X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Mar 2026 07:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyVs4-000000000ST-1Sv4

for dave@doctor.nl2k.ab.ca;

Fri, 06 Mar 2026 07:09:40 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Mar 2026 07:09:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northcentralusazon11020124.outbound.protection.outlook.com ([52.101.193.124]:21201 helo=CH1PR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyU2n-00000000HUC-3zLA

for doctor@doctor.nl2k.ab.ca;

Fri, 06 Mar 2026 05:12:47 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=cRlF6GclFU6GMlHgTphuR905zM0PljQvqMfBoS/Wn1Fre7oMgV7ZSnrWz5pT6GHlNkrJ4NWjxU/DefagMHqbb9Jx/f/BKSj/qNiKEllW4LT7wSB4KKU+byM+67mVgk05ar8ugr29gf0dLnFB1Dx5/rVCidqPAB8Y3kXHifKvhB/bKgXEaOJM7ufsC99MJjZgCp1xeLxOPPaVvRwOtlL9aA4RcrJbz4euoJ60032QCumJCQ1MsArfmQC32qEDlz9/MhuQXaZgkWGMx8jAuLtSaCjNWEKUDu5XVSROnhcJQtmc2ytNuzYvl0+04vnjS87t1aaa/IhBqKEAU2ENwRfSlA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=aFFIEbYhCAFv1hlcmKaIaeBepIwSuzYvcV3skEXyCMY=;

b=Q2JpA7d+1WnvjJkNv12RyjuJIih4O860Bc4rIgSJj6E0SpNF55YV0cHi+53gMhj5pwjjSQteCNolFY6GkqdyJT3ZCOQ61Y/sucrF5JkhHU16lIHD0i8DEbF8R45UvjF9q5swFTJdP20hSeoN9CQknauua+avJjhVikdkCXo2kia5Urxjgj5n++g2c8dRQE19PkTZ7X9nO1y1eDhhwP+XZpoY9mJvAVnVNy1tlOiOtU0lSiqJWHQnoOO1n2JHX+nOCZQndHaXbXVSvEBqF7k1vOUlqhPzle33ARo7m3zxeyLiPdjlMLs+dGTbZj3IvvrFD9HnPEYrzDVONqmOl3jMaw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.147.250.56) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=memorialhospitalof7368.onmicrosoft.com; dmarc=none action=none

header.from=memorialhospitalof7368.onmicrosoft.com; dkim=none (message not

signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=memorialhospitalof7368.onmicrosoft.com;

s=selector1-memorialhospitalof7368-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=aFFIEbYhCAFv1hlcmKaIaeBepIwSuzYvcV3skEXyCMY=;

b=hbUTBGWFGyz+cMs9EXJrTSAv/cUrYDs0nwJPQWB4ubdLuiL9NBpLFm+pbo9vDc07Ss8ptoEbmyYVt28m5wwVrmo10W8nzi8bQrarkFAMSiYtiFhwHGXbQf6p8oPmtW1LWvTfuztm0M8PpX0PCIybzzzhxEaQDP7b6bPOJ679JWykZQ80mjh7i1/TZ+71zRgmR7Ya5MlVh5gxwigcdJUBblomQSMXdsrvC9MHP3nfP5GxjFmuKc2wSgklEthQfUIMHEYJq9pS2QHe2KW/TeC4awqQjz1pWZOMJKna95Jyl5RIlFBhREfWHxw4jdQhOcjqiIiEhXZz5xPx1ZtYm/OI5A==

Received: from SJ0PR03CA0039.namprd03.prod.outlook.com (2603:10b6:a03:33e::14)

by SA6PR17MB7398.namprd17.prod.outlook.com (2603:10b6:806:418::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9678.19; Fri, 6 Mar

2026 12:11:42 +0000

Received: from SJ5PEPF000001CA.namprd05.prod.outlook.com

(2603:10b6:a03:33e:cafe::8a) by SJ0PR03CA0039.outlook.office365.com

(2603:10b6:a03:33e::14) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9678.18 via Frontend Transport; Fri,

6 Mar 2026 12:11:41 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.147.250.56)

smtp.mailfrom=memorialhospitalof7368.onmicrosoft.com; dkim=none (message not

signed) header.d=none;dmarc=none action=none

header.from=memorialhospitalof7368.onmicrosoft.com;

Received-SPF: Fail (protection.outlook.com: domain of

memorialhospitalof7368.onmicrosoft.com does not designate 45.147.250.56 as

permitted sender) receiver=protection.outlook.com; client-ip=45.147.250.56;

helo=memorialhospitalof7368.onmicrosoft.com;

Received: from memorialhospitalof7368.onmicrosoft.com (45.147.250.56) by

SJ5PEPF000001CA.mail.protection.outlook.com (10.167.242.39) with Microsoft

SMTP Server id 15.20.9678.18 via Frontend Transport; Fri, 6 Mar 2026 12:11:41

+0000

MIME-Version: 1.0

From: CVS ExtraCare Rewards

Subject: Elite Access: Final call for your CVS Elite status.

Date: Fri, 06 Mar 2026 13:06:56 +0100

To: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative;

boundary="_be37d0b0-91e2-4345-9602-b4de58cce272_"

Message-ID:

<1d6e1dd1-8cb3-4463-9299-680264685fe5@SJ5PEPF000001CA.namprd05.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ5PEPF000001CA:EE_|SA6PR17MB7398:EE_

X-MS-Office365-Filtering-Correlation-Id: 1a819afc-ff06-4503-7ce8-08de7b7986d0

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|34070700014|82310400026|61400799027|376014|4022899009|36860700016|3122999024|8096899003|85622059|54012099003;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:45.147.250.56;CTRY:IT;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:memorialhospitalof7368.onmicrosoft.com;PTR:quantumarc.shop;CAT:NONE;SFS:(13230040)(34070700014)(82310400026)(61400799027)(376014)(4022899009)(36860700016)(3122999024)(8096899003)(85622059)(54012099003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

NTCLouZuFs3miqtVnwDL0Wvkva65nbaedV2xc7lJwUhLoIlAmHsmk6AOYYaI9bb6Khv7D0XvMSqV89tYjgvhA8T6xhFDQtRwLw3yZDziOPvHUTYrpZe+bBgW6XHWFydTbcQPEcY8dRqDwMpYs+NHaj8lcGPaWdcTWrkAufnsY9NWPBapiy2hbQcP4TPPZ8aC31g+TOw7+5Z7A1We7/0tBAZJMq3ucmeNxNjYs1dxAN7sS060mEDg2892xaOGkDMUSZW0P8q3WjwNBjaZzrvtDQ06lsfGoA/UD71mOAXTbwx7aAqRUAl7vCqR7roiKLZg+pagB77nGnEI6Y5Ijnga6D1Yg5w5riKx0T9DYpoRz9UBy+A/iaem2dUYgx/weWaXf8I9sN2XAgxchwQOEqRw15eoU8h/HuATIeOXZSlxLc2ke6vNyXW3MixN982Ql+AM

X-OriginatorOrg: memorialhospitalof7368.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Mar 2026 12:11:41.2580

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 1a819afc-ff06-4503-7ce8-08de7b7986d0

X-MS-Exchange-CrossTenant-Id: c161c10a-4857-4a59-9fdd-75fdeb03161a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c161c10a-4857-4a59-9fdd-75fdeb03161a;Ip=[45.147.250.56];Helo=[memorialhospitalof7368.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

SJ5PEPF000001CA.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA6PR17MB7398

X-Spam_score: 21.6

X-Spam_score_int: 216

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CVS – Free Medicare Kit CVS Pharmacy

Content analysis details: (21.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.147.250.56 listed in will-spam-for-food.eu.org]

[45.147.250.56 listed in will-spam-for-food.eu.org]

[45.147.250.56 listed in will-spam-for-food.eu.org]

[45.147.250.56 listed in will-spam-for-food.eu.org]

[45.147.250.56 listed in will-spam-for-food.eu.org]

[45.147.250.56 listed in will-spam-for-food.eu.org]

[45.147.250.56 listed in will-spam-for-food.eu.org]

[45.147.250.56 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.101.193.124 listed in will-spam-for-food.eu.org]

[52.101.193.124 listed in will-spam-for-food.eu.org]

[52.101.193.124 listed in will-spam-for-food.eu.org]

[52.101.193.124 listed in will-spam-for-food.eu.org]

[52.101.193.124 listed in will-spam-for-food.eu.org]

[52.101.193.124 listed in will-spam-for-food.eu.org]

[52.101.193.124 listed in will-spam-for-food.eu.org]

[52.101.193.124 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.101.193.124 listed in dnsbl.ahbl.org]

[52.101.193.124 listed in dnsbl.ahbl.org]

[52.101.193.124 listed in dnsbl.ahbl.org]

[52.101.193.124 listed in dnsbl.ahbl.org]

[45.147.250.56 listed in dnsbl.ahbl.org]

[45.147.250.56 listed in dnsbl.ahbl.org]

[45.147.250.56 listed in dnsbl.ahbl.org]

[45.147.250.56 listed in dnsbl.ahbl.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:cafe:0:0:8a listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:33e:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.101.193.124 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.101.193.124 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.101.193.124 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.101.193.124 listed in dnsbl.ahbl.org]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.101.193.124 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.101.193.124 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.101.193.124 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.101.193.124 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[adminmsntjdeup2mw3iqlsexvkyjq2uq3zt(at)memorialhospitalof7368.onmicrosoft.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.3 OFFER_2 BODY: Offers you Something (2)

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.101.193.124 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.101.193.124 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.2 UPPERCASE_75_100 message body is 75-100% uppercase

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

3.0 BIGNUM_EMAILS Lots of email addresses/leads

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Elite Access: Final call for your CVS Elite status.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Mar 2026 07:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyVrT-00000000MlQ-2rb7

for dave@doctor.nl2k.ab.ca;

Fri, 06 Mar 2026 07:09:03 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Mar 2026 07:09:03 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp.cluodme.com ([104.214.224.93]:58261)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyS4B-000000007ki-3zuy

for sales@nk.ca;

Fri, 06 Mar 2026 03:06:23 -0700

dkim-signature: v=1; a=rsa-sha256; d=cluodme.com; s=dkim1;

c=relaxed/relaxed; q=dns/txt; h=From:Reply-To:Subject:Date:Message-ID:To:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=h3PUnrSxdiYnU4lIX83eF0JJHIlo1OTV10RjMFz8ob8=;

b=aBghQlvX9qEFKoLFjT0nAFcDptlo9NX+n/A83R8mn9ZFmdhU96cnZ2BiNRnJN+UWiHMUIfPSggA+cdUTsu3G1ljuVGagOBHMODWN6fVDmFSsa67ESpChASShjskZGzjPy/Wi2uPHh5Q5zb/Hlq/NY1i5P3UKi8qPN6z5x+m5Gyn79XeQnpJI7erpanQRRIU1ILfo7s9KprvDFDF/KYUjFOH9FaTxXmDpwFJUPCXG9Ub6kZtT0ZeQp3bPo2

4dx/G0JygMzNy9qo9V/kYcUraMzk+NRnFnWR9FnFWa7SiwrMEpWGoMouK2OO3hjomfqrWxTyBAcJTSvd+5KkP6M4Pltw==

Received: from VM-IIS (Unknown [104.45.10.112])

by smtp.cluodme.com with ESMTPSA

(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256)

; Fri, 6 Mar 2026 11:04:54 +0100

Message-ID: <09D92FF3-28C5-4BD5-B1F1-32E39E7D2A71@smtp.cluodme.com>

MIME-Version: 1.0

From: "Vip-Followers"

To: sales@nk.ca

Reply-To: "Vip-Followers"

Date: 6 Mar 2026 11:04:54 +0100

Subject: Fwd: email from the founder

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Vip-Followers Message from the Founder.



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.45.10.112 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

[104.214.224.93 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[104.214.224.93 listed in dnsbl.ahbl.org]

[104.214.224.93 listed in dnsbl.ahbl.org]

[104.214.224.93 listed in dnsbl.ahbl.org]

[104.214.224.93 listed in dnsbl.ahbl.org]

[104.45.10.112 listed in dnsbl.ahbl.org]

[104.45.10.112 listed in dnsbl.ahbl.org]

[104.45.10.112 listed in dnsbl.ahbl.org]

[104.45.10.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[104.214.224.93 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[104.214.224.93 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[104.214.224.93 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[104.214.224.93 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[104.214.224.93 listed in wl.mailspike.net]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 MR_STRANGE_QUESTION URI: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Fwd: email from the founder



HI,

I’m the founder of VIP-Followers, and I want to personally thank you for your interest in our services.



At VIP-Followers, we help creators, brands, and influencers build Instagram profiles that inspire trust and drive real results. I’ve worked for nearly 10 years alongside influencers, public figures, and major brands to grow their audience and increase their sales.



Growing on Instagram today can be challenging. But with the right strategy and investment, your profile can attract genuine followers and convert visitors into customers.



Privacy is one of our top priorities — especially for our most valued clients.



Would you like a free tip on the best strategy for your profile? Just reply to this email or visit our website to start growing today!



PS. Don't forget about your welcome gift. Use MYFIRSTP for 20% OFF your first purchase!

Use my welcome gift <<

Copyright © 2014-2023 Vip-Followers, All rights reserved.



Want to change how you receive these emails?

You can unsubscribe from this list.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Mar 2026 07:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyVqG-00000000HMG-2vdG

for dave@doctor.nl2k.ab.ca;

Fri, 06 Mar 2026 07:07:48 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Mar 2026 07:07:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [192.29.88.123] (port=44865 helo=aib29hh123.yul1.oracleemaildelivery.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyQWz-0000000028Y-1y7q

for root@nk.ca;

Fri, 06 Mar 2026 01:28:01 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default;

d=limpharmacy.com;

h=Date:To:From:Subject:Message-Id:MIME-Version:Sender:List-Unsubscribe:List-Unsubscribe-Post;

bh=GTNuWUBDpqZ4n7ZF0Vs7uP3cA96l8HM9Vz2YOoXZXuc=;

b=N+OAqB3xgoaFatdlWSpZUJAux0Io/iQFpj/UCB5icBGb7h1jbCHM5nnxWXrgLZ6XOWsmsTZvdp8q

xhbXC3S+MIT6eu+nPOW72DSaeaV6ydREf5aoEXN75g2ReBFe7qqdi0Keoto7j93VBD2ucVovrYPe

u73H6+yCN/SAGXh9FLFNtLVYUkYLx/F+7lf80GmGx6qzqnt0IQmrkwsc03NEQARPta3zoKOt2P5z

yP6e1bf97r00SiR4VTR8nxhv7DaSWQ1sLXI56pqERZM3U8/PhiK3w8Ve3BthfV8nxNn7jb8Hox3/

LJTIfNgj2Ktb7z7RQUTPad2p/LtitqumVVx8OA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=prod-yul-20200415;

d=yul1.rp.oracleemaildelivery.com;

h=Date:To:From:Subject:Message-Id:MIME-Version:Sender:List-Unsubscribe:List-Unsubscribe-Post;

bh=GTNuWUBDpqZ4n7ZF0Vs7uP3cA96l8HM9Vz2YOoXZXuc=;

b=E3qYh/5D/pldotuRFwtvDNqEFh9h6OwqFV6Nl9oRLNjfDoSRsmgQhQRgF9FnmgT7qZDY6RkchuAz

U6Yq+EY58WmJ1zXstfCyBTHpzATF/yDVBEbqQNabz0xMO7r93V14nywZvo1DdajLsZXoB7UKXxZu

bhgOu+7Bp2uJ/lyqaz3X/AY0LFdEBrHAsDXmFvat6pJvyT/VkxNkPfTatrgdoW1PgBzE0ECgMz9Y

r5oBtqEKBPkFAFOhZi1uSFY4obXK3br0f7H3FBoZUffarr5jEfdooxL8ccFWjQ2a0yeMU8H2V94h

JxDy0slG8W7RmILL2Nj+YOcbJlLjxHr+aktLKA==

Received: by omta-ad1-fd1-402-ca-montreal-1.omtaad1.vcndpyul.oraclevcn.com

(Oracle Communications Messaging Server 8.1.0.1.20260212 64bit (built Feb 12

2026))

with ESMTPS id <0TBG00I1TY3RJV70@omta-ad1-fd1-402-ca-montreal-1.omtaad1.vcndpyul.oraclevcn.com>

for root@nk.ca; Fri, 06 Mar 2026 08:26:15 +0000 (GMT)

List-Unsubscribe:



List-Unsubscribe-Post: List-Unsubscribe=One-Click

MIME-version: 1.0

Date: Fri, 06 Mar 2026 08:26:15 +0000

X-Priority: 3 (Normal)

From: "MyTeIstraNotification_ebill@billpaymnt.net"

To: root@nk.ca

Reply-to: "MyTeIstraNotification_ebill@billpaymnt.net"

Content-transfer-encoding: quoted-printable

Content-type: text/html

Subject: Take Action Today :last payment couldnt process

Message-id:

Reporting-Meta:

AAH39vuEG6GshPVqLjFd25XpH1aSGtCMGtmxgP6d350eqoxtQlP/Uc1NZGzfOXI1

GtQqM6F0JifRPPMzSLZPe+4+Kdtw5xkSs9CXgsc2vLFHtQ4mKDsbI2b9SSfYjcu+

mLL0jfoWCQJ5hee4E3i1zHDkO0YnKbsQv2OSIUZmxwq6usPryHJAnP7LSdYm/Dts

ah/Q8eNvXChPujA24oC6fyzHor6Kz5bmPekqkpXBeiKu/4DjepBXpjzc8MLicsAQ

qYfKjJ/PrnbFe1rTavxV7SMw0nSNJr2dUjU5vr815ez+NAfCSm4lRh7O+ut+1Jvu

5zZnsRAwLksJop5CpSwD/ow/kxmRxBH6QNAwcQzFM7q56KhgBYurH673wX0SKfPf

hK9De9c3THDbXnOA8b+yfbm+4vtqd+t8aqhPqRGkvhDTNkao0w==

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Action Required for Your Account We've detected that there

are some important actions pending for your account.



Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.29.88.123 listed in will-spam-for-food.eu.org]

[192.29.88.123 listed in will-spam-for-food.eu.org]

[192.29.88.123 listed in will-spam-for-food.eu.org]

[192.29.88.123 listed in will-spam-for-food.eu.org]

[192.29.88.123 listed in will-spam-for-food.eu.org]

[192.29.88.123 listed in will-spam-for-food.eu.org]

[192.29.88.123 listed in will-spam-for-food.eu.org]

[192.29.88.123 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.29.88.123 listed in dnsbl.ahbl.org]

[192.29.88.123 listed in dnsbl.ahbl.org]

[192.29.88.123 listed in dnsbl.ahbl.org]

[192.29.88.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.29.88.123 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.29.88.123 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.29.88.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.29.88.123 listed in dnsbl.ahbl.org]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.0 T_FROM_MULTI_SHORT_IMG Multiple From addresses + short message with

image

1.0 XPRIO Has X-Priority header

0.0 T_FROM_MULTI_NORDNS Multiple From addresses + no rDNS

Subject: {SPAM?} Take Action Today :last payment couldnt process




et=3Dutf-8">

.cta-button {

display: inline-block;

background-color: #004990;

color: #ffffff !important;

text-decoration: none;

padding: 12px 24px;

border-radius: 4px;

font-size: 14px;

font-weight: bold;

}

.footer {

font-size: 12px;

color: #777777;

margin-top: 32px;

border-top: 1px solid #dddddd;

padding-top: 16px;

text-align: center;

}






padding: 0;

background-color: #f4f6f8;

font-family: Arial, Helvetica, sans-serif;

color: #333333">

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Mar 2026 07:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyVpt-00000000Gc9-0AlT

for dave@doctor.nl2k.ab.ca;

Fri, 06 Mar 2026 07:07:25 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Mar 2026 07:07:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [208.86.66.187] (port=4316 helo=boots.co.uk)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyQLK-000000001ce-0tgM

for DOCTOR@NL2K.AB.CA;

Fri, 06 Mar 2026 01:15:38 -0700

From: Boots

To: DOCTOR@NL2K.AB.CA

Subject: 3/6/2026 2:14:40 a.m. =?UTF-8?B?U2hhcmUgWW91ciBGZWVkYmFjayAmIFJlY2VpdmUgYSBGcmVlIEdpZnQgZnJvbSBCb290cyAoQGJvb3RzVUspWW91ciBvcGluaW9uIG1hdHRlcnPigJRjbGFpbSB5b3VyIHRoYW5rLXlvdSBnaWZ0ISB8IEN1c3RvbWVyIHNhdGlzZmFjdGlvbiBzdXJ2ZXkgIEUtbWFpbDo=?=DOCTOR@NL2K.AB.CA NO:2714436-85968

Date: 6 Mar 2026 02:14:40 -0600

Message-ID: <20260306021440.F2801AC89AF0B2B2@boots.co.uk>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Boots.com Survey Complete our short survey and receive a

free gift



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[208.86.66.187 listed in dnsbl.ahbl.org]

[208.86.66.187 listed in dnsbl.ahbl.org]

[208.86.66.187 listed in dnsbl.ahbl.org]

[208.86.66.187 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[208.86.66.187 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[208.86.66.187 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[208.86.66.187 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[208.86.66.187 listed in dnsbl.ahbl.org]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[208.86.66.187 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[208.86.66.187 listed in sa-accredit.habeas.com]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[208.86.66.187 listed in psbl.surriel.com]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[208.86.66.187 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.86.66.187 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[208.86.66.187 listed in will-spam-for-food.eu.org]

[208.86.66.187 listed in will-spam-for-food.eu.org]

[208.86.66.187 listed in will-spam-for-food.eu.org]

[208.86.66.187 listed in will-spam-for-food.eu.org]

[208.86.66.187 listed in will-spam-for-food.eu.org]

[208.86.66.187 listed in will-spam-for-food.eu.org]

[208.86.66.187 listed in will-spam-for-food.eu.org]

[208.86.66.187 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

1.5 DEAR_EMAIL BODY: Message contains Dear email address

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

Subject: {SPAM?} 3/6/2026 2:14:40 a.m. =?UTF-8?B?U2hhcmUgWW91ciBGZWVkYmFjayAmIFJlY2VpdmUgYSBGcmVlIEdpZnQgZnJvbSBCb290cyAoQGJvb3RzVUspWW91ciBvcGluaW9uIG1hdHRlcnPigJRjbGFpbSB5b3VyIHRoYW5rLXlvdSBnaWZ0ISB8IEN1c3RvbWVyIHNhdGlzZmFjdGlvbiBzdXJ2ZXkgIEUtbWFpbDo=?=DOCTOR@NL2K.AB.CA NO:2714436-85968














1.0">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi,

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Are you planning to upgrade, fix, or redesign your website?  

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

I offer custom web design and development services that are affordable and =

effective.

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

1.  WordPress, Joomla, Magento, Shopify, Wix

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

2.  UX/UI, PHP, ERP & CRM Solutions

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

3.  Prestashop, Custom HTML, and Full E-commerce Sites

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Let me know if you'd like to see my portfolio and pricing.

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Kind Regards,

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

David Smith

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Web designer & developer

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Located in London, UK

--_000_TYZPR01MB4578B609F213025771848867A77AATYZPR01MB4578apcp_--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Mar 2026 22:30:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyNkj-00000000JWU-1oWK

for dave@doctor.nl2k.ab.ca;

Thu, 05 Mar 2026 22:29:33 -0700

Resent-From: The Doctor

Resent-Date: Thu, 5 Mar 2026 22:29:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013083.outbound.protection.outlook.com ([52.103.43.83]:21380 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyNDj-00000000H6i-26yE

for root@nk.ca;

Thu, 05 Mar 2026 21:55:38 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=G1FLYq1a618JAR/hrChjzlE/HCFIZAml5QRRY/NSB9hGhGXwvslb7bVdOXVpRbFZ3S0VF0l0GgtMkqwneKT4hI96F8NE6mgwAxn3YZA+XnT/Qsy2OKYQKM30bNhJEkxGhdA6rW0KKVjecTcKq5rVvUk6+NqRQDQCC+otKqyfHQuCK+ob8rxF2Zy3TrL+y+cX18cFPXyx5KhWeeZcVpDacXVvJT3/bJIucb1FXNj9RYdh9Llz2QENEhiRUjeF02+/czPFYUT23XT0eASyhfsJZ1IEAvjUd2gGDu6dHLqIJiUJDozdvu1jMf/Xyj1k1wH426rS1pI78bdmtFiEJE0Hkg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=y29bywXwxSfSQ/yNevyu65R147+yJJL4V/2qF3oYHWw=;

b=oLVtfHrGifQ5s6/VuDkebZfqwgm68xBAGpObmcBhL5O6UR8ZMcaCSsTqs87clSivlsri3Dh2eDH1Cr94+QXQOwKUQ0rJ+DqBqxyh+AABrMwsUWQRnLCSU8Ml7XDNfXipfVQPYCVkPbeGplqVz4DqQg6TSDJxq5XhKTb1g02cbUi3KM6X2brD/yQ4Qjnzfg8nCQGCQdkJ4jK5sgZDFghQJg6qXQjLP+R80ZmHtTS2CGDLoulswA2ggkK7NWFeBl/H7J9hz4tqX3Bp+uCQSZshetOvgeOog8nSLt3JePT65M5VC3JGWVb1HKJ8B2pFFqJPxEJUc510e/RU4BmrkFFA7g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=y29bywXwxSfSQ/yNevyu65R147+yJJL4V/2qF3oYHWw=;

b=Sb0LzK/G9LM2H/gFszA8dyg0xRZ9T+OmV1mkpGiyYe7ayXirLue9Ec80sg2LbF5ivK9JqZ0fNXFeltWcMdrjWfBgR5Mty/ZIVXz/5uINS/aSVfGK6APtCZGwEitx3x47vUmBg/V6GaMQ8QGuCbQbUvvm0yD/LQfYv3gpwYVb867P/cYPu7dYFR1Bpi4ZdErILtY2WUozQIe6R38EB66ZzIKOeT4J4LOJ7ZZG3jMU1kPfjuffaPFR15gVsSyp6Us5ni9xkrNiWVACUFKi8C0To8r/mqsXM5vfbCoTbbQhzwVk9IPUw2IPmlcT2f/fl7rQUGKnzOX8njSinNuTGR+g2g==

Received: from TYZPR01MB4578.apcprd01.prod.exchangelabs.com

(2603:1096:400:1ff::5) by SE3PR01MB8013.apcprd01.prod.exchangelabs.com

(2603:1096:101:32c::11) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9678.18; Fri, 6 Mar

2026 04:53:41 +0000

Received: from TYZPR01MB4578.apcprd01.prod.exchangelabs.com

([fe80::2560:928d:978f:330d]) by TYZPR01MB4578.apcprd01.prod.exchangelabs.com

([fe80::2560:928d:978f:330d%4]) with mapi id 15.20.9678.016; Fri, 6 Mar 2026

04:53:41 +0000

From: David Smith

Subject: Prices

Thread-Topic: Prices

Thread-Index: AQHcrSTT5nQm+1ENe0uUm5iltivQaA==

Date: Fri, 6 Mar 2026 04:53:40 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB4578:EE_|SE3PR01MB8013:EE_

x-ms-office365-filtering-correlation-id: a3118093-bb33-4bb1-92ff-08de7b3c5648

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|19110799012|15030799006|461199028|8062599012|8060799015|20031999003|15080799012|39105399006|3412199025|440099028|12091999003|102099032|56899033|35041999009|40105399003|43065399003|31055399003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?ojUKBegM7woWiY+dUKt0MurfGGpkvTNvCZbUXRfct6foV2RD2cFA+ky02k?=

=?iso-8859-1?Q?9mLpkbwCmIAtmtin9tTjCDaHawB1jmtUA7LgGu3bLmDT66tdJ3hMlQ3oNK?=

=?iso-8859-1?Q?J31DubRclB/XescI74wxZiCR3y8xzoqnt5fk96V2oT1JBe5BWCIu17C6uf?=

=?iso-8859-1?Q?UdW4O1hsf6o8fsAhbj6WWkC0exm7cNDeNis6DBATLA80IwpTGJnsgWONoG?=

=?iso-8859-1?Q?Vm/c9x28XdY6OX99OfqPW+X23Uej2hZRk77cU0s3uYb2N+OBOEJ3VF1GKw?=

=?iso-8859-1?Q?0HAYoklw8p+YJOaA/KegCtCKedcvEP/pK2McS6oZNTqu6Nb2mJb/VJNdjF?=

=?iso-8859-1?Q?UbyQj1j1DAILZIJixbvMYzM4HbUmV+nDguDX0BJ0Izqsvde+wqBLZd3Iv8?=

=?iso-8859-1?Q?Fjm0JlUq/QGhgbCbVhl/4tscCQ7ISjTXhCSIpQ58TSbkK4vAMQj9bQkDj5?=

=?iso-8859-1?Q?6Ax6vinYrck3ds95B4iGzEmHg0B6nqgBFJuqarwM7ec4h2WJmsGceNcX/Q?=

=?iso-8859-1?Q?F8GDFtvDnCX+5Lv2C4hKnInnY/jfgFaCkhAr9kAG2x+jV0PgYUG5+7RUax?=

=?iso-8859-1?Q?FW6fYwEv746cc01kZVWCa4ZRIwxfew6QpIhn6/3/wR4EDcaLAKVsPXJ65e?=

=?iso-8859-1?Q?oCndw/DgY21XrDJz1CZte6uP+4UwF56kEv8XWfVTlNiW5KZ62DCavMRhVZ?=

=?iso-8859-1?Q?OFADo+ZE1i3ftHDFIi3YHv+eSYEhC9muqcl9YDkLmdJWp2EMCBpeZ1uhNP?=

=?iso-8859-1?Q?X9Y9z14bb7yPHpDO8yyX5LAk9DeS3JTk605GtnfPdKT6vDTu3Pa1DoLsl4?=

=?iso-8859-1?Q?7d8FK9/QA4fWGWbvPl7azWs83XItOO5ILaFSxR61zdG8InOZG+cx6RYaV4?=

=?iso-8859-1?Q?ki6Keg7O4O8kKlddPV3OAaExkBw+NGPtzyOW8Bev4wgwa8pDsYPh+2l/c/?=

=?iso-8859-1?Q?gyBsztzvgO8yTGGxlT0j3HHK2+7gmEshuz76tHpYLcLjEp9k7I7nUJIGdn?=

=?iso-8859-1?Q?B6AZ9xG+gnDUbKHmw1olMfJUQosWp/frCJwCiiCmW2r7xAFhE6A2C/a1cm?=

=?iso-8859-1?Q?WUuiXMYBBqIoBBf6mSiz/dy3fqjetadL0wCig9Fkflrt8K/8F9w+39o42d?=

=?iso-8859-1?Q?MhknjPVA=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?LBZmP1YYpJGY0fOwopA6UmL+f7/pIyencfI8Tl/nBoQ72SXKmDaxxvfbwT?=

=?iso-8859-1?Q?7J4VSxNrTTbVg00vuFx3K/1hPUVsQLNnx52bpWyS2bloKZqso+xnzXM/aq?=

=?iso-8859-1?Q?AyT/wM7z/6xbYsTMWWfCJp/U8643ROcrQ5Osp4yFUFwMiIY/swNn/3JnEN?=

=?iso-8859-1?Q?Gh3gs3sQK26Z30KPMQhxPzyY/dBmWz/6rHFHd5ZJWYJWL6ab0xGT63pfod?=

=?iso-8859-1?Q?gfVbqq9AQuM0yxR3qBO3XFm91xkbrD3RICjXnPf7a9ixdwxkgubP+UvAPm?=

=?iso-8859-1?Q?Kufu5MEb+cn1D8hRDSLFqjgUoE0uqAnPvfBhcYxZRtalmUjvYqxWPdMLP7?=

=?iso-8859-1?Q?NzK4MrM5IRgHO45sR5EVPrXr1FwOvWLGbUbPirUUiBI6JtXgJWyLoIXcuB?=

=?iso-8859-1?Q?Fx0lUxiQ878vrzXRhlRGaAqYkoWsgZPD22e0hxoxbvLFbdau6nSeaw8LVp?=

=?iso-8859-1?Q?7/COPRJeqffjq1zc7cbVolCqTZyXNJqmZTZAL+4UqqsktqWjxIIYLAZWwH?=

=?iso-8859-1?Q?v1PFZQyAFktPTwkrbP49VwvUgsPA14tdcDEwWK5vuqu1ib60NIIjAzHrtU?=

=?iso-8859-1?Q?Qdn1baOJQwYtyoNdBZfij3MbBwljnEcqSuet4r4BtLBzlkvXU9sUmeytMB?=

=?iso-8859-1?Q?YsGvU01opIXrjLjEkmocizO1E/D0fFGW19iWdzlrIcosRWBOqN3lhEaqnA?=

=?iso-8859-1?Q?MzcdjEbvnYknSm80YsiCPvwkGvURowmjEfkTsv4kdhCUeDsYX/Ziww7sE/?=

=?iso-8859-1?Q?7OZvauADwjgzsrxmz8KUL/LMw35Is4UpOCz1b2GnAVN/AwD5Yg5k5umt31?=

=?iso-8859-1?Q?r9RgawTOpO57xhy78rzQXt6K/AnC0gtGgbt4gfRryD7rJ3Y4qEbe/R2Lk2?=

=?iso-8859-1?Q?762Uqt39D1s2sGhBnYVLB8v37TQ+UldWgGzE8+zbpc3Xttn4lRks/XFrtk?=

=?iso-8859-1?Q?1hq86tpk5i1EKu8MkWgebbHxPF8xrgSvY+tBgklGs4dgCpC2h9ayWhCRoK?=

=?iso-8859-1?Q?QCpT6sLbVoBLB8mx0s/UEVB6YOKAtl7VyfBgrCzDpy30AzRPn7MvIurZ7w?=

=?iso-8859-1?Q?ldGJnh0gFTMauTidbTDIhhDc/OtpDKpOc2+1bmxmGOtSEjh0Hk9BJ6OH4d?=

=?iso-8859-1?Q?DJbWsJSxrNNWiURs63H8W5ck9LcMYgFF/qCzvScRJ8lEp2uT9fFomiO9Gm?=

=?iso-8859-1?Q?6fvER1vZkVDr37Qs3vBiKIDaGVePFVJPNIq9uldXgTu0URQsfobMlGjF8n?=

=?iso-8859-1?Q?AOaRnNHeMiNUowXq3/9yhkBuDsIthFyha16K6gUF+uDDoWkZLZPoTtgl00?=

=?iso-8859-1?Q?zSwjMEeUJTJxri4hd2xoYNL42KoSOPJd4mu28mDJ9GOH6gpKHLMr3sdI5y?=

=?iso-8859-1?Q?slainejM0vxwIzAnep5tuPkWH+S371BP7qFp84vtKue+y1TiO/uRTL9rcn?=

=?iso-8859-1?Q?WHRy0t5KZanjnCt7RGyW5hammVNlq1Zs7u2RNhIivfB4cIRdLFUs87oDLI?=

=?iso-8859-1?Q?IHr3zIgP/f9Xz+SAltMpzi?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB4578B609F213025771848867A77AATYZPR01MB4578apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB4578.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: a3118093-bb33-4bb1-92ff-08de7b3c5648

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Mar 2026 04:53:40.8781

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE3PR01MB8013

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Are you planning to upgrade, fix, or redesign your website?

I offer custom web design and development services that are affordable and

effective.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 05 Mar 2026 09:28:00 -0700

Received: from mail-qk1-f193.google.com ([209.85.222.193]:55387)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyBY8-00000000ISB-3y9p

for dave@nk.ca;

Thu, 05 Mar 2026 09:27:55 -0700

Received: by mail-qk1-f193.google.com with SMTP id af79cd13be357-8cb5c9ba82bso1317082385a.2

for ; Thu, 05 Mar 2026 08:26:57 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1772728011; x=1773332811; darn=nk.ca;

h=disposition-notification-to:mime-version:date:subject:to:message-id

:reply-to:from:from:to:cc:subject:date:message-id:reply-to;

bh=g1B+2UzSB0fRSpZnBRMGUG5ChIZEBBdf0g6udkCjL9E=;

b=bJr6m2kgO2hLZ/eVEja5OwCpoU8kVY13JiKHv1IX/OdA7nHqaGsXLmRm2sC8vcsaRZ

crgXLIscYdgoNQWphjqfAwv29RJI4xeHWLR8H7thMfXAmCXgcDiGncA5YLyiP9SIisxw

BH15ZLXKKdVdsq3/ha7nrZrxK/wjODDE4pu70=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772728011; x=1773332811;

h=disposition-notification-to:mime-version:date:subject:to:message-id

:reply-to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=g1B+2UzSB0fRSpZnBRMGUG5ChIZEBBdf0g6udkCjL9E=;

b=K0gblF5y9ha80KGTSnVS8GnpcIrczLfcKFe4+O2sHcdPN+zwmqiWGQysk6gLhDg+sP

PYciGHHV/nibRAokhAG0RJmQJyuchPh31xuUqCDImNuCJvz/FSlRRFqdFLjgac4g+s1h

aL9Yi5xvTCCFZovlNla7mtQzLbPOBHU89h/rmh4chwUPsB0G/7sLVX+wWafMTIU875QC

IGJEbJzGvYTNnADAk+r8BztoUcXRoTw1zHPZLM1e6kwzC48MzzwDIvRLSRX38vG9Jb8D

RNGxR46bTlXSZXS/bGKfv9guXixADesTknUm22LVm6GYNI9bEFngS6U2lWX7Yqojo/8N

k5RA==

X-Gm-Message-State: AOJu0YwXvmoGsIKFAh8EPKrgpD7onaLAl7RekBpLVI59TZS4/tJxZYx+

ziQcScxMQhvgjWPPgwHqlqgLKyneBFBnUSbd/+L+CYgJb336ZWO33nLCROJk7N7OpT1mAIwqlup

D3UyRSco4pw==

X-Gm-Gg: ATEYQzwn/lyXOGNOdQwIDfaCTFIDyW0q+zLIvg4dSCCM8foYfutroamLJnTj7kBIFS5

AM75WYw6or7l3TSowljrkQlbMmOPI6gPJvG73AnfukoMGhTZq3N3bLlFzqN1FjpFtPb/RqeOi0i

v4OTaObYqOe+ThB4pmYbTaOvl6JmifBYt9+edCZKaM8YdeXDLBElGSriVyz78+DnghIFx+NrmhK

19xIbjSyGFAqK68/48dCNdqvHYIcAnGlxG7JzPhNZP5oewMwP+KVlauGiTihKchpUNLA56V7Bci

YUuGxcsL+ojY1v+azdBrcN3B3C9PUXpWaKrOwcf7VvgZz2KQCYiR2UswOkt2rkGs4Z+qhd42unw

iltsMqiJ/LGrlRUXlQ/SXn+6jBKZ1r1gpnFPzePMHms/+6bYziHyYp5Bk5jNw6xpedmfFlhB4z6

wEpCT+yZDYkHYo5GiT2qQ4Msq+Fz4bljwmr1As

X-Received: by 2002:a05:620a:1922:b0:8c6:ffe3:49e4 with SMTP id af79cd13be357-8cd5af7586fmr692949385a.52.1772728010388;

Thu, 05 Mar 2026 08:26:50 -0800 (PST)

Received: from yeircopad ([161.81.59.198])

by smtp.gmail.com with ESMTPSA id af79cd13be357-8cbbf717f2bsm1910723685a.35.2026.03.05.08.26.48

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Thu, 05 Mar 2026 08:26:49 -0800 (PST)

From: "grace@runtooprecision.com"

X-Google-Original-From: "grace@runtooprecision.com"

Reply-To:

Message-ID: <2F55F1DAA2820084369486A852ACABC8@yeircopad>

To:

Subject: Preferred supplier for injection molds and injection molding parts

Date: Fri, 6 Mar 2026 00:26:44 +0800

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0F71_01C10508.1AB0FAF0"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: grace@runtooprecision.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 10.6

X-Spam_score_int: 106

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear Manager, How is everything going? This is Grace

from Runtoo Precision Technology Co., Ltd., located in Shenzhen, China. It

will be a great honor if we can establish a relationship with you in the

future. Runtoo Precision found in 2013 [...]



Content analysis details: (10.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[161.81.59.198 listed in will-spam-for-food.eu.org]

[161.81.59.198 listed in will-spam-for-food.eu.org]

[161.81.59.198 listed in will-spam-for-food.eu.org]

[161.81.59.198 listed in will-spam-for-food.eu.org]

[161.81.59.198 listed in will-spam-for-food.eu.org]

[161.81.59.198 listed in will-spam-for-food.eu.org]

[161.81.59.198 listed in will-spam-for-food.eu.org]

[161.81.59.198 listed in will-spam-for-food.eu.org]

[209.85.222.193 listed in will-spam-for-food.eu.org]

[209.85.222.193 listed in will-spam-for-food.eu.org]

[209.85.222.193 listed in will-spam-for-food.eu.org]

[209.85.222.193 listed in will-spam-for-food.eu.org]

[209.85.222.193 listed in will-spam-for-food.eu.org]

[209.85.222.193 listed in will-spam-for-food.eu.org]

[209.85.222.193 listed in will-spam-for-food.eu.org]

[209.85.222.193 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.193 listed in dnsbl.ahbl.org]

[209.85.222.193 listed in dnsbl.ahbl.org]

[209.85.222.193 listed in dnsbl.ahbl.org]

[209.85.222.193 listed in dnsbl.ahbl.org]

[161.81.59.198 listed in dnsbl.ahbl.org]

[161.81.59.198 listed in dnsbl.ahbl.org]

[161.81.59.198 listed in dnsbl.ahbl.org]

[161.81.59.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.193 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.193 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.193 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.193 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.193 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} Preferred supplier for injection molds and injection molding parts



This is a multi-part message in MIME format.



Hello Dear Manager,







How is everything going?







This is Grace from Runtoo Precision Technology Co., Ltd., located in Shenzhen, China.



It will be a great honor if we can establish a relationship with you in the future. Runtoo Precision found in 2013, majors in mold design and injection service for over 10 years. Our products enjoy great popularity among European and American markets.



We can offer you the following service for you.



. Mold design and mold production.



. Injection service, assembly, printing, and packing service.



. Rapid prototyping or 3D printing service.



. Hardware parts







If you have any plastic part need to customized, could you offer us the 3D files or samples you have? Please don't hesitate to contact us.



Looking forward to your early reply which will be highly appreciated.





Best Regards,



Grace



Sales Manager





Runtoo Precision Technology Co., Ltd.



Mobile: 86-13603037469



Tel: +86-0755-23196166



Email: grace@runtooprecision.com



Web: http://www.runtooprecision.com/

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Mar 2026 09:57:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vyBzl-00000000K3j-1NPL

for dave@doctor.nl2k.ab.ca;

Thu, 05 Mar 2026 09:56:17 -0700

Resent-From: The Doctor

Resent-Date: Thu, 5 Mar 2026 09:56:17 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.75.112] (port=51145 helo=mta75-112.mmglsmd.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vy9nK-00000000E2P-1xKv

for root@nk.ca;

Thu, 05 Mar 2026 07:35:25 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1772721269; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : subject : from : date;

bh=raIBl8/cH5GC2toQWVpi5z0nl1vCpVZ2VT+aj+5nX5o=;

b=J0KSqG59Raa9mGG+QTn86lZNmcq8TA4d//YX+pJh4j4djYsSAE8Jfme8

Q2TB8xtvg7EiaszVjVfnNAHhWtnSBiYNJCHtIoBSOs1C+cYFjYPbo9lAEt

XofHgeMBwQeXSGP1jl4Of0ZNDaMwq0bFs7XKAOXCBg8wzDft6QqlpaPrs=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id paeOMgkyloXZ

for ; Thu, 05 Mar 2026 22:34:29 +0800

Content-Type: multipart/mixed; boundary="===============4047959231052551953=="

MIME-Version: 1.0

Message-Id: <20260305223429.41582-{13453:20260305222328-13453-14}-0023012@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?b?U2VhbWxlc3PCoHN0ZWVswqBwaXBlwqBpbsKgc3RvY2s7?=

From: Sophia-Threeway steel

To: "www.nk.ca"

Date: Thu, 05 Mar 2026 22:34:29 +0800

Mail-ID: 69a9921ce1382308b494bae4

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Glad to contact with u, this is

Sophia from Threeway Steel Co., Ltd. THREEWAY STEEL PIPE CO,. LTD. is one

of the leading steel pipe manufacturer and exporter from China for more than

33years. Our products have been exported to more than 40 countries, including

Middle e [...]



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.75.112 listed in will-spam-for-food.eu.org]

[160.124.75.112 listed in will-spam-for-food.eu.org]

[160.124.75.112 listed in will-spam-for-food.eu.org]

[160.124.75.112 listed in will-spam-for-food.eu.org]

[160.124.75.112 listed in will-spam-for-food.eu.org]

[160.124.75.112 listed in will-spam-for-food.eu.org]

[160.124.75.112 listed in will-spam-for-food.eu.org]

[160.124.75.112 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.75.112 listed in dnsbl.ahbl.org]

[160.124.75.112 listed in dnsbl.ahbl.org]

[160.124.75.112 listed in dnsbl.ahbl.org]

[160.124.75.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.75.112 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.75.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.75.112 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.75.112 listed in dnsbl.ahbl.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ns17.xincache.com/112.80.181.45]

[URI: ns18.xincache.com/112.80.181.111]

-0.0 SPF_PASS SPF: sender matches SPF record

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?utf-8?b?U2VhbWxlc3PCoHN0ZWVswqBwaXBlwqBpbsKgc3RvY2s7?=



Dear Purchasing Manager,



Glad to contact with u, this is Sophia from Threeway Steel Co., Ltd.



THREEWAY STEEL PIPE CO,. LTD. is one of the leading steel pipe manufacturer and exporter from China for more than 33years. Our products have been exported to more than 40 countries, including Middle east, South Asia, Africa, and South America etc......

We can meet clients demand for different standards of API, ASTM, DIN, EN, BS, JIS standard etc . And third party inspection performed, such as: BV, SGS, LOIYD, TUV, and other party alloyed by clients.



Steel Pipe, which is used widly by different industries ,such as: water delivery, structural supporter, boiler pipe, gas/oil transportation, or drilling pipe , petroleum cracking tube.... Specification as below :



Product: SMLS / ERW/ SSAW / LSAW/ STAINLESS STEEL PIPE AND FITTINGS

Grade range: Grade A, B,C / API 5L, GR.B, X42,X46,X52,X56,X60,X65,X70,X80. PSL1 , PSL2 / EN S355 / GOST 91- ASTM A672, GR.50......

Coating: anti-rust oiling, epoxy, 3LPE, FBE, coal tar epoxy, and international well-known brand coating.



Looking forward to hear your any comments about us. Your kindly reply will be highly appreciated.





​​​​​​





Best regards,

Sophia

THREEWAY STEEL CO.,LTD



Add: Hunan steel Industrial Zone, No 9 Xiangfu Road, Hunan,Changsha, China

Tel: +86-13544036536(direct line) | Fax: +86-731-88678578

Web: www.threewaysteel.com

Email: sophia@threewaysteel.com

Skype: zeng.sophia1 | whatsapp : +86 13544036536

Content analysis details: (31.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.67 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.67 listed in wl.mailspike.net]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.67 listed in dnsbl.ahbl.org]

[209.85.216.67 listed in dnsbl.ahbl.org]

[209.85.216.67 listed in dnsbl.ahbl.org]

[209.85.216.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.67 listed in dnsbl.ahbl.org]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[oceanicactivationcard707(at)gmail.com]

0.6 J_CHICKENPOX_53 BODY: 5alpha-pock-3alpha

0.6 J_CHICKENPOX_64 BODY: 6alpha-pock-4alpha

2.5 MILLION_USD BODY: Talks about millions of dollars

0.6 J_CHICKENPOX_27 BODY: 2alpha-pock-7alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_NAME_MR_MRS No description available.

2.9 YOU_INHERIT Discussing your inheritance

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.5 MONEY_ATM_CARD Lots of money on an ATM card

1.0 XFER_LOTSA_MONEY Transfer a lot of money

0.0 FILL_THIS_FORM Fill in a form with personal information

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FORM Lots of money if you fill out a form

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} YOUR ATM CARD PAYMENT IS AVAILABLE RIGHT NOW



--00000000000037f527064c46aaa4

Content-Type: text/plain; charset="UTF-8"



Head Office RUE 84, ABAPKA MISERBO

COTONOU BENIN REPUBLIC,

MR KENNEDY UZOKA.ATM CARD PAYMENT MANAGER OF THE OCEANIC,

BANK PLC COTONOU BENIN REPUBLIC.



Attention My Dear



This is to officially inform you that your (ATM Card Number;

4278763100030014) has been accredited in your favor.Your Personal

Identification Number is 2900.Your ATM Card Value is $2.6MILLION USD.You

are here by please advice to contact the ATM card payment managing



Director Mr,Kennedy Uzoka, With Details Below: Contact Person: Mr,Kennedy

Uzoka Number:cell +234-80-229-962-306 Contact Email: (

oceanicactivationcard707@gmail.com ) Fill the form below and ask Mr,Kennedy

Uzoka to activate your ATM card on your name and send it to you without any

More delay again.



FULL NAME:...................

DELIVERY ADDRESS:....................

PHONE NUMBER:....................

COUNTRY:......................

OCCUPATION:AND POSITION..........

SEX:..........

AGE:...............



Because the Central Bank of Waste African has passed an order to release

you fund (2.6 Million) into your ATM Card Account as soon as possible right

now okay. So I hope that you are still alive to receive your inheritance

fund sum of (2.6 Million)?



Thank's

Regards,

MRS.J.ODELL



--00000000000037f527064c46aaa4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable







--00000000000037f527064c46aaa4--