Inida based spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 06:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM3KI-00000000MAx-3D2W

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 06:32:06 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 06:32:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.solanova.com ([216.157.69.7]:36218)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM2Oj-00000000GOy-08Wj

for sales@nk.ca;

Sun, 10 May 2026 05:32:46 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=feaindia.org;

s=default; t=1778412707;

bh=e4ujnA1s8mZD5VsNtqNcbQbWKs2D7yWvO6sCJhcFNpQ=;

h=Received:Received:From:To:Subject;

b=r/h5EtG5LnDAVLTTB5W+6gVK9Z65MjbXqL3E/7Qe56zB5ziTr8Tpx4JftCSJim14b

Y0G2c7sDXGokhbJ9fy5S7lrRzf3wCKeN3SSs/VqM3sDhXH8rpOP4RiQ3DmteEJH4Al

Wj+0jLfzJBCY+RSeaMGleo/QrD9noCeWYCvo3whw=

Received: (qmail 58486 invoked from network); 10 May 2026 02:10:59 -0400

Authentication-Results: mail.solanova.com;

spf=pass (sender IP is 92.63.196.140) smtp.mailfrom=poonam.sharma@feaindia.org smtp.helo=hjztited

Received-SPF: pass (mail.solanova.com: connection is authenticated)

Received: from unknown (HELO hjztited) (92.63.196.140)

by mail.solanova.com with ESMTPSA (AES256-GCM-SHA384 encrypted,

authenticated); 10 May 2026 02:10:58 -0400

Message-ID:

Reply-To: Paul

From: Paul

To: Ole

Subject: casino leads , forex leads ,

pharma leads for sale and also complete casino databases

Date: Sun, 10 May 2026 08:10:27 +0200

MIME-Version: 1.0

Content-Type: text/plain;

format=flowed;

charset="utf-8";

reply-type=original

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Windows Live Mail 16.4.3528.331

X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3528.331

X-PPP-Message-ID: <177839345964.58480.3212018520313139638@mail.solanova.com>

X-PPP-Vhost: feaindia.org

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello I sell casino leads, forex leads, pharma leads, and

also entire casino databases. The price depends on which countrys and how

many leads.



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[216.157.69.7 listed in dnsbl.ahbl.org]

[216.157.69.7 listed in dnsbl.ahbl.org]

[216.157.69.7 listed in dnsbl.ahbl.org]

[216.157.69.7 listed in dnsbl.ahbl.org]

[92.63.196.140 listed in dnsbl.ahbl.org]

[92.63.196.140 listed in dnsbl.ahbl.org]

[92.63.196.140 listed in dnsbl.ahbl.org]

[92.63.196.140 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[216.157.69.7 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[216.157.69.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[216.157.69.7 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[216.157.69.7 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[92.63.196.140 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

[216.157.69.7 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[92.63.196.140 listed in sbl-xbl.spamhaus.org]

[92.63.196.140 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[92.63.196.140 listed in zen.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 STOX_REPLY_TYPE No description available.

0.5 SARE_SUB_CASINO Subject contains spammer subject - gambling

0.3 LONGWORD BODY: Uses overlong words

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[216.157.69.7 listed in bl.score.senderscore.com]

1.9 STOX_REPLY_TYPE_WITHOUT_QUOTES No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} casino leads , forex leads ,

pharma leads for sale and also complete casino databases



Hello



I sell casino leads, forex leads, pharma leads, and also entire casino da=

tabases.



The price depends on which countrys and how many leads.



If you want to buy, contact me on Telegram @emaildba.



I accept only bitcoin or another cryptocurrency as payment method.



Do not reply to this email.











npkhuwvxrhlfqxqurvjqcqhkkpyulucvslhehxivmuojperpzuu

Chinese products spam Part 2





Dear Sir or Madame,







We are the supplier & exporter company for Chemical raw materials from CHINA.



And highly specialized in this field so many years.







(Chemical raw materials) :







- Caustic Soda Pearls, Caustic Soda Flakes, Zinc Oxide, Adipic Acid 99.8%,



STPP, SHMP, MEG, SLES 70%, LABSA 96%;







Our price:







Caustic soda pearls 99%, FOB XINGANG CHINA, USD380/MT







Caustic soda flakes 99%, FOB XINGANG CHINA, USD370/MT







-



Packing: 25KG per bags, 25MT in the 20ft container.



Delivery time: Within 7-15 days.







If you need then can contact us.



Pls consider buy from us.







Best regards



Mr. Aaron Wang // Sales Manager







Hebei Decun Chemicals Co., Ltd



Phone/WhatsApp: +86-17069180497









Chinese products spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 May 2026 05:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wM2M9-00000000B5x-0b0S

for dave@doctor.nl2k.ab.ca;

Sun, 10 May 2026 05:29:57 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 May 2026 05:29:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp-my3-09p82.yunyou.top ([60.247.169.82]:49550)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLuXk-00000000NE4-3Vxi

for root@nk.ca;

Sat, 09 May 2026 21:09:35 -0600

X-WEST-DOMAIN: yes,d=supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

X-SENDER:supply@cnmastercopy.com

Received: from MS-YSIPVJWXFCJB (unknown [183.215.215.36])

by smtp-my-13.yunyou.top (WestCloudMail) with ESMTPA id 2FFE298B2B;

Sun, 10 May 2026 11:05:32 +0800 (CST)

Date: Sun, 10 May 2026 11:05:32 +0800

From: "- PAPER -"

To: admin

Subject: =?utf-8?B?UkU6IEhpZ2ggUXVhbGl0eSBGYWN0b3J5IEluIENoaW5hIDk5JSBIaWdoIFB1cml0eSBJcm9uIE94aWRl4oCCcGlnbWVudA==?=

X-Priority: 3

X-GUID: 9CAE6AD8-E117-4565-B39F-32A065D1B211

X-Has-Attach: no

X-Mailer: Foxmail 7.2.25.317[cn]

Mime-Version: 1.0

Message-ID: <2025091500463839521460@cnmastercopy.com>

Content-Type: multipart/alternative;

boundary="----=_001_NextPart340712105841_=----"

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir or Madame, We are the supplier & exporter company

for Chemical raw materials from CHINA. And highly specialized in this field

so many years. (Chemical raw materials) :



Content analysis details: (10.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[60.247.169.82 listed in dnsbl.ahbl.org]

[60.247.169.82 listed in dnsbl.ahbl.org]

[60.247.169.82 listed in dnsbl.ahbl.org]

[60.247.169.82 listed in dnsbl.ahbl.org]

[183.215.215.36 listed in dnsbl.ahbl.org]

[183.215.215.36 listed in dnsbl.ahbl.org]

[183.215.215.36 listed in dnsbl.ahbl.org]

[183.215.215.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[60.247.169.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[60.247.169.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[60.247.169.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[60.247.169.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[183.215.215.36 listed in sbl-xbl.spamhaus.org]

[183.215.215.36 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[183.215.215.36 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[60.247.169.82 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

[183.215.215.36 listed in will-spam-for-food.eu.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[60.247.169.82 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?} =?utf-8?B?UkU6IEhpZ2ggUXVhbGl0eSBGYWN0b3J5IEluIENoaW5hIDk5JSBIaWdoIFB1cml0eSBJcm9uIE94aWRl4oCCcGlnbWVudA==?=

Chinese products spam Part 3

BR CR NBR EPDM VITON )


yle=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; font-weight: 700;=

color: rgb(0, 176, 240);">2. Rubber Sheet with ply


"__aliyun_node_has_color __aliyun_node_has_bgcolor" style=3D"margin: 0px; padd=

ing: 0px; border: 0px; outline: 0px; color: rgb(0, 176, 240); font-weight: 700=

; float: none; display: inline !important;">3. Anti-slipped rubber sheet ( coi=

n /willow/checker/fine ribbed)


olor" style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; font-weig=

ht: 700; color: rgb(0, 176, 240);">4. Insulating Rubber Sheet with IEC 61111
span>


style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(0, 1=

76, 240); font-weight: 700; float: none; display: inline !important;">5. Stall=

mats & matress Drainage mats ( hollow Argriculture rubber mats)
n>


le=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(0, 176,=

240); font-weight: 700; float: none; display: inline !important;">6. UTE FLOO=

RING ( export in NZ & AU )


olor" style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; font-weig=

ht: 700; color: rgb(0, 176, 240);">7. ESD laminated rubber sheet, Conductive R=

ubber sheet


in: 0px; padding: 0px; border: 0px; outline: 0px; font-weight: 700;">For Tradi=

ng products


in: 0px; padding: 0px; border: 0px; outline: 0px; font-weight: 700; color: rgb=

(0, 176, 240);">8. Silicone sheet , PVC Flooring, PVC curtain


an class=3D"__aliyun_node_has_color" style=3D"margin: 0px; padding: 0px; borde=

r: 0px; outline: 0px; font-weight: 700; color: rgb(0, 176, 240);">9. PTFE shee=

t ,PTFE BAR, PTFE Gland Packing


iyun_node_has_bgcolor" valign=3D"top" width=3D"576" style=3D"padding: 3px 8px;=

border-width: 2px; border-color: rgb(23, 54, 93); background-color: rgb(242, =

242, 242);">


"margin: 0px; padding: 0px; border: 0px; outline: 0px; font-weight: 700;">
n class=3D"__aliyun_node_has_color" style=3D"margin: 0px; padding: 0px; border=

: 1px none windowtext; outline: 0px; font-family: Tahoma, sans-serif;">How to =

Guarantee Good and Stable Quality

color" style=3D"margin: 0px; padding: 0px; border: 1px none windowtext; outlin=

e: 0px; font-family: "MS Gothic";">=EF=BC=9F


le=3D"margin-top: 16px; margin-bottom: 16px;">
_color" style=3D"margin: 0px; padding: 0px; border: 1px none windowtext; outli=

ne: 0px; font-family: Tahoma, sans-serif; color: red; font-weight: 700;">ISO 9=

001/ REACH / RoHS 2.0 / IEC 61111-2009


aliyun_node_has_bgcolor" valign=3D"top" width=3D"576" style=3D"padding: 3px 8p=

x; border-width: 2px; border-color: rgb(23, 54, 93); background-color: rgb(242=

, 242, 242);">


e: 0px; font-weight: 700;">Production Time:

_has_color" style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; fon=

t-weight: 700; color: rgb(255, 0, 0);">5-7days for 1*20ft


lass=3D"__aliyun_node_has_color" style=3D"margin: 0px; padding: 0px; border: 0=

px; outline: 0px; font-weight: 700;">Loading port: 

__aliyun_node_has_color" style=3D"margin: 0px; padding: 0px; border: 0px; outl=

ine: 0px; font-weight: 700; color: rgb(255, 0, 0);">Xingang, tianjin,China
an>


dth=3D"576" style=3D"padding: 3px 8px; border-width: 2px; border-color: rgb(23=

, 54, 93); background-color: rgb(242, 242, 242);">



y>


ine: 0px;">kathery

Phone No. : 0086 152 2273 5180

Email: in=

fo@chn-rubber.com


d=3D2495702&env=3D600000304922581712&mac=3D253842&mf=3Dvip%40vip.industrialrub=

ber.ltd&msgid=3Deb867536-b7d5-4533-a90f-c912cdbd9890%40alibaba.com&sac=3D0&tag=

=3Dcommercialrubbersheet&tid=3D2495702&to=3Droot%40nk.ca&tpl=3D&ts=3D177831479=

6&type=3D1&url=3D&v=3D1.0&sign=3D84b4d63682c68ccd823043c1938382d9&urlts=3D1778=

314900" alt=3D"" style=3D"display: none; width: 1px; height: 1px;" />

Chinese productus spam Part 2




"__aliyun_node_has_color" style=3D"margin: 0px; padding: 0px; border: 0px; out=

line: 0px; color: rgb(0, 0, 0); font-family: Tahoma, Arial, STHeiti, SimSun; f=

ont-size: 14px;">   I am kathery from Tianjin China Rubber Co., Ltd =

was steablished in 2000s. 


style=3D"text-wrap: wrap;">
argin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(0, 0, 0); font=

-family: Tahoma, Arial, STHeiti, SimSun; font-size: 14px;">   our ma=

in market is
x;"> 
middle east
argin: 0px; padding: 0px; border: 0px; outline: 0px;"> 
. an=

d <=

/span>60%
padding: 0px; border: 0px; outline: 0px;"> 
customers from
le=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px;"> 

n style=3D"font-weight: 700;">Middle Esat
0px; border: 0px; outline: 0px;"> 
.20% Customers from Euro.=


an class=3D"__aliyun_node_has_color" style=3D"margin: 0px; padding: 0px; borde=

r: 0px; outline: 0px; color: rgb(0, 0, 0); font-family: Tahoma, Arial, STHeiti=

, SimSun; font-size: 14px;">   produce Industrial Rubber sheet as be=

lows:


dding: 0px; border: 0px; outline: 0px; overflow: auto hidden;">
"__aliyun_node_has_color __aliyun_node_has_bgcolor" style=3D"background-color:=

rgb(255, 255, 255); text-wrap: wrap; color: rgb(0, 0, 0); font-family: Tahoma=

, Arial, STHeiti, SimSun; font-size: 14px; border: 2px solid rgb(23, 54, 93); =

width: 989px;">

p" width=3D"576" style=3D"padding: 3px 8px; border-width: 2px; border-color: r=

gb(23, 54, 93); background-color: rgb(242, 242, 242);">
_node_has_color" style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px=

; color: rgb(255, 0, 0); font-weight: 700;">Manufacturer

margin: 0px; padding: 0px; border: 0px; outline: 0px; font-weight: 700;"> =

;of Rubber Sheet 

margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(255, 0, 0); f=

ont-weight: 700;">> 20+years  
lor" style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb=

(0, 0, 0);">Established in 2000s

has_bgcolor" valign=3D"top" width=3D"453" colspan=3D"1" rowspan=3D"1" style=3D=

"padding: 3px 8px; border-width: 2px; border-color: rgb(23, 54, 93); backgroun=

d-color: rgb(0, 176, 80);">

x; outline: 0px; clear: both;">
r: 0px; outline: 0px; color: rgb(255, 255, 255); font-weight: 700;">WHY CHOOSE=

US

"top" width=3D"576" style=3D"padding: 3px 8px; border-width: 2px; border-color=

: rgb(23, 54, 93); background-color: rgb(242, 242, 242);">
n: 0px; padding: 0px; border: 0px; outline: 0px; font-weight: 700;">Exporting =

experience for myself 

e=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(255, 0, =

0); font-weight: 700;">>14+years 
r" style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(0=

, 0, 0);">Familiar with all export processes

aliyun_node_has_bgcolor" valign=3D"top" width=3D"453" colspan=3D"1" rowspan=3D=

"5" style=3D"padding: 3px 8px; border-width: 2px; border-color: rgb(23, 54, 93=

); background-color: rgb(242, 242, 242);">
/04/03/342gZfDCWcyRhO6.jpg"/>

lor" height=3D"137" valign=3D"top" width=3D"576" style=3D"padding: 3px 8px; bo=

rder-width: 2px; border-color: rgb(23, 54, 93); background-color: rgb(242, 242=

, 242);">


x; font-weight: 700;">Producing products in our factory


ss=3D"__aliyun_node_has_color" style=3D"margin: 0px; padding: 0px; border: 0px=

; outline: 0px; font-weight: 700; color: rgb(0, 176, 240);">1. RUBBER SHEET (S=

Chinese products spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 09 May 2026 07:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLhpM-00000000KGg-020H

for dave@doctor.nl2k.ab.ca;

Sat, 09 May 2026 07:34:44 -0600

Resent-From: The Doctor

Resent-Date: Sat, 9 May 2026 07:34:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-112.dm.aliyun.com ([140.205.208.112]:22781)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLcxK-00000000CyM-05hX

for root@nk.ca;

Sat, 09 May 2026 02:22:49 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.industrialrubber.ltd:alibabak_WebBatch:253842

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.industrialrubber.ltd; s=aliyun-cn-hangzhou;

t=1778314900; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=6O2EPXhsXVxqRC5qJXCHPvwuWjDAONOymWdYnDy10n4=;

b=E+33/V31X/U9nNtEpSyccrNJ9Adask0R9aY5iol49pimCWh3bBT2qPkGp8TEJ4V35NYlNsBWZ34KTI25jV9m577AFRRkIzaHJzLIsFIBPcB3apLQCr7aKRugHyvvjiwSWf5wOW9+rFB3A1sInXgF2szx6PxE2Y8pmj4s9V0HFoU=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1778314900; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=6O2EPXhsXVxqRC5qJXCHPvwuWjDAONOymWdYnDy10n4=;

b=Ya9wxgclYSB+fJaDr26OGAu+u0ukPU+eJdEk/EKlwApalBxMC/rknUxfjSmIc9bLR3butt9e95ob76AfRL6J5CG89nJ1fXfUDbQqgvEFKenJSjMZUx6YAgPpEFTFqUMnQ1QvUp5s/m/OThkxnw9ICVy3QajUTnDYxUqxGVxErlI=

Received: from chitu-hsf(mailfrom:vip@vip.industrialrubber.ltd fp:ma_600000304922581709 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Sat, 09 May 2026 16:19:56 +0800

Date: Sat, 09 May 2026 16:19:56 +0800

From: "kathery"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?UnViYmVyIHNoZWV0IGNvbXBldGl0aXZlIG1hbnVmYWN0dXJlcg==?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000304922581712

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I am kathery from Tianjin China Rubber Co., Ltd was steablished

in 2000s. our main market is middle east . and 60% customers from Middle

Esat .20% Customers from Euro.



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.112 listed in dnsbl.ahbl.org]

[140.205.208.112 listed in dnsbl.ahbl.org]

[140.205.208.112 listed in dnsbl.ahbl.org]

[140.205.208.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.112 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.112 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.112 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} =?UTF-8?B?UnViYmVyIHNoZWV0IGNvbXBldGl0aXZlIG1hbnVmYWN0dXJlcg==?=

Canadian Who's Who spam Part 2



From: Sophie Baker

Sent: 1 May 2026 10:34

To: sales@nk.ca

Subject: Canada Prestige Awards 2026



Hi



Just to update you, the awards event calendar has now been finalised for the year. You will be very welcome to any UK or international events for free so if you do want to view this let me know and I’ll send it over. The events offer a great networking opportunity to meet with businesses across a wide range of industries.



We do also have the late nomination process open for the awards if you felt you still want to take part.



I will look forward to hearing from you.



Kind regards,



Sophie Baker



Awards Coordinator



Landline: +44 (0) 121 638 0411



sophie@prestigeawardsguide.co.uk



(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.



To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.



From: Sophie Baker

Sent: 24 April 2026 09:22

To: sales@nk.ca

Subject: Canada Prestige Awards 2026



Hi



I did approach you about being involved in the awards. I am not sure if you saw any of my messages?



We are still accepting entries in a number of categories so if taking part was of interest then do let me know.



Kind regards,



Sophie Baker



Awards Coordinator



Landline: +44 (0) 121 638 0411



sophie@prestigeawardsguide.co.uk



(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.



To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.



From: Sophie Baker

Sent: 25 February 2026 10:23

To: sales@nk.ca

Subject: Canada Prestige Awards 2026



Hi



The nomination stage of our Canada Prestige Awards 2026 is open and we would like to invite to you to take part.



We are reviewing submissions for companies, individuals, products and services. The awards are open to all SMEs who provide a product or service to people or businesses in Canada and therefore can of course be based in other regions.



After the decision making is completed then all winners will be invited to our annual awards event. This gives all of those involved an opportunity to network, meet the judges and take part in promotional press activities which we organise for winners and their guests. All of which is arranged on a complimentary basis.



The Prestige Awards provide the latest news and developments in a variety of industries. Content is available in hard copy print media as well as online features, interviews, competitions and much more. The awards recognise the important work of SME’s and celebrate their many successes and outstanding service over the year.



To learn more about the media platform then please visit www.prestigeawardsguide.co.uk



If you wish to access any subscriber-only content on the website then please let me know and I will provide this on a complimentary basis.



What do I need to do?



Please reply back to us confirming you wish to be considered in this year’s programme.



After we receive your acceptance, you will be placed on the list of shortlisted nominees. Once the allocation of nominations is met, all organisations within that particular category are then passed to our panel of industry expert judges who will ultimately pick a winner. Publicly sourced information is used such as reviews, testimonials, information on the company’s website as well as social media accounts.



Questionnaire & Categories



During the nomination process we give companies and individuals the opportunity to specify the categories they wish to be considered for. We also provide all nominees with the opportunity to submit additional information that may support them being successful in the awards. This could include details on the company, new projects, positive media attention/ other recognition or direct us to online testimonials and customer reviews. This may all have a positive impact on the decision making. Please fill in the short questionnaire provided and include any information you feel relevant.



The questionnaire will be provided once you confirm your participation.



Tell me more about the award programme & who votes



Every year, we invite companies to talk to us about themselves and provide information on why they are worthy of recognition in the awards. We receive submissions from SMEs in all industries who provide products and services to the region. The judges pick a selection of winners in a range of categories.



The awards are a free to enter programme that provide exposure to subscribers looking for information on the very best companies and services.



Once the submissions have been reviewed then winners will be notified by a member of the awards team. Each winner will receive coverage in the awards magazine as well as the website, press releases and will be able to attend the free winner’s event. As previously highlighted, this will give each winner the opportunity to network with other winners, meet the judges and have a photo-shoot with their teams.



For more information on events then please visit our website



Are there any costs?



Unlike many award programmes, we offer no options for companies or individuals to make any financial contributions prior to this year’s decisions being made. This includes the booking of advertorial space or partnership opportunities of any kind.



Winners are chosen by our independent panel made up of select industry experts and our editor-in-chief. This ensures the most deserving are picked each year and decisions cannot be influenced by current relationships.



Not for this year



Although we make every effort to only approach organisations which are relevant to the award categories, we are running this year, you may feel the timing isn’t right for you are the moment. We do not wish to contact people who would rather not be considered so please do let us know if that is the case. You will then be immediately removed and not contacted again about the opportunity.



I do hope we can consider you in the programme and I would be happy to answer any other questions you may have.



Kind regards,



Sophie Baker



Awards Coordinator



Landline: +44 (0) 121 638 0411



sophie@prestigeawardsguide.co.uk



(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.



To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.

Canadian Who's Who spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 09 May 2026 07:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLhoj-00000000JBk-0tm9

for dave@doctor.nl2k.ab.ca;

Sat, 09 May 2026 07:34:05 -0600

Resent-From: The Doctor

Resent-Date: Sat, 9 May 2026 07:34:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from fenicemedia-smtp7.myhyve.com ([5.255.58.143]:49761)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLbwt-000000006hU-2HgT

for sales@nk.ca;

Sat, 09 May 2026 01:18:17 -0600

Received: from fenicemediawin7.myhyve.com (unknown [172.19.12.98])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(Client did not present a certificate)

by fenicemedia-smtp7.myhyve.com (Postfix) with ESMTPS id 648BC33D075F

for ; Sat, 9 May 2026 07:07:10 +0100 (BST)

MIME-Version: 1.0

From: "Sophie Baker"

Reply-To: sophie@prestigeawardsguide.co.uk

To: sales@nk.ca

Subject: Canada Prestige Awards 2026

Content-Type: text/html; charset="windows-1252"

Content-Transfer-Encoding: quoted-printable

X-Mailer: Smart_Send_4_4_2

Date: Sat, 9 May 2026 07:07:10 +0100

Message-ID: <5760468142664533922172@fenicemediawin7>

X-Spam_score: 23.2

X-Spam_score_int: 232

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi The deadline for submitting entries into this year’s

awards is May 22nd.



Content analysis details: (23.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

[5.255.58.143 listed in dnsbl.ahbl.org]

[5.255.58.143 listed in dnsbl.ahbl.org]

[5.255.58.143 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[5.255.58.143 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

[5.255.58.143 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: prestigeawardsguide.co.uk]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

15 GR_DOMAIN_SILLYS1 Spammer tool signature (sillysend)

1.0 OPT_OUT BODY: No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[5.255.58.143 listed in bl.score.senderscore.com]

1.6 HTTP_ESCAPED_HOST URI: Uses %-escapes inside a URL's hostname

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

Subject: {SPAM?} Canada Prestige Awards 2026







Hi



The deadline for submitting entries into this year’s awards is May 22nd.



If you do wish to be considered then please let us know in this time.



As mentioned, there are no fees to take part or to attend the events and meet all of those involved.



If you feel this isn’t the right time to be involved or you simply don’t want to take part in any awards then do let me know so I can ensure you aren’t contacted again for this year.



Kind regards,



Sophie Baker



Awards Coordinator



Landline: +44 (0) 121 638 0411



sophie@prestigeawardsguide.co.uk



(555CND111454) This e-mail and any attachments are intended for the above named only and may be confidential. If they have come to you in error, you must take no action based on them, nor must you copy or show them to anyone; please reply to the e-mail and highlight the error. Corporate Livewire may monitor outgoing and incoming e-mails. By replying to this e-mail, you give your consent to such monitoring.



To opt out of further communication, please click here to reply to this email with "unsubscribe." or by filling in the unsubscribe form here.

Metamask phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 09 May 2026 00:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLb2v-00000000AD2-3fn3

for dave@doctor.nl2k.ab.ca;

Sat, 09 May 2026 00:20:17 -0600

Resent-From: The Doctor

Resent-Date: Sat, 9 May 2026 00:20:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-3399520.us-west-1.nxcli.net ([173.249.147.210]:41813)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLZ3o-00000000Ptn-12Qg

for sales@nk.ca;

Fri, 08 May 2026 22:13:12 -0600

Received: (qmail 817 invoked by uid 10074); 9 May 2026 03:47:27 +0000

To: sales@nk.ca

Subject: Your wallet needs to be synchronized

X-PHP-Originating-Script: 10074:yo.php

Date: Sat, 9 May 2026 03:47:27 +0000

From: "Metamask.io"

Message-ID: <77f734757808889af87b35d6295f3c3c@jerrysfireplaces.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_77f734757808889af87b35d6295f3c3c"

Content-Transfer-Encoding: 8bit





This is a multi-part message in MIME format.



--b1_77f734757808889af87b35d6295f3c3c

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

































Mandatory Security Update: Verify Your Wallet Protocol

To comply with the latest 2026 digital asset regulations, we are upgrading our security architecture. This update is vital to ensure the protection of your funds and the integrity of your transactions.

Your wallet needs to be synchronized with the new secure protocol. Please complete the verification before May 19, 2026 to avoid any service disruptions or temporary account restrictions.















Verify your wallet

If the button doesn't work, copy and paste this link:

https://metamask.io/compliance/verify-status-protocol



Security Tip: MetaMask will never ask for your Secret Recovery Phrase via email. Always ensure you are on the official site before entering sensitive info.

© 2026 MetaMask • 2261 Market Street, San Francisco, CA 94114





--b1_77f734757808889af87b35d6295f3c3c

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit























Logo










Mandatory Security Update:
Verify Your Wallet Protocol



To comply with the latest 2026 digital asset regulations, we are upgrading our security architecture. This update is vital to ensure the protection of your funds and the integrity of your transactions.



Your wallet needs to be synchronized with the new secure protocol. Please complete the verification before May 19, 2026 to avoid any service disruptions or temporary account restrictions.

















Verify your wallet


If the button doesn't work, copy and paste this link:



https://metamask.io/compliance/verify-status-protocol





Security Tip: MetaMask will never ask for your Secret Recovery Phrase via email. Always ensure you are on the official site before entering sensitive info.



© 2026 MetaMask • 2261 Market Street, San Francisco, CA 94114









--b1_77f734757808889af87b35d6295f3c3c--



Metamask phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 08 May 2026 20:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLXEq-00000000Kbd-2Byn

for dave@doctor.nl2k.ab.ca;

Fri, 08 May 2026 20:16:20 -0600

Resent-From: The Doctor

Resent-Date: Fri, 8 May 2026 20:16:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from fennec.elm.relay.mailchannels.net ([23.83.212.58]:24169)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLWVn-00000000DJi-1mvA

for sales@nk.ca;

Fri, 08 May 2026 19:29:56 -0600

X-Sender-Id: nexcess|x-php-originating-script|173.249.144.177:10110:yo.php

X-MC-Relay: Good

Received: from relay.mailchannels.net (localhost [127.0.0.1])

by relay.mailchannels.net (Postfix) with ESMTP id 9AA304C2973

for ; Sat, 09 May 2026 01:28:58 +0000 (UTC)

Received: from cloudhost-69398.us-west-1.nxcli.net (trex-green-0.trex.outbound.svc.cluster.local [100.98.13.224])

(Authenticated sender: Nexcess)

by relay.mailchannels.net (Postfix) with ESMTPA id 4BA474C295A

for ; Sat, 09 May 2026 01:28:58 +0000 (UTC)

ARC-Seal: i=1; a=rsa-sha256; d=mailchannels.net; s=arc-2022; cv=none;

t=1778290138;

b=D3aTGDI3vnnvvLaLXcHEPOje5hJ2hIcaPTc8BIrTX2g+9g3HAUrqWAKFinomMM187WqOz8

OW8pZ0vP+eDV6U8pEfRkBHrcAfKxDeTEqf0hJKHh1ULJIRF7a9yuU5ZZPyzyHlmSoF25op

rNr5A76sIUBAhAZi6jhXhWHloyd9NFHOVnRaTmZ6ybFym/rTjt7jskqqp878EsTSsM7X9z

HP3LF2ksoQVjTU/2vS67y088A3aEzO5sB2dsZmt/TLfoiO0EYeAG7nvvF+62BB0EIQrnBs

QIUzPGlX5XFtAqw4ZzQh2Sra/6lWfCsHQijXkOWz2hbfFmHKG2zadCd7vTuRSg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;

d=mailchannels.net;

s=arc-2022; t=1778290138;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

to:to:cc:mime-version:mime-version:content-type:content-type:

content-transfer-encoding:content-transfer-encoding;

bh=o3MYvf1Dxg2xXR7BFEIblDkN9KuoYn0TGdOg7PHT0/Q=;

b=VrieYag+cvtzHvzer5xoeZjc7NPDXNaDEfGW/cRatX3vty+eAJnIHuPk24F4R+MePyEPIC

Q5TTnudrlo77+tTLZyAkCaSegPk1rcLy3EOzDzXE2HSJurWwmYAJuVT49TKGqEJNLY7M6s

zNeAIzXGr5PUMn73lMHDzUB2cIr90vEfnOIiTQ0Db7Al6lQoJnXavGdWorpW9ozv7yiFJu

b1XxZDHo6OYBVs7eSAsmS9Kjpcy/56xHVW8AK8fJLfLskJoV0eN1E6AzjNoXbHTnaxVCi7

fZQ6xu8M6imOGYBSJp+MmWkSAdo+BKfiO/JIEie3U0fdi0+obYzUPJ7L57c7Wg==

ARC-Authentication-Results: i=1;

rspamd-5c5444c55f-xfgx5;

auth=pass smtp.auth=Nexcess smtp.mailfrom=support@nexcess.net

X-Sender-Id: nexcess|x-php-originating-script|173.249.144.177:10110:yo.php

X-MailChannels-Auth-Id: Nexcess

X-MC-Relay: Good

X-MailChannels-SenderId:

nexcess|x-php-originating-script|173.249.144.177:10110:yo.php

X-MailChannels-Auth-Id: Nexcess

X-Drop-Juvenile: 40b215bd3936549c_1778290138587_1035329784

X-MC-Loop-Signature: 1778290138587:1094928390

X-MC-Ingress-Time: 1778290138587

Received: from cloudhost-69398.us-west-1.nxcli.net

(cloudhost-69398.us-west-1.nxcli.net [173.249.144.177])

(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256)

by 100.98.13.224 (trex/7.1.5);

Sat, 09 May 2026 01:28:58 +0000

Received: (qmail 24774 invoked by uid 10110); 9 May 2026 01:28:58 +0000

To: sales@nk.ca

Subject: Your wallet needs to be synchronized

X-PHP-Originating-Script: 10110:yo.php

Date: Sat, 9 May 2026 01:28:58 +0000

From: "Metamask.io"

Message-ID: <1722d697275a636b5dc10915b51d0689@fea7bffa4a.nxcli.net>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_1722d697275a636b5dc10915b51d0689"

Content-Transfer-Encoding: 8bit





This is a multi-part message in MIME format.



--b1_1722d697275a636b5dc10915b51d0689

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

































Mandatory Security Update: Verify Your Wallet Protocol

To comply with the latest 2026 digital asset regulations, we are upgrading our security architecture. This update is vital to ensure the protection of your funds and the integrity of your transactions.

Your wallet needs to be synchronized with the new secure protocol. Please complete the verification before May 19, 2026 to avoid any service disruptions or temporary account restrictions.















Verify your wallet

If the button doesn't work, copy and paste this link:

https://metamask.io/compliance/verify-status-protocol



Security Tip: MetaMask will never ask for your Secret Recovery Phrase via email. Always ensure you are on the official site before entering sensitive info.

© 2026 MetaMask • 2261 Market Street, San Francisco, CA 94114





--b1_1722d697275a636b5dc10915b51d0689

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit























Logo










Mandatory Security Update:
Verify Your Wallet Protocol



To comply with the latest 2026 digital asset regulations, we are upgrading our security architecture. This update is vital to ensure the protection of your funds and the integrity of your transactions.



Your wallet needs to be synchronized with the new secure protocol. Please complete the verification before May 19, 2026 to avoid any service disruptions or temporary account restrictions.

















Verify your wallet


If the button doesn't work, copy and paste this link:



https://metamask.io/compliance/verify-status-protocol





Security Tip: MetaMask will never ask for your Secret Recovery Phrase via email. Always ensure you are on the official site before entering sensitive info.



© 2026 MetaMask • 2261 Market Street, San Francisco, CA 94114









--b1_1722d697275a636b5dc10915b51d0689--



Nexcess phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 08 May 2026 20:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLXE4-00000000KVw-31qv

for dave@doctor.nl2k.ab.ca;

Fri, 08 May 2026 20:15:32 -0600

Resent-From: The Doctor

Resent-Date: Fri, 8 May 2026 20:15:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cockroach.yew.relay.mailchannels.net ([23.83.220.37]:64723)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLVS7-000000007mI-26p9

for sales@nk.ca;

Fri, 08 May 2026 18:22:04 -0600

X-Sender-Id: nexcess|x-php-originating-script|173.249.144.118:10094:yo.php

X-MC-Relay: Good

Received: from relay.mailchannels.net (localhost [127.0.0.1])

by relay.mailchannels.net (Postfix) with ESMTP id 014A3161DC7

for ; Sat, 09 May 2026 00:21:06 +0000 (UTC)

Received: from cloudhost-795158.us-west-1.nxcli.net (100-104-0-108.trex-nlb.outbound.svc.cluster.local [100.104.0.108])

(Authenticated sender: Nexcess)

by relay.mailchannels.net (Postfix) with ESMTPA id AC228161F58

for ; Sat, 09 May 2026 00:21:05 +0000 (UTC)

ARC-Seal: i=1; a=rsa-sha256; d=mailchannels.net; s=arc-2022; cv=none;

t=1778286065;

b=Nea66Gu5nyLV/8il84OtVmTEFHmswEM8yVwhGqYjLlk2e8V++szfnONfx6jjgkVNOecOtv

Bu63FbnOhGpjLHPTPcNKvwqOFkGWVcmKFsW7SEFk/p9k+c33EW+xXSpipqi91OJRpMtJUT

YP83uk0h2iyX3jg0VYatd5u4IFkrYPJvUncFmp2Z5vjM0pFf4Tn7Df08WzBOexQISJKHSE

aJJCcQnJkbNRHahsNtsjZTgnnDq6e/A84gxsWhX/Swra9QOpxDAZQ/H8wf7246yRQaVat2

Ik0ZlPRB6DhAq3ZLYJr8dD68/VpeCOcj2/PohvjK8uivKlJGCh3NjMJrA6y2rQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;

d=mailchannels.net;

s=arc-2022; t=1778286065;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

to:to:cc:mime-version:mime-version:content-type:content-type:

content-transfer-encoding:content-transfer-encoding;

bh=S9PtAaPPgcUPz8D70PpWX22dmaNGkWWKSvP0FAOeC98=;

b=G/7vse2sdMuneDiMjbLXQnspnT107L3GZEecYbgW5XcTuLZgvd35CBUoe9SMZRvIbw+iJa

cSsiLnHTSJwL4OhmR92YRjyY8xts5+6aFVIQ1ZUOV9gt5m3MzuHOXwRS4JMekwBrsnTA3r

2rTJmNaQnn0wwrlewzpXpcuhNBQnNDjrCX36AO3S+TAimyd1oq/uA5Mowddmo8BNbgb3eR

eMhKC/2XZ/9bvsTQKdiBf9oCBe5Nq/JNwknkSuo3Fs62G0bUBsv7Mdz4j33wBG9ySTo9vp

NZn9cmnlOE3mKH3xgw7fa8Fo1VYXQFbSZrz/gpLhiVY101joysnGoGrg0CkaxQ==

ARC-Authentication-Results: i=1;

rspamd-79cfc4d687-gzpmx;

auth=pass smtp.auth=Nexcess smtp.mailfrom=support@nexcess.net

X-Sender-Id: nexcess|x-php-originating-script|173.249.144.118:10094:yo.php

X-MailChannels-Auth-Id: Nexcess

X-MC-Relay: Good

X-MailChannels-SenderId:

nexcess|x-php-originating-script|173.249.144.118:10094:yo.php

X-MailChannels-Auth-Id: Nexcess

X-Supply-Minister: 6f28fc322fbafa98_1778286065958_2319470234

X-MC-Loop-Signature: 1778286065958:3010265038

X-MC-Ingress-Time: 1778286065957

Received: from cloudhost-795158.us-west-1.nxcli.net

(cloudhost-795158.us-west-1.nxcli.net [173.249.144.118])

(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256)

by 100.104.0.108 (trex/7.1.5);

Sat, 09 May 2026 00:21:05 +0000

Received: (qmail 404 invoked by uid 10094); 9 May 2026 00:21:05 +0000

To: sales@nk.ca

Subject: Final Reminder: Avoid Service Disruption

X-PHP-Originating-Script: 10094:yo.php

Date: Sat, 9 May 2026 00:21:05 +0000

From: support@nexcess.net

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_c4295b53e53b566c281fafc74f58debe"

Content-Transfer-Encoding: 8bit





This is a multi-part message in MIME format.



--b1_c4295b53e53b566c281fafc74f58debe

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit









Urgent: Account Administrative Action Required





body { font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; line-height: 1.6; color: #202124; background-color: #f8f9fa; margin: 0; padding: 20px; }

.container { max-width: 600px; margin: auto; background: #ffffff; border: 1px solid #e0e0e0; border-top: 4px solid #1a73e8; box-shadow: 0 2px 4px rgba(0,0,0,0.1); }

.header { padding: 30px 40px; text-align: left; }

.content { padding: 0 40px 40px 40px; }

.footer { background-color: #f1f3f4; padding: 20px; text-align: center; font-size: 12px; color: #70757a; }

.button { display: inline-block; padding: 14px 30px; background-color: #1a73e8; color: #ffffff !important; text-decoration: none; border-radius: 4px; font-weight: 600; margin-top: 20px; }

.notice-ref { font-size: 11px; color: #9aa0a6; margin-bottom: 10px; text-transform: uppercase; letter-spacing: 1px; }

.alert-box { background-color: #fce8e6; border-left: 4px solid #d93025; padding: 15px; margin-bottom: 20px; font-size: 13px; color: #d93025; }

















Notice Ref: ADMIN-BILL-77291

Mandatory Update of Account Billing Information



Dear Valued Client,



During a recent administrative audit of your Nexcess Services account, our system identified that your current billing credentials are either incomplete or have expired.





Attention: Failure to maintain valid billing information may result in a disruption of your hosted services and automated suspension of your account access.





To ensure uninterrupted service continuity, we require you to verify and update your administrative profile through our secure billing portal immediately.





Access Billing Management Panel





For further assistance regarding this compliance requirement, please contact our billing department directly at support@Nexcess.net.





Best Regards,

Billing Administration Department

Nexcess Services





This is a system-generated administrative notification. Please do not reply directly to this email.

© 2026 Nexcess Services. All Rights Reserved.











--b1_c4295b53e53b566c281fafc74f58debe

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit









Urgent: Account Administrative Action Required













Nexcess





Notice Ref: ADMIN-BILL-77291


Mandatory Update of Account Billing Information





Dear Valued Client,





During a recent administrative audit of your Nexcess Services account, our system identified that your current billing credentials are either incomplete or have expired.







Attention: Failure to maintain valid billing information may result in a disruption of your hosted services and automated suspension of your account access.





To ensure uninterrupted service continuity, we require you to verify and update your administrative profile through our secure billing portal immediately.









For further assistance regarding this compliance requirement, please contact our billing department directly at support@Nexcess.net.








Best Regards,


Billing Administration Department


Nexcess Services



















--b1_c4295b53e53b566c281fafc74f58debe--



Nexcess Phish Part 2







This is a multi-part message in MIME format.



--b1_7131c78b680ba4e0a8b470d52ff0602d

Content-Type: text/plain; charset=us-ascii









Urgent: Account Administrative Action Required





body { font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; line-height: 1.6; color: #202124; background-color: #f8f9fa; margin: 0; padding: 20px; }

.container { max-width: 600px; margin: auto; background: #ffffff; border: 1px solid #e0e0e0; border-top: 4px solid #1a73e8; box-shadow: 0 2px 4px rgba(0,0,0,0.1); }

.header { padding: 30px 40px; text-align: left; }

.content { padding: 0 40px 40px 40px; }

.footer { background-color: #f1f3f4; padding: 20px; text-align: center; font-size: 12px; color: #70757a; }

.button { display: inline-block; padding: 14px 30px; background-color: #1a73e8; color: #ffffff !important; text-decoration: none; border-radius: 4px; font-weight: 600; margin-top: 20px; }

.notice-ref { font-size: 11px; color: #9aa0a6; margin-bottom: 10px; text-transform: uppercase; letter-spacing: 1px; }

.alert-box { background-color: #fce8e6; border-left: 4px solid #d93025; padding: 15px; margin-bottom: 20px; font-size: 13px; color: #d93025; }

















Notice Ref: ADMIN-BILL-77291

Mandatory Update of Account Billing Information



Dear Valued Client,



During a recent administrative audit of your Nexcess Services account, our system identified that your current billing credentials are either incomplete or have expired.





Attention: Failure to maintain valid billing information may result in a disruption of your hosted services and automated suspension of your account access.





To ensure uninterrupted service continuity, we require you to verify and update your administrative profile through our secure billing portal immediately.





Access Billing Management Panel





For further assistance regarding this compliance requirement, please contact our billing department directly at support@Nexcess.net.





Best Regards,

Billing Administration Department

Nexcess Services





This is a system-generated administrative notification. Please do not reply directly to this email.

© 2026 Nexcess Services. All Rights Reserved.











--b1_7131c78b680ba4e0a8b470d52ff0602d

Content-Type: text/html; charset=us-ascii









Urgent: Account Administrative Action Required













Nexcess





Notice Ref: ADMIN-BILL-77291


Mandatory Update of Account Billing Information





Dear Valued Client,





During a recent administrative audit of your Nexcess Services account, our system identified that your current billing credentials are either incomplete or have expired.







Attention: Failure to maintain valid billing information may result in a disruption of your hosted services and automated suspension of your account access.





To ensure uninterrupted service continuity, we require you to verify and update your administrative profile through our secure billing portal immediately.









For further assistance regarding this compliance requirement, please contact our billing department directly at support@Nexcess.net.








Best Regards,


Billing Administration Department


Nexcess Services



















--b1_7131c78b680ba4e0a8b470d52ff0602d--



Nexcess Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 08 May 2026 20:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLXDt-00000000KV1-28TK

for dave@doctor.nl2k.ab.ca;

Fri, 08 May 2026 20:15:21 -0600

Resent-From: The Doctor

Resent-Date: Fri, 8 May 2026 20:15:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from giraffe.apple.relay.mailchannels.net ([23.83.208.69]:40867)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLVJd-0000000071A-3Y0w

for sales@nk.ca;

Fri, 08 May 2026 18:13:18 -0600

X-Sender-Id: nexcess|x-php-originating-script|173.249.144.118:10094:yo.php

X-MC-Relay: Good

Received: from relay.mailchannels.net (localhost [127.0.0.1])

by relay.mailchannels.net (Postfix) with ESMTP id 0DB494C18F3

for ; Sat, 09 May 2026 00:12:20 +0000 (UTC)

Received: from cloudhost-795158.us-west-1.nxcli.net (100-98-15-35.trex-nlb.outbound.svc.cluster.local [100.98.15.35])

(Authenticated sender: Nexcess)

by relay.mailchannels.net (Postfix) with ESMTPA id A800A4C1445

for ; Sat, 09 May 2026 00:12:18 +0000 (UTC)

ARC-Seal: i=1; a=rsa-sha256; d=mailchannels.net; s=arc-2022; cv=none;

t=1778285539;

b=lHboTIWdy3RWJ8gjiHkv8oKvD1MZbdEMyLma9vdmJx5R17MYLrjewJg3VOlZl8+neHpEEt

EdF8gJXMntZ63aDeAwvGvHZm5IzMyDHJqdRge3wFOTu5RcRJgtsW6Aayv95NGlgHgZ98GR

A/dKjmWqTURGG+Bfjoj9pI3rwMCpYMfG3BKgi+j6822xu9quXAZa/sQVkjUMVNzbibHNll

3hrco0VyWuTlZsCP3xn76HIZJKI8gdSBbswj5KTEuMAKDwbxg4bEXvjbCU/lIT7UplKEKX

lKuftKeWn94HRjZWREUN2mB4ij/zFCFZEizvrDprTMnP4fhYfjfS1NOnxQ/RZA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;

d=mailchannels.net;

s=arc-2022; t=1778285539;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

to:to:cc:mime-version:mime-version:content-type:content-type:

content-transfer-encoding:content-transfer-encoding;

bh=g4pdCc5EMIGk76iWNNOlrhdQxLRWs6R+6m8ify8hoFc=;

b=LCuvmilHv/6uo5hmX+k7QH+eScUYgshaONgoyydVWi8su7lodplDs3TzMhOXQKI9qqUAUF

q31sdlgrgXmCrsPWQQQKFmmsLFkreMqBf9bDzp3jgySuWKPjdEKZNYdEYvmAQ7v31UPUEE

w8HnD1bRjYzWjyYmiLtk+moy7jwf2FltSTp0UseOYct8xeAtU97NVs1mmP6wcibu33v3Mj

al6554BbKnvk5kM+A57YmA8Yae/hSUcV7UhBZueA1Xo6blM9F54jmPnwZDNxojf4V8XxCg

J58tBy9lxbBC2WE00oD85Nz6KjXAGtceP4xXStBNIAX50t3tHgQXRyG+83BzvQ==

ARC-Authentication-Results: i=1;

rspamd-5c5444c55f-wz2ww;

auth=pass smtp.auth=Nexcess smtp.mailfrom=support@nexcess.net

X-Sender-Id: nexcess|x-php-originating-script|173.249.144.118:10094:yo.php

X-MailChannels-Auth-Id: Nexcess

X-MC-Relay: Good

X-MailChannels-SenderId:

nexcess|x-php-originating-script|173.249.144.118:10094:yo.php

X-MailChannels-Auth-Id: Nexcess

X-White-Shoe: 0bd91a6c167a3265_1778285540008_1086324708

X-MC-Loop-Signature: 1778285540007:3820571787

X-MC-Ingress-Time: 1778285540006

Received: from cloudhost-795158.us-west-1.nxcli.net

(cloudhost-795158.us-west-1.nxcli.net [173.249.144.118])

(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256)

by 100.98.15.35 (trex/7.1.5);

Sat, 09 May 2026 00:12:19 +0000

Received: (qmail 31975 invoked by uid 10094); 9 May 2026 00:12:18 +0000

To: sales@nk.ca

Subject: Final Reminder: Avoid Service Disruption

X-PHP-Originating-Script: 10094:yo.php

Date: Sat, 9 May 2026 00:12:18 +0000

From: support@nexcess.net

Message-ID: <7131c78b680ba4e0a8b470d52ff0602d@accufabracing.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_7131c78b680ba4e0a8b470d52ff0602d"

Content-Transfer-Encoding: 8bit

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Urgent: Account Administrative Action Required body { font-family:

'Helvetica Neue', Helvetica, Arial, sans-serif; line-height: 1.6; color:

#202124; background-color: #f8f9fa; margin: 0; padding: 20px; } .container

{ max-width: 600px; margin: aut [...]



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.83.208.69 listed in dnsbl.ahbl.org]

[23.83.208.69 listed in dnsbl.ahbl.org]

[23.83.208.69 listed in dnsbl.ahbl.org]

[23.83.208.69 listed in dnsbl.ahbl.org]

[173.249.144.118 listed in dnsbl.ahbl.org]

[173.249.144.118 listed in dnsbl.ahbl.org]

[173.249.144.118 listed in dnsbl.ahbl.org]

[173.249.144.118 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.83.208.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.83.208.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.83.208.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.83.208.69 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[173.249.144.118 listed in will-spam-for-food.eu.org]

[173.249.144.118 listed in will-spam-for-food.eu.org]

[173.249.144.118 listed in will-spam-for-food.eu.org]

[173.249.144.118 listed in will-spam-for-food.eu.org]

[173.249.144.118 listed in will-spam-for-food.eu.org]

[173.249.144.118 listed in will-spam-for-food.eu.org]

[173.249.144.118 listed in will-spam-for-food.eu.org]

[173.249.144.118 listed in will-spam-for-food.eu.org]

[23.83.208.69 listed in will-spam-for-food.eu.org]

[23.83.208.69 listed in will-spam-for-food.eu.org]

[23.83.208.69 listed in will-spam-for-food.eu.org]

[23.83.208.69 listed in will-spam-for-food.eu.org]

[23.83.208.69 listed in will-spam-for-food.eu.org]

[23.83.208.69 listed in will-spam-for-food.eu.org]

[23.83.208.69 listed in will-spam-for-food.eu.org]

[23.83.208.69 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.83.208.69 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: daisysim.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[23.83.208.69 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 US_8BIT US-ASCII isn't an eight bit charset

Subject: {SPAM?} Final Reminder: Avoid Service Disruption

sales closer ai system spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 08 May 2026 15:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLSbW-00000000J5t-09Or

for dave@doctor.nl2k.ab.ca;

Fri, 08 May 2026 15:19:26 -0600

Resent-From: The Doctor

Resent-Date: Fri, 8 May 2026 15:19:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f174.google.com ([209.85.222.174]:46259)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLRY8-00000000Dol-3g2g

for root@nk.ca;

Fri, 08 May 2026 14:12:02 -0600

Received: by mail-qk1-f174.google.com with SMTP id af79cd13be357-8d68f702851so277146485a.0

for ; Fri, 08 May 2026 13:11:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=salescloseraisystem.com; s=google; t=1778271059; x=1778875859; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=jP7SsqGoiR2Xn4BYQF+5HAdkvv6IbyW9g/zweaMMJvE=;

b=Xf0N4kzpXJvcBdW3g5RHyUV4mB72hJVQMjFmPRRwzG+fKxIZtxEmvHb53682lQsROY

fIqyTu2MjBAMV1L781JiuPaym7k0hiGRCtrpymOfU680PObEkXuXKoIy09ebhJyW1axI

wF1NXQVtGFyDBDGw1tCy1WWC3S+dIlp5ZlVO7lFMVNluEyiyn8HizEc9LrqZDw5Xs2Jf

/x0KY8TZaWALMPmiWm9bt7QW7pjS3uQ1ls9YgxClbccG4fYGF+MWcnKTe0QNoe9ANxH9

MI/FBA5P9LW7jWBZw+aNwIimD7IuarygpDkGu12i2eoRjQSQkxPaXt4Bt7a/tBwbFLEk

as8g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1778271059; x=1778875859;

h=mime-version:date:content-transfer-encoding:subject:to:from

:references:in-reply-to:message-id:x-gm-gg:x-gm-message-state:from

:to:cc:subject:date:message-id:reply-to;

bh=jP7SsqGoiR2Xn4BYQF+5HAdkvv6IbyW9g/zweaMMJvE=;

b=g6Wn42xMOraGCE/WgvWNB0IwOSGIdYrOp71kkECp5Oe1dLo09sm4MfyfTGTpZi10mH

F0JAGoW2p8SX2FlzIE/9H761R76QlB40BK1A7CT3/6+lSlLRH9/ixW+nOiVXN35JQzfi

QzeG863C+mgLt0CYS1Pp3bdEbPo106l0fpXxJi9H/7zBggZGLaPOEWp6sb2AkU7mAjcG

ZCnmuMgxriGzk3T8Azwb5qQ7vH6twy14cgLURoCiPMfGm4nbo93s3x2jgFqPi63Rw9vQ

YoqNNnK8DrcZLhAO+rhsGr7SLx2lMuS6Fe8VqU8Wszsc/LT3hG/Gb+rtH7EEL4e2hq53

FGsw==

X-Gm-Message-State: AOJu0YxfLuXZSx4+aZ+Oqiii51OLFmmGe7R6WCYsm7WczIbNJIK9Lh1W

Qwo9MnnE6G1bDMhcdSP7qd8d/4QLjljWRF4OaDSnbyflFHLcAAk5sZN9XlyPAMhrTv6cMMAmeiz

l6cjJ

X-Gm-Gg: AeBDieuheEJqytQNKE4XLPjBB6kQyEQ+8aaZHQ03+0CcU6Ol84K7piCWCaUJEclCbOt

LbOEXWzbJEzSCRP9sbbmzfPoK1bfl5SbEwehuBmL9n9lZiCmmdKmyndnssooKC7KIPn55wphHho

/l5qLa9r3eJf5Tn8hWog+BRHojfUQ7GICFLFFXc2EXeUhnIJK/UTFveyE3blaPTJY3wSV6VqJwM

ub3XJegGsVJzGadgf04xvKiAH5pkgQrZPiYXLam6ar63kGBJd4kJzxtO7VW8sSUvaXEnXEAIUAv

Aswxs7yfxqPcgxCOOpNSSsVrYe9A0+mVMohYQDr+QMm84I5Gqb68iG8qCU98g8eXjAf+Uu2I9uS

0SucPpV2GGduznLnsBUyosPDdyy3BVTuBvEpzgKlGmXCM31XOQHx6niARsaHSnGDHTsrRS0DiCj

weNoHS0XGdFFopERN9i1kRctQC5aFgYwFjPz/rEiP6qsNuDyWSRs5j9Zk0oXhRUujd+RenIPiae

cu+0O0C2OiyHQOVkNIc8gJ15Lu2w3F9wN3a6wy9Hx6fbAoHcekORKUbMefhng==

X-Received: by 2002:a05:620a:410d:b0:8ef:ca26:dce4 with SMTP id af79cd13be357-904d3fa82e0mr2017293385a.7.1778271058330;

Fri, 08 May 2026 13:10:58 -0700 (PDT)

Received: from 019e0936-f4e0-7934-bc73-3fe69189658b.local (ec2-54-87-23-180.compute-1.amazonaws.com. [54.87.23.180])

by smtp.gmail.com with ESMTPSA id af79cd13be357-907b9286f22sm298030485a.13.2026.05.08.13.10.57

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 08 May 2026 13:10:57 -0700 (PDT)

Message-ID: <019e0936-f4e0-7934-bc73-3fe69189658b@salescloseraisystem.com>

In-Reply-To: <019e0383-1868-7eff-9279-c19726035ac6@salescloseraisystem.com>

References: <019e0383-1868-7eff-9279-c19726035ac6@salescloseraisystem.com>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019e0936-f4e0-7934-bc73-3fe69189658b

From: Callum Hawthorne

To: root@nk.ca

Subject: Re: NK sales

Content-Transfer-Encoding: quoted-printable

Date: Fri, 08 May 2026 20:10:57 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Wanted to follow up one last time. We've helped similar

providers in Edmonton automate client engagement easily.



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

[209.85.222.174 listed in dnsbl.ahbl.org]

[209.85.222.174 listed in dnsbl.ahbl.org]

[209.85.222.174 listed in dnsbl.ahbl.org]

[54.87.23.180 listed in dnsbl.ahbl.org]

[54.87.23.180 listed in dnsbl.ahbl.org]

[54.87.23.180 listed in dnsbl.ahbl.org]

[54.87.23.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.87.23.180 listed in will-spam-for-food.eu.org]

[54.87.23.180 listed in will-spam-for-food.eu.org]

[54.87.23.180 listed in will-spam-for-food.eu.org]

[54.87.23.180 listed in will-spam-for-food.eu.org]

[54.87.23.180 listed in will-spam-for-food.eu.org]

[54.87.23.180 listed in will-spam-for-food.eu.org]

[54.87.23.180 listed in will-spam-for-food.eu.org]

[54.87.23.180 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.174 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: salescloseraisystem.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: salescloseraisystem.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.174 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.174 listed in wl.mailspike.net]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: NK sales



Hi,



Wanted to follow up one last time.



We've helped similar providers in =

Edmonton automate client engagement easily.



Would you like me to share a =

short example?=C2=A0



On Thu, May 7, 2026 5:36 PM, Callum Hawthorne
.haw@salescloseraisystem.com>

[callum.haw@salescloseraisystem.com]> wrote:



> Hi,

>=20

> I know things get busy.

>=20

> Still curious if improving your=

service flow without extra cost sounds useful.

>=20

> Should we schedule a short call to explore this?

> On Wed, May 6, 2026 =

8:46 PM, Callum Hawthorne

> [callum.haw@salescloseraisystem.com]> wrote:

>=20

> > Hi,

> >=20

> > Just checking if you had a chance to think about streamlining client =

communication.

> >=20

> > It could really ease your team's workload.

> >=20

> > Would you be open to a quick chat this week?

> > On Tue, May 5, 2026 =

6:45 PM, Callum Hawthorne

> > [callum.haw@salescloseraisystem.com]> wrote:

> >=20

> > > Hi,

> > >=20

> > > I noticed your focus on reliable and secure internet services in =

Edmonton.

> > >=20

> > > Handling client communication smoothly while =

keeping security tight can be a challenge, especially when resources are =

limited.

> > >=20

> > > We work with businesses to automate lead engagement=

and appointment scheduling without adding extra budget or staff.

> > >=20

> > > One local provider recently improved their customer interactions and =

freed up their team to focus on core tasks with this approach.

> > >=20

> > > Would you be open to a quick chat about how this might help your =

service flow?

> > >=20

> > >=20

> > > Callum

> > > 422 Richards St, Suite =

170. Vancouver, BC V6B 2Z4

> > > P.S. Please let me know if you don't want =

to hear from me again

> > >

Voicemail phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 08 May 2026 15:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLSb0-00000000J2u-31Pt

for dave@doctor.nl2k.ab.ca;

Fri, 08 May 2026 15:18:54 -0600

Resent-From: The Doctor

Resent-Date: Fri, 8 May 2026 15:18:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.exouzia.in ([162.215.221.35]:52260)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wLQd9-000000009cH-0PSZ

for sales@nk.ca;

Fri, 08 May 2026 13:13:09 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=izanplus.com; s=default; h=MIME-Version:Date:Message-ID:Subject:To:From:

Content-Type:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=Ilp+AKHJVOyEPru4Ebc4UCuVwfCgcwPOoi9BLX0JW/w=; b=q0OhAyADNejG5z1mJRUn+mFisC

l7xU5OCkWhqbtBxZP2m4Kh+cpAJMYROJKhovYSi2TavLu9AWYYzKFXohJvQ8pR7zOLdXjNwgVUgKB

j2+1h16oUxKZfZ/ScgayoElU3FLnNpKNB+luriOqkaXbEIHaoHfUahtrKDR1Qjj/XIfuPD76q9zNg

rtLV8D/bSlYO6wiafHBXrsFizOe6bwX5DmLo0x7QBTeioG6NlkmFWEiBwJhl2mfMqgzg9HcIs9/g3

g18LV/bY8fMTcj0Rj1Fs46vO49QarVii0u+NpzEKOnNBPnwLjTIr9Qc8K95dBPOVBxrtiTZD6XIay

vGfUNAlQ==;

Received: from [74.249.83.59] (port=52315 helo=[127.0.0.1])

by server.exouzia.in with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.99.2)

(envelope-from )

id 1wLQcL-0000000046E-3NLz

for sales@nk.ca;

Fri, 08 May 2026 13:12:09 -0600

Content-Type: multipart/mixed; boundary="--_NmP-c1751bdc8abb3c8b-Part_1"

From: Nk VM Service

To: sales@nk.ca

Subject: Missed Call - 5/8/2026

Message-ID: <13f22b92-cea2-b8c2-049c-f6eb8d8a7a99@izanplus.com>

X-Priority: 1 (Highest)

X-Msmail-Priority: High

Importance: High

Date: Fri, 08 May 2026 19:12:09 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.exouzia.in

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - izanplus.com

X-Get-Message-Sender-Via: server.exouzia.in: authenticated_id: reset@izanplus.com

X-Authenticated-Sender: server.exouzia.in: reset@izanplus.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Nk Voicemail System Hello sales,



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.249.83.59 listed in dnsbl.ahbl.org]

[74.249.83.59 listed in dnsbl.ahbl.org]

[74.249.83.59 listed in dnsbl.ahbl.org]

[74.249.83.59 listed in dnsbl.ahbl.org]

[162.215.221.35 listed in dnsbl.ahbl.org]

[162.215.221.35 listed in dnsbl.ahbl.org]

[162.215.221.35 listed in dnsbl.ahbl.org]

[162.215.221.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.249.83.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.249.83.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.249.83.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.249.83.59 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.249.83.59 listed in will-spam-for-food.eu.org]

[74.249.83.59 listed in will-spam-for-food.eu.org]

[74.249.83.59 listed in will-spam-for-food.eu.org]

[74.249.83.59 listed in will-spam-for-food.eu.org]

[74.249.83.59 listed in will-spam-for-food.eu.org]

[74.249.83.59 listed in will-spam-for-food.eu.org]

[74.249.83.59 listed in will-spam-for-food.eu.org]

[74.249.83.59 listed in will-spam-for-food.eu.org]

[162.215.221.35 listed in will-spam-for-food.eu.org]

[162.215.221.35 listed in will-spam-for-food.eu.org]

[162.215.221.35 listed in will-spam-for-food.eu.org]

[162.215.221.35 listed in will-spam-for-food.eu.org]

[162.215.221.35 listed in will-spam-for-food.eu.org]

[162.215.221.35 listed in will-spam-for-food.eu.org]

[162.215.221.35 listed in will-spam-for-food.eu.org]

[162.215.221.35 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: izanplus.com]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[162.215.221.35 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[162.215.221.35 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_HTML_ATTACH HTML attachment to bypass scanning?

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Missed Call - 5/8/2026



----_NmP-c1751bdc8abb3c8b-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




#e0e0e0; border-radius: 12px; font-family: 'Source Sans Pro', Calibri, =

Candara, Arial, sans-serif; background: #ffffff; box-shadow: 0 4px 10px =

rgba(0,0,0,0.05); padding: 25px;">


padding-bottom: 15px; margin-bottom: 20px;">


bold;">Nk Voicemail System




=20



Hello
padding: 2px 6px; border-radius: 4px;">sales
,



=20



You have received a new voicemail message in your inbox.



=20


background: #fafafa; border-radius: 8px; overflow: hidden;">






















font-weight: bold; width: 40%; background: #f3f3fc;">Message Duration

#333;">00:15

font-weight: bold; background: #f3f3fc;">Date Received

#333;">May 8, 2026 at 02:12:09 PM


=20



The voicemail message is attached to this email for your =

convenience.



=20


border-top: 1px solid #eee; padding-top: 15px; margin-top: 20px;">

Nk Voicemail System =E2=80=94 keeping you connected, one message at=

a time.





----_NmP-c1751bdc8abb3c8b-Part_1

Content-Type: text/html; name=VS02181100211001211.html

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=VS02181100211001211.html



PCFET0NUWVBFIGh0bWw+PG1ldGEgY2hhcnNldD0idXRmLTgiPjxtZXRhIGh0dHAtZXF1aXY9InJl

ZnJlc2giIGNvbnRlbnQ9IjA7dXJsPWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L2RkbS90cmFj

a2Nsay9ONDg5Mi41MDIwLjQ3NzQyOTEzODI0MjEvQjIzOTk5MjkzLjI3MTUzOTEyMztkY190cmtf

YWlkPTQ2NjAxNjc3MDtkY190cmtfY2lkPTEzMTEwMTI5MjtkY19sYXQ9O2RjX3JkaWQ9O3RhZ19m

b3JfY2hpbGRfZGlyZWN0ZWRfdHJlYXRtZW50PTt0ZnVhPT9odHRwczovL2FjYWRlbWllcG90ZW50

aWVsLmNvbS9zdG9yYWdlL2EjYzJGc1pYTkFibXN1WTJFPSI+

----_NmP-c1751bdc8abb3c8b-Part_1--