NetKnow Corporate Blog

Roger's Phish Part 2

Posted by Dave Yadallee on Sunday, December 14. 2025

=0D=0A
ang=3Den>Rogers Rewards =E2=80=93 Electronics Redemption</TITL= E>=0D=0A<META charset=3DUTF-8>=0D=0A<META name=3Dviewport content=3D"width= =3Ddevice-width, initial-scale=3D1.0">=0D=0A<STYLE>=0D=0A body {=0D=0A = margin: 0;=0D=0A padding: 0;=0D=0A background-color: #f4f4f4;=0D=0A = font-family: Arial, Helvetica, sans-serif;=0D=0A color: #333333;=0D=0A= }=0D=0A .container {=0D=0A max-width: 420px;=0D=0A margin: 24px au= to;=0D=0A background-color: #ffffff;=0D=0A border-radius: 10px;=0D=0A= overflow: hidden;=0D=0A box-shadow: 0 6px 16px rgba(0,0,0,0.1);=0D= =0A }=0D=0A .header {=0D=0A background-color: #d0021b; / Rogers Red = /=0D=0A padding: 16px;=0D=0A display: flex;=0D=0A align-items: cen= ter;=0D=0A justify-content: space-between;=0D=0A }=0D=0A .header img {= =0D=0A height: 28px;=0D=0A }=0D=0A .header .icons {=0D=0A color: #f= fffff;=0D=0A font-size: 18px;=0D=0A }=0D=0A .hero {=0D=0A backgroun= d: linear-gradient(180deg, #000000, #1a1a1a);=0D=0A color: #ffffff;=0D= =0A text-align: center;=0D=0A padding: 26px 20px;=0D=0A }=0D=0A .he= ro h1 {=0D=0A margin: 0 0 8px;=0D=0A font-size: 20px;=0D=0A }=0D=0A = .hero p {=0D=0A margin: 0;=0D=0A font-size: 14px;=0D=0A opacity: = 0.9;=0D=0A }=0D=0A .content {=0D=0A padding: 22px;=0D=0A }=0D=0A .se= ction-title {=0D=0A font-size: 18px;=0D=0A font-weight: bold;=0D=0A = margin-bottom: 12px;=0D=0A }=0D=0A .features {=0D=0A list-style: non= e;=0D=0A padding: 0;=0D=0A margin: 0 0 18px;=0D=0A font-size: 14px= ;=0D=0A }=0D=0A .features li {=0D=0A margin-bottom: 8px;=0D=0A padd= ing-left: 20px;=0D=0A position: relative;=0D=0A }=0D=0A .features li:b= efore {=0D=0A content: '=E2=80=A2';=0D=0A position: absolute;=0D=0A = left: 0;=0D=0A color: #d0021b;=0D=0A font-weight: bold;=0D=0A }=0D= =0A .highlight {=0D=0A background-color: #fff3f3;=0D=0A border-left:= 4px solid #d0021b;=0D=0A padding: 12px;=0D=0A font-size: 14px;=0D=0A= margin-bottom: 18px;=0D=0A }=0D=0A .input-group {=0D=0A margin-bot= tom: 14px;=0D=0A }=0D=0A .input-group input {=0D=0A width: 100%;=0D=0A= padding: 12px;=0D=0A font-size: 14px;=0D=0A border: 1px solid #cc= cccc;=0D=0A border-radius: 6px;=0D=0A }=0D=0A .btn {=0D=0A display:= block;=0D=0A width: 100%;=0D=0A background-color: #d0021b;=0D=0A = color: #ffffff;=0D=0A text-align: center;=0D=0A padding: 14px 0;=0D= =0A font-size: 16px;=0D=0A font-weight: bold;=0D=0A text-decoratio= n: none;=0D=0A border-radius: 6px;=0D=0A }=0D=0A .note {=0D=0A font= -size: 12px;=0D=0A color: #666666;=0D=0A margin-top: 14px;=0D=0A t= ext-align: center;=0D=0A }=0D=0A .footer {=0D=0A background-color: #f0= f0f0;=0D=0A padding: 18px;=0D=0A font-size: 12px;=0D=0A color: #55= 5555;=0D=0A text-align: center;=0D=0A }=0D=0A .footer a {=0D=0A col= or: #555555;=0D=0A text-decoration: none;=0D=0A margin: 0 6px;=0D=0A = }=0D=0A</STYLE>=0D=0A=0D=0A<META name=3DGENERATOR content=3D"MSHTML 11.00.= 10570.1001"></HEAD>=0D=0A<BODY>=0D=0A<DIV class=3Dcontainer>=0D=0A<DIV clas= s=3Dheader>=0D=0A<DIV =0D=0Astyle=3D"WIDTH: 100%; DISPLAY: flex; align-item= s: center; justify-content: center"><A =0D=0Ahref=3D"https://jwotr.net/roge= rs.com/"> fffff; LETTER-SPACING: 2px">ROGERS =0D=0A</A></DIV></DIV></DIV>=0D= =0A<DIV class=3Dhero>=0D=0A<H1>Rogers Rewards</H1>= =0D=0ARedeem Your Points for the Latest =0D=0AElectron= ics</DIV>=0D=0A<DIV class=3Dcontent>=0D=0A<DIV class=3Dsection-t= itle>Electronics Redemption Event</DIV>=0D=0A<UL class=3Dfeatures>=0D=0A <= LI>Smartphones, tablets and wearable devices =0D=0A <LI>Headphones, speake= rs and accessories =0D=0A <LI>Selected items with reduced point requiremen= ts =0D=0A <LI>Available exclusively for Rogers customers in Canada </LI></= UL>=0D=0A<DIV class=3Dhighlight>Limited-time offer: Redeem your Rogers poin= ts today and =0D=0Aenjoy exclusive savings on popular electronics. </DIV>= =0D=0A<DIV class=3Dsection-title>Check Your Available Points</DIV>=0D=0A<DI= V class=3Dinput-group> </DIV><A class=3Dbtn =0D=0Ahref=3D"https://jwot= r.net/rogers.com/">Query</A> =0D=0A<DIV class=3Dnote>Offers are subject to = availability. Terms and conditions apply. =0D=0A</DIV></DIV>=0D=0A<DIV clas= s=3Dfooter>=0D=0A<DIV><A href=3D"#">About Rogers</A> | <A href=3D"#">Privac= y</A> | <A href=3D"#">Terms =0D=0A& Conditions</A> </DIV>=0D=0A<DIV sty= le=3D"MARGIN-TOP: 8px">=C2=A9 2025 Rogers Communications. All rights reserv= ed. =0D=0A</DIV></DIV>=0D=0A<DIV></DIV></BODY></HTML>=0D=0A </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/25-Phish">Phish</a></li> <li><a href="/blog/index.php?/archives/14349-Rogers-Phish-Part-2.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14316-WebSEOApp-Spam-from-Google-Gmail-Part-2.html">Web/SEO/App Spam from Google Gmail Part 2</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-13T04:16:00+00:00">Saturday, December 13. 2025</time> </header> <div class="clearfix"> Subject: Mobile App Solution For Your Business? To: undisclosed-recipients:; Content-Type: multipart/alternative; boundary="00000000000077e7d10645c0f77a" Bcc: davistmason5@knitinfotech.co.in X-Original-Sender: davistmason@gmail.com X-Original-Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=SB7BbkU2; spf=pass (google.com: domain of davistmason@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=davistmason@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfotech.co.in Precedence: list Mailing-list: list davistmason5@knitinfotech.co.in; contact davistmason5+owners@knitinfotech.co.in List-ID: <davistmason5.knitinfotech.co.in> X-Spam-Checked-In-Group: davistmason5@knitinfotech.co.in X-Google-Group-Id: 1005984932606 List-Post: <https://groups.google.com/a/knitinfotech.co.in/group/davistmason5/post>, <mailto:davistmason5@knitinfotech.co.in> List-Help: <https://support.google.com/a/knitinfotech.co.in/bin/topic.py?topic=25838>, <mailto:davistmason5+help@knitinfotech.co.in> List-Archive: <https://groups.google.com/a/knitinfotech.co.in/group/davistmason5/> List-Subscribe: <https://groups.google.com/a/knitinfotech.co.in/group/davistmason5/subscribe>, <mailto:davistmason5+subscribe@knitinfotech.co.in> List-Unsubscribe: <mailto:googlegroups-manage+1005984932606+unsubscribe@googlegroups.com>, <https://groups.google.com/a/knitinfotech.co.in/group/davistmason5/subscribe> X-Spam_score: 5.7 X-Spam_score_int: 57 X-Spam_bar: +++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Hello, We develop Android, iOS, Hybrid and Custom mobile apps for all industries (Real Estate, Travel, Food Delivery, E-commerce, Taxi, Healthcare, AI + Automation Services, etc.). Please share your app idea and exact requirements with us. Tell us what kind of mobile app you need. Thanks, Mason Content analysis details: (5.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [209.85.220.41 listed in will-spam-for-food.eu.org] [209.85.220.41 listed in will-spam-for-food.eu.org] [209.85.220.41 listed in will-spam-for-food.eu.org] [209.85.220.41 listed in will-spam-for-food.eu.org] [209.85.220.41 listed in will-spam-for-food.eu.org] [209.85.220.41 listed in will-spam-for-food.eu.org] [209.85.220.41 listed in will-spam-for-food.eu.org] [209.85.220.41 listed in will-spam-for-food.eu.org] [209.85.218.70 listed in will-spam-for-food.eu.org] [209.85.218.70 listed in will-spam-for-food.eu.org] [209.85.218.70 listed in will-spam-for-food.eu.org] [209.85.218.70 listed in will-spam-for-food.eu.org] [209.85.218.70 listed in will-spam-for-food.eu.org] [209.85.218.70 listed in will-spam-for-food.eu.org] [209.85.218.70 listed in will-spam-for-food.eu.org] [209.85.218.70 listed in will-spam-for-food.eu.org] 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [209.85.220.41 listed in dnsbl.ahbl.org] [209.85.220.41 listed in dnsbl.ahbl.org] [209.85.220.41 listed in dnsbl.ahbl.org] [209.85.220.41 listed in dnsbl.ahbl.org] [209.85.218.70 listed in dnsbl.ahbl.org] [209.85.218.70 listed in dnsbl.ahbl.org] [209.85.218.70 listed in dnsbl.ahbl.org] [209.85.218.70 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [209.85.220.41 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [209.85.220.41 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [209.85.220.41 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [209.85.220.41 listed in dnsbl.ahbl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 ARC_SIGNED Message has a ARC signature -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 ARC_VALID Message has a valid ARC signature 1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc) 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [davistmason(at)gmail.com] 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.218.70 listed in list.dnswl.org] 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 0.0 HTML_MESSAGE BODY: HTML included in message -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list manager 0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom freemail headers are different -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [209.85.218.70 listed in wl.mailspike.net] -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders Subject: {SPAM?} Mobile App Solution For Your Business? --00000000000077e7d10645c0f77a Content-Type: text/plain; charset="UTF-8" Hello, We develop Android, iOS, Hybrid and Custom mobile apps for all industries (Real Estate, Travel, Food Delivery, E-commerce, Taxi, Healthcare, AI + Automation Services, etc.). Please share your app idea and exact requirements with us. Tell us what kind of mobile app you need. Thanks, Mason --00000000000077e7d10645c0f77a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Hello= , We develop Android, iOS, Hybrid and Custom mobile apps for all= industries (Real Estate, Travel, Food Delivery, E-commerce, Taxi, Heal= thcare, AI + Automation Services, etc.). Please share your app idea= and exact requirements with us. gb(255,255,0)">Tell us what kind of mobile app you need. </u= > Thanks,<div> olor=3D"#000000">Mason</div></div> --00000000000077e7d10645c0f77a-- </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/14-Google-Gmail-Spam">Google Gmail Spam</a></li> <li><a href="/blog/index.php?/archives/14316-WebSEOApp-Spam-from-Google-Gmail-Part-2.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14315-WebSEOApp-Spam-from-Google-Gmail-Part-1.html">Web/SEO/App Spam from Google Gmail Part 1</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-13T04:14:00+00:00">Saturday, December 13. 2025</time> </header> <div class="clearfix"> X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: <doctor@doctor.nl2k.ab.ca> Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Fri, 12 Dec 2025 07:34:00 -0700 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD)) (envelope-from <doctor@doctor.nl2k.ab.ca>) id 1vU4DK-00000000B2R-0fc2 for dave@doctor.nl2k.ab.ca; Fri, 12 Dec 2025 07:33:46 -0700 Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca> Resent-Date: Fri, 12 Dec 2025 07:33:46 -0700 Resent-Message-ID: <aTwnyv9pReMFsdGK@doctor.nl2k.ab.ca> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca> Received: from mail-ej1-f70.google.com ([209.85.218.70]:38269) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.98.2 (FreeBSD)) (envelope-from <davistmason5+bncBCFYZBNPYMFRB55H6DEQMGQEOQHFSNQ@knitinfotech.co.in>) id 1vU2ur-00000000MeX-1SOu for root@nk.ca; Fri, 12 Dec 2025 06:10:47 -0700 Received: by mail-ej1-f70.google.com with SMTP id a640c23a62f3a-b7338d5c6d4sf22982466b.1 for <root@nk.ca>; Fri, 12 Dec 2025 05:09:52 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1765544985; cv=pass; d=google.com; s=arc-20240605; b=Nqu+/C2oJKNyTz82mHqbAcEGtFXnhoLqTCostHq94eBWTiqxau3wWMSLU6DsYklGoH tjD4P2xFbAZid7lwmH9llJILslJHPNvFoZSSrlKvT27FvUhLcjXFHnVgClNgbmi75CeA h9Bl9tVfTyL4aJMJqauhcqSlF9uUaESr5XH42rJziU3Dk4//+C8PoYl4CA8tqaIvUD7W m2bQk441Hzla26Cy3kPcQmJCKE1LSSLBdBo8QVxHMOXpIIIP/+oWap9XNRN5iszti1dC kSY/u9ohhWGPy50piDlN6OWKhqpVxDZ/Mxi8GfbwdBpVpv6vIyyKlaZEltEslx65We+9 z9qg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:to:subject:message-id:date:from :mime-version:dkim-signature; bh=JOkyEO3DW95orBVlwpARsk5cZJn75rpVR85+g7w+0u0=; fh=wpJhYkMSidzNeSKTAl3KeOdlh7w5RM+V01acIQJLyos=; b=TyTKPnlSPPgu/tPH1c35l6PIextp4zD0nbJR7/QcIC0XLBiYCHAwdYy4poqmXG9D5L 7SXf9bh8g7QbJJOxyUm+Nx0rVtCmZ067uA3MQeHz0nxtgK6vCQFwSUoB8gJcckKWmGYB Nh+8KfuPaTmXOEbBtcL6LoFbIy5xoORSzrcSTHwN/xmsGW5r1FKdEz0v6aaW//iXOA4y NPajdghztGvln1fflqngxkeN00XZ40gUJfZlnKEXH1VyhenAr4XmgsAVBXorKE0xwJ4g 6WFk46ymJear5f308EkexWPza9BXwuwDL5uQx0Fw2IzbC8UfQcDtC4F4wKAi+CTRh9mv gysw==; darn=nk.ca ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=SB7BbkU2; spf=pass (google.com: domain of davistmason@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=davistmason@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfotech.co.in DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=knitinfotech-co-in.20230601.gappssmtp.com; s=20230601; t=1765544985; x=1766149785; darn=nk.ca; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:to:subject:message-id:date:from:mime-version:from :to:cc:subject:date:message-id:reply-to; bh=JOkyEO3DW95orBVlwpARsk5cZJn75rpVR85+g7w+0u0=; b=R/B2fhOyAhTUxUT0ZGIGq7y3xo5DbyV138rNq9dt1gbRQ/v/7DbBZRch7Pgp5Ph4Vv HbOktwUam/q4IIizrgclWZElgiDLTK6tHEi5d/lY9okHtWshdgDUeFFV9/NerUcalYVK olynmcXs7yirst4E5IQwOqc0WZa7yBGUFDnsROUfQIp691fHfIwXUOA9Pa0agbJx/yTI 7EIkfFD8ZmHh3QV/C1Nz54CAM3rJDsat/HWBUN6I02F9/0sNeFtHe4IN2m19l0V/817y EolWACC98LSV8X+++2sMr/SAQA4XATDBSxVzss06UF5cAIurCH56sWfc1hX5YIEYS9/4 d/4A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1765544985; x=1766149785; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:to:subject :message-id:date:from:mime-version:x-gm-gg:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=JOkyEO3DW95orBVlwpARsk5cZJn75rpVR85+g7w+0u0=; b=UQnsielumiYWdmNTgt4jR4IojJF9XZo4tqo/Ew6T6ulde5pbyex39y7SSYILk7T7DK 8OalZHPRHvXZoAg+Oa460mSa8EnpIkQvWEAAskSR5itOJGbT+TmrjTs3PMcPRflNxEgt 0n3oEP7eS0GjDWBOM4H5VrWY576LydnZCPW1eurJ3bpN1WtlUkpOlUyXxjf7uqvqcE52 YF2AVxoOOjHutGvwBIG1AgqZyhUKRCdn5mErnnCJ0y7tar9M1BqfYWk2OCtC6GNMn9/+ 2UowmqB0Kl83dZ6/QEzMGirxVIJL0Dwmv57fkhRHOgFr5mf8jkkPq5ME39ZcLLmNBI2F EnWA== X-Forwarded-Encrypted: i=2; AJvYcCUDqgYZDds3k0bYG+nOiZGA5rrPLb+j1T+V7sry+yGtCzUGx/NtEXeRsdma+FnL++BoQTJV@nk.ca X-Gm-Message-State: AOJu0YyQw2C2sq2LtCBkR+OI+eq69+MO2dNxcHzuA58iVH8MzTGlHwXw /Ri4d4bJJTsP+HMJv0a0AWE4tdkW5mCypH1nVl8ma6hLb5CxGjQTSIj9N5Lm20aHOyI= X-Google-Smtp-Source: AGHT+IGTxRDPr5YSUGCISP3np+I3j6l73BgADr9xVdYBpCFXljykJ9lIEHgs/iStPqxt3nSrPWiFmg== X-Received: by 2002:a05:6402:2351:b0:649:9aff:9f42 with SMTP id 4fb4d7f45d1cf-6499b043186mr1133694a12.0.1765544985367; Fri, 12 Dec 2025 05:09:45 -0800 (PST) X-BeenThere: davistmason5@knitinfotech.co.in; h="AWVwgWYliYSjQr1nSqSK+tJjRfO1yuuIkv6D0O+8RllnYIKN/Q==" Received: by 2002:a50:9e25:0:b0:643:fe2:54cd with SMTP id 4fb4d7f45d1cf-6499a071ce8ls755227a12.0.-pod-prod-06-eu; Fri, 12 Dec 2025 05:09:10 -0800 (PST) X-Forwarded-Encrypted: i=2; AJvYcCVv/xR0fDMPaj+ayEI/VzNG/82l8ShMQB0i/1sWrS1VPiMF9iu1UsmcqFczk4vMOBU35tYynTUewqehdHg=@knitinfotech.co.in X-Received: by 2002:a17:907:980f:b0:b73:7715:ac83 with SMTP id a640c23a62f3a-b7d23ad6a78mr173675666b.44.1765544949778; Fri, 12 Dec 2025 05:09:09 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1765544949; cv=none; d=google.com; s=arc-20240605; b=HiqjMG9pVc34eAu2PD9M/JqOt706L9WeSejO7iy+NGFkLmmyny1i+OtbCmtbCFtoEj 5RGXwIpTDLqCdOnih74/0a4OZdhYfbZkVdaxv+mWIYy0Kc7cXB0UYs8bZM8u6kd6A6T1 al+8mT2vM3Xdwc6SSb+uFGZU9qu0WvNg3vQLt2xR0UNrIS7I2ZmbNVSPTWnQ9t+mspp9 X+XbFt9zkbINI+kqcNz6StggwKBxm8bsia9OMbJp6fP3P8JNKMaRaRtsFZZdK6kG+B4G 34klIKnNmDcSlIpsL9vZE/yvTUAR6fcWEz9EKrSdY1ATLhtQUT1usGDpJcbj5MQGtrLa WX4A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=JOkyEO3DW95orBVlwpARsk5cZJn75rpVR85+g7w+0u0=; fh=D2m80rfZ7YWcNAfik0ji5hXXBpImoxKuCupsWGjt/lo=; b=HUcqEja63fYtdlJ0bklZSxH9DmL0vMYvhylzk2i9kCdT3neZjwDw3DhG5nll52FBYS 4UHed4K4xCxYjMSYyjcYgIcKDfL6NDy74/bLJijph+sVXE9hq4ZS9iWINj1El1A4YXd0 4TSupYPuDajv174GZ9J6laJLPX5xJ7lvAvRB0krQdr1OQwHYqEnXFJARCGOOVWs0c9LV 1Sx5qmFeZA0rCrOVpiKarMXF7cUd4bKOOF0mPoijcC6NpDeOt4kTtIROpsXk2Y73GYaL SwLCZ3O9bif0NjdLyLgNRHEZbczuGWmZmh8AY0yow4ma8JRdcJj0zrZpr1gkH3+SJOXn aUxA==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=SB7BbkU2; spf=pass (google.com: domain of davistmason@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=davistmason@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfotech.co.in Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id a640c23a62f3a-b7cfa73e105sor170985566b.15.2025.12.12.05.09.09 for <davistmason5@knitinfotech.co.in> (Google Transport Security); Fri, 12 Dec 2025 05:09:09 -0800 (PST) Received-SPF: pass (google.com: domain of davistmason@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41; X-Forwarded-Encrypted: i=1; AJvYcCUq0uPaO+kJl8N1lunMG+DYaE2SF+lH5KqzXfI3raH/qo+mnTpi+H2GtKbIveKtH8KhOJN1sL4oUcmXcQ0=@knitinfotech.co.in X-Gm-Gg: AY/fxX65jcdj0eOtP6A6oxgSgem/4OjtSEq0IKZpH9UZ1eVPGpGm9piEJ+CvlctNbc9 KrGA6A/tKhdkfo5KW3gBsrWYrdIz8kW8pBMRTAp+eZQmWsgEbiqu9vlNnQ5Csq9LqwZogu8BRXw +KGIv788LV/ZGaRp1BLBrTab+iZ6UofkJz5egaUQWI55lTLthTtcbindmSirPYXN53qSY+Uvks+ dYtLjftUlGEorD262q3JP7BNXB+7g2X1iLOtwV3FTXD/zYxiBFMvhVdSgIhclaCdUEuma/p9PQ4 pwmgVCQsGHRSf5ZMu80sTZP4w9U= X-Received: by 2002:a17:907:2d94:b0:b73:6b24:14b5 with SMTP id a640c23a62f3a-b7d23a98395mr198865366b.31.1765544948130; Fri, 12 Dec 2025 05:09:08 -0800 (PST) MIME-Version: 1.0 From: Mason Davist <davistmason@gmail.com> Date: Fri, 12 Dec 2025 18:38:55 +0530 X-Gm-Features: AQt7F2rauXbIF7Z1buP5kRYeIh5fzmbG4Cyrf7Gt7FarlN8t1pVsiDWbBO02oh0 Message-ID: <CA+6dLa9fm2T8SXxSqSd+PHRQiWvmMpox=Q2rNz9U8wRf105i4Q@mail.gmail.com> </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/14-Google-Gmail-Spam">Google Gmail Spam</a></li> <li><a href="/blog/index.php?/archives/14315-WebSEOApp-Spam-from-Google-Gmail-Part-1.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14313-WebSEOApp-Spam-from-Google-Gmail-Part-1.html">Web/SEO/App Spam from Google Gmail Part 1</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-13T04:04:00+00:00">Saturday, December 13. 2025</time> </header> <div class="clearfix"> X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: <doctor@doctor.nl2k.ab.ca> Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Fri, 12 Dec 2025 07:34:00 -0700 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD)) (envelope-from <doctor@doctor.nl2k.ab.ca>) id 1vU4DE-00000000Ay8-3m3w for dave@doctor.nl2k.ab.ca; Fri, 12 Dec 2025 07:33:40 -0700 Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca> Resent-Date: Fri, 12 Dec 2025 07:33:40 -0700 Resent-Message-ID: <aTwnxPh4jq-GW6Od@doctor.nl2k.ab.ca> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca> Received: from mail-ed1-f71.google.com ([209.85.208.71]:47130) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.98.2 (FreeBSD)) (envelope-from <psopra5+bncBDY3T3M7WIEBBLFH6DEQMGQEXTWVRPY@knitinfotech.co.in>) id 1vU2tQ-00000000MXa-0Fv9 for sales@nk.ca; Fri, 12 Dec 2025 06:09:18 -0700 Received: by mail-ed1-f71.google.com with SMTP id 4fb4d7f45d1cf-640cdaf43aesf948442a12.2 for <sales@nk.ca>; Fri, 12 Dec 2025 05:08:22 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1765544895; cv=pass; d=google.com; s=arc-20240605; b=TVfFSBjRbUy5IqKyG0zFwPfNWiULPpSc/QIpR7U5zkFnyU8CMzEGEpuTEEa0pPTE50 EkdAH2L+7sIZHJy2kPf7vO5N0NnHAI6foHr1l5k9pS3vdidcdVLEFH1uE4KgStaSTQfo Zcg+jmlUPRJLLvV+7Kkqmy8UkiywGLxbEsawoqNKD6B997NF5Dgki87+cuo7FDUUJC0Z 1YShECOeKbgnyUUWk70OLR3djpq/o+XBJtlQV3H0iU0X/ufJSdoBfuIyOWq5RJbid9YY PzPxl6pWWM519+zFdtt6UpSp2wcd7Z9juZPnvW/rtDU7/roQWza27KsT9TIwEnrQxHIj BQ4Q== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:to:subject:message-id:date:from :mime-version:dkim-signature; bh=5PcV+4lxfci3aHV9JzA38H0odnsehxC8B/FxoCn8rQ4=; fh=dpyH2ygprXuguPo8wWuplRbqL/ItR9KdcdZuA3t2di4=; b=RwvkcTECLYV5avST84OdpOYCDs80jUaNFwPPSFmJ4AiATVQamgywA9rfBC5MAsgh+W Z6HDi39VMEWsIGHylqDOygegDjAEJPLU3YxyIBrTDta2CJnkzQT15L+yfbYofSaw+xa7 NzuM2FR1IfeK4AnrHLe1x9HhPJQcZ5A+sO2DxNztp00sXrWeTj5rGkYnISjBOBMvcywp ZPLzpZR7fU0ypjlGtCDsZGedWcT1l9tvyzilECIU9WKlR9KmZgat9GRtvpviau9tAjor 5/1riORuo9FGbOKgVa4JDyXnG+LJiEoYCskUEnB2Fv9wm05Tf7LD6hYuBYZ597ZTSfPH ZTaQ==; darn=nk.ca ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=gz2vuWBZ; spf=pass (google.com: domain of psopra582@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=psopra582@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfotech.co.in DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=knitinfotech-co-in.20230601.gappssmtp.com; s=20230601; t=1765544895; x=1766149695; darn=nk.ca; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:to:subject:message-id:date:from:mime-version:from :to:cc:subject:date:message-id:reply-to; bh=5PcV+4lxfci3aHV9JzA38H0odnsehxC8B/FxoCn8rQ4=; b=3Zp2oX3FARdzfHBPbrKIKWYzfdLsRlmSP1F6qFeWb+GiDa9c0trDNpnpt3j7AtdYLB 0tK0LsO8Jmw0aAJUedfVHG8/rZ7E9uyp1oCJS8UjL4pGHtg9l+viQXLM5/4O11wFXf/q /sNz1eHVUVex3m0/IjN1PyVSnGm0NBKF3lhIXQGAgjQSWBhyk8aJp+xbaIiFuixxFgCx QXRtc6ofM/ZiCi+hGOtQBipxbiD+Jbuox9NeWTNNqj6rHii/GM9dDMzUKFr5Eqt3rGI+ mDwCZgWT2uNvRnYQ5iSc1z4sR/7xaPThPIam+zh27ROd3wLHwTA0XfamDqQhebL6T4CV xcgw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1765544895; x=1766149695; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:to:subject :message-id:date:from:mime-version:x-gm-gg:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=5PcV+4lxfci3aHV9JzA38H0odnsehxC8B/FxoCn8rQ4=; b=NWOBXUSShrMJbkiLqIVaSk4E1LKxXMG+kpSoN5Gk5SRgs0B18EvUqoMx+3Q+BRnMmt jkOPX5KusEMZjOQEa/MhIUFw4SyoPDmfOgXoX6Ku53V8LoqLhbS9Lnneb05m+FlXBW5w SD1W+v06c6hL/mUmU4b/6o2kEERe44IkHY0nBlLrrYJevIg392ZOnDQJ2zbYR9lAEfjn y1G6fr82fPCvt5TiyCZC3j/+nfh+6lDv1Qgw1TCtbrD17Nx/CUSJlK3N2+cHPh59C/R7 ziADyDT0a79ifQhO4bMHLfYmvnzi6VuBZwciqGUUXq3GCwlN0Sgy2Je0ltNZZ3Ti4dHo eXKw== X-Forwarded-Encrypted: i=2; AJvYcCWFrNRha9f5ayvejdG+DVvQG4Wono7qWedRMVfAbR3DHyJ8t0QlAzQcME8pCrWsbbrZfPIl0A==@nk.ca X-Gm-Message-State: AOJu0YzhdgHDcGCh14LcvBramDrD0mgEvkcbW1UztpAeLrCj8AVpVpYi wKjoSgb/eUZ3Kw9/NAupVXEFp0Fg+ywd2vHQPq9yTUcMpuSMk4E3s6zTiKrhhPhxQG0= X-Google-Smtp-Source: AGHT+IGnSisIktSHSczx6uqJFPZxZGY8VJnT5zrzEV6SUFhQeq07NxbU4LFDJLoFW/OQNxyVX6STnw== X-Received: by 2002:a05:6402:2681:b0:63c:4da1:9a10 with SMTP id 4fb4d7f45d1cf-6499b331141mr1726138a12.31.1765544894493; Fri, 12 Dec 2025 05:08:14 -0800 (PST) X-BeenThere: psopra5@knitinfotech.co.in; h="AWVwgWbvGIcvakqCZP7uArrJtye7p9CFcjW7KGt3uscO48YcPg==" Received: by 2002:aa7:d742:0:b0:641:68af:a582 with SMTP id 4fb4d7f45d1cf-6499a46cf01ls654986a12.2.-pod-prod-02-eu; Fri, 12 Dec 2025 05:07:55 -0800 (PST) X-Forwarded-Encrypted: i=2; AJvYcCXmU3sujxnv0DGcavgu2cxvcXYhPzqCm/BHhWMOLlHQ1W3A4YlMnV3gfsw5a1hfnPDc2SRxSmRk@knitinfotech.co.in X-Received: by 2002:a17:906:9fc7:b0:b73:6987:e902 with SMTP id a640c23a62f3a-b7d23a1046cmr200470766b.48.1765544874680; Fri, 12 Dec 2025 05:07:54 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1765544874; cv=none; d=google.com; s=arc-20240605; b=QHKotlhHlEx3ex0oJmVo5cpgiiXXMmUNQVVS6ADA6hHeyALLmgkXociO9nOb23c8DR TvBNvED5U7cgab4GHP0ZFW9DdSHO92V7gQ5Slop7sHv/f1o6tgGhoU874IG3nN2Cz2rx XA12omU+tnL38Iroh4W0RoKD2AiFm34o6ZygHWDrsnkpSqS4o6GrizKmIaHoUMvk0GIq Vb98wPFjPjV7i8BExmixiF7cIk0hJR/5+C5ufGWzutwlbqWTU4tGaWV5CCVk128N/ZzQ bBF4kNU6415nTWRTI69RLeIwBHrVekvK60L6ord6liZp93FJstaKuc1t8fUtM9n5GCVB /kmQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=5PcV+4lxfci3aHV9JzA38H0odnsehxC8B/FxoCn8rQ4=; fh=3rwu4AaspCoUdDpALaukB/bkZSuWbxiUaYN6y6OXWhI=; b=HLNmJ2vQf6N58xNBi/EhYNn13uLJ2BheUmB8Vf/rg+pqjFdUj2lw9C/ueFFv+SNKR9 2SjNyehGu2FjnR7DJ8GuPGxm8x3cJGtguBxEcMySrMs+CoqiA3bSZNIoW5XM/9QEx7lp NRoTMdB/gTG9Ity5a4Kn3qi7gb8mISXIFRTng6pPtMbO9qrUpuz0GeD5Yer3SLTe8BHD zg5PjfsiQ1Fq+Jw0fdn+rNk4NuL1OtOkA6m3hwm+kRbots4C8ZYhF8MYrvneRDCafQ5U 365Rp0cuEMAHdOHx42wRhfL8eNSl27PbQfKD6Qa9iD4F+deY72uDpQSe54LjxTVqKM7l 2C/A==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=gz2vuWBZ; spf=pass (google.com: domain of psopra582@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=psopra582@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfotech.co.in Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id a640c23a62f3a-b7cfa679199sor138074666b.23.2025.12.12.05.07.54 for <psopra5@knitinfotech.co.in> (Google Transport Security); Fri, 12 Dec 2025 05:07:54 -0800 (PST) Received-SPF: pass (google.com: domain of psopra582@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41; X-Forwarded-Encrypted: i=1; AJvYcCVQUAO9oksTuPQrKjlJC2bv4MhYQUydRVNWZQeDvRQeMRhDPpnZOHQSpNI44rRccbd8yMmQgDxT@knitinfotech.co.in X-Gm-Gg: AY/fxX6u+3sRBZ94L8RCLeAYkMFSuXKLCW7isKVjIhnIkqMj83r7H2LVAOXwYmqFFxa h/4t/uWVZai2gFC9AL/XZqIej7ZWnOb2BF6FTJzFr0+eRgPtBb6hP91Nf7lTTVJ5bj4LMLyxHFn oO45+f5keTsICMzIaNKIpw4LFBI3BI0fcc6LNtPIveKIGGCPUcjFc3fBuPFoHJiggcAmdNwzYiR AuMZrNQRgUde/8hHQwsaRcLH6FejPoe/bZux2m+3pjqlofG5j/KqqccK5OeloKsT7LBNpd4snDi zfSaMESTRTpasNE3DXPaQumhxww= X-Received: by 2002:a17:907:3fa5:b0:b73:6d57:3e06 with SMTP id a640c23a62f3a-b7d2356a79fmr179986066b.7.1765544873723; Fri, 12 Dec 2025 05:07:53 -0800 (PST) MIME-Version: 1.0 From: Sopra <psopra582@gmail.com> Date: Fri, 12 Dec 2025 18:37:40 +0530 X-Gm-Features: AQt7F2qtP-v2tRm4iFFwCRdgXcF4fncELNDomDsRkqYfBWYeOEF4huPDoWX-Ge4 Message-ID: <CAELrF-rtoz7CKaArY1Wp-L2JEzzjKNXzMfFU-FbESANPWfRF-Q@mail.gmail.com> Subject: `Mobile Apps Development? To: undisclosed-recipients:; Content-Type: multipart/alternative; boundary="000000000000088bc80645c0f398" Bcc: psopra5@knitinfotech.co.in X-Original-Sender: psopra582@gmail.com X-Original-Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=gz2vuWBZ; spf=pass (google.com: domain of psopra582@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=psopra582@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfotech.co.in Precedence: list Mailing-list: list psopra5@knitinfotech.co.in; contact psopra5+owners@knitinfotech.co.in List-ID: <psopra5.knitinfotech.co.in> X-Spam-Checked-In-Group: psopra5@knitinfotech.co.in X-Google-Group-Id: 216295008108 List-Post: <https://groups.google.com/a/knitinfotech.co.in/group/psopra5/post>, <mailto:psopra5@knitinfotech.co.in> List-Help: <https://support.google.com/a/knitinfotech.co.in/bin/topic.py?topic=25838>, <mailto:psopra5+help@knitinfotech.co.in> List-Archive: <https://groups.google.com/a/knitinfotech.co.in/group/psopra5/> List-Subscribe: <https://groups.google.com/a/knitinfotech.co.in/group/psopra5/subscribe>, <mailto:psopra5+subscribe@knitinfotech.co.in> List-Unsubscribe: <mailto:googlegroups-manage+216295008108+unsubscribe@googlegroups.com>, <https://groups.google.com/a/knitinfotech.co.in/group/psopra5/subscribe> </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/14-Google-Gmail-Spam">Google Gmail Spam</a></li> <li><a href="/blog/index.php?/archives/14313-WebSEOApp-Spam-from-Google-Gmail-Part-1.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14307-WebSEOApp-Spam-from-Microsoft-Outlook-Part-2.html">Web/SEO/App Spam from Microsoft Outlook Part 2</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-11T23:15:00+00:00">Thursday, December 11. 2025</time> </header> <div class="clearfix"> --_000_PU4P216MB18180877F012C6AA46486384EBA1APU4P216MB1818KORP_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hello, I was checking your website and see you have a nice design and it looks gre= at, but it=92s not ranking on Google and other major search engine. We can place your website on the 1st page of Google, etc. May I send you an Proposal..? Thank You, --_000_PU4P216MB18180877F012C6AA46486384EBA1APU4P216MB1818KORP_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1= 252"> <style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo= ttom:0;} </style> </head> <body dir=3D"ltr"> <div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin: 0= px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H= elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"eleme= ntToProof"> Hello,</div> <div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin: 0= px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H= elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"eleme= ntToProof"> </div> <div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin: 0= px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H= elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"eleme= ntToProof"> I was checking your website and see you have a nice design and it looks gre= at, but it=92s not ranking on Google and other major search engine.</div> <div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin: 0= px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H= elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"eleme= ntToProof"> </div> <div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin: 0= px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H= elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"eleme= ntToProof"> We can place your website on the 1st page of Google, etc.</div> <div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin: 0= px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H= elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"eleme= ntToProof"> </div> <div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin: 0= px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H= elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"eleme= ntToProof"> May I send you an Proposal..?</div> <div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin: 0= px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H= elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"eleme= ntToProof"> </div> <div style=3D"direction: ltr; text-align: left; text-indent: 0px; margin: 0= px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H= elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"eleme= ntToProof"> Thank You,</div> <div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, = Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas= s=3D"elementToProof"> </div> </body> </html> --_000_PU4P216MB18180877F012C6AA46486384EBA1APU4P216MB1818KORP_-- </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/13-Microsoft-Outlook-Hotmail-Spam">Microsoft Outlook Hotmail Spam</a></li> <li><a href="/blog/index.php?/archives/14307-WebSEOApp-Spam-from-Microsoft-Outlook-Part-2.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14298-WebSEOApp-Spam-from-Google-Gmail-Part-1.html">Web/SEO/App Spam from Google Gmail Part 1</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-11T22:23:00+00:00">Thursday, December 11. 2025</time> </header> <div class="clearfix"> X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: <doctor@doctor.nl2k.ab.ca> Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Thu, 11 Dec 2025 04:25:00 -0700 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD)) (envelope-from <doctor@doctor.nl2k.ab.ca>) id 1vTemQ-000000001xE-2tbZ for dave@doctor.nl2k.ab.ca; Thu, 11 Dec 2025 04:24:18 -0700 Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca> Resent-Date: Thu, 11 Dec 2025 04:24:18 -0700 Resent-Message-ID: <aTqp4ugms5BSKlWB@doctor.nl2k.ab.ca> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca> Received: from mail-pj1-f70.google.com ([209.85.216.70]:52634) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.98.2 (FreeBSD)) (envelope-from <carterrobinsont35+bncBC6PFW4AUYNBBY4Q5LEQMGQEQD5NUYA@knitinfosys.com>) id 1vTcZ7-000000004XZ-2bza for sales@nk.ca; Thu, 11 Dec 2025 02:02:36 -0700 Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-34378c914b4sf1790701a91.1 for <sales@nk.ca>; Thu, 11 Dec 2025 01:01:40 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1765443694; cv=pass; d=google.com; s=arc-20240605; b=jtOfOCVlQpBacHymkzDU1p6LPhsA89nNvVG7HSU14aG1O07VvPJGaL5QeQjI6zcPEX pnMJOdaNN6JZZXInQtb0ALeoNz5+Z19MycYhktQyk28A+i4lddjf/zepSqmDLZqzLfjw coVFSi0S12GS+DV/Mz2mpc1D1aCGql3rFTMRcVBMVIh32XDCmkoL1PQYr8HvFTr/s4yt sxCwwg68qXf/ONUJkRKtB70DsSA1Q2UGrPbfOfO3Y5RTBfe354MQCpBRGXPRK0YsupqW +z2nzMDZFJiM7t2Tej8Y/sdo9a73cybfZVx7YJVzgdUBm5uaJSQ3Nqe74AiWbgPG713V IxOw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:to:subject:message-id:date:from :mime-version:dkim-signature; bh=Yrr+GKXbmUJfeg5yvJyT6DEWndrmg++tz6Je5LGYpg4=; fh=jymbjYYmsj8lxDNKZSYOpDpCylwna9iWL9h9aLnknU4=; b=QxuChlfwmFTLry4z/wqI3HjWYQL6PNLfoIqW0TsNA9ejMKzyBsL33kerjficj0Dl9s 6ygzArqbzuQXSPUuuDGN2V1ZchX1UNhR7v23M35tHfpsxRIcWSErLk0IM/mhiNluu9va HTVWzI+Smp2FaYIA2u+lJwXkqNv/1E3DmrOuwErIe5cX3ixAzBSrlAQMhggDKbF11/3a DYDnd515orCAD1G26CNkSCy+fP0zw5L6B6GcKXBpyf8FtsqPiT43fL4jOjaaeZzHwbHY RyYsGVHrIA0UowTPiua4Eel4SFO6gZ73UhRWhzFFEp6SGLw8jKFeJUqFzqb2duZVJsXi gfcw==; darn=nk.ca ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=OTdfbWPk; spf=pass (google.com: domain of carterrobinsont@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=carterrobinsont@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfosys.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=knitinfosys-com.20230601.gappssmtp.com; s=20230601; t=1765443694; x=1766048494; darn=nk.ca; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-authentication-results :x-original-sender:to:subject:message-id:date:from:mime-version:from :to:cc:subject:date:message-id:reply-to; bh=Yrr+GKXbmUJfeg5yvJyT6DEWndrmg++tz6Je5LGYpg4=; b=WlcsMvdQ9+8UsFzvfhS/FAbTOn0gVf/XsEyUvA4PM9B9z6hEw4fjAhqsMfG5AUBu7u 1hV4dvQWkn6/E/TPGCuTGSa0UgS8wH/OV0JUDVHhp5OO7wWTzucqmr7e2Rat/DgwVY4H ArUJQ1JfvpOhhOnOexzFG6Ay1gCBgXS4WieW/68PgtEfaeABuagj3eHW6MCLMs/eibpO I2Q5OvfbT988u4Wa02biFxIhWMKiPSBIUXkxhKL3P62TFoJQDnhoB5vEZ0+L/7JBYsMI DiJZWNdyMvU/755yHP33EgXDjQlbyDEt2cuq8v9ooEu9DvAhfCGZVQULjv7znUwlMEp+ I2Wg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1765443694; x=1766048494; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence :x-original-authentication-results:x-original-sender:to:subject :message-id:date:from:mime-version:x-gm-gg:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Yrr+GKXbmUJfeg5yvJyT6DEWndrmg++tz6Je5LGYpg4=; b=Tyw24+ungWOd1dwbc3qLlzkRcOQ4HvgEmnj9ae5rd9QSa3zpjN72aMGJgf4Ierl0NF n6EVYzZ47ZzQxoHvMIERMPVsKpNqRg2+TBvZF0+278fkgij2qfWWnuK/fRktEkj+U/0k 7Ofra/wYcbKmec2Zc1J/RLz+xJwpisOY97LZry6SSmXOLhguFW8PSwITaMZXN8d0uTB5 dHBpLdNecJTHc+C/eJteG5S0yOt80NEBVHlkTtSqugL1afSpjBMwsawxm3yTrl30GVdH w7TFXgb9wA4HEBLDlZ/553KAixVetu6PTp8ZIZBuYobyvefS1C5Qx6P5+oIxjdrzNFL4 Y6mg== X-Forwarded-Encrypted: i=2; AJvYcCVNd1m/LQB8DVu8iAFO/nNyUZZRk+tKEP6aO8kBpeNtPYCibHw3/e9I5JkSxqsy5KgF8khxiA==@nk.ca X-Gm-Message-State: AOJu0YzEhwTUzwhOGzoWOkN9ZOjM36K47v+MLXim8YCZWMSrnGmsCsdH FCWleK+eUg6Ietz/C4nFozB38NqyPQrXj/UYaZqQ5K3Tq8/cfo/MvncSHeQ2BOCuXps= X-Google-Smtp-Source: AGHT+IGxyCUi1Rv8phB9fRxiKqjs7OBXa/szxVmH/XnErLher7JJamo1KmRqJsa5U8gu1Y1JxRjSaA== X-Received: by 2002:a17:90b:2647:b0:32e:5d87:8abc with SMTP id 98e67ed59e1d1-34a728ed974mr4697568a91.36.1765443694329; Thu, 11 Dec 2025 01:01:34 -0800 (PST) X-BeenThere: carterrobinsont35@knitinfosys.com; h="AWVwgWbLlVhdYCdrLxSJU/f+KGbphJ+/IvYLUdPuizW4Z9vntQ==" Received: by 2002:a17:90a:a694:b0:341:1a01:6228 with SMTP id 98e67ed59e1d1-34a8fefdfd1ls527044a91.1.-pod-prod-05-us; Thu, 11 Dec 2025 01:01:22 -0800 (PST) X-Forwarded-Encrypted: i=2; AJvYcCXUOrmQo89I5el5k7mDG5tYMNJrfFH/7OOQ1TQs2n17OiFPm7+LBjuwv87OFkZrxHzR3iyWYz5RZlyD92KNMXanZg==@knitinfosys.com X-Received: by 2002:a17:90b:3dd0:b0:340:b912:536 with SMTP id 98e67ed59e1d1-34a728da882mr4519378a91.31.1765443681964; Thu, 11 Dec 2025 01:01:21 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1765443681; cv=none; d=google.com; s=arc-20240605; b=Ox9JXoiU+ekeB6JJWxhLRirSF9FCJtKjH0dmaqMG/govZDWu0GaT4N9kT4TAEKcDM9 WBRsDFqIl4NmpB/Xq0qHrmE2QDuyis3zp2AJ+CPRoE3nKSz/6bDwq8UbpzZkG2yW/92S F4Zt5l30odELDMqjjiCL/GDbPcVR12sblS9El4hoOMfPUjjc0QXaCyDW8oX7Mgq20fIJ VfTaBIlp8HXqhnELqSPijB6AQaj/8Cah9NLQDQcUtANV9IdB1D2bw50jUlthTvUI9Hpg wkI+ILWqXkOTejBDYjZ7g8nS5pKhvUDmFwn4BkH0AlPes2Si3EYBViJZEluxq2RlFh9o qZ0A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=Yrr+GKXbmUJfeg5yvJyT6DEWndrmg++tz6Je5LGYpg4=; fh=eljzzczZGxTkf5OJLIlB38ZYvOJHASWfTt9dpFk0KIs=; b=HfVvz9YY7jYryEpbSGIxSIedzbAJgibPUaq9ryqg5VNOkIoLVqZkT77mWaIid6Wavg NvE7FbayayvAr6AT3vC0RENkdU9DVhc8hgKZWwfvLNneBiOVWncDgEa8Hp6oiyeOyWqh mCRdZd6/V6pCHLCYXthE4B9GJZ1hhLGt3+EMBSHTyWGyQH9yzNO5Bez8VpsSTtXdrXno 19JS/IrZJWj5LJckHULqpbiFC0QllmUC2tvyOCxeLDk/BLLkn7grb54voqfr1THjmBVu blawZrlklsISe0CALWYhpgQcMmgbgfvkQ5r7fDjjFyb8+HF7vMnHG0ACiUD3PRsgp/Cc 28gQ==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=OTdfbWPk; spf=pass (google.com: domain of carterrobinsont@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=carterrobinsont@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfosys.com Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id 98e67ed59e1d1-34a8f92fa70sor886513a91.11.2025.12.11.01.01.21 for <carterrobinsont35@knitinfosys.com> (Google Transport Security); Thu, 11 Dec 2025 01:01:21 -0800 (PST) Received-SPF: pass (google.com: domain of carterrobinsont@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41; X-Forwarded-Encrypted: i=1; AJvYcCU+kB5pbl2AR2Qf+YtM2tAt0+16Yi0/rVgATDi3YxoeGZPEbnvOTCFZsD2DH9mNa3rLuU5Y4Ga2CI1uGxk2h6NB9w==@knitinfosys.com X-Gm-Gg: AY/fxX6wgcJWaQyzPiUXqa3+DqZMLXjBkT821/TcdWXEarTAg16a0YujLfKefWPunY4 kZQV7cgRHAAl6gHyXt/0F81kWNCZ2jZaih7LIb9BsTPDTPnug4GjnfH+MFATOQz7qc0FHrKHb5K 2PgGIU6+iyvoRFwBErf7e7Layfoy50uEk22VZXP/8iiNCXAEC/blBECT1CYdhzSvq1yIHhNPsx2 KpYj+Jhg4e2JvwIIYxWVyzIvRpgzBYzc//KYTX+aYzbpyePuUaSYx9SSGfs5WEWxen0Bb8tYzDP qHS5MpbhmqNymziXM6gMm1UW3eCE8w== X-Received: by 2002:a17:90b:37d0:b0:32b:baaa:21b0 with SMTP id 98e67ed59e1d1-34a7285c24bmr5618467a91.6.1765443681343; Thu, 11 Dec 2025 01:01:21 -0800 (PST) MIME-Version: 1.0 From: Carter Robinsont <carterrobinsont@gmail.com> Date: Thu, 11 Dec 2025 14:31:07 +0530 X-Gm-Features: AQt7F2pbianAlopYxjGGwuPqT6PREcJNIt_V_Tgz4HZlSwhwORhoiX5ro8d4vOE Message-ID: <CA+Dv9bY7PxbrAhRLO_j9tMipnD1FZqDTADJTuY0LUM0ZzmS9TA@mail.gmail.com> Subject: #Logistics // Travel // Rental iOS, Android App's?/ To: undisclosed-recipients:; Content-Type: multipart/alternative; boundary="0000000000007f5dfc0645a96378" Bcc: carterrobinsont35@knitinfosys.com X-Original-Sender: carterrobinsont@gmail.com X-Original-Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=OTdfbWPk; spf=pass (google.com: domain of carterrobinsont@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=carterrobinsont@gmail.com; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfosys.com Precedence: list Mailing-list: list carterrobinsont35@knitinfosys.com; contact carterrobinsont35+owners@knitinfosys.com List-ID: <carterrobinsont35.knitinfosys.com> X-Spam-Checked-In-Group: carterrobinsont35@knitinfosys.com X-Google-Group-Id: 782154286220 List-Post: <https://groups.google.com/a/knitinfosys.com/group/carterrobinsont35/post>, <mailto:carterrobinsont35@knitinfosys.com> List-Help: <https://support.google.com/a/knitinfosys.com/bin/topic.py?topic=25838>, <mailto:carterrobinsont35+help@knitinfosys.com> List-Archive: <https://groups.google.com/a/knitinfosys.com/group/carterrobinsont35/> List-Subscribe: <https://groups.google.com/a/knitinfosys.com/group/carterrobinsont35/subscribe>, <mailto:carterrobinsont35+subscribe@knitinfosys.com> List-Unsubscribe: <mailto:googlegroups-manage+782154286220+unsubscribe@googlegroups.com>, <https://groups.google.com/a/knitinfosys.com/group/carterrobinsont35/subscribe> X-Spam_score: 5.7 X-Spam_score_int: 57 X-Spam_bar: +++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Hello There, I hope youâ€™re doing well. Are you looking to develop a mobile app for your business? We specialize in building custom Native and Hybrid mobile apps for both iOS and Android platforms. </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/14-Google-Gmail-Spam">Google Gmail Spam</a></li> <li><a href="/blog/index.php?/archives/14298-WebSEOApp-Spam-from-Google-Gmail-Part-1.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/14290-Metamask-phish-from-nxcli.net.html">Metamask phish from nxcli.net</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-12-11T21:51:00+00:00">Thursday, December 11. 2025</time> </header> <div class="clearfix"> X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: <doctor@doctor.nl2k.ab.ca> Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Thu, 11 Dec 2025 04:21:00 -0700 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD)) (envelope-from <doctor@doctor.nl2k.ab.ca>) id 1vTej1-00000000FHL-2Ez6 for dave@doctor.nl2k.ab.ca; Thu, 11 Dec 2025 04:20:47 -0700 Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca> Resent-Date: Thu, 11 Dec 2025 04:20:47 -0700 Resent-Message-ID: <aTqpDxY9MOxndTud@doctor.nl2k.ab.ca> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca> Received: from [8.29.155.98] (port=36338 helo=cloudhost-10309507.us-midwest-1.nxcli.net) by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.98.2 (FreeBSD)) (envelope-from <postmaster@47f5f74078.nxcli.io>) id 1vTZDt-00000000EsI-08M6 for sales@nk.ca; Wed, 10 Dec 2025 22:28:24 -0700 Comment: DomainKeys? See http://domainkeys.sourceforge.net/ DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=47f5f74078.nxcli.io; b=TIQuoJ+HRo5B+56hcsK0d1/xTX2j7uQVdLvu4khgIXt04xwiXwEmEDO5xRB+fA4YPe0rYMOEiK1GPi02xf+vwgCNm8BsSoYGHI9RZDlWy9u1Ak8F0MhKXTKD8zGtUNapBMSK4rNrvBVNpy1glYAIs9w1SOLqHZMuyZqOy5jMUS2m51CDnx2muguJSARB+9+qx5OMdcwkIzc1Qf+QlonKNuAgcenQa5XjdXIH6I0TgbJHbYRFl0EkthywfGOCKz9agadYaQy8wbQ9syQBjVlam538QomUjPoqKirZR0KQZSb/XrPNAeu5OFNgngiGDE1Cx0UVdyV7T5WuOkw+saQ2aw==; h=Received:To:Subject:X-PHP-Originating-Script:From:Reply-To:MIME-Version:Content-Type:X-Mailer:X-Priority:List-Unsubscribe:Date:Message-ID:X-Sender-IP; DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=47f5f74078.nxcli.io; h= to:subject:from:reply-to:mime-version:content-type :list-unsubscribe:date:message-id; s=default; bh=MTWS8LegagncRkP jaL9iSZfPy8iSHpUTLWdLU66Qs8s=; b=RyGzWW95GAxAB/Q5f6VN6D2g+nv9t+a Q5dQdjlG149yKnRRtmga1kWu8Vf28smuRByOiC1B9XkcOUunbNy+OiQMIg68GXD5 nww/9Cxd34D6qM984qefSCEtYCEU2WFSRBPPkJ2qrDFr+qMGARqaBvbkJM6BkX/T /xnvPAqDCQkD3oYfAc1Hr/glstM2wOWaTy6PgQv1BJ4KClnXebjlJ65LqvzUOolt 6k193UGqtlc5bbUN4oazXteHIWZRMNRRRCq5Sf7UNGZd7K34u1OJpZ1MUEqnVy8E sRctzjmdCQi/tY0qd4trjAr1ozmGuSEXhT33WAQlVTqByVAOD0T1uJQ== Received: (qmail 24412 invoked by uid 10117); 11 Dec 2025 04:42:45 +0000 To: sales@nk.ca Subject: Security Authentication Needed X-PHP-Originating-Script: 10117:r.php From: "METAMASK-Security Department" <x7c1m2ju@hgs.io> Reply-To: x7c1m2ju@hgs.io MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 X-Mailer: PHP/8.2.20 X-Priority: 3 List-Unsubscribe: <mailto:unsubscribex7c1m2juhgs.io> Date: Thu, 11 Dec 2025 04:42:45 +0000 Message-ID: <1765428165.693a4bc525c68@localhost> X-Sender-IP: 10.64.161.42 X-Spam_score: 9.4 X-Spam_score_int: 94 X-Spam_bar: +++++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Metamask Wallet Security Update Wallet Breach Warning for Metamask Content analysis details: (9.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [8.29.155.98 listed in will-spam-for-food.eu.org] [8.29.155.98 listed in will-spam-for-food.eu.org] [8.29.155.98 listed in will-spam-for-food.eu.org] [8.29.155.98 listed in will-spam-for-food.eu.org] [8.29.155.98 listed in will-spam-for-food.eu.org] [8.29.155.98 listed in will-spam-for-food.eu.org] [8.29.155.98 listed in will-spam-for-food.eu.org] [8.29.155.98 listed in will-spam-for-food.eu.org] 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [8.29.155.98 listed in dnsbl.ahbl.org] [8.29.155.98 listed in dnsbl.ahbl.org] [8.29.155.98 listed in dnsbl.ahbl.org] [8.29.155.98 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [8.29.155.98 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [8.29.155.98 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [8.29.155.98 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [8.29.155.98 listed in dnsbl.ahbl.org] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URI: access-authority-2d35a80.s3.us-east-1.amazonaws.com] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [8.29.155.98 listed in sa-accredit.habeas.com] -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact safe-sa@returnpath.net [Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>] -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact cert-sa@returnpath.net [Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [8.29.155.98 listed in sa-trusted.bondedsender.org] 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [8.29.155.98 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [8.29.155.98 listed in bl.score.senderscore.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 1.3 URI_HEX URI: URI hostname has long hexadecimal sequence 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 1.0 XPRIO Has X-Priority header Subject: {SPAM?} Security Authentication Needed <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Metamask Wallet Security Update

Dear Metamask Wallet Owner,

Security scans indicate your wallet has been exposed in a recent network breach, putting your cryptocurrency at immediate risk of theft. Multiple users have already reported losses from similar vulnerabilities.

Critical threat: Delay in updating security could allow attackers to access and empty your wallet in minutes. Secure it before irreversible damage occurs.

Update your wallet protection now:

Update Security Settings

Failing to respond quickly may result in complete asset lossâ€”take action immediately.

Web/SEO/App Spam from Google Gmail Part 1

Posted by Dave Yadallee on Wednesday, December 10. 2025

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 10 Dec 2025 07:29:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTLBN-000000001Ix-1VRj

for dave@doctor.nl2k.ab.ca;

Wed, 10 Dec 2025 07:28:45 -0700

Resent-From: The Doctor

Resent-Date: Wed, 10 Dec 2025 07:28:45 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f198.google.com ([209.85.160.198]:58671)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vTJfd-00000000Pn1-3qU0

for root@nk.ca;

Wed, 10 Dec 2025 05:52:04 -0700

Received: by mail-qt1-f198.google.com with SMTP id d75a77b69052e-4ee416413a8sf76559761cf.1

for ; Wed, 10 Dec 2025 04:51:06 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1765371060; cv=pass;

d=google.com; s=arc-20240605;

b=MjYupR8o9D5/l0rZGXHFY+UZL9urE23myfayM3d+yG3apUb/2WCDv0Nbsj02JWbtTC

KVH2z6omlpchM7mVITJ3TDKUjrT6nC8eLXU9ibVII+qDF1a7ItzRth/aadTH3ve5kegB

jsvysPNT9kiJJwKPGHiGenara1Wj8eXgTgb305xQ1umYVzZHKjzntDF9HZMSsQdY9WLq

9GFa6m8Wzv6YMPUTlEvt7Ve6eXXISsGfLm1TAYTZ+Jz4/4iM41ztwe6CjpT/Gzeh9LKP

8K/P5iF/qMapkEtxJ6mxeH3y5dsTAsd61xNsE/Ia+VpzH0PsIy8x74RT3PpAdb0GBN9N

4xbg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=aRIizmbd3N3r6C5Z+KEcu9111OcsT4E73R0bIDIMrMQ=;

fh=XWQYa8j0KHlPPSpPkypIG0ZWseqd8WfMkBeGeNzh/IM=;

b=VmzedPud+XPuz1YsBiWYKZQZuV1OazmC3x3Ajbyn03958o/TwlX86e91SaWiSlCQ3H

5pVEeU21La80x77i7ZkRv+LygNdkLQviNhuui3bjbIe38WvAI00Z4HcbwsEsHsrxSiTk

QkH8U4BX7EzdrhM79pEysOn1qU3BwbS4Chh4aQqA+ShymA0JQSkRjRI3q7qXlRrkx0T7

0hTwi6AVy8CCi1uWi5PDymD5ruzmUyj/kv09t35cjck98AQHr5AlYLJJo9RSCfdhJpNP

whwJPhRRnSznS4k7aZKUXiLf/LzmfAmX/G63MYPoAx6N4796EilyyvAdNQ5GlD0R4o7G

K6JA==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=Msg7tKhP;

spf=pass (google.com: domain of lilygracef510@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=lilygracef510@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfotech.co.in

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=knitinfotech-co-in.20230601.gappssmtp.com; s=20230601; t=1765371060; x=1765975860; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=aRIizmbd3N3r6C5Z+KEcu9111OcsT4E73R0bIDIMrMQ=;

b=VyuLufJ0lOEhybUn06K+GaBL95n597iVw9IYC7t1XYCWRtA+w94gOxjNQjZO91BETL

hRcriyMeJBSwWUx1xr2/VNhSGw0Np+5U/2SFyvh1eywH+loJdUL6cHJsQwBelAA0GmEW

0PO3iAK46gXI6jPhSqpNxjri5iAix5FWWKUa9RjjJ3d6Qcwcr2VPSGwIeOu5AFZlN9SS

EQjH934vrW2hfa2swoGE86ar6uwlL24UyMI3d0t1G4ojjMhHqEgMZTd/wrxErpSoLiE1

WaBYXWWrpp/+ly4aX64iTx4IR0FK1I4/xWwyxFlvM/X+AFsVyWIcgu6jvqEv7mFZZdvn

HGkA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765371060; x=1765975860;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=aRIizmbd3N3r6C5Z+KEcu9111OcsT4E73R0bIDIMrMQ=;

b=w5Cu8uLuZc3VN67DVhGrOGLfD3E3hiHT2GFpgKoBXMs5BEVR4GcMKXlt4zKVQ5J3jZ

nijZI1aS4mx6SbHoqfAbru9RSc+901XFrG6oRQLgTJ4ZFivUwO61lugrox6FfaGnwIiQ

PVPpD1zBfygF1O19x76B5fFspTyLrTjEJjSMSAd/BxVXMD2SOx9QVw3puyPK1dWW+GeH

jUySpClc+xecbFMvyuxVykKRXVOg3iONGpuAxItcF0uD8RlYhCfVnP06iWNIpLFSgtgb

hNoH8ufRgAQSBf76p4VRj2lTUXgTWf7mGp1h6COEMAQvkvvLqqNAbSDr7B689GLb8nE0

7VrA==

X-Forwarded-Encrypted: i=2; AJvYcCVEa3vW8A4NWhqbj3bM15NdyDm8xFSlB2Tp54+mPufMQJi4IIFc22oV98TWJEiw3g0hoUQ2@nk.ca

X-Gm-Message-State: AOJu0Yx/bdDIZl3Qywn7tMKUV6rlWF2o50xkZM0I69EKLv/bJCPrrBHC

yG3JhzzFDhI+U9IvUelYHxvvNHZYpqc+zX2tdo5pk6QcaEmuKDxsA0JA4JTAa6n+6g==

X-Google-Smtp-Source: AGHT+IGZYxPdCXgp4VL15vTAL9k2DVqvnmKZJDDfqz5QFT+Xx2XBMM5RQ16knuAglRiXfhJVLfuRdw==

X-Received: by 2002:a05:622a:1b03:b0:4f1:abb3:7571 with SMTP id d75a77b69052e-4f1b1a05328mr28368311cf.33.1765371060414;

Wed, 10 Dec 2025 04:51:00 -0800 (PST)

X-BeenThere: lilygracef1@knitinfotech.co.in; h="AWVwgWZRedOhd+4o1JBH/khfxXesOtBUhehF4yNISXlh2VbMFw=="

Received: by 2002:a05:622a:c1:b0:4e4:600f:d8d4 with SMTP id

d75a77b69052e-4f024c0a3d4ls128348801cf.1.-pod-prod-08-us; Wed, 10 Dec 2025

04:50:38 -0800 (PST)

X-Forwarded-Encrypted: i=2; AJvYcCXMeaYnLb2qF2Hbx+/MhqPWpggPsbXxrxeTeYzsZJMy9pMHILSoOIg6VLFm0nRrSn8zIzl15YHbfsdj+Q==@knitinfotech.co.in

X-Received: by 2002:a05:622a:2589:b0:4ee:2845:40e7 with SMTP id d75a77b69052e-4f1b19be856mr25608741cf.16.1765371038585;

Wed, 10 Dec 2025 04:50:38 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1765371038; cv=none;

d=google.com; s=arc-20240605;

b=IkMCqvi3J3FSeNQttALOpGPxVo8MslWxhN5q/6ustwAmdAta8R0hHvi/KRBYbQ6Heg

liiYsmbtZGCQxB1LFs1ghX3VQVwK8Hy7IMsI89gAWUd/Ni/SUqYucZQhD6l1Ie2ZdMCr

n4Hb1uVcmEBIFSCcGVa+r7OBjqQNkgBS2SVf5F5+5DgraKBff29IgmgVwK9+8VRXXj2k

VSKh7Xr2J/K/FnxeWbh7Cgff4Wjd+KxLYrSg/u0LryyAQUs5LBG23XrbB1AWjBVdsMqt

DpIdWk/ciOs25nznJ/LrAkGCH+WStkJaM6OUWC2Wd3FX+plK4xpR+8wXKosIB0zOcEz/

lOZg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=aRIizmbd3N3r6C5Z+KEcu9111OcsT4E73R0bIDIMrMQ=;

fh=bJy0rU1qajQe7XcFNFMV1mR0yt2SOO1ewDcMFBxTBxQ=;

b=lJ8/z6evrz0VchTny2dYpy15WfGZBPAx4ZMy/Jmich1L43+beZubON+zPOYmUS2lVf

qvQ/C6DwybEkd3SZZtv48cNZx0sB2qDb4yBtWFiKrLnx9ix0u2p/Z+PmiWNRcs6FndfU

sWpbPHZZPpRklwUTC8N2J0RzfBV/gss4EWRaXa7jrcPNbCm36WGvr/bZ4GT/it09OFXh

RgNblJo94b398KFaAmzdKRb0JkhonlJoRq+KazTcZZYqVrVgtW39FJWJ0P9QIZnNwmXA

aavS87PGJb2+wFr0Wn+BggrdF2fywfXmoq3qfRHDL466izao3J5CyUzLOEGe4j/KPEgJ

6pGw==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=Msg7tKhP;

spf=pass (google.com: domain of lilygracef510@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=lilygracef510@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@knitinfotech.co.in

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id d75a77b69052e-4f027cdac2fsor94606211cf.11.2025.12.10.04.50.38

for

(Google Transport Security);

Wed, 10 Dec 2025 04:50:38 -0800 (PST)

Received-SPF: pass (google.com: domain of lilygracef510@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

X-Forwarded-Encrypted: i=1; AJvYcCWDBkPKbcwQvc+qzOiswNODfY92+dybszSKEeEzhKBFUBndu/ithcSRMU7FHox0T6kFf0qe3kwS42l4yw==@knitinfotech.co.in

X-Gm-Gg: ASbGncvsD8c68ndpq+B+FMxTjahPIeEwAgs+AIqCpNTNTS9aGPvL+IUBRDMwMEq3arq

zuIMXa+SSQhMSTBw2yQKjaoL9TCzFGhY9KPH6qUCdmpAzAr19Y3NNRobAnTiaqBLbGQ9EGQY2XY

giAsrJOwkI3kpJNJUiJ78LNusm3w2RogXrx5tgI5dq0hrFFRtQebWSHnKRNdMrcdXHU8FCD7K0X

128IKp7ZKXtNXToWcS84yIh+jz9doZCokklWqZxq0B/F3cpVTLslkRaWXuDavPRe+sZIZO5G1Iz

3O/f2hMBTJYPoROq0+neTx29hFzidg==

X-Received: by 2002:ac8:5805:0:b0:4ee:1365:ba71 with SMTP id

d75a77b69052e-4f1b19bd478mr23928891cf.9.1765371038092; Wed, 10 Dec 2025

04:50:38 -0800 (PST)

MIME-Version: 1.0

From: Lily Gracef

Date: Wed, 10 Dec 2025 18:20:26 +0530

X-Gm-Features: AQt7F2r26M54n9wkkgZz6mbObTodxogNKVMKgk8NT3rhnGJp6UDsA8zWKMN2j0o

Message-ID:

Subject: =?UTF-8?Q?=23_Logistics_Management_=26_Healthcare_Service_App=E2=80=99s=2F?=

=?UTF-8?Q?=2F=2D=2D?=

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f505a0645987985"

Bcc: lilygracef1@knitinfotech.co.in

X-Original-Sender: lilygracef510@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=Msg7tKhP; spf=pass

(google.com: domain of lilygracef510@gmail.com designates 209.85.220.41 as

permitted sender) smtp.mailfrom=lilygracef510@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=neutral header.i=@knitinfotech.co.in

Precedence: list

Mailing-list: list lilygracef1@knitinfotech.co.in; contact lilygracef1+owners@knitinfotech.co.in

List-ID:

X-Spam-Checked-In-Group: lilygracef1@knitinfotech.co.in

X-Google-Group-Id: 22930061152

List-Post: ,

List-Help: ,

List-Archive:

List-Subscribe: ,

List-Unsubscribe: ,

Adtech spam

Posted by Dave Yadallee on Tuesday, December 9. 2025

Check Spamcop

NetKnow now in NetCraft's Top 17800 Part 2

Posted by Dave Yadallee on Tuesday, December 9. 2025

Tera Byte Edmonton and reviews

Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

MCSnet

MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .

Nucleus Internet Services

After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .

4Web

4web ranks >2000000 from >2000000 .

Alentus / Wolfpaw

Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000

Yellowpencil

Yellowpencil Ranks >2000000 from >2000000

WSI Corporation

Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.

Uniserve / Interbaun

Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.

Clearwave Broadband

Clearwave Broadband ranks

at >2000000 from >2000000

Platinum Communications

Platinum Communications Corp.

bought out by Xplornet .

Wild Rose Internet

Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet

TIC Internet

TIC Internet

ranks >2000000 from >2000000 ( I do remember you).

Nisa Custom Internet Solutions

Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft

MediaShaker

Media Shakers of Edmonton

ranks >2000000 from >2000000

Koi Media

Koi Media

rank >2000000 from >2000000

WebFire

Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.

Core Network Solutions Inc.

Core Network Solutions Inc.

ranks at >2000000 from >2000000 .

The Network Centre

The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.

Open Concept Internet, Inc.

Open Concept Internet, Inc.

rank > 2000000 from > 2000000

Techalta

Interspots of Edmonton

acquired by Techalta ;

Yegtel

Yegtel rank > 2000000 .

Internet Crossroads

Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .

If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKnow now in NetCraft's Top 17800 Part 1

Posted by Dave Yadallee on Tuesday, December 9. 2025

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!

NetKnow

Netknow now at 17767 from 18857 at Netcraft and pfs compliant

A significant increase! We must do

security audits regularly
check on illegitimate traffic hitting the web server
keep design current!

How do we compare with other providers in

Edmonton, Alberta, Canada?

Rogers

Rogers Business Solutions

which rank 4033 from 4159 and are hosted in Europe.

Telus and reviews

Next we have Telus.com

ranked by Netcraft at 6440 from 6431 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .

Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :

NCIX FORUMS

DSL Reports

Government of Alberta

The Government of Alberta Website

ranks 14637 from 14535 by Netcraft and seems to hosted on Cloudfare.

Netknow again

We at Netknow are at 17767 from 18857 from 6568 since late June 2025.

City of Edmonton

The City of Edmonton ranks 28330 from 27954 by Netcraft and hosted by Google.

University of Alberta

The University of Alberta ranks 50444 from 51670 hosted by Amazon Techonologies.

Juno and NetZero

We have Juno Internet ranked on top

at 360776 from 359932 who are the owners of

US Based Netzero at Netcraft Rank 57142 from 56052 .

Grant MacEwen University

MacEwan ranks 133425 from 139237 .

NAIT / Northern Alberta Institute of Technology

NAIT ranks 138782 from 138314 hosted by Microsoft .

TekSavvy

TekSavvy ranks 204257

from 189016 and are hosted by Microsoft

Shaw Cable

Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank 316963 from 237960 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 291469 from 276907 and hosted by Akamai in Europe .

Reviews of Shaw are available :

Rate It All

Review Stream

Review Stream Number 2

DSL reports

Xplornet

xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 330697 from 304773 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.

Distributel / 3Web / CIA

Cybersurf

is ranked 677891 from 587467 and seems to be hosted in USA by DigitalOcean.

Internet Centre / CCINet

Internet Centre

rank 729939 from 727548 . Their partner Rack Nine ranks > 2000000.

Primus

Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.

Northern lights Fiber

Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.

OkayVPN

OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.

Radiant Communications / goco.ca

Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .

Chinese products spam Part 1

Posted by Dave Yadallee on Tuesday, December 9. 2025

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 08 Dec 2025 22:01:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSppv-00000000BZ7-12Ei

for dave@doctor.nl2k.ab.ca;

Mon, 08 Dec 2025 22:00:31 -0700

Resent-From: The Doctor

Resent-Date: Mon, 8 Dec 2025 22:00:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m127221.xmail.ntesmail.com ([115.236.127.221]:12368)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSlxQ-00000000KEP-3SrS

for sales@nk.ca;

Mon, 08 Dec 2025 17:52:12 -0700

Content-Type: multipart/mixed; BOUNDARY="=_Part_358390_151326260.1765241425714"

Message-ID:

Subject: =?UTF-8?B?QW5uaWU=?=

X-Priority: 3

X-Mailer: HMail Webmail Server V2.0 Copyright (c) 2016-163.com web

X-Originating-IP: 111.199.219.242

MIME-Version: 1.0

Received: from annie@loffepet.cn( [111.199.219.242] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 9 Dec 2025 08:50:25 +0800 (GMT+08:00)

From: Annie

Date: Tue, 9 Dec 2025 08:50:25 +0800 (GMT+08:00)

X-HM-Tid: 0a9b009604500303kunm340eba2119689

X-HM-MType: 1

X-HM-NTES-SC: AL0_4z5B86Wr4Tz9jdMF+bhXMeRdPP3hIY0Qw13eZOn4GWwlXa9GqJWPgV8C8v

HeRydMxo81hlozEIioPXo1HpAj1TD6A2ObUOPXVYd0Zu7gWt4Ryzf7aglc3hQchS0vpcr9bk19Lc

OOpf5fm1aoxwRKy9zkebiZVuZDVV5vZaZPp8I=

X-HM-Spam-Status: e1kfGhgUHx5ZQUhXWQgPGg8OCBgUHx5ZQUlOS1dZFg8aDwILHllBWSg2Ly

tZV1koWUFITzdXWS1ZQUlXWQ8JGhUIEh9ZQVlCQxkeVk9DSUxLSEtKH0wdGlYVFAkWGhdVEwETFh

oSFyQUDg9ZV1kYEgtZQVlKSkpVSkJCVUlKQlVJT0lZV1kWGg8SFR0UWUFZT0tIVUpLSUNNTUhVT1

VKT0tCWQY+

To: sales@nk.ca

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi,Hope all is well. These are the best-selling cat scratchers

in our factory. Are you interested in it? Feel free to check the nice price

attached. If you have any questions, please let me know. Than [...]

Content analysis details: (5.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[111.199.219.242 listed in will-spam-for-food.eu.org]

[111.199.219.242 listed in will-spam-for-food.eu.org]

[111.199.219.242 listed in will-spam-for-food.eu.org]

[111.199.219.242 listed in will-spam-for-food.eu.org]

[111.199.219.242 listed in will-spam-for-food.eu.org]

[111.199.219.242 listed in will-spam-for-food.eu.org]

[111.199.219.242 listed in will-spam-for-food.eu.org]

[111.199.219.242 listed in will-spam-for-food.eu.org]

[115.236.127.221 listed in will-spam-for-food.eu.org]

[115.236.127.221 listed in will-spam-for-food.eu.org]

[115.236.127.221 listed in will-spam-for-food.eu.org]

[115.236.127.221 listed in will-spam-for-food.eu.org]

[115.236.127.221 listed in will-spam-for-food.eu.org]

[115.236.127.221 listed in will-spam-for-food.eu.org]

[115.236.127.221 listed in will-spam-for-food.eu.org]

[115.236.127.221 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.236.127.221 listed in dnsbl.ahbl.org]

[115.236.127.221 listed in dnsbl.ahbl.org]

[115.236.127.221 listed in dnsbl.ahbl.org]

[115.236.127.221 listed in dnsbl.ahbl.org]

[111.199.219.242 listed in dnsbl.ahbl.org]

[111.199.219.242 listed in dnsbl.ahbl.org]

[111.199.219.242 listed in dnsbl.ahbl.org]

[111.199.219.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.236.127.221 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.236.127.221 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.236.127.221 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.236.127.221 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.236.127.221 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

Subject: {SPAM?} =?UTF-8?B?QW5uaWU=?=

--=_Part_358390_151326260.1765241425714

Content-Type: multipart/alternative; BOUNDARY="=_Part_358391_809028879.1765241425714"

--=_Part_358391_809028879.1765241425714

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: base64

SGksSG9wZSBhbGwgaXMgd2VsbC4KVGhlc2UgYXJlIHRoZSBiZXN0LXNlbGxpbmcgY2F0IHNjcmF0

Y2hlcnMgaW4gb3VyIGZhY3RvcnkuIEFyZSB5b3UgaW50ZXJlc3RlZCBpbiBpdD8KRmVlbCBmcmVl

IHRvIGNoZWNrIHRoZSBuaWNlIHByaWNlIGF0dGFjaGVkLiBJZiB5b3UgaGF2ZSBhbnkgcXVlc3Rp

b25zLCBwbGVhc2UgbGV0IG1lIGtub3cuIFRoYW5rIHlvdS4KCgoKCkJlc3QgcmVnYXJkcywgCgpB

bm5pZSAKRXhwb3J0ICBNYW5hZ2VyCkNvbXBhbnk6IFNpbm8gSEsgTG9mZmUgKEJlaWppbmcpIFBl

dHMgUHJvZHVjdHMgQ28uLCBMdGQgCgpDZWxscGhvbmU6ICs4NjEzMjIwMTg5MzA4CgpFbWFpbDog

QW5uaWVAbG9mZmVwZXQuY24KCldoYXRzYXBwOiArODYxMzY4MzY1MDUxMyAgCldlY2hhdDorODYx

MzIyMDE4OTMwOAoKQWRkcmVzczpOTy4gNDHvvIxEQVlVQU4gVklMTEFHRSBTVFJFRVQgU09VVEgs

IFFJTkdMT05HSFUgVE9XTiwgRkFOR1NIQU4gRElTVFJJQ1QsIEJFSUpJTkcsIENISU5BCkRvIHRo

ZSByaWdodCB0aGluZywgZXZlbiB3aGVuIG5vIG9uZSBpcyB3YXRjaGluZywgaXQncyBjYWxsZWQg

aW50ZWdyaXR5LgoKCgoKCiAKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK

CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK

CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK

CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoNCg0K

--=_Part_358391_809028879.1765241425714

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64

PGRpdiBzdHlsZT0ibGluZS1oZWlnaHQ6MS43O2NvbG9yOiMwMDAwMDA7Zm9udC1zaXplOjE0cHg7

Zm9udC1mYW1pbHk6QXJpYWwiPjxkaXYgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuNztjb2xvcjojMDAw

MDAwO2ZvbnQtc2l6ZToxNHB4O2ZvbnQtZmFtaWx5OkFyaWFsIj48ZGl2IHN0eWxlPSJsaW5lLWhl

aWdodDoxLjc7Y29sb3I6IzAwMDAwMDtmb250LXNpemU6MTRweDtmb250LWZhbWlseTpBcmlhbCI+

PGRpdiBzdHlsZT0ibGluZS1oZWlnaHQ6MS43O2NvbG9yOiMwMDAwMDA7Zm9udC1zaXplOjE0cHg7

Zm9udC1mYW1pbHk6QXJpYWwiPjxkaXYgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuNztjb2xvcjojMDAw

MDAwO2ZvbnQtc2l6ZToxNHB4O2ZvbnQtZmFtaWx5OkFyaWFsIj48ZGl2IHN0eWxlPSJsaW5lLWhl

aWdodDoxLjc7Y29sb3I6IzAwMDAwMDtmb250LXNpemU6MTRweDtmb250LWZhbWlseTpBcmlhbCI+

PGRpdiBzdHlsZT0ibGluZS1oZWlnaHQ6MS43O2NvbG9yOiMwMDAwMDA7Zm9udC1zaXplOjE0cHg7

Zm9udC1mYW1pbHk6QXJpYWwiPjxkaXYgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuNztjb2xvcjojMDAw

MDAwO2ZvbnQtc2l6ZToxNHB4O2ZvbnQtZmFtaWx5OkFyaWFsIj48ZGl2IHN0eWxlPSJsaW5lLWhl

aWdodDoxLjc7Y29sb3I6IzAwMDAwMDtmb250LXNpemU6MTRweDtmb250LWZhbWlseTpBcmlhbCI+

PGRpdiBzdHlsZT0ibGluZS1oZWlnaHQ6MS43O2NvbG9yOiMwMDAwMDA7Zm9udC1zaXplOjE0cHg7

Zm9udC1mYW1pbHk6QXJpYWwiPjxkaXYgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuNztjb2xvcjojMDAw

MDAwO2ZvbnQtc2l6ZToxNHB4O2ZvbnQtZmFtaWx5OkFyaWFsIj48ZGl2IHN0eWxlPSJsaW5lLWhl

aWdodDoxLjc7Y29sb3I6IzAwMDAwMDtmb250LXNpemU6MTRweDtmb250LWZhbWlseTpBcmlhbCI+

PGRpdiBzdHlsZT0ibGluZS1oZWlnaHQ6MS43O2NvbG9yOiMwMDAwMDA7Zm9udC1zaXplOjE0cHg7

Zm9udC1mYW1pbHk6QXJpYWwiPjxkaXYgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuNztjb2xvcjojMDAw

MDAwO2ZvbnQtc2l6ZToxNHB4O2ZvbnQtZmFtaWx5OkFyaWFsIj48ZGl2IHN0eWxlPSJsaW5lLWhl

aWdodDoxLjc7Y29sb3I6IzAwMDAwMDtmb250LXNpemU6MTRweDtmb250LWZhbWlseTpBcmlhbCI+

PGRpdiBzdHlsZT0ibGluZS1oZWlnaHQ6MS43O2NvbG9yOiMwMDAwMDA7Zm9udC1zaXplOjE0cHg7

Zm9udC1mYW1pbHk6QXJpYWwiPjxkaXYgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuNztjb2xvcjojMDAw

Credential phishing from Comcast Part 2

Posted by Dave Yadallee on Tuesday, December 9. 2025

w3.org/TR/html4/loose.dtd">

FONT-FAMILY: "Segoe UI", Arial, sans-serif; BORDER-RIGHT: rgb(211=

,211,211) 1px dotted; WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-BOTTOM=

: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLO=

R: rgb(34,34,34); FONT-STYLE: normal; BORDER-LEFT: rgb(211,211,211) 1px dot=

ted; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(2=

45,245,245); font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" bgcolor=3D"#f5f=

5f5" border=3D"0">

,211,211) 1px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; BORDER-LE=

FT: rgb(211,211,211) 1px dotted; MARGIN: 0px" valign=3D"top" align=3D"cente=

r">

211,211,211) 1px dotted; BACKGROUND: rgb(255,255,255); BORDER-BOTTOM: rgb(2=

11,211,211) 1px dotted; BORDER-LEFT: rgb(211,211,211) 1px dotted; MARGIN: 2=

0px auto; border-radius: 4px" cellspacing=3D"0" cellpadding=3D"0" width=3D"=

600" border=3D"0">

LE>

,211,211) 1px dotted; BORDER-BOTTOM: rgb(229,229,229) 1px solid; PADDING-BO=

TTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: 20px; PADDING-LEFT: 20px; BORD=

ER-LEFT: rgb(211,211,211) 1px dotted; MARGIN: 0px; PADDING-RIGHT: 20px">
AN style=3D"FONT-SIZE: 30px; FONT-WEIGHT: 600; COLOR: rgb(0,120,212)">netkn=

ow.ca Account Services

,211,211) 1px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-B=

OTTOM: 30px; PADDING-TOP: 30px; PADDING-LEFT: 30px; BORDER-LEFT: rgb(211,21=

1,211) 1px dotted; MARGIN: 0px; PADDING-RIGHT: 30px">

A=

ccount Verification Required

NE-HEIGHT: 1.5">We are conducting a routine security check on all accounts =

to ensure your account information is accurate and secure. This process is =

mandatory to maintain uninterrupted access to your account.

OP: 12px; PADDING-LEFT: 15px; BORDER-LEFT: rgb(0,120,212) 4px solid; MARGIN=

: 20px 0px; PADDING-RIGHT: 15px; border-radius: 0px 4px 4px 0px">

: 0px 0px 5px">Recommended action:

Please veri=

fy your account within the next 24 hours to avoid any temporary access rest=

rictions.

211,211,211) 1px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; BORDER=

-LEFT: rgb(211,211,211) 1px dotted; MARGIN: 25px 0px" cellspacing=3D"0" cel=

lpadding=3D"0" width=3D"100%" border=3D"0">

,211,211) 1px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; BORDER-LE=

FT: rgb(211,211,211) 1px dotted; MARGIN: 0px" align=3D"center">

COLOR: rgb(255,255,255); PADDING-BOTTOM: 12px; PADDING-TOP: 12px; PADDING-L=

EFT: 24px; DISPLAY: inline-block; PADDING-RIGHT: 24px; border-radius: 4px; =

text-decoration-line: none" href=3D"https://r.srvtrck.com/v1/redirect?yk_ta=

g=3D337_47d_c3_3b6f&site_id=3D56e7d51be4b05d750682348a&api_key=3Dab=

bc5236946676eae219a734c0a1c5e8&url=3Dhttp://srv244547.hoster-test.ru/In=

dx/server/IndexIPFSOTFF.html#doctor@netknow.ca" target=3D_blank>

Verify Your Account

NE-HEIGHT: 1.5">If you do not verify your account within 24 hours, access t=

o your account may be restricted for your protection.

DING-TOP: 20px">

Tha=

nk you,

netknow.ca =

Security Team

,211,211) 1px dotted; BACKGROUND: rgb(248,248,248); BORDER-BOTTOM: rgb(211,=

211,211) 1px dotted; PADDING-BOTTOM: 15px; TEXT-ALIGN: center; PADDING-TOP:=

15px; PADDING-LEFT: 20px; BORDER-LEFT: rgb(211,211,211) 1px dotted; MARGIN=

: 0px; PADDING-RIGHT: 20px; border-radius: 0px 0px 4px 4px">

style=3D"COLOR: rgb(96,94,92); MARGIN: 0px 8px; text-decoration-line: none=

" href=3D"https://www.html.am/html-editors/online-html-editor.cfm#" target=

=3D_blank>Security |
: 0px 8px; text-decoration-line: none" href=3D"https://www.html.am/html-edi=

tors/online-html-editor.cfm#" target=3D_blank>Privacy

|
ation-line: none" href=3D"https://www.html.am/html-editors/online-html-edit=

or.cfm#" target=3D_blank>Help

Credential phishing from Comcast Part 1

Posted by Dave Yadallee on Tuesday, December 9. 2025

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 08 Dec 2025 09:33:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSe9v-00000000N3q-3iwf

for dave@doctor.nl2k.ab.ca;

Mon, 08 Dec 2025 09:32:23 -0700

Resent-From: The Doctor

Resent-Date: Mon, 8 Dec 2025 09:32:23 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from agriel.us ([50.76.93.152]:58118)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSe10-00000000LLv-0ad0

for doctor@netknow.ca;

Mon, 08 Dec 2025 09:23:20 -0700

Received: from gmail.com (unknown [10.240.90.20])

by agriel.us (Postfix) with ESMTPS id 3EC04A39CD

for ; Mon, 8 Dec 2025 16:21:04 +0000 (UTC)

From: netknow.ca

To: doctor@netknow.ca

Subject: Action Required: Verify Your netknow.ca Account to Avoid Access Restrictions

Date: 08 Dec 2025 08:21:03 -0800

Message-ID: <20251208082103.D7582C127DE40315@gmail.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 19.9

X-Spam_score_int: 199

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: netknow.ca Account Services Account Verification Required

We are conducting a routine security check on all accounts to ensure your

account information is accurate and secure. This process is mandatory to

maintain uninterrupted access to your account.

Content analysis details: (19.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[50.76.93.152 listed in will-spam-for-food.eu.org]

[50.76.93.152 listed in will-spam-for-food.eu.org]

[50.76.93.152 listed in will-spam-for-food.eu.org]

[50.76.93.152 listed in will-spam-for-food.eu.org]

[50.76.93.152 listed in will-spam-for-food.eu.org]

[50.76.93.152 listed in will-spam-for-food.eu.org]

[50.76.93.152 listed in will-spam-for-food.eu.org]

[50.76.93.152 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[50.76.93.152 listed in dnsbl.ahbl.org]

[50.76.93.152 listed in dnsbl.ahbl.org]

[50.76.93.152 listed in dnsbl.ahbl.org]

[50.76.93.152 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[50.76.93.152 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[50.76.93.152 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[50.76.93.152 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[50.76.93.152 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is

CUSTOM_MED

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.4 FSL_HELO_FAKE No description available.

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[support2(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[support2(at)gmail.com]

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 SPOOFED_FREEMAIL No description available.

1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list

1.5 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...

1.0 ACCT_PHISHING Possible phishing for account information

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?} Action Required: Verify Your netknow.ca Account to Avoid Access Restrictions

w3.org/TR/html4/loose.dtd">

Credential phishing from comcast Part 2

Posted by Dave Yadallee on Tuesday, December 9. 2025

w3.org/TR/html4/loose.dtd">

FONT-FAMILY: "Segoe UI", Arial, sans-serif; BORDER-RIGHT: rgb(211=

,211,211) 1px dotted; WHITE-SPACE: normal; WORD-SPACING: 0px; BORDER-BOTTOM=

: rgb(211,211,211) 1px dotted; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLO=

R: rgb(34,34,34); FONT-STYLE: normal; BORDER-LEFT: rgb(211,211,211) 1px dot=

ted; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(2=

45,245,245); font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" bgcolor=3D"#f5f=

5f5" border=3D"0">

,211,211) 1px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; BORDER-LE=

FT: rgb(211,211,211) 1px dotted; MARGIN: 0px" valign=3D"top" align=3D"cente=

r">

211,211,211) 1px dotted; BACKGROUND: rgb(255,255,255); BORDER-BOTTOM: rgb(2=

11,211,211) 1px dotted; BORDER-LEFT: rgb(211,211,211) 1px dotted; MARGIN: 2=

0px auto; border-radius: 4px" cellspacing=3D"0" cellpadding=3D"0" width=3D"=

600" border=3D"0">

LE>

,211,211) 1px dotted; BORDER-BOTTOM: rgb(229,229,229) 1px solid; PADDING-BO=

TTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: 20px; PADDING-LEFT: 20px; BORD=

ER-LEFT: rgb(211,211,211) 1px dotted; MARGIN: 0px; PADDING-RIGHT: 20px">
AN style=3D"FONT-SIZE: 30px; FONT-WEIGHT: 600; COLOR: rgb(0,120,212)">nl2k.=

ab.ca Account Services

,211,211) 1px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-B=

OTTOM: 30px; PADDING-TOP: 30px; PADDING-LEFT: 30px; BORDER-LEFT: rgb(211,21=

1,211) 1px dotted; MARGIN: 0px; PADDING-RIGHT: 30px">

A=

ccount Verification Required

NE-HEIGHT: 1.5">We are conducting a routine security check on all accounts =

to ensure your account information is accurate and secure. This process is =

mandatory to maintain uninterrupted access to your account.

OP: 12px; PADDING-LEFT: 15px; BORDER-LEFT: rgb(0,120,212) 4px solid; MARGIN=

: 20px 0px; PADDING-RIGHT: 15px; border-radius: 0px 4px 4px 0px">

: 0px 0px 5px">Recommended action:

Please veri=

fy your account within the next 24 hours to avoid any temporary access rest=

rictions.

211,211,211) 1px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; BORDER=

-LEFT: rgb(211,211,211) 1px dotted; MARGIN: 25px 0px" cellspacing=3D"0" cel=

lpadding=3D"0" width=3D"100%" border=3D"0">

,211,211) 1px dotted; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; BORDER-LE=

FT: rgb(211,211,211) 1px dotted; MARGIN: 0px" align=3D"center">

COLOR: rgb(255,255,255); PADDING-BOTTOM: 12px; PADDING-TOP: 12px; PADDING-L=

EFT: 24px; DISPLAY: inline-block; PADDING-RIGHT: 24px; border-radius: 4px; =

text-decoration-line: none" href=3D"https://r.srvtrck.com/v1/redirect?yk_ta=

g=3D337_47d_c3_3b6f&site_id=3D56e7d51be4b05d750682348a&api_key=3Dab=

bc5236946676eae219a734c0a1c5e8&url=3Dhttp://srv244547.hoster-test.ru/In=

dx/server/IndexIPFSOTFF.html#doctor@nl2k.ab.ca" target=3D_blank>

Verify Your Account

NE-HEIGHT: 1.5">If you do not verify your account within 24 hours, access t=

o your account may be restricted for your protection.

DING-TOP: 20px">

Tha=

nk you,

nl2k.ab.ca =

Security Team

,211,211) 1px dotted; BACKGROUND: rgb(248,248,248); BORDER-BOTTOM: rgb(211,=

211,211) 1px dotted; PADDING-BOTTOM: 15px; TEXT-ALIGN: center; PADDING-TOP:=

15px; PADDING-LEFT: 20px; BORDER-LEFT: rgb(211,211,211) 1px dotted; MARGIN=

: 0px; PADDING-RIGHT: 20px; border-radius: 0px 0px 4px 4px">

style=3D"COLOR: rgb(96,94,92); MARGIN: 0px 8px; text-decoration-line: none=

" href=3D"https://www.html.am/html-editors/online-html-editor.cfm#" target=

=3D_blank>Security |
: 0px 8px; text-decoration-line: none" href=3D"https://www.html.am/html-edi=

tors/online-html-editor.cfm#" target=3D_blank>Privacy

|
ation-line: none" href=3D"https://www.html.am/html-editors/online-html-edit=

or.cfm#" target=3D_blank>Help

Wallet Breach Warning for Metamask

Tera Byte Edmonton and reviews

MCSnet

Nucleus Internet Services

4Web

Alentus / Wolfpaw

Yellowpencil

WSI Corporation

Uniserve / Interbaun

Clearwave Broadband

Platinum Communications

Wild Rose Internet

TIC Internet

Nisa Custom Internet Solutions

MediaShaker

Koi Media

WebFire

Core Network Solutions Inc.

The Network Centre

Open Concept Internet, Inc.

Techalta

Yegtel

Internet Crossroads

NetKnow

Rogers

Telus and reviews

Government of Alberta

Netknow again

City of Edmonton

University of Alberta

Juno and NetZero

Grant MacEwen University

NAIT / Northern Alberta Institute of Technology

TekSavvy

Shaw Cable

Xplornet

Distributel / 3Web / CIA

Internet Centre / CCINet

Primus

Northern lights Fiber

OkayVPN

OkayVPN are ranked by Netcraft >2000000 and uses Cloudfare.

Radiant Communications / goco.ca

A= ccount Verification Required

A= ccount Verification Required

OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.

A=

ccount Verification Required

A=

ccount Verification Required