Paypal cryptocurrency phish from Google gmail

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 08:19:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xObpP-000000003vJ-20FV

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 08:19:03 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 08:19:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f173.google.com ([209.85.210.173]:60893)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOaQE-00000000HgX-3z0i

for doctor@nl2k.ab.ca;

Wed, 04 Nov 2026 06:49:03 -0600

Received: by mail-pf1-f173.google.com with SMTP id d2e1a72fcca58-8a058f74a54so249183b3a.1

for ; Wed, 04 Nov 2026 04:48:05 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793796478; x=1794401278; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=HKRyxb5qRmUndd/WRRcn0w+5EZKedItxjHwDatFxMaM=;

b=CrAm6Zw8RfIeKENS2xzQ1jBJsbyyaa8iIDzCUNhs+CVdC18kiSx1uwf+kdsc3CYPvx

hxcREtDZ4rWXONCo9gI9MrgjpeEduCI1iknWTcvGSwxtVcScCGK4iiLxG4Yy4ksf0sP1

RhguVA1hIFDlbDwZTCRve9oplf3mt2ZcN3iaczIv8KJu0PWFbpdDApFqk+zKLhCsKdJD

FhW031f8J74jrOqGOpGl/PaUBvIo7HEDeK+b+HtcfPYNMU2xavBWohWMb8OvyL+klrBr

+e+e9zQM88wJmG7E+rhPxIJ5eNbPGjwr8NHuKHMZ8EylEyU2As4Xhci9j+kQG6RMrfvM

KT8g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793796478; x=1794401278;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=HKRyxb5qRmUndd/WRRcn0w+5EZKedItxjHwDatFxMaM=;

b=wlawTl7Lr/C85QQ1VZssz6NKKuWm4uT1ZBekpxLLiccAJgzgkAz7lVS2Yi5bvdvzOc

l6529vVgn1bDY4gO8Ugkuq5CTMyj3vNaNX9pKqHm5lp8CHcGgiHQm/5OfxTEQ0xMriDM

+NazXxV0zCGbVGLp7MiLlBXWiQcY7moX8QkSq2ciuIgsgjQw8aZ6jCnBCaCCIWevwHbr

i8119DNPuydmJbaxNhF9iq8e8dI9MSwbwZANiYWV7xENp5UtHV7DIt3FXoFsek5ZJaTt

WOgj6cgO6U7KifD77VbIZ9hFQ9kitozv3rktjkMTrgzwZ0TeAZ0nvUgds1iw1ovl4Dtg

BbVQ==

X-Gm-Message-State: APuU4Z8cU/0G5ZUd2/kH9HQBpVZTkJAbjvy+PYQazgfbIaQuwn0Lo8Iy

WzHYJf1Gy96jH3EwJfzak0DWZDaMqT6ItZTsvJ7exMwSHI8fKiR1Dl9WtNZLQr9Hb3gxQBPN

X-Gm-Gg: AYBFou3XypumNsgHtn0rCyfShX4QPkb8SEyH7Yaf/OgbR5ALhRDK+F2h4JTWjrZIPol

bE/rv5RzeMOvtRscsS5M8LaCdBoXf9aZR+a01Qs2mv3UORb0Ym7Q9IhVD4ePVTNRMFPlOv8/xT6

H+KM6YZ8midCHEvJM77ACunrNLUw+0NBCZaWYSgupDuDw3rOwu5aHY9jIUPDvWFs2Y2wBheaPD0

+Bfd6YCV2ju7dvQUzD18RSa1Ko+6kdlfeg+F89EumwaSxQZPf7J4/U3Uy9lMJV8W9ehBJ/BJLcX

fSLK6IQ7yx/AGZ/inslQyyBiICqmvqPrN2MBCbT4lE82rGJeE1oTWo7FEkOcLMXxYet9l0s3Kt3

rhOy2nvSHVDxhPfV2h02c0PuNGOXL62WBJffOQQwrpwyVHD9AHFeutYHL7PuqLnX9hmrFlXjRIB

1Y/9KJgKn6+xFK/kcuIJ0oDe9JW5yWNNbS6r5ylUTN07wVarqbuZaZn7Kl53+KTaKVg0pEKY0FZ

oLCxZukksn8K2CeZ01L+ML02Xshst7uPll9luWjmbXmN1dEcLPi8joO9nXEDd8Jpk/wibHik96m

q1kyi+gkUg==

X-Received: by 2002:a05:6a00:1813:b0:89e:ba55:119a with SMTP id d2e1a72fcca58-8a9bffd4f4bmr13236967b3a.47.1793796478081;

Wed, 04 Nov 2026 04:47:58 -0800 (PST)

Received: from [172.22.32.131] ([43.156.152.206])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-8b09b569437sm851703b3a.34.2026.11.04.04.47.56

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 04 Nov 2026 04:47:57 -0800 (PST)

Message-ID: <6aeb297d.061e5658.1a9478.eaa3@mx.google.com>

Date: Wed, 04 Nov 2026 04:47:57 -0800 (PST)

Content-Type: multipart/mixed; boundary="===============8060678749207651036=="

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: You have already paid for Your Invoice 99698778

Importance: normal

Priority: normal

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: PayPal Purchase Date: Wednesday, November 04, 2026 Invoice

No: 99698778 Product Id: 424Z50KPPUAQ19

Content analysis details: (7.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.173 listed in dnsbl.ahbl.org]

[209.85.210.173 listed in dnsbl.ahbl.org]

[209.85.210.173 listed in dnsbl.ahbl.org]

[209.85.210.173 listed in dnsbl.ahbl.org]

[43.156.152.206 listed in dnsbl.ahbl.org]

[43.156.152.206 listed in dnsbl.ahbl.org]

[43.156.152.206 listed in dnsbl.ahbl.org]

[43.156.152.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.173 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.173 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.173 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[imranabcd93(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[imranabcd93(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.173 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.173 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_MXG_LOWER_HDR_SPAM Lower case header spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} You have already paid for Your Invoice 99698778

--===============8060678749207651036==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

PayPal

Purchase Date: Wednesday, November 04, 2026
Invoice No: 99698778
Product Id: 424Z50KPPUAQ19

Payment Transfer Confirmation

Dear Doctor,

We received a request to process a transaction using your PayPal account. If you authorized this transaction, no further action is required. Your payment of $1,356.08 is scheduled to be processed today.

If you do not recognize this request, please contact our Customer Support team immediately so we can review your account activity and help protect your account.

Cryptocurrency Purchase Details
Cryptocurrency: USD Coin (USDC)
Network Type: Optimism Network
Asset Type: Digital Cryptocurrency
Wallet Address: 4276d1cc-ebb3-4c96-828d-714f5c0509a5
Quantity Purchased: 0.013
Transaction Fee: $00.0
Total Purchase Amount: $1,356.08
Payment Method: Bank Transfer
Transaction Status: Completed

Security Reminder
For your protection, PayPal will never request your password, one-time verification codes, recovery phrase, or banking credentials through email, phone, or text message.

Kind regards,
PayPal Gateway
+1 (582) 245-0238

--===============8060678749207651036==--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Thursday, November 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:13:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZs5-00000000MHk-2HeA

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:13:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:13:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f72.google.com ([209.85.161.72]:45324)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <2020100321@ucss.pe>)

id 1xOZ4R-000000000hC-3huA

for doctor@nk.ca;

Wed, 04 Nov 2026 05:22:25 -0600

Received: by mail-oo1-f72.google.com with SMTP id 006d021491bc7-6df538053fcso619028eaf.3

for ; Wed, 04 Nov 2026 03:21:30 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ucss.pe; s=google; t=1793791284; x=1794396084; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=SBFeIas14nU0jNiqNVSnLk3w9aj/hID/JLcPr52TMRw=;

b=TBur4JKs+rYUNhxLY+jnp/5TaQ58vxpmmJCn/SQgmnogoZLi6BvGigcK+OWcdtIX5T

E+PHQH0JGPPOPrHle0ag4fKu4axek/U9XUcbSZD13A86MfasixH6tE2Ae/nSEYzR63wQ

fsKEoEyPk7AFxxAGUMvgIxQkihNV/mGJNZ/Vf9PjJCNge/386/h0auLkEAsA4SQ6Fn6p

TlRH0YM1fLuZs9svU/MSCcK6WPCm6ASEp5D7a6X/+dPWht9Ld3b+GZxufBcfjBIubVLt

MqYZP+/84VjhXEAhIEEuAu4Z+USyhXe1+Xy7qZIq/L3cGB0LpCB6axRJ6UA80pk4FxZ2

z8eA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793791284; x=1794396084;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=SBFeIas14nU0jNiqNVSnLk3w9aj/hID/JLcPr52TMRw=;

b=2oR/JUS659XI+8p6wR+ZgabUx5tpFiUmdy1oypXu8Le0IHJuD7pY4wHMD8Bp8xySsP

0wvMzYoLNvYP+WvwnIu4q1Pnnlz/RdqfuYmMtyuovoRWb4ivDqLM6woyy2Utvcqbnew5

1x7be3Gx6PNQFpILbwpsRlxofcm7CcHFUrjfZkIpEcbSIJqFhkVtgNs7jrSZH3zmo/5g

AYa1ViVcGXJ/6FC+bwHvRLiLFXlQ71iYIYfs5HD7hld8xkuRfEF6dqI9J66x/X64QZGW

dEKFPGk00/lZEJXc29k9TUf7nz4NyAHQ+zlSyyfxpUJ5WpjIoBDRXNXEJY+dPMHvLBt0

c7VQ==

X-Gm-Message-State: APuU4Z/FM0ADJxbPa+uuA3k9LuJNMGWmvwwAXWrStBqR89nAoi/hlb9d

Lked9emurAZb4t9f/s33aS1PTAhquKj9jpavIGjOcgNO1dn0OuBG1Ks9NGusyKoXXgswad3HaZ1

fP4Upx9zNZ9yOhZZDX8Uh3tzh

MIME-Version: 1.0

X-Received: by 2002:a05:6820:5717:20b0:70c:302c:41fa with SMTP id

006d021491bc7-714f29e6f63mr5990643eaf.60.1793791284098; Wed, 04 Nov 2026

03:21:24 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 11:21:24 +0000

Subject: =?UTF-8?B?VGVydWdsZXZlcmVuIHdvcmR0IGR1dXJkZXI6IHNsYSB1dyB6b25uZXN0cm9vbSB6ZWxmIG9w?=

From: Energieopslag Loket Nederland <2020100321@ucss.pe>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004a47c8065f7194e3"

--0000000000004a47c8065f7194e3

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

TmV0YmVoZWVyZGVycyByZWtlbmVuIHN0ZWVkcyB2YWtlciB0ZXJ1Z2xldmVya29zdGVuLiBEYXQg

YmV0ZWtlbnQgZGF0IHUgIA0KYmV0YWFsdCBvbSB1dyBlaWdlbiB6b25uZXN0cm9vbSBhYW4gaGV0

IG5ldCB0ZSBnZXZlbi4gRWVuIHRodWlzYmF0dGVyaWogIA0KbG9zdCBkYXQgb3A6IHUgc2xhYXQg

b3ZlcmRhZyBvcCBlbiB2ZXJicnVpa3QgJ3MgYXZvbmRzIHpvbmRlciBleHRyYSBrb3N0ZW4uDQoN

CkNoZWNrIG9mIHV3IHdvbmluZyBpbiBhYW5tZXJraW5nIGtvbXQgdm9vciBlZW4gdGh1aXNiYXR0

ZXJpaiB6b25kZXIgZWlnZW4gIA0KaW52ZXN0ZXJpbmcuDQpXb25pbmdjaGVjayBzdGFydGVuDQpV

aXRzY2hyaWp2ZW4gwrcgTmlldCBtZWVyIG9udHZhbmdlbg0KDQo=

--0000000000004a47c8065f7194e3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

Netbeheerders r=

ekenen steeds vaker terugleverkosten. Dat betekent dat u betaalt om uw eige=

n zonnestroom aan het net te geven. Een thuisbatterij lost dat op: u slaat =

overdag op en verbruikt 's avonds zonder extra kosten.

Check of uw won=

ing in aanmerking komt voor een thuisbatterij zonder eigen investering.

y:inline-block;background:#2d6a4f;color:#fff;padding:12px 28px;text-decorat=

ion:none;border-radius:4px;font-size:15px;font-weight:bold">Woningcheck sta=

rten

oralweb.click#t/u/dd77f32df6eea1557c2f" style=3D"color:#999">Uitschrijven
a> =C2=B7
=3D"color:#999">Niet meer ontvangen

ight=3D"1" style=3D"display:none" alt=3D"">

--0000000000004a47c8065f7194e3--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Thursday, November 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZrm-00000000LN7-2spk

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:13:22 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:13:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f199.google.com ([209.85.214.199]:55510)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <1602044@esan.edu.pe>)

id 1xOYlH-00000000PJc-09lF

for doctor@nk.ca;

Wed, 04 Nov 2026 05:02:38 -0600

Received: by mail-pl1-f199.google.com with SMTP id d9443c01a7336-2e954d87b48so8640415ad.2

for ; Wed, 04 Nov 2026 03:01:41 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=esan.edu.pe; s=google; t=1793790095; x=1794394895; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=uIYz4en9itKFJ4wHZQ6fCUK8QaM3ZI1SWNKZgjUHJ08=;

b=LrTSEnTzitaQVnBJ/nj5wXUKKusFBKmTQ/2HYydxxfhTheSllB0zr0tFYGmCwsCc02

kK11t6QP+gFWeQVCaZxtpGoDO7pPv0WDVrJ3Qw4BxQcukrJffl4A6iL8l+zrANHdNY+j

nVSjgEnM098raN8Uhnc3ENON/03OQLg4yAHclhAX/DyZL1FEuSeiKw3TPmtY82iN3W1A

sAQvCc9nOd05DMKwVHPVKauQcDOcg6/RsqVHYzmbdhkfi6oMb/kUZcpzBVt5GGhPLhp/

BT4my0h94H/mMgoiMAx3iPpnWg2iljW11ewb2s2eDd271pU+MQNcu/9qCRTXUGRVHutM

n2Gw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793790095; x=1794394895;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=uIYz4en9itKFJ4wHZQ6fCUK8QaM3ZI1SWNKZgjUHJ08=;

b=y+BjqlAYs489TJHeKedKeQlQcwbDNygrGmJVlOQxmMBgqldLvhzAoMWlLZ8hVzuAbb

VxYTcZYt0lC9M1ou9DgTTZ/+nHeHQNQq9Vx82tWwghMOudPLLQLjjkw6zZ9PH8gE2zN7

KgcttPtwGPzJKlT0P8PMqw/TJqwAn5HrcR3hlOKhcu1ILGm1G78E9VSuTLDTZYTfAtnB

c/+8YI9pZTUEAjNMIVykb7c8tIR5g0GmMHMRnGxW2ky3TmeQJMAXMz014CumVqOCZWWl

qN5L5lDSru0xAlpsOpv7oK79F57gtYJPHUq4Cm1GYYnj/Q8PwKLDKzbOhZuLvX2A1Qfr

JYyA==

X-Gm-Message-State: APuU4Z+uW+r9wBuK3EOCWP+j00AsLP2LxLEXsK1AoeJeH5QbpON2JQET

R/qKqA4+kmatmSgChA0DwGqR2P5NBi8artee22FgXHBC5oaLw7HouKe664520mt0D9gMTZDoGBk

HNjInDctk2+74yThHSIVXCSc=

MIME-Version: 1.0

X-Received: by 2002:a17:903:11c7:b0:2e6:1715:e48d with SMTP id

d9443c01a7336-2eb36716f0amr148957755ad.35.1793790094869; Wed, 04 Nov 2026

03:01:34 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 11:01:34 +0000

Subject: =?UTF-8?B?RG9lIG1lZSBlbiB3aW4gZWVuIFBsYXlTdGF0aW9uIDUgU2xpbQ==?=

From: Nationaal Telecom Onderzoek <1602044@esan.edu.pe>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000681d76065f714d4e"

--000000000000681d76065f714d4e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

SGV0IE5hdGlvbmFhbCBUZWxlY29tIE9uZGVyem9layB6b2VrdCBub2cgZGVlbG5lbWVycyB1aXQg

dXcgcmVnaW8uIEhldCBrb3N0ICANCjEgbWludXV0LiA1IGtvcnRlIHZyYWdlbiBvdmVyIHV3IHBy

b3ZpZGVyLCB2b2xsZWRpZyBhbm9uaWVtLiBPbmRlciBhbGxlICANCmRlZWxuZW1lcnMgdmVybG90

ZW4gd2UgZGV6ZSBtYWFuZCBlZW4gUGxheVN0YXRpb24gNSBTbGltLCBlZW4gaVBhZCBlbiBlZW4g

IA0KR2FsYXh5IFdhdGNoLg0KDQpEb2UgbnUgbWVlIGVuIG1hYWsga2Fucy4NCk1lZWRvZW4gYWFu

IG9uZGVyem9law0KVWl0c2NocmlqdmVuIMK3IE5pZXQgbWVlciBvbnR2YW5nZW4NCg0K

--000000000000681d76065f714d4e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

Het Nationaal T=

elecom Onderzoek zoekt nog deelnemers uit uw regio. Het kost 1 minuut. 5 ko=

rte vragen over uw provider, volledig anoniem. Onder alle deelnemers verlot=

en we deze maand een PlayStation 5 Slim, een iPad en een Galaxy Watch.

Doe nu mee en m=

aak kans.

y:inline-block;background:#6c3fa0;color:#fff;padding:12px 28px;text-decorat=

ion:none;border-radius:4px;font-size:15px;font-weight:bold">Meedoen aan ond=

erzoek

ebrot.digital#t/u/73fca3f7b6e1622da8ea" style=3D"color:#999">Uitschrijven
a> =C2=B7
=3D"color:#999">Niet meer ontvangen

ight=3D"1" style=3D"display:none" alt=3D"">

--000000000000681d76065f714d4e--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Thursday, November 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZrT-00000000KUl-3NcE

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:13:03 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:13:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f198.google.com ([209.85.210.198]:47212)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <2506172055@uladech.pe>)

id 1xOYSM-00000000Nmn-2gol

for doctor@nk.ca;

Wed, 04 Nov 2026 04:43:04 -0600

Received: by mail-pf1-f198.google.com with SMTP id d2e1a72fcca58-8a05bfa6af5so653729b3a.2

for ; Wed, 04 Nov 2026 02:42:07 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=uladech.pe; s=google; t=1793788922; x=1794393722; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Wsvzvq1Xa6QO+YVw8lkPtFd9zBdsgdFv8tncwI+K9k4=;

b=Bnh5xdKsiG5fRpPGDTgBB9qnMU5HLh0arg+fE13JX85tHX4WDy4GzmytLVC+uCK9eb

VyRxYq+bXmPmkNZYppJ+uC2805Tq2e1sPuii7VIKD/JVRagWp40BpQf1gQ9moizdbKlg

wg9DIBkindzuGuyI9/aWlTOcTQHEwUjTugCsw=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793788922; x=1794393722;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Wsvzvq1Xa6QO+YVw8lkPtFd9zBdsgdFv8tncwI+K9k4=;

b=pMy9EhNF9HIRAo4DIxm7ZK7+CNTQCAIsRuSMFsL+ozOwoe81F4QFZHLyNNvJYKrOOC

jMSEAQ29ttxE4eA9VC4524NBtQw86L81EUPykk612Rv3x1M9PyP3xuS2pngPecNjBbEC

kUlnNvtHFviFhGKcmhbhyrv3Irz6MdbjlRB6StKy+1syrprImVTuDoMJ0TWV1zX3SMYi

zDTSQk+g4O6eQspDWThTXmbZ3L1J4tfLOXAqFXmmueGIEW+QFFBh03hhGJzPSWFuwXOs

x9TkGraZqTxVsCMMcDWZMRjHWakhZ2mZOzmEDqrxPMS1fAKsF3bNehhWH/0C6kBhwTeW

u33w==

X-Gm-Message-State: APuU4Z9fpxlyDgXRra0jwLdlYA7u3UUemz8f2PFr2enJv0CGFTpUPV3G

oW37eiiyA7pRTV33zxPCzKysTcclDQ4Jpt60DWGNiLutNNBkUWeahcSzBb95jbmS6h3Tx/V/BmU

Hz+XtMTFhMS73N6Bw3Zqbng==

MIME-Version: 1.0

X-Received: by 2002:a17:90b:4c52:b0:3b0:a4d1:6d7a with SMTP id

98e67ed59e1d1-3b0a4d1700dmr263005a91.31.1793788921853; Wed, 04 Nov 2026

02:42:01 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 10:42:01 +0000

Subject: =?UTF-8?B?VXcgZW5lcmdpZWNvbnRyYWN0IGxvb3B0IGFmOiB2ZXJnZWxpamsgbnUgZW4gYmVzcGFhcg==?=

From: Nationaal Energie Collectief <2506172055@uladech.pe>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000007d4bcf065f7107b9"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Veel energiecontracten worden stilzwijgend verlengd tegen

een hoger tarief. De tarieven zijn dit najaar flink gedaald, maar dat voordeel

krijgt u alleen als u zelf actie onderneemt. Overstappen kost 5 [...]

Content analysis details: (5.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.198 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.198 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_IJ BODY: Odd Letter Triples with IJ

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.198 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.198 listed in wl.mailspike.net]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?B?VXcgZW5lcmdpZWNvbnRyYWN0IGxvb3B0IGFmOiB2ZXJnZWxpamsgbnUgZW4gYmVzcGFhcg==?=

--0000000000007d4bcf065f7107b9

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

VmVlbCBlbmVyZ2llY29udHJhY3RlbiB3b3JkZW4gc3RpbHp3aWpnZW5kIHZlcmxlbmdkIHRlZ2Vu

IGVlbiBob2dlciB0YXJpZWYuICANCkRlIHRhcmlldmVuIHppam4gZGl0IG5hamFhciBmbGluayBn

ZWRhYWxkLCBtYWFyIGRhdCB2b29yZGVlbCBrcmlqZ3QgdSAgDQphbGxlZW4gYWxzIHUgemVsZiBh

Y3RpZSBvbmRlcm5lZW10LiBPdmVyc3RhcHBlbiBrb3N0IDUgbWludXRlbiBlbiBiZXNwYWFydCAg

DQpnZW1pZGRlbGQgNDgwIGV1cm8gcGVyIGphYXIuDQoNClZlcmdlbGlqayBkZSBzY2hlcnBzdGUg

dGFyaWV2ZW4gdmlhIGRlIEdlbWVlbnRlY2hlY2tlci4NClRhcmlldmVuIHZlcmdlbGlqa2VuDQpV

aXRzY2hyaWp2ZW4gwrcgTmlldCBtZWVyIG9udHZhbmdlbg0KDQo=

--0000000000007d4bcf065f7107b9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

Veel energiecon=

tracten worden stilzwijgend verlengd tegen een hoger tarief. De tarieven zi=

jn dit najaar flink gedaald, maar dat voordeel krijgt u alleen als u zelf a=

ctie onderneemt. Overstappen kost 5 minuten en bespaart gemiddeld 480 euro =

per jaar.

Vergelijk de sc=

herpste tarieven via de Gemeentechecker.

y:inline-block;background:#264653;color:#fff;padding:12px 28px;text-decorat=

ion:none;border-radius:4px;font-size:15px;font-weight:bold">Tarieven vergel=

ijken

ebrot.digital#t/u/ad134a217f6d325e4ec8" style=3D"color:#999">Uitschrijven
a> =C2=B7
=3D"color:#999">Niet meer ontvangen

ight=3D"1" style=3D"display:none" alt=3D"">

--0000000000007d4bcf065f7107b9--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Thursday, November 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZrO-00000000KFS-0Vu4

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:58 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f70.google.com ([209.85.216.70]:51468)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3EAfraggRBikOFQJRFSHZHaaNWYZFQ.JIZ.UJITHYTWSP.HF@maestro.bounces.google.com>)

id 1xOY84-00000000M2t-0GSQ

for doctor@nk.ca;

Wed, 04 Nov 2026 04:22:05 -0600

Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-3ac8f449d1bso486053a91.3

for ; Wed, 04 Nov 2026 02:21:10 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ucvvirtual-edu-pe.20260707.gappssmtp.com; s=20260707; t=1793787664; x=1794392464; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=bP8q8CPiS3l5XwQ2C/AZjsMwHmKi5IUfNsyyGmKbIcY=;

b=K8Jvy9ALLfUGHrcStbdKzOHYZjnxg5q699YqM7UV1c7ysazMpWOm/X666652btcehU

6R9wUhcOaaJ2R7dsyFYO7s7bI1nJ2mbqPBk8eaR1t8t4nx42cTL0fim6X3zbu2kAx0md

OYh9iGvwigFdDRGEO6MgSCFATkaNCeLW0J38L+OZRsoorvOFbHMa3dSAXU/skcAtpDD+

ndPH2B42sZm9rxBYMyfcUbAuaHC0nXYES4rPWiWMDu5gbtN5SBHKdN4B+f2sRY5c7kbZ

Kck0yZmav3Hzk6aZTNEnLIGIMSE3VLM57zduJ7LSI3595yFB5LPG2idXRXEynbMOu1F+

nQRQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793787664; x=1794392464;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=bP8q8CPiS3l5XwQ2C/AZjsMwHmKi5IUfNsyyGmKbIcY=;

b=YfhdN+CdaGHV4N+N0ZnTmKsAzv4D+XSnuTxTuE65wDIt72YgPPjx9FfbKfovJAVNFS

C4oImZs8jRZ0iXiNq/0i7J/DT6LAA1AurIpSLCjwSIsoRZuVxyVv5xNaiPC8E5AfPkX8

lXkzoMVVmDaBeGwciHXdYTKC8sRGYaQCndoS+U/obccwqTVAFpXj1N5kOXJsVqmmASRq

0RR7ANe5D2rcxuw9N1MpgTB9vJJeThBFrFLVSLKbIjbfHDfeqx2ykaOK7xLZ8xzKSW0W

fH4+vErdmfgrjGYPdpaQzgugvY819HhKxe8PVudVBr9kelxWjqQBHw1IGM+mYI1Ud8Ms

fqdg==

X-Gm-Message-State: APuU4Z8jOCqtPfU7dDXy8SOkBDJ+yYzU5ouIHjc2Sc8hIUGJ/NWAkXR8

NKuzVtw0lx/e1of5uOd5H/Qau51BrrkgFnoR0fhEYCWpL6NJkP1b0ecpVp11+tpBz0KkhLASRJD

D1RVowobZT7BsCU1f7kPJ2/Hu

MIME-Version: 1.0

X-Received: by 2002:a17:90a:dfc4:b0:3aa:fdad:7d6c with SMTP id

98e67ed59e1d1-3ae897c190bmr13319653a91.58.1793787664127; Wed, 04 Nov 2026

02:21:04 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 10:21:04 +0000

Subject: =?UTF-8?B?RW5lcmdpZXRhcmlldmVuIGRhYWxkZW4gb3BuaWV1dzogYmV0YWFsdCB1IG5vZyBoZXQgb3VkZSB0YXJpZWY/?=

From: Tariefwijzer Energie

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000085f3ba065f70bca5"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: De energiemarkt is opnieuw gedaald, maar uw leverancier past

het tarief niet automatisch aan. Als uw contract ouder is dan 6 maanden,

betaalt u waarschijnlijk nog het oude tarief. Het verschil kan opl [...]

Content analysis details: (5.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: cozyday.click (click)]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_JN BODY: Odd Letter Triples with JN

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.70 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.70 listed in wl.mailspike.net]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.70 listed in bl.score.senderscore.com]

Subject: {SPAM?} =?UTF-8?B?RW5lcmdpZXRhcmlldmVuIGRhYWxkZW4gb3BuaWV1dzogYmV0YWFsdCB1IG5vZyBoZXQgb3VkZSB0YXJpZWY/?=

--00000000000085f3ba065f70bca5

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

RGUgZW5lcmdpZW1hcmt0IGlzIG9wbmlldXcgZ2VkYWFsZCwgbWFhciB1dyBsZXZlcmFuY2llciBw

YXN0IGhldCB0YXJpZWYgIA0KbmlldCBhdXRvbWF0aXNjaCBhYW4uIEFscyB1dyBjb250cmFjdCBv

dWRlciBpcyBkYW4gNiBtYWFuZGVuLCBiZXRhYWx0IHUgIA0Kd2FhcnNjaGlqbmxpamsgbm9nIGhl

dCBvdWRlIHRhcmllZi4gSGV0IHZlcnNjaGlsIGthbiBvcGxvcGVuIHRvdCBob25kZXJkZW4gIA0K

ZXVyb3MgcGVyIGphYXIuDQoNCkNoZWNrIGluIDIgbWludXRlbiB3YXQgaGV0IGxhYWdzdGUgdGFy

aWVmIGlzIHZvb3IgdXcgc2l0dWF0aWUuDQpUYXJpZWYgY2hlY2tlbg0KVWl0c2NocmlqdmVuIMK3

IE5pZXQgbWVlciBvbnR2YW5nZW4NCg0K

--00000000000085f3ba065f70bca5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

De energiemarkt=

is opnieuw gedaald, maar uw leverancier past het tarief niet automatisch a=

an. Als uw contract ouder is dan 6 maanden, betaalt u waarschijnlijk nog he=

t oude tarief. Het verschil kan oplopen tot honderden euros per jaar.

Check in 2 minu=

ten wat het laagste tarief is voor uw situatie.

:inline-block;background:#14746f;color:#fff;padding:12px 28px;text-decorati=

on:none;border-radius:4px;font-size:15px;font-weight:bold">Tarief checken
a>

ozyday.click#t/u/2515815d8290e3ee2e42" style=3D"color:#999">Uitschrijven
> =C2=B7
=3D"color:#999">Niet meer ontvangen

ght=3D"1" style=3D"display:none" alt=3D"">

--00000000000085f3ba065f70bca5--

WEb/SEo/App spam from Microsoft outlook

Posted by Dave Yadallee on Thursday, November 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZrD-00000000JnW-3e23

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:47 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012062.outbound.protection.outlook.com ([52.103.66.62]:5731 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOXtL-00000000Krw-42xG

for root@nk.ca;

Wed, 04 Nov 2026 04:06:56 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=M3N2xCq4kPFAdxkYT7qRLXy4TIDkOMU7zBsHvrHVgiKIMLfH1CzF+yuHavJ11VVSrm9l+9ZPXIBS/Zz+RNNlANvncqQ7BXuIxZGiV9WlsG40s8M6UF9+C4V8kcXwc/LDFZT1D/AC2H5lFJQZ/nTpeErps4Bm8Y3mSJ+Wfbhuz/jOokNiUvmrFashMGabrVd3gfNOpfVyOWO1DNBWEKRM89Oxeob4MJ3OetphHIiyVErozwxYRnVM14ls2Ni1mkI6tTil4+C3GbNVZtvafhd6CUvMdT6HHJojB4NkxUsrVTVOo7qtmk/mcCD6sM4GtJUQNSiV70QOprDyF9ldbpj8dw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=+RZ8w6+Y/NeXReBK/KWMiL8axwWJB/lz3qcwG/thMjI=;

b=uqMPRbZtzKbesACgowtUbZ1K/VA8UHz8ABiXSvuvwLlwePw+ilNQc3Sp8EgN9IUUe8mya4kdAVCJPez3S2C4xuBsASPNVkaZiGT3EfYGenP4hikopiUJKKmCZTVpLuxYOTHmWLGaMkvg8hbYYwyHVvyxjnWWIQ4ygI04qTOmyjfsWrm0M993CzN5rWBFVrt2TzHLyk+2XlrePjxw2HAfGJJNh5+hs7jZMsLDzgD9isuQhJ5PdvajBAI9qOD9wKZbBXZkfOir08wwbUEXMBE9gsD+YVsuNB+SS8QTxcf2FUgf4LphBYSDemOBDGrLj45X6+cNcUC7DKfr3MvqUphA/g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=+RZ8w6+Y/NeXReBK/KWMiL8axwWJB/lz3qcwG/thMjI=;

b=eDB5qzWebc10Yot4SveMdiBtajR0Vn1YMoLOF6miAK1+hOQc2HPGnUnu4QahrACmEQLMgtjDcyBIYB6onX6dif0vYoM+FidGPiKbIpFgokmR8Cy2OoCjv6RAkfT3V1M6qNSBJ8QU3ezQTaIpq/Mn5R5pLExQycSBI+GSAECUB8jFsPkbBoVdLqrRKcTYh00jBT8fIg//pi7EELsui1evChj7u7I7hgfQbmSrmnPb0wBGM4uOtiwEJjgf+fbuwjtyJuHSQ/Jl4D7Is6NiNs+kX7B+IBXKd9EWEglU2S7A9TKT/7knCW3ru11ChUxFlfFiEw87Gv4ehgPyb4c4ErI6OA==

Received: from OS8PR01MB6858.apcprd01.prod.exchangelabs.com

(2603:1096:604:2a6::10) by SEZPR01MB4230.apcprd01.prod.exchangelabs.com

(2603:1096:101:38::12) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.8; Wed, 4 Nov 2026

10:05:25 +0000

Received: from OS8PR01MB6858.apcprd01.prod.exchangelabs.com

([fe80::e530:a439:a6a8:4ccf]) by OS8PR01MB6858.apcprd01.prod.exchangelabs.com

([fe80::e530:a439:a6a8:4ccf%5]) with mapi id 15.21.0569.011; Wed, 4 Nov 2026

10:05:25 +0000

From: Orpha Tisdale

To: Orpha Tisdale

Subject: Price....?

Thread-Topic: Price....?

Thread-Index:

AQHdYsFfDOqRLC9LyUOrreX3TMKNPrcK09ltgAAYlUWAABKOboAAE537gARjb2CAABTVmIAAF6jLgAAVa6GAABKJPoABOz90gAAVwgWAACzag4AAE7o9gAE8I2OAABa8cIAAGi4zgAAUBwGAABLxPoABOG+XgAAWgTeAABtj+IAAGHL/gAFHrJSAABfnJYAAGSd+gAAncPeABHg/xYAAI/DNgAAVl++AAUGTg4AAEwAmgAAXb5mAABU5ooAAFU5agAE5kgCAABZgIYAAFyqY

Date: Wed, 4 Nov 2026 10:05:25 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OS8PR01MB6858:EE_|SEZPR01MB4230:EE_

x-ms-office365-filtering-correlation-id: 4e62843f-6ea5-4e89-cc05-08df3a5b257e

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|8062599012|8060799015|25010399006|15001099006|16051099003|55001999006|4140399003|19110799012|15030799006|15080799012|2604032031799003|22091999003|37011999003|24121999003|39105399006|24021099003|51015399003|40105399003|26121999007|18071099003|102099032|3412199025|440099028|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?P8UEzHHrsBuVgUtv9tTXpAqgPt9wmeClU6wF6mUfSO67pwI3IxiY3Xdc?=

=?Windows-1252?Q?QoyVLEwEkLsUJG0m2iuYWHKiBSxD5rz8guzoWl2sbCMCcAKspkA6aW4g?=

=?Windows-1252?Q?f1y65NRPCC1KxG83yMdHu87HkyfjldtjIzLOAtAy9c1jEgwuPjcURgDa?=

=?Windows-1252?Q?yjw7YK45KtZtexWpDKfub1+kQXybBLVylP244QTb599e0j93H3WHBa1B?=

=?Windows-1252?Q?/07fymTAbEd2QNhdqayPUcgUEia/R5e35JsJkgmCwC6b54wy+9KAbecT?=

=?Windows-1252?Q?kwPD4TEKZ+5Qf1rrnI6lwXcIrWKi1zAJDEDnpJPtaH+9e4ACIFeUoYFp?=

=?Windows-1252?Q?GsNYH5h1DmGqHTD5w1xkD869SsLWeTGq4SyeOrCJ4T04BsbYYryFE6UT?=

=?Windows-1252?Q?rEDjs0anUoX1+iHedh/CHAkjtzblrdZ01NtE2GKXyPWfiEmzUCtzrhOV?=

=?Windows-1252?Q?Ny4NakasJ6st9WD3T+V/cQdx5IryFGoYWTcxJVW2gVmvd4d3XQbmM/Kv?=

=?Windows-1252?Q?NZeyoHNktIrcWpHH+fRk2pVjYzc6BQoCMhWdS3jCImbQOBuJFXXwpgcx?=

=?Windows-1252?Q?GwL6KXCJYttHyDMUBEO8d78rcf6aAKEjZYoBbmjekMe4NlGcXkPPmt9V?=

=?Windows-1252?Q?+Jxf4Ct/LAuyYJ5hPtd4SYwTKNdzoj0CBZqMOuNMeXAE69glgmXgxRj8?=

=?Windows-1252?Q?p/ISQYwGzCFlZWerxtfuD17jTT4eBxBZ1G0gBEvJlRV2+wrwqKopOZxc?=

=?Windows-1252?Q?W653DrVamex/IaLH2YtiIxD+rsir4HYGjQ7FMzzr/el3R9fjUkk0qSUn?=

=?Windows-1252?Q?XIFkKjGaGQRyGxVy809hL9f+3p+hqoFm+qgD8Y/Zpux+KvqNbwvt1Pde?=

=?Windows-1252?Q?LwWgWNDcKd9xnaeetjUgVA7GSa+S44CBI2ORU+jZR5NP+RIhpfmV5RZr?=

=?Windows-1252?Q?mzTLVRGiCRNprwWpgdEmk0aoXJCqIkmCU56MsHkfMVaLJmD3WTTNGP2V?=

=?Windows-1252?Q?qqcC9x3nCWBMKFOh9hWb/eSQZD4rYIRN/9NXVwLNdgaeO1wy1tLpyYyF?=

=?Windows-1252?Q?JJVK42NOibLbWApNV7TV8/yL2nDVCEaTHzlVJY1IAE/S1FCUReOA8TSf?=

=?Windows-1252?Q?D1+5Nsb80RVpkd/am3Zl57vSy+mihqVgqUIgl/ItyPH+etudVbRv42Vk?=

=?Windows-1252?Q?zQgnkUCWHLGmPe63LzQAUJKXYqC7jszDgiC5SjeDPdRhtM+K+qH30GLV?=

=?Windows-1252?Q?k1HblMEbB4gqabZCARuxCXAD1Rtt11jr/RTZyjbi0Kn8uoToTbEiVSmI?=

=?Windows-1252?Q?b2k5vr5eEAWTHUAjEKoeh9DOHu23BKjGd4e4kktiuNyenoZ86Xf+wz/I?=

=?Windows-1252?Q?b1ppP3WVzN20MLb2J5PUYot5EebNfMxp0bexYKr4dwbIbuDKynXqs/CK?=

=?Windows-1252?Q?WcfL8WkW4/SieR55mpWqeg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?h80Dg+WKzGYO7gtJQtD6bqVnAKu01FwTcHEo9OwvPGMiJBsJuYNGdagG?=

=?Windows-1252?Q?2LgGdROzh1S957YmfSTAW97xokF1f4cOIev0r6+E7CEArZ378HCVKq8N?=

=?Windows-1252?Q?VqgOzWkGg0zzWSiXpcG/grnzLZXF+btP/ksl4sTq1wEOLUlm84+h3AB6?=

=?Windows-1252?Q?sIwsdP3eUn4lIMaWSWlHGV7PmWfgh00SxgivS8nw1dGMaSLIfseBqdgQ?=

=?Windows-1252?Q?1gVhlEwtGmJ2WpDqmLo0SKs8qoUjobNi1e8bBKkAm4GThI4CgbOkUaWs?=

=?Windows-1252?Q?q0qGrI5pO0iGD4TtuZd0Z8J3MYKe05GXhxZexWp6h6LD7qidASPpP/sJ?=

=?Windows-1252?Q?SNhJ9CdtuHNz2WBg+LyjKkwcBXtJyH2ewFDD4n6FG30GGJ/yhtwN+2wU?=

=?Windows-1252?Q?PMB08CcmxRH/t/R1eI/+G/xaIoVkveIdbIY0LymoAkTJyOs+Tyzenbue?=

=?Windows-1252?Q?x0saxEkxO5PEFm2IvCUKcF1KIjesHkj065xV1UbeOX8W5t/c+til5gzB?=

=?Windows-1252?Q?2atzYSzEV9gp3AvGB5zXl9QlfQ2jC2Bd7Ryk9Bl43IiT3/78g0Eh+xxu?=

=?Windows-1252?Q?upXbYhKV6qdHtK5G5yGyGW38oZcSvQMPKtqa1HsKMOI7UDI0DakneRGn?=

=?Windows-1252?Q?UWYoKYSNVP9WC6tgJjW3Vzy/RIsJkJnEDdrg9eSbjnVXzJWcbh3hkPRL?=

=?Windows-1252?Q?Fj9t0SKxXS2i3BIypMCJXWOEfgugC3LFCyatG4B7w4vDTE9QrZh7GOwH?=

=?Windows-1252?Q?dw+NZptZaZSYp9hYRs71n41S6a1D4UJeozbUBbus/gA7C7VS47vYVxbu?=

=?Windows-1252?Q?JAFt+X3VirGncrFWzZN6yXpFSSUgO0qOvhDwOiAmLplGZDmZIXVPjOI+?=

=?Windows-1252?Q?/26XRldAEsT9nU14zbndNQRWRK7RGIXQJsx0ZVgu7CXkArlZ/Q6M2zeH?=

=?Windows-1252?Q?myJtRzOB5hHNs5r8uG9glfiENTataECiDK0a+Z/pmBtt+Ih8HTJ4OD7X?=

=?Windows-1252?Q?gIoiu1Lc6Q69IUUQf/YioQLcpg5Elt3sEqHGJpp4O2H51E+H+z+IMkOF?=

=?Windows-1252?Q?X6109rP+BH3zqVTUhnrRmHMiGua6NjTMfjTbHdGoBFGf57jB7wBDEW1a?=

=?Windows-1252?Q?MREJ/KJbQRyeR/c4O6s1/u20wN1zzpDQYwOO9IS+bWgA/vUTfYD66glC?=

=?Windows-1252?Q?004CdgpE2fADl0lat7EmL/I6dPwJ9IeyDbrwAMMzJPKwG2LSUk2Ux7uo?=

=?Windows-1252?Q?lggs1Ro/FDsBh3ICHZ6f4bWvzcBhS2oAIYYXs4FtmIUdm+J3XNgoO/qt?=

=?Windows-1252?Q?KWy1OvwKDFoKsI2bz8jWyB5vjLkWfM7L1ml6He7IfaHBWOsSRAlZnSjm?=

=?Windows-1252?Q?XdbUlj21e0LHWSj5lLbtE/7e3ORncA1P4qjJZE0fsYiJo6jIZKTusNnA?=

=?Windows-1252?Q?3lbNs+Dg303rFMIBTI7Oqy5q/xyl2pqHKn8/a8ZKkccNTHJLAXAeUPn7?=

=?Windows-1252?Q?aFUTytUs?=

Content-Type: multipart/alternative;

boundary="_000_OS8PR01MB6858E7FEFFF3CEE00551975CDA682OS8PR01MB6858apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OS8PR01MB6858.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 4e62843f-6ea5-4e89-cc05-08df3a5b257e

X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2026 10:05:25.4930

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB4230

--_000_OS8PR01MB6858E7FEFFF3CEE00551975CDA682OS8PR01MB6858apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hi,

Just a quick follow up.

Can I send the details?

Thanks.

________________________________

From: Orpha Tisdale

Sent: Wednesday, November 04, 2026, 4:21 PM

To: Orpha Tisdale

Subject: YES!

Hii,

I looked over your website and believe that both it and your company have a=

lot of potential.

If you don=92t mind, I=92d like to send you an audit report of your website=

and some suggestions for how to significantly improve your visibility in t=

hese search results.

With a few simple changes, you may double your organic traffic

Should I provide a quote to you?

Thank you!

Orpha Tisdale

--_000_OS8PR01MB6858E7FEFFF3CEE00551975CDA682OS8PR01MB6858apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

Hi,

_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

Just a quick follow up.

_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

Can I send the details?

_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

Thanks.

x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRp=

lyFwdMsg">

11pt; color: rgb(0, 0, 0);">

From: Orpha Tisdale <OrphaTisdale@outlook.com>

Sent: Wednesday, November 04, 2026, 4:21 PM

To: Orpha Tisdale <OrphaTisdale@outlook.com>

Subject: YES!

rgb(0, 0, 0);">

color: rgb(255, 255, 255); margin: 0px;">

color: rgb(38, 40, 42);">Hii,

color: rgb(255, 255, 255); margin: 0px;">

color: rgb(38, 40, 42);">

color: white; margin: 0px 0in;">

color: rgb(38, 40, 42);">I looked over your website and believe that both =

it and your company have a lot of potential.

color: white; margin: 0px 0in;">

color: rgb(38, 40, 42);">If you don=92t mind,

: 11pt; color: rgb(91, 136, 40);">I=92d like to send you an audit report of=

your website and some suggestions
ntia, "serif"; font-size: 11pt; color: rgb(38, 40, 42);"> fo=

r

how to significantly improve your visibility in these search results.
n>

color: white; margin: 0px 0in;">

color: rgb(38, 40, 42);">

color: white; margin: 0px 0in;">

color: rgb(38, 40, 42);">With a few simple changes, you may double your or=

ganic traffic

color: white; margin: 0px 0in;">

quot;serif"; font-size: 11pt; color: rgb(38, 40, 42); background-color=

: rgb(253, 239, 43);">Should I provide a quote to you?

d-color: white; margin: 0px 0in; font-family: Constantia, "serif"=

; font-size: 11pt; color: rgb(38, 40, 42);">

239, 43);">

color: white; margin: 0px 0in;">

color: rgb(38, 40, 42);">Thank you!

_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

_msfontservice, calibri, helvetica, sans-serif; font-size: 11pt; color: rgb=

(0, 0, 0);">

Orpha Tisdale

_msfontservice, calibri, helvetica, sans-serif; font-size: 10pt; color: rgb=

(0, 0, 0);">

--_000_OS8PR01MB6858E7FEFFF3CEE00551975CDA682OS8PR01MB6858apcp_--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Wednesday, November 4. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZqy-00000000J6a-0MPu

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:32 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f200.google.com ([209.85.215.200]:43151)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <171088@eru.edu.eg>)

id 1xOXXN-00000000J4H-1p24

for doctor@nk.ca;

Wed, 04 Nov 2026 03:44:11 -0600

Received: by mail-pg1-f200.google.com with SMTP id 41be03b00d2f7-cdb061cc4dbso1029981a12.0

for ; Wed, 04 Nov 2026 01:43:15 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=eru.edu.eg; s=google; t=1793785389; x=1794390189; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=H+9BzbJKH4GrS+wAWXndwPClX5AbYUmpxIrQUJASPWs=;

b=MjtOqomYyTItMod9JQTz8iXVqeFb3bu4zMlM1W26Ndka5QYq2vkUAXkWqxDijfHiHm

rXPsHIxTqgVy9HyPaDyoB+CK/lRd5AXZm+1oTrh1TF3+iPl7VnNHC6We12NHPENQd/PK

kIw+9v5nXQ4LknDgtD5ONej7pb6gYBLNZ+DBhtfVb0ysKN7DxeYghG//4udO8XhUH65C

j0G6jVT1aw/wfCFuscqoXTy8Rd1TNNe+xYXRVV1caLwl9yjmdNMUYvi911ckjKWvQwSd

37PDVLy3D2tsmCydpZQxVuLfAPCKdHmWdqGiDtOhFVxdk4smVK1450b40jBw/QFWkRxE

4LiA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793785389; x=1794390189;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=H+9BzbJKH4GrS+wAWXndwPClX5AbYUmpxIrQUJASPWs=;

b=dvoCRPbqobFaYv1YDbLoGjFuyRsmI0UZ7v5R5R+K6e///BaUnW5VE78o4NjdfvNFxu

LsfGTKcWG+GeOPl7omICkf1vMMx+EqXx+6GZcjEVkReYtr5bH3Bv+xbZJuX+wX7Y5os2

44VF3LyTRB8Xle0qbLdzw37KY4M+Mmgc7GIjDq6f8OCoxR/a+X1R1Dbhl6SoQ1pA9sQw

0WFg6yhtUtdxlKztnKTNiivj2IMzx/WV6/QzmV+4F8TeEPFV3XJLBmKPniKrM96wUFxw

/vxlTHJbwTGsF/1tM1oW9amyf51emVNvRDKy6BwGGks3AMXjjk3lzMV1pZ2ddM9PzboL

MpTg==

X-Gm-Message-State: APuU4Z8cYiUztyNoqxwNZz/XQ6s2yxNxxQ0RCEWjWB8JBHvXpo0m6B1t

vCXF/cE2Tit2BQRjG9p3On8nJQLfJTNJSiaTp72Hcu91jGZrzigHwcazAc0r/A2v3u+7HmWj2fE

sTWZFAGHgYXTB+lxmuAxZBhuz

MIME-Version: 1.0

X-Received: by 2002:a17:90a:e7c5:b0:3a8:337d:228a with SMTP id

98e67ed59e1d1-3ae89559886mr8685192a91.6.1793785389074; Wed, 04 Nov 2026

01:43:09 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 09:43:09 +0000

Subject: =?UTF-8?B?VXcgem9ubmVwYW5lbGVuIGxldmVyZW4gc3Ryb29tIG9wIGRpZSB1IG5pZXQgZ2VicnVpa3Q=?=

From: Thuisbatterij Kenniscentrum <171088@eru.edu.eg>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000eb5d1d065f703449"

--000000000000eb5d1d065f703449

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

T3ZlcmRhZyB3ZWtrZW4gdXcgcGFuZWxlbiBtZWVyIHN0cm9vbSBvcCBkYW4gdSB2ZXJicnVpa3Qu

IERpZSBzdHJvb20gZ2FhdCAgDQpudSBoZXQgbmV0IG9wLiBNZXQgZWVuIHRodWlzYmF0dGVyaWog

c2xhYXQgdSBoZXQgb3AgZW4gZ2VicnVpa3QgdSBoZXQgemVsZiAgDQphbHMgaGV0IGRvbmtlciB3

b3JkdC4gR2VtaWRkZWxkIGJlc3BhYXJ0IGRhdCAxLjIwMCBldXJvIHBlciBqYWFyLg0KDQpWcmFh

ZyBoZXQgZ3JhdGlzIGluZm9ybWF0aWVwYWtrZXQgYWFuIGVuIG9udGRlayB3YXQgZWVuIHRodWlz

YmF0dGVyaWogdm9vciAgDQp1dyBzaXR1YXRpZSBvcGxldmVydC4NCkluZm9ybWF0aWUgYWFudnJh

Z2VuDQpVaXRzY2hyaWp2ZW4gwrcgTmlldCBtZWVyIG9udHZhbmdlbg0KDQo=

--000000000000eb5d1d065f703449

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

Overdag wekken =

uw panelen meer stroom op dan u verbruikt. Die stroom gaat nu het net op. M=

et een thuisbatterij slaat u het op en gebruikt u het zelf als het donker w=

ordt. Gemiddeld bespaart dat 1.200 euro per jaar.

Vraag het grati=

s informatiepakket aan en ontdek wat een thuisbatterij voor uw situatie opl=

evert.

splay:inline-block;background:#386641;color:#fff;padding:12px 28px;text-dec=

oration:none;border-radius:4px;font-size:15px;font-weight:bold">Informatie =

aanvragen

reymattercafe.com#t/u/28b56686a90a45b7a097" style=3D"color:#999">Uitschrijv=

en =C2=B7
7" style=3D"color:#999">Niet meer ontvangen

" height=3D"1" style=3D"display:none" alt=3D"">

--000000000000eb5d1d065f703449--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Wednesday, November 4. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZqs-00000000Iqg-13Kl

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:26 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f199.google.com ([209.85.222.199]:58648)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOXC1-00000000HKw-2Y8w

for doctor@nk.ca;

Wed, 04 Nov 2026 03:22:07 -0600

Received: by mail-qk1-f199.google.com with SMTP id af79cd13be357-93f2373e9b4so65845485a.1

for ; Wed, 04 Nov 2026 01:21:11 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=chih-nuevaescuela-mx.20260707.gappssmtp.com; s=20260707; t=1793784065; x=1794388865; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=+VgHVt8AIg5+0ThEPe0kGV/N9DsqcpuE5kX1RthnI7Y=;

b=Sew2hkp1j+he0D2pxb4/ivNLANJZYzkqUQHb12pV0At8kzz80gjHyDtcvoTvcaW0yr

fyzKPDwh1wXHSyzOq7taRCqYn9Neub7jOSdTsFlQlRdlQzIyoVUg2ORYncDxI60qjn7p

Ng6q2ZmoK9+icfzZXHDHfII1rcBRdHdi+xlAFswNMo5gqwbX8lMb0Zm1A1bHNzTCKpjW

BCW3TocJNMq8MwYueVoI5c5Eip46MfTTo9uvStHN+my+9//r+YwiIgkl5bfE4BL0XqBx

GG32u+MLaEv/m0n15RZZQL9uH3NUFkqgj+PPVHaHInNTrCZquNKvuPnNHapivIVgx9FZ

UFUg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793784065; x=1794388865;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=+VgHVt8AIg5+0ThEPe0kGV/N9DsqcpuE5kX1RthnI7Y=;

b=f52lbxjUy5ivlOVEXDkSZezZSUJmGiR3vhLI3rmMYalq4O1RzjKOaNNsdjP1zk+QjN

fbhtXwMRYBiMwL8NQl4S2+MnnkbUKrxbxkrdvMgmHiL+Z6zIVA/ryIydDfnZTslvUy7N

6XbzHPKYCjUf5vjKfrX7yM/+zlyfJLkcqNtVgsZEVngsbTpryope2lrej3e6X91Iv6/h

b3loWKSImETKOIOIuxjlJg6MvjrzCxBKwDGRWeMsYNoIM/p8bSaaUliAk0lChcSXT39E

pg8FOuKYWDSFm3eQxbvFDkVdqk7EpFiwJX/bcMFen3s0mKEBM+QGOe+6ygMAAbe9r3ri

1m8w==

X-Gm-Message-State: APuU4Z+l5Zt6d24x7e9FlUwF7ImJqfuaNRZDbL9LlB2DSNU4mKXxDX4F

261XHSWME0lBVWjMndwQQIP1cOtlYrB0+EqzcaEp2wkgJ92Mv6MDPZihTrPuBgeubxk/1zZgeqC

+sfdHaCRQh3II5b/Wx5J1SqFe

MIME-Version: 1.0

X-Received: by 2002:a05:620a:2989:b0:93f:5e6d:880f with SMTP id

af79cd13be357-944217a1992mr2747042785a.74.1793784065131; Wed, 04 Nov 2026

01:21:05 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 09:21:05 +0000

Subject: =?UTF-8?B?UmVzdWx0YWF0IGJlc2NoaWtiYWFyOiB1dyBlbmVyZ2llcmVrZW5pbmcgdmVyZ2VsZWtlbiBtZXQgdXcgYnV1cnQ=?=

From: Energiecheck Nederland

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000019f2b065f6fe6ec"

--000000000000019f2b065f6fe6ec

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

SHVpc2hvdWRlbnMgaW4gdXcgcG9zdGNvZGUgYmV0YWxlbiBnZW1pZGRlbGQgNDcgZXVybyBtaW5k

ZXIgcGVyIG1hYW5kIGFhbiAgDQplbmVyZ2llLiBIZXQgdmVyc2NoaWwgeml0IHZhYWsgaW4gZWVu

IGNvbnRyYWN0IGRhdCBuaWV0IGlzIG1lZXZlcmh1aXNkIG9mICANCmVlbiB0YXJpZWYgZGF0IGFs

IG1hYW5kZW4gbmlldCBpcyBnZWNoZWNrdC4gRGF0IGlzIGluIDMwIHNlY29uZGVuIHRlICANCmNv

bnRyb2xlcmVuLg0KDQpEb2UgZGUgZ3JhdGlzIGVuZXJnaWVjaGVjayBlbiB6aWUgZGlyZWN0IHdh

dCB1IGt1bnQgYmVzcGFyZW4uDQpCZXNwYXJpbmcgYmVyZWtlbmVuDQpVaXRzY2hyaWp2ZW4gwrcg

TmlldCBtZWVyIG9udHZhbmdlbg0KDQo=

--000000000000019f2b065f6fe6ec

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

Huishoudens in =

uw postcode betalen gemiddeld 47 euro minder per maand aan energie. Het ver=

schil zit vaak in een contract dat niet is meeverhuisd of een tarief dat al=

maanden niet is gecheckt. Dat is in 30 seconden te controleren.

Doe de gratis e=

nergiecheck en zie direct wat u kunt besparen.

y:inline-block;background:#0077b6;color:#fff;padding:12px 28px;text-decorat=

ion:none;border-radius:4px;font-size:15px;font-weight:bold">Besparing berek=

enen

mily-kent.com#t/u/a188fd85c8486d8d1069" style=3D"color:#999">Uitschrijven
a> =C2=B7
=3D"color:#999">Niet meer ontvangen

ight=3D"1" style=3D"display:none" alt=3D"">

--000000000000019f2b065f6fe6ec--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Wednesday, November 4. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZqf-00000000I7u-1aDL

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:13 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f70.google.com ([209.85.222.70]:46227)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <36_Tqag0ZBt4GERSON.CHAVEZINSTITUTOAMAZONICO.EDU.PEDOCTORNK.CA@maestro.bounces.google.com>)

id 1xOWvB-00000000Fz3-0QQW

for doctor@nk.ca;

Wed, 04 Nov 2026 03:04:43 -0600

Received: by mail-ua1-f70.google.com with SMTP id a1e0cc1a2514c-98c73709b84so389186241.0

for ; Wed, 04 Nov 2026 01:03:46 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=institutoamazonico-edu-pe.20260707.gappssmtp.com; s=20260707; t=1793783020; x=1794387820; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=oVlf9Lz/vQoNjxV2cWSdQGguhHC8xQAZ6SzudovgB+E=;

b=VHOiwjkykkN3864xoZGHwlMObd6zO+RNyu1MZlKMt1ObUZWREI5d0/83enhWB+YFvx

X2LZDYHk0CY196BF8g31QzkspVuXkpnyP4zBGYBvtzD0VR0+epjdtj5bStj5dBeOXxzJ

IdX1TZl5qkP17nfA8qIAt+PsaMDpirdNPdqDGR0avPL4l+LC8hEUdS3iaDOhbxKKj6pj

3PbShwar1BqrUxnfCiNOb6VF+oL4slAUMqWe5jzu5zj1KjaSdDN5kuHurggyVEXllzVa

9zVfHRxrgC5l2nvWe/t46EIzYQU+WTZcNI99vAdEe44/tQG3prFUxt3Q/M5oCGoL3/Hb

13KA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793783020; x=1794387820;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=oVlf9Lz/vQoNjxV2cWSdQGguhHC8xQAZ6SzudovgB+E=;

b=F7fiH7jr2sNIfkgLRgDIpi52fgbwjG5QzAxEn8EqCOCJel+/MFE4U+h51bxOsfFSMN

aW91q637Ys7YSna4EVbpqQGKZep6OjTccg64qh5emhBhT8H79sB3dEXB+KNI5azXyVNo

BK7vd0+6YxLYwzZzhDpj6lnHlf7whNbgCz6FKBqf5bv4noaxL20MZ2cKBx68/cIsR7dK

ta6JaCukIo9lCd/H09E3PPtADDKTLb7FHPffPuxFPX5Os1z1Ctm5KPCF41xz/XJoVTwi

q13QFeVZH4fNGIlTUtiMO9EF2GAisUafuU1GH6TSlT8P6DnLxhHuyUuKchApTG6RFxPT

b2Og==

X-Gm-Message-State: APuU4Z91aABKNSDhS4BRHFwAYs/0QnruvVh8yiC0kr0gZ2fq5bs/sa7i

8LACCHU3U/VEpL7FC81BtaWl5P4TRE8iv6V+JgiKZ2R96grfHZ9qEyWTbodqGbBWMFHWjY6iF6x

iezxlrK/UBqk1N4fjy+LGuLT5

MIME-Version: 1.0

X-Received: by 2002:a05:6102:9d0:b0:7c8:448:5237 with SMTP id

ada2fe7eead31-7d072722ed0mr6907675137.24.1793783019942; Wed, 04 Nov 2026

01:03:39 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 09:03:39 +0000

Subject: =?UTF-8?B?TGFhdHN0ZSBkYWc6IEFOV0IgQXV0b2tvZWxib3ggYWN0aWUgc2x1aXQgdmFuYXZvbmQ=?=

From: ANWB Ledenactie

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000b54a74065f6fa7db"

--000000000000b54a74065f6fa7db

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

VmFuZGFhZyBpcyBkZSBsYWF0c3RlIGRhZyB2YW4gZGUgQU5XQiBBdXRva29lbGJveC1hY3RpZS4g

VnVsIGRlIGtvcnRlICANCmVucXVldGUgaW4gKDQgdnJhZ2VuLCBtaW5kZXIgZGFuIDEgbWludXV0

KSBlbiBtYWFrIGthbnMgb3AgZWVuIEF1dG9rb2VsYm94ICANCnRlciB3YWFyZGUgdmFuIDg5IGV1

cm8uIEVyIHppam4gbm9nIDIzIGV4ZW1wbGFyZW4gYmVzY2hpa2JhYXIuDQoNCkRlIGFjdGllIHNs

dWl0IHZhbmF2b25kIG9tIDIzOjU5Lg0KRW5xdWV0ZSBpbnZ1bGxlbg0KVWl0c2NocmlqdmVuIMK3

IE5pZXQgbWVlciBvbnR2YW5nZW4NCg0K

--000000000000b54a74065f6fa7db

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

Vandaag is de l=

aatste dag van de ANWB Autokoelbox-actie. Vul de korte enquete in (4 vragen=

, minder dan 1 minuut) en maak kans op een Autokoelbox ter waarde van 89 eu=

ro. Er zijn nog 23 exemplaren beschikbaar.

De actie sluit =

vanavond om 23:59.

lay:inline-block;background:#003580;color:#fff;padding:12px 28px;text-decor=

ation:none;border-radius:4px;font-size:15px;font-weight:bold">Enquete invul=

len

octorfareed.com#t/u/fa290102c2bee17d7a51" style=3D"color:#999">Uitschrijven=

=C2=B7
tyle=3D"color:#999">Niet meer ontvangen

height=3D"1" style=3D"display:none" alt=3D"">

--000000000000b54a74065f6fa7db--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Wednesday, November 4. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZqY-00000000HmV-1T9n

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:06 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f200.google.com ([209.85.214.200]:42445)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3IevqahINBgIlcktq.ctkcu.oqpvguwvgnxv.gfw.gefqevqtpm.ec@maestro.bounces.google.com>)

id 1xOWGi-00000000CMd-3odf

for doctor@nk.ca;

Wed, 04 Nov 2026 02:22:58 -0600

Received: by mail-pl1-f200.google.com with SMTP id d9443c01a7336-2ea785a4decso6383315ad.1

for ; Wed, 04 Nov 2026 00:21:59 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=utelvt.edu.ec; s=google; t=1793780513; x=1794385313; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=k+CcfItLUd8sQfLzZ96Eioj/E0/LBN1Mf4e8zSTWWdU=;

b=Cdz8jNh5xu+w/6CtMoVQF6be6bCOBdACgdA+mx3cCzIkf5YUcBwMta/ZS5ZBa9tItT

NSzgGigk+aFKX7pMTdadXIcqhkQbA9vwhIUmWZGJbZlFWgAGMKJpK7xj2tSZDl2PrNc+

Y/UrP+zHqioc7rja5OJf/+C9VvgdFuLmrOmv8=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793780513; x=1794385313;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=k+CcfItLUd8sQfLzZ96Eioj/E0/LBN1Mf4e8zSTWWdU=;

b=yPTo6VC3/E13HmegB3dUjdIsEvfX/7imlSOJw8nf3k9mXQa6vN5/kichvsiBeyPBkY

66bgnt/UfnYZshtvi2TPo8JI+HA9p1Pyk16SfxryYYG8elg6bi+wCi2ia++bv37QU6fg

ZHV7EGLfOfeMug5E9xmWg8r81IUg18R0jXkmiALqXMBfYfmMiS1pyexOfg1kCxHy6YN9

aYH1tFMZh+QskCQz4htbkBjbwzwPMJslDq1gYGnDjCYTZa7F7Y1caxp2k4Q8Jx5SMmm5

tmSY2LkNOmRZgTy79caQu5Fewz2pwDkwW+p7wC6VHyLDqF0M850QXidX2GnmWrdiDUxN

6Hmw==

X-Gm-Message-State: APuU4Z90geoV45KAaeEyziGuAQyX9bn9h2h6H+yD1COIL/atupXzuty/

MXIKD29+inCqFMQUCfmWDJB3GrjHJwcfLIhpnhhDojDW/LIcJfLcTnQDVa8aPf2ajjV1pgai8DQ

nlziJTi46PSlwqog+8RgvxQ/w

MIME-Version: 1.0

X-Received: by 2002:a17:903:1a4e:b0:2df:9e44:32f1 with SMTP id

d9443c01a7336-2eb364e1741mr104679185ad.29.1793780513270; Wed, 04 Nov 2026

00:21:53 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 08:21:53 +0000

Subject: =?UTF-8?B?QmV6b3JncG9naW5nIG1pc2x1a3Q6IHBha2tldCB3b3JkdCA0OHUgYmV3YWFyZA==?=

From: Pakketservice NL

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004c8217065f6f1259"

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Uw pakket kon vandaag niet worden afgeleverd. Het wordt nog

48 uur bewaard bij het sorteercentrum. Daarna wordt het retour gestuurd naar

de afzender. Plan een nieuw bezorgmoment of kies een afhaallocatie bij u

in de buurt. Bezorging plannen Uitschrijven Â· Niet meer ontvangen

Content analysis details: (6.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.200 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.200 listed in wl.mailspike.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: novellai-market.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.200 listed in bl.score.senderscore.com]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?B?QmV6b3JncG9naW5nIG1pc2x1a3Q6IHBha2tldCB3b3JkdCA0OHUgYmV3YWFyZA==?=

--0000000000004c8217065f6f1259

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

VXcgcGFra2V0IGtvbiB2YW5kYWFnIG5pZXQgd29yZGVuIGFmZ2VsZXZlcmQuIEhldCB3b3JkdCBu

b2cgNDggdXVyIGJld2FhcmQgIA0KYmlqIGhldCBzb3J0ZWVyY2VudHJ1bS4gRGFhcm5hIHdvcmR0

IGhldCByZXRvdXIgZ2VzdHV1cmQgbmFhciBkZSBhZnplbmRlci4NCg0KUGxhbiBlZW4gbmlldXcg

YmV6b3JnbW9tZW50IG9mIGtpZXMgZWVuIGFmaGFhbGxvY2F0aWUgYmlqIHUgaW4gZGUgYnV1cnQu

DQpCZXpvcmdpbmcgcGxhbm5lbg0KVWl0c2NocmlqdmVuIMK3IE5pZXQgbWVlciBvbnR2YW5nZW4N

Cg0K

--0000000000004c8217065f6f1259

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

Uw pakket kon v=

andaag niet worden afgeleverd. Het wordt nog 48 uur bewaard bij het sorteer=

centrum. Daarna wordt het retour gestuurd naar de afzender.

Plan een nieuw =

bezorgmoment of kies een afhaallocatie bij u in de buurt.

isplay:inline-block;background:#d4880f;color:#fff;padding:12px 28px;text-de=

coration:none;border-radius:4px;font-size:15px;font-weight:bold">Bezorging =

plannen

ovellai-market.com#t/u/f87fca94f1f29dfeb4b8" style=3D"color:#999">Uitschrij=

ven =C2=B7
4b8" style=3D"color:#999">Niet meer ontvangen

1" height=3D"1" style=3D"display:none" alt=3D"">

--0000000000004c8217065f6f1259--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on Wednesday, November 4. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:11:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZqG-00000000H0Q-1BSb

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:11:48 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:11:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f179.google.com ([209.85.128.179]:57428)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOUJQ-00000000083-2Gej

for sales@nk.ca;

Wed, 04 Nov 2026 00:17:35 -0600

Received: by mail-yw1-f179.google.com with SMTP id 00721157ae682-8b0a921ee46so3122377b3.2

for ; Tue, 03 Nov 2026 22:16:38 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1793772992; cv=none;

d=google.com; s=arc-20260327;

b=GtIbH5d1R3OVm5ngFzktuerLQ2pVfwl1ImDQHdmR+mM9jGYygU4zsHDTQMhpCvQSJt

mzm9FxYbk9Ec4mERP5o/LYCGAvpynFeeNP/esAdqFASU4id9bKfM5ju7Td1b89YbRWS2

Kys7iqx2y01tHf4JwhsnB/4Bcqgb+7air7L5MFCH5sswGhOrywU/+X4hV6VwXGkyfW1S

a5gD7rKrDgpm5i2kDFPcLjBMICXfmAF3Yyg7yBj63SIgtg+V0C2oKw8O9jdNj4b6fcHO

Y0DajnnzqRueu7CgylfmJY3npfm8ZkG/uMno8wto0T/ENGWUKXpaIyS3TdIZoIQEJNsX

yNEA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=v7GiQRwlON5iC7v8bbHWTyoGNwVAKiZCrF5AE5qOmEA=;

fh=xWbJN/a7gNPjhuK8L0IhsPuNKQ6D33Aso+hrxhE873A=;

b=iGT3fQqGU/fQQcLwpRq53anDpYXRBv9CrvDdibAE2NNTMs5kBeE6GbeadT8u24EnMd

H2iMQ5ylZ84+LwhjCwEloxiebVdRLHHCv2i1+ks4c2CjvknmiAw0Mul2sxWbWk6db2l5

vxl6Cu6h+1FJ7NIObl+uXM1N3ZOjwwNKesUhuof/nQBcJNs3Q5EvdiYda/2FNA8blG/Q

AJXfzcxODSyivmqy7FzTe8tTVGdUlJX0/swai4SXoqe4OLPPOiVnpf/XB4mlNYjxCS08

ez3+Nd/uOP+aLss46Ggo6GvQeIE5pv31PGccjcFcEtBeGprtJbyAushmapQjARnGgAxf

6HtA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793772992; x=1794377792; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=v7GiQRwlON5iC7v8bbHWTyoGNwVAKiZCrF5AE5qOmEA=;

b=Bb46guyJqgoyBT8Zz5EbRCdMAfXdSfyuPkGk+j8PocuaEu+6yJYpX/XD1wOVGyE6iN

pI138MVVT7JEWtMML4+RmAMoPHSPbGx6nFgERFzLNIUgN58yp5b4KFXnqXSJQRsCchnx

K3Kqq0Nx8NFishzWe9RGqpbe9UpGuEuTw1GY5SxHwHyBIPhadx5eK7gjIviWUIaOncdh

FDxQn7KhOcthEftm7AN4xifdtY5BE4QOE9mv2E6UirOntMWiSKPLB1nYW1bJ+ede4b92

d+tGtTgYvxkKWkY9dZUdXISesPDEFu68ew/kRZ6/LcDH/ipjSTseHVtGuDSnGalCHIr1

dfjw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793772992; x=1794377792;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=v7GiQRwlON5iC7v8bbHWTyoGNwVAKiZCrF5AE5qOmEA=;

b=yD5OL8EMHLZEUl3a9aLFchei3KjbRjoz8JO94kcXwQE/xZNp/gi7GgLkNwcnwdkk2m

aEx3ZrAxGBN4jQLKjEOa+CD1dMCJ0HtMpZC0VDslHMwr2dPsJQ1mMa5zXfZiLZh0QlUx

HiMrv6ffRQl1Zyuu7FH7hTtanPXIbYmCu9eZ7DRxOy8WhBWZ5l9UkreF1ayvmKEgpEVw

76EBGBhbueG12NpPX0+7GowtDMATUA6vnAz/yU4/CcKOaWf+osg3si975gIHL+veCucs

TGu1V3r9OSTFx8m6+XQajzYl0N9Iue7OEU/3BhhVKLqaIR82356aG0D3sZkuH5iS8Cg9

hImA==

X-Forwarded-Encrypted: i=1; AKwUvByfOzZgnAPIPH7ijvIwLNNKZV0O3FJXYnc5Mp9ioAY+9O9yvo3YxYDkbFYz3brIYVqN1PlM7Q==@nk.ca

X-Gm-Message-State: APuU4Z8QvLFPO3ZTnwGwE4R/HXUJA6uikefOyXU9nlU35PabqOMddpI9

OwVUcTGBRrdzE4CnS0T2u4IcDKv4kmZUI2m2U+W/Dfob43jyZaXJToQiB/GR5sPjmfj1LUOKrB9

+LbfibQCrWAzev2A1DJh5K+HQTGP8ZVo=

X-Gm-Gg: AYBFou3hQD3FNsY0vjxQpeOVwGKPpAnJpcuBrOpTuOGN0Hem9iT5TI+pf8sgJRimYrS

LiOpT/a73JU2kjEmFVuEqAI+R1AQGJArH0WTsokAgrlUjlwZs+V10lsBr1Nc4Qe4X9ZJYbAbOMd

rv+9WU+3TWxTx9c0rDATiZPh0vdoajdJiDmRkvG7Qa6fcgn8gXnuDgXRJ7OuXTd0++7MZlTbl75

qWNb8JtplBZpiRs5tj0m0mmYADXVEh2BZfeAlf9XwivtDpoaj6IUskGHu2oeGesc2UVMCyKbpLO

oJz2Qfv7BQVwAYfFXJo1V+iQSpUFNQ0nfsntQRKkk6LBitjXy9txq3WVlkbOcYumELT+NRTMDfq

FT1jCZ4j372ch9UVvJWfA1etOhrOOihEtl0agESOQWggjH/BXQzWDfyRRSORDsCraqZpRxybTc/

K4wg==

X-Received: by 2002:a05:690c:6989:b0:8b2:fc97:3af6 with SMTP id

00721157ae682-8b2fc9743c6mr23095507b3.27.1793772992228; Tue, 03 Nov 2026

22:16:32 -0800 (PST)

MIME-Version: 1.0

Reply-To: relieffunde@outlook.com

From: "relieffunde@outlook.com"

Date: Wed, 4 Nov 2026 11:46:21 +0530

X-Gm-Features: AclHuK8-DkER9XRwesnv30SqAtvBZEyhFPYbCWY2Zi2h8hSFjhL8awweqp2z37Q

Message-ID:

Subject: UN HUMANITARIAN AID PROGRAM 2026

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000027423065f6d5273"

Bcc: sales@nk.ca

X-Spam_score: 24.0

X-Spam_score_int: 240

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: DEAR SIR/ MADAM, YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR

UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com

YOUR FULL NAME: ADDRESS: NATIONALITY: MOBILE NUMBER: AGE: GENDER: OCCUPATION:

Content analysis details: (24.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

[209.85.128.179 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.179 listed in dnsbl.ahbl.org]

[209.85.128.179 listed in dnsbl.ahbl.org]

[209.85.128.179 listed in dnsbl.ahbl.org]

[209.85.128.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.179 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.179 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.179 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.179 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.179 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.179 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.179 listed in bl.score.senderscore.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kouamekouakouemmanuel49(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kouamekouakouemmanuel49(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

3.6 POSSIBLE_GMAIL_PHISHER Apparent phishing email sent from a gmail

account

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.2 UPPERCASE_75_100 message body is 75-100% uppercase

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 FILL_THIS_FORM Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form

Subject: {SPAM?} UN HUMANITARIAN AID PROGRAM 2026

--000000000000027423065f6d5273

Content-Type: text/plain; charset="UTF-8"

DEAR SIR/ MADAM,

YOUR EMAIL HAS BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO

CLAIM YOUR WINNING PRIZE, EMAIL US. relieffunde@outlook.com

YOUR FULL NAME:

ADDRESS:

NATIONALITY:

MOBILE NUMBER:

AGE:

GENDER:

OCCUPATION:

--000000000000027423065f6d5273

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

DEAR SIR=

/ MADAM,

ail=3D"gmail_signature">

=C2=A0=C2=A0
YOUR EMAIL HA=

S BEEN ELECTRICAL SELECTED FOR UN HUMANITARIAN AID PROGRAM, TO CLAIM YOUR W=

INNING PRIZE, EMAIL US.
=3D"_blank">relieffunde@outlook.com

YOUR FULL NAME:
ADDRESS: =

NATIONALITY:
MOBILE NUMBER:
AGE:
GENDER:
OCCUPATION:=C2=A0=

--000000000000027423065f6d5273--

dragonfly phish from sendgrid

Posted by Dave Yadallee on Wednesday, November 4. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 21:39:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xORqt-000000009I0-2ZKF

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 21:39:55 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 21:39:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from xtrwhxqt.outbound-mail.sendgrid.net ([167.89.10.71]:61616)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOPLF-00000000J6v-2wFO

for doctor@nl2k.ab.ca;

Tue, 03 Nov 2026 18:59:06 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lrsmanser.net;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1793753887;

bh=+HAc4YavYUuZi16RxpgBhQNpTMGrNhfkoTReGmVEPDE=;

b=Z/gKJEUOZfOsbGJXVS4MpNIt9wOC+RVF9YU6Yld45xIpa04EiQpuVic6apjdckbHXYsH

k3u99mVoD3qRcPLDTj46vxwxuZY0+fyqJOwYfR8YQ3vSqaD4c3Z+UL83NZqgM1q1QSvBAp

xapG+NhACiYNsqfTbDYd40tfgkj6Wmt+YZznsMekbbgAIc8XSIRo2PQzhjaaHeOo8pwbCb

+XOxtvHC9PZPngybQORMeIfMO7E++rCle1JzQI0e1eFbW2YtvUDlt7WMTZedwNV5I7sg6i

RUR/JdEeUl9XvM4m5a10MR1zy6GXMaqqeitbv9J+0hCAGZC1QMDiFnayGEqGomww==

Received: by recvd-7497f4c48b-d9lkh with SMTP id recvd-7497f4c48b-d9lkh-1-6AEA831E-4B

2026-11-04 00:58:06.684741711 +0000 UTC m=+3052643.065026433

Received: from MTE3OTk5OTk3 (unknown)

by geopod-ismtpd-13 (SG) with HTTP

id 7QsgGWDIRy2i8TmJlpVuNQ

Wed, 04 Nov 2026 00:58:06.499 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 04 Nov 2026 00:58:07 +0000 (UTC)

From: Dragonfly Shipping

Mime-Version: 1.0

Message-ID: <7QsgGWDIRy2i8TmJlpVuNQ@geopod-ismtpd-13>

Subject: Your Package Requires Action

X-SG-EID:

=?us-ascii?Q?u001=2EXaWRkhddM6TCKThGGvxqrHlzxJvECVxh51QOjOtWGXZaNIgYkWoQUJTox?=

=?us-ascii?Q?AOeYfEZdtaS4OealCKpBpK1g39GC0G3IwLdGBue?=

=?us-ascii?Q?dmzuj2+HuXTAaD7i42ruQDWCb7acHYyINSYC6z6?=

=?us-ascii?Q?3CsXlEUDwv1GgY4uycG1pe=2FyILTxQLDINHJHD5A?=

=?us-ascii?Q?t0IRgyYRtI=2Fe+QhV5aHylRHnUgqR+n7+fTWTm0s?=

=?us-ascii?Q?8Fmz8D58oiD3MLXZWFDfNzqkPC3Zepwvm1gmzyp?= =?us-ascii?Q?B3jB?=

To: doctor@nl2k.ab.ca

X-Entity-ID: u001.scLwveDFuF43f0DSa3IILA==

X-Spam_score: 39.6

X-Spam_score_int: 396

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Delivery Notification Your package requires action Hello,

Content analysis details: (39.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

[167.89.10.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.10.71 listed in dnsbl.ahbl.org]

[167.89.10.71 listed in dnsbl.ahbl.org]

[167.89.10.71 listed in dnsbl.ahbl.org]

[167.89.10.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.10.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.10.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.10.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.10.71 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: lrsmanser.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: lrsmanser.net]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.10.71 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[167.89.10.71 listed in bl.score.senderscore.com]

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} Your Package Requires Action

WIDTH: 100%; MAX-WIDTH: 580px; WHITE-SPACE: normal; WORD-SPACING: 0px; TEX=

T-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal;=

ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; font-variant-ligatures: nor=

mal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decora=

tion-thickness: initial; text-decoration-style: initial; text-decoration-co=

lor: initial; margin: 0 auto;">

i", roboto, helvetica, arial, sans-serif; PADDING-BOTTOM: 0px; PADDING-TOP:=

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BACKGROUND-COLOR:=

rgb(248,250,252)'>

FT: 12px; PADDING-RIGHT: 12px; BACKGROUND-COLOR: rgb(248,250,252)" cellSpac=

ing=3D0 cellPadding=3D0 width=3D"100%" border=3D0>

rgb(226,232,240) 1px solid; BORDER-RIGHT: rgb(226,232,240) 1px solid; BORDE=

R-BOTTOM: rgb(226,232,240) 1px solid; BORDER-LEFT: rgb(226,232,240) 1px sol=

id; BACKGROUND-COLOR: rgb(255,255,255); border-radius: 16px; box-shadow: rg=

ba(0, 0, 0, 0.05) 0px 10px 30px -5px" cellSpacing=3D0 cellPadding=3D0 width=

=3D"100%" border=3D0>

: 0; BACKGROUND-COLOR: rgb(0,166,143)">

d; PADDING-BOTTOM: 20px; PADDING-TOP: 28px; PADDING-LEFT: 36px; PADDING-RIG=

HT: 36px">

%" border=3D0>

ORM: uppercase; FONT-WEIGHT: 700; COLOR: rgb(0,166,143); PADDING-BOTTOM: 5p=

x; PADDING-TOP: 5px; PADDING-LEFT: 12px; DISPLAY: inline-block; LETTER-SPAC=

ING: 0px; PADDING-RIGHT: 12px; BACKGROUND-COLOR: rgb(230,247,245); border-r=

adius: 12px">Delivery Notification

PADDING-LEFT: 36px; PADDING-RIGHT: 36px">

OR: rgb(15,23,42); MARGIN: 0px 0px 14px; LETTER-SPACING: 0px">Your package =

requires action

MARGIN: 0px 0px 14px; LINE-HEIGHT: 1.6">Hello,

MARGIN: 0px 0px 26px; LINE-HEIGHT: 1.6">Your package is currently pending =

final release at the distribution center. Please confirm your delivery deta=

ils and preferences to ensure a smooth final delivery.

b(226,232,240) 1px solid; BORDER-RIGHT: rgb(226,232,240) 1px solid; BORDER-=

BOTTOM: rgb(226,232,240) 1px solid; BORDER-LEFT: rgb(226,232,240) 1px solid=

; BACKGROUND-COLOR: rgb(248,250,252); border-radius: 12px" cellSpacing=3D0 =

cellPadding=3D0 width=3D"100%" border=3D0>

P: 20px; PADDING-LEFT: 24px; PADDING-RIGHT: 24px">

M: 14px; TEXT-TRANSFORM: uppercase; FONT-WEIGHT: 700; COLOR: rgb(0,166,143)=

; MIN-HEIGHT: 1em; LETTER-SPACING: 0px">Your shipment details

h=3D"100%" border=3D0>

205px; BORDER-BOTTOM: rgb(241,245,249) 1px solid; COLOR: rgb(100,116,139); = PADDING-BOTTOM: 7px; PADDING-TOP: 7px; PADDING-LEFT: 0px; PADDING-RIGHT: 0p= x">Tracking number:	MILY: "courier new", courier, monospace; BORDER-BOTTOM: rgb(241,245,249) 1p= x solid; FONT-WEIGHT: 700; COLOR: rgb(15,23,42); PADDING-BOTTOM: 7px; PADDI= NG-TOP: 7px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px' align=3Dright>CA0264256= 17NC
BOTTOM: rgb(241,245,249) 1px solid; COLOR: rgb(100,116,139); PADDING-BOTTOM= : 7px; PADDING-TOP: 7px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px">Delivery lo= cation:	BOTTOM: rgb(241,245,249) 1px solid; FONT-WEIGHT: 600; COLOR: rgb(15,23,42);= PADDING-BOTTOM: 7px; PADDING-TOP: 7px; PADDING-LEFT: 0px; PADDING-RIGHT: 0= px" align=3Dright>Canada
rgb(100,116,139); PADDING-BOTTOM: 7px; PADDING-TOP: 7px; PADDING-LEFT: 0px;= PADDING-RIGHT: 0px">Status:	DING-TOP: 7px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px" align=3Dright> DER-TOP: rgb(254,226,226) 1px solid; BORDER-RIGHT: rgb(254,226,226) 1px sol= id; BORDER-BOTTOM: rgb(254,226,226) 1px solid; FONT-WEIGHT: 700; COLOR: rgb= (220,38,38); PADDING-BOTTOM: 3px; PADDING-TOP: 3px; PADDING-LEFT: 10px; BOR= DER-LEFT: rgb(254,226,226) 1px solid; DISPLAY: inline-block; PADDING-RIGHT:= 10px; BACKGROUND-COLOR: rgb(254,242,242); border-radius: 6px">Awaiting Con= firmation

0 cellPadding=3D0 width=3D"100%" border=3D0>

P: 12px; PADDING-LEFT: 16px; BORDER-LEFT: rgb(245,158,11) 4px solid; PADDIN=

G-RIGHT: 16px; BACKGROUND-COLOR: rgb(255,251,235); border-radius: 0px 8px 8=

px 0px">

,83,9); MARGIN: 0px; LINE-HEIGHT: 1.5">Please confirm your delivery and set=

tle the fee within the next 48 hours to avoid your parcel =

being returned to the sender.

0 cellPadding=3D0 width=3D"100%" border=3D0>

N: none; FONT-WEIGHT: 700; COLOR: rgb(255,255,255); PADDING-BOTTOM: 16px; P=

ADDING-TOP: 16px; PADDING-LEFT: 38px; DISPLAY: inline-block; LETTER-SPACING=

: 0px; PADDING-RIGHT: 38px; BACKGROUND-COLOR: rgb(0,166,143); border-radius=

: 8px; box-shadow: rgba(0, 166, 143, 0.25) 0px 4px 12px" href=3D"https://u1=

17999997.ct.sendgrid.net/ls/click?upn=3Du001.a5WsL0Jw64kAhY2WKdDSHHlY5kZyDi=

ETuLDqvdrdEYA-3DEXqp_GyWe1RRaaz-2B-2B-2Bm2R4SiSUdze5JEo-2BJEvf8HTpyV4CVZd-2=

FOp7qs3yTV8-2FrVtotyzYjTMHx5gjmzVcTCUvsffQ15kpuybG-2BUKxP5TR9c7iMrnNc-2FmQh=

eIzCmziaBjtlFfZvAgHsTlCb3lX9L9JBac-2BecjM31WB25rTTEZLZUJFbtnIGbqUJfkcgCgvTj=

hgLb-2FdvR8BZVAbHfu1OAl7jBqz-2FQ-3D-3D" rel=3D"noopener noreferrer" target=

=3D_blank>Confirm & schedule delivery

; BORDER-RIGHT: medium none; BORDER-BOTTOM: medium none; BORDER-LEFT: mediu=

m none; MARGIN: 24px 0px; border-image: none">

); TEXT-ALIGN: center; MARGIN: 0px">

Questions? Our support team is a=

vailable to help.

,240) 1px solid; COLOR: rgb(148,163,184); PADDING-BOTTOM: 22px; PADDING-TOP=

: 22px; PADDING-LEFT: 36px; LINE-HEIGHT: 1.6; PADDING-RIGHT: 36px; BACKGROU=

ND-COLOR: rgb(248,250,252)" align=3Dcenter>=A9 2026 . All rights reserved. =

You received this message because a delivery is associated with your em=

ail address.

AfwyCsv5SKe20dbI9Z6QPR4oa3RFgmOb-2Bwu-2BlwQJRk-2FtpTv4YEkJOKYIUejAg4BO6dDb0=

PfKGSDpLl0gacWgz3fTDpFtVUVSPSHeCTjHm6UzF-2BnYB0uAhCM1aaQnpx4rX-2BXv3i2j6iBO=

E3-2BrssNH3iE2V8LghmS3NS5ub8cbYuUtWKKVzaBAfrJC-2BtJthjjPArliuVul83glcsSDP-2=

Fj8g-3D-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:=

1px !important;width:1px !important;border-width:0 !important;margin-top:0 =

!important;margin-bottom:0 !important;margin-right:0 !important;margin-left=

:0 !important;padding-top:0 !important;padding-bottom:0 !important;padding-=

right:0 !important;padding-left:0 !important;"/>

Chinese products spam

Posted by Dave Yadallee on Tuesday, November 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 16:48:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xONIb-00000000O4K-17wI

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 16:48:13 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 16:48:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m82152.xmail.ntesmail.com ([156.224.82.152]:27140)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOMOA-00000000EV2-1ovG

for sales@nk.ca;

Tue, 03 Nov 2026 15:50:02 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_854188_1144578958.1793742530437"

To: sales

Subject: =?UTF-8?B?UmU6UmU6UmU6VGlhbmppYW8g4oCTIE1hcmthbsSxemEgw5Z6ZWwgSGlqeWVuIMOccsO8bmxlcmk=?=

X-Priority: 3

MIME-Version: 1.0

Received: from admin@wemakediapers.com( [10.176.106.235] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 4 Nov 2026 05:48:50 +0800 (GMT+08:00)

From: =?UTF-8?Q?admin=E8=B4=A6=E5=8F=B7?=

Date: Wed, 4 Nov 2026 05:48:50 +0800 (GMT+08:00)

X-WM-Tid: 0aa1a362e6e50696kunmb0adef6c11261b

DKIM-Signature: a=rsa-sha256;

b=Bc3+2aB5vlg+VerOF5I7J5T9mE2CV2WL/7XJZQckPet2YfbpXM4zU/u47z6kivwWimLmUlmqvZPXX3IxQzSJIk4gD5GRQNfbNiIkK3GhfLuu3eMRBHPIPiaGEXAeGFGvnfeW1TRYiQxaQZSBV6J5ZYTCqv6A+6bcB7mBYxmNkeI=; s=default; c=relaxed/relaxed; d=wemakediapers.com; v=1;

bh=Ykzyq2Ks226IolBcNClspyiwYcA/TOqqmCJINY2ObcA=;

h=date:mime-version:list-unsubscribe:subject:message-id:list-unsubscribe-post:from;

Message-ID:

Hi sales,

I hope everything is going well for you.

Thank you for recently viewing, Adult pull-up diapers,from the link in our previous email. I wanted to follow up to see if you need any extra details or have any questions about the product.

Please let us know your required quantities and any specific needs.We will provide the best possible discounts.

Adult pull-up diapers

Thank you for giving this your attention. I look forward to your response soon.

Best regards,

Continue to discover our newest features by using . Maintain Updates

Ready to silence these messages? Access Personalize Delivery.

Raziya Kadir

Sales Manager

Quanzhou Tianjiao Lady & Baby's Hygiene Supply Co., Ltd.

raziya@itianjiao.com

+86 19118033095

Industrial Zone, Luojiang District, Quanzhou, Fujian, China

Chinese products spam

Posted by Dave Yadallee on Tuesday, November 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 16:47:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xONI8-00000000O14-0mN5

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 16:47:44 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 16:47:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [156.224.82.47] (port=55624 helo=mail-m8247.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOL3B-000000002Bn-0x7C

for root@nk.ca;

Tue, 03 Nov 2026 14:24:28 -0600

Content-Type: multipart/mixed; BOUNDARY="=_Part_842869_1550928907.1793737380469"

To: root

Reply-To: sylvia.shi@dsmolds.com

Subject: =?UTF-8?B?UkU6IEluamVjdGlvbiBNb2xkcyAmIFBhcnRzX0RTIE1vbGRz?=

X-Priority: 3

MIME-Version: 1.0

Received: from dsmolds@dsmolds.com( [10.176.120.14] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 4 Nov 2026 04:23:00 +0800 (GMT+08:00)

From: =?UTF-8?Q?Sylvia=EF=BD=9CDS_Molds?=

Date: Wed, 4 Nov 2026 04:23:00 +0800 (GMT+08:00)

X-WM-Tid: 0aa1a314521ad095kusyea311b4610e5d3

DKIM-Signature: a=rsa-sha256;

b=RsrGJ4KnQULp3YWJglrIIxquEzvXWUj7zkBy/PTu8i9tvzC85OJWYiSv+vPAId1yUofexNNkSPQbjAJKTTXJzyF9XZJ6QYFyk2oSCbb/w4IAR8fzpez2Zo3jUrLczy59WkqezeGeq319zceY60cULjpXsqw8ckBMXodxbxF/tBw=; c=relaxed/relaxed; s=default; d=dsmolds.com; v=1;

bh=d4+qILBk5F1CSQ5qJZY6My/thsl1WUCyCOs5QWATQ/k=;

h=date:mime-version:list-unsubscribe:subject:message-id:list-unsubscribe-post:from;

Message-ID:

Hi Root,

Hope you are doing well.

Sylvia here. I wanted to follow up on my previous message regarding potential cooperation in injection mold projects.

We understand that companies like yours usually work with experienced tooling partners.

Our goal is not to replace your current suppliers, but to provide additional support when you need:

• Extra mold manufacturing capacity

• Complex mold projects

The attached case studies cover automotive, electronics, medical and home appliance applications, including multi-cavity, 2K and over-molding projects.

I’d be glad to support you with your next mold project.

Best Regards

Sylvia Shi | 施新燕

Business Development Manager

Tel. +86 159 7010 6685

sylvia.shi@dsmolds.com

DENG & STANMET MOLDS INDUSTRY Co, Ltd. | No. 1331, Building 2, Innovation Wisdom Harbour

Xinqiao Street, Bao'an District, 518125 Shenzhen, China www.dsmolds.com

On Fri, Oct 30, 2026, "Sylvia｜DS Molds" wrote:

-----Original Message-----

From: "Sylvia｜DS Molds"

Sent Time: Fri, Oct 30, 2026

To: [root ]

Subject: Tooling Partner_Deng & Stanmet Molds

Hello Root,

Hope you are doing well.

This is Sylvia from Deng & Stanmet Molds.

We support Tooling manufacturers with precision injection molds and mold components for automotive, electronics, packaging, home appliance and industrial applications.

If your team ever needs additional tooling capacity, cost optimization or reliable support for new projects, we would be happy to connect and explore possible cooperation.

Looking forward to staying in touch. 😊

Best Regards

Sylvia Shi | 施新燕

Business Development Manager

Tel. +86 159 7010 6685

sylvia.shi@dsmolds.com

DENG & STANMET MOLDS INDUSTRY Co, Ltd. | No. 1331, Building 2, Innovation Wisdom Harbour

Xinqiao Street, Bao'an District, 518125 Shenzhen, China www.dsmolds.com

Web/SEo/App spam from Google Gmail

Posted by Dave Yadallee on Tuesday, November 3. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Nov 2026 16:47:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xONHz-00000000O0G-3G5p

for dave@doctor.nl2k.ab.ca;

Tue, 03 Nov 2026 16:47:35 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Nov 2026 16:47:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f172.google.com ([74.125.82.172]:42470)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOKZ4-00000000Own-0zMc

for sales@nk.ca;

Tue, 03 Nov 2026 13:53:06 -0600

Received: by mail-dy1-f172.google.com with SMTP id 5a478bee46e88-36c9a93a1abso788902eec.1

for ; Tue, 03 Nov 2026 11:52:08 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=appsifyai-com.20260707.gappssmtp.com; s=20260707; t=1793735523; x=1794340323; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:reply-to:to:from

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=i4YXj6gBmso6ew2hi3Y20bYxi8tr3m15qe/MDKd1wIo=;

b=EuDpxR4e21yvhlXliSgEw0mprDQWuOoDow3M9dV6j6HJIFI6BfY8wrJrTuRh4WGLlL

bxcgyxmLKVOQLD/gcoQ9M48b+9Fo7DGi3HEcNkJaETXGnPwr5J2c+yX4lIhhQfxJWffx

Zqaco6uRzVVxpUKpXbl2A5RJ8MiMBhpnZCxxXc5Cm/knvZUEiHuSExj6ENIjjvhGnUhS

gDUyt5JF/LTU0D38fIRM7TFqiZ6sGNQwsc3V392mqP6ZOGDsLvcfgbaYIgjah17sFG/d

l6PZ2UeYxlIdL6msfDnXMy6g41zpl/5RnaS5RL+zuVmaIGhX5RIYCvbsJR9fECv8J3K6

PWaA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793735523; x=1794340323;

h=content-type:mime-version:date:message-id:subject:reply-to:to:from

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=i4YXj6gBmso6ew2hi3Y20bYxi8tr3m15qe/MDKd1wIo=;

b=Y5/0Ozju8mss4gmJWzKNXhb0+EU5rSGEWwwPHXsEXI2PWpf2LYBuV3krcC3X3KRhWC

/woPoaUwkxJ9vHMnRwzHTUcVB/Xeva+h4q16lQBy/U8PiKuBIdss7Iupwwwbtbnw7TAZ

hmzD1hxhiL0pdS0uSJmtFCvv1TGSwu+n8UfLNyHBUSS8JvBbuXVi2hXEAHtekZTq4otX

0YF4eKFW05gqwy4TFNr5DVQ5CJ14x+GM7OZZVJigzkbLI2mebQIXr3drxK/vTBbxClC/

nTeMvugsYOAG3GyCcD9R6Jexa29v2AGXOVilHUnTFn1ZkXuR0fGM8kbUEw9417SqWS91

XAww==

X-Gm-Message-State: APuU4Z9MIrPYyUbVEd4kXilx2MxQ2zoJprJjYG52ymZTEedows+kJD08

YNJX4nbveXClWUmkt5XbUq7g+BNaep6zI1UaUKbWZbjygPcgYe88KMGa47sq5dINW8iImxed8oH

SRmNh

X-Gm-Gg: AYBFou0BLg7/aL04Ua40Wf1hk0W/0IWpsJHDtTHTy1rqnISW851WCy9JRi9CoWmdHyz

QktBIrmGx9W3z3g1MXa3j3BwBwdFuK0Fvwh2kV/r8DlOVaqaAxS48bRazi7lSSk3RzH27jIuALP

r48Su+0nCX34+L8mMnQCSJGYd6tByEKRB7bb5sAgjUrvMVvXMmnbncl0JZV4QO8TobiHcZ9ZS7F

VJLdPWZnN2V29lhiL7tAymaBl8d8dvr8n4W5o0C8+FjoBAdKoIMSLvP/6Gha9WurUNxPLbyF1dm

XOuoGu6xdsPj/PpmT75GDkUq/gdZLxrRdeTbZnOC5oVN7QD+p+GTbLgJfYh1MWJIPBdTMAIxjP5

by92atAseXGQTFvuerOPN/UtclgXP0dwtu3Dlrq/KCb5oqz/Zftsh7+oIkPHCwOab4a0Laofq5c

EFgbdOpuknR61VUcHwg6X8R6zmH9F4iJFfCzaBXjRPKJXn7wD5DLt3UDCKc/qtamV8zZ6+iseZC

IVHerjn5oEQZbWSp1byeLXmnwOxAJjbcDM53OQIV1ZuQxh6qK58WrERI2ACc3XVLpbRygVT1pyf

2yevp6FKe4kpxXYd6yIAhyqhrOhIb+X5IYw4geE=

X-Received: by 2002:a05:7300:fe87:b0:36b:c4a0:47b8 with SMTP id 5a478bee46e88-36bc4a04a45mr3216344eec.11.1793735522377;

Tue, 03 Nov 2026 11:52:02 -0800 (PST)

Received: from [127.0.0.1] ([122.161.51.52])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-36ca394f297sm223623eec.21.2026.11.03.11.52.00

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 03 Nov 2026 11:52:01 -0800 (PST)

From: Linda

To: sales@nk.ca

Reply-To: lindat@appsifyai.com

Subject: App idea - sales@nk.ca

Message-ID:

Date: Tue, 03 Nov 2026 19:52:00 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-9c9727fcae321891-Part_1"

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi sales@nk.ca I sent you an email a few days ago regarding

mobile app/Redesign/update/add new features. If you are interested?

Content analysis details: (8.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

[74.125.82.172 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

[74.125.82.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.51.52 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.82.172 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.82.172 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[74.125.82.172 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} App idea - sales@nk.ca

----_NmP-9c9727fcae321891-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Hi sales@nk.ca

I sent you an email a few days ago regarding mobile =

app/Redesign/update/add new features.

If you are interested?

PLEASE SEND ME YOUR CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

Thanks,=20

---------------------------------------

From: Linda

Sent: Tue, 29 Sept 2026

To: sales@nk.ca

Subject: Mobile Apps!

=20

Hi, sales@nk.ca

=20

My name is Linda, Marketing Manager at an =

international mobile apps development company in India.

=20

We create various types of apps including radio/podcast apps, retail apps, =

delivery apps, booking apps, fashion apps, fitness apps, healthcare apps, =

wedding apps, taxi apps, restaurant apps, etc.

=20

If interested, I can send you samples, our portfolio, and company details.

=20

Thanks,

Linda

----_NmP-9c9727fcae321891-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Hi sales@nk.ca

I sent you an email a few days ago regarding =

mobile app/Redesign/update/add new features.

If you are interested?=

PLEASE SEND ME YOUR CONTACT & =

WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

Thanks,=

---------------------------------------

From: =

Linda

Sent: Tue, 29 Sept 2026

>To: sales@nk.ca

Subject: Mobile Apps!=

Hi, sales@nk.ca

My =

name is Linda, Marketing Manager at an international mobile apps =

development company in India.

We create various types of=

apps including radio/podcast apps, retail apps, delivery apps, booking =

apps, fashion apps, fitness apps, healthcare apps, wedding apps, taxi apps,=

restaurant apps, etc.

If interested, I can send you =

samples, our portfolio, and company details.

Thanks,=

Linda

----_NmP-9c9727fcae321891-Part_1--

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	November '26					Forward →
						1
2	3	4	5	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29
30

PayPal

Payment Transfer Confirmation

OR: rgb(15,23,42); MARGIN: 0px 0px 14px; LETTER-SPACING: 0px">Your package = requires action

OR: rgb(15,23,42); MARGIN: 0px 0px 14px; LETTER-SPACING: 0px">Your package =

requires action