Content analysis details: (27.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.127.18.30 listed in dnsbl.ahbl.org]

[185.127.18.30 listed in dnsbl.ahbl.org]

[185.127.18.30 listed in dnsbl.ahbl.org]

[185.127.18.30 listed in dnsbl.ahbl.org]

[52.103.133.5 listed in dnsbl.ahbl.org]

[52.103.133.5 listed in dnsbl.ahbl.org]

[52.103.133.5 listed in dnsbl.ahbl.org]

[52.103.133.5 listed in dnsbl.ahbl.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.127.18.30 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.127.18.30 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.127.18.30 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.127.18.30 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.127.18.30 listed in will-spam-for-food.eu.org]

[185.127.18.30 listed in will-spam-for-food.eu.org]

[185.127.18.30 listed in will-spam-for-food.eu.org]

[185.127.18.30 listed in will-spam-for-food.eu.org]

[185.127.18.30 listed in will-spam-for-food.eu.org]

[185.127.18.30 listed in will-spam-for-food.eu.org]

[185.127.18.30 listed in will-spam-for-food.eu.org]

[185.127.18.30 listed in will-spam-for-food.eu.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:cafe:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:11a:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[52.103.133.5 listed in will-spam-for-food.eu.org]

[52.103.133.5 listed in will-spam-for-food.eu.org]

[52.103.133.5 listed in will-spam-for-food.eu.org]

[52.103.133.5 listed in will-spam-for-food.eu.org]

[52.103.133.5 listed in will-spam-for-food.eu.org]

[52.103.133.5 listed in will-spam-for-food.eu.org]

[52.103.133.5 listed in will-spam-for-food.eu.org]

[52.103.133.5 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.133.5 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.133.5 listed in wl.mailspike.net]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 HK_RANDOM_FROM From username looks random

2.3 MANGLED_ACCNT BODY: mangled account(s)

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_BN BODY: Odd Letter Triples with BN

2.3 MANGLED_FULL BODY: mangled full

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

2.0 MIXED_HREF_CASE Has href in mixed case

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Final Step to Secure Your Safety Kit

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 20 Feb 2026 07:55:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vtRtX-000000005QR-1gde

for dave@doctor.nl2k.ab.ca;

Fri, 20 Feb 2026 07:54:15 -0700

Resent-From: The Doctor

Resent-Date: Fri, 20 Feb 2026 07:54:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westcentralusazrlh10230005.outbound.protection.outlook.com ([52.103.133.5]:53690 helo=CY7PR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

id 1vtRRA-00000000Nyd-2fc6

for doctor@doctor.nl2k.ab.ca;

Fri, 20 Feb 2026 07:25:04 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=S0BbUayzFoU5Pvol0LGEsyVKEwg0orF5+qiAucavx9Op9E/5irTMobktNiTe0m5ZntIDIVlZKywVSJerGHO0Gppiinwjm4b3GSm2f/i28jxHiDGzfeRspTNhwKqUmwXxAbYPaAn/Itmq57kJexMMJK9gQjD54h/99Bc5mH+A5RgedgXpM6xq6aPWIbKKhF6vO9JcaEMTYbdVrtOBVCk9PYnMPB5PiUnpLdQMeti4etXTYkEsebiNXKcmFS+3L1F/mBeP7MLWd/KLMDsMi1P4TTzXaar77tIqM80fv3gdW0fWF/pG8X+AeuKYEkz5PObTf1JaZXCT4O8c16/XVAL5rw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=jHikn4vkAK4WIAcBR4xS+b8BnThOMQXM5NuBYk1Lt5M=;

b=fIAw0lbbZ+LvUdNzZkv22SiJQP5+6WnDHiUHI7CY5fY+89FB9uRZZ2oOVS0qPGDcuq45rOvfsXB4q+8hr50htWSRPYzVw+LtuXkIsxm7PKHUD0J5J94QF+2cCBiKBGcEiNe1VNWmrYVZefAKQNip1Rm+wXo9H9jcsGZGkA6+g+Rd+2goChyrCnbo1uwFltTpKXI7wtvBlT7CNZt6KtUAUqE1aUKKksVzEiDpnxVHajkZp4J5QvZ7zq/1RxqRMYCPMmYMVKDu5YOl7625FigB/JWopOIoBLqbQGzmf+VUpeeXgmvPTBVQ1KiyRrApbo5pC4KjB+M8jTRtSwTzhGmidg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

185.127.18.30) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.helo=eastmissouriaction76196.onmicrosoft.com; dmarc=none action=none

header.from=lifo2.drapolkat.digital; dkim=none (message not signed); arc=none

(0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=eastmissouriaction76196.onmicrosoft.com;

s=selector1-eastmissouriaction76196-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=jHikn4vkAK4WIAcBR4xS+b8BnThOMQXM5NuBYk1Lt5M=;

b=OZ80AYfmazO9Md8fI2tDErkDJXpbt2z2ETS+8qQBEBmIfmNmeOCYCaGH8zSvM1DM8uqofB43O4XaDV4W7wGd4eQHI0sXgzij2abR6WN7R8gg8vaMIfrWj7md0jHzpwLt5mjgQubrBHMr1Fvyc/XbJ2ym1FpScSiNyK0vO26fSA+xaZSElfpr6RbUwWoJLoO2yfDz5/PxhodTdj5rCB1PehE+Teeu4nvmb6B8YzfiSpg5dB/Z/jP3jPTJ6meMJlk4Lbqxt1Hi8nPSRgmQJ9qkgw37yj3UaTElxWuhXDMkbPsvTSKxOEqK+L3RRSAIam8t0xD9gKU+eM31EUbclG2wug==

Received: from CH0PR03CA0351.namprd03.prod.outlook.com (2603:10b6:610:11a::13)

by IA2PR20MB7521.namprd20.prod.outlook.com (2603:10b6:208:4a8::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.17; Fri, 20 Feb

2026 14:24:02 +0000

Received: from CH1PEPF0000AD7A.namprd04.prod.outlook.com

(2603:10b6:610:11a:cafe::23) by CH0PR03CA0351.outlook.office365.com

(2603:10b6:610:11a::13) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.16 via Frontend

Transport; Fri, 20 Feb 2026 14:23:57 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 185.127.18.30)

smtp.helo=eastmissouriaction76196.onmicrosoft.com; dkim=none (message not

signed) header.d=none;dmarc=none action=none

header.from=lifo2.drapolkat.digital;

Received-SPF: Fail (protection.outlook.com: domain of

eastmissouriaction76196.onmicrosoft.com does not designate 185.127.18.30 as

permitted sender) receiver=protection.outlook.com; client-ip=185.127.18.30;

helo=eastmissouriaction76196.onmicrosoft.com;

Received: from eastmissouriaction76196.onmicrosoft.com (185.127.18.30) by

CH1PEPF0000AD7A.mail.protection.outlook.com (10.167.244.59) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.9632.12 via Frontend Transport; Fri, 20 Feb 2026 14:24:00 +0000

Date: Fri, 20 Feb 2026 15:21:30 +0100

To: doctor@doctor.nl2k.ab.ca

Subject: Final Step to Secure Your Safety Kit

Precedence: bulk

Content-Type: multipart/alternative;

boundary="_f4e92a40-2ee3-4027-90c2-cdbe98cefbf8_"

From: Reward Processing

Message-ID:



X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CH1PEPF0000AD7A:EE_|IA2PR20MB7521:EE_

MIME-Version: 1.0

X-MS-Office365-Filtering-Correlation-Id: 3e2fcf0b-f1b9-4bb7-d12b-08de708bb159

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam:

BCL:0;ARA:13230040|3109299003|7049299003|7149299003|376014|69100299015|34020700016|82310400026|61400799027|35950700016|8096899003|54012099003|15920700032;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?TXFpZzJHdElCdjAyOXhjUHBMODhxdVVtSEM0WTZweEZXOUdEYkluMzRkdXhv?=

=?utf-8?B?Ny9KNUhNcXVkM3VPa3ZwK3E2Wmc1UkhrcWlTOHZPODlaYmhVWU5QU2NhcXcr?=

=?utf-8?B?SzNYZlFWWVAxcE5IVlFaSVl0ZUxEdnJwSE00MXB2Q3o5L2FKaXhIZzFTQVJn?=

=?utf-8?B?L2lOcXZtVXI5VUgxMjgzQzZhaXNQbzhIamdrd1ZkMEtqVDc0dnFDaHpheFZy?=

=?utf-8?B?czh6OENqUTVydzMrYnpvUUhwUWVSSllmNU42dUpwcCtxSjJGakNGNGo1OXVY?=

=?utf-8?B?b2MvQVJEZzBGMDRIZ0JNVEw2cVlIUGkzbXpkVWREV1h0L3dJUGhZVmc4OVpl?=

=?utf-8?B?Z0pEV09vaDB3NURtQTJUYVB0YUxBcDhEZXBpWXQrL2o3eVpWOFBpOFN1ZHY3?=

=?utf-8?B?dnBZZ1ZqQklyOFg2NlJGSjVQWWhQaWp5NS9PUEc4U0Zac2dqYThSc3RNN0hL?=

=?utf-8?B?NFpmNjF1S3VQQldFVnRqV3Nrb0RSSFBNUVZzS3U3TjNqSnZ2YlZUNU1zbk91?=

=?utf-8?B?SjQ0Ym9TMGZHM0FSc25GcnV4VVZNRU45dGVpc0dTTGdLRE9udTNQWkMvN2Fl?=

=?utf-8?B?Nmd0M3lzSHpFelUzT2wwNVByNUZWSXB4T2FWWUtCREF5clRHN2lpU2tOaXhD?=

=?utf-8?B?OWk0OGpqRVVVOWFIWXFLM25Rd3FiaVF3MkdyOGI0ZlFhSWk3QSs1T0V2WTlX?=

=?utf-8?B?bUxKSDBXWHI2bFFrNktrSHJ2VDhwQWVTY092TTh3RVdTaUhJSm96a1ZxNXo2?=

=?utf-8?B?T1RTa1hnTTRLTFcyTzdDRFQyeDF1b2lyS3ltOVJQZGI5Mm9MdVB1TWczNisr?=

=?utf-8?B?blhLbTYyWnlOY0dyVTVnWld1ejZEK0x5VUVtaXhqYWhUbGVBc1JreDNNMlZa?=

=?utf-8?B?WldPdXpENUkwY0JKQnBnWmk5Um9ZQ3MraDF3dGp5TUptZFZIWUk3QXhBYVN5?=

=?utf-8?B?RkwwdXJIUXR4MTBYM2M5ZU12MVBEK0xTREdpK3lreEtHOUx0ZHEwY2hCTEhx?=

=?utf-8?B?c3NTK3l1ajhDM0lGdEtTcGxBV3pWSy9pVEx5TXc4LzhRQkFYN2tBM1ltMnhV?=

=?utf-8?B?akVwMlMzQ2VvenNKcmFrUklCeTlIa0lRK0phVDRtSUhqbTBQaU5tWkpKMU8v?=

=?utf-8?B?aVl5SHlqKzM2cmlZUm9lQk5wVEVVSnpncmRpQXJReklualkraFdFNFVSd0NY?=

=?utf-8?B?UzQweFl0SEhlT1RVdzluemx0MXcwa3VZWGdRWGJmeFdSK0xtQTlLbENWaUg5?=

=?utf-8?B?amdCYk5QMTdYakI5cTMvblZmR3FYY1FrVnRCUDViTmRkU0FLY1duUmlkR01G?=

=?utf-8?B?VHdjNlpmR1h3Q1ZYZXVyN2hrTys1cWJEMy9adzBaUzFKdEhjM3VxNFhJNzFX?=

=?utf-8?B?TWdkaDlIK0tLUWJCb2FVQW5NdzF4QlV4QVFDY3U3WDhpZmdJQ00zR1RJNURN?=

=?utf-8?B?bGpiWG8zSWcrTFRoYklobjFJR0d5R2pzRzlvL21RSmJlS3dmUjI3UnRiWUJL?=

=?utf-8?B?SHM5Qys3M2Z2Zlk3RjhVTGh2dTdzV1Qva0F2WGxncDRjbjJPcEJTQUgrZ2RQ?=

=?utf-8?B?eWRkN0Q4czVCVjhsR2I5RVRBVklhOWxMK01tNEE4aXdqSDFKYTZhTE5QSnFD?=

=?utf-8?B?N0UvQ2c1c2lyL0M1OFRNRW1wZlZRZDJnempPRGlOS0xCT09aZHoxWXl2UHdj?=

=?utf-8?B?OWRQYjVINDJYWHVybEp4WEYvM0hqa1JwTER1TFEwZVVJR0FIalNJbk54Lzlw?=

=?utf-8?B?dkNFZDFMMTBWcTcydjdDWkhBR1FPWkg2NDFvamg2dFpFMlo0UGNVTWlKSVlW?=

=?utf-8?B?Zy9SbWc3ZkJFZ0lZV2tRbytvWHJPV2syTStMQkJLUnlrQWYyVHZrMTc1QTZS?=

=?utf-8?B?MHh5QWFHOTh5MjB5TEpIQnlpZ2g4YVNWNEtReG1mSmtmOXUweFRKUm5VOFpI?=

=?utf-8?B?OTM3THlsb29hSkF3SVVwbk5tZ2xBNmRwU3lJN052UndteVBRZFFVUG5GeTNx?=

=?utf-8?B?SlJzUHIrOWhCQTJzV0VUdjZEeFJuaEY2Wmx0VWJpL0JtTjBSbFROL1l1em1Q?=

=?utf-8?B?QmFxU2VoWWdpZVZLekJpOGtNNXRUaXQ2bzI3Zz09?=

X-Forefront-Antispam-Report:

CIP:185.127.18.30;CTRY:GB;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:eastmissouriaction76196.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(3109299003)(7049299003)(7149299003)(376014)(69100299015)(34020700016)(82310400026)(61400799027)(35950700016)(8096899003)(54012099003)(15920700032);DIR:OUT;SFP:1023;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

uFU+uyUMmP2ghxsWEhrgrBNDAsQ5RjFbeufoe253/rI0FnQk6YhK7F2YchWuBFM+ofnGHaj2HjLz4fwPPQ8pRvb5CjI2xGOmhx0BgOJMbDuYWFAMJ5tuyNIRZyATpC4FP9z2GSvJwStN8uO3pBEOaSk/NKx2ZtUPvQt3fLVgrNahsVsKSsDlHunm7P3Hfc2J+4AJFa3G+24+LeLYJPvQsKvUKlP/8YlWJXPf8WnsUQp1a4hx75NvVxNeAIExTOMi8r51UxAFTHHgUAtKaDp5YA7ibWgoEA43Xzd7WjO31jv08s9+CrDyQ5GZxpqhT179w2fEKDVZ6gmnBDhw8ReZZjNEOJvx/4FBXQHW7ffFo+0gEmXyqz+MeBrvK6uyp9V3IVpf/vUrAX++BvEqmTHXjKZjtt2OPqvatZdvQiAYT/H/nszudzVHP4r4YcpI0fI2

X-OriginatorOrg: lifo2.drapolkat.digital

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Feb 2026 14:24:00.8513

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 3e2fcf0b-f1b9-4bb7-d12b-08de708bb159

X-MS-Exchange-CrossTenant-Id: 0d5d1a79-7184-42ce-ad3c-b0084af00851

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=0d5d1a79-7184-42ce-ad3c-b0084af00851;Ip=[185.127.18.30];Helo=[eastmissouriaction76196.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

CH1PEPF0000AD7A.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA2PR20MB7521

X-Spam_score: 27.9

X-Spam_score_int: 279

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: These updates will go into effect on April 20, 2026 =E2=80=87=CD=8F

=E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87= =CD=8F =E2=80=87=CD=8F

=E2=80=87=CD=8F =E2=80=87=CD=8F =E2=80=87=CD=8F = [...]

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 19 Feb 2026 19:33:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vtGJL-00000000Nor-3RE2

for dave@doctor.nl2k.ab.ca;

Thu, 19 Feb 2026 19:32:07 -0700

Resent-From: The Doctor

Resent-Date: Thu, 19 Feb 2026 19:32:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.76.169.13] (port=33290 helo=mail.npsc.go.ke)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vtFlZ-00000000F5T-03cz

for root@nk.ca;

Thu, 19 Feb 2026 18:57:23 -0700

Received: from localhost (localhost [127.0.0.1])

by mail.npsc.go.ke (Postfix) with ESMTP id 611EDFE981B;

Fri, 20 Feb 2026 04:37:05 +0300 (EAT)

Received: from mail.npsc.go.ke ([127.0.0.1])

by localhost (mail.npsc.go.ke [127.0.0.1]) (amavis, port 10032) with ESMTP

id Wngpp6kaosdp; Fri, 20 Feb 2026 04:37:05 +0300 (EAT)

Received: from localhost (localhost [127.0.0.1])

by mail.npsc.go.ke (Postfix) with ESMTP id F20A7FE981F;

Fri, 20 Feb 2026 04:37:01 +0300 (EAT)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.npsc.go.ke F20A7FE981F

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=npsc.go.ke;

s=13BBFD90-AC39-11ED-971F-DDDAE4525639; t=1771551422;

bh=AMxdccGG9HWm2rk8Y4HFhADTZi+BGrhXyET7EcoEV/I=;

h=Date:From:Message-ID:Subject:MIME-Version;

b=MF8/c0WbGNTUakAtkQnHh7jqHyIKkzbrgIu7gbbwT1sPXMbQfpEgV5tqufOIwk+qM

sb+p+oTA8PQkuK03+LeQMnLyq2MWN5VZYOFfDsQrKkSyUh1STZejTtaZbkYkNrr2m6

Ds15qLmV4Su0+ZHdRCibDPO9Sqn9ELnwwnX5tUgwzLMjL73O9wJGvOaeuuUywa3Sc5

EqN7vci0TVhA0vj7LqHdh3HnJYJMWRCgCOSeNskBOo4IZAJAABvZKLxbmPgvmfRrUQ

mJ7C3m1+CRL1aRTGByEDuKl1+9a1j8IivNTcrnW70/IbRKQkJ+mUGiaJiDqshE/0mI

PoUAFWIrjN+uA==

X-Virus-Scanned: amavis at npsc.go.ke

Received: from mail.npsc.go.ke ([127.0.0.1])

by localhost (mail.npsc.go.ke [127.0.0.1]) (amavis, port 10026) with ESMTP

id I7oVRwsd_JeQ; Fri, 20 Feb 2026 04:37:01 +0300 (EAT)

Received: from mail.npsc.go.ke (mail.npsc.go.ke [10.179.3.1])

by mail.npsc.go.ke (Postfix) with ESMTP id 7B031FE9817;

Fri, 20 Feb 2026 04:36:53 +0300 (EAT)

Date: Fri, 20 Feb 2026 04:36:53 +0300 (EAT)

From: Nathalie Hartmann

Reply-To: Nathalie Hartmann

Message-ID: <55005601.69760.1771551413365.JavaMail.zimbra@npsc.go.ke>

Subject: Introduction and potential partnership

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_25e150f9-4b7c-463b-9b35-b20897de1c64"

X-Originating-IP: [129.222.206.173]

X-Mailer: Zimbra 8.8.15_GA_4717 (ZimbraWebClient - GC145 (Win)/8.8.15_GA_4717)

Thread-Index: cQqibkDYxwBCWmMoH22tdVsb3d7i/Q==

Thread-Topic: Introduction and potential partnership

X-Spam_score: 15.2

X-Spam_score_int: 152

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I hope you’re well. My name is Nathalie Hartmann,

and I’m reaching out to introduce myself. I work closely with partners

in various field, and I believe there may be a meaningful opportunity for

collaboration. I’d welcome the chance to learn more about your work and

explore whether our goa [...]



Content analysis details: (15.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.76.169.13 listed in dnsbl.ahbl.org]

[41.76.169.13 listed in dnsbl.ahbl.org]

[41.76.169.13 listed in dnsbl.ahbl.org]

[41.76.169.13 listed in dnsbl.ahbl.org]

[129.222.206.173 listed in dnsbl.ahbl.org]

[129.222.206.173 listed in dnsbl.ahbl.org]

[129.222.206.173 listed in dnsbl.ahbl.org]

[129.222.206.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.76.169.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.76.169.13 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.76.169.13 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.76.169.13 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[129.222.206.173 listed in will-spam-for-food.eu.org]

[129.222.206.173 listed in will-spam-for-food.eu.org]

[129.222.206.173 listed in will-spam-for-food.eu.org]

[129.222.206.173 listed in will-spam-for-food.eu.org]

[129.222.206.173 listed in will-spam-for-food.eu.org]

[129.222.206.173 listed in will-spam-for-food.eu.org]

[129.222.206.173 listed in will-spam-for-food.eu.org]

[129.222.206.173 listed in will-spam-for-food.eu.org]

[41.76.169.13 listed in will-spam-for-food.eu.org]

[41.76.169.13 listed in will-spam-for-food.eu.org]

[41.76.169.13 listed in will-spam-for-food.eu.org]

[41.76.169.13 listed in will-spam-for-food.eu.org]

[41.76.169.13 listed in will-spam-for-food.eu.org]

[41.76.169.13 listed in will-spam-for-food.eu.org]

[41.76.169.13 listed in will-spam-for-food.eu.org]

[41.76.169.13 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[129.222.206.173 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[41.76.169.13 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[xp.nathalie.hartmann1(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Introduction and potential partnership



--=_25e150f9-4b7c-463b-9b35-b20897de1c64

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hello,=20



I hope you=E2=80=99re well. My name is Nathalie Hartmann, and I=E2=80=99m r=

eaching out to introduce myself.=20



I work closely with partners in various field, and I believe there may be a=

meaningful opportunity for collaboration. I=E2=80=99d welcome the chance t=

o learn more about your work and explore whether our goals align.=20



If this is of interest, I=E2=80=99d be happy to connect at a time that suit=

s you.=20



Kind regards,=20



Nathalie Hartmann=20



--=_25e150f9-4b7c-463b-9b35-b20897de1c64

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

ize: 12pt; color: #000000">

000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-st=

yle: normal; font-variant-ligatures: normal; font-variant-caps: normal; fon=

t-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-=

indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-te=

xt-stroke-width: 0px; white-space: normal; background-color: #ffffff; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" data-mce-style=3D"color: #000000; font-family: arial, =

helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-li=

gatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacin=

g: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform:=

none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-=

space: normal; background-color: #ffffff; text-decoration-thickness: initia=

l; text-decoration-style: initial; text-decoration-color: initial;">

He=

llo,

I hope you=E2=80=99re well. My name is Nathal=

ie Hartmann, and I=E2=80=99m reaching out to introduce myself.

r>

I work closely with partners in various field, and I believe t=

here may be a meaningful opportunity for collaboration. I=E2=80=99d welcome=

the chance to learn more about your work and explore whether our goals ali=

gn.

If this is of interest, I=E2=80=99d be happy t=

o connect at a time that suits you.

Kind regards,<=

/div>

Nathalie Hartmann

div>

--=_25e150f9-4b7c-463b-9b35-b20897de1c64--

lla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 19 Feb 2026 14:25:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vtBVS-00000000JMV-1V9T

for dave@doctor.nl2k.ab.ca;

Thu, 19 Feb 2026 14:24:18 -0700

Resent-From: The Doctor

Resent-Date: Thu, 19 Feb 2026 14:24:18 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f71.google.com ([209.85.222.71]:61584)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vtApc-000000006wb-1sEr

for sales@nk.ca;

Thu, 19 Feb 2026 13:41:11 -0700

Received: by mail-ua1-f71.google.com with SMTP id a1e0cc1a2514c-94ad7cd3a35so14680797241.2

for ; Thu, 19 Feb 2026 12:40:16 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=firebaseapp.com; s=20230601; t=1771533610; x=1772138410; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=Q9EBAerNvbgZQ10LDzi7AlRTN3kP3kqLQETj2MhJ75c=;

b=JXrwyC7P620TPlfdZ0IlJxL24hWxSjves6hBnYhokC4m11QvgdR7iODQGa86oSPocq

MIhCD5EEcwOxoRFDIsedUpTuRT8AfHpK57Xz7DYXWqK0RsTkpMlfH/oGs8vz4porDc7v

xHyS99Qw/7vpM70J+xmi03twoqBjQHplPKVx8UaDYl1tGziY4WNR4sA2vRXdCyngue3F

rRAG31nVBKrjEm+1Xom4IoHTngoSuoupqx7J2ATs9R8N8Kae+8nB9M8VaAQk7X8Za8Vc

HtBhB17OZKDJxP7MSAbLtuvkOUoz6CokaTSvVBGKWsm0Fw9rJOIq1SmJMYjOnGgxx2Ug

NwAw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771533610; x=1772138410;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Q9EBAerNvbgZQ10LDzi7AlRTN3kP3kqLQETj2MhJ75c=;

b=X6GBbhizvdSqUB5gRjIPSjlTK45VY4kvSAQAIOyXkJEXSs1B6GB8Uk8UVk1LjY2/eT

vTUurkKbyHHplLh+mOiyJFH5YHGlxLvQpRlmtwK2VtMh5hEQIxsx4VoQvVBTxKBv/HH5

bcq0ckUGSWFwGm1dzaBKvL/Ur8Xx4B5e+W31epIHmktK613W+hfArBOmmCp++ssXqmnw

kTd+e9IuOogD6zugmCQ7jEMayo+eZpRPaldm+qu83TMsMHMDq2y6MbPknTSUexZKuAlm

23JG1Hn6Ups/3A8oePe2QrrGSIwr2bokMn9gesWFMEk+taEkEuqNNv/S5qLs+EU3dizH

n7RQ==

X-Gm-Message-State: AOJu0YxPT2c/FrZtm9fEYMiLlgkxi+TMZI5n0VJXBVRH1EfM8oqLpJKu

PXivEHh4uBNHRdxe5AObrVKfk2f608TWqaUe0BxmUICBOWOIOo8hmbbFOZJHtTLMdObImBUkKKA

2qAGbf0NVsA==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:2ac7:b0:5f9:39e8:5346 with SMTP id

ada2fe7eead31-5fe7fb393bfmr3374997137.9.1771533610694; Thu, 19 Feb 2026

12:40:10 -0800 (PST)

Message-ID: <00000000000092b846064b334f89@google.com>

Date: Thu, 19 Feb 2026 20:40:10 +0000

Subject: Verify your billing details

From: SpotifyAB

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000092b83d064b334f86"

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your payment was unsuccessful. We were unable to process your

Premium subscription payment . Your card may have expired or the transaction

may have been declined by the bank. Important: If you do not update your

payment information, your account will be suspended and will switch to the

free version within 24 hours.



Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.71 listed in dnsbl.ahbl.org]

[209.85.222.71 listed in dnsbl.ahbl.org]

[209.85.222.71 listed in dnsbl.ahbl.org]

[209.85.222.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.71 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

[209.85.222.71 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.71 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.71 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible

phishing

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} Verify your billing details

X-Mozi



--00000000000092b83d064b334f86

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



WW91ciBwYXltZW50IHdhcyB1bnN1Y2Nlc3NmdWwuDQoNCg0KV2Ugd2VyZSB1bmFibGUgdG8gcHJv

Y2VzcyB5b3VyIFByZW1pdW0gc3Vic2NyaXB0aW9uIHBheW1lbnQgLiBZb3VyIGNhcmQgbWF5ICAN

CmhhdmUgZXhwaXJlZCBvciB0aGUgdHJhbnNhY3Rpb24gbWF5IGhhdmUgYmVlbiBkZWNsaW5lZCBi

eSB0aGUgYmFuay4NCg0KSW1wb3J0YW50OiBJZiB5b3UgZG8gbm90IHVwZGF0ZSB5b3VyIHBheW1l

bnQgaW5mb3JtYXRpb24sIHlvdXIgYWNjb3VudCB3aWxsICANCmJlIHN1c3BlbmRlZCBhbmQgd2ls

bCBzd2l0Y2ggdG8gdGhlIGZyZWUgdmVyc2lvbiB3aXRoaW4gMjQgaG91cnMuDQoNClVQREFURSBZ

T1VSIEJJTExJTkcNCg0KVGhhbmsgeW91IGZvciB1c2luZyBTcG90aWZ5Lg0KDQoNClRoZSBTcG90

aWZ5IHRlYW0NCg0KwqkgMjAyNiBTcG90aWZ5IEFCDQoNCg0KVW5zdWJzY3JpYmUNCg0K

--00000000000092b83d064b334f86

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

r-top: 1px solid rgb(238, 238, 238); color: rgb(102, 102, 102); font-size: =

14px; font-family: Helvetica, Arial, sans-serif;">

: inherit;">
=3D"auto" style=3D"vertical-align: inherit;">
rtical-align: inherit;">The Spotify team

=3D"vertical-align: inherit;">
nherit;">
"auto" style=3D"vertical-align: inherit;">
cal-align: inherit;">=

© 2026 Spotify AB

 

-btn" href=3D"https://robot-pikos.firebaseapp.com/__/auth/action?mode=3Dres=

etPassword&oobCode=3D4vjaB7uZgV13og7FmAS7jkP-6fTgp5810THa304_7LEAAAGcd6=

Gtvw&apiKey=3DAIzaSyCzlOnc3z69ZrMOKC8eFQnXN2OG1SLVd4g&lang=3Den&=

;tenantId=3DTenant-Expert-1-z0bvb" rel=3D"noreferrer" style=3D"color: rgb(1=

18, 118, 118); display: inline-block; background-color: rgb(255, 255, 255);=

border: 1px solid rgb(208, 208, 208); border-radius: 16px; padding: 4px 12=

px; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", R=

oboto, Helvetica, Arial, sans-serif; text-decoration-line: none; line-heigh=

t: 1.4; transition: 0.1s; cursor: pointer; letter-spacing: 0.2px; box-shado=

w: none;" target=3D"_blank">
erit;">
uto" style=3D"vertical-align: inherit;">
l-align: inherit;">Unsubscribe

--00000000000092b83d064b334f86--