Web/SEO/App spam from Google Gmail Part 2

--0000000000001fddb0065186fc37

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi nk.ca


CIm8ZqEXnF8WKUtN9lNHFUbgn0QWngE8JBVeBg3XNC0kh3RUzXNnSiju7SinH2Mjl6-OyHSX4Bn=

SsLuMj8iCpuXj8aFf8lqSlo34upCmtZsAmh23SQj9YoRNN_-IntCv8uHXWs88gVnehacjmjuMga=

KDAQo2pIibtQ>



Team,



I noticed something interesting while going through your website : nk.ca


wRfD5UD3r52KuMSDbyx8qEvjn0QWngF8rYM7ePbtyDfCTzClq3PqGUdjqlBJ-y2YZ3R8EQ08Yhb=

H16Xv42o09CwYpXMoFtD5cyseB57WmYGdyWp1ThJNDjE8bnUxWWfqbgVG5s1gk21w79XsJkz3mQ=

GfacZD0515Jg>





It's apparent that you have used Ad Words marketing to promote your

business in the past, however, your website does see some organic search

traffic here and there. Now, I believe I can help increase that portion of

organic traffic significantly at: nk.ca


nCZFpVAUgdw46NNuPXkX2Qfmn0QWngHRdVBMmqfCp9XdHI4k36RCMobb4gr6dZJxpsQZnmMDgGG=

lF41cXPEB1L8UQg_DNA-35jIHjGdpteN3dMi6Hmg37QPNGmhDQh0RmEoJVeZK-iJkG1bm61On7O=

DrRBk1sgrXNw>






I believe you would like to come top on searches for keywords related

to: nk.ca


DAhHkyCRYQnLWs9-HHJdxpPon0QWngFmE7TDV8kjfC1MnSVh3z02iAPJOYD4f2-ObSIPonuAH3y=

Hd93k4ndwU6vswHEWwsJYwS3FqfbAm7c8MxLWf86EfCMpRshushMRd95bcxz0AjGYFI3lhEs6fc=

z9B5jWR-XORg>


*... *I found a number of SEO issues such as broken links, page speed

issue, HTML validation errors, images with no ALT text on your website,

that's stopping you from getting that traffic.



How about I fix those, and also promote you through engaging content on

relevant places on the web (read, social media).



I guarantee you will see a drastic change in your search ranking and

traffic once these issues are fixed. Also, this is one time, so no paying

Ad Words every month.





Is this something you are interested in?



If yes, please allow me to send you a no obligation audit report and quote=



.



Hoping to hear from you and take this partnership ahead.







~Kind Regards, Benjamin

Business Analyst.



PS 1: Please answer our email with =E2=80=9C*Interested*=E2=80=9D or =E2=80=

=9C*Not Interested*=E2=80=9D so

that we will know the status of your inquiry and act accordingly. If you

are interested then I will send more details on our =E2=80=9Ccorporate iden=

tity=E2=80=9D,

=E2=80=9Ccompany profile=E2=80=9D, =E2=80=9Cwhy you should choose us?=E2=80=

=9D, =E2=80=9CPrice list=E2=80=9D.



[image: beacon]

Web/SEO/App spam from Google Gmail Part 3

--0000000000001fddb0065186fc37

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable








t-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-=

variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-sp=

acing:normal;text-align:start;text-indent:0px;text-transform:none;word-spac=

ing:0px;white-space:normal;background-color:rgb(255,255,255);text-decoratio=

n-style:initial;text-decoration-color:initial;line-height:normal">
e=3D"2">Hi=C2=A0
span>
gb(0,112,192)">
com/251wT0n5ciGuPPokLJ8irCIm8ZqEXnF8WKUtN9lNHFUbgn0QWngE8JBVeBg3XNC0kh3RUzX=

NnSiju7SinH2Mjl6-OyHSX4BnSsLuMj8iCpuXj8aFf8lqSlo34upCmtZsAmh23SQj9YoRNN_-In=

tCv8uHXWs88gVnehacjmjuMgaKDAQo2pIibtQ" rel=3D"nofollow">nk.ca
=C2=A0
an>
Team,

I noticed something interes=

ting while going through your website :=C2=A0

b(0,112,192)">
om/2JvE_O9Bj7-VxnC440JCqwRfD5UD3r52KuMSDbyx8qEvjn0QWngF8rYM7ePbtyDfCTzClq3P=

qGUdjqlBJ-y2YZ3R8EQ08YhbH16Xv42o09CwYpXMoFtD5cyseB57WmYGdyWp1ThJNDjE8bnUxWW=

fqbgVG5s1gk21w79XsJkz3mQGfacZD0515Jg" rel=3D"nofollow">nk.ca

n style=3D"color:rgb(0,112,192)">=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0

n style=3D"color:black">
=C2=A0
It's apparent that you have used =

Ad Words marketing to promote your business in the past,=C2=A0however,=C2=

=A0your website does see some organic search traffic here and there. Now, I=

believe I can help increase that portion of organic traffic significantly =

at:=C2=A0

smartstreamingott-dot-yamm-track.appspot.com/2qvUGine3p4jJCbENjcBdnCZFpVAUg=

dw46NNuPXkX2Qfmn0QWngHRdVBMmqfCp9XdHI4k36RCMobb4gr6dZJxpsQZnmMDgGGlF41cXPEB=

1L8UQg_DNA-35jIHjGdpteN3dMi6Hmg37QPNGmhDQh0RmEoJVeZK-iJkG1bm61On7ODrRBk1sgr=

XNw" rel=3D"nofollow">nk.ca

2)">=C2=A0=C2=A0=C2=A0=C2=A0


style=3D"margin:0in 0in 10pt;color:rgb(34,34,34);font-family:Arial,Helveti=

ca,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:norm=

al;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-alig=

n:start;text-indent:0px;text-transform:none;word-spacing:0px;white-space:no=

rmal;background-color:rgb(255,255,255);text-decoration-style:initial;text-d=

ecoration-color:initial;line-height:normal">
"color:black;font-family:arial,sans-serif">I believe you would like to come=

top on searches for keywords related=C2=A0to:=C2=A0=C2=A0

e=3D"font-family:arial,sans-serif">=


CcnqaFkbw4DAhHkyCRYQnLWs9-HHJdxpPon0QWngFmE7TDV8kjfC1MnSVh3z02iAPJOYD4f2-Ob=

SIPonuAH3yHd93k4ndwU6vswHEWwsJYwS3FqfbAm7c8MxLWf86EfCMpRshushMRd95bcxz0AjGY=

FI3lhEs6fcz9B5jWR-XORg" rel=3D"nofollow">nk.ca

"color:rgb(0,112,192)">=C2=A0=C2=A0=C2=A0

lor:black">...=C2=A0
I found a number of =

SEO issues such as broken links, page speed issue, HTML validation errors, =

images with no ALT text on your website, that's stopping you from getti=

ng that traffic.


How about I fix thos=

e, and also promote you through engaging content on relevant places on the =

web (read, social media).



or:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;fon=

t-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-=

weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-tran=

sform:none;word-spacing:0px;white-space:normal;background-color:rgb(255,255=

,255);text-decoration-style:initial;text-decoration-color:initial">
yle=3D"color:rgb(0,0,0);font-family:arial,sans-serif">I guarantee you will =

see a drastic change in your search ranking and traffic once these issues a=

re fixed. Also, this is one time, so no paying Ad Words every month.=C2=A0<=

/span>=C2=A0<=

/span>


gb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-st=

yle:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weig=

ht:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfor=

m:none;word-spacing:0px;white-space:normal;background-color:rgb(255,255,255=

);text-decoration-style:initial;text-decoration-color:initial;line-height:n=

ormal">
ans-serif">
Is this something you are interested in=

?

If yes, please allow me to send you a=C2=A0
round:yellow">no obligation=C2=A0audit report=C2=A0and=C2=A0

yle=3D"background:aqua">quote
.
span>

Hoping to hear from you and take this partnership ahead.
>


y:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant=

-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:n=

ormal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px=

;white-space:normal;background-color:rgb(255,255,255);text-decoration-style=

:initial;text-decoration-color:initial">
t-family:arial,sans-serif">


=3D"MsoNormal" style=3D"margin:0in 0in 10pt;color:rgb(34,34,34);font-family=

:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-=

ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:no=

rmal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;=

white-space:normal;background-color:rgb(255,255,255);text-decoration-style:=

initial;text-decoration-color:initial;line-height:normal">=

~
>Kind Regards,


Benjamin





-serif">Business Analyst.


MsoNormal" style=3D"margin:0in 0in 10pt;color:rgb(34,34,34);font-family:Ari=

al,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-liga=

tures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal=

;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;whit=

e-space:normal;background-color:rgb(255,255,255);text-decoration-style:init=

ial;text-decoration-color:initial;line-height:normal">
rgb(0,0,0);font-family:arial,sans-serif">PS 1:=C2=A0=

Please answer our email with=C2=A0=E2=80=9CInterested=E2=80=9D=C2=A0=

or=C2=A0=E2=80=9CNot Interested=E2=80=9D=C2=A0so that we will know t=

he status of your inquiry and act accordingly. If you are interested then I=

will send more details on our=C2=A0=E2=80=9Ccorporate identity=E2=80=9D, =

=E2=80=9Ccompany profile=E2=80=9D, =E2=80=9Cwhy you should choose us?=E2=80=

=9D, =E2=80=9CPrice list=E2=80=9D.









QOLjutN7ur_BICLUzX4v6P0kRZHl_D_14bcn0QWngGvyIre8EPm8REFOwGHGV67uzRBfrfOU-Cs=

mMlbgMzWtb-Y68WniiZJo4DMyaNwDcdWIDGeMwm7kgIR4RSeI-iJWAzK_mqz5CNeYWoJzK4HBhO=

fIerbUoZciyF8fg" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:n=

one; display:none!important;">



--0000000000001fddb0065186fc37--

Web/SEO/App spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 06:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMPgy-000000001hD-487X

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 06:25:00 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 06:25:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f66.google.com ([209.85.161.66]:49394)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMMWN-000000004UY-1p8w

for sales@nk.ca;

Mon, 11 May 2026 03:02:02 -0600

Received: by mail-oo1-f66.google.com with SMTP id 006d021491bc7-6969c864c89so2385862eaf.2

for ; Mon, 11 May 2026 02:01:04 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1778490058; cv=none;

d=google.com; s=arc-20240605;

b=WH6OOHJeKdQ3UWfVkK+X7UWws8XDMp8o+L34QjGOq14q0X25vUF5jb3IYmKa1d4TO4

+/wA4ERlG1xHjg6p8Hs06UqWSpg6HLiroGU9lNehmgLx1W2Y+IynhD4oYGRThxmID3Oc

P+TddCXuoUe0V35pK6A1Z3S71ukgZdqvEkjRjaLm7TADBw8LZzQCS2CG27u3aJutC+5r

/ztkmSy681Cqz+6WGoyNGwhQt6rVWZJ7pRU/ukHvJ0BP9BvcryGzQI4aXwfpExYTK9w2

nXZ+dVbxVk/7aDsOofFIg4SDDtAAlhVPv5ucpWntGgsdTVGcRFx1xcxMNyX4g84cY9V+

ssqg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:sender:mime-version:dkim-signature;

bh=EP5neKDW5kwjLr+o7hL5BE0ifGCZcbXlG5xKum2zHok=;

fh=K4YXDlBzh75jp+umpiVSGKtavKLbAmcgNobJ9O4QpWc=;

b=WKYS8iCpBstT1Iudzl0tawSbb+ST3X4KavUCFwoxfVEf21W7q8mB53nig/IwGdbnJ8

XPqtS4mi/61GbUaq+rgzY/dxXNkvjcNtJCGXGwdQu86JvtJUIKefaiUBeehdxMCIPziD

VpeQpFoOXwXhyPoKOp/KB/OBMf5wzABsKqEffVQgNJuCJhGLIblFqYBX8MZDygtjkFDb

G0bt/f8lDTtSCXm0IX6txuBXFCgZsL1zDc4zE2VOq6LRi7CBSBYi0CZOlXPxxLuCL6VT

8iWCWlAaDzmtEmwyDjFC5FJ37pOgR9yg49zECpA86m223IjdzYjpHzgbpVkfbPkFSkqX

RAlA==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=smartstreamingott-com.20251104.gappssmtp.com; s=20251104; t=1778490058; x=1779094858; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=EP5neKDW5kwjLr+o7hL5BE0ifGCZcbXlG5xKum2zHok=;

b=L7ClutEM8TD3EVaKcb87l6/5z5+06bzo8IgINYylmNyEmWmrB60Sudh7Gz+dpzqYBz

isSk2jAgkeeNZdur3f4A1JOkaPErH3pIZ3xUDhq3Ii4214rGGVWdHfI+1BvDqY1FOIET

9XGZ1D+DWqmkKs8WC09bHbbXL/IggX8MSgbks6SBySSj93MORfPkuP7RPa4Ij7i2HCvU

vzfOiX0/5ixCCj+A+ImHyQjf/AvruxSCSC5ziepMqxPX8Lzto9siiq7adnP2sSWEw7et

nz8U6Khn8uWVVibeLNSgWXf0qfuszzvfcf2bZPps+oKv7hvdQ0XIwLp0ETKwzIr66e0L

fCuw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778490058; x=1779094858;

h=to:subject:message-id:date:from:sender:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=EP5neKDW5kwjLr+o7hL5BE0ifGCZcbXlG5xKum2zHok=;

b=szqbW8MIPWXMWQiSg4hHzirrv6xKiRUewX64Wt+shTVA5jIW0OuCusjduX1odnIina

b2/VS5yl+adNQ9lVQQsTECALSIJF7uHFewmv7MKI3jKpeEvuho/wisC5bvf2V37uvtGX

3DrKCSaOWPCXN2aT7ZkbMcWTDhavDboZCKOIJoQlc9pq28AKjo38mJCOy2rNPTvcazuU

zoT2rGx7wfDuS434KZN0JcyUIXIy83Qoq8lTF8qthFi/puPrV3WtmAeEf5x7xAN+Arj9

zfY3XGlZKV+DSh8iEKKWqcgDl+iQu/RlyZgDEcN436uKeg7HDd86pAYhpXmcXtjNv0z+

XiUA==

X-Gm-Message-State: AOJu0YzGqmi1oAa0LkUKEsNy9iyJjKKaw7Np34pei8i7TOO/rZnlf7av

deFGXpfSxZ2bN3uyog2RaiMJPdWTDvohi0gDg6A7uXeiKE46OOGuIK0iF2IIN5WL1HDsAu3hwQc

kfzgFhF5UeiW4Hp0ij1NVfZUjD1+Zzk1mApF0uivfee9f8KhfhVfME38c1Q==

X-Gm-Gg: Acq92OG+YBHy7pI3OUm7BBDMYAhApvgfSkXljxayeViftN8FF41mCoXT/dpZ8LjzE9J

utisBuSi7iZgpHFJkKWpqts0bo+rwUpJSTPbgIMMv0mkTKZufLKfDLwm6UbwsOQNBnJ1CEpp0n5

W0hLAwVGlfYpSG/a8sVlMU2IehE/43zIinCLUur7t+3L5+mOkck4jOkSSGT/l1vKIsDYqkmaDW/

w7D3KHtmjtY9hnjsePQxGbu5roQhNjSlSusVyK7ZJ8eJl97rf07ecoDjb+2/XkLrSBARTVcsMIB

PtCyyhI=

X-Received: by 2002:a05:6820:630b:b0:69b:5fcb:1a69 with SMTP id

006d021491bc7-69b5fcb1d73mr239916eaf.59.1778490057674; Mon, 11 May 2026

02:00:57 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Mon, 11 May 2026 02:00:57 -0700

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Mon, 11 May 2026 02:00:56 -0700

MIME-Version: 1.0

Sender: Benjamin

From: Benjamin

Date: Mon, 11 May 2026 02:00:57 -0700

X-Google-Sender-Auth: I2KCMK3jUyjicBcPoW7wAqpu2Cc

X-Gm-Features: AVHnY4JAjxxsIi1IkKq7aIxTghhmE6woas6IT6x7Yqt9sGuDtmBq1dAB2HapHzE

Message-ID:

Subject: About nk.ca

To: Sales

Content-Type: multipart/alternative; boundary="0000000000001fddb0065186fc37"

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi *nk.ca
[...]



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.66 listed in dnsbl.ahbl.org]

[209.85.161.66 listed in dnsbl.ahbl.org]

[209.85.161.66 listed in dnsbl.ahbl.org]

[209.85.161.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.66 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

[209.85.161.66 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.66 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: smartstreamingott-dot-yamm-track.appspot.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: smartstreamingott-dot-yamm-track.appspot.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: smartstreamingott-dot-yamm-track.appspot.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.66 listed in wl.mailspike.net]

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.66 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} About nk.ca

Desperation spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 06:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMPgF-00000000PG7-1rre

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 06:24:15 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 06:24:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f46.google.com ([209.85.208.46]:43071)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMK78-00000000H8V-3WbT

for doctor@doctor.nl2k.ab.ca;

Mon, 11 May 2026 00:27:48 -0600

Received: by mail-ed1-f46.google.com with SMTP id 4fb4d7f45d1cf-6763cc8775cso8910126a12.0

for ; Sun, 10 May 2026 23:26:51 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1778480804; cv=none;

d=google.com; s=arc-20240605;

b=MM9r+9qe579UOBcyT3T0zZOAF6WAF375O4ragSXFL9jbdgAdlWdSqfjBZw/31ifccd

8R1WTj8rafhH5fuNiLt/xe0XCkGQW3XLeUw0ZyzQYIafQQqrnLGFBbyxuXuDY6k/1O4A

zqCqMVlKq8M0vRmuRwOUsyeJNZ4Yo9q8ey2La4l+w+P1fim3qPPxJi7uJmmbbFowBw8U

C/e7Kao/2olj0zSDzsOwKutTBoJqO9kN2168Tyk4JE8y4tetoU+EKyvH/DVs8/n3vvK5

oYvvjQx4nANHpf9o/IobM3OctCub+Szgk84GlkBkT/z8DM3kLsI2GtY//rFKgco1obFA

AOnA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=mmB1LUbwRyi4TbvSGTUENguyh8VtFFcWBUKau+QlKQs=;

fh=PJB/BVm/gDWU2W4CTeqgReYaWqjjzbom/3IyfkkrGUo=;

b=Iv01SF3d/yuQ0G4C4+UPLLGJE1b9EO3/SW8X+5OF9lSwhVVhmPPLyYhewziLEuBeNO

KEsyo4/VZrCeaEt7ynsnM5RNSSTzD8N1hkYqhbBR89DAyY3jb1Krw0Zyb2WQZHuozDqM

6GxBcFuxuYEmL2rMFFNgd1CVPF2CGeZI+VwOgV77mGqxU4fdMMZJoP61W8LsSbuzkZEr

hZW4CvV3O37YEDUDgIbkf8d6d0dcpAnNO6CvBbg8p+AoiIIpuG8bYyKlK5n6ezUHmH9i

fpiZ4+NzhjNXb23Y9gVClY+WAn19K4sFdONvCZPMDfb2+qH5Fqwi2aozsAHP1v4iMTS9

AScg==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1778480804; x=1779085604; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=mmB1LUbwRyi4TbvSGTUENguyh8VtFFcWBUKau+QlKQs=;

b=RLFd2REJ7qWso9VV20rlkN9HMLsON8PeDoghdvMWiJ0xnDIlsoTgnDzeL2y5LNznWk

nGcslhTsCNFLpnhKY6evd0KBsLkLWw5vvt7gtWZSSJE5iOw9EaQGFDnR/YWpSgp2buht

XiLRedbukty3ll2dVspX0SkPX8p/s9Ew3xd7T01B2OLgdX0Wl/JeYn3iPilKmVrLPbzC

dLt108zbQYW6aAjwzheNwnk4sX8+tDg6NzaH1pafFqHUz3LUXSmPvxIjeWLzO2SRE5JP

ln+QFB4xR+P655csJwYRWQ9eijsyQXYS94ytbL6/RupqnSL3Za8xuy3PicDWvPDo0xFP

XcUA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778480804; x=1779085604;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=mmB1LUbwRyi4TbvSGTUENguyh8VtFFcWBUKau+QlKQs=;

b=J7fWJuTouNHt9We0Q7cEQvgenwqlLIO5QAq12oZyywcMQIYa3GveS5enL6Jv5Kmu8E

BkgVIrTxrEX1SuqoKqrgHYI67HRDgDmqbyZhzZRMthb4o9yT6zp7vcFPltJITpjW1whi

t2TAeAFM6KL1gf82QNIcaK6z9RLGsZIxEBHzA5RzCv6OxfMQh7WA5gf/1hXZxqBUPu8C

ZZ2qGOhrn8HZjvF/UKr2hF9+CNxQzwG3Ukh31AKWsG/BK9ijMed2M0xVbjzq6pyV4CUN

XgjA6KySg668nXXrZmcS+EJhtCVt1TKkala1kP+sNUVQW1YZA/IrZ3LA8Ani9W2GmvKi

35YA==

X-Forwarded-Encrypted: i=1; AFNElJ8Rb4CioRmdI9ZMjGiE/W7FJiuulCk6moQf6MaUlEYwiNS8z1kSIDDJAwSCO0ju21cuebzS1xM=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxN8DhRniR36A8slu7E6InjUaSHz67IluFGx5A10SysAFpk/gt3

hmcpaEcCPrPqOOJGSczAWavliHLnu3uKpVAi/F+jF+nSrHFv+yMc3cVxXlCMSDpSeAH8xCPeBLH

H2CBeW795xk+o9ifxeIy+3qFkiQStJNM=

X-Gm-Gg: Acq92OHG7FhJufjN3Zt9HRTZVyaq6gc8G8ajphjAunN0K8TJKHFhPDy8mt050HwvJTC

la8DtNzn6WlEuYBlNMxKphCVfWoxxn8xjuJkOvRMwMgVf+3Ra7RbH+78jt4qgnJJBzA3V0gi62s

XiORqcrxujBW4mdpb2rFSBiRiQZX/WZHY3SET1m4bbwV7xUaUb3NnXWakH+VzKGqxBFc+LnM5I1

VuS7gfCgsD6PPwNCL1mgZeVWvCFBE0e+JfMrZhw2CP0vo2Aj+jbDICC/cWalA1W95AHReojwJq/

kdN2tHtb

X-Received: by 2002:a05:6402:b8a:b0:671:9dec:ba3 with SMTP id

4fb4d7f45d1cf-67e0ee9abb2mr5040837a12.13.1778480803903; Sun, 10 May 2026

23:26:43 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Ben Kerry

Date: Mon, 11 May 2026 07:26:31 +0100

X-Gm-Features: AVHnY4KuMqXBm_22HIchxd2MCWyixjdHU0xcPPikDXedLjUQzMTiyP8_Avia3TQ

Message-ID:

Subject: Fwd: jf

To: esq.kerrydavid@gmail.com

Content-Type: multipart/alternative; boundary="0000000000008e7ce6065184d434"

Bcc: doctor@doctor.nl2k.ab.ca



--0000000000008e7ce6065184d434

Content-Type: text/plain; charset="UTF-8"



How are you? Why are you ignoring me and not responding to my request?



--0000000000008e7ce6065184d434

Content-Type: text/html; charset="UTF-8"



How are you? Why are you ignoring me and not responding to my request?




--0000000000008e7ce6065184d434--

Turkish language spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 11 May 2026 06:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMPfr-00000000O8A-4821

for dave@doctor.nl2k.ab.ca;

Mon, 11 May 2026 06:23:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 11 May 2026 06:23:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f47.google.com ([209.85.218.47]:55688)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMImA-000000009bz-1AQC

for doctor@doctor.nl2k.ab.ca;

Sun, 10 May 2026 23:02:20 -0600

Received: by mail-ej1-f47.google.com with SMTP id a640c23a62f3a-bd0fc4c336eso24577566b.3

for ; Sun, 10 May 2026 22:00:18 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1778475611; cv=none;

d=google.com; s=arc-20240605;

b=dDIy8bhh9A0/wvQpdloxWC3sjurOj0JNP1DgLI6zcAKYeOTbxa04W0weUcjCyesq+a

mX+1lRZOMnVIJDAdrNrsgq1mY4KcGN2UJFgpL2AxBBxJRk3VJ8BIzrvrDbJjCGxW7bcn

ydCH4SNHbcAbgIQGOHbCMFULi7Z3HAptAMRhL13WlkHmDCvewGhL1nFjafhLQUYyQ33i

v8vnKhrU6uoojZL8enxa+JSqkpQa5QjI7aNcf/bhNZ2nj/C+5zLadx9aw9thztlpnvyk

aC6A/zldz2Mi/oFLkSd+TG5RXwDXwHMAyjz7pBsc0RKZOKIaicTJN+pVxgA01avSNudZ

qCNg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=abhBrqdcXthe0uCAhb+4jsvcMASrmjF4MF69psx1afY=;

fh=emT+pwahTK2uVcB5JUtZjgG8NjC2ImQnYKWaieSL6zo=;

b=axHxSrX9cjqxWdZiO2ooNUpv9b4i5Jub9xkmOZaB/GSqWgJKfPgb10AXbcI24nAdT2

Wc2k1WO/i1mpdytEYVgzadSlEdAZKYnjXNEC6fpPer1guVYDfd/Mv75HOBGFqhjlsdbp

fkK2ghi0BQ+T3BznzUjvZ3MMljclkrGIChko3gZJ3HydSbJLZIEaipa/dyXcFsJY85tL

4KwDivg7SP+21VO0E1C58jYRljQEFjgDu/ZhbVobrUbr1LMK2pby+o4KrIq/sy+VC/KZ

Lwk1oWBHaIkG8rWEsQ6LBaca5NbKYYHyGZ1qDL2+NAQGfuf0tHegeyiTBWYHs6OT9mW1

NP0g==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=partner.remusenerji.com; s=google; t=1778475610; x=1779080410; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=abhBrqdcXthe0uCAhb+4jsvcMASrmjF4MF69psx1afY=;

b=ZanRK0Anpt2Fps+G/8/0h6SzjguBvCfd3+JZVajSsmSvc3RfUcIW4QRd2bSqo+ONNv

aXngxCv4gO13eVKvDvHL630jv8dHdNZJd/ynk4yw75OxupB5T893xQzNNilTZYLPJNEZ

Keho+ihm7EsH/svrSEtSzWUxKW1I/n/8OrUzgoPJyQB2hP1XiTxOocv6886zwXEzUrQz

X4p4ougGHAyaaA32tDhJAdWwZUIWktgEyvBK9dWbSQ81MweeF0fijVXdyW/RCIRnXn5B

DiD3k6oO2vKajERXWu+NUgxxA8338euZg3yyczFsDn/wNYnzBPUI5EwFwmkF5u6FAMif

J3zQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778475610; x=1779080410;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=abhBrqdcXthe0uCAhb+4jsvcMASrmjF4MF69psx1afY=;

b=BAdGy4OzxTI9Uy9hUfnxJejcdAHd8qs0MviP4sAtIoqGs4Jre7tlPR00LzxY+6JAwm

4AuvVxVoSkM6rkQnILpBkW+CmBR+lHYrt00pJEU71jLAtxHLMJY3pUaao4lbFTm132eE

G1SjiCaJvCQmbUfi0S5TbWmGUzxSrw6t0kFV36hTu5Qf0NT0w7W06r0oNt3tG3oLv8uV

ZaCHjFbq09z4suOf41pw2Giw7HvwoCQQfQbl53k3C7PjIUv1qG1Ty7N4vaXZiQkW8jHp

0hDLh/eVjF7tj+Rpe/h7z6eI7GVX/LNCCCqQwxvhl8+CTninztPcM+Jr0dIpOW4Js/tP

Z4hQ==

X-Forwarded-Encrypted: i=1; AFNElJ8cjr731QQiyQZnq/6T8W0H5JL10JPhVyF4p9xzealHi9lc/bsnbTFkN8LlEpsG4rMGYELVqng=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx54XasJ6jNT8HWwkaRp4hfH+aH1iCUX38UW18SVkl4EpDx89+x

vWExxg8P0qIGSTtCk3nhP3+hxe1pSFQspPtu3gY2idvaS5X28b1U0kNPJt6Moy7O+XczEM6I/z9

/2qovuk5iDlYU0rXRjHEKib7FNUF4TTfiSQd8cj6GnA==

X-Gm-Gg: Acq92OHf4d9otjvRa/dSPZd0uo+1SoYKjHA2bu8TCmyOkJQposJyBRSBpCzFOyV+mxp

dueHUT747F9c4AWu08IqKieMi4pY8ddylYBvN7cwKX7lzMnjqE09P705iayQBQJGUC9MFxl2Lwd

xh1Nue4yDBmvWLX/vw2lTRjJIRwdoA2NXPxMpcBMymDUuGU6kmX3m3uk4SNbyVJ3yESOtbUyrHf

xAxDpEFnGKOxdFGkp4DTz9mofCeA4v6MS3LdGWlNv98vbvMGSAKIn+itTpINMWKGCM3hMj3hb+5

UOp8ge0=

X-Received: by 2002:a17:907:7208:b0:bd0:fe53:ff1d with SMTP id

a640c23a62f3a-bd0fe54047emr40317266b.29.1778475607445; Sun, 10 May 2026

22:00:07 -0700 (PDT)

MIME-Version: 1.0

From: =?UTF-8?Q?Furkan_=C3=96zbay?=

Date: Mon, 11 May 2026 08:00:00 +0300

X-Gm-Features: AVHnY4KcxQcdEtimr2CMdbAVmCA3WOcrDrL3BYpIqTMmeYnGFK_EvAFrmu-jFhg

Message-ID:

Subject: =?UTF-8?Q?Elektrik_Faturan=C4=B1z=C4=B1_Kesin_Olarak_Azalt=C4=B1yoruz?=

To: undisclosed-recipients:;

Content-Type: multipart/mixed; boundary="000000000000d597830651839e56"

Bcc: doctor@doctor.nl2k.ab.ca



Subject:

Elektrik Faturanızı Kesin Olarak Azaltıyoruz

From:

Furkan Özbay

Date:

5/10/26, 23:00

To:

undisclosed-recipients:;

BCC:

doctor@doctor.nl2k.ab.ca



Sayın Yetkili,



Artan enerji maliyetleri işletmeler için önemli bir yük haline gelirken, doğru yönetim ve doğru tedarikçi ile bu maliyetleri kesin olarak düşürmek mümkündür.



Remus Enerji olarak, işletmelerin elektrik giderlerini somut ve ölçülebilir şekilde azaltıyoruz. Geliştirdiğimiz sistemler ve sunduğumuz özel tarifeler sayesinde:



• Elektrik maliyetlerinizi net şekilde düşürüyoruz,

• %100 yeşil enerji ile sürdürülebilir ve avantajlı tedarik sağlıyoruz,

• Tüketiminizi anlık olarak izleyip gereksiz harcamaları ortadan kaldırıyoruz,

• Fatura yönetiminizi sadeleştirerek operasyonel yükünüzü azaltıyoruz.



Yapay zekâ destekli altyapımız, piyasadaki en uygun fiyatları anlık analiz ederek sizi her zaman avantajlı konumda tutar. Ayrıca anlaşmalı bankalar üzerinden faizsiz ve komisyonsuz kredi kartı ödeme imkânı ve ücretsiz enerji verimliliği uygulamamız ile tasarrufunuzu garanti altına alıyoruz.



Mevcut müşterilerimizde sağladığımız maliyet düşüşlerini, sizin işletmenizde de kısa sürede gerçekleştirebiliriz.



Sizin için en uygun enerji çözümünü birlikte belirleyelim.

Son iki dönem elektrik faturanız ve OSOS/OSF verilerinizi paylaşmanız halinde, tamamen ücretsiz analiz ve tasarruf raporunuzu hemen sunalım.



Görüşmek dileğiyle,

image.png

Furkan Özbay | Energy Advisor

Barış SB Mah. 5003 Sk. Marmara Teknokent

Teksen Kadir Has Binası İç Kapı No: Z02 Gebze / Kocaeli

M. 0537 479 5882

www.remusenerji.com

Attachments:

Remus Tanıtım Sunumu.pdf 3.4 MB



Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 19:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMFLZ-00000000Fs5-129e

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 19:22:13 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 19:22:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m82120.xmail.ntesmail.com ([156.224.82.120]:33194)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMExS-00000000E3K-2Oa1

for sales@nk.ca;

Sun, 10 May 2026 18:57:28 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_2065009_1892086343.1778460980326"

To: sales

Subject: =?UTF-8?B?UmU6IFN1YmplY3Q6IEVsZXZhdGUgWW91ciBUZXh0aWxlIEZpbmlzaGluZyB3aXRoIE91ciBTaWxpY29uZSBPaWwgU29sdXRpb25z?=

X-Priority: 3

MIME-Version: 1.0

Received: from eddy@zjdschem.com( [10.139.0.42] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 11 May 2026 08:56:20 +0800 (GMT+08:00)

From: Eddy Zhang

Date: Mon, 11 May 2026 08:56:20 +0800 (GMT+08:00)

X-WM-Tid: 0a9e1488f454d0c1kusy4abcc25829a175

DKIM-Signature: a=rsa-sha256;

b=dL877Jpl6iswKAYDsGuhxuC3QkpD7IdMgFrk6c5dqYLviQAYwgSphjpxBgQA9AgVE2UHK3pMIvuf9SQFQ29VFUgnbF02VzIpt8hL7YPoFaLe4yPdDYp9Nt0uDEKVgQtkEv2AZTjT1dP8Ma3cE4PPfZnkg22v17+B/pd3gfY2EvE=; s=default; c=relaxed/relaxed; d=zjdschem.com; v=1;

bh=icMEiOdKn7zsJXjHKEtF0ZxqqjsienEGf3QTb0rHULY=;

h=date:mime-version:subject:message-id:from;

Message-ID:







Dear sales,











I hope this email finds you well. My name is Eddy Zhang, Foreign Trade Sales at Dongyang Desheng Dyeing Textile Auxiliary Co., Ltd. Established in 2010, we have over a decade of experience in producing innovative textile auxiliaries. Our manufacturing base in Jiangbei Industrial Zone, Zhejiang Province, supports a modern production, sales, and after-sales service chain.







We specialize in high-quality silicone oil and levelling agents, designed to enhance the resilience, softness, and smoothness of various fabrics. Our products offer excellent stability, non-stick properties, and are APEO-free, ensuring compliance with environmental safety regulations. We proudly serve clients in Pakistan, Bangladesh, Vietnam, Malaysia, and beyond.







I would love to discuss how our customized solutions can benefit your textile finishing processes. Looking forward to future cooperation.











Best regards,









DONGYANG DESHENG

DYEING AUXILIARIES CO., LTD

Eddy Zhang

Foreign Trade Department

TEL: 86 152 6862 5008 (Whatsapp/Wechat/Facebook )

MAIL: eddy@zjdschem.com



If you don't want to receive our emails, you can easily unsubscribe here.

nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 19:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMFWg-00000000Gkq-19rA

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 19:33:42 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 19:33:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.sf.kg ([212.112.102.195]:60628)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from <402.a.mergenbaev@sf.kg>)

id 1wMFTr-00000000GUE-3M5y

for root@doctor.nl2k.ab.ca;

Sun, 10 May 2026 19:30:58 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.sf.kg (Postfix) with ESMTP id 558184E52F5DD;

Thu, 7 May 2026 03:10:42 +0600 (+06)

Received: from mail.sf.kg ([127.0.0.1])

by localhost (mail.sf.kg [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id t_5EV46rP4Td; Thu, 7 May 2026 03:10:42 +0600 (+06)

Received: from localhost (localhost [127.0.0.1])

by mail.sf.kg (Postfix) with ESMTP id A55DA4B8415EA;

Tue, 5 May 2026 15:43:40 +0600 (+06)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.sf.kg A55DA4B8415EA

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sf.kg;

s=763E2812-1931-11ED-B42E-810EFC213C9A; t=1777974221;

bh=Q7u3W1l6fOkhqUwZfSiyOSpUzD78w1fMysfzAzQvXBc=;

h=MIME-Version:To:From:Date:Message-Id;

b=hu9G/syPsmsmBAD0qKXag0TcMZxj6l021NeYAi7DjXy99IbTMe0+OH+NffIurYxjG

BbZMjAelxCus+aYVf7RVY/oijhpqAdZ0DTpkz44aJEPY3ENo2X5aeoUqCNnEsl6sj8

MuBBZCNrOebH464QlO0eCygv8a5SAju+4Kmf0MVEBmjoyzvOdd2LuOB5VajFwPiZrS

W2jAaEyUPNB2BwMpYYMB9Ae/wBRC2nRHtE8biA7XZ/frifrSClRU5rdTuyI2w3IRDy

VOb0qQyvYrUwX7dYJYpfN4HchKffhA3Ji1pp7D9UFyC5dkV2OJUVWAV5+jJmDLwzGE

3hlaOlGsKvRHQ==

X-Virus-Scanned: amavisd-new at sf.kg

Received: from mail.sf.kg ([127.0.0.1])

by localhost (mail.sf.kg [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id BtmJrpxaXr35; Tue, 5 May 2026 15:43:40 +0600 (+06)

Received: from [194.59.31.250] (unknown [194.59.31.250])

by mail.sf.kg (Postfix) with ESMTPSA id EE0494AD49CF0;

Tue, 5 May 2026 11:01:44 +0600 (+06)

Content-Type: multipart/alternative; boundary="===============2146471402=="

MIME-Version: 1.0

Subject: Re: I need your help now

To: Recipients <402.a.mergenbaev@sf.kg>

From: " Olena Shevchenko" <402.a.mergenbaev@sf.kg>

Date: Tue, 05 May 2026 06:38:49 -0700

Reply-To: olenashev1@amail.az

Message-Id: <20260505050145.EE0494AD49CF0@mail.sf.kg>

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I am a Ukrainian, I have funds for investment, can i trust

you to guide me invest in your country? Please help me. Ole.



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[212.112.102.195 listed in bl.score.senderscore.com]

2.6 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)

[212.112.102.195 listed in bl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.0 FROMSPACE Idiosyncratic "From" header format

0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers

2.4 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Re: I need your help now



You will not see this in a MIME-aware mail reader.

--===============2146471402==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Hi, I am a Ukrainian, I have funds for investment, can i trust you to guide=

me invest in your country? =





Please help me.



Ole.



--===============2146471402==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>


serif; COLOR: black">Hi, I am a Ukrainian, I have funds for investment, can=

i trust you to guide me invest in your country?

Please help me.
>
Ole.



--===============2146471402==--

Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 19:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMFWY-00000000GkG-1Q6y

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 19:33:34 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 19:33:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.sf.kg ([212.112.102.195]:60554)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from <402.a.mergenbaev@sf.kg>)

id 1wMFTr-00000000GSx-3M3Z

for root@mail.nl2k.ab.ca;

Sun, 10 May 2026 19:30:58 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.sf.kg (Postfix) with ESMTP id AA24A4E55D0C4;

Thu, 7 May 2026 03:10:42 +0600 (+06)

Received: from mail.sf.kg ([127.0.0.1])

by localhost (mail.sf.kg [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id Wp0ZCr-VwuCW; Thu, 7 May 2026 03:10:42 +0600 (+06)

Received: from localhost (localhost [127.0.0.1])

by mail.sf.kg (Postfix) with ESMTP id 76A644454E2F8;

Tue, 5 May 2026 15:43:41 +0600 (+06)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.sf.kg 76A644454E2F8

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sf.kg;

s=763E2812-1931-11ED-B42E-810EFC213C9A; t=1777974222;

bh=Q7u3W1l6fOkhqUwZfSiyOSpUzD78w1fMysfzAzQvXBc=;

h=MIME-Version:To:From:Date:Message-Id;

b=ElOKzD5Dx/8PYo/I5nufVL0isO3wILs89xfgPEXl0i0b5ViFeKAsuX7QrPnQFIVD8

qkoolFaWmxGalW+rffhkxAbPwehd7z6fAgmgMyD3LnZbsiIyqW6ymoxNWl7r/LGlyZ

MOF20cIlpXKGX7D+Fh0EsKJhDxokhm7b7CJW2+kC68Z9eghvTwO3m7xKNjZwaX+1LE

0/jQt9aCEaJEtYJkqPpP4AYuT0WopvV903gIN4PvbdCslUv4D1cx5Q0lUFWJDWVqhx

ydhYZSxBgyvSTYi5PLbvU4dHodBxMDASYcnOtnWHbWxAIGnUKJybnHCvMRt+6azSv6

3U/uPVjmyHMJg==

X-Virus-Scanned: amavisd-new at sf.kg

Received: from mail.sf.kg ([127.0.0.1])

by localhost (mail.sf.kg [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id 1EihvBmZZyjM; Tue, 5 May 2026 15:43:41 +0600 (+06)

Received: from [194.59.31.250] (unknown [194.59.31.250])

by mail.sf.kg (Postfix) with ESMTPSA id EE0494AD49CF0;

Tue, 5 May 2026 11:01:44 +0600 (+06)

Content-Type: multipart/alternative; boundary="===============2146471402=="

MIME-Version: 1.0

Subject: Re: I need your help now

To: Recipients <402.a.mergenbaev@sf.kg>

From: " Olena Shevchenko" <402.a.mergenbaev@sf.kg>

Date: Tue, 05 May 2026 06:38:49 -0700

Reply-To: olenashev1@amail.az

Message-Id: <20260505050145.EE0494AD49CF0@mail.sf.kg>

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I am a Ukrainian, I have funds for investment, can i trust

you to guide me invest in your country? Please help me. Ole.



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[212.112.102.195 listed in bl.score.senderscore.com]

2.6 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)

[212.112.102.195 listed in bl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.0 FROMSPACE Idiosyncratic "From" header format

0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers

2.4 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Re: I need your help now



You will not see this in a MIME-aware mail reader.

--===============2146471402==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Hi, I am a Ukrainian, I have funds for investment, can i trust you to guide=

me invest in your country? =





Please help me.



Ole.



--===============2146471402==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>


serif; COLOR: black">Hi, I am a Ukrainian, I have funds for investment, can=

i trust you to guide me invest in your country?

Please help me.
>
Ole.



--===============2146471402==--

nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 19:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMFJa-00000000FjZ-15wU

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 19:20:10 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 19:20:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.sf.kg ([212.112.102.195]:54172)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from <402.a.mergenbaev@sf.kg>)

id 1wMEXd-00000000Bou-33Gz

for doctor@nl2k.ab.ca;

Sun, 10 May 2026 18:30:46 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.sf.kg (Postfix) with ESMTP id 9FB934DFC9678;

Thu, 7 May 2026 03:05:56 +0600 (+06)

Received: from mail.sf.kg ([127.0.0.1])

by localhost (mail.sf.kg [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id oFVoHeePLYS0; Thu, 7 May 2026 03:05:56 +0600 (+06)

Received: from localhost (localhost [127.0.0.1])

by mail.sf.kg (Postfix) with ESMTP id B28AC4DFCB343;

Tue, 5 May 2026 15:37:06 +0600 (+06)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.sf.kg B28AC4DFCB343

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sf.kg;

s=763E2812-1931-11ED-B42E-810EFC213C9A; t=1777973826;

bh=fLNdftdjLm1MsjlRy1DC+KXKVrjTxvegmgYVAX9fUz0=;

h=MIME-Version:To:From:Date:Message-Id;

b=NoLH668S26aBwNZhkvzLsIn2EA2o89y29VVRiwB2jqjEJAoA6k/pDacLL2rdDYSL0

HuvuJsVpRZgyBjCD1xsOr4/WZJ6pRfxOmUTxJZaj11gzU8TlNVQfEhncW6IzDSAyZ7

HXqWyIb9Pg9YYNDt1TafHHWzegq2HY5MhKT/9OPwK//znx3sHzJuw4H4OtwnjKUGxC

Kr6+5hj+n4jqP91KhYAJX3q9l9Y38SfEYm6ckxNvjrY38GmSM8kr5fRC/wAfExjxhG

S/36hksBae+LXi7VYIJvBemwfh0RdlAj/vuWYI7Mg2l0WjUrTfczf/UN+R/QAmc++o

d/tulEfPI0bow==

X-Virus-Scanned: amavisd-new at sf.kg

Received: from mail.sf.kg ([127.0.0.1])

by localhost (mail.sf.kg [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id dko7-22nybf2; Tue, 5 May 2026 15:37:06 +0600 (+06)

Received: from [194.59.31.250] (unknown [194.59.31.250])

by mail.sf.kg (Postfix) with ESMTPSA id A35044AEBD284;

Tue, 5 May 2026 10:29:17 +0600 (+06)

Content-Type: multipart/alternative; boundary="===============1021953823=="

MIME-Version: 1.0

Subject: Re: I need your help now

To: Recipients <402.a.mergenbaev@sf.kg>

From: " Olena Shevchenko" <402.a.mergenbaev@sf.kg>

Date: Tue, 05 May 2026 06:06:22 -0700

Reply-To: olenashev1@amail.az

Message-Id: <20260505042918.A35044AEBD284@mail.sf.kg>

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I am a Ukrainian, I have funds for investment, can i trust

you to guide me invest in your country? Please help me. Ole.



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[194.59.31.250 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.0 FROMSPACE Idiosyncratic "From" header format

0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers

2.4 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.6 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)

[212.112.102.195 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[212.112.102.195 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

Subject: {SPAM?} Re: I need your help now



You will not see this in a MIME-aware mail reader.

--===============1021953823==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Hi, I am a Ukrainian, I have funds for investment, can i trust you to guide=

me invest in your country? =





Please help me.



Ole.



--===============1021953823==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>


serif; COLOR: black">Hi, I am a Ukrainian, I have funds for investment, can=

i trust you to guide me invest in your country?

Please help me.
>
Ole.



--===============1021953823==--

Nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <402.a.mergenbaev@sf.kg>

Envelope-to: dave@nk.ca

Delivery-date: Sun, 10 May 2026 18:22:00 -0600

Received: from mail.sf.kg ([212.112.102.195]:35924)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from <402.a.mergenbaev@sf.kg>)

id 1wMEP4-00000000BCs-1ajB

for dave@nk.ca;

Sun, 10 May 2026 18:21:58 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.sf.kg (Postfix) with ESMTP id 708CE413BB3D5;

Thu, 7 May 2026 03:05:24 +0600 (+06)

Received: from mail.sf.kg ([127.0.0.1])

by localhost (mail.sf.kg [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id iEz5G3O0jZ0D; Thu, 7 May 2026 03:05:24 +0600 (+06)

Received: from localhost (localhost [127.0.0.1])

by mail.sf.kg (Postfix) with ESMTP id E39AF4D531B05;

Tue, 5 May 2026 15:36:37 +0600 (+06)

DKIM-Filter: OpenDKIM Filter v2.10.3 mail.sf.kg E39AF4D531B05

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sf.kg;

s=763E2812-1931-11ED-B42E-810EFC213C9A; t=1777973798;

bh=TPjsm4BC0A+iAOHk2yxQgR8wwUc4bf7cnDOHuXiluKs=;

h=MIME-Version:To:From:Date:Message-Id;

b=JeYkrL7M4rdCw10+j95UaILWNGrrtDNJDPBitzobLPPfnHilHGSnSaUtnwG4z0DWI

OCSAOCULUVv5EuQrv/e+hFXF4rN0gMMG/0+Pqd5nCa0oZW4OkwzqPOimR5k/N14b/5

bXJ91Pj/lLpg1SFaI7UJyCKgZ2iF6VBEd0kBI1tLKQZJuaEtF/7juJHZx5PNXe0raT

rDTNgrUOdh0mP9o7c8tnOZmin7gc4KNNxKFEvcjwhM5cY6kPzUhAai0I6NOTrVRZQ9

pMvY+Nbc6327QKOglLKZM/fTk2L7w3B4MrM1sFjHapjOon/wpGe+DxqQ+/tSVjdZhz

8qWo/b/B9J/Ow==

X-Virus-Scanned: amavisd-new at sf.kg

Received: from mail.sf.kg ([127.0.0.1])

by localhost (mail.sf.kg [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id LpkTUJFU-xQW; Tue, 5 May 2026 15:36:37 +0600 (+06)

Received: from [194.59.31.250] (unknown [194.59.31.250])

by mail.sf.kg (Postfix) with ESMTPSA id 2EDC14AE267B4;

Tue, 5 May 2026 10:27:48 +0600 (+06)

Content-Type: multipart/alternative; boundary="===============2129957922=="

MIME-Version: 1.0

Subject: Re: I need your help now

To: Recipients <402.a.mergenbaev@sf.kg>

From: " Olena Shevchenko" <402.a.mergenbaev@sf.kg>

Date: Tue, 05 May 2026 06:04:54 -0700

Reply-To: olenashev1@amail.az

Message-Id: <20260505042749.2EDC14AE267B4@mail.sf.kg>

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I am a Ukrainian, I have funds for investment, can i trust

you to guide me invest in your country? Please help me. Ole.



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[212.112.102.195 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

[194.59.31.250 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.112.102.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.112.102.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.112.102.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.112.102.195 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[194.59.31.250 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

[212.112.102.195 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[212.112.102.195 listed in bl.score.senderscore.com]

2.6 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)

[212.112.102.195 listed in bl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.0 FROMSPACE Idiosyncratic "From" header format

0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers

2.4 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Re: I need your help now



You will not see this in a MIME-aware mail reader.

--===============2129957922==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Hi, I am a Ukrainian, I have funds for investment, can i trust you to guide=

me invest in your country? =





Please help me.



Ole.



--===============2129957922==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>


serif; COLOR: black">Hi, I am a Ukrainian, I have funds for investment, can=

i trust you to guide me invest in your country?

Please help me.
>
Ole.



--===============2129957922==--



Costco Survey phish from Microsoft Outlook Part 3































































































COSTCO MEMBER REWARDS




Limited-time exclusive opportunity









EXCLUSIVE GIVEAWAY







Win a YETI Beach Lounge Wagon







As a valued Costco member, you’ve been selected for a chance to receive a brand-new

YETI Beach Lounge Wagon.

Answer a quick question to confirm your entry and claim your reward.































Premium Quality


Durable and built for outdoor comfort



Easy Participation


Takes less than a minute



Exclusive Access


Limited to selected Costco members



No Purchase Needed


Completely free to enter










style="background:#E53935;color:#ffffff;padding:14px 40px;text-decoration:none;font-weight:bold;border-radius:6px;display:inline-block;">

GET IT NOW






Limited availability. One entry per household.







You are receiving this email as part of a promotional rewards program.



Unsubscribe





















--_4b7bda0d-a248-47d2-9e97-189b99cd3395_--

Costco Survey phish from Microsoft Outlook Part 2



Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.107.208.129 listed in dnsbl.ahbl.org]

[40.107.208.129 listed in dnsbl.ahbl.org]

[40.107.208.129 listed in dnsbl.ahbl.org]

[40.107.208.129 listed in dnsbl.ahbl.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[dnsbl.ahbl.org]

[104.238.213.166 listed in dnsbl.ahbl.org]

[104.238.213.166 listed in dnsbl.ahbl.org]

[104.238.213.166 listed in dnsbl.ahbl.org]

[104.238.213.166 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.107.208.129 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.107.208.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.107.208.129 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.107.208.129 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[104.238.213.166 listed in will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:cafe:0:0:c3 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:1f0:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

[40.107.208.129 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: hermizo.digital]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist

[URI: hermizo.digital]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.2 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: www.hermizo.digital]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[buvedpcqydkxqgqmgresf(at)councilonagingof65285.onmicrosoft.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.208.129 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.107.208.129 listed in bl.score.senderscore.com]

0.3 OFFER BODY: Offers you Something

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: hermizo.digital]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.208.129 listed in list.dnswl.org]

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Your Costco Survey Reward Is Ready



--_4b7bda0d-a248-47d2-9e97-189b99cd3395_

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 7bit





















Costco Exclusive Offer

Costco Survey phish from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 15:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wMBR1-00000000NNO-2GLe

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 15:11:35 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 15:11:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus3azon11021129.outbound.protection.outlook.com ([40.107.208.129]:49140 helo=PH0PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM9yc-00000000Gcd-0cyr

for doctor@doctor.nl2k.ab.ca;

Sun, 10 May 2026 13:38:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Tv+sumIPDwYo1MHA58TVVf4Jz3zcVkdOIqVh1Xnr7+5B+oJH3gukndIQRQuIDlxQ4qYIJZfBspSjSXgsUfScnCnSk/+aU2T/ggnWdjG4Jlt0uHVMAVm2YNCWIluqojCvl/QLyZv80DWDcDyIsELqVAG0EGbVABtyTPgY8WVF6ZXY23ENbk/SKm8EGUn70OwG3yP50MRnBf7VVhtn4u2ZEfD6p+6oO+7dEoHD453SdHbjW5EdCZoylygMZr0fT9wRAN8ZFiI4kf2x+FzL8hgkLBMHBO8xVTsrlm1o7FdITV+0g+ysQAxeXcCdFUiHfhGk0oJBL50A4eE5jgY7CpAGWw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=mevWowwRL6fwxW19Brwcpbav0TIvRIPdSLuT09D8mcM=;

b=MC6CBvgaWlmNtYusuEQ2YK6k5g5n+am8Zy1afCxW8BGrtBFoIR7AT8OUkuGPYcr/8Wje+CVK5LpyYXP1jnxquyK5C1bH/OuKOuZQ73J4bn4XtQOANnbay27BySKqXphG7A7zlvbY+YUTViHZPHlR0kjWAozShsPfFQ3NFi27hx40+kLLQdidd5C7iag0w805ycEQW5A+IdgWd3ALWgCuuxpiy11yt0TCVUJmqlfo4Rny5oumsn+1rik5NYY67MtOMF+3xKd84vdIt2SmFViSLJTOrHPxeKRUvw9HqeA77yB2QcO+0p9NGkvr7ymz1LKFNUdQQD+7DrESW/swyklqrA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

104.238.213.166) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=councilonagingof65285.onmicrosoft.com; dmarc=none action=none

header.from=councilonagingof65285.onmicrosoft.com; dkim=none (message not

signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=councilonagingof65285.onmicrosoft.com;

s=selector1-councilonagingof65285-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=mevWowwRL6fwxW19Brwcpbav0TIvRIPdSLuT09D8mcM=;

b=ByvyVkMOY5ydqRfNfQVt+ngpxJnavqILNjKPzOCgoxkiMFIcSuAP8jM2YJ8pXN/oXU45NpJHMu2Mc2dVzVltEu85c3OmK11LroYHGG7KCk8RWeeSaLlxs20gMqYMA2OcNINXC3swqEwD+VorUKTU1pjpTmoFfaEhhhtd0237jjhHaeLeing8QdJFb8NniVc8Z4/FaHm92ZPIMO7n4aGtT81v31M6d/C18UU7lVtwmoZy4o+mCuxc4HMnxQx/CRp8p98fME4iRyFlxma4DPsWQsuugvl7kL5LJkj+rDiFF82xpXg+b0d6hT3/ERbO/cGwie1VU9fwKmvZsE/4BxdPBw==

Received: from CH5PR05CA0020.namprd05.prod.outlook.com (2603:10b6:610:1f0::13)

by CH0PR15MB6236.namprd15.prod.outlook.com (2603:10b6:610:192::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9891.15; Sun, 10 May

2026 19:37:15 +0000

Received: from CH1PEPF0000AD7E.namprd04.prod.outlook.com

(2603:10b6:610:1f0:cafe::c3) by CH5PR05CA0020.outlook.office365.com

(2603:10b6:610:1f0::13) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.25.14 via Frontend Transport; Sun, 10

May 2026 19:37:15 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 104.238.213.166)

smtp.mailfrom=councilonagingof65285.onmicrosoft.com; dkim=none (message not

signed) header.d=none;dmarc=none action=none

header.from=councilonagingof65285.onmicrosoft.com;

Received-SPF: Fail (protection.outlook.com: domain of

councilonagingof65285.onmicrosoft.com does not designate 104.238.213.166 as

permitted sender) receiver=protection.outlook.com; client-ip=104.238.213.166;

helo=councilonagingof65285.onmicrosoft.com;

Received: from councilonagingof65285.onmicrosoft.com (104.238.213.166) by

CH1PEPF0000AD7E.mail.protection.outlook.com (10.167.244.87) with Microsoft

SMTP Server id 15.21.25.13 via Frontend Transport; Sun, 10 May 2026 19:37:14

+0000

MIME-Version: 1.0

From: Costco Surveys

Subject: Your Costco Survey Reward Is Ready

Date: Sun, 10 May 2026 20:34:57 +0100

To: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative;

boundary="_4b7bda0d-a248-47d2-9e97-189b99cd3395_"

Message-ID:

<67b34c14-72a2-41a9-8e77-52176ab7f485@CH1PEPF0000AD7E.namprd04.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CH1PEPF0000AD7E:EE_|CH0PR15MB6236:EE_

X-MS-Office365-Filtering-Correlation-Id: ca2b3d76-1ee4-495c-4b0a-08deaecb89e3

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|376014|34020700016|82310400026|36860700016|61400799027|4022899009|8096899003|18002099003|16102099003|85622059|56012099003;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:104.238.213.166;CTRY:US;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:councilonagingof65285.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(376014)(34020700016)(82310400026)(36860700016)(61400799027)(4022899009)(8096899003)(18002099003)(16102099003)(85622059)(56012099003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

UWhUFt/b1A1KeUHYi4SWwDE+16oKMztiIksUanII+XEJ7fwHXNM2oxtls8JYJOl6IEBUDvF8zSx0yZ0wGjZlYvL436WYfhpgPHllAI0jALnDvoTWS6Kbs4kAbiwh3UZ2LK/k3RvwwnSu9GpyvT6IGIwBSplTY2fGZSsOtph0MDhzUbE+SMhWGi/3x0LO5qs68jU/DkzF6yYVO94wRXySpWPRwQXA8BSMbmdjmgI9S7hWmcOHMy4GLnuNoGEFDigjba2zZzJse1q+5yJWt/s0gAwnpquhC7AzP8Q5FQGOCO06wmZsvhuC032ILtXL1/qp8zhhT5mT8sBRpoPuEleBBcljJ8GEC/h7y4iZ8PUdLC/Z4ARgpbuhmtnZrq3WwU+tNdE6YB/cOwnFLia+zQSQG+20py/5d/SDgTzn4AqMCxqAhsLXNHdXE9jPrEXnypbV

X-OriginatorOrg: councilonagingof65285.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 May 2026 19:37:14.6759

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: ca2b3d76-1ee4-495c-4b0a-08deaecb89e3

X-MS-Exchange-CrossTenant-Id: c06ed4ac-ac23-4161-a733-d5ba6c748b9c

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c06ed4ac-ac23-4161-a733-d5ba6c748b9c;Ip=[104.238.213.166];Helo=[councilonagingof65285.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

CH1PEPF0000AD7E.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH0PR15MB6236

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Costco Exclusive Offer COSTCO MEMBER REWARDS

Web/SEo/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 08:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM5R8-000000000ZV-31Ju

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 08:47:18 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 08:47:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f72.google.com ([209.85.217.72]:56545)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM55l-00000000Lf2-0f0d

for sales@nk.ca;

Sun, 10 May 2026 08:25:22 -0600

Received: by mail-vs1-f72.google.com with SMTP id ada2fe7eead31-6332db4182dso424148137.0

for ; Sun, 10 May 2026 07:24:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1778423059; x=1779027859; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=KM9Mk8P3Q4d7oOJbpCOskUdbUgp0M7b3siAd7eOaS9M=;

b=N/ONfbJFZO/22mf2qxjQhAY4iruoQQ0XVrZ01os3I/8kbo2+zz273+Oj35AdRoAobW

7QDdqnoEhAFIuSBjL8P9wDFBcOh25JlBi/DmHh7XugT5mYRFWhG0R/1/xjf5hXhf48KY

7LWXCW8tQDVSpt3PbMPR83bsGt8qx7RKa39vEv8PP/dWo4TlT5b/62RGDMhoeY/FW/Qm

e3Y9mDHtZwjJ7OnhuF+kLURzNwc0U1vdXVcXeq/mpJLuxe0+pLdGRxzjWyfbjfq3jaSr

Y9hQfw4Hvu9sTk2lCZDS/ty5lpChALzmC5RY+IuJzl0KabDM/L5c2qf8m41tKyRuuyV4

/bKQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778423059; x=1779027859;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=KM9Mk8P3Q4d7oOJbpCOskUdbUgp0M7b3siAd7eOaS9M=;

b=ZladjN+Rc4/oEyuDvv5ssgpr0GvwFs7ts5ZpfTWvNA3oFh1t6Kv3uQ6fuS3L/0556W

dRrQbb27nAG7aNFqgnCEAEyw7njPrsT2BnUimZ1VJzmH20szQvOiIqHxyYTRu/jrkrAK

mCFom/mjPMGbvcnHINJYTVqWrnLFkiO9E54tIiqdephDK3kCigduZ+5KrYWrySXNtRfq

pGwL2Vsot5LVE5T1nXpKtgJMVJ7HNCCRzpEm+LSOwn8rWbQwi/nRuRBFVoGcW+f3kQPi

YzXIRQZKmHUZc/yLHJOnNYY+JbFhLAocczgFGlNISy/0AoI30Za0+kLANPiFqzm6Zsj3

lGAw==

X-Gm-Message-State: AOJu0YxWeFNd0ebBL8LPsg31vAQJqhvNr4OkOmSupKgiMwKvcIKzwtMO

4JqVotDXdaM4broGhnkGqo0pML1AK5hYhhB5Nl9aFTQqAeNb3k80AZ6M2m113+kJDiHhAhrU6hA

HS/c=

MIME-Version: 1.0

X-Received: by 2002:a05:6102:2ac7:b0:633:c6c4:b32c with SMTP id

ada2fe7eead31-633c6c4b990mr516594137.15.1778423059142; Sun, 10 May 2026

07:24:19 -0700 (PDT)

Message-ID:

Date: Sun, 10 May 2026 14:24:19 +0000

Subject: Pricing 5/10/2026

From: jamesmateo385@gmail.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000b35b46065177628b"



--000000000000b35b46065177628b

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hello sir/mam

Have a good day,



I looked over your website and believe that both it and your company have a

lot of potential.



I would like to send you a Proposal of your business website!



You can get your website on the 1st page of GOOGLE.



Can I send a You Quotation and Price?



Thank you!

Mateo



--000000000000b35b46065177628b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello sir/mam
Have a good day,

I looked over your website and bel=

ieve that both it and your company have a lot of potential.

I would =

like to send you a Proposal of your business website!

You can get yo=

ur website on the 1st page of GOOGLE.

Can I send a You Quotation an=

d Price?

Thank you!
Mateo

--000000000000b35b46065177628b--

Fedex phish from Sendgrid Part 2




r=3D"0" style=3D"background:#ffffff; border-top:1px solid #e3e3e3;">










=3D"0" border=3D"0" style=3D"max-width:500px;">








0px;">


=3D"display:inline-block; background:#ffffff; border:2px solid #007ab7; col=

or:#007ab7; font-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:=

16px; font-weight:700; text-decoration:none; padding:12px 28px; border-radi=

us:40px; letter-spacing:0.5px;">Confirm and Resolve Charges











r=3D"0" style=3D"background:#ffffff; border-top:1px solid #e3e3e3;">








px;">


=3D"0" border=3D"0" style=3D"max-width:500px;">







=20









=20









=20



=20

=20









=20









=20










dEx Sans', Roboto, Arial, sans-serif; font-size:24px; font-weight:300; colo=

r:#333; padding-bottom:30px;">

Tracking details


3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Tracking ID


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#007ab7; vertical-align:top;">


45b4" style=3D"color:#007ab7; text-decoration:none; font-weight:600;"> 5514=

58785652125





3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Canada


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

{{DATE}} {{TIME}}




3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Number of pieces


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

1




3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Total shipment weight


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

2.40 LB




3; padding:14px 0;">


cellspacing=3D"0" border=3D"0">










-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:600; color:#333; vertical-align:top;">

Service


-family:'FedEx Sans', Roboto, Arial, sans-serif; font-size:16px; font-weigh=

t:300; color:#333; vertical-align:top;">

FedEx International Connect=

Plus