ChatGPT+ Phish from nxcli

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Oct 2026 17:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEbJB-00000000EfW-2lbP

for dave@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 17:44:25 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 Oct 2026 17:44:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-244481.us-midwest-1.nxcli.net ([209.87.159.154]:26498)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEXc0-000000009cW-29DZ

for sales@nk.ca;

Wed, 07 Oct 2026 13:47:11 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=default; d=fbadd13fe7.nxcli.io;

b=q2rxU/eDFTVExvf6beQFUPAm/fmLJ7lqogfMTxW9r6sGhZtZVal0+QoBabw1tRdYefCeIUWyKfKmE7SjeZgYEh1Xa6k6sLeyJuQjWo5KU6laIX+v88uxIOR3ASf0uz8SBfh4NAV/fv9pEAzlXiPQONtPxVcTYFw3FRWtnpNarFT10Wp8DDqDmblmqiEVqPVoVo5AFDixsz6O0AfqNNssq7YgZp7cRKBBeJvuvijMoX+Jtp3hAEBiJ4ZrQiF4jWtmYXfYJ38CAjoAYX4y8AlNdBj4PRgFe9OmelvaI7AOFYPS3npAwfinrhnR72mejivoUq3x/ZBDAlvykXloj4l3kg==;

h=Received:Date:Message-ID:To:Subject:X-PHP-Originating-Script:MIME-Version:Content-type:From:Reply-To;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=fbadd13fe7.nxcli.io; h=

date:message-id:to:subject:mime-version:content-type:from

:reply-to; s=default; bh=+x888N0OfiZyu6Uw3+EUJXVbB1MregcPeRyCPx/

Nh94=; b=Zc+He76xOHeQhI2qJfDVZGRTcWHJgT5KlCNngrYFAoFI6bm9IxAHMD7

rOpKbnV7+dvYWRSTYmA0f7we/aIHaCz3GufA1iBgG3vkhtUmYWm9kmrWcHsku1wZ

r2VTQjBqC5H0h3OpxHuJl1ZL9OdHtO/KiKM+4bbT3fV4gsH88vSNSbXafhjxYn3G

KjEy4WatGAP29WLTq0TRcLQ8K8R6QoPUhucBxA2Tdm6pfz/hzyiOlBiwPstu5YXS

NbGmQ98pkV8+gaxVM66ceBQ34KIgxapVwcEIVTZpd8eEKIbAFiFV1k7w66iLNL0Y

FXu2SHXi8ZHtFVyJu/gVtqzcMp5wRTg==

Received: (qmail 29917 invoked by uid 10284); 7 Oct 2026 19:45:41 +0000

Date: 7 Oct 2026 19:45:41 +0000

Message-ID: <20261007194541.29906.qmail@cloudhost-244481.us-midwest-1.nxcli.net>

To: sales@nk.ca

Subject: Your ChatGPT Plus subscription payment is now due

X-PHP-Originating-Script: 10284:aba.php

MIME-Version: 1.0

Content-type: text/html; charset=UTF-8

From: ChatGPT

Reply-To: webmaster@fbadd13fe7.nxcli.io















Update Payment Method










































































Hello,
We recently attempted to process the recurring payment for your ChatGPT Plus subscription, but unfortunately, the transaction was declined by your payment provider.
To ensure uninterrupted access to your subscription benefits, we kindly request that you update your payment information at your earliest convenience.




















Your ChatGPT Plus subscription includes:
• Extended limits on messaging, file uploads, and voice mode


• Enhanced image and video generation capabilities


• Extended access to deep research and reasoning models
















Update Payment Method


 
Need assistance? If you have any questions, our support team is available to help.
support@openai.com
Reference: #REF-2026-09-07






















This is a transactional message regarding your ChatGPT account.
© 2026 OpenAI. All rights reserved.




















This email was sent by OpenAI · You received this because you have an active account.








Chinese products spam from Google GMail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Oct 2026 17:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEbIB-00000000EUu-0D0E

for dave@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 17:43:23 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 Oct 2026 17:43:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f8.google.com ([74.125.227.136]:45825)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEVHn-00000000Nfc-3x7K

for doctor@netknow.ca;

Wed, 07 Oct 2026 11:18:15 -0600

Received: by mail-pj2-f8.google.com with SMTP id 98e67ed59e1d1-398b9f722abso1978678a91.0

for ; Wed, 07 Oct 2026 10:17:15 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1791393430; x=1791998230; darn=netknow.ca;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=GzM06NszioC3ldIQIV6RtqMyTYEtNoPktuVZ82zPWDT4NngtKrUTnwK90NWXCkMxR6

xrEJlyymtpek09VyC/haWrc988eSKUkS1ePJZyH+5drIqqnyTPdLkNkmRQ4SSFH2FGzZ

wR66hpgI28UXmcax+q+xHPTFY7Kl2253ugtA4=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791393430; x=1791998230;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=m+Pk9AmyrfxP+yn6AdvemzTcxhY2BhW103Mj2C0blo/MNHRDDUEPZk1wzPWNXg7Brr

8HVlso+1Dxty+5v8j+dIWZBtCGos1bmBGoaxU65GqzWw19NEjZTfgxFjoTWxGdxq+9WG

iwLi8+P8CIwkJDgqb35ojf+e/DLE3NPiNpBRSDj67GCH51ffEklPtjeEBs0/ZG9rx3LX

JB2ODurInvPFEE5WX9W+w1uxqfiw4vFJe44IuA4iSk9OxTXYT9lOG57w2vnxkAWHuJLR

CwXt+VkqzrR4YeN7zB5KLmjzzKQqbnEWMOjh6k3lIMrvnMtbrPHjGt5FoFs7wmkWoSkA

S5/Q==

X-Gm-Message-State: AFq9FYIaDV0sC2+HzqFMtDC1mftdiVsDg+mNieQ7VwU4av//E0wMrA/7

mbYG0e2CHHGOnGlaC9I/lZyDdtMEHfJ/QNgvvlVwI+gnY/MjSbdBmXMTgENfbhQJLq3zAomcIls

C31A7fs4=

X-Gm-Gg: AYBFou2On0o4CxOGpNcRTJmBDuGM3MyDkX1qPWbQJD5RYnYLpae1oSQxpU3XYZ1uCoi

KhM7LMQp9BCKlPEqZHsqmhhzfw7JqBwrhnOEVZsVAP5jE9FWLuN91o8F5XMOeRfVw08c1bB/QIS

jxthVFYWIIZtoUzU7MDuX2Lh8RntZqKjy2MMORG3auQAxz8Ri/qMDWtvpyNK2FGhylVAnM6K9w1

eC+sfM3+NmPTBU1DbLyF4sDXGpqClwjGOGgKUzrGtY5aHRWXLSyncJNLgduHy2eTxspLKF2Re5a

nEpU0uKUEJluUmXhdv5OnnejzyuL0wnaYkpiKj4orJdhNmIH91go+5+fo8PZZ9EcfUTyq6iKGrY

gkfvstdc673scLaOqNLMecGDMJJWwZl4zjJW8kKvtTQqg6Os61hVEzxGvWl725ZwP7XBzXgPwdD

jrcAJkahZI886d3XTimBNHBX9/G3oFbppD1AGr8ANo0e822U9s10WlQzE5C9ve5dKUrF2FaHkOE

LDV

X-Received: by 2002:a17:90b:2683:b0:39e:59a0:46b5 with SMTP id 98e67ed59e1d1-3a8a19af0famr2289813a91.24.1791393429514;

Wed, 07 Oct 2026 10:17:09 -0700 (PDT)

Received: from poe ([203.88.114.137])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a9ff7aaf8asm392040a91.6.2026.10.07.10.17.04

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Wed, 07 Oct 2026 10:17:06 -0700 (PDT)

From: "bella@sanmeng-mould.com"

X-Google-Original-From: "bella@sanmeng-mould.com"

Reply-To:

Message-ID: <0614E68423AA97103B25915BE04BF6C9@poe>

To:

Subject: Re: plastic injection and die casting molds and moldings

Date: Thu, 8 Oct 2026 01:16:47 +0800

MIME-Version: 1.0

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: bella@sanmeng-mould.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear , We provide:



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

[74.125.227.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

[74.125.227.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[203.88.114.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[203.88.114.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[203.88.114.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[203.88.114.137 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.136 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[203.88.114.137 listed in sbl-xbl.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sanmeng-mould.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.136 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.136 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FAKE_REPLY_C No description available.

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: www.sanmeng-mould.com/96.44.182.133]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: www.sanmeng-mould.com/96.44.182.133]

Subject: {SPAM?} Re: plastic injection and die casting molds and moldings



Dear ,



We provide:



plastic injection and die casting molds and moldings.



 thermoplastic injection molding, overmolding, 2K molding, aluminum & zinc die casting etc.



Competitive prices for exported mold and mass production of production mold.



 Excellent services involving mould design to mould fabrication, from parts to part assembly.



Professional engineering analysis.



 Excellent quality maintained through top-ranking testing machines.



Careful packaging.



 ISO certificate





We value every customer and will respond to any question quickly.



For details information pls check our website: www.sanmeng-mould.com



Looking forward to your soon reply.



Welcome to visit our factory anytime!



Thank you!



--------------------------------------------------------------------------------

Best regards,



Bella

SanMeng Mould Co.,Ltd



Wechat/ WhatsApp: +86-13242975530

Email: bella@sanmeng-mould.com

Website: www.sanmeng-mould.com

Add: NO.45, Jinghai East Rd, Shatou Community, Changan town, Dongguan City, Guangdong Province, 523863, China

Business Brokerage spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Oct 2026 07:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xES6c-00000000JR1-0uyy

for dave@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 07:54:50 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 Oct 2026 07:54:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f180.google.com ([209.85.222.180]:50185)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xERgL-00000000827-3wCr

for sales@nk.ca;

Wed, 07 Oct 2026 07:27:18 -0600

Received: by mail-qk1-f180.google.com with SMTP id af79cd13be357-93e762768f3so169186485a.0

for ; Wed, 07 Oct 2026 06:26:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bankingtheadvisoryib.com; s=google; t=1791379577; x=1791984377; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:subject:to

:from:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=tWEUkGMMg1invjFhcriSrQNc6Y8pqSkxTdjQBUfAHCI=;

b=XcmMJzu2Y/rLotsCumiilA9GmzSh2POlxYsgryOQq0lgPYfw/9+dHQrguTEXgw7ibn

TxVmJfteFYheEpouYiIMZAzrhUN33FWFcK9igwe39V+dGIgxEHXbRZlAFvjMSIXlPEik

fNv9ADvREIfgcytNRC6P8NpO5dci6xE+rK1Psw1EokqRAaMkAFN9Bw6NLEmUVBraPlLK

UuEGG7qomwLo0UDaAVjhsn9vcvzEWJsfJWxftofr2+Agdlfq/vGCu41/osUujssluWjj

l+Fpf1u/G3URmXwZHiBGiCCJbCRsDXIG/Hqx0R3Rvn2LQ4hSyAJltkPn97MhkZkKrdnk

RIPg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791379577; x=1791984377;

h=content-type:mime-version:date:content-transfer-encoding:subject:to

:from:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=tWEUkGMMg1invjFhcriSrQNc6Y8pqSkxTdjQBUfAHCI=;

b=zRQxydB8Q2qqSFi01qzHTwFm3JF30c60qZUXWxdD2nehjvmmpJXn1W6basK1U68r03

QaMfX72y259PfqQQ2y9RgoHsLLdxBEmR0APz6crJ3tldX3gdmIV218/SNCq2xhMDy2G1

V4iM5+sEUHDIKKvTWGwafacP+09E3J+LucDYFrdC8etiIobWXxtIs3jNdYTzGIzp8I6l

EhqK/WoceySXIQjtxGv2g2lq7ch3LDAUACPfq7W5GV3quw10JtDLzuqqCVAYaMj/JzeO

A3JFuYziDxia2YKuDRgywzwuFOFqpGXCEhHLytnLIHEUeGdsPBYNl/IPC5fOhfnTRIRG

uw9g==

X-Gm-Message-State: AFuF++niDE7b2j9gZ65EYh5jf5BTjyaDEv4dlORfjUt+e5AKDCKaed1H

HMKnHHI0NqwCLD9z6E7f9c2XFtRU4BPGjOmnejsl2qzb05e1Fb6uTwMQuuHFcDsChZE2sECiz1n

+IkgAeA==

X-Gm-Gg: AYBFou1dsrZBPoBLY/y1w7JwjI1e/nvu78y1VqQmwzNkXJud47owbBSCmIvMnTA3o+A

FISVmWdJ2ke7/Bzb+nzcuoBMKDq1jSTz8zt1BwUzLbZAr/XKmC62F/Ltjhuqe6pMhpuOZKEkhGH

/NRvdExaVSPxiRPchVwPu7fHvQSbCmRqKE9L3iIyHhQBq2symuVtcuVnvQ57MlzIBWjHAn/vchb

yqwrkw/Zbgt9WSeWj3z1JOR8YfUiOyztaF8EfDG4hXdwjS0oriquufZb4JKenumCqs0Gma334oI

HKESGCaEI1HtVJhmm68P/t4FYug19GNwEVPFaa0fXB/DopnSWZ8INoEbEhw6Y8JtCD+hUr4Miq5

0pCIRkX5ZpY5/JskTLz9EcLUo/ooyhHrxhtu7j79AZO5yUlxkdR5DqaQtvLtxPIMc/1EXw1B/ho

lul2yuy0mFsASq3rmK9GiBNS5orz54c7C+ZrIIRxpLl3BPLb1aHtu/H9m3XV0RGud1Rf+LRbe0C

ThsGg2Qxza6zcx1pQ/tLSiz6Ca7Ptwnu+q4INHdK9Dwdg2FhS8OBz+n5lLcMFY9idZQsrHwwLu6

1naXGHhgfIeXrOeGVRNi6RbLMQ==

X-Received: by 2002:a05:620a:6890:b0:93e:9809:26e with SMTP id af79cd13be357-93e9b84e58fmr386300285a.70.1791379576545;

Wed, 07 Oct 2026 06:26:16 -0700 (PDT)

Received: from 01a1168b-14ad-7888-9c62-5c9405280795.local (ec2-44-223-83-73.compute-1.amazonaws.com. [44.223.83.73])

by smtp.gmail.com with ESMTPSA id af79cd13be357-93e991be944sm212968485a.34.2026.10.07.06.26.16

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 07 Oct 2026 06:26:16 -0700 (PDT)

Message-ID: <01a1168b-14ad-7888-9c62-5c9405280795@bankingtheadvisoryib.com>

In-Reply-To:

<01a0f765-f722-7239-93dd-5c6b9ea9742d@bankingtheadvisoryib.com>

References: <01a0f765-f722-7239-93dd-5c6b9ea9742d@bankingtheadvisoryib.com>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/01a1168b-14ad-7888-9c62-5c9405280795

From: Oliver Bogner

To: sales@nk.ca

Subject: Re: Netknow Internet Knowledge Purchase

Content-Transfer-Encoding: quoted-printable

Date: Wed, 07 Oct 2026 13:26:16 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I'm still waiting to hear back, and it seems you've decided

selling isn't on your radar right now? We see a strong potential for collaboration.

Oliver Bogner Managing Partner | The Advisory Investment Bank Q1 & Q2 2026

#1 Lower Middle Market Investment Bank on Axial 5x Top 5 Lower Middle Market

Investment Bank on Axial 2x Forbes 30 Under 30 A [...]



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[44.223.83.73 listed in will-spam-for-food.eu.org]

[44.223.83.73 listed in will-spam-for-food.eu.org]

[44.223.83.73 listed in will-spam-for-food.eu.org]

[44.223.83.73 listed in will-spam-for-food.eu.org]

[44.223.83.73 listed in will-spam-for-food.eu.org]

[44.223.83.73 listed in will-spam-for-food.eu.org]

[44.223.83.73 listed in will-spam-for-food.eu.org]

[44.223.83.73 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.180 listed in dnsbl.ahbl.org]

[209.85.222.180 listed in dnsbl.ahbl.org]

[209.85.222.180 listed in dnsbl.ahbl.org]

[209.85.222.180 listed in dnsbl.ahbl.org]

[44.223.83.73 listed in dnsbl.ahbl.org]

[44.223.83.73 listed in dnsbl.ahbl.org]

[44.223.83.73 listed in dnsbl.ahbl.org]

[44.223.83.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.180 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.180 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.180 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: bankingtheadvisoryib.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: bankingtheadvisoryib.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.180 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.180 listed in wl.mailspike.net]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: Netknow Internet Knowledge Purchase



I'm still waiting to hear back, and it seems you've decided selling isn't =

on your radar right now?=C2=A0



We see a strong potential for collaboration=

.=C2=A0



Oliver Bogner

Managing Partner | The Advisory Investment Bank

Q1 & Q2 =C2=A02026 #1 Lower Middle Market Investment Bank on Axial

5x Top 5 Lower Middle Market Investment Bank on Axial

2x Forbes 30 Under 30 Alumni

2x Inc 5,000 CEO



On Thu, October 1, 2026 =

12:17 PM, Oliver Bogner

[ceo@bankingtheadvisoryib.com]> wrote:



> Hello,

>=20

> Multiples in your sector have seen a significant increase over the past =

few months. We just saw it firsthand - successfully sold a firm akin to =

Netknow Internet Knowledge, and the acquirer is still looking for =

additional opportunities.

>=20

> We're happy to discuss our observations =

should it be helpful.

>=20

> Oliver Bogner

> Managing Partner | The =

Advisory Investment Bank

> Q1 2026 #1 Lower Middle Market Investment Bank =

on Axial

> 5x Top 5 Lower Middle Market Investment Bank on Axial

> 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> On Thu, August 20, 2026=

2:02 PM, Oliver Bogner

> [ceo@bankingtheadvisoryib.com]> wrote:

>=20

> > Free on Tuesday?

> >=20

> > Oliver Bogner

> > Managing Partner | The Advisory Investment Bank

> > Q1 2026 #1 Lower Middle Market Investment Bank on Axial

> > 5x Top 5 Lower Middle Market Investment Bank on Axial

> > 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> > On Mon, August 17, 2026 2:09 PM, Oliver Bogner
b.com>

> > [ceo@bankingtheadvisoryib.com]> wrote:

> >=20

> > > Hey,

> > >=20

> > > We're the number 1-ranked lower middle market investment =

bank in the US (Axial, 2026) and there's a buyer who reached out =

specifically regarding Netknow Internet Knowledge.

> > >=20

> > > I understand your journey firsthand - personally sold five-plus =

companies, and that's precisely why I founded The Advisory, to assist =

founders like yourself in selling their businesses.

> > >=20

> > > Through my previous ventures, my work led to features in Forbes 30 =

under 30 and an INC 5000 CEO designation, and currently, The Advisory holds=

a ranking as a leading investment bank in the US.

> > >=20

> > > Valuations are very high right now - we see companies in your space =

go for up to 10x.

> > >=20

> > > Would you be open to a brief call early =

next week?

> > >=20

> > > Oliver Bogner

> > > Managing Partner | The =

Advisory Investment Bank

> > > Q1 2026 #1 Lower Middle Market Investment =

Bank on Axial

> > > 5x Top 5 Lower Middle Market Investment Bank on Axial

> > > 2x Forbes 30 Under 30 Alumni | 2x Inc 5,000 CEO

> > >

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Oct 2026 05:24:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEPkp-000000005E5-21pA

for dave@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 05:24:11 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 Oct 2026 05:24:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-136.dm.aliyun.com ([140.205.208.136]:56772)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEOjs-00000000PXB-0bhS

for doctor@nl2k.ab.ca;

Wed, 07 Oct 2026 04:18:44 -0600

X-AliDM-RcptTo: ZG9jdG9yQG5sMmsuYWIuY2E=

Feedback-ID: default:frank@factorymadecn.com:alibabak_WebBatch:306995

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=factorymadecn.com; s=aliyun-cn-hangzhou;

t=1791368256; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=7Hjmr27RJhqiThEDNcBfQF9RaSp8H5hDd1KdpB//Xfg=;

b=eN72Wu9SrtPET3GPDNl8vjI8xNflQdbWye2iPnERwrfJI8Cng2sOJyyjSDPdFh8iX3uZGzElgr0gRfOVaody3MGiOkwmwK6eG/Ty40RjjomNVoTFGs1pffmwSwdZ29LD9FcxyK5+0QYzCS1qdfX64ODI7EVa+t4WX1CPY7la1HE=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1791368256; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=7Hjmr27RJhqiThEDNcBfQF9RaSp8H5hDd1KdpB//Xfg=;

b=hD46fvhn+4h1kJZ2K2vTaNA0SSNNGhcBl0ltczL+oMrmzuPlU93CswYRQktUPBvj7eEZJpKuBRWR1HySveDpN6LvlsVQZHtuQ9dZH6rqR8Z1uw4klcRMUfLoez57IEUZvRXrUmD0lMpCOO3TLW0hpWhzWtkpDAJpoT/nk1c2c1o=

Received: from chitu-hsf(mailfrom:frank@factorymadecn.com fp:ma_600000357387399133 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Wed, 07 Oct 2026 18:17:16 +0800

Date: Wed, 07 Oct 2026 18:17:16 +0800

From: "=?UTF-8?B?U3BvcnQsZml0bmVzcyxydW5uaW5n?="

To:

Reply-To:

Message-ID: <09522124-a206-4d6a-8778-4d02f6ce26b1@alibaba.com>

Subject: =?UTF-8?B?U3BvcnQsZml0bmVzcyxydW5uaW5nLHlvZ2Esb3V0ZG9vciBlcXVpcG1lbnQ=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000357387399134

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 16.1

X-Spam_score_int: 161

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear manager: Our company specializes in smart sport,fitness,yoga,running,outdoor

equipment,strong OEM capabilities, providing precise customized orders.



Content analysis details: (16.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

[140.205.208.136 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

[140.205.208.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.136 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: factorymadecn.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: factorymadecn.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.136 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.136 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 J_CHICKENPOX_57 BODY: 5alpha-pock-7alpha

0.6 J_CHICKENPOX_55 BODY: 5alpha-pock-5alpha

0.6 J_CHICKENPOX_66 BODY: 6alpha-pock-6alpha

0.6 J_CHICKENPOX_43 BODY: 4alpha-pock-3alpha

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.6 J_CHICKENPOX_37 BODY: 3alpha-pock-7alpha

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?U3BvcnQsZml0bmVzcyxydW5uaW5nLHlvZ2Esb3V0ZG9vciBlcXVpcG1lbnQ=?=



Dear manager:


: wrap;">Our company specializes in smart sport,fitness,yoga,running,outd=

oor  equipment,strong OEM capabilities, providing precise customized orde=

rs.

Smart sport include blue tooth rings=

,watches and earphones,smart VR glasses,smart sweeping robot and swimming pool=

cleaning robot.

Fitness running eq=

uipment include smart running machine,running arm bag and&=

nbsp; waist bag, running storage bag,running rings and watches.

<=

p style=3D"text-wrap-mode: wrap;">Outdoor equipment include outdoor portable p=

ower,solar charging panel ,camping tents, car/caravan tents, hammocks, sl=

eeping bags, outdoor tables ,chairs, backpacks,flashlights,camping lamps,assau=

lt suit, jacket,hiking /mountaineering shoes.


rap;">Which items are you interesting? Please let me know,you are welcome to a=

sk for a catalog.

Best regards,


yle=3D"text-wrap-mode: wrap;">Frank

We C=

hat: 16675973861

Unqi Technology Co., Lt=

d.

doctor@nl2k.ab.ca 



p>

Italian language saxo bank phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Oct 2026 05:24:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEPke-000000005DH-1kLk

for dave@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 05:24:00 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 Oct 2026 05:24:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from qbs.szzrm.com ([20.105.131.134]:45717)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xENiN-00000000Idp-2l9j

for sales@nk.ca;

Wed, 07 Oct 2026 03:13:07 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=qbs.szzrm.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;

i=gozmjgmdg@qbs.szzrm.com;

bh=/niek9q7KExhIu8Te36eIbZJos5D58ChDMGJGDAvoJE=;

b=WM5/MYMJgfWvIkLxL4xwconB5QsnaSJJcUrVWb/HyJpoCnP0MMQfyVPK9sk30i8HcfnJF92rqbBp

CyKsbzK//herb90kCTjxSy9XGqNe2r3wf1Z2Y+bYiMCzCB+EmAC6JXcuMroix8SSfx0PP+14tebA

GS/hk4l+BfS0fQrXhpHSSkFtl3afc99nQx1kd5N4Jj2ky+FXzSkE5e7kHOM1XMPt0RI9EiEvT03+

zPL09Qw2WTNocKMzvZukxQRcRivHWDbts5LRRJw/aZA6XCgndXjMeNIM1HwfqQ2ulButTP6TAtfK

hzoQ/3PtChIk9jqVSeQ/Bu7wAnw/SNR9Mmh80g==

Content-Type: multipart/alternative;

boundary="===============1765268004319603770=="

MIME-Version: 1.0

From: Saxo Bank

To: sales@nk.ca

Subject: Ultimo avviso - Funzionalita del conto limitate fino alla verifica

Date: Wed, 07 Oct 2026 10:12:03 +0100

Message-ID: <179136432336.32894.14423770607514079943@qbs.szzrm.com>

Reply-To: feedback@saxobank.com

Feedback-ID: campaign:saxobank.com:mailer

X-Spam_score: 30.6

X-Spam_score_int: 306

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Gentile sales, ULTIMO AVVISO - VERIFICA IN SOSPESO IL SUO

CONTO PRESENTA LIMITAZIONI OPERATIVE



Content analysis details: (30.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

[20.105.131.134 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.105.131.134 listed in dnsbl.ahbl.org]

[20.105.131.134 listed in dnsbl.ahbl.org]

[20.105.131.134 listed in dnsbl.ahbl.org]

[20.105.131.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.105.131.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.105.131.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.105.131.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.105.131.134 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 J_CHICKENPOX_39 BODY: 3alpha-pock-9alpha

0.6 J_CHICKENPOX_34 BODY: 3alpha-pock-4alpha

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.105.131.134 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_Z FULL: Dec/Hex char Enc [Zz]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

Subject: {SPAM?} Ultimo avviso - Funzionalita del conto limitate fino alla verifica



--===============1765268004319603770==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Gentile sales,



ULTIMO AVVISO - VERIFICA IN SOSPESO



IL SUO CONTO PRESENTA LIMITAZIONI OPERATIVE



Non risulta ancora completata la verifica richiesta sul Suo conto. Di conseguenza sono attive le limitazioni indicate qui sotto. La preghiamo di effettuare l'accesso e di completare la verifica: le limitazioni verranno rimosse dopo l'approvazione.



OPERATIVITA

Acquisto di strumenti finanziari: Sospeso

Versamento di fondi sul conto: Sospeso

Vendita e riduzione delle posizioni: Consentita

Prelievo di liquidita: Consentito

Trasferimento in uscita degli strumenti: Consentito



Le limitazioni restano attive finche la verifica non viene completata e approvata dal nostro ufficio. La preghiamo di intervenire oggi stesso.



Riferimento pratica: 54624792



Accedi e completa la verifica:

https://www.ebaocheng.com/?email=sales@nk.ca&uid=kZ4cmOisUMYSZGJNiQl6hVip



La rimozione delle limitazioni avviene dopo l'approvazione della verifica.



Perche ricevo questa email?

Le limitazioni derivano dal mancato completamento della verifica richiesta sul Suo rapporto. Se ritiene che si tratti di un errore, La preghiamo di contattare il Servizio Clienti.



Cordiali saluti

Saxo SIM S.p.A. - Servizio Clienti



----------------------------------------------------------------



Messaggio generato automaticamente all'indirizzo sales@nk.ca. La preghiamo di non rispondere a questo indirizzo.



Saxo SIM S.p.A. - Sede legale: Via [INDIRIZZO SEDE], [CAP] [CITTA], Italia - Codice fiscale [CODICE FISCALE].

Societa iscritta all'albo delle SIM e soggetta alla vigilanza di CONSOB e Banca d'Italia.

Il trading di strumenti finanziari comporta rischi, compresa la possibile perdita del capitale investito.



--===============1765268004319603770==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



















Ultimo avviso - Funzionalita del conto limitate fino alla verifica







Sul Suo conto risultano attive limitazioni op​erative. La preghiamo‌ di accedere e di comple‌tare la verifica per ri​pristinare tutte le fun‍zionalita.






















































ULTIMO AVVISO - VERIFICA‌ IN SOSPESO



SAXO





Il Suo conto presenta l‌imitazioni operative​



Gentile sales,



Non risulta ancora comp‌letata la verifica rich​iesta sul Suo conto. Di c‍onseguenza sono attive le limitazioni indic​ate qui sotto. La preghia​mo di effettuare l'accesso e di completare‌ la verifica: le limitazioni verranno rimosse dopo l'approvazione.























































OPERATIVITÀ STATO
Acquisto di strumenti‌ finanziari Sospeso
Versamento di fondi su​l conto Sospeso
Vendita e riduzione del​le posizioni Consentita
Prelievo di liquidità Consentito
Trasferimento in uscita degli strumenti Consentito




Le limitazioni restano attive finché la verifica non viene completata e approvata dal nostro ufficio. La preghiamo di intervenire o​ggi stesso.



Riferimento pratica: 10893224













Accedi e completa la ‍verifica

La rimozione delle lim‍itazioni avviene dopo l‌'approvazione della ve‍rifica.










Perché ricevo questa email?



Le limitazioni derivan​o dal mancato completam‌ento della verifica ri‌chiesta sul Suo rapporto. Se ritiene che si‌ tratti di un errore, La preghiamo di contatta‌re il Servizio Clienti.​ Contatta il Servizio Cli‍enti >







Cordiali saluti
Saxo SIM S.p.A. - Servi‌zio Clienti











Messaggio generato aut‍omaticamente all'indirizzo sales@nk.ca‌. La preghiamo di non r‌ispondere a questo ind​irizzo.



Saxo SIM S.p.A. - Sede l​egale: Via [INDIRIZZO​ SEDE], [CAP] [CITTA], I‍talia - Codice fiscale‍ [CODICE FISCALE].



Società iscritta all'albo delle SIM e soggett‍a alla vigilanza di CON​SOB e Banca d'Italia.



Il trading di strumenti‍ finanziari comporta rischi, compresa la possibile perdita del cap‍itale investito.



















--===============1765268004319603770==--

Chinese products spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Oct 2026 05:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEPkR-000000005CF-3RhM

for dave@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 05:23:47 -0600

Resent-From: The Doctor

Resent-Date: Wed, 7 Oct 2026 05:23:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f11.google.com ([74.125.227.139]:56900)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEMix-00000000Bae-1mGC

for root@doctor.nl2k.ab.ca;

Wed, 07 Oct 2026 02:09:41 -0600

Received: by mail-pj2-f11.google.com with SMTP id 98e67ed59e1d1-398a384b5f7so511924a91.0

for ; Wed, 07 Oct 2026 01:07:44 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1791360459; x=1791965259; darn=doctor.nl2k.ab.ca;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=McMoEk7tctaiKgReZ0yq4D6i9Wu0MLZfgsGiYX/K7/H2Uw5GXpFZnI8z1KWi+UHmZI

utS5S3d4+2WTgIzg14kYPC2H75Z4dEGcIKwVdKLBe6hsUbZx9CvFCfQt4ABTZ/nClHy1

ixUGO1Ew16b3pCelLfRaiBa1iaEbK2uF+JdXY=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791360459; x=1791965259;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=k3BktfwOqHiFnaJR84Yqhhq3xbiQD4oFJKlRNDbvZ08U5cRB4jGJM3QY0bGyYbSz6q

eZPwL1lj4i+jeRWD3vAzRNChNCsNBlQBPmm6UAkqiPosA/pmUhaUpBQK4/TU0Jo3vSq2

9/iUEOQBGsCYVEtNEBYxHc7AY9gGafeUGB7fbHEeKWEwMMFP95FeYkmzx+osDVU4Z+R2

jOPPeqxczbpubQUZbg8GFM/QM3RNvQ9gnbOWQUvfxkLusy25N0Z2oatj9Ph4llcyXTLq

ll/G+edXR8HzF4DNWRGp2P56BtflooXUO+4/EWNRUUwSM91+qZqGyCpGBU0Qn9jKrMJ6

sRUA==

X-Gm-Message-State: AFq9FYL1FHcfJpDtOoCb6vsVlr4jy9a9x+1UtDXm5zmHVmN3rPx0X2HR

wPTz2dEtGoHMQoO0vodNfWdErXh9taYpIixLYLB0lfnNSFMXOxjc62CQ23rLxkeApldqD8UvzhL

73NXlIDU=

X-Gm-Gg: AYBFou12n8wWi5Np0sz21rXmFh8ooh2tz7hH5YYEzvAZ3k4cGafg+WYr2mxokkfZG7g

qbAVlZCh5z7n1qwmiqk0gVkOiunAEMN48JkbuAv0CBxHtVOb28EF4smmN/rWH3Nu1uJfEuu5Grt

9bN/1Mkj9OR7sBChz3uEOHWSzLvEiIx01InCt59e+Aw27Qld0AMtqg4phgYZYseHzksIvKoUdP8

RPpVtc5/5HCIZHxw1aZ7hCm7EjDloO+KeadFjwQu6xcZbRggUqr1V686VU7jf70ujfN5GlQthi1

7LvyuMsLupK4a2fKfCYkR25EWgYYFGbxL79HncykdBn2iYpYWhYzMnL8KadPtqN4vCCNJlgLGOj

Vwpofv5lRRupudFWaAdhzx6khfesFiq614anJNYdIIaXXX/Y0WPuT7sJVZWAs/Mze8PrVefC/7J

zELc9oMWmeLlygvnoMgllPmJejfOSPWh58c/QSaljzDPHYdclBtvxmJACi1Bx4wmN7uJuwU9/bX

M3XqoEBHVtqS0+0

X-Received: by 2002:a17:90b:4d:b0:3a4:f8da:246d with SMTP id 98e67ed59e1d1-3a8a117a56cmr1039200a91.53.1791360458445;

Wed, 07 Oct 2026 01:07:38 -0700 (PDT)

Received: from lkob ([203.88.114.137])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a85436a39dsm8889191a91.9.2026.10.07.01.07.35

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Wed, 07 Oct 2026 01:07:37 -0700 (PDT)

From: "bella@sanmeng-mould.com"

X-Google-Original-From: "bella@sanmeng-mould.com"

Reply-To:

Message-ID: <1FEAB26521482E769DA41EB665160BCB@lkob>

To:

Subject: Re: plastic injection and die casting molds and moldings

Date: Wed, 7 Oct 2026 16:07:19 +0800

MIME-Version: 1.0

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: bella@sanmeng-mould.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear , We provide:



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

[74.125.227.139 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[74.125.227.139 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[203.88.114.137 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sanmeng-mould.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.139 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.139 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.139 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FAKE_REPLY_C No description available.

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: www.sanmeng-mould.com/96.44.182.133]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: www.sanmeng-mould.com/96.44.182.133]

Subject: {SPAM?} Re: plastic injection and die casting molds and moldings



Dear ,



We provide:



plastic injection and die casting molds and moldings.



 thermoplastic injection molding, overmolding, 2K molding, aluminum & zinc die casting etc.



Competitive prices for exported mold and mass production of production mold.



 Excellent services involving mould design to mould fabrication, from parts to part assembly.



Professional engineering analysis.



 Excellent quality maintained through top-ranking testing machines.



Careful packaging.



 ISO certificate





We value every customer and will respond to any question quickly.



For details information pls check our website: www.sanmeng-mould.com



Looking forward to your soon reply.



Welcome to visit our factory anytime!



Thank you!



--------------------------------------------------------------------------------

Best regards,



Bella

SanMeng Mould Co.,Ltd



Wechat/ WhatsApp: +86-13242975530

Email: bella@sanmeng-mould.com

Website: www.sanmeng-mould.com

Add: NO.45, Jinghai East Rd, Shatou Community, Changan town, Dongguan City, Guangdong Province, 523863, China

Chinese products spam

Posted by Dave Yadallee on
Hey Good Day!

As standard glucosamine formulas hit absorption ceilings, we developed GINPOSOME®—a patent-pending liposomal co-encapsulated Glucosamine-Chondroitin engineered for vastly superior bioactivity.

In a recent AAALAC-accredited CRO study, GINPOSOME® significantly outperformed the industry benchmark brand:

Superior Efficacy at 1/10th Dose : Achieved higher cartilage repair (63% vs. 61%) and faster mobility recovery (83% vs. 64%) at just 9.8% of the benchmark's dosage (114ug/mL vs. 1165ug/mL).

Near-Full Mobility Restoration : Movement performance reached 108--113% of normal control levels at optimized doses (228--456ug/mL).

2.6-13.3times Bioavailability Boost : Enables significantly smaller daily dosing or cleaner-label formulations.



To seamlessly integrate this proprietary technology into your brand lineup, we offer flexible supply options:

Custom Powder Blends (Premix): Standardized, highly stable, and ready to incorporate into your existing manufacturing line.

Bulk Finished Capsules: Fully encapsulated and quality-tested, ready for your contract packaging and branding.



May I send over our technical report for your R&D team?

Simply let me know whether Powder or Capsules would fit your evaluation better.



best regards,



Dennis He



Sales Director



 +86 13795272899



î„™ David.w@ginposome.com









Xiamen Ginposome Pharmaceutical Co., Ltd.

Haicang District, Xiamen City, Fujian, China.



Web : www.ginposome.com

German language Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 17:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEEVG-000000009Ts-33iH

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 17:23:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 17:23:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr2-f11.google.com ([74.125.225.75]:56392)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEDv4-000000005eA-3bGz

for doctor@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 16:45:35 -0600

Received: by mail-wr2-f11.google.com with SMTP id ffacd0b85a97d-48c688a7cd9so404202f8f.0

for ; Tue, 06 Oct 2026 15:44:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791326670; x=1791931470; darn=doctor.nl2k.ab.ca;

h=reply-to:date:from:to:subject:content-description

:content-transfer-encoding:mime-version:content-type:message-id:from

:to:cc:subject:date:message-id:reply-to:content-type;

bh=ehLjaAizzG7SZ9sLBPuVCqjEP2MNzj6qQT5HlNq4uvE=;

b=YQgs65qzzOKnWv0QYaS6NdPl5BfzSF7cls23Sx/5BWAIPSChi6cDmsmRSoVkpvfrmH

ofR8PW7TvxYFG7sEj3vSsKoofp+t0BuBxbDJTP556L9SdcdFy2Vw8I0agFlMKs7vDiTd

tE4UEd10Rziukklfyo0fsAn5irzWFX6qm3leEEzg1grzwOY0vCCShVRtV6nJAHy6GAUq

tcu/J6aWMDWQ3ZfRHckN/mRDiynrX+cXb1op+xb+9OoX63oGmFug3BJ32jUOcKkCNSM0

YxXRnEgKyzE67YkW9E/HGZJK/C5BlWOQcULYrbpqoZthryrj9/uzNEIhDHQZ1rYG0Prh

mvTw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791326670; x=1791931470;

h=reply-to:date:from:to:subject:content-description

:content-transfer-encoding:mime-version:content-type:message-id

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=ehLjaAizzG7SZ9sLBPuVCqjEP2MNzj6qQT5HlNq4uvE=;

b=WClrMWIr8Hv/jzDfmnpH8C3S6+q2pZywPjqdyONdSbEJDGsoOYcKU9D2eUIK3M/Xle

eTM6QBpZfhxmDS+C/1jRB1CvvxBG2B/glI5WmJWIrlvudsBzJl9xZayHwt9HCvQuqr4Q

6DIlotBXloKY0qtNJ8xyvgopGXXMdRyCLVIUyQ19Uc7uyuFe/bLP/IZCw7xOKOCDZcZC

QtDmXHFvcO9MoIA/CErl0tqhP8M/7ZzBJIRhOF1oJgPS1u05kchzd7O/VD1MHYSJkhmC

ZKlpINF9wrKy9aqwKv2dmNevaJOSk17MN5Gmn1TMINIgYPwpgExRNgK3IW4lDpqGEgHk

Ubhg==

X-Forwarded-Encrypted: i=1; AKwUvBxw0DTyWph10C8CZ5+VlnzJYgShs2X7TRK+K61r/VtYoiXSjULx/iz9k1ilZcwVa92flvJJFbU=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFq9FYLCTuS+8AOXVWq21hb6enFiLX+WHm4aard49y1UxaSxSHn3+Equ

90xQ73GB2aGKa8tU4umhxzUm3tguixIZxQVNGzLjiaruOsxhro/fOauf

X-Gm-Gg: AYBFou0s21iIweqklXfUsi5yg6hCNUoQ8mcxYqXEFR64MdzziZeybV+adXjnZ20hizL

fvUu70EEzDkN4ITwEoQvjgvAz+/IcnEcA/r9KKyrk5KLCpB/SNgvi5udKaJWRvFcPL4eQSB9+eR

5mhHWpc6xPNkyPqChbqKXe2rBcPwgq3IB4exSkzAqL7wxw46WYDk5E8wBq6EmmTlC1fRm3OBi1j

Z2oYA22jxpWmCL6kj+F97Nc85e8fuakmwszKPkvrr+fV3TpaaPa191sAPGWfpshe8KKSpkn/bzw

ZTlfBXFMtp9kVmJb2JPLEmWaOGsc0bJX387ImWB2IZYRGWo0lyCkfaj4dWY9WwnXsx7f2eUuW6M

DNGLwRLhchgK8wF1YoUO31sfmSH5qB2NnAd03jZbauC7BbArwzvZHPP6mFVqNBLKB59IMZ4H/El

7a1+E+/murdugytIbDi6ChY+y+lpGZH94PmWa6o5ooaDXegR6yEyInew6d21G7F+kjDss4HWiDI

B3rwqQrustHYFQwGBY=

X-Received: by 2002:a5d:64e6:0:b0:488:7f69:632c with SMTP id ffacd0b85a97d-48c7288cee9mr1214407f8f.56.1791326670516;

Tue, 06 Oct 2026 15:44:30 -0700 (PDT)

Received: from DESKTOP-G28RE5S.lan ([129.222.206.218])

by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48c71bd769csm1980384f8f.5.2026.10.06.15.44.23

(version=TLS1 cipher=AES128-SHA bits=128/128);

Tue, 06 Oct 2026 15:44:28 -0700 (PDT)

Message-ID: <6ac579cc.d8747c6a.1fb2f3.4eb0@mx.google.com>

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Ich bin Dominika Kulczyk

To: Recipients

From: zeitrox94@gmail.com

Date: Tue, 06 Oct 2026 15:44:16 -0700

Reply-To: headquarter.ceo11@gmail.com

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ich bin Dominika Kulczyk, eine polnische Milliardärin und

Unternehmerin mit Sitz in den USA. Ich bin die Tochter von Jan Kulczyk, dem

einst reichsten Mann Polens. Zudem bin ich Mitbegründerin und Pr [...]



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[129.222.206.218 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

[74.125.225.75 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

[74.125.225.75 listed in dnsbl.ahbl.org]

[74.125.225.75 listed in dnsbl.ahbl.org]

[74.125.225.75 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

[129.222.206.218 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.225.75 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.225.75 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[129.222.206.218 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[headquarter.ceo11(at)gmail.com]

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[zeitrox94(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[zeitrox94(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.225.75 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.225.75 listed in wl.mailspike.net]

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Ich bin Dominika Kulczyk



Ich bin Dominika Kulczyk, eine polnische Milliard=C3=A4rin und Unternehmeri=

n mit Sitz in den USA. Ich bin die Tochter von Jan Kulczyk, dem einst reich=

sten Mann Polens. Zudem bin ich Mitbegr=C3=BCnderin und Pr=C3=A4sidentin de=

r Kulczyk Foundation, im Aufsichtsrat der Kulczyk Holding sowie Mitbegr=C3=

=BCnderin der Values ??Consulting Group in den USA, wo ich auch gesch=C3=A4=

ftlich t=C3=A4tig bin.



Informationen =C3=BCber mich finden Sie unter:



https://en.wikipedia.org/wiki/Dominika_Kulczyk



Im Rahmen meines Wohlt=C3=A4tigkeitsprojekts beabsichtige ich, jeweils 450.=

000 US-Dollar aus meinem Verm=C3=B6gen an vier Einzelpersonen weltweit zu s=

penden. Wenn Sie diese E-Mail erhalten haben:



Bitte senden Sie mir Ihre Daten, damit ich meine Bank in den USA anweisen k=

ann, die =C3=9Cberweisung der 450.000 US-Dollar an Sie zu veranlassen =E2=

=80=93 eine Zuwendung, die Ihnen und auch anderen helfen soll.



Dominika Kulczyk

Kontaktieren Sie mich unter: vrosenburg@atomicmail.io

Apple paypal phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 17:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xEETw-000000009NZ-0gXy

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 17:22:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 17:22:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f72.google.com ([209.85.222.72]:57786)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE9FR-000000009QA-3dEu

for doctor@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 11:46:19 -0600

Received: by mail-ua1-f72.google.com with SMTP id a1e0cc1a2514c-9806e283b0eso2408589241.3

for ; Tue, 06 Oct 2026 10:45:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1791308716; x=1791913516; darn=doctor.nl2k.ab.ca;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Yi0NigrBbpWvEP6CSBQCPF4ttBl6TSVtCDsQWI1AY4A=;

b=Bs3N+d1unkl/rULTuBiCvUs4B6S0ZYbOy0U9ELboRU/1u8xc8yrE4iiebO2QpAJEfX

hrtf3TwMl2Ewv9KmwRmwlyl6VOtZsL4x8QdAkUsSQ3PpRYAqTnEH2bu/sKwrCKM2nWE7

sKZFB8pZ+JBSV5UlX6Z6CPgFzaUYfRLQGPD+70u68MaIUM6cO+p147aR4WV9o47tojD9

1VMLJqnEss9+bSY9RTxsyL0f+udZHXPq3OxFc0+aohQGMiO+KGSziXqlYGTFzF2sQu64

86Ql69M07N7QAUpTlf3VW/BOY2M2m6pj71bVgCTlZVjXx5sVJOvl4rsXP3xOEyNhTmW/

yL+g==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=colegiobritanico-edu-bo.20251104.gappssmtp.com; s=20251104; t=1791308716; x=1791913516; darn=doctor.nl2k.ab.ca;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Yi0NigrBbpWvEP6CSBQCPF4ttBl6TSVtCDsQWI1AY4A=;

b=pLDdVexGDYURt2mvuHMDr2t0daUc48NaQWCnRS19shMsGp1ZMYbzSjj1SIFqp+xmSW

QaVfU0YCWXq+0TNRhs3nE7ZTWcIxeBCLDnfrfJDbhWx4a/GWAU/ba9tTGzRZAMXCvW+K

BqA/yFMLcjAN2EpgElCBR8pszdtdqBMhs4wLNB+gKycpVJgEmug1JbyuIVp09y2Z4dZu

Ka8tHV/2jvDgYdLubidOEmR6Yx7xilLcjpmHarkiIQ0Thb9zDLbY8k+b6Cz7oW9YB+08

NBUlBPgI9xyIsE7TR+piBJ1Eb5HBh4rR04WRCURnIY/P3bNFB5ZFJRUoOG9YOj0i62aR

+Bww==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791308716; x=1791913516;

h=content-type:from:subject:date:message-id:sender:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=Yi0NigrBbpWvEP6CSBQCPF4ttBl6TSVtCDsQWI1AY4A=;

b=CBtfTYshVK5EAOSe9ftLECGSSoZ4zqakoH3eW/+8BBAm5EDLJ8BnhI4Yd3mNObuNNk

veDYzukZOulnTtEDWtIN9x7avGUEQggLqTJ4Eo10QxLVMHaEVcg1OZ35pdbDgIinQ0vz

Jmg55SjULQQwmetXsHSZp2JG/M4c3Ix6hT0C8CarNC3AIvylo3nD82NtZrKVw1kBQOip

9KtkbhSertxRulpMC4hJ6H87EMWDEYx/uqFofrKVdJx5LCW0J0/v5dcCSokaSLvSjCxJ

rPMmG936z33NsehFNLPB/Vg9UIc/TxgzbWgPGgcWRVHG8+TYQzWkTW9bDu6UIl7SeLd2

TRwQ==

X-Forwarded-Encrypted: i=1; AKwUvBx0ltMOtRulhRRm+IV7a//RcAAUHn8fIOA64GITmL/wTMfVFLBV4BZgkZXuNZxXWrvCHYcCVTg=@doctor.nl2k.ab.ca

X-Gm-Message-State: AFq9FYK4O4A6OymLFjIDRkhdR78kMfBzUIt0Rs63cEkEs1hziN9T/tOx

VvnB6mqL3x3K+i2m3b2uxBwl2AoXMo7RYHAMyh/AxWgzbzuJY+jzL2V3gS3NdCq8zgN3s+gVqGB

j+AufdO0eorDY9tG0m9sh8w84gaDtCj/1O8yUvydpKRk6ug==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:a53:b0:7a7:198b:674b with SMTP id

ada2fe7eead31-7c2460fb1demt9301830137.32.1791308715755; Tue, 06 Oct 2026

10:45:15 -0700 (PDT)

Reply-To: HEVERT GABRIEL DEL RIO FERNANDEZ

Sender: Google Calendar

Message-ID:

Date: Tue, 06 Oct 2026 17:45:15 +0000

Subject: Important Message

From: HEVERT GABRIEL DEL RIO FERNANDEZ

Content-Type: multipart/alternative; boundary="000000000000b1f167065d2f8ff0"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Valued Customer, PayPal has observed activity that doesn't

match your usual usage patterns on your account. Our fraud prevention system

recently logged a $292.95 PayPal purchase attempt at an App [...]



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

[209.85.222.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

[209.85.222.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.72 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.72 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.72 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Important Message



--000000000000b1f167065d2f8ff0

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



RGVhciBWYWx1ZWQgQ3VzdG9tZXIsIFBheVBhbCBoYXMgb2JzZXJ2ZWQgYWN0aXZpdHkgdGhhdCBk

b2Vzbid0IG1hdGNoIHlvdXIgIA0KdXN1YWwgdXNhZ2UgcGF0dGVybnMgb24geW91ciBhY2NvdW50

LiBPdXIgZnJhdWQgcHJldmVudGlvbiBzeXN0ZW0gcmVjZW50bHkgIA0KbG9nZ2VkIGEgJDI5Mi45

NSBQYXlQYWwgcHVyY2hhc2UgYXR0ZW1wdCBhdCBhbiBBcHBsZSBTdG9yZSBsb2NhdGlvbiBpbiAg

DQpNYXNzYWNodXNldHRzIChNQSkuIElmIHRoaXMgcHVyY2hhc2Ugd2FzIG1hZGUgYnkgeW91OiBJ

Z25vcmUgdGhpcyBtZXNzYWdlLiAgDQpUaGUgdHJhbnNhY3Rpb24gd2lsbCBjbGVhciBhbmQgc2hv

dyB1cCBpbiB5b3VyIGFjY291bnQgd2l0aGluIDI0IGhvdXJzLiBJZiAgDQp0aGlzIHB1cmNoYXNl

IHdhcyBOT1QgbWFkZSBieSB5b3U6IENhbGwgUGF5UGFsIFN1cHBvcnQgYXMgc29vbiBhcyBwb3Nz

aWJsZSAgDQphdCArMSA4MzAtMzE4LTk3ODcgZm9yIGltbWVkaWF0ZSB2ZXJpZmljYXRpb24gYW5k

IGFjY291bnQgcHJvdGVjdGlvbi4gWW91ciAgDQphY2NvdW50IHNhZmV0eSBpcyBvdXIgdG9wIGNv

bmNlcm4sIGFuZCB3ZSBhcHByZWNpYXRlIHlvdXIgY29vcGVyYXRpb24uICANClRoYW5rcywgUGF5

UGFsIFN1cHBvcnQgVGVhbSArMSA4MzAtMzE4LTk3ODcgS2luZGx5IGRvIG5vdCByZXBseSB0byB0

aGlzICANCm1lc3NhZ2UsIGFzIHRoaXMgYWRkcmVzcyBpcyBub3QgYWN0aXZlbHkgbW9uaXRvcmVk

LiBzZXJ2aWNlQHBheXBhbC5jb20gTm8gIA0KbG9uZ2VyIHdhbnQgdG8gcmVjZWl2ZSB0aGVzZSBl

bWFpbHM/IFVuc3Vic2NyaWJlIMKpIDIwMjYgc2VydmljZUBwYXlwYWwuY29tDQoNCkltcG9ydGFu

dCBNZXNzYWdlDQpUdWVzZGF5IE9jdCA2LCAyMDI2IOKLhSAycG0g4oCTIDNwbQ0KQm9saXZpYSBU

aW1lDQoNCg0KDQpPcmdhbml6ZXINCkhFVkVSVCBHQUJSSUVMIERFTCBSSU8gRkVSTkFOREVaDQpk

ZWxyaW9oZXZlcnRnYWJyaWVsQGNvbGVnaW9icml0YW5pY28uZWR1LmJvDQoNCg==

--000000000000b1f167065d2f8ff0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20


















/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"HEVERT GABRIEL DEL RIO FERNANDEZ: Dear Valued Customer, PayPal has=

observed activity that doesn't match your usual usage patterns on your=

account. Our fraud prevention system recently logged a $292.95 PayPal purc=

hase attempt at an Apple Store location in Massachusetts (MA). If this purc=

hase was made by you: Ignore this message. The transaction will clear and s=

how up in your account within 24 hours. If this purchase was NOT made by yo=

u: Call PayPal Support as soon as possible at +1 830-318-9787 for immediate=

verification and account protection. Your account safety is our top concer=

n, and we appreciate your cooperation. Thanks, PayPal Support Team +1 830-3=

18-9787 Kindly do not reply to this message, as this address is not activel=

y monitored. service@paypal.com No longer want to receive these emails? Uns=

ubscribe =C2=A9 2026 service@paypal.com"/>
itemscope itemtype=3D"http://schema.org/Event">
s" content=3D"http://schema.org/EventScheduled"/>
r" itemscope itemtype=3D"http://schema.org/Organization">
name" content=3D"Google Calendar"/>
alendar" content=3D"3h4mrn3cuegibht94clifgmshr"/>
ne; font-size: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0=

; width: 0; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">=

Important Message
cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:10=

0%;" class=3D"body-container">

"left">
 
<=

!--[if mso | IE]>

ing=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D=

"width:100%;" class=3D"">

">


=3D"description">Dear Valued Customer,
PayPal has observed activity tha=

t doesn't match your usual usage patterns on your account.

Our fraud =

prevention system recently logged a $292.95 PayPal purchase attempt at an A=

pple Store location in Massachusetts (MA).

If this purchase was made by y=

ou:

Ignore this message. The transaction will clear and show up in your a=

ccount within 24 hours.

If this purchase was NOT made by you: Call PayPal=

Support as soon as possible at +1 830-318-9787
for immediate verifica=

tion and account protection.

Your account safety is our top concern, and =

we appreciate your cooperation.

Thanks,

PayPal Support Team
+1 830-3=

18-9787
Kindly do not reply to this message, as this address is not acti=

vely monitored.


ice@paypal.com">service@paypal.com
No longer want to =

receive these emails? Unsubscribe
© 202=

6 service@paypal.com


td>

=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"">

; direction: rtl; font-size: 0; padding: 24px 32px; text-align: left; verti=

cal-align: top;" class=3D"main-container-inner">

tion: ltr; display: inline-block; vertical-align: top; width: 100%;overflow=

: hidden; word-wrap: break-word;">
lspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-column-ta=

ble-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-layout: fixed=

;">

gn:top;">
esentation" width=3D"100%" style=3D"table-layout: fixed;">
r>

font-size: 0; padding: 0; text-align: left; word-break: break-word;;padding=

-bottom:2px;">

s-serif;font-weight: 400; font-size: 22px; line-height: 28px;color: #3c4043=

; text-decoration: none;" class=3D"primary-text" role=3D"presentation">
n itemprop=3D"name">Important Message

=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;pad=

ding-bottom:24px;">

: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spac=

ing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" r=

ole=3D"presentation">Tuesday Oct 6, 2026 =E2=8B=85 2pm=

=E2=80=93 3pm (Bolivia Time)

ize: 0; padding: 0; text-align: left; word-break: break-word;;padding-botto=

m:24px;">

font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px=

;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"pre=

sentation">
presentation" style=3D"padding-bottom: 4px;">


ext" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-we=

ight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Organ=

izer


break-word;;padding-bottom:24px;">

erif;font-style: normal; font-weight: 400; font-size: 14px; line-height: 20=

px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"=

primary-text" role=3D"presentation">
ellspacing=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;"><=

td>


-decoration: none;font-weight: 700;-webkit-font-smoothing: antialiased;marg=

in: 0; padding: 0;">Guests

(Guest list has been hidde=

n at organizer's request)
=

=



--000000000000b1f167065d2f8ff0--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 11:23:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE8sX-00000000FM4-0y11

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 11:23:01 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 11:23:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8221367.xmail.ntesmail.com ([8.221.36.7]:49452)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE8jt-00000000AZR-19ce

for root@nk.ca;

Tue, 06 Oct 2026 11:13:45 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1178040_399822551.1791306755275"

To: root

Subject: =?UTF-8?B?TWFudWZhY3R1cmUgb2Ygd2lyZQ==?=

X-Priority: 3

MIME-Version: 1.0

Received: from andy_lai@jcnconnect.com( [10.139.4.149] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 7 Oct 2026 01:12:35 +0800 (GMT+08:00)

From: Andy

Date: Wed, 7 Oct 2026 01:12:35 +0800 (GMT+08:00)

X-WM-Tid: 0aa11233ec7803bdkunm6a5f6c0c18918d

DKIM-Signature: a=rsa-sha256;

b=x5lMUuLOPFki/OkFBxnYLHzEd3sLAnlkOXq/37za9AMxqeQBvFH/1ZoffpWtm6IsO42FVgpgUiKnCIlu9fet2iFhccHeJ96nmgJNvpRUc/SnAM7kM/RZumNhVvPVFvkZBmOG3sIPlzsLxD0O7utU8ZvKjjYfDL+zgWB4aECUu7c=; s=default; c=relaxed/relaxed; d=jcnconnect.com; v=1;

bh=reAXg08LOMfRIIiTIKpPJG4Tt3A+Hjc2NSMtsZCYoDA=;

h=date:mime-version:subject:message-id:from;

Message-ID:









Greetings root



Long time no contact, how are you these days?







This is Andy from DongGuang Jalink electronic Co.,ltd.We are a manufacture of various types of wire harness:electronic wire harness, automotive wire harness, equip-ment connection wire harness, medical wire harness,high-temperature wire harness, etc., which accord with UL,ISO 9001,ROHS, CE, SGS,MSDS.Established in 2001,our company is a trinity enterprise of production, agency,and promotion.



I'm writing to introduce our wire harness,contrast to other factory, We have the following advantages:



1. Support for small customized orders 2. Quick quotation process 3. Short production cycle 4. Professional engineers and promotions staff with prompt responses



Hope to establish business relationship with you! If you would like more information about our company, kindly visit jalink-tech.com .Any thoughts/comments would be greatly appreciated.





Best regards

Andy



Hit subscribe now to receive regular updates and our product’s latest features! Subscribe



If you dont want to receive our emails, you can easily unsubscribe here.

andy_lai@jcnconnect.com







On Thu, Sep 24, 2026, Andy wrote:



-----Original Message-----

From: Andy

Sent Time: Thu, Sep 24, 2026

To: [root ]

Subject: Re: Inquiry about Cable Services





Greetings root



Glad to see your website and know that your main product is similar to our product.



This is Andy from DongGuang Jalink electronic Co.,ltd.We are a manufacture of various types of wire harness:electronic wire harness, automotive wire harness, equip-ment connection wire harness, medical wire harness,high-temperature wire harness, etc., which accord with UL,ISO 9001,ROHS, CE, SGS,MSDS.Established in 2001,our company is a trinity enterprise of production, agency,and promotion.



I'm writing to introduce our wire harness,contrast to other factory, We have the following advantages:



1. Support for small customized orders 2. Quick quotation process 3. Short production cycle 4. Professional engineers and promotions staff with prompt responses



Hope to establish business relationship with you! If you would like more information about our company, kindly visit jalink-tech.com .Any thoughts/comments would be greatly appreciated.



Best regards

Andy



Hit subscribe now to receive regular updates and our product’s latest features! Subscribe



If you don't want to receive our emails, you can easily unsubscribe here.

andy_lai@jcnconnect.com





Canada International Property Show Spam from mailjet

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5pw-00000000MLQ-3nm5

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:08:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:08:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o122.p8.mailjet.com ([87.253.233.122]:42639)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5nI-00000000LpP-0xAb

for sales@nk.ca;

Tue, 06 Oct 2026 08:04:59 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;

d=canadapropertyshow.ca; i=info@canadapropertyshow.ca; s=mailjet; t=1791295431; x=1791302631;

h=Message-Id: MIME-Version: From: Reply-To: To: Subject: Date:

List-Id: List-Unsubscribe: List-Unsubscribe-Post:

Feedback-Id: Precedence: X-CampaignID: X-CSA-Complaints:

X-MJ-Mid: X-REPORT-ABUSE-TO: Content-Type: To: From:

Sender: Subject: Date;

bh=dYqphsvEjB+PedAXLGBWVwSzI+LbELremwRS1HhCvpU=;

b=kPpyn6OxBKVjc5N2mpmIIcG1g2XuY5/Gyte/Fi7cjsm5NOsLrOfHAaUae

owMsvk2b2PSwfp/1nq9zPfXO5C8QWfniss6JOoD15z/WYLHP+ZZRNZTXehhQ

CECCAO2sR+ft7KJ1wjb8/Ho3OVHBLDiWhXOX5Ezltzo9Ex7scrH0KhwlUvD1

329/dcXwKYdNdfY9ftq9FJHJsjlYdvvEvIubrt4nmNC0z03uaLqKlMV5MQcD

o8HyJCgSV+ay1AUPxkvQWsjSCCjMwi3bAEVlQA0dC4zK5SvCpWBlcPMPBeIa

yGGc4ZdjpsR3lCGp4xXRXA7B4dONPhO99CC4wraEfG5/w==

Message-Id:

MIME-Version: 1.0

From: Canada International Property Show

Reply-To: info@canadapropertyshow.ca

To: sales@nk.ca

Subject: Get a gift card + more when you attend the Canada Property Show

9-10 Oct. 2026

Date: Tue, 6 Oct 2026 14:03:51 +0000

List-Id:

List-Unsubscribe:

,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-Id: 42:2952425.2720056:MJ

Precedence: bulk

X-CampaignID: 7765199376

X-CSA-Complaints: csa-complaints@eco.de

X-MJ-Mid:

CAAACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg

X-REPORT-ABUSE-TO: Message sent by Mailjet please report to

abuse@mailjet.com with a copy of the message

Content-Type: multipart/alternative; boundary="=-XUWfiITMQotWjMjBTH8h"

X-Spam_score: 48.1

X-Spam_score_int: 481

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: <> [https://www.eventbrite.ca/e/2026-canada-international-property-show-9th-10th-october-2026-tickets-1976214273089]

View online version https://sh4zl.mjt.lu/nl3/J-HX5Uif [...]



Content analysis details: (48.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

[87.253.233.122 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

[87.253.233.122 listed in dnsbl.ahbl.org]

[87.253.233.122 listed in dnsbl.ahbl.org]

[87.253.233.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.253.233.122 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: mjt.lu]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: canadapropertyshow.ca/35.227.194.51]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[87.253.233.122 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[87.253.233.122 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

15 GR_DOMAIN_MAILJE3 Message-ID contains spammer id (mailje)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Get a gift card + more when you attend the Canada Property Show

9-10 Oct. 2026



--=-XUWfiITMQotWjMjBTH8h

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



<> [https://www.eventbrite.ca/e/2026-canada-i=

nternational-property-show-9th-10th-october-2026-tickets-1976214273089]

View online version https://sh4zl.mjt.lu/nl3/J-HX5Uif7BLfjKjuVy2Twg?m=3DCAA=

ACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgT=

g&b=3Dacc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w

If you don't like our emails, you can=C2=A0



update your preferences https://sh4zl.mjt.lu/unsub2?m=3DCAAACXp4-9sAAc7XihA=

AA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg&b=3Dacc0a7d7&e=

=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us]or https://sh4zl.mjt.lu/u=

nsub2?m=3DAUYAAHPnElQAAc6lPsQAA9FtWcgAAYKI_iYAoEvTAC0M6QBocCUcmJ9mT1W7QtmiO=

bGBnsWaDQApgTg&b=3Dacc166ac&e=3De9ed69b4&x=3DJXV5YF4Lsy_PYywz1IAQXRtzDekYgN=

I6e86cGq3ZbC4&hl=3Denunsubscribe [https://sh4zl.mjt.lu/unsub2?m=3DCAAACXp4-=

9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg&b=3D=

acc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_usat any time.=



--=-XUWfiITMQotWjMjBTH8h

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




9/xhtml" xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-m=

icrosoft-com:office:office">Get a gift card + more when you at=<br /><br /> tend the Canada Property Show 9-10 Oct. 2026
a http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
a http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8">
name=3D"viewport" content=3D"width=3Ddevice-width,initial-scale=3D1">
type=3D"text/css">#outlook a { padding:0; }

body { margin:0;padding:0;-webkit-text-size-adjust:100%;-ms-text-size=

-adjust:100%; }

table, td { border-collapse:collapse;mso-table-lspace:0pt;mso-table-r=

space:0pt; }

img { border:0;height:auto;line-height:100%; outline:none;text-decora=

tion:none;-ms-interpolation-mode:bicubic; }

p { display:block;margin:13px 0; }
le type=3D"text/css">[owa] .mj-column-per-100 { width:100% !important; max-=

width: 100%; }
acing:normal;background-color:#F4F4F4;">

e:1px;color:#ffffff;line-height:1px;max-height:0px;max-width:0px;opacity:0;=

overflow:hidden;">Get a gift card + more when you attend the Canada Propert=

y Show 9-10 Oct. 2026

"main" lang=3D"en" dir=3D"ltr">

gin:0px auto;max-width:600px;">
ding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"width:100%;">
body>

adding-left:0px;padding-right:0px;text-align:center;"><=

div class=3D"mj-column-per-100 mj-outlook-group-fix" style=3D"font-size:0px=

;text-align:left;direction:ltr;display:inline-block;vertical-align:top;widt=

h:100%;">
esentation" style=3D"vertical-align:top;" width=3D"100%">

gn=3D"center" style=3D"font-size:0px;padding:0px 0px 0px 0px;word-break:bre=

ak-word;">
resentation" style=3D"border-collapse:collapse;border-spacing:0px;">=


-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/1/1=

LpSzBrRXRfg14k0dvPVqw/aHR0cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhL=

WludGVybmF0aW9uYWwtcHJvcGVydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0=

cy0xOTc2MjE0MjczMDg5" target=3D"_blank">3D"Newsletter
s.png" src=3D"https://sh4zl.mjt.lu/img2/sh4zl/0e2ed310-d076-463b-a3f8-9bcd8=

b73319b/content" style=3D"border:none;display:block;outline:none;text-decor=

ation:none;height:auto;width:100%;font-size:13px;" width=3D"600" height=3D"=

auto">

=3D"font-size:0px;padding:0px 0px 0px 0px;padding-top:0px;padding-bottom:0p=

x;word-break:break-word;">

tyle=3D"font-size:0px;padding:0px 0px 0px 0px;padding-top:0px;padding-botto=

m:0px;word-break:break-word;">

Arial, sans-serif;font-size:13px;line-height:1;text-align:left;color:#0000=

00;">


: center; margin: 10px 0; margin-top: 10px;">
ont-family:Arial;font-size:12px">If you don't like our emails, you can =

;


t-align: center; margin: 10px 0; margin-bottom: 10px;">
:#55575d;font-family:Arial;font-size:12px">update your
ink-build-content" style=3D"color:inherit;text-decoration:none;; text-decor=

ation: none;" target=3D"_blank" href=3D"https://sh4zl.mjt.lu/unsub2?m=3DCAA=

ACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgT=

g&b=3Dacc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=

=3Den_us">pr=

eferences
px">
px">or
coration:none;; text-decoration: none;" target=3D"_blank" href=3D"https://s=

h4zl.mjt.lu/unsub2?m=3DAUYAAHPnElQAAc6lPsQAA9FtWcgAAYKI_iYAoEvTAC0M6QBocCUc=

mJ9mT1W7QtmiObGBnsWaDQApgTg&b=3Dacc166ac&e=3De9ed69b4&x=3DJXV5Y=

F4Lsy_PYywz1IAQXRtzDekYgNI6e86cGq3ZbC4&hl=3Den">
000EE;font-family:Arial;font-size:12px">
content" style=3D"color:inherit;text-decoration:none;; text-decoration: non=

e;" target=3D"_blank" href=3D"https://sh4zl.mjt.lu/unsub2?m=3DCAAACXp4-9sAA=

c7XihAAA-BCcpQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg&b=3D=

acc0a7d7&e=3D1e39f458&x=3DBCwpwHREIv6H13pFkkwx5w&hl=3Den_us">
pan style=3D"color:#0000EE;font-family:Arial;font-size:12px">unsubscribe
span>at =

any time.



al, sans-serif;" href=3D"https://sh4zl.mjt.lu/lnk/CAAACXp4-9sAAc7XihAAA-BCc=

pQAAYKI8DcAoK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/0/HlpY7fF-ztnZk9ol7b=

61jA/aHR0cHM6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW9uYW=

wtcHJvcGVydHktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0MjczM=

Dg5?b=3D1">​
ock;" href=3D"https://sh4zl.mjt.lu/lnk/CAAACXp4-9sAAc7XihAAA-BCcpQAAYKI8DcA=

oK6BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/0/HlpY7fF-ztnZk9ol7b61jA/aHR0cH=

M6Ly93d3cuZXZlbnRicml0ZS5jYS9lLzIwMjYtY2FuYWRhLWludGVybmF0aW9uYWwtcHJvcGVyd=

Hktc2hvdy05dGgtMTB0aC1vY3RvYmVyLTIwMjYtdGlja2V0cy0xOTc2MjE0MjczMDg5?b=3D3">


BAC0M6QBqxP_HkiRvyUAlQMW3MYJOoAcguQApgTg/3f97414f/e.gif" height=3D"1" width=

=3D"1" alt=3D"" border=3D"0" style=3D"height:1px;width:1px;border:0;"/>



=



--=-XUWfiITMQotWjMjBTH8h--

Bitcoin Paypal phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5ph-00000000MJu-02gO

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f181.google.com ([209.85.210.181]:56575)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5aG-00000000GJw-09X9

for doctor@nl2k.ab.ca;

Tue, 06 Oct 2026 07:51:34 -0600

Received: by mail-pf1-f181.google.com with SMTP id d2e1a72fcca58-88aea027391so1437931b3a.0

for ; Tue, 06 Oct 2026 06:50:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791294631; x=1791899431; darn=nl2k.ab.ca;

h=subject:to:from:date:message-id:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=BKCtVGfhvIbcv7tEukp5LEGsx4Zn5SM4hs7B6rk/BHs=;

b=sZXOmhB2N1iV8nlDpfxxAVD95J+7WULJ+nsN1/hX7C9j6BPd71swwuk6buHJeBc6g1

aeJ0W9b/ZHbNkBy7Uf/35zqdoFfZv8RKP4SCHQkfnlUFRVUhyCMgLBqn9tsIBYqjMM0x

JvsHECo+w3CIbbqpJtb8V58iA9+AURSY6ZCUtDVQGdGXxtuDp7DI3DCfZzfD7r2hqLFe

ZwrMasIH6wMXZDi29NO5U+HVs0rhrekxeh/gfjgFEs1pdSFN3GHjZ76gO/IRjALyRPGY

a6SjTDsyBfElWAl/ZtlAF5S6uiDVW5inaf1twtysIkIGt9WoqrIYi8hxk1uVpi+8woWu

2BqA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791294631; x=1791899431;

h=subject:to:from:date:message-id:x-gm-gg:x-gm-message-state:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=BKCtVGfhvIbcv7tEukp5LEGsx4Zn5SM4hs7B6rk/BHs=;

b=zR560fPBjAv/vzZJdrDrQUOuw8UbsnGu+xMlWZHA8iwPHAN2C9EocJrR93jv/iTSKH

veLP2xlN9DoJAlOprIyh1H5qeBMYMHhfy4txuTwLw556469hXQ5SSc8A3w/G34Dlr0GO

D+zeS8FAXLS6286b53V5T6bJ5s8AxVtEKH/0473w5kGxFcptT/0rM+oJ4TQoeKtUk8vd

49XxUr+66+RYB6spQVeETQQ+E8hZ6b1BZh8GPUrFN+l2rcxVnccy6dkKS8Bq3zBaUuge

BcM5IEIh7ulTWiI8mjJdkYqEWGTEAyFtE+hQcymGAX4reNr0uFz2ykfKeOEGHYbPHhDg

MmOQ==

X-Gm-Message-State: AFuF++nnLp4wQvPFHx/I0ZSXXXPGcjqq/jIEpaMi2dXJfikBf8zTTwMh

dz55X4BPcmyVne/2N4y32pFAjlS87H+Bsiq2XlinlSEz6E9DMKSCmbNv9oY6lCYI

X-Gm-Gg: AYBFou2X6iGmLlL0De7Hu4UZUQ8BgFkalAvuzHBYjgHW0UGKAJaTIx8OjalQWqE5OCO

lx9Jvga92rcNjQfa+4ffCrIipmpim6mhdDLGka6QCUffhnMc9xtmacLjHy3pMts2EmbMplptLeG

Rt5J+wC6JyguDuAAQD1prrbOxO6abgnzJMHUaZwv+/qyUIbHB37WvMAVRp+9IrEOWcMHkRz+yrN

aarpKeByhKfTg5EXJcFYSnlvohLaQW+RFHj0KnUOfsYISr2GrTCgKiBrlpDX/KfH83bScya6RTF

2QntahdjTDrVZW3EwJEK9rDlckRiCwA2SjUuZZf1/vQg4ePiaQTLvSq9cXuD0B7ww6Hb6AgCejE

piwVBoh5Br3Uqw5zSzHlYpMNedwNgCOxkTLeubCD/ep7Z57/IOAxUvLxHU1QPB4om7f8cZiYRTw

KtQu7h4tIBDcRL9CO1/c+LHax0GBCkcDKiyF3EjtkZ9qV9CGGgbVLKZ6Pu4k0QE8DZmFzn9U5gr

xj8xIyCyhAZHr/BvQM4w0jiBs+HdnS0dPWTtatI4/GRaGVGKaskKS3ogg2iwwT3k0u5dqj8H3E=

X-Received: by 2002:a05:6a00:3e19:b0:880:4b56:dc28 with SMTP id d2e1a72fcca58-88c62315dffmr9694403b3a.15.1791294631013;

Tue, 06 Oct 2026 06:50:31 -0700 (PDT)

Received: from localhost (ec2-35-88-121-53.us-west-2.compute.amazonaws.com. [35.88.121.53])

by smtp.gmail.com with UTF8SMTPSA id d2e1a72fcca58-88b0ca7c6b7sm4961188b3a.44.2026.10.06.06.50.30

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 06:50:30 -0700 (PDT)

Message-ID: <6ac4fca6.72aa5310.fd419.6a93@mx.google.com>

Date: Tue, 06 Oct 2026 06:50:30 -0700 (PDT)

From: salahulla33@gmail.com

X-Google-Original-From: PayPal

To: doctor@nl2k.ab.ca

Subject: Payment Success | $419.33 | Ref: I-JRM9COL3E947HQ



Dear doctor,



Your PayPal subscription is scheduled for renewal, and a payment of 419.33 USD will be processed within the next 24 hours for another year of service.



Renewal Details:



Service: Bitcoin



Account: doctorHello doctor,



Thank you for your recent purchase with PayPal.

We’re confirming that your payment has been successfully received via PayPal.



Transaction Details

Date: 2026-10-06

Transaction ID: I-F6H7606E8XC9WYBEP

Payment Method: Pay.Pal

Amount Charged: $419.33 USD

Item: Bitcoin

Quantity: 0.05 BTC

Total: $419.33 USD



A confirmation receipt has been sent to your registered email address: doctor@nl2k.ab.ca.



If you have any questions or need assistance, feel free to contact our support team at 1(828) 579-6365.

You may also view your order or manage preferences by logging into your account.



Merchant: doctor

Shipping/Billing Address: 3070 Ridgeview Rd Reva Va 22735 United States



Thank you for choosing PayPal.



Best regards,

The PayPal Team

Indian Education spam from Yahoo! Mail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5pJ-00000000MHa-0THg

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic-asso1-0020.asd.mail.yahoo.com ([34.2.90.19]:1536 helo=sonic.asd.mail.yahoo.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE53B-0000000045T-3stt

for root@nk.ca;

Tue, 06 Oct 2026 07:17:24 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791292576; bh=nwQF3HimN5Ebgb8+gfB8a43K+LvjQJRCxrWDxZMkmjs=; h=Date:From:References:Subject:From:Subject:Reply-To; b=DQ21n1KkdHUsiKSKpQhEyNWU0DG/4X6HByCujnQGYub55HwTAtUZvCtIu0+HzT1vw6p6mWojkn11nlGEaD4EzhiOSdD5XIyvU+17YON/TAgbThF9kBoq7Vdle1FTUouUgckErziq8EYUWGjGb8EC8R7LU0FZSF+1t/o+6hMJrj/6XNJDl/J7d+HtDQl6zwdH0GVGGq74qmrzEWprOOWxX0y2LvHNlneiWMNpfqw7XhJV0JNjFjU7M3ZhHikfl7x15TkDMm5utUMhDR6iaHZiUDOQoJAZmpD/7b5YkmWSvyREHstonjGiSIc1Yg3AAzo719n60LFK3haui92gOxPZHw==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1791292576; bh=JSP2IheKODUxp6A+U9qWFuVv9YgvOWbneMW/O7PBWgg=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=gBcYUFvz90OAK6aBMiZxVc/56reHIZnchrQTykzANN5n4v34nmDoq2GiuQnZlxyFca7Z2zeO3iwjxUo8hChKNV+12Z9QOHRn2e4pqIFsU6YS1XXqvWf5cdeFncoXh434Epy0/mNuND4tksUW3/2tzSRWGhrHSjlCQL+sUd33nJ9f8zHFfC705e/AMWCONZ3mU2mhXpyoW1gf489IZyg1/pPscyLz8syb8NH4bO5PCWl45AJQp0WF4qDc0Nroqtx0ML6rfbulPGABn5GKBRK2S6+M9Vl0fPcsTp0PPASffvFCw5FsI8SFya5giOj0dHrm9/0ZOzfkUal1x2e45m+IiA==

X-YMail-OSG: Ug4vHz0VM1kaQ3zbueD6ETD4.tCN68wgzvoMrCvIyv6hHFvIqGhrHIEx0xzrAY0

eCcPC51Y69tzspyfdgZgPSowncSrdmEh_NyiXgf9g4gx2MjDufqXKwRpVS0miek_jSh4lHAtiU0Q

NjAuEnuuLeUUEfW0hkyWWABFVatithdVUaDgNqe5BxeZsBDaInOpCyBuqw9My7YKmX..PBLTu93f

uFcNLXuj3my4D2cNycCy3zUMCN5ifO0RjrCbUwL.R4PUEYvBrNp2tZLoWK0ZAVA.7BP7UmhBLfKK

IUQCH7w0re7HHTU7LNUF94UH4dceJAAfLcLqRQ9tlKiAx06eZYtOQ70Ed4xCmykyiUXT1_UmXZ80

KD1FtTjXooYQDElZ7FxP6Hitg2SP1Wl48LzTQoQOZV4UNw.gxF7hakWILnMWGZLimjC_i8LOECP3

AH7o8IvitFoYVAA3n5Hdcqj4T97nXcoJwUrLimgbkQMaUGNyiVaXsyYlZB9qSm_CMlFVBt33GPid

IhgrcnU48VxFLO55YzuCoaodUpSFJZ9FGa2XXbCsRckZBmcpBfgTVBZ3o9nRn89vDlJa72Q4C.rU

o7BoavJI6.voMP9C8sYBeSY__pTCfm3cAcGP21voO.YwJIfjqN2BIseBID3QUzdNuiaW3Sy5OOaY

aExCmKGcNEzUhnttVUipyLkbfdUAFfyPt14NYrurJmE0UQRoL8SBciAVGp5yxNCaPW4.YXqOdrkR

5kzC0B5dCG01U.aguNEU5KHQ29qhIkihU0DJaZB0e_z37p0VYLXAmKmqH2sA5RG7BbhjwidQzZW6

s2sAcX38blnfSjvYIRGmjp6eEovZPafp6G3Ewp0vmZY82HS5xFf9QCrA4tT3mOETX0OErXDyQhrq

QW95ZE81vpK51Z5Lfuq9nUvU.T5PINRqRYDGH0vhpYt4WycgMePBGUUvQHA3ae9SPnIMwPQx9uhW

mqBQMP0TQl6a4Wz75Pk3W0VkXoxlPDOcvrKw2GH2J60gsugV5K2W0EYUkQAAFCDGcRqbNak9eBnb

yUmkepkdubcpjYABR5oAzrrbPFcVr1z33BsCIqLm9ikmewtioNyZbeYZKwI_lyiqJkH4FEZ96ZvH

Ps8lZc_zSUVKYmTY3.XaEZhK1iJWgXMGdRdauz3S0bgTTeEuh37oUnAYKB6dTpALrifdr4W24d3c

2pi3hYDj_uBtNYNpEeFa74jVRSqvbpI75MVwpv6Nl3XdoJDJiJcuVUfJ5miGy_6gAxEBzkNY17UM

GKRy.dm67RLTbavV6Fr_X1.LdnkjWJ2lvgEc57iZhY9t0tv45xL.tSW7QrGAs0IFU1AXLweLho5d

c18WmbuTWoAVfywi3dJoy9CFs2LkidThQJAZup65d7HGlYhAsv13A1GGakGZrmWk4_Q9mH_WjDGQ

HSNnDqNm9o.wER9oiedZDY30Wij.JKDNVboTdDlgkUECg1TZqvCQURX3u_657pf5DH6Fm.L.VwWm

9D6HXKXRlyCiU_Mtr9XBRk5bFK6BSRzuXlqzFGdUQmDu6vDaIcyrktrKMFaoQm9pRxwAFRb.KVPn

.hSLzoLcz634iXAJ32u6mlyvfXZ0avufvny9izlv0.CFm7M07PbuWXff_fu9pv_eVoUPSGRI8oOm

dJ96Eu5P8wZ0s1JTyYGzcOR83IDP.arHdFKPtj4HAXw2td3w2SNfI4gD2w1iBn7q0P09MGXVnh3X

ttylIIuTAZWmzTuxnZU0qFWjg87kKhz0iJnhgJ20FIgei_DfMen8_cXwgyIu.mINIUlkuhJkZiCt

xED3uCBprdOYTokS1QBpTnrCQ7Gc7WvumsVTm61FlrzIYvGXxtwBQnMGrT6N.hWuDkqCEeIbg5tT

tfENOxCGxXo4EXAM5HdlRzGH6ViIT4VrRbCVyPXKsY1xmSUPsD8FLziAO6hwyVSEQLRGoRIGKlAA

82Dy09MjOEjNgE3dGvwSAFeygQwt7SxKLQT0oO9dvY0W7SXufPcePqhlyMynL2iEvYOg0eAyzDKL

28suFphh4zZAsQoQboHDCLeSBWRBhDDOCIT14p.yM6bbbCoOO9.t0wdSiS_2GNUlCS0esADWCuY6

CbCUvLcNuCenIGIIKkjJ_a_CPNECp6Y4Dy__kh5lmJgV0egMX

X-Sonic-MF:

X-Sonic-ID: 1453dbf3-ab33-4d8a-83da-1e6010e3c2b9

Received: from sonic.gate.mail.ne1.yahoo.com by mail-asdoutdeli-p-cin-asso1-prod-sonicconsumer-svc-101 with HTTP; Tue, 6 Oct 2026 13:16:16 +0000

Date: Tue, 6 Oct 2026 13:16:10 +0000 (UTC)

From: "Chirag Saiya (Speaker&Writer)"

Message-ID: <1954634498.516185.1791292570602@mail.yahoo.com>

References: <1954634498.516185.1791292570602.ref@mail.yahoo.com>

Subject: Tuition Classes for Kids Up to 4th Grade - Admissions Open

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_Part_516184_949650396.1791292570602"

X-Mailer: WebService/1.1.26668 YMailCLDNovation



------=_Part_516184_949650396.1791292570602

Content-Type: multipart/alternative;

boundary="----=_Part_516181_1171333317.1791292570578"



------=_Part_516181_1171333317.1791292570578

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable





NAMASTE.



=C2=A0



Please Find Attached:



=C2=A0



=C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Chirag Saiya Tuition Classes Mul=

und - West (Mumbai)



=C2=A0



Kindly Read + Do Share WithAll & Oblige.



=C2=A0



Thank You.



Best Wishes!



Love &Light=E2=80=A6



=C2=A0



Chirag Saiya(Philosopher)



Spiritual Speaker & Writer



Website:http://sites.google.com/site/chiragsaiya



Whats-App: +919819210230 / chiragsaiya@gmail.com



=C2=A0



Save The Soul. Change The World.



Protect The Future Of All Innocent AngelKids.



Where There Is A Will There Is A Way. WayTo Freedom=E2=80=A6



May All Living-Beings Be Delivered FromSuffering & Be Liberated!



=C2=A0

Truth- Justice - Equality - Freedom - Peace - Happiness - Joy - Health For =

All LivesWith Right Vision & True Mission Of Well-Being Of All Living-Being=

s AlwaysForever & Ever=E2=80=A6!!!

------=_Part_516181_1171333317.1791292570578

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable




ly:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">

=3D"ltr" data-setdir=3D"false">


style=3D"font-size:12.0pt;line-height:115%;font-family:Verdana,sans-serif;=

mso-bidi-font-family:Arial">NAMASTE.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial"> 
span>






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">Plea=

se Find Attached:






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">&nbs=

p;






amily:Symbol;mso-fareast-font-family:Symbol;mso-bidi-font-family:Symbol;col=

or:red">=C2=B7
nt-stretch: normal; font-size: 7pt; line-height: normal; font-family: Times=

New Roman;">      
s-serif;color:red;background:white">Chirag Saiya Tuition Classes Mulund - W=

est (Mumbai)






ht:115%;font-family:Verdana,sans-serif;color:#002060;background:white">&nbs=

p;






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial">Kindly R=

ead + Do Share With

All & Oblige.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial"> 
span>






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Thank You.






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Best Wishes!






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0">Love &

Light=E2=80=A6






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#70=

30A0"> 






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#C0=

0000">Chirag Saiya

(Philosopher)






ht:115%;font-family:Verdana,sans-serif;color:#1D1B11;mso-themecolor:backgro=

und2;mso-themeshade:26;background:white">Spiritual Speaker & Writer
an>
s-serif;mso-bidi-font-family:Arial;color:#1D1B11;mso-themecolor:background2=

;mso-themeshade:26">






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#98=

4806;mso-themecolor:accent6;mso-themeshade:128">Website:
=3D"font-size:12.0pt;line-height:115%;font-family:Verdana,sans-serif;mso-bi=

di-font-family:Arial">


" target=3D"_blank">
amily:Verdana,sans-serif;mso-bidi-font-family:Arial">http://sites.google.co=

m/site/chiragsaiya
5%;font-family:Verdana,sans-serif">






ht:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:Arial;color:#4F=

6228;mso-themecolor:accent3;mso-themeshade:128">Whats-App: +919819210230
pan>
ns-serif;mso-bidi-font-family:Arial"> /
a@gmail.com" rel=3D"nofollow" target=3D"_blank">
.0pt;line-height:115%;font-family:Verdana,sans-serif;mso-bidi-font-family:A=

rial;color:#E36C0A;mso-themecolor:accent6;mso-themeshade:191">chiragsaiya@g=

mail.com
mily:Verdana,sans-serif">






ht:115%;font-family:Verdana,sans-serif"> 






ht:115%;font-family:Verdana,sans-serif;color:#002060">Save The Soul. Change=

The World.






ht:115%;font-family:Verdana,sans-serif;color:#002060">Protect The Future Of=

All Innocent Angel

Kids.






ht:115%;font-family:Verdana,sans-serif;color:#002060">Where There Is A Will=

There Is A Way. Way

To Freedom=E2=80=A6






ht:115%;font-family:Verdana,sans-serif;color:#002060">May All Living-Beings=

Be Delivered From

Suffering & Be Liberated!






ht:115%;font-family:Verdana,sans-serif;color:#002060"> 






erif;mso-fareast-font-family:Times New Roman;mso-fareast-theme-font:minor-f=

areast;mso-bidi-font-family:Times New Roman;mso-bidi-theme-font:minor-bidi;=

mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA"=

>Truth

- Justice - Equality - Freedom - Peace - Happiness - Joy - Health For All L=

ives

With Right Vision & True Mission Of Well-Being Of All Living-Beings Alw=

ays

Forever & Ever=E2=80=A6!!!


------=_Part_516181_1171333317.1791292570578--



------=_Part_516184_949650396.1791292570602

Content-Type: image/jpeg

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="Chirag Saiya Tuition Classes Mulund

- West (Mumbai).jpg"

Content-ID: <853dba1a-1d62-3244-5502-db3d78c4a48a@yahoo.com>

...



------=_Part_516184_949650396.1791292570602--

WEb/SEo/App Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5p8-00000000MGg-0Aag

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:18 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f52.google.com ([209.85.216.52]:42157)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4q5-000000002xX-1U9W

for root@nk.ca;

Tue, 06 Oct 2026 07:03:50 -0600

Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-39647aa9d52so702595a91.0

for ; Tue, 06 Oct 2026 06:02:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mindswebsolutiion-com.20251104.gappssmtp.com; s=20251104; t=1791291751; x=1791896551; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=rsgC2Sx4fVLlDbUyRf8U5JlTTBjwWV8hIagsACZvNs4=;

b=EYg7t5+TzFHWp21Ar4mY99+7KN6RWK9oyOx36Q1Z8tOq8G86fFW2ZpgV+IY/ONKx/n

Ka/xDeawYZz+YLoTLnO+VZwXbrSzsPl7ROvH9LQmpLFAd31ld49A4a30O5wxQECJ98wr

84L6uM3tgzg50s5rb+NMvZVCub931YE04Ld4eUnc4r+WW3Xk5EwN3tVNbf8xWOOMju/c

v7+E4L/nEXQydIe67cVP+8l4avcU3XPHP8ikFMsJVZ/qaFycfj7JRzoVgrRYOTqw6WeT

fR9jy/oNXDBzn7m6jkEjbzNtM67aj1/0giPmebEE0aZ0dl+IJTvQZADxIRB9OwuuI9OZ

K//w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791291751; x=1791896551;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=rsgC2Sx4fVLlDbUyRf8U5JlTTBjwWV8hIagsACZvNs4=;

b=qs6thc4vezzpNdjNaavbos2FegxE4wJRlEimAcaelwAOxUQK9rJfTj4EW9NDOIFAtf

utUU2YlR/JB+YswD0+6bLWHYj0TWFaElPBDSMWklPy1Og2xsi+YcBVZlWl6a41fIsct8

x/nN28Wa0DczkQ1xlksstb8Sa643EdENY+SQ5Gulb7RB9+8J1+QEaB15mR+PZxyTXCBS

9UGhHaUZZbPPWcbZbhta8Ai4qGyDFWCAdoHLVgoTMRnl4nX/pXh4i3GcOL2Ec7OiuxvY

F20UfUPj1Fn979ChVV8Mx5XBc5LymIV1N1reOcvxP/dNa+hJhb3j17OR3mx6Vw03Hj+o

hQMg==

X-Gm-Message-State: AFq9FYLz+sz8ydt5VVbK7QSD1mB5x6qqBCO2fpR2t8IyKKeH4AdGQ0ce

btAGN4A3UVa8ycpMNxQE1+lpQS3Z0M9Jq0mbUbRiJxZiPH+H8FZvlj/KYhvJpnZWtR30G0PnBle

ymEmE

X-Gm-Gg: AYBFou0hDV4SLcRtvJsREhX2U3MODDgvziC+zxQyPysvX5cQ9Z/j+uCRXNIdaqjqFXp

r2X1uRJ3PCEfreySwQUWa6iWi5GnVldKaUjcb5MbhD4tJbPgGJWNWz0vMb3nFfhDsKM/jsAaCl0

olaBnBIhqwl9GHyuiAt4/qCsP54WfQd9Uwm9iBpqGaGYS6u0VTBBNTFaTdzmeVYVF+7mrSCaE31

5M8b5sn+Hu7zGqZcSdYHxxamcxuPlxA4R7eOpWlBMweXBOHdBDsSY5gbBefuoUc6ca4wUMQyrxm

Q9zCBOw8UpHN7sH18Up6JgBhbVyOhUMmWIWRrtRW2VwV6N2h9Kh0Jk7i5YTvFyWGsl+JCrAyUWk

ESyDwwyT+RRzSBjHIhpiYg2LcogVPwNTPhnjK4euc1RN/y3w+ZQA3MUJgvJilVB5vwGfEYQ9oG/

rHcROkRIHPbagsyj1hpgCIdlhpkEz4kYs7eEKTDCzerAgr8WSxJGfztWvChNlICuM1+hsozCYsf

wSlUbhlAAcc+5rhA7En

X-Received: by 2002:a17:90b:3b8f:b0:3a7:96d:feaf with SMTP id 98e67ed59e1d1-3a87368575emr666527a91.16.1791291751275;

Tue, 06 Oct 2026 06:02:31 -0700 (PDT)

Received: from [127.0.0.1] ([103.106.232.126])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a8543b0c1fsm6538153a91.14.2026.10.06.06.02.30

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 06 Oct 2026 06:02:30 -0700 (PDT)

From: Shaun

To: root@nk.ca

Subject: Get Ranking Report - www.nk.ca?

Message-ID: <9f79cda1-df76-2449-26f6-311a43047b0e@mindswebsolutiion.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 06 Oct 2026 13:02:28 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, With your permission, I would like to send you an SEO

report www.nk.ca with prices showing you a few things to greatly improve

these search results for you. These things are not difficult, and my repo

[...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[103.106.232.126 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[103.106.232.126 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.106.232.126 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.52 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.106.232.126 listed in sbl-xbl.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.52 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.52 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Get Ranking Report - www.nk.ca?



Hi,

With your permission, I would like to send you an SEO report =

www.nk.ca with prices showing you a few things to greatly improve these =

search results for you. These things are not difficult, and my report will =

be very specific.

We can place your website on Google's 1st page. =

Yahoo, Bing etc.

May I send you a quote, previous work and our =

proposal?

Kind Regards,

Shaun,



Geek squad phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Oct 2026 08:07:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE5p1-00000000MF7-2Pwo

for dave@doctor.nl2k.ab.ca;

Tue, 06 Oct 2026 08:07:11 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Oct 2026 08:07:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f41.google.com ([209.85.216.41]:47402)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xE4mG-000000002ae-3dzi

for doctor@nl2k.ab.ca;

Tue, 06 Oct 2026 06:59:55 -0600

Received: by mail-pj1-f41.google.com with SMTP id 98e67ed59e1d1-3a6cf104827so426065a91.3

for ; Tue, 06 Oct 2026 05:58:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1791291500; x=1791896300; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=HA6BFvZLuIteIfa1z6TcVJK9y44bulEU8LHBGWyjlm4=;

b=eLXpkaW9AABTsJqeTKlqZvbzhSgB2MZnjcS2A1TTpFG+dMMZtZFFwfi4hoOJQJdqDp

tsM2StbAry7tu+d9lsxjD1JL5SJSohkTiCSDlw3WoHDCuqj/nCleYePZzR2UfxLrnlld

KpmaFdmvYcj8lqtqqcCDO+ot4h1T2mWdYyI0XzxNehdxx9mXu31CVux6jfb6BR0yfEdy

dTBYJSuLFe5ylXH6ZTKtyXDPZ4QFIcYLXHt8LDJC/odL8s10lGDG6PF8wmFC3Y4o07w7

zst6KPrwACE/HfMSKudlLPdDaR/R+3zRzQx5YwadEUx9syUSPdzIqSl0KkSF4AZWm6dI

3mLg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1791291500; x=1791896300;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=HA6BFvZLuIteIfa1z6TcVJK9y44bulEU8LHBGWyjlm4=;

b=T8oVhDW4cyDzd9BFfllw/K0N1xf/sMMEV541tI2vBoxeWpNz/sefcPAZ2usYXuzkft

i9wk9TlsGStG3jPIsR1sDHMSb5PtcyxHb4BHTtDNT1ulC+3Yx5O31X+I8qHBZ/R9FRoH

4WzQQU2YaY+TFdaRQDjieeIch8eT6p1c2+q1qzRQQMRuszwx1gAmmAz7lSwNQ/seNlZk

52umF09r9ygWoK6CnXHFdvVfVwqHypHOHZ/4igEm/aHVQ1BaLIzzHlwCoP7486VW9MB6

hjDIN03ZYUXZTRf0IjTKySKm7Gwzv79AAZpTjwTmyS03nHgHvu5Yf54wzS1NnMLzzN3L

v+1A==

X-Gm-Message-State: AFq9FYIDUDV1d+FTZMWVXOixLU2aeLbhHxzY6+/v5FQvKNoJCg9Apit5

F8YElkXoynXsySjMWMQCc2howdDR23T4KIKi0Ch+shcnOxeU1QTKenZOmdhoiX620lo0Gw==

X-Gm-Gg: AYBFou3kFLCmwjhVOcQ3k0aNnsCS+iKLUE+F7WnpW02CxJeFQc20xNTsqWBMZ9DV6H1

9rK0OqtH79QSMayUAWpqoUlfxw3aPzbdcVaJ+Fefoc6aQMKmitq/ZiJRw2s9vgboKrjIJG/PUnx

eOUxuEQW82G3th75THHDhBjRFSrJetxqIrzAr9hM0zSxIlJOrADxBnEvENtF9qKq7TWdK5vq8/S

yT0urEt8ZX2usS1auaBhvJFf2lcd0bm3auv28ODSas9XRXEKlDZEspBatj5suIYCglpR86pEhem

XF5FCuAnE4ChxkxLwElDcM0Z7OCs6nBKxq5LtdsoIAOoCgJzRG/iS3C4pHkFHPByTOZJSuX6qEe

+9swLCLau4Ms+WyXHQfChQIozRRpDk1GlHobaSXD8EBCpe8cbF2z1nqVYOWrimaHQrJpE2KkvFY

spK4vVcWaG0nAZgsA0rf98mUuMBWEiJMXhlvwkZE4ndW8l+0MyxBWX4yqtTgZis0vp3Rz027gYY

23rQKk5Bsi7LxCHQGoQOL01XV+J/MRfWskDbQ==

X-Received: by 2002:a17:90b:2c90:b0:3a8:1a1a:7895 with SMTP id 98e67ed59e1d1-3a87350ac2emr461501a91.18.1791291499583;

Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Received: from [10.203.1.48] ([43.167.223.122])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3a853cafddesm7101151a91.10.2026.10.06.05.58.18

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Message-ID: <6ac4f06b.0a1c4297.15ce81.c8c6@mx.google.com>

Date: Tue, 06 Oct 2026 05:58:19 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============0833806656785191990=="

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: We updated arrangement No #34399956

Importance: normal

Priority: normal



--===============0833806656785191990==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













































--===============0833806656785191990==--