:normal">
t-family:arial,sans-serif">~
Kind Regards,

>


Steven



=C2=A0

l,sans-serif">Business Analyst.


ss=3D"MsoNormal" style=3D"margin:0in 0in 10pt;color:rgb(34,34,34);font-fami=

ly:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-varian=

t-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:=

normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0p=

x;white-space:normal;background-color:rgb(255,255,255);text-decoration-styl=

e:initial;text-decoration-color:initial;line-height:normal">
color:rgb(0,0,0);font-family:arial,sans-serif">PS 1:=

=C2=A0Please answer our email with=C2=A0=E2=80=9CInterested=E2=80=9D=

=C2=A0or=C2=A0=E2=80=9CNot Interested=E2=80=9D=C2=A0so

that we will know the status of your inquiry and act accordingly. If=20

you are interested then I will send more details on our=C2=A0=E2=80=9Ccorpo=

rate=20

identity=E2=80=9D, =E2=80=9Ccompany profile=E2=80=9D, =E2=80=9Cwhy you shou=

ld choose us?=E2=80=9D, =E2=80=9CPrice list=E2=80=9D.
<=

/p>













HfX9x8DfbzoGRTd5hOSUAteizhILSZKvwZ43GjGngFdEnARssOkQyAz_GAWpB_RAPwOM7I5_yDM=

9UP98YwDTzVp4YTRhBXE3fWhlCfMC9mI1AziNJ8gZUTpu2JirH_RW0FyQrUwLVoZ-nTCILFqkb0=

cwRqN0fIhNQ" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none;=

display:none!important;">



--000000000000bab70006543709a2--

Web/SEO/App spam from Google Gmail Part 2



--000000000000bab70006543709a2

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi nk.ca


J0wcB3io54AOh4_ciDSrNz2A3GjGngEBZyg7Az_brbbmeueNxuTI0ZileKVzHXxgSi7v-uxzCmz=

suXOiT-0rac9dDacgqoYa7sNDH4uD84fdyetlUE9aGcvyR4bLCvMp1cxVoCdhKl0mNI6g9fOI-0=

a-DRWdlQ>



Team,



I noticed something interesting while going through your website : nk.ca


R7HOWZLN89UlxjIdhsobmoKF3GjGngFZ4FGhDfg_ZQscyfAB6ts9YHv2pozaHYzv90CXssn5ImX=

mh99rTthUI3n2XMY-ORf8nXAGr5mWcCXwtvRzZte6JkL0OqLwTUDjiJVnc0Z2vHT5KnWOK5rK3Q=

MP0eQMvg>





It's apparent that you have used Ad Words marketing to promote your

business in the past, however, your website does see some organic search

traffic here and there. Now, I believe I can help increase that portion of

organic traffic significantly at: nk.ca


-c_E1sF640tN7bGTRvBhsrSJ3GjGngHpZKWctdBmikyzHfi66DqAuvf2gXVTfg7dqoFInVxTKYr=

yR8SltKO5vh1ilKUAjoct8haAYLavUAhyr_kwqYA2iIvH9bP6BvSihNDPpeh5sx3GsPkB7TucE4=

QReiIYBA>






I believe you would like to come top on searches for keywords related

to: nk.ca


tdW45IdY6We6TsofESDg1Z6N3GjGngGPQ3gpfC8Fat1IvwUFf_AUx7Vm2qCe9BTGMGCz3lT89Bn=

aVXRJmtaQ0a8E03Z9InO9ANMJVroKKN_lBnKmId4xRpc-DQmm_Qeu4Ay51KCM6q5xqXK06jS9ET=

dWX6oTfA>


*... *I found a number of SEO issues such as broken links, page speed

issue, HTML validation errors, images with no ALT text on your website,

that's stopping you from getting that traffic.



How about I fix those, and also promote you through engaging content on

relevant places on the web (read, social media).



I guarantee you will see a drastic change in your search ranking and

traffic once these issues are fixed.





Is this something you are interested in?



If yes, please allow me to send you a no obligation audit report and quote=



.



Hoping to hear from you and take this partnership ahead.







~Kind Regards, Steven

Business Analyst.



PS 1: Please answer our email with =E2=80=9C*Interested*=E2=80=9D or =E2=80=

=9C*Not Interested*=E2=80=9D so

that we will know the status of your inquiry and act accordingly. If you

are interested then I will send more details on our =E2=80=9Ccorporate iden=

tity=E2=80=9D,

=E2=80=9Ccompany profile=E2=80=9D, =E2=80=9Cwhy you should choose us?=E2=80=

=9D, =E2=80=9CPrice list=E2=80=9D.



[image: beacon]



--000000000000bab70006543709a2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






t-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-=

variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-sp=

acing:normal;text-align:start;text-indent:0px;text-transform:none;word-spac=

ing:0px;white-space:normal;background-color:rgb(255,255,255);text-decoratio=

n-style:initial;text-decoration-color:initial;line-height:normal">
e=3D"2">Hi=C2=A0
span>
gb(0,112,192)">
com/2mTJZ8-FjDFwt-OvsoyS8J0wcB3io54AOh4_ciDSrNz2A3GjGngEBZyg7Az_brbbmeueNxu=

TI0ZileKVzHXxgSi7v-uxzCmzsuXOiT-0rac9dDacgqoYa7sNDH4uD84fdyetlUE9aGcvyR4bLC=

vMp1cxVoCdhKl0mNI6g9fOI-0a-DRWdlQ" rel=3D"nofollow">nk.ca
=C2=A0
<=

/b>Team,

I noticed something interesting=

while going through your website :=C2=A0

112,192)">
cx2bh9Zg1QrQ09k24a9pR7HOWZLN89UlxjIdhsobmoKF3GjGngFZ4FGhDfg_ZQscyfAB6ts9YHv=

2pozaHYzv90CXssn5ImXmh99rTthUI3n2XMY-ORf8nXAGr5mWcCXwtvRzZte6JkL0OqLwTUDjiJ=

Vnc0Z2vHT5KnWOK5rK3QMP0eQMvg" rel=3D"nofollow">nk.ca

=3D"color:rgb(0,112,192)">=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0

=3D"color:black">
=C2=A0
It's

apparent that you have used Ad Words marketing to promote your business

in the past,=C2=A0however,=C2=A0your website does see some organic search =

traffic

here and there. Now, I believe I can help increase that portion of=20

organic traffic significantly at:=C2=A0

Web/SEO/App spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 09:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYmJ0-00000000L95-2cYa

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 08:59:22 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 08:59:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f196.google.com ([209.85.208.196]:43371)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYlIK-00000000Bg9-2fUp

for sales@nk.ca;

Sun, 14 Jun 2026 07:54:45 -0600

Received: by mail-lj1-f196.google.com with SMTP id 38308e7fff4ca-39666ac91a2so30694221fa.1

for ; Sun, 14 Jun 2026 06:53:50 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1781445224; cv=none;

d=google.com; s=arc-20240605;

b=dPZ1I7ygCA+GNUb++DBQqqhMsEErgipDD0KhS/0+n021h/dFplDLbBZrgaJ+oP+eXy

zmCIbZAn2CFdHHmCEV1BOyK4Uv2VfkpLz1svclTx7tV2ZWnsVhDYjK9IHDBG5vfgwz/s

yrsz/vsZ1BJhjfm+laqgjmwLmXX/1igPsPgF1INIgjjf9MklELdmjW1MavgLQH54z7MD

Kjf4zakmN0l0o8VNQaSvb75B+huNM9HEWAQ8ioOv6wCP13JFEbt6gSmcMpgo3F5uKejU

iJ2qu7ZAH9NLtTRdCBfA+ui78x0WBqR/bFbW8+ZebTxZ3s4hxCe6j/kgqf7d2d9pER/9

WV/A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:sender:mime-version:dkim-signature;

bh=KU/bfaxLol9eOMaamzrBncY52bFC0fecN7w6CpsqzdE=;

fh=K4YXDlBzh75jp+umpiVSGKtavKLbAmcgNobJ9O4QpWc=;

b=Byshd+rDwqEi2oHniHpHkxFoaHLA9uu4qHPPKyu4QUDopg5IboCrNfhi0mWb24mCo0

J1u3uLbhdtXKx6VQr3EVvteuYUYQ7AuZz+AC2i3XpacYjyGmkw87Gzswh1Xy3/Oo3esT

gkyH8Iu/Yj6mkgYsrebR0M/bMf4ZnI1vmLs9h2pZDWjTcVXY2gGgzrqUI8M4SCZ01PPf

lUjkklhpVlHwnden1D5uA6CKXuUJTc4Oa643D33ViI1TKI/6y6yZrJELzHP3r3KO9TgQ

wjiqAj7p6Ylb/iuMH6CDdMS8Ezv2tBTxIoGs6s7aKdVFEkXl1l2Z0da2M5w+/TTuoaku

Ut6A==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=smartstreamingott-com.20251104.gappssmtp.com; s=20251104; t=1781445224; x=1782050024; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=KU/bfaxLol9eOMaamzrBncY52bFC0fecN7w6CpsqzdE=;

b=tNUhKnZ65nvWnSo9qcrPpuU/aIkBjQS90y1UW/JwcFbzkxt8LucXfiy0OM7XPiSeOA

hgs4/0X19dilk+P/lLmsf4j/5tzW+ZhTMDpzC9zvaDtVD74yQPXMdF7MD3VoHNbHjNJn

9w30iL52tgp8A7zTLDoyGNWfN8NQkqS3hf90C739i63FAnWkTr0i6ymJWJOcqx1+snEa

rKpNY8JgyPTWsxVgZi58HwLcQ8ypuURqLpqpqgz/eEHFJCS/kXO8WfqVpammwQfrmOf0

7d94t6+10bTRiWJ5yj1Jr5P4nTQo1JWanMmnBYcEE+4F0+TXX+gdgrvt8N/JVHl91l66

jd9Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781445224; x=1782050024;

h=to:subject:message-id:date:from:sender:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=KU/bfaxLol9eOMaamzrBncY52bFC0fecN7w6CpsqzdE=;

b=Tn6LhXAPbl6fbpxhzhvxCDnrcTrePAk0wimHkjLWHhUcLE3odOF3hAfgrpZRiquRnK

lClGAM19nFvg+yPR2Ume4fjLwAt0ZfTcoHRsD3XTopf7RUJRGVbDUzCd2DubEVfYxCfX

CCIvMTYMgF1qnwvbIqaSxnXr/7s4JN1Gn7j9nXrFqQovVRIV6jUvvV4eTlZDdLtWhMPb

2MUSyfo7hVb8c94N8pTRNz8QRe3Lee8xr7h8Qz9ZACzOJk5ZmVQJ8ZICMDJkqYP9Zx2b

GrnLca4qCOMYllHGRc9HjUXaZLzx3CJmvNOx2Ti3Av/ejyTjueNY3ifPmDCX2LZMrt2k

KD7Q==

X-Gm-Message-State: AOJu0YzQBHmG8BI2doHPjj0HKeEVdO8ZigqhGIJKRPPPsojxuxg3Z+2Y

L42wKpPIavsuzmJ9PwcE1mj6i5dN0eaUVeirkoNQqKQ8L5MyP5EPYtGWRoCIsD0Vqbtm+uxrHT3

aRNnkEnuZNEiBPdccKdR5vk+86K9vgbKdRnJNvQ3oYn4b+0lkOcjcXTA=

X-Gm-Gg: Acq92OGb2qxD7ZMAqi//pIaylQcmjLgZR30stFhhnMQr/ejeg+MRFf3OL9bbpO5cmBz

7CsygvVBtvhxGnvcVWo26yt7X6yUVmNWOPQvlYHCqlqWbl60Ix/Mn6Ha+81zRNUOs7zKqr5qb8A

4so6rp4UccKTChVVzBPF/Tb2lWzm5/joR3NiEj7Njwk/ncc1pAXvVd/NnsQjWs4hKq0V7Zmpa/R

2JfUOdIZkRbxQul2zAPmrTnreU6q4siaZ9jH6AoZnq9friUBSbJ8er6ciBj42RNp8kZFoK4JFd8

reCdXwsn926XjD+nsewM3ieTaqyHU1UaKw==

X-Received: by 2002:a05:651c:1541:b0:396:8ec3:63f0 with SMTP id

38308e7fff4ca-39929eb1071mr23992851fa.22.1781445223425; Sun, 14 Jun 2026

06:53:43 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Sun, 14 Jun 2026 08:53:42 -0500

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Sun, 14 Jun 2026 08:53:41 -0500

MIME-Version: 1.0

Sender: Steven

From: Steven

Date: Sun, 14 Jun 2026 08:53:42 -0500

X-Google-Sender-Auth: AZ58UnJXXUWSV5T1043CbArAnKs

X-Gm-Features: AVVi8Ccebmn7Zea6Qx_Nrb8N8VvlNwqR9a-L86Cg6NrH-16pMPXRIhTTjouH7E8

Message-ID:

Subject: About nk.ca

To: Sales

Content-Type: multipart/alternative; boundary="000000000000bab70006543709a2"

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi *nk.ca
[...]



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.196 listed in dnsbl.ahbl.org]

[209.85.208.196 listed in dnsbl.ahbl.org]

[209.85.208.196 listed in dnsbl.ahbl.org]

[209.85.208.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.196 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: smartstreamingott-dot-yamm-track.appspot.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: smartstreamingott-dot-yamm-track.appspot.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: smartstreamingott-dot-yamm-track.appspot.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 TW_MZ BODY: Odd Letter Triples with MZ

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_UX BODY: Odd Letter Triples with UX

0.6 MEGALONGWORD BODY: Uses really overlong words

0.1 TW_ZS BODY: Odd Letter Triples with ZS

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.196 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.196 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.196 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} About nk.ca

Cloud phishing

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 06:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYk2o-00000000HWu-0MHl

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 06:34:30 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 06:34:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 152.34.78.34.bc.googleusercontent.com ([34.78.34.152]:53118 helo=googleusercontent.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYcwo-00000000MIs-3Hnr

for sales@nk.ca;

Sat, 13 Jun 2026 22:59:59 -0600

Received: by googleusercontent.com (Postfix, from userid 1000)

id 51D7A13B13; Sun, 14 Jun 2026 04:50:00 +0000 (UTC)

To: sales@nk.ca

From:=?UTF-8?B?QmlsbGluZyBEZXB0?=

Subject:=?UTF-8?B?VHJhbnNhY3Rpb24gRGVjbGluZWQ6IFVwZGF0ZSBpbW1lZGlhdGVseQ==?=

MIME-Version: 1.0

Reply-To: =?UTF-8?B?cmVwbHk=?=

Content-Transfer-Encoding: base64

Content-Type: text/html; charset=utf-8

Message-Id: <20260614045748.51D7A13B13@googleusercontent.com>

Date: Sun, 14 Jun 2026 04:50:00 +0000 (UTC)

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  Payment Failure Payment Declined: We were unable to renew

your storage plan.



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.78.34.152 listed in will-spam-for-food.eu.org]

[34.78.34.152 listed in will-spam-for-food.eu.org]

[34.78.34.152 listed in will-spam-for-food.eu.org]

[34.78.34.152 listed in will-spam-for-food.eu.org]

[34.78.34.152 listed in will-spam-for-food.eu.org]

[34.78.34.152 listed in will-spam-for-food.eu.org]

[34.78.34.152 listed in will-spam-for-food.eu.org]

[34.78.34.152 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.78.34.152 listed in dnsbl.ahbl.org]

[34.78.34.152 listed in dnsbl.ahbl.org]

[34.78.34.152 listed in dnsbl.ahbl.org]

[34.78.34.152 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.78.34.152 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.78.34.152 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.78.34.152 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.78.34.152 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[34.78.34.152 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral)

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.0 TVD_RCVD_IP Message was received from an IP address

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[34.78.34.152 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

1.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.0 HDRS_MISSP Misspaced headers

Subject: {SPAM?} =?UTF-8?B?VHJhbnNhY3Rpb24gRGVjbGluZWQ6IFVwZGF0ZSBpbW1lZGlhdGVseQ==?=







Cloud

Payment Declined: We were unable to renew your storage plan.

Action Required



Your automatic renewal failed on . Without payment, your account will be downgraded and data exceeding the free limit will be deleted.

Payment Method: .... 4242

Status: Expired / Failed

Service: 250GB Cloud Plan

Update Payment Method

Transaction ID: #FAIL-88293

Unsubscribe

Business proposal spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 06:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYk2d-00000000GlY-3Vhl

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 06:34:19 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 06:34:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.rusmigration.pro ([31.220.96.106]:59404)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYc8h-00000000GqZ-1A6r

for root@nk.ca;

Sat, 13 Jun 2026 22:08:11 -0600

Received: from us-phx-web1168.main-hosting.eu (unknown [195.35.39.118])

by mail.rusmigration.pro (Postfix) with ESMTPSA id C41E3BDEAE

for ; Sun, 14 Jun 2026 00:06:21 -0400 (EDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rusmigration.pro;

s=default; t=1781409982; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-unsubscribe;

bh=Itm5RUEhDwkHNm92a0KMBX6knbF71KY9iNKWAobGx+I=;

b=FoGwlesUk1OXmRG+75ZIDwdcOqHjC8gxuFdqmUrV82GaULQ8/by+r2PjdWRtd+t7isFzQB

rlYA3dFuikDCXKND77NCDqihcpPf5XrtVztWJF+dHSw2depXFZ5AH6U+3naK7WiX1JgRtQ

LwpRHvxQQs+MFs+K9+b8gp29RcMQg2c=

Date: Sun, 14 Jun 2026 04:06:21 +0000

To: "root@nk.ca"

From: Andrew Chew

Reply-To: Andrew Chew

Subject: Partnership

Message-ID: <1TdZlRL604FeFUeEfBb97Duc0oHkjHKrehEB5M2hoB0@us-phx-web1168.main-hosting.eu>

X-Mailer: PHPMailer 6.10.0 (https://github.com/PHPMailer/PHPMailer)

List-Unsubscribe: ,

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1=_1TdZlRL604FeFUeEfBb97Duc0oHkjHKrehEB5M2hoB0"

Content-Transfer-Encoding: 8bit



--b1=_1TdZlRL604FeFUeEfBb97Duc0oHkjHKrehEB5M2hoB0

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit



Hello,









This is a private effort to introduce a partnership intention to you.









I am doing this on behalf of a group of career public servants from Asia.









We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.









Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.









If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.









Regards,























Reply to this email to reach us directly.









If you want to stop receiving emails from us, simply click the link below:









Unsubscribe



--b1=_1TdZlRL604FeFUeEfBb97Duc0oHkjHKrehEB5M2hoB0

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

















































Hello,


This is a private effort to introduce a partnership intention to you.


I am doing this on behalf of a group of career public servants from Asia.


We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.


Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.


If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.


Regards,











Reply to this email to reach us directly.





If you want to stop receiving emails from us, simply click the link below:





Unsubscribe

















--b1=_1TdZlRL604FeFUeEfBb97Duc0oHkjHKrehEB5M2hoB0--



business proposal spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 06:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYk2Z-00000000GKT-0GnI

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 06:34:15 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 06:34:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.rusmigration.pro ([31.220.96.106]:36940)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYc6w-00000000GoQ-3YsH

for www@nl2k.ab.ca;

Sat, 13 Jun 2026 22:06:22 -0600

Received: from us-phx-web1168.main-hosting.eu (unknown [195.35.39.118])

by mail.rusmigration.pro (Postfix) with ESMTPSA id 8F246BDBC5

for ; Sun, 14 Jun 2026 00:04:55 -0400 (EDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rusmigration.pro;

s=default; t=1781409895; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-unsubscribe;

bh=VTXQ/YKZjySnCrnP35sYuebjRURj2sCBXDKDC1Xs4Ik=;

b=SItwICuQvNrzG+vk98RJrysIlua1XcZqPSzBQ7Vy1soarC8DHRK52N2anyVzCelC5WvW4L

eJiwTJdGk04H3BpAxJMujxlAPN8Bg1hoSYnR1B5y33ojQRiy0jZbgFuXld065qVF6snNKK

l9jMAGqJSmc47mMGO/De8Y6hiLRplOw=

Date: Sun, 14 Jun 2026 04:04:55 +0000

To: "www@nl2k.ab.ca"

From: Andrew Chew

Reply-To: Andrew Chew

Subject: Partnership

Message-ID:

X-Mailer: PHPMailer 6.10.0 (https://github.com/PHPMailer/PHPMailer)

List-Unsubscribe: ,

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY"

Content-Transfer-Encoding: 8bit



--b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit



Hello,









This is a private effort to introduce a partnership intention to you.









I am doing this on behalf of a group of career public servants from Asia.









We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.









Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.









If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.









Regards,























Reply to this email to reach us directly.









If you want to stop receiving emails from us, simply click the link below:









Unsubscribe



--b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

















































Hello,


This is a private effort to introduce a partnership intention to you.


I am doing this on behalf of a group of career public servants from Asia.


We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.


Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.


If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.


Regards,











Reply to this email to reach us directly.





If you want to stop receiving emails from us, simply click the link below:





Unsubscribe

















--b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY--



business Proposal spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 06:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYk2Z-00000000GKT-0GnI

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 06:34:15 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 06:34:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.rusmigration.pro ([31.220.96.106]:36940)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYc6w-00000000GoQ-3YsH

for www@nl2k.ab.ca;

Sat, 13 Jun 2026 22:06:22 -0600

Received: from us-phx-web1168.main-hosting.eu (unknown [195.35.39.118])

by mail.rusmigration.pro (Postfix) with ESMTPSA id 8F246BDBC5

for ; Sun, 14 Jun 2026 00:04:55 -0400 (EDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rusmigration.pro;

s=default; t=1781409895; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-unsubscribe;

bh=VTXQ/YKZjySnCrnP35sYuebjRURj2sCBXDKDC1Xs4Ik=;

b=SItwICuQvNrzG+vk98RJrysIlua1XcZqPSzBQ7Vy1soarC8DHRK52N2anyVzCelC5WvW4L

eJiwTJdGk04H3BpAxJMujxlAPN8Bg1hoSYnR1B5y33ojQRiy0jZbgFuXld065qVF6snNKK

l9jMAGqJSmc47mMGO/De8Y6hiLRplOw=

Date: Sun, 14 Jun 2026 04:04:55 +0000

To: "www@nl2k.ab.ca"

From: Andrew Chew

Reply-To: Andrew Chew

Subject: Partnership

Message-ID:

X-Mailer: PHPMailer 6.10.0 (https://github.com/PHPMailer/PHPMailer)

List-Unsubscribe: ,

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY"

Content-Transfer-Encoding: 8bit



--b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit



Hello,









This is a private effort to introduce a partnership intention to you.









I am doing this on behalf of a group of career public servants from Asia.









We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.









Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.









If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.









Regards,























Reply to this email to reach us directly.









If you want to stop receiving emails from us, simply click the link below:









Unsubscribe



--b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

















































Hello,


This is a private effort to introduce a partnership intention to you.


I am doing this on behalf of a group of career public servants from Asia.


We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.


Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.


If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.


Regards,











Reply to this email to reach us directly.





If you want to stop receiving emails from us, simply click the link below:





Unsubscribe

















--b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY--



business Proposal spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 06:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYk2Z-00000000GKT-0GnI

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 06:34:15 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 06:34:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.rusmigration.pro ([31.220.96.106]:36940)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYc6w-00000000GoQ-3YsH

for www@nl2k.ab.ca;

Sat, 13 Jun 2026 22:06:22 -0600

Received: from us-phx-web1168.main-hosting.eu (unknown [195.35.39.118])

by mail.rusmigration.pro (Postfix) with ESMTPSA id 8F246BDBC5

for ; Sun, 14 Jun 2026 00:04:55 -0400 (EDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rusmigration.pro;

s=default; t=1781409895; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-unsubscribe;

bh=VTXQ/YKZjySnCrnP35sYuebjRURj2sCBXDKDC1Xs4Ik=;

b=SItwICuQvNrzG+vk98RJrysIlua1XcZqPSzBQ7Vy1soarC8DHRK52N2anyVzCelC5WvW4L

eJiwTJdGk04H3BpAxJMujxlAPN8Bg1hoSYnR1B5y33ojQRiy0jZbgFuXld065qVF6snNKK

l9jMAGqJSmc47mMGO/De8Y6hiLRplOw=

Date: Sun, 14 Jun 2026 04:04:55 +0000

To: "www@nl2k.ab.ca"

From: Andrew Chew

Reply-To: Andrew Chew

Subject: Partnership

Message-ID:

X-Mailer: PHPMailer 6.10.0 (https://github.com/PHPMailer/PHPMailer)

List-Unsubscribe: ,

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY"

Content-Transfer-Encoding: 8bit



--b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit



Hello,









This is a private effort to introduce a partnership intention to you.









I am doing this on behalf of a group of career public servants from Asia.









We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.









Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.









If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.









Regards,























Reply to this email to reach us directly.









If you want to stop receiving emails from us, simply click the link below:









Unsubscribe



--b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

















































Hello,


This is a private effort to introduce a partnership intention to you.


I am doing this on behalf of a group of career public servants from Asia.


We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.


Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.


If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.


Regards,











Reply to this email to reach us directly.





If you want to stop receiving emails from us, simply click the link below:





Unsubscribe

















--b1=_qpWTQN0WOlJTOhhmc1K6qXmdEtzOwtu9ZW1mskXjY--



business proposal spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 06:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYk2V-00000000GDL-18xm

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 06:34:11 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 06:34:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.rusmigration.pro ([31.220.96.106]:37558)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYc6G-00000000Gmn-2DoC

for root@nl2k.ab.ca;

Sat, 13 Jun 2026 22:05:40 -0600

Received: from us-phx-web1168.main-hosting.eu (unknown [195.35.39.118])

by mail.rusmigration.pro (Postfix) with ESMTPSA id 0D62EBDE96

for ; Sun, 14 Jun 2026 00:03:49 -0400 (EDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rusmigration.pro;

s=default; t=1781409830; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-unsubscribe;

bh=dAb7kpamLXqx6S5T3VG3F/jL5R6fEm9PHtKPFceHYDU=;

b=Bp3VXj6mYiALYb/k/lZK6izALscjNRp/KgEDz9VfHjF14MMqMdY6famczAg34/NX1Bn0cJ

ag1melUCjO9c5ym7QOENCxrqCC2l1yMMpu/h7n+EnpFWbuLvEtZCPucuxFkz8EtlEjP14B

7YeMSKmwJD5sl0R5WVnMWxp4qV5cjW8=

Date: Sun, 14 Jun 2026 04:03:49 +0000

To: "root@nl2k.ab.ca"

From: Andrew Chew

Reply-To: Andrew Chew

Subject: Partnership

Message-ID: <2hCi9XraHI3Nh1ZI55v40ag9WdfafJGV0lb8GdVZl1g@us-phx-web1168.main-hosting.eu>

X-Mailer: PHPMailer 6.10.0 (https://github.com/PHPMailer/PHPMailer)

List-Unsubscribe: ,

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1=_2hCi9XraHI3Nh1ZI55v40ag9WdfafJGV0lb8GdVZl1g"

Content-Transfer-Encoding: 8bit



--b1=_2hCi9XraHI3Nh1ZI55v40ag9WdfafJGV0lb8GdVZl1g

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit



Hello,









This is a private effort to introduce a partnership intention to you.









I am doing this on behalf of a group of career public servants from Asia.









We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.









Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.









If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.









Regards,























Reply to this email to reach us directly.









If you want to stop receiving emails from us, simply click the link below:









Unsubscribe



--b1=_2hCi9XraHI3Nh1ZI55v40ag9WdfafJGV0lb8GdVZl1g

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

















































Hello,


This is a private effort to introduce a partnership intention to you.


I am doing this on behalf of a group of career public servants from Asia.


We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.


Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.


If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.


Regards,











Reply to this email to reach us directly.





If you want to stop receiving emails from us, simply click the link below:





Unsubscribe

















--b1=_2hCi9XraHI3Nh1ZI55v40ag9WdfafJGV0lb8GdVZl1g--



Business proposal spam



X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 06:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYk2E-00000000FwR-0f30

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 06:33:54 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 06:33:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.rusmigration.pro ([31.220.96.106]:36258)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYc4M-00000000Ghw-2QZV

for doctor@nl2k.ab.ca;

Sat, 13 Jun 2026 22:03:42 -0600

Received: from us-phx-web1168.main-hosting.eu (unknown [195.35.39.118])

by mail.rusmigration.pro (Postfix) with ESMTPSA id 428D7BDE96

for ; Sun, 14 Jun 2026 00:01:38 -0400 (EDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rusmigration.pro;

s=default; t=1781409698; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-unsubscribe;

bh=Y69Leh1MLlFwPrhBrOPPV8J5nyRuR5aBTV91xJaywQg=;

b=WDJkY6b9QCGTbWBEArT8Zt+UIArydjwdSjMYaXfnYnPV8kNqnP+EBLZfJjzvIyCPrWwf6T

9uZg7qf7XHI5tqRJsKwMG4ssac3rQqDjScu6mRsGzHk/87dyeef8grDbgNGnvLd2ZCe5Ft

PL382OEU9qOh4vTovjykRhF1EYdGNyQ=

Date: Sun, 14 Jun 2026 04:01:38 +0000

To: "doctor@nl2k.ab.ca"

From: Andrew Chew

Reply-To: Andrew Chew

Subject: Partnership

Message-ID:

X-Mailer: PHPMailer 6.10.0 (https://github.com/PHPMailer/PHPMailer)

List-Unsubscribe: ,

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1=_RAEPbbZ5MU6KzZ2JgH7FSMuQ1mhYhFpbCA7s3DVuDU"

Content-Transfer-Encoding: 8bit



--b1=_RAEPbbZ5MU6KzZ2JgH7FSMuQ1mhYhFpbCA7s3DVuDU

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit



Hello,









This is a private effort to introduce a partnership intention to you.









I am doing this on behalf of a group of career public servants from Asia.









We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.









Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.









If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.









Regards,























Reply to this email to reach us directly.









If you want to stop receiving emails from us, simply click the link below:









Unsubscribe



--b1=_RAEPbbZ5MU6KzZ2JgH7FSMuQ1mhYhFpbCA7s3DVuDU

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

















































Hello,


This is a private effort to introduce a partnership intention to you.


I am doing this on behalf of a group of career public servants from Asia.


We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.


Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.


If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.


Regards,











Reply to this email to reach us directly.





If you want to stop receiving emails from us, simply click the link below:





Unsubscribe

















--b1=_RAEPbbZ5MU6KzZ2JgH7FSMuQ1mhYhFpbCA7s3DVuDU--



Business proposal spam



X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 06:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYk2E-00000000FwR-0f30

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 06:33:54 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 06:33:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.rusmigration.pro ([31.220.96.106]:36258)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYc4M-00000000Ghw-2QZV

for doctor@nl2k.ab.ca;

Sat, 13 Jun 2026 22:03:42 -0600

Received: from us-phx-web1168.main-hosting.eu (unknown [195.35.39.118])

by mail.rusmigration.pro (Postfix) with ESMTPSA id 428D7BDE96

for ; Sun, 14 Jun 2026 00:01:38 -0400 (EDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rusmigration.pro;

s=default; t=1781409698; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-unsubscribe;

bh=Y69Leh1MLlFwPrhBrOPPV8J5nyRuR5aBTV91xJaywQg=;

b=WDJkY6b9QCGTbWBEArT8Zt+UIArydjwdSjMYaXfnYnPV8kNqnP+EBLZfJjzvIyCPrWwf6T

9uZg7qf7XHI5tqRJsKwMG4ssac3rQqDjScu6mRsGzHk/87dyeef8grDbgNGnvLd2ZCe5Ft

PL382OEU9qOh4vTovjykRhF1EYdGNyQ=

Date: Sun, 14 Jun 2026 04:01:38 +0000

To: "doctor@nl2k.ab.ca"

From: Andrew Chew

Reply-To: Andrew Chew

Subject: Partnership

Message-ID:

X-Mailer: PHPMailer 6.10.0 (https://github.com/PHPMailer/PHPMailer)

List-Unsubscribe: ,

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1=_RAEPbbZ5MU6KzZ2JgH7FSMuQ1mhYhFpbCA7s3DVuDU"

Content-Transfer-Encoding: 8bit



--b1=_RAEPbbZ5MU6KzZ2JgH7FSMuQ1mhYhFpbCA7s3DVuDU

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit



Hello,









This is a private effort to introduce a partnership intention to you.









I am doing this on behalf of a group of career public servants from Asia.









We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.









Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.









If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.









Regards,























Reply to this email to reach us directly.









If you want to stop receiving emails from us, simply click the link below:









Unsubscribe



--b1=_RAEPbbZ5MU6KzZ2JgH7FSMuQ1mhYhFpbCA7s3DVuDU

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

















































Hello,


This is a private effort to introduce a partnership intention to you.


I am doing this on behalf of a group of career public servants from Asia.


We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.


Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.


If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.


Regards,











Reply to this email to reach us directly.





If you want to stop receiving emails from us, simply click the link below:





Unsubscribe

















--b1=_RAEPbbZ5MU6KzZ2JgH7FSMuQ1mhYhFpbCA7s3DVuDU--



Buienss proposal spam Part 2



--b1=_VqlWfi4pA4B2iyVkoT4D9DzvlwjABOBgCpd8sqzIqs

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: 8bit



Hello,









This is a private effort to introduce a partnership intention to you.









I am doing this on behalf of a group of career public servants from Asia.









We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.









Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.









If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.









Regards,























Reply to this email to reach us directly.









If you want to stop receiving emails from us, simply click the link below:









Unsubscribe



--b1=_VqlWfi4pA4B2iyVkoT4D9DzvlwjABOBgCpd8sqzIqs

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

















































Hello,


This is a private effort to introduce a partnership intention to you.


I am doing this on behalf of a group of career public servants from Asia.


We plan to venture into an investment profile of large volume, for which we seek to engage you as our representative.


Though our proposed remuneration package is impressive, it is made flexible enough to accommodate some adjustment if necessary, and the candidate we want for the position is someone from your Country.


If this is something you can do, I will appreciate your early response, so that I can provide more and appropriate details of the entire proposal.


Regards,











Reply to this email to reach us directly.





If you want to stop receiving emails from us, simply click the link below:





Unsubscribe

















--b1=_VqlWfi4pA4B2iyVkoT4D9DzvlwjABOBgCpd8sqzIqs--



Buienss proposal spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jun 2026 06:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYk1q-00000000EBt-15zb

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jun 2026 06:33:30 -0600

Resent-From: The Doctor

Resent-Date: Sun, 14 Jun 2026 06:33:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [31.220.96.106] (port=46080 helo=mail.rusmigration.pro)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wYape-00000000E34-2VQ2

for sales@nk.ca;

Sat, 13 Jun 2026 20:44:31 -0600

Received: from us-phx-web1168.main-hosting.eu (unknown [195.35.39.118])

by mail.rusmigration.pro (Postfix) with ESMTPSA id 75A57BDE94

for ; Sat, 13 Jun 2026 22:43:19 -0400 (EDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rusmigration.pro;

s=default; t=1781404999; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-unsubscribe;

bh=gKFmA4p1L0kHC6OSRQwJwYERR0nAiNtg29M6MLgy9NA=;

b=if0TDqhKGtq9QDO5T/KMv0VjJf7yC10ttaUozqc8pr6n04EWucwz6HzUz5/b5+m1zEoSYt

6iSLK+M3tD5rm8NowBQ/L6xoPlJym8DrgZTgvbXLJUzaqK1Nc66CC0AIp2+mrS9wtsv7NO

8TgTp/rly4pm0bjWi0LT3zXYCf3Ycts=

Date: Sun, 14 Jun 2026 02:43:19 +0000

To: "sales@nk.ca"

From: Andrew Chew

Reply-To: Andrew Chew

Subject: Partnership

Message-ID:

X-Mailer: PHPMailer 6.10.0 (https://github.com/PHPMailer/PHPMailer)

List-Unsubscribe: ,

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1=_VqlWfi4pA4B2iyVkoT4D9DzvlwjABOBgCpd8sqzIqs"

Content-Transfer-Encoding: 8bit

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, This is a private effort to introduce a partnership

intention to you. I am doing this on behalf of a group of career public servants

from Asia.



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[195.35.39.118 listed in will-spam-for-food.eu.org]

[195.35.39.118 listed in will-spam-for-food.eu.org]

[195.35.39.118 listed in will-spam-for-food.eu.org]

[195.35.39.118 listed in will-spam-for-food.eu.org]

[195.35.39.118 listed in will-spam-for-food.eu.org]

[195.35.39.118 listed in will-spam-for-food.eu.org]

[195.35.39.118 listed in will-spam-for-food.eu.org]

[195.35.39.118 listed in will-spam-for-food.eu.org]

[31.220.96.106 listed in will-spam-for-food.eu.org]

[31.220.96.106 listed in will-spam-for-food.eu.org]

[31.220.96.106 listed in will-spam-for-food.eu.org]

[31.220.96.106 listed in will-spam-for-food.eu.org]

[31.220.96.106 listed in will-spam-for-food.eu.org]

[31.220.96.106 listed in will-spam-for-food.eu.org]

[31.220.96.106 listed in will-spam-for-food.eu.org]

[31.220.96.106 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[31.220.96.106 listed in dnsbl.ahbl.org]

[31.220.96.106 listed in dnsbl.ahbl.org]

[31.220.96.106 listed in dnsbl.ahbl.org]

[31.220.96.106 listed in dnsbl.ahbl.org]

[195.35.39.118 listed in dnsbl.ahbl.org]

[195.35.39.118 listed in dnsbl.ahbl.org]

[195.35.39.118 listed in dnsbl.ahbl.org]

[195.35.39.118 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[31.220.96.106 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[31.220.96.106 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[31.220.96.106 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[31.220.96.106 listed in dnsbl.ahbl.org]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: c-dash.online (online)]

0.0 PDS_PRO_TLD .pro TLD

[URI: rusmigration.pro (pro)]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[31.220.96.106 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Partnership

National Bank of Canada Phish from Amazon.com Part 3




20px 0;">
01.qAG7wODmW_6BD-ujOwkd7UCVnjIa3o7QAeo5eNwu3ahdfu39AJ6UF8FnzZu0caMmDf14q1_qHk=

oeECX56WTElytzQbRvwIdKTDVabItLJHGatQPG8Bv-No5LqsRFrm5yWma0sq_eXBjh5dHvz2n0Vyd=

AOQ30NrUMlxHPDceDueQbVzWIuFLJ3l2weriY0VdfpunByIAqDILsZmzAP_6SAXH9I0_aiibw1HTi=

pdYmHe7D6_bhrrn-KKz6pe9tC7MnBsIKT2NQiZafUAVfUwKZf_wR-ojnMeeSotueu0fEITENkgyEH=

jpXtvdbEK36f3BC1zc4jkrTbqNY7SRlQrTPJNn6ob14KNt_qBFhFQokvBRBSg7dVzv2X9sNcyVctb=

HpdaBSY6TyH5kkLCws-MgqZcgZAzy5MlJjOiSgDE2oPeNl2lGfYPfPmr0oiaZIFoSiyMIpxJOZp_e=

tXL5lO57oYKbEhUGz0r9_kUY19co_7sP_18mI8ynWHJUdLqvoJsLyxAowD8yL3rNg1w7agus" wid=

th=3D"1" height=3D"1" />


order-radius:0">

o;max-width:600px;padding:0;">
g=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"width:100%"><=

tr>

op;background-color:transparent; border-radius:0;">








0">



Notification










cellpadding=3D"0" style=3D"background-color:#ffffff;">














=3D"0" cellpadding=3D"0" style=3D"width:100%;max-width:600px;margin:0 auto;">
























;">




IyGMoJvU-vBl24maM8QUWbGUjoe6MBorhy8fq7F1ogf_Ty2kCd9LWG613XI3XT4cHBPdltErUGR9F=

olkPE0MdIOdkZSq8wQmIkRh1OPcQ8rey5YJpNjY-5Kr93aIOSIn_htEqJZRZVlGkhEgHm0HTKDALw=

lHFnqPgfyWtOLm2AOaIke_w_h5Kx5vk1JTX6g1p9-4er3obXb-faRPbkfxqsymMcYnwBAtgllEAyG=

Qi0L3XpLt_Y4Yw621_pwLKP06ME6vIB2GJV7dofEWKIrFVKQJMIH3KG0w5XfbNcQbgZbJgwCMbaHE=

SzVCXptcfTVXo1tfLXZNJ9vlfkEzadbOunithRyd1uHKMAqByIvn84eNmIfRI-S658mOXq8H_vll6=

7hQGkc1zPazegjfhDd04B3XXkf0Z1Kr7uYX0_u07-Y7bvAvgWKI2rtBtX6R31CmsBpN9nI4RCPRd5=

EEbvZocT0eiMlqJY8gbOFjawctcfVb9Ug" target=3D"_blank" style=3D"text-decoration=

:none;border:0;">


src=3D"https://link.mail.aigeonemails.com/image?trk=3Dt01.h=

qFntQXXStRVc6bsK4I2-MCGGN0pKaCostXRPbf5jLqF52v7TIRzl1iEZ_R3PmUuGL93ExRSFOmfq5=

g3Fr2NTLzYcpgJ8JktnCA-gd2kENuhNYUKNSualno5jh6gg3fwuK0CWtqDKWLBGoAwdAU-pg4iad_=

tl0EabmJKePZFBWxCa9qBYZukqsHLKZqVHOyGfuTekQKP6xXxCt97A5e-KopBKSyEjoAKoFi2GNjx=

QSn5ZDpwIzUhOo2rLOc50OM0YfOccWtJ3KVi4Ae9MUIbTBBCnotjw9LSNmlRmDX-x3uPBihuXTuc8=

7d5qchmUkql3f7KQDa78qm0MAzFI-uRailOyk_8mgVnadV02noGXwkHTPMpRTue-CQkd2K7xpk2kL=

e_W0HwLFEHou1Alg3VH8IolVALomPRCtAEl3abpKC2n5wo5720wUSHH3_xQMRR018hXZTBHg4TuwH=

ipPn5JOcSmq5ohnIFQXoSZ424V1cNF2IKH14rqB9Sz-KhW-OXPz-wdQFxchf6BtNSGc8"

alt=3D"Account Notification"

width=3D"600"

border=3D"0"

style=3D"display:block;width:100%;max-width:600px;height:au=

to;border:0;outline:none;text-decoration:none;"

>






,Helvetica,sans-serif;font-size:12px;line-height:18px;color:#8a8a8a;">



This notification was sent regarding recent activity associated=

with your account.