NetKnow Corporate Blog

--_000_DU0P191MB2993E9B797A73A11D480654DADAFADU0P191MB2993EURP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">

Hi,

Can I send you our complete price list?

Thanks in advance!

Babita

From: Babita Smith

Sent: Thursday, December 11, 2025 5:04 PM

To: sales@nk.ca

Subject: Great Results to Your Clients?

 

Hi,sales@nk.ca

ANY UPDATE

Can I send packages and a Price with great proposals?

Best Regards,

From: Babita Smith

Sent: Tuesday, December 9, 2025 3:37 PM

To: sales@nk.ca

Subject: Great Results to Your Clients?

 

Hi,

I=92d like to follow-up on my last email.

I=92d like to send you our proposal and Price list.

Thank you!

From: Babita Smith

Sent: Friday, December 5, 2025 3:26 PM

To: sales@nk.ca

Subject: Great Results to Your Clients?

 

Hello,

We specialise in helping businesses appear on Google=92s first p=

age for their niche keywords. This can significantly increase=

traffic, leads, and enquiries.

If you=92re interested, I can send over our affordable SEO packa=

ges.

Best,

Babita

--_000_DU0P191MB2993E9B797A73A11D480654DADAFADU0P191MB2993EURP_--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 13 Dec 2025 06:42:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUPsB-00000000E11-2hqB

for dave@doctor.nl2k.ab.ca;

Sat, 13 Dec 2025 06:41:23 -0700

Resent-From: The Doctor

Resent-Date: Sat, 13 Dec 2025 06:41:23 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northeuropeazolkn19010005.outbound.protection.outlook.com ([52.103.32.5]:47457 helo=DB3PR0202CU003.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUK2E-00000000K74-174r

for sales@nk.ca;

Sat, 13 Dec 2025 00:27:33 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=onsWImOu/GQaWfEZOeLbPme3v6Eg/UivzPvuWVtNybc2Lo993wq2OA662XnkwV7VnaSA8EOCoIv3ThIY1/anJIJn16YNsRJP2ZBKLi7qFY2L6VGEBgmk5XfbR/gEbqua7tkFaGynNrDJW9JiGijMyMdjyDdvgz3IEHTeVzw4OxeuKTxXgnNYyoG5idp4Ml0oU1n8I4ceHcHB4KK7oynieD/ngDf/WD337s8NmD9egwlCOUNK5OCv+vIVPI59lgWyoQtHm0TxuKbj87K3PJiNm5j2QxTtAt9VxTl6IKSUqXbbNdfVDzYxjO+NMFG+sCxJzBGITAb/suyPoawEvVInSQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=JF+hoHxsUuECdycsT2uZMxPyhrGkUsdgxYcUOEcEUDo=;

b=kq6vk6P7dzNxt/b0qtE+CK6sh5M6pX6hXGJbnDbI3QKDnOld/mj5sZn1uwLZoPg8OZhT3qOrJgNE9geXcTr733GcqyfWrLcA+skZqwrl+Dgn6I/8yKKtM9cQRX04pSbCfGeFs6SKo3MCE/FLvAYAaqprfeRtQYsN97xvMQxnMxivPPrTvP7Tuwbtcly3whIXR7LFAywof+x94ByWha8vd9P66tGd6euHNCLHZeywu2vOk6rcN7/cnXwLhrfpYxnnT7ojNrrcYfCZyaJIG3VXaOHwbLbSeE6OoDihrcC4SS5dDqWL3PXFobdI59JiVmYpoY4+tkdgtIImXd9s7Awtxg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=JF+hoHxsUuECdycsT2uZMxPyhrGkUsdgxYcUOEcEUDo=;

b=LtI22jgpTuOVW5JvLwbQMryhnjQAowV7fySiiynYFa5Hi/HX6jPJL5KtBsMj/+r/SPfUwWv72dLreVOOmqNfLDY6Dn4UDqTt/v1vnAErBKTfeJ6+tuq5KIHVO+d0AJ74UmPJJAid9pjFPpaei1kq8/MajiEinYxmIq9GzdnXVTOjpWquWqb5KWyU2Si8rdK6fdtFSj49LLyOHtmZJ27hT7Wrgy9ZYhS2eUEDXin8/GNeITEbR1iz2X5Oou6C6CNNr5nZFs71aY5X8OgnawuB0WuQTN5e9FuC2ADrKA/Kcroqj4QV5y0uXTlG2kc3vm6qlJqRWtbQGIx6oXVogWcgZQ==

Received: from DU0P191MB2993.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:5a7::19)

by VI0P191MB2919.EURP191.PROD.OUTLOOK.COM (2603:10a6:800:2b1::21) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9412.13; Sat, 13 Dec

2025 07:26:26 +0000

Received: from DU0P191MB2993.EURP191.PROD.OUTLOOK.COM

([fe80::ec:b83:4418:ba80]) by DU0P191MB2993.EURP191.PROD.OUTLOOK.COM

([fe80::ec:b83:4418:ba80%4]) with mapi id 15.20.9412.005; Sat, 13 Dec 2025

07:26:26 +0000

From: Babita Smith

To: "sales@nk.ca"

Subject: Great Results to Your Clients?

Thread-Topic: Great Results to Your Clients?

Thread-Index: AQHcbAHKvJY1DI2BqUuBwQMx49CRqQ==

Date: Sat, 13 Dec 2025 07:26:26 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DU0P191MB2993:EE_|VI0P191MB2919:EE_

x-ms-office365-filtering-correlation-id: ef7266b0-8f53-4ef1-509c-08de3a18ed42

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|461199028|5062599005|38102599003|39105399006|15080799012|8062599012|8060799015|19110799012|440099028|3412199025|40105399003|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?Hq0StUBig/lpdMzjtGg+evcQKjCgZC7gAECO98Tk9e6S1UytkAHq/Oyo?=

=?Windows-1252?Q?Qx6o1F5xGOHr4Ym/YMIrbugdZRcEcVlgx9q19tDe2XeKqlIVnGGrChJ3?=

=?Windows-1252?Q?ZOVg8tMkIeoQZXC4gi1G3ZXzls2nRLLMSjEUSqLqVNLBQ94blw7Ce8Fk?=

=?Windows-1252?Q?FWywtF0OoDJIiRUSPpTVIPMrr2cm3/okc5rXOqsCE9lQlAHDu1a0RbrV?=

=?Windows-1252?Q?W/Ktdh2h8YNhGADNbbyTCi52cMHuj5as9kkk2zSXCX7LWTLQ4rlYa9Wa?=

=?Windows-1252?Q?Fy9IHEzRjsKaFNqdiPQV1n8ZKk4fJUXoHeDfKB6al7lxaboOEicVdB+1?=

=?Windows-1252?Q?vhadHoIBiWltb7PHJ4PnusS/XGXS2ydpBLWpiDSEycz5gV9mZMPvVRdB?=

=?Windows-1252?Q?8I9BC9j6/NIR/ajuX3d276P1Kze5t2R+BrMe0EL1p3UDRe3bgBPOhAgw?=

=?Windows-1252?Q?4SoorFShTNI3Gdk57ZkYYxp5wOjUWPG84aQ8eXOd6uNLUVGerNDhZweP?=

=?Windows-1252?Q?iYYkAZISHvLJ7zs2zSCeukMi0tOv5fZgUVBYtwIqyp5OetVrW3lYaJgl?=

=?Windows-1252?Q?wqbvTy3kXOOgAVqvmZrG4BB0Qmwvg5IsJ+pdfQf4AuXWaaStv6941RBf?=

=?Windows-1252?Q?perc2itpU80oPRvtKidFg4yipaE4LdJ9EKWud8VcMMK1esQfOKi0YCye?=

=?Windows-1252?Q?ihztl6GLw7MXcMMDoUCE1303zNA6J8prpmlvWaY2nu/I+aLi2lQJxm2B?=

=?Windows-1252?Q?VSaeiRVJy8VMr/A7t2uM4czYzlePbF7854IV+8FDoeP+darmZKYahAjv?=

=?Windows-1252?Q?63VHH8pBy7Dkhk6St25+8yTmoyvBCc3K9HN8fg8gCcHCiTS4YTi5ogoV?=

=?Windows-1252?Q?7xBssV6FGjHXxIGOwqmA8kdtaDBDur2oUavA5jvpfzFBWcx1by21oLeg?=

=?Windows-1252?Q?vpDPpRaay/D/xnicTexp64NA7d+GK0MwGrcSEc1db4WlB6cvhjGHKPww?=

=?Windows-1252?Q?D2XtNv+rvd2U8jO+SL4DNYOTIh4tF7ee2KUs7eWXN+tETuRmiuJUSz+m?=

=?Windows-1252?Q?4WaKVAIb4bazcXXG9bV40kaT8WohoFN0UxWZ5VQNzLM+hFvrvXro8q43?=

=?Windows-1252?Q?2TjP+4yrtUALzMyIAF7ceoB5brdykY4o65MfE8Tf6PtB1Ts4CXlosjgV?=

=?Windows-1252?Q?30j0lBomSIv9whFdbAGChzV02rX08KOVZwOqd6moh3RuYWPMDGZnbioA?=

=?Windows-1252?Q?Q5mZDMJIwjpwsAlcR5tUFdsYBNwBuBy+zXouFrDKN1S3UrI1/POmfES5?=

=?Windows-1252?Q?O3X1QL1cjS9X4ZjgGnhKV63i80g=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?vv1tV8X1/i193M24L7il5XL41JBcY59qZ9+s6CFKda/w2Fgf7bZ0Hecz?=

=?Windows-1252?Q?HbP+Xblh9TfXXBN5SXstdw4q6vBA0nY4xHGs8WKXErY6/M4LFk0Ms2SU?=

=?Windows-1252?Q?3ZXheo3ncT4ZqDIzNWdWbTlRd5z+FlOT4IHp5+6/ULbWVIoDby0/zmdr?=

=?Windows-1252?Q?hjpoPl32aoQNRgNwZa9VoBf5cSnoRu/NagH5GQ9IWYJAfhcHeoWcu3xu?=

=?Windows-1252?Q?Cg4nHggF6lHk873SDt73SkdGyxpGlWjDxbHYbpfcPzTEJx/FgwTvl70H?=

=?Windows-1252?Q?zeVI9MAGLfSObrco3aSs4QD6mNHh5D2dTfqI9RcMWJO5LMfaBu0gom7B?=

=?Windows-1252?Q?3rfa9OCXkdhKpFOnG3znNpj7Gg6xfO76zxcECc6sTYH2smp5JEDLbAla?=

=?Windows-1252?Q?kWMzZQUvKpTJOpgg20mZ0fcZy0pamuqucnyZYcUtkLdS8qu0LBwT0AuL?=

=?Windows-1252?Q?kbdrW0/emupAnbDkftq2NDK9X4qSkeLLxEr3n8xEPzI5oVDecTuzzeo0?=

=?Windows-1252?Q?i8DPN5X0NfiQ2n2CMFnvS7j7s6k4f9VvLzZYspWYId//Xx841btCrm9v?=

=?Windows-1252?Q?dA2/03g4J5bYW+xXpwvBm77Wqqm8tyoBXrz739Xm+jMnWIjS+WEcXcLM?=

=?Windows-1252?Q?8vS1lqbkrloo/F/yLD7t61zu5PJvp45o5NcJrRWlzpj9/rd6Js13tkdJ?=

=?Windows-1252?Q?lmCac5P4v6/yrcdHy6dBcHaDkCrPkg5lDzQ0eTjO7ts5v40L+p/JSB9p?=

=?Windows-1252?Q?5uAP3oQvQc4qfmO0bm5mgeyAWFkOrL+WiXftE/MWNBFAX4VtXEx51/yJ?=

=?Windows-1252?Q?KdsTDIy8C1vuUxqOp28NvFVDk1V9/dOs2apvF+vQaqsblFQHDT8aYEO+?=

=?Windows-1252?Q?et+2UyVV+DB/Nak5HBZR8E0rdvB5N4wFq2FzS5MKeLXwBTWFy19rW+hb?=

=?Windows-1252?Q?J3XB047KLYb4Vss7X64muLPeu6hKBJwns8z9VDFeJM5xtQDthX/OgCxE?=

=?Windows-1252?Q?FGdvmBVR53CzEcqBEdk/vRjgkK+V9WwAO4hBrwdEJ5p5MexpGOi6LNrj?=

=?Windows-1252?Q?jkb0KyHKhcjoOPxu3N8ksxIqm/Md0Ysglvm/rvHfxZuVzuHTgxyS4QC5?=

=?Windows-1252?Q?kOeiHSx4URbBb61cV5BJCb8/moizUeWuCIIwelN4v0hV5JD6uQotWk+j?=

=?Windows-1252?Q?u1vr0X/i+eGugtU1ZHBXRV+Ye5k9ZkPWEXRwm8YKqSrPpRBqLacckn2i?=

=?Windows-1252?Q?F2wNMA9r3oNqNFIdjqRDyh5Z/jYwGfpXuZpRthzJAN9FCg2Z2FP+dbip?=

=?Windows-1252?Q?ELPUTQV3yoln25jy6lwLIn9lH+PkugHd75ulVDe3i+I+GiBU?=

Content-Type: multipart/alternative;

boundary="_000_DU0P191MB2993E9B797A73A11D480654DADAFADU0P191MB2993EURP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-71052.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DU0P191MB2993.EURP191.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ef7266b0-8f53-4ef1-509c-08de3a18ed42

X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Dec 2025 07:26:26.7265

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI0P191MB2919



--_000_DU0P191MB2993E9B797A73A11D480654DADAFADU0P191MB2993EURP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Can I send you our complete price list?



Thanks in advance!



Babita





From: Babita Smith



Sent: Thursday, December 11, 2025 5:04 PM



To: sales@nk.ca



Subject: Great Results to Your Clients?







Hi,sales@nk.ca



ANY UPDATE



Can I send packages and a Price with great proposals?



Best Regards,





From: Babita Smith



Sent: Tuesday, December 9, 2025 3:37 PM



To: sales@nk.ca



Subject: Great Results to Your Clients?







Hi,



I=92d like to follow-up on my last email.



I=92d like to send you our proposal and Price list.



Thank you!





From: Babita Smith



Sent: Friday, December 5, 2025 3:26 PM



To: sales@nk.ca



Subject: Great Results to Your Clients?







Hello,



We specialise in helping businesses appear on Google=92s first page for the=

ir niche keywords. This can significantly increase traffic, leads, and enqu=

iries.



If you=92re interested, I can send over our affordable SEO packages.



Best,



Babita

Content analysis details: (15.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[209.85.214.230 listed in dnsbl.ahbl.org]

[209.85.214.230 listed in dnsbl.ahbl.org]

[209.85.214.230 listed in dnsbl.ahbl.org]

[209.85.214.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.230 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[franktsockton654(at)outlook.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.230 listed in sa-trusted.bondedsender.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.230 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.230 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.230 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.230 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 US_8BIT US-ASCII isn't an eight bit charset

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} BUSINESS PROPOSAL !!!



This is a multi-part message in MIME format.



--14da1bab14540aaf3b0fafbcf078de42d

Content-Type: text/plain; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton





--14da1bab14540aaf3b0fafbcf078de42d

Content-Type: text/html; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton







--14da1bab14540aaf3b0fafbcf078de42d--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Dec 2025 22:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUIWU-00000000Ebw-1YGN

for dave@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 22:50:30 -0700

Resent-From: The Doctor

Resent-Date: Fri, 12 Dec 2025 22:50:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f230.google.com ([209.85.214.230]:43183)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUHd0-00000000BZD-1pem

for doctor@nl2k.ab.ca;

Fri, 12 Dec 2025 21:53:18 -0700

Received: by mail-pl1-f230.google.com with SMTP id d9443c01a7336-297d4ac44fbso9352315ad.0

for ; Fri, 12 Dec 2025 20:51:28 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765601482; x=1766206282;

h=content-transfer-encoding:mime-version:message-id:subject:reply-to

:from:to:date:dkim-signature:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=NsHY5ca9FNWe30NYizON2atR5FOPwCa7VkPC6ZVcdQc=;

b=vQRw5juGRWn7EtVahunvlbnYVLtozUoc9tnYO+EqlzKfK1FJ6G8HSWCECrIgWvLrWB

GW4WRkYPIZL92rRo08ek9jI501XWdcZno3s7OYPkxoHTVsEh3Uqtv95iKpEd7oq5nLBl

Vw064+fHKLrdbE/x3uxn4M1JOhmwyaKZajRT7AF7pqrWO8b2PCUuUK47uVFNw0evQ0Bc

L8CXAj5uz8dYuLFkrYYF9Gs/rqQV8ZsnHuPD5VZa3rM4cWURyC09DFAXoDdKxVB7h+VX

ZSehnfEf6XyDR/LncQNIhYSiRp5QpFtNROuocWNjUVtcbXaLUjUNe8NKJEWuJTJq6j20

Pn0w==

X-Forwarded-Encrypted: i=1; AJvYcCVFl7WiJuy4hAIeb060ylBlquJbCHHToJO1NymRAKQW4z/7aVj4QnNlCqw343yaF1FPJUS4VVM=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YxHja/sMJyaiwwUci5XL4E5FuP/kDIIZGcA/tOuGX0Y2+oxuEca

oOfyW4EtcdJWDyciUUWyEew9p8Uf3XGMULmDoCAsQJSwaLzM5Nhhb5OPGKvGG1OeoJUZRfi3KRz

FrK1py2kqmUO0w7UDH2tK+J/wMksSUP/JX5tp

X-Gm-Gg: AY/fxX6X7DymNaenpInQFbR1zqGJ2wOOT0D3vB9lLEwiWabLfJ8UZL8dj1OHvauD6wq

UxMduf/Ul22NcKX/3jUS57rXM6jAaQLkd6X+F9KFVhkp+UWSj4F1Q3zThO2zfk+TImOl9b+7Dgc

zxrzFb+VevlCIq6uXfb8zQ/WQ3f3t6/vr6Zx8SZ7qJMSmsLAPg5T5zYkkyhL1kyvgZb6fyP2zOQ

w/dLy0/dSX4Kq90WQRULVkbu/ZQOxH5yK7X+ePJercvUHU4JAyW8PpYUZIVmTtAm6826OGbenFA

5p8jGKyq6kTaVxWdzqg6E4gW4YbYBkCe9tEZjhnmX0TlxvX8hVqS8mofA2GXGKVup6dcnNJLZdi

LRxJ6k4vC64Qk6KI2XJSHfQ==

X-Google-Smtp-Source: AGHT+IH3GOt6ps9lOSAWeV3+2yGvttF1OjoDKfyV72lqD70I9ZibncJjmsOnvDCd0NCcc5doP6ppeq4nEyvk

X-Received: by 2002:a17:903:2a90:b0:295:99f0:6c65 with SMTP id d9443c01a7336-29eeec38ae8mr79036355ad.30.1765601481970;

Fri, 12 Dec 2025 20:51:21 -0800 (PST)

Received: from mail.iadmexico.mx (mail.iadmexico.mx. [34.231.63.135])

by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-2a08df4a425sm2222055ad.23.2025.12.12.20.51.21

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 12 Dec 2025 20:51:21 -0800 (PST)

X-Relaying-Domain: iadmexico.mx

Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id C4674146016;

Fri, 12 Dec 2025 22:51:13 -0600 (CST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iadmexico.mx;

s=mailcow; t=1765601481; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type: content-transfer-encoding:content-transfer-encoding;

bh=NsHY5ca9FNWe30NYizON2atR5FOPwCa7VkPC6ZVcdQc=;

b=QOOxxPl0j4lT0LG2b4GMbazYOUXtjhpXfn/c2nZ55mX0TfZ7Zwg2Xa1N+x2otPu+3QbpX6

943ggxwXnsPfmeFNm6BLevK4rIznuIUNmlkaCorLnCiAULLvg1b9teN4YjFqmxs6bGYumh

xKwgZBdh/47PS3Q6nDlfkE50K9v7IX2uE19jSEKwEeJN4t+M5dHlGutdgg73SGW43PCla+

o6dmvBU4UHR5dXbV1pOLwm7T79MASDZUapNpGAGE6pfC6a9twMTd60qm7P9VZQxY5a+cRK

tmCgpApY8zKaaGgeUTeIrgRyR3T2UHKI9TEHB3dRQ2wsAZ2dg9YNeromcLBR/w==

Date: Sat, 13 Dec 2025 01:07:28 +0100

To: undisclosed-recipients:;

From: FRANK STOCKTON

Reply-To: franktsockton654@outlook.com

Subject: BUSINESS PROPOSAL !!!

Message-ID: <60df76e3919315de5c349bc5c265eeb5@iadmexico.mx>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="14da1bab14540aaf3b0fafbcf078de42d"

Content-Transfer-Encoding: 8bit

X-Last-TLS-Session-Version: TLSv1.2

X-Spam_score: 15.1

X-Spam_score_int: 151

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I have a Business proposal worth $35M USD, please contact

me for more information. Sincerely, Frank Stockton I have a Business proposal

worth $35M USD, please contact me for more information. Sincerely, Frank

Stockton

Content analysis details: (15.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

[209.85.214.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[209.85.214.230 listed in dnsbl.ahbl.org]

[209.85.214.230 listed in dnsbl.ahbl.org]

[209.85.214.230 listed in dnsbl.ahbl.org]

[209.85.214.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.230 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[franktsockton654(at)outlook.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.230 listed in sa-trusted.bondedsender.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.230 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.230 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.230 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.230 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 US_8BIT US-ASCII isn't an eight bit charset

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} BUSINESS PROPOSAL !!!



This is a multi-part message in MIME format.



--14da1bab14540aaf3b0fafbcf078de42d

Content-Type: text/plain; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton





--14da1bab14540aaf3b0fafbcf078de42d

Content-Type: text/html; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton







--14da1bab14540aaf3b0fafbcf078de42d--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Dec 2025 22:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUIWU-00000000Ebw-1YGN

for dave@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 22:50:30 -0700

Resent-From: The Doctor

Resent-Date: Fri, 12 Dec 2025 22:50:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f230.google.com ([209.85.214.230]:43183)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUHd0-00000000BZD-1pem

for doctor@nl2k.ab.ca;

Fri, 12 Dec 2025 21:53:18 -0700

Received: by mail-pl1-f230.google.com with SMTP id d9443c01a7336-297d4ac44fbso9352315ad.0

for ; Fri, 12 Dec 2025 20:51:28 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765601482; x=1766206282;

h=content-transfer-encoding:mime-version:message-id:subject:reply-to

:from:to:date:dkim-signature:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=NsHY5ca9FNWe30NYizON2atR5FOPwCa7VkPC6ZVcdQc=;

b=vQRw5juGRWn7EtVahunvlbnYVLtozUoc9tnYO+EqlzKfK1FJ6G8HSWCECrIgWvLrWB

GW4WRkYPIZL92rRo08ek9jI501XWdcZno3s7OYPkxoHTVsEh3Uqtv95iKpEd7oq5nLBl

Vw064+fHKLrdbE/x3uxn4M1JOhmwyaKZajRT7AF7pqrWO8b2PCUuUK47uVFNw0evQ0Bc

L8CXAj5uz8dYuLFkrYYF9Gs/rqQV8ZsnHuPD5VZa3rM4cWURyC09DFAXoDdKxVB7h+VX

ZSehnfEf6XyDR/LncQNIhYSiRp5QpFtNROuocWNjUVtcbXaLUjUNe8NKJEWuJTJq6j20

Pn0w==

X-Forwarded-Encrypted: i=1; AJvYcCVFl7WiJuy4hAIeb060ylBlquJbCHHToJO1NymRAKQW4z/7aVj4QnNlCqw343yaF1FPJUS4VVM=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YxHja/sMJyaiwwUci5XL4E5FuP/kDIIZGcA/tOuGX0Y2+oxuEca

oOfyW4EtcdJWDyciUUWyEew9p8Uf3XGMULmDoCAsQJSwaLzM5Nhhb5OPGKvGG1OeoJUZRfi3KRz

FrK1py2kqmUO0w7UDH2tK+J/wMksSUP/JX5tp

X-Gm-Gg: AY/fxX6X7DymNaenpInQFbR1zqGJ2wOOT0D3vB9lLEwiWabLfJ8UZL8dj1OHvauD6wq

UxMduf/Ul22NcKX/3jUS57rXM6jAaQLkd6X+F9KFVhkp+UWSj4F1Q3zThO2zfk+TImOl9b+7Dgc

zxrzFb+VevlCIq6uXfb8zQ/WQ3f3t6/vr6Zx8SZ7qJMSmsLAPg5T5zYkkyhL1kyvgZb6fyP2zOQ

w/dLy0/dSX4Kq90WQRULVkbu/ZQOxH5yK7X+ePJercvUHU4JAyW8PpYUZIVmTtAm6826OGbenFA

5p8jGKyq6kTaVxWdzqg6E4gW4YbYBkCe9tEZjhnmX0TlxvX8hVqS8mofA2GXGKVup6dcnNJLZdi

LRxJ6k4vC64Qk6KI2XJSHfQ==

X-Google-Smtp-Source: AGHT+IH3GOt6ps9lOSAWeV3+2yGvttF1OjoDKfyV72lqD70I9ZibncJjmsOnvDCd0NCcc5doP6ppeq4nEyvk

X-Received: by 2002:a17:903:2a90:b0:295:99f0:6c65 with SMTP id d9443c01a7336-29eeec38ae8mr79036355ad.30.1765601481970;

Fri, 12 Dec 2025 20:51:21 -0800 (PST)

Received: from mail.iadmexico.mx (mail.iadmexico.mx. [34.231.63.135])

by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-2a08df4a425sm2222055ad.23.2025.12.12.20.51.21

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 12 Dec 2025 20:51:21 -0800 (PST)

X-Relaying-Domain: iadmexico.mx

Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id C4674146016;

Fri, 12 Dec 2025 22:51:13 -0600 (CST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iadmexico.mx;

s=mailcow; t=1765601481; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type: content-transfer-encoding:content-transfer-encoding;

bh=NsHY5ca9FNWe30NYizON2atR5FOPwCa7VkPC6ZVcdQc=;

b=QOOxxPl0j4lT0LG2b4GMbazYOUXtjhpXfn/c2nZ55mX0TfZ7Zwg2Xa1N+x2otPu+3QbpX6

943ggxwXnsPfmeFNm6BLevK4rIznuIUNmlkaCorLnCiAULLvg1b9teN4YjFqmxs6bGYumh

xKwgZBdh/47PS3Q6nDlfkE50K9v7IX2uE19jSEKwEeJN4t+M5dHlGutdgg73SGW43PCla+

o6dmvBU4UHR5dXbV1pOLwm7T79MASDZUapNpGAGE6pfC6a9twMTd60qm7P9VZQxY5a+cRK

tmCgpApY8zKaaGgeUTeIrgRyR3T2UHKI9TEHB3dRQ2wsAZ2dg9YNeromcLBR/w==

Date: Sat, 13 Dec 2025 01:07:28 +0100

To: undisclosed-recipients:;

From: FRANK STOCKTON

Reply-To: franktsockton654@outlook.com

Subject: BUSINESS PROPOSAL !!!

Message-ID: <60df76e3919315de5c349bc5c265eeb5@iadmexico.mx>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="14da1bab14540aaf3b0fafbcf078de42d"

Content-Transfer-Encoding: 8bit

X-Last-TLS-Session-Version: TLSv1.2

X-Spam_score: 15.1

X-Spam_score_int: 151

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I have a Business proposal worth $35M USD, please contact

me for more information. Sincerely, Frank Stockton I have a Business proposal

worth $35M USD, please contact me for more information. Sincerely, Frank

Stockton

Content analysis details: (14.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.232 listed in sa-accredit.habeas.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[franktsockton654(at)outlook.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.232 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.232 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.232 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.232 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.232 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 US_8BIT US-ASCII isn't an eight bit charset

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} BUSINESS PROPOSAL !!!



This is a multi-part message in MIME format.



--14da1bab14540aaf3b0fafbcf078de42d

Content-Type: text/plain; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton





--14da1bab14540aaf3b0fafbcf078de42d

Content-Type: text/html; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton



--14da1bab14540aaf3b0fafbcf078de42d--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Dec 2025 22:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUIWQ-00000000Ebi-0oVr

for dave@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 22:50:26 -0700

Resent-From: The Doctor

Resent-Date: Fri, 12 Dec 2025 22:50:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f232.google.com ([209.85.214.232]:43318)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUHd0-00000000BZC-1mEA

for doctor@mail.nl2k.ab.ca;

Fri, 12 Dec 2025 21:53:18 -0700

Received: by mail-pl1-f232.google.com with SMTP id d9443c01a7336-297e239baecso12635155ad.1

for ; Fri, 12 Dec 2025 20:51:27 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765601482; x=1766206282;

h=content-transfer-encoding:mime-version:message-id:subject:reply-to

:from:to:date:dkim-signature:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=NsHY5ca9FNWe30NYizON2atR5FOPwCa7VkPC6ZVcdQc=;

b=A0ONl/XraIXQMQjnJDaaMgi3vr+G7+gLIkwLsLG8w90UZHrcP4apvLdEVBoasNl2gt

aJ8Fsfvvxjgs5X2s5Zcfr1+Cd05YrTsba4wNArnS+u+pjMUZu3OqlncySYE+/av363wJ

vdWU2yCMTcvs9eWeY1K1YgdGlVQ2fK2Zyx0BgJj7rCWBSE6dBNfYcFuMkD/XpEMb8ogC

azzzqJ0HfX80F0NgaNLQX/yh+qXqmqzQuqStg24DHLugoevaoc2jKi37FaA1I1TjPyRh

yeffsQXA/2+Dv3aQcbeRcyKJxikCvlYkywZx33l9tf2afJHnWtJyqOofyixlVywI5EvI

mgcw==

X-Forwarded-Encrypted: i=1; AJvYcCW8yr2mSyVp8JyvsYeQzMJfzHfoW2GY//RoOP2/ebAKuKOfHMZ2IeKWcYu6pZK2A5/1l4hcrwE=@mail.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxQu7RrtoutaQt/yREebYyOjPiDOW9aPyQFPpizcJA1Iw+3DWR3

5j78q/bRC8b4Pf+wAprY/wyujwe+t+qlq5dt+H92QbYIPNyVfOeOPLF1yZeuIQ6Gky0ILzcVQ0B

oTlWH0JZ0hBrY0nx7QKuTHyF6irPDNXAH6eF0

X-Gm-Gg: AY/fxX7kQb9JgN/HeVmYCPKRHZCsKJe6Vb0BSvYHcPFftdINAjCUQp/hs4W60zNsA7w

ChK7gF8t8T/WKuU+roN7JfpkftTGC5HnfZg5QmFQiU6E+Mlu9YwUzf9eOKMzZCXwMDwnqWMKzEn

VS1H7p2dmxj96VC2RwcdkByN3xRTPBSTVnH+bXQztYxW9AzqZR0BGrbPWQooZhDGJOQdc9Ej+0l

DgIhNTCOtf7l9KEU/p4KKGAdbQCLsMA1qL5rE3Xf/IWkKezSuRiOgyYZGTMZefUenG9XzqYKQ7s

oHrpwVLuP6d8TCRmSOS2HIYLhUSvxJC5MyxmkAPFL2+SWb93G4qzzTSm+SvhqpNU4hBIkjE4kYb

cnwzKN6NzwMWULVNF6v4q3A==

X-Google-Smtp-Source: AGHT+IH3GOt6ps9lOSAWeV3+2yGvttF1OjoDKfyV72lqD70I9ZibncJjmsOnvDCd0NCcc5doP6ppeq4nEyvk

X-Received: by 2002:a17:903:2a90:b0:295:99f0:6c65 with SMTP id d9443c01a7336-29eeec38ae8mr79036355ad.30.1765601481970;

Fri, 12 Dec 2025 20:51:21 -0800 (PST)

Received: from mail.iadmexico.mx (mail.iadmexico.mx. [34.231.63.135])

by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-2a08df4a425sm2222055ad.23.2025.12.12.20.51.21

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 12 Dec 2025 20:51:21 -0800 (PST)

X-Relaying-Domain: iadmexico.mx

Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id C4674146016;

Fri, 12 Dec 2025 22:51:13 -0600 (CST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iadmexico.mx;

s=mailcow; t=1765601481; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type: content-transfer-encoding:content-transfer-encoding;

bh=NsHY5ca9FNWe30NYizON2atR5FOPwCa7VkPC6ZVcdQc=;

b=QOOxxPl0j4lT0LG2b4GMbazYOUXtjhpXfn/c2nZ55mX0TfZ7Zwg2Xa1N+x2otPu+3QbpX6

943ggxwXnsPfmeFNm6BLevK4rIznuIUNmlkaCorLnCiAULLvg1b9teN4YjFqmxs6bGYumh

xKwgZBdh/47PS3Q6nDlfkE50K9v7IX2uE19jSEKwEeJN4t+M5dHlGutdgg73SGW43PCla+

o6dmvBU4UHR5dXbV1pOLwm7T79MASDZUapNpGAGE6pfC6a9twMTd60qm7P9VZQxY5a+cRK

tmCgpApY8zKaaGgeUTeIrgRyR3T2UHKI9TEHB3dRQ2wsAZ2dg9YNeromcLBR/w==

Date: Sat, 13 Dec 2025 01:07:28 +0100

To: undisclosed-recipients:;

From: FRANK STOCKTON

Reply-To: franktsockton654@outlook.com

Subject: BUSINESS PROPOSAL !!!

Message-ID: <60df76e3919315de5c349bc5c265eeb5@iadmexico.mx>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="14da1bab14540aaf3b0fafbcf078de42d"

Content-Transfer-Encoding: 8bit

X-Last-TLS-Session-Version: TLSv1.2

X-Spam_score: 14.9

X-Spam_score_int: 149

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I have a Business proposal worth $35M USD, please contact

me for more information. Sincerely, Frank Stockton I have a Business proposal

worth $35M USD, please contact me for more information. Sincerely, Frank

Stockton

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Dec 2025 20:23:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUGCt-000000006E4-0qrE

for dave@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 20:22:07 -0700

Resent-From: The Doctor

Resent-Date: Fri, 12 Dec 2025 20:22:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f196.google.com ([209.85.208.196]:60611)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUFaj-000000003Kb-1Izc

for doctor@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 19:42:50 -0700

Received: by mail-lj1-f196.google.com with SMTP id 38308e7fff4ca-37a2dcc52aeso15827991fa.0

for ; Fri, 12 Dec 2025 18:41:56 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765593709; x=1766198509; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=hg6yT7ppGRbhNH7XMg2vFFLQ4ORbrxFq6y1JdNuFT9M=;

b=klgu8AGF7nJKhdGyGUqvaxg2p4byoh119b7sRG2tJQyBwI5Ko603O5g1tSi9o+6Bz9

l8pUZwUGDpADY6OYb0nUQkrJrK3R+4d9rwIW9TNBBBsw5d6d/Jp45UchGYXAgl/De4qY

NYJqrXw/yXfiQPKCJHL4h9ijWvAq6/hyxXic9reMPJyYp91PPDfYccxDtbNCY89GFNbU

RUIm2AQK5y9Js2LRCj70qwZKyDusmNNE0J0yAJWfM7iRKpLcNFh9UQfrvrp06aGaUB7/

mDx+kAkeIy4mPDD5v4XfMR57JN+dC4+XuTihZSkH0ltSrzqJGEiBRdZSJX33wFkzeQto

0wHQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765593709; x=1766198509;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=hg6yT7ppGRbhNH7XMg2vFFLQ4ORbrxFq6y1JdNuFT9M=;

b=XUI+1jX+YthiVS0oMzjYEsX/RintJGbyjlFrT251EpmJxnBKZADFN0Q2hxHGk8Islg

KNWKYhh/5irZHK+T8slxnTZxwkGF3nrjxjSpOHAVmuGriqQzwwCk0ZqpJHtZcQ7eaPe4

uMOLMtZ5OoGmtlx1nItAfPc4Bf+9xNO97BSwIqqww0beAxRMEIapHnKXO9pGiQkc/1Yb

pB0clkIEWOvzmCssZs9R7sSoiQCFC/6PxbntE0QoxKCkbOwLrKNTA5A0Riu0MJzNQSbo

YK0W+IKYWYqazJRaigxXaHMHPtZbjD+uuhr5D0m40bYUeE+Q3aet71Jouutm5HTMSQL3

c8sA==

X-Forwarded-Encrypted: i=1; AJvYcCWCLzZfuRBnVPiVei0Fnjhbc2K1wJxRm+rJKS16j8yFzkal6vSIvosLO6Kn1oOgvKOW15lf4RQ=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyNS2wMkbRXA4IkgnUBhBpHl7f1i/oiIz63JFsnlI1YRfIe/TZy

JF+xClY/YEtN6wtoHDY80aaDSSl0Fw6C8r8BpYip98K/0xLUotCfVHuY4URmQS0ELu9hdQekw+k

m9E6TywdtCXndGFvdt3J3anOcbGfwDm0=

X-Gm-Gg: AY/fxX5xOtY+VB95W3pqR6A+4ouTiSTI0OIK+aNZOh1tjA0oB8i1DqVyPH+QX/Ga6PS

RXwE+RE7K/DtIAP6aJL1w5mn1bsFS3LwgaUgvwpvgWv/4ZYUBc2eSvAlJRiGlkRilHK/sUw3OWJ

mEhubyQNsY6dNL5fPxiBX+9/AK5KNmAvp8Z7NnXhVpVGRcP5JktsgnAh7z1sV4KjKkSv8JJW+i+

ndIjoFIwk6fvQMTcCG4yXD170rlZy3HUQL4TRqEMOUxVzz5FZdcXZs8MKpvo0oTjLLoesfqog4D

Sg==

X-Google-Smtp-Source: AGHT+IFdaDs56PMH4MJ2Xvj8hnhc2a4LBkY9id+ZFF+3VyJNAl9vFsQV2YaI+7C5nDTqlqogEIAF97gS0GiZCZ7SA6A=

X-Received: by 2002:a2e:9a12:0:b0:37a:95c9:4745 with SMTP id

38308e7fff4ca-37fd08c7a93mr12514031fa.40.1765593709055; Fri, 12 Dec 2025

18:41:49 -0800 (PST)

MIME-Version: 1.0

Reply-To: louisa244love@gmail.com

From: Louisa

Date: Sat, 13 Dec 2025 09:41:37 +0700

X-Gm-Features: AQt7F2pho8Xis1q1fAf7gJR36-xrstLxWy6jDGAgM5WYva0rG56t9QOHYxXtqVA

Message-ID:

Subject: HELLO

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000d895010645cc514d"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello , How are you and your family doing today? I hope all

is well with you? Hello ,



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

[209.85.208.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.196 listed in dnsbl.ahbl.org]

[209.85.208.196 listed in dnsbl.ahbl.org]

[209.85.208.196 listed in dnsbl.ahbl.org]

[209.85.208.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.208.196 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.208.196 listed in sa-accredit.habeas.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.196 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.196 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.196 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.208.196 listed in bl.score.senderscore.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[louisab354(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[louisab354(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} HELLO



--000000000000d895010645cc514d

Content-Type: text/plain; charset="UTF-8"



Hello ,



How are you and your family doing today? I hope all is well with you?



--000000000000d895010645cc514d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

:Helvetica,Arial,sans-serif">Hello ,

r:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif">

:13px;color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif">
=3D"font-size:13px;color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif"=

>How are you and your family doing today? I hope all is well with you?=C2=

=A0

--000000000000d895010645cc514d--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Dec 2025 20:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUGCf-000000006Cg-3Kbb

for dave@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 20:21:53 -0700

Resent-From: The Doctor

Resent-Date: Fri, 12 Dec 2025 20:21:53 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f103.google.com ([209.85.222.103]:57580)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUEp6-000000000Oz-31vz

for root@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 18:53:36 -0700

Received: by mail-ua1-f103.google.com with SMTP id a1e0cc1a2514c-93f5667f944so1103144241.2

for ; Fri, 12 Dec 2025 17:52:43 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765590757; x=1766195557;

h=content-transfer-encoding:mime-version:message-id:subject:reply-to

:from:to:date:dkim-signature:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=dutKWXB6qWezxV7ePGOU87aIyoiLN4AGBrtyOSZE6dY=;

b=Jsb/VrXRLbxTOikVdbiT6+kmS+qL4i/Kz83HRgWUPB+mXS7o0HHHlewpe+UCj3OaEG

oJPSFkSMHIlBOCv3O2MvsHZDPzNWwX2wJsCD3ZteGm7LdTJVc1RP+MXmZ+Lo2uvgBQab

6/Z1YCovY7Z793Co1HOSt+j0Wi+PopNxEiThrJ2MjdzY6qcWdjiV+Ze1vxCj5aYP4wbw

iPSZeyw27NZqn23MNFCRQDMl8IAkp5zCFM1FZI0c3hEk4wVUO5f7yPW8BwiF7TLbKZ3t

2SA+xWLR0+5pZ/pts0o2hYhF88As/N7gZCRTW1ZEMrlgqD1rMKE3HrbmQUFvVfXfCjlK

lazA==

X-Forwarded-Encrypted: i=1; AJvYcCUQXXwVnUEvE88WmCIIKYaWkYt22MIzE0AF0wWbM9Gv6x5y27/aVuX0Flgp5dKirN6TeL+u@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxC8jcNrQ9ZM/jDf3e0RROUkUeu07qtWdAdHEhVr4fYfMqaYJHj

x8wOfeCED5c9drWEkZe8ZhP6AMrH1BIt9eMt4MZqZE8C2llZO99nje3jJ38Xb+EEYocO6CON1La

PPJQJrwLSPT1tof1ccSlB2S6mfI9AEmWb1wEm

X-Gm-Gg: AY/fxX7iUExbnMUXiF02euIifHplf9LLw+mT1aemlrtZEo7UjlpINtXDqhlnRb236eZ

Eem4r6zIP3EvcT6oJUTUasui7xAPz25tEGEOJANAVh/ZoesEGx/otdn0MyflfuWklpp38+RvVGQ

LAh8X2ys9PUVkKE8U7waOiWfSNVFIcYt2TSQ1dWpn7lZ+3u8vdGqgWUhVgad2ylYrrnYE46F/K9

65SraDI8cW0bXADG3wdSM9kcY/6xsT83nRXrTuUXAZ96WvmsLniKLNaaMjU3DOJalePbSy8XjLu

1CKV5t2vdLr7f+fqXoH8kwUQWWlNcX7A2XxCbiYqdOkNbqsDd6K37lzcWFvGovWgKYgF9HimFU/

Lpx3nEEan2ihGq8alG3P+fg==

X-Google-Smtp-Source: AGHT+IElSQJD4EuzNyeT/wLN5Wwq9ADndnKpPMprIFVBKutX19Z1D22HAf1YDiiuyLyeE7WRt0breOugPj1x

X-Received: by 2002:a05:6102:e12:b0:5d6:254f:4e24 with SMTP id ada2fe7eead31-5e827835869mr1664251137.32.1765590757385;

Fri, 12 Dec 2025 17:52:37 -0800 (PST)

Received: from mail.iadmexico.mx (mail.iadmexico.mx. [34.231.63.135])

by smtp-relay.gmail.com with ESMTPS id ada2fe7eead31-5e7c85bb9b4sm1037051137.0.2025.12.12.17.52.37

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 12 Dec 2025 17:52:37 -0800 (PST)

X-Relaying-Domain: iadmexico.mx

Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 2C749146138;

Fri, 12 Dec 2025 19:52:05 -0600 (CST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iadmexico.mx;

s=mailcow; t=1765590755; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type: content-transfer-encoding:content-transfer-encoding;

bh=dutKWXB6qWezxV7ePGOU87aIyoiLN4AGBrtyOSZE6dY=;

b=CGH8PWZCCPViEU8XqCia5znE5HX0enPvVKB06I4R/A3U3r6HAs2uO33UV0ivGdFvakhadR

BtJmvH7ig2j6PGJv34TgI/uAMmv4Y7sTWxPgj9j0/uSxbpJOpyTietikXZkRWow//ezAwx

QS2cBCtOXsiQjJkG3owfGjtJ9+o5EaB0pSb18yiwHO1Bs6bWpUz2zCDZitGq9lDWxMpQ5Q

rWhA4IfqzYyDweuwGsjtRGuoG3U7pHpqImjb0gzw2+CUMNDHcVnGZ1sY4JnphsgyDyp5wf

LU9EIcJkyBJDi8v+4GMas/g5HNANNN7aPNx8Ds0bADoA3Jo7VIsvQqACJwoD+w==

Date: Sat, 13 Dec 2025 01:07:28 +0100

To: undisclosed-recipients:;

From: FRANK STOCKTON

Reply-To: franktsockton654@outlook.com

Subject: BUSINESS PROPOSAL !!!

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="12595d64276c0482262d2ac7c83b13fd7"

Content-Transfer-Encoding: 8bit

X-Last-TLS-Session-Version: TLSv1.2

X-Spam_score: 17.5

X-Spam_score_int: 175

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I have a Business proposal worth $35M USD, please contact

me for more information. Sincerely, Frank Stockton I have a Business proposal

worth $35M USD, please contact me for more information. Sincerely, Frank

Stockton



Content analysis details: (17.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

[209.85.222.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[209.85.222.103 listed in dnsbl.ahbl.org]

[209.85.222.103 listed in dnsbl.ahbl.org]

[209.85.222.103 listed in dnsbl.ahbl.org]

[209.85.222.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.103 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.103 listed in wl.mailspike.net]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[franktsockton654(at)outlook.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 US_8BIT US-ASCII isn't an eight bit charset

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} BUSINESS PROPOSAL !!!



This is a multi-part message in MIME format.



--12595d64276c0482262d2ac7c83b13fd7

Content-Type: text/plain; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton





--12595d64276c0482262d2ac7c83b13fd7

Content-Type: text/html; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton







--12595d64276c0482262d2ac7c83b13fd7--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Dec 2025 18:17:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUEFN-00000000Ogv-1uVN

for dave@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 18:16:33 -0700

Resent-From: The Doctor

Resent-Date: Fri, 12 Dec 2025 18:16:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f102.google.com ([209.85.160.102]:47174)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUDwV-00000000MVM-3Stq

for root@nl2k.ab.ca;

Fri, 12 Dec 2025 17:57:12 -0700

Received: by mail-oa1-f102.google.com with SMTP id 586e51a60fabf-3f5ec7636e2so701197fac.2

for ; Fri, 12 Dec 2025 16:56:19 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765587373; x=1766192173;

h=content-transfer-encoding:mime-version:message-id:subject:reply-to

:from:to:date:dkim-signature:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=zjsRaBwSPWugIk7xdXzVHorPhdxwmzUkSZGQ3TBtdi4=;

b=pspZ3hQ6SpCj3vWSGZcvpPn0v6kPa8PHFGDovbbYVqDmJQZlGl6j07j1CzD883QgB9

je+OqRA+1TToYUM+M1DV3vLmb+sJtMNwFu8ttEjybc481KldnMwWzNYlQTbqXhmzSfQk

M5A/cPox35E+VtvIdmQtT+IFQ5UXbsDR7VpYlj8DfCNQUJOjJnigaICHs8tMZpyglRoM

079HO35ayGB4hU+5TswHxWKPI4G+wGAISegnVcdwrZ13mq8K478e7Vw6yUUMuUafcoKX

/1ppKB54dEkYv2iKQduEnP8kvQwUNSSokK2PmeulVBknYdN8ITGr38moA79DqMlHUbBm

pVCw==

X-Forwarded-Encrypted: i=1; AJvYcCUBb9O7LH5B8q1375xCb1EI/yCVG3zynCo3iFJkzw1YM1Rkz+WC2XMzg5Vnzma/XC6Oywml@nl2k.ab.ca

X-Gm-Message-State: AOJu0YyaJqtuAt/1MKX8cnZK6yvoF2E63r31UCbVc01gyV1Dof42cIMk

YFFCwZBZdYs6SDp71BFVObEGwR6+SIvlZ94kRXX2wFkO7pV09l36/hSFbMZ9wS9rwORs35flAK1

EfNLrxhNukWEDXT5ZmVZ5FwSwT30OhyJscsYs

X-Gm-Gg: AY/fxX6WDRgtYKZGfcmAfLJ8npzjGJr0TDzGFMfARiwDulkhyZpO7DZiDaNnyEXtY1j

xDfHxuiS0VXB00zmgQ61jZk3VLfcKdJDnJX/r692AFoAnZCOIUBS0HynqsFm8cIKprgiQMjBG+3

rZy1XKmYD3gfrpd/lNAtSaKLqCzhdtCkNe5Vm2wgna7gIo8IqV2s69iV2Y8l+WoAugRGU+LPzZS

oscKT3fqM3P6jNE7SBWonHs3nzmzDkRFyXnjYQo7BfibrnI0HwojCoChPYEWuyCVUOj+NqGqaaV

cmn+NfTEDAN6pliyaNdLLersfmTR+rP5uIbfqJsEji2YPA00Y0ob7TRZcvCrNaLohoqPeE58eg/

hX8Dyvu0Ooq7kBg8u6cPeOw==

X-Google-Smtp-Source: AGHT+IFIo9C5/8/cKAIdrCRqkTvea/x5Xtn9Ok0uvrEkGryPvViyTtSKdf+K0trsRza2vdZf+o+SxGIuL4DF

X-Received: by 2002:a05:6870:a18c:b0:3e8:8e57:a7a9 with SMTP id 586e51a60fabf-3f5f8980e04mr2028122fac.52.1765587372720;

Fri, 12 Dec 2025 16:56:12 -0800 (PST)

Received: from mail.iadmexico.mx (mail.iadmexico.mx. [34.231.63.135])

by smtp-relay.gmail.com with ESMTPS id 586e51a60fabf-3f614bffc1csm76875fac.7.2025.12.12.16.56.12

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 12 Dec 2025 16:56:12 -0800 (PST)

X-Relaying-Domain: iadmexico.mx

Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 9E6301461C3;

Fri, 12 Dec 2025 18:55:54 -0600 (CST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iadmexico.mx;

s=mailcow; t=1765587371; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type: content-transfer-encoding:content-transfer-encoding;

bh=zjsRaBwSPWugIk7xdXzVHorPhdxwmzUkSZGQ3TBtdi4=;

b=H405Z5ALnh1t4YDmoLw7lIY63iLRnthHfR8py2HKfAm06vtaHo8gc5XM0SBexb8hzGBXv6

q0L6x4+oqNO562y6G3VhwluMIauqMf2ZOttMzJtwY489DDXc5FZYfzu+rKz85aA54IprnO

kNpH66b8ILflZn8yTR6dFAoSiLhFRmGTTe2ZTkTyhk0z9n2N0kakRB9iJjbZ+2ogpCggbG

5xeJvh0/uKrufCR8FN2m9BG5Gon47dWomb/uXaTOHYNjUsvnXhoQp18s6+miRf2VOluUpZ

aCEDAl6ZdIgaRJ1XmrhyZsxb/76bS+Tx3f8coQO6n6W9aSkrQZb8d+sZoZXeiQ==

Date: Sat, 13 Dec 2025 01:07:28 +0100

To: undisclosed-recipients:;

From: FRANK STOCKTON

Reply-To: franktsockton654@outlook.com

Subject: BUSINESS PROPOSAL !!!

Message-ID: <208b85492aa1bf76f5f70fcafd792ea1@iadmexico.mx>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="145d4ad381e29caccfe6ce29f1aaf0268"

Content-Transfer-Encoding: 8bit

X-Last-TLS-Session-Version: TLSv1.2

X-Spam_score: 17.7

X-Spam_score_int: 177

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I have a Business proposal worth $35M USD, please contact

me for more information. Sincerely, Frank Stockton I have a Business proposal

worth $35M USD, please contact me for more information. Sincerely, Frank

Stockton



Content analysis details: (17.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[209.85.160.102 listed in will-spam-for-food.eu.org]

[209.85.160.102 listed in will-spam-for-food.eu.org]

[209.85.160.102 listed in will-spam-for-food.eu.org]

[209.85.160.102 listed in will-spam-for-food.eu.org]

[209.85.160.102 listed in will-spam-for-food.eu.org]

[209.85.160.102 listed in will-spam-for-food.eu.org]

[209.85.160.102 listed in will-spam-for-food.eu.org]

[209.85.160.102 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[209.85.160.102 listed in dnsbl.ahbl.org]

[209.85.160.102 listed in dnsbl.ahbl.org]

[209.85.160.102 listed in dnsbl.ahbl.org]

[209.85.160.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.102 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.102 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[franktsockton654(at)outlook.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 US_8BIT US-ASCII isn't an eight bit charset

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} BUSINESS PROPOSAL !!!



This is a multi-part message in MIME format.



--145d4ad381e29caccfe6ce29f1aaf0268

Content-Type: text/plain; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton





--145d4ad381e29caccfe6ce29f1aaf0268

Content-Type: text/html; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton







--145d4ad381e29caccfe6ce29f1aaf0268--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Dec 2025 18:17:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUEFJ-00000000Ogq-2eQP

for dave@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 18:16:29 -0700

Resent-From: The Doctor

Resent-Date: Fri, 12 Dec 2025 18:16:29 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f103.google.com ([209.85.160.103]:49377)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUDP6-00000000JxL-0UUJ

for doctor@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 17:22:40 -0700

Received: by mail-oa1-f103.google.com with SMTP id 586e51a60fabf-3e12fd71984so1329798fac.2

for ; Fri, 12 Dec 2025 16:21:47 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765585301; x=1766190101;

h=content-transfer-encoding:mime-version:message-id:subject:reply-to

:from:to:date:dkim-signature:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=Nz/VuTZpQ4hYPOuVsX1zetcBX75a5fZP3mJgmr2cJrU=;

b=fL/4fYebkR9y6xAMnjjYr9te56y3EtkulJ9U7gv5roPF2RUTMpZRg9PiIKTXyPVduu

jD1FUnnzPxcSnEjxb1GkZiH6Dsnb0sceAFN/kFGeHdxTTbY80v5yBsHmIb5NiJXIkrTz

Iuoqm7GLFAYIR3QSDndTBOj2HTu+QZdWvl3WiakBs/Cpu5wP19pnKHHNQltOPG6Nsx+Q

BoCF2nVFp8HcQiPrZMsEXjFwmKjml4wELaV7tc5wwkW/iqno30Hj5EUPeCvB8f4NW04o

1BWsmKr3ooAI8P46ztts/GSeeC6H4hmXTCDmorCCMrIhsDXyhE+QiQiOIofPjGpqXKf9

bzrQ==

X-Forwarded-Encrypted: i=1; AJvYcCWSnMMUYcahTbe2UZcB8+wKPBcaQ6eERdhO4GKBz1gZOjzzwztuwvxLGYrxLxSjJ9jsZ5IbV1M=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyBBQYOYE7CrUBsB38ZduON43a0BsyQYVtDgb8/3iksioNFMJfz

g7g7M91/DrW8xjGAh8hf2+uFEwm0mXEOfp1FuNgBLxJfz73491AYkpUOMsDhDLw5yQiMaoxzjnL

V0bMTAESRyNBvRbc0+pyFRGsRJYbC+eCDrG6G

X-Gm-Gg: AY/fxX7HYsPLtXRZJXauX+GaPuFjycwSwccBMJYzDja6NmEsMiA0s5KEMltSQY6JDLT

a5iqfqnCfanhJILFfUydhyV0Yj6iTicfOepMnzx0FQ/F1VYGdJX2vEkt7JKFjKkffnIAFESEX0q

A6qXRGZlq9YRkjWxkebB1WTX8p9IK5M5NyfA/ybCotzrGsyPKI4wJW+QYfAHDUw+N19sT/JtI76

lpDMR4gPUFMDvCcrBFJTDpOMx7q1By58d1hvE1ZNovn6uXWErRinyzQ6vwjY7suugesmlT8wNMJ

0phLuIsjBVT5lpNyBJBfrNOpkSJTillLTkMrac4LVwXxGVZ0tDWkDQaNHXVm0lmks00pJqDo3vU

7niXbnG0tc2DWckvJypFg7g==

X-Google-Smtp-Source: AGHT+IGxeLPwdk2MT9ATW1qya9DOEdh6k/Z5mJAGHD0NfNRFopDnC+pLhBKfKFwmBARRH9+hQMHXFqtSL7te

X-Received: by 2002:a05:6870:e309:b0:3ec:e09e:6c0 with SMTP id 586e51a60fabf-3f5f8943bd0mr2264044fac.39.1765585301234;

Fri, 12 Dec 2025 16:21:41 -0800 (PST)

Received: from mail.iadmexico.mx (mail.iadmexico.mx. [34.231.63.135])

by smtp-relay.gmail.com with ESMTPS id 586e51a60fabf-3f614b838c0sm70432fac.3.2025.12.12.16.21.41

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 12 Dec 2025 16:21:41 -0800 (PST)

X-Relaying-Domain: iadmexico.mx

Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 03ED6145CA0;

Fri, 12 Dec 2025 18:21:21 -0600 (CST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iadmexico.mx;

s=mailcow; t=1765585299; h=from:from:reply-to:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type: content-transfer-encoding:content-transfer-encoding;

bh=Nz/VuTZpQ4hYPOuVsX1zetcBX75a5fZP3mJgmr2cJrU=;

b=pXCMilchlagwyGb5VGhbZW7ayJP6F1DLy7urkJQOKJF7al9JE3Drj3sCJlSjw2RaOT5Kds

k4K19m5TR1s2PRaA+5XZr1GV/DIdRnDyWixbuAZeEau27MCiz8oYyueR2BHm663VTiU4iX

7XfHQb50QUGsk4tFV4tQFGZgE14xZawOQFOXYHJ7zrW7fwX88fX//RTtk/VyJzHJ+P+wct

pI4GgZDBN69iY09dHqFAsRjW8fQSxBdbGSMyS15e9toVX/K1Us4ykrHzftZV1d+x6wkG3B

ECumSio5BL9ZVzIierdoSDlsjRihC6vBW7/hNVpWV8mI5xx408xb/OrivRgulg==

Date: Sat, 13 Dec 2025 01:07:28 +0100

To: undisclosed-recipients:;

From: FRANK STOCKTON

Reply-To: franktsockton654@outlook.com

Subject: BUSINESS PROPOSAL !!!

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1eac57b4d12dcb2595f32c83bb3f7eacc"

Content-Transfer-Encoding: 8bit

X-Last-TLS-Session-Version: TLSv1.2

X-Spam_score: 17.7

X-Spam_score_int: 177

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I have a Business proposal worth $35M USD, please contact

me for more information. Sincerely, Frank Stockton I have a Business proposal

worth $35M USD, please contact me for more information. Sincerely, Frank

Stockton



Content analysis details: (17.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[34.231.63.135 listed in will-spam-for-food.eu.org]

[209.85.160.103 listed in will-spam-for-food.eu.org]

[209.85.160.103 listed in will-spam-for-food.eu.org]

[209.85.160.103 listed in will-spam-for-food.eu.org]

[209.85.160.103 listed in will-spam-for-food.eu.org]

[209.85.160.103 listed in will-spam-for-food.eu.org]

[209.85.160.103 listed in will-spam-for-food.eu.org]

[209.85.160.103 listed in will-spam-for-food.eu.org]

[209.85.160.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[34.231.63.135 listed in dnsbl.ahbl.org]

[209.85.160.103 listed in dnsbl.ahbl.org]

[209.85.160.103 listed in dnsbl.ahbl.org]

[209.85.160.103 listed in dnsbl.ahbl.org]

[209.85.160.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.231.63.135 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.103 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[franktsockton654(at)outlook.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 US_8BIT US-ASCII isn't an eight bit charset

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} BUSINESS PROPOSAL !!!



This is a multi-part message in MIME format.



--1eac57b4d12dcb2595f32c83bb3f7eacc

Content-Type: text/plain; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton





--1eac57b4d12dcb2595f32c83bb3f7eacc

Content-Type: text/html; charset=us-ascii



I have a Business proposal worth $35M USD, please contact me for more information.



Sincerely,

Frank Stockton







--1eac57b4d12dcb2595f32c83bb3f7eacc--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Dec 2025 18:17:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUEF0-00000000OgF-2whZ

for dave@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 18:16:10 -0700

Resent-From: The Doctor

Resent-Date: Fri, 12 Dec 2025 18:16:10 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f52.google.com ([209.85.210.52]:56590)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vUDOK-00000000Jv6-04xo

for sales@nk.ca;

Fri, 12 Dec 2025 17:21:53 -0700

Received: by mail-ot1-f52.google.com with SMTP id 46e09a7af769-7c6dbdaced8so1429733a34.1

for ; Fri, 12 Dec 2025 16:20:57 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=groupacclaim.co; s=google; t=1765585251; x=1766190051; darn=nk.ca;

h=mime-version:date:message-id:subject:references:in-reply-to:to:from

:from:to:cc:subject:date:message-id:reply-to;

bh=7lG1WZiIpFDZIjpRldeQN6V930sPXrraP2jkur0nuiA=;

b=q6mIsXNsk5pxNJrUBrRBNq496Etw2xNrwpHtdtA6pk+I66VkThZrtsF9SjRIPLSJqi

QNQS5e/sPWMnk+hNJ2AsMpwu6FMNXjogfdHRs7FOzJxmL0FZ2DwN02P3zZApHDbIGZoT

Mw4J0WholE8QRCSRvu+6X0G+yo4EcSp4746WXTFh14ZsDgUQMa7XhHA+qtDcRIU+CUqc

YbfL0egFOWmPtmW4y+jLHvul0lB6EESyskbJxvX5ASssr2bxea2XpfR2zUbHgE0Txf57

dl3R0yXIOVsofBXcdDfF0t1f1FsiZo3rnVDoAk0YhC1PFJ/jpSHRBF79O/3wORD+Ou2n

tpDQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765585251; x=1766190051;

h=mime-version:date:message-id:subject:references:in-reply-to:to:from

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=7lG1WZiIpFDZIjpRldeQN6V930sPXrraP2jkur0nuiA=;

b=cj9X6kTeuJRURdn5mAnADWVRt+ZKlspVcoIcjOFhxfOTQoN7AcaD14CJSv9JyT5owE

uRqQIYQS3IJZx+zHKoc4V5Ydn30yI+YY5RCAog74UFnLu3BPjK8+fNR+aoJirynIgd68

H+BIhpF+tUqKETfdJfoGnMdCK/p/Mvk/ogmo95G/PLMjV4O3/KgAwzJsHtNA1AfWHr85

wsgKCe1k7cmyQtLqg/XprZuCA4vZ6nsw9Z10agCWO2QTGCBh6Dsp8GoE5eYirJkKt+zX

l80Ibi8Gnw3lXQr+mAL6T2IwRHmBrLEYyZqY2pxz0mJx9MzUlk31wgSrCiCwIfoXWbNk

9nGw==

X-Gm-Message-State: AOJu0YxOqVCp7dYf/wNTOIO+RIwoNDNugb/Uii9jYbP4UiCZr0nnEM27

cViVY0FBEtcpvj/5zTGkb5N7fV5h6hC158nyVx6Qf6POuDjbwsFqnFjPzoi9h6LmaUvbh6GkiFV

pAyWO9g==

X-Gm-Gg: AY/fxX6fQEjU+f8DbaPmJxYp+XzJEcZ01FtY5/2/jV2ogVGwVjeM7s7PO0BNeD++TJa

xbYAqzmmfHY6o/4ql13uZtRlLEcajc7ceo5ZzSQi/xPPcO9N19gbs8gyS/h94DgFGaHettdVpiI

JnuEbfBHBiUj4+IcwtRpc7H4AxllHABISy4zhPqDAA3eI+pfpa8RFNAPUMjyn5fC1BM+NnSoiTX

bN+qkL4Op9gjDD3lEWQYESOIFJ2XEpokp3OqwPeo/mydJDQ87BMvL1aPEOHqI8x/p0zuQkyCqqB

lstwE6YUtOV1a/m8angz0sQk0Mg0KV6/yoW9gFnuFdvH8d1Gn2XaSv4Uc/m2zmsbZF+yGi3+GdM

oi6JOn0qDFG1hL1TywQxuMgVTzzxgumvmFUhj/C1NHKqaRWaefh91WeoRTQwReRDCVLNo1qPznx

6+EGiq2hLbmjYFHSG3ONLRK6BwC8mzWoz8Cow9MHy/QFRWwPOqbQzWswop4/OkPP8jbxIA43g7N

RQH30MJQ5AEGMnOM9yjx9y+U4mO/mi7wCaNq/LbdXgQVA==

X-Google-Smtp-Source: AGHT+IE9G5GR1bX60b4YunGHY7Q4i6lMtcN6zedvCwN2ueeHykkvnwoBNtok6d1g3MPx8LcS1NGWRA==

X-Received: by 2002:a05:622a:1e97:b0:4ed:b2da:966f with SMTP id d75a77b69052e-4f1d04df7b7mr42435411cf.31.1765579359830;

Fri, 12 Dec 2025 14:42:39 -0800 (PST)

Received: from ip-172-31-37-172.ec2.internal (ec2-13-217-145-172.compute-1.amazonaws.com. [13.217.145.172])

by smtp.gmail.com with ESMTPSA id d75a77b69052e-4f1bd6b50afsm49132931cf.21.2025.12.12.14.42.39

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 12 Dec 2025 14:42:39 -0800 (PST)

From: =?UTF-8?Q?Natalia_J=C3=B3zefara?=

To: sales@nk.ca

In-Reply-To: <39327c5a-da83-sl92-40aa-a8f1-fbd3b81d6889@groupacclaim.co>

References: <39327c5a-da83-sl92-40aa-a8f1-fbd3b81d6889@groupacclaim.co>

Subject: RE: Hey

Message-ID: <66739ec3-2a1e-sl19-45af-9a7d-7c52a63f1e02@groupacclaim.co>

Date: Fri, 12 Dec 2025 22:42:39 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-b4ad167cb857e624-Part_1"



----_NmP-b4ad167cb857e624-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hi



Resurfacing this, tell me if now=E2=80=99s not a good time.





Cheers,=C2=A0

Natalia J=C3=B3zefara



On Tue, Dec 9, 2025 at 06:43 PM UTC =

Natalia J=C3=B3zefara wrote:



> I=E2=80=99ve seen you guys at Netknow do impressive work in web =

development.

>=20

>=20

> We=E2=80=99re a Polish agency and we often assist =

companies like yours with developing websites in Webflow and WordPress when=

they need extra hands.

>=20

>=20

> Would you like to take a look at a few =

websites we recently created for another agency in Canada?

>=20

>=20

> Be Well,=C2=A0

> Natalia J=C3=B3zefara =C2=A0

> The Acclaim Agency

> acclaim.agency

----_NmP-b4ad167cb857e624-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable














content=3D"text/html; charset=3Dutf-8">




initial-scale=3D1">



=20



=

Hi

Resurfacing this, tell me if now=E2=80=99s not a good time.=

Cheers, 
Natalia J=C3=B3zefara

<=

div class=3D"gmail_quote">

On Tue, Dec 9, 2025 at 06:43 PM =

UTC Natalia J=C3=B3zefara <
co">natalia.jozefara@groupacclaim.co> wrote:

border-left:1px solid rgb(204,204,204); padding-left:1ex">

I=E2=80=99ve=

seen you guys at Netknow do impressive work in web development.=

We=E2=80=99re a Polish agency and we often assist =

companies like yours with developing websites in Webflow and WordPress when=

they need extra hands.

Would you like to take a look at =

a few websites we recently created for another agency in Canada?=

Be Well, 

Natalia J=C3=B3zefara =

 

The Acclaim Agency

agency" >acclaim.agency

------=_NextPart_000_2D32B_01DC6BC4.7D2326D0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

------=_NextPart_000_2D32B_01DC6BC4.7D2326D0--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Dec 2025 13:14:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vU9Vu-00000000GY7-0kBG

for dave@doctor.nl2k.ab.ca;

Fri, 12 Dec 2025 13:13:18 -0700

Resent-From: The Doctor

Resent-Date: Fri, 12 Dec 2025 13:13:18 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f195.google.com ([209.85.214.195]:50608)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vU82E-00000000N3H-0q0P

for sales@nk.ca;

Fri, 12 Dec 2025 11:38:42 -0700

Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-29555b384acso15777245ad.1

for ; Fri, 12 Dec 2025 10:37:49 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=hiremeforphp.com; s=google; t=1765564663; x=1766169463; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=u052chVTZhGHu7pOWHdSbD1EFeu+d6W2juCoqbglhDQ=;

b=hGvQGnngfczkDUFpFF1z/OpJGF7ATBdBthGY0b4LHHGfId7RsOLlMjbHboFTpB8r2J

2emjONfR1/Isy28eFUuZxqy0a+sMbjWkTiWn1GDk2FkZyflSDoI+tIwf78PpBUCsMOZ4

QBmBtOlpKSvI0c5lTD0KOiZb4WU1RPqwCNaYA=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765564663; x=1766169463;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=u052chVTZhGHu7pOWHdSbD1EFeu+d6W2juCoqbglhDQ=;

b=BtaD6H8taxMnjmOmhgFblGEwcfo+KHjvz+npJKalAN5EEZYP/5f+4I/XU5wXdDX5rp

iEZTSXTwIBMR1xAhr/k6AiOzXDSEcaKnCFRnz/whZkKAjEztV71vxTONc/z5iJg8Ncb/

IhyVKibO57RwI+Lc7vuK0gPi/BCb0bZNB+GmWfQrvG3zSG+9HUi3Tdp6f8Z8E2Wc8l6e

g5UQP+XhNBq7whGVZvbZLifK0t9kLQEjCD/0WpJk9Qbkh8wxmYer8H8oYWhZ25GJBjou

9i1cYzr7vhbuEdul9b+NAqyYU2frFBwu9u5FQfAc+tWKs3wncioP98A3XCR3wn+pM6cV

39xw==

X-Gm-Message-State: AOJu0Yxy+qEP99oO6IU4GFCK1GZZ19IZL95HTUS/EsBWK02f+VUZB09o

ZVXQc/UgPDOwrKewafHpr504cDrssfbMcmjwSneq7ZlzniZmfOgn9ufjNuJfIzbwM5Yy1ZeGTS2

typzHwvA=

X-Gm-Gg: AY/fxX693YuQ+u7bzLCSKlNU//8vI5IUXxjke4vpJl+xQqZrTlIF8ktDJ+ICnGLbP0A

r0EN1c5PByyyxRpoU/L1/rW/21OluWYTGtr4y4cjotW4Z7unke/lokGsYU4m6Zh9qIdbVZm9RCm

DDfBIz0ouQ1/2kLUsUnMnfsTa+tLH11x1OEvLi+ifgsGMeAgEGPHRZyjLaX0b44Szr3B04y17JL

mqxr/sweJT4C2WIff0ST/WJNbDP6lZiBSlpmE0HAbxwDzEuohmc8lYVem69vMkJHd6z0SA7x69f

LEWds/JAzRcJvgfieeE2QUGgWqZGic/oVs6/PLMzpEdFq/s/LiDrj3QQupjFVeG50f+ZFizmhqW

o9B+HBPfurShRvtp8Qod+SvOh4V26cI54GkDVLHKDKArsu1fqAbijHUx/VEJ2zDiB+twNE9i+og

6f+wIE+sBIM01uVUav9RgiwRF9VNhYMGbYvIU0Fg==

X-Google-Smtp-Source: AGHT+IHRW9NK/n77qoQQZMRh6W+05iLQWz9EbGEKePP9lKGYo2ChK097F7alsOFkQ8Fcabk7I4rAVg==

X-Received: by 2002:a17:903:11c4:b0:295:557e:746a with SMTP id d9443c01a7336-29f23e01f0emr28686905ad.13.1765564662907;

Fri, 12 Dec 2025 10:37:42 -0800 (PST)

Received: from ArvindKumar ([2405:201:404f:103b:509f:bca3:4ef5:81fc])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-29f301bf609sm17731505ad.23.2025.12.12.10.37.41

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 12 Dec 2025 10:37:42 -0800 (PST)

From: "Ronak"

To:

Subject: 1st page on google

Date: Fri, 12 Dec 2025 23:55:15 +0530

Message-ID: <2d32a01dc6b96$636aead0$2a40c070$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_2D32B_01DC6BC4.7D2326D0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdxrFoFcaDXu3TPiT96QY/azI7HW3w==

Content-Language: en-us

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Hope you're doing well! I came across your website www.nk.ca

and noticed you have a great business. Our team specializes in getting businesses

like yours to the top of Google. We handle all the SEO, guaranteeing results

80-9 [...]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[will-spam-for-food.eu.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[will-spam-for-food.eu.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[will-spam-for-food.eu.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[will-spam-for-food.eu.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[will-spam-for-food.eu.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[will-spam-for-food.eu.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[will-spam-for-food.eu.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[dnsbl.ahbl.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[dnsbl.ahbl.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[dnsbl.ahbl.org]

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.195 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[2405:201:404f:103b:509f:bca3:4ef5:81fc listed in]

[sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.195 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} 1st page on google



This is a multi-part message in MIME format.



------=_NextPart_000_2D32B_01DC6BC4.7D2326D0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello



Hope you're doing well!



I came across your website www.nk.ca and noticed you have a great business.

Our team specializes in getting businesses like yours to the top of Google.

We handle all the SEO, guaranteeing results 80-90 % keywords first page of

Google may be 100% within 4 - 6 months its totally depends upon keywords

competition, with improvements starting from the first month.



Here are our most popular packages (all include complimentary social media

management):



. $149/month for 10 keywords



. $250/month for 20 keywords



. $399/month for 50 keywords



. $1499/month for up to 200 keywords



Let's discuss how we can help. Just reply to this email, Share your WhatsApp

or connect with us on WhatsApp at +91 8076676731.



Regards



Ronak



P.S.: If you'd prefer not to receive further emails from me, simply reply

with "NO" in the subject line.