Intuit Quickbooks phishing

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Sep 2026 16:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2yfr-000000003fh-0SAg

for dave@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 16:15:47 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Sep 2026 16:15:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e234-101.smtp-out.ap-northeast-1.amazonses.com ([23.251.234.101]:48579)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <010601a073125265-9d945dad-87e1-4bb2-9bc4-6dc4dae1bd39-000000@ap-northeast-1.amazonses.com>)

id 1x2wCN-000000009ef-3l8q

for doctor@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 13:37:20 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=irwgcp3kvsy6ppgf6foc3btyrwrl54qc; d=bioagechecker.com;

t=1788636975;

h=Content-Type:MIME-Version:From:To:Subject:Message-ID:Date;

bh=qhnWbIGFEZ1VIMcLsPHKz6SOWpBLIXTaG7KvqQiqkY0=;

b=JpQ2ScAuBwBlHbp5F0/6T+qp2N1BFadLHE0QEkV0XHs/2OFk6kiUmEuMPG94di7k

z7W9+4uUXE2fyssA6wNvIkAYily2evtCbXuO9CYZnF02rAZTsTb9HbVv9R4h5iNYwR3

dNPkivP+GY4dW2TSDUzPMu+WJKyvHHtSqDCThnMHuv4n9clKZ7RuCM+36ELfNPbsz6j

GG0J6/vxbj15ucQn1jNBe2Zami1up14yTI43JWua2qkms5L+CHPm8TkMCBeWeWj+eow

9gNod+EXxayC+emTV1t7Vm7VKhpviqouBvxQmGD1p3Eq9rYz7VImGtZqIHGNilIvsaR

YuEvq4+qiA==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=zh4gjftm6etwoq6afzugpky45synznly; d=amazonses.com; t=1788636975;

h=Content-Type:MIME-Version:From:To:Subject:Message-ID:Date:Feedback-ID;

bh=qhnWbIGFEZ1VIMcLsPHKz6SOWpBLIXTaG7KvqQiqkY0=;

b=Xq3OF5cjILag3UaKQf8+Uso3JMAcx/iqYgdKCgyXkX7guYSPn/fmQe4PErldl/DO

HMB9VnkDECnprCc+iw0Vm85yNRJQ2Q3Sz6FDRwS2wMFSZc0PS7JWcanay0WS5zzlYqz

JOrefn2scYa85qqVnU8j3UzKnStKkux9uZc2mwsU=

Content-Type: multipart/mixed; boundary="===============0022309283786652747=="

MIME-Version: 1.0

From: Quickbooks Support Team

To: doctor@doctor.nl2k.ab.ca

Subject: Vendor Payment - Remittance Advice!

Message-ID: <010601a073125265-9d945dad-87e1-4bb2-9bc4-6dc4dae1bd39-000000@ap-northeast-1.amazonses.com>

Date: Sat, 5 Sep 2026 19:36:15 +0000

Feedback-ID: ::1.ap-northeast-1.PR5HfIy1dbmUbzxeE/WV4vvosxNOHwnuwbR+Wbv7lgM=:AmazonSES

X-SES-Outgoing: 2026.09.05-23.251.234.101

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Vendor Payment - Remittance Advice Invoice Payment Sent Via:

QuickBooks Bill Pay Services Deposit Amount: $3,200 To be delivered by: Bank

Transfer EFT (Direct Deposit) Delivery ETA: Saturdaay, september 5th, 2026





Content analysis details: (6.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

[23.251.234.101 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.234.101 listed in dnsbl.ahbl.org]

[23.251.234.101 listed in dnsbl.ahbl.org]

[23.251.234.101 listed in dnsbl.ahbl.org]

[23.251.234.101 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.234.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.234.101 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.234.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.234.101 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.234.101 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[23.251.234.101 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Vendor Payment - Remittance Advice!



Vendor Payment - Remittance Advice





Invoice Payment Sent Via: QuickBooks Bill Pay Services

Deposit Amount: $3,200

To be delivered by: Bank Transfer EFT (Direct Deposit)

Delivery ETA: Saturdaay, september 5th, 2026





CONFIRM YOUR Details



© 2024 Intuit Inc.. Trademarks.

2800 E. Commerce Center Place, Tucson, AZ 85708

42681-1



powering



prosperity

Dragonfly Express phishing

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Sep 2026 08:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2r7Z-00000000Be5-2hmT

for dave@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 08:11:53 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Sep 2026 08:11:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.ace-hosting.com ([174.138.172.98]:45644)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2qzY-00000000Pkz-2YGb

for sales@nk.ca;

Sat, 05 Sep 2026 08:03:58 -0600

Received: from [196.64.125.203] (port=59514 helo=[127.0.0.1])

by server.ace-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.99.5)

(envelope-from )

id 1x2qyg-000000004qk-0tRb

for sales@nk.ca;

Sat, 05 Sep 2026 21:02:40 +0700

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <49a46b01-3313-a051-78a5-384c03b5d91a@ppsolution.com>

Content-Transfer-Encoding: quoted-printable

Date: Sat, 05 Sep 2026 14:02:38 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.ace-hosting.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - ppsolution.com

X-Get-Message-Sender-Via: server.ace-hosting.com: authenticated_id: jayanto@ppsolution.com

X-Authenticated-Sender: server.ace-hosting.com: jayanto@ppsolution.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[174.138.172.98 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[174.138.172.98 listed in wl.mailspike.net]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[174.138.172.98 listed in bb.barracudacentral.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[196.64.125.203 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.64.125.203 listed in dnsbl.ahbl.org]

[196.64.125.203 listed in dnsbl.ahbl.org]

[196.64.125.203 listed in dnsbl.ahbl.org]

[196.64.125.203 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.64.125.203 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.64.125.203 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.64.125.203 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.64.125.203 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-service.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Business proposal spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dve@doctor.nl2k.ab.ca

Delivery-date: Sat, 05 Sep 2026 07:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2qnj-00000000FrJ-09vg

for dve@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 07:51:23 -0600

Resent-From: The Doctor

Resent-Date: Sat, 5 Sep 2026 07:51:22 -0600

Resent-Message-ID:

Resent-To: dve@doctor.nl2k.ab.ca

Received: from mail.electryconsulting.eu ([217.160.39.209]:39671)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2mWm-00000000IgP-26IV

for doctor@doctor.nl2k.ab.ca;

Sat, 05 Sep 2026 03:17:45 -0600

Received: from mail.electryconsulting.eu (localhost.localdomain [127.0.0.1])

by mail.electryconsulting.eu (Postfix) with ESMTP id AC33493AF303;

Sat, 5 Sep 2026 07:49:25 +0200 (CEST)

X-Spam-Flag: NO

X-Spam-Score: 4.241

X-Spam-Level: ****

X-Spam-Status: No, score=4.241 tagged_above=-9999 required=5

tests=[ALL_TRUSTED=-1, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1,

DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_REPLYTO=2.095,

FREEMAIL_REPLYTO_END_DIGIT=0.25, MISSING_MID=0.497, SPF_PASS=-0.001,

URIBL_DBL_ABUSE_SPAM=2, URIBL_DBL_SPAM=2.5] autolearn=no autolearn_force=no

Authentication-Results: mail.electryconsulting.eu (amavis) (amavis);

dkim=pass (2048-bit key) header.d=electryconsulting.eu

Received: from mail.electryconsulting.eu ([127.0.0.1])

by mail.electryconsulting.eu (mail.electryconsulting.eu [127.0.0.1]) (amavis, port 10024)

with ESMTP id P7HijiYDbMVj; Sat, 5 Sep 2026 07:49:24 +0200 (CEST)

Received: from [103.168.66.231] (unknown [103.168.66.231])

by mail.electryconsulting.eu (Postfix) with ESMTPA id 046A593AF29E;

Sat, 5 Sep 2026 07:49:07 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=electryconsulting.eu; s=default; t=1788587357;

bh=m8mkmZ0H8Xe3v8mCb2yTzxioWz8enPZGkQowVW+4nBA=; h=Subject:To:From;

b=eNYsi/V9e1NDmwLGS7GJZhhziN5Hu1C3VA5HjX4FRaiOWVfT/GIdeO8HuDuBw4QHj

8Fll6wODaIsE1stCpjPiHe/o+43nb2DkWaTqnBF9vsKQbflzhFFPWlLJosVL//IHnN

olRnFXzuiAgT6MEXYlOSoB5kuAKWAVJlgHVS5Zm1K8evwmDuYDc8Xu8E2rYPcq0g+p

Jg+4sQC+vs4DFA6qfFQ/uM5xCztxQT62yUSd4Pk4xvjOtNnBWfwW7fblXJjUY33AGG

s60UORMPQZaLw98/tkC2F2V0+51TgfmU4x+mV96pEAbkNcK2K0PnpSdDjr28aTOBxv

zjMKra46d2FlQ==

Authentication-Results: mail.electryconsulting.eu;

spf=pass (sender IP is 103.168.66.231) smtp.mailfrom=madridnorte@electryconsulting.eu smtp.helo=[103.168.66.231]

Received-SPF: pass (mail.electryconsulting.eu: connection is authenticated)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Proposal

To: Recipients

From: "Sun Yu"

Date: Fri, 04 Sep 2026 22:48:55 -0700

Reply-To: yus413288@gmail.com

X-PPP-Message-ID:

<178858735478.1467185.12297057947186714579@mail.electryconsulting.eu>

X-PPP-Vhost: electryconsulting.eu

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greeting, I have a business proposal to share with you. Please

get back for more details. Thank you, Sun Yu



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[103.168.66.231 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

[217.160.39.209 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

[217.160.39.209 listed in dnsbl.ahbl.org]

[217.160.39.209 listed in dnsbl.ahbl.org]

[217.160.39.209 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

[103.168.66.231 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[217.160.39.209 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.168.66.231 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.168.66.231 listed in sbl-xbl.spamhaus.org]

[103.168.66.231 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: electryconsulting.eu]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[yus413288(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[217.160.39.209 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[217.160.39.209 listed in bl.score.senderscore.com]

Subject: {SPAM?} Proposal



Greeting,

=



I have a business proposal to share with you. Please get back for =



more details.

=



Thank you,

Sun Yu

Loan spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 21:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2gqI-00000000OEt-2lDW

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 21:13:22 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 21:13:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f181.google.com ([209.85.215.181]:48234)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2aRs-00000000JoC-0GUy

for sales@nk.ca;

Fri, 04 Sep 2026 14:23:56 -0600

Received: by mail-pg1-f181.google.com with SMTP id 41be03b00d2f7-ca97d139d5fso1344726a12.0

for ; Fri, 04 Sep 2026 13:22:56 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1788553371; x=1789158171; darn=nk.ca;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=G7cXAJwJwF3QvSdClCNEc87D9/73aYa/odXArSZ+0zw=;

b=nvSejqY7igrRsRyldnlj7Ufnkat7OwE4eYxjHC+2UILwEL3rNUHZFi6Cza+Q0wlv1o

CiVg1NFkjRuU0U/F5ddvDHe1BtiBgUpOfNJ3FZ90q1upG7UqDoLsGvhi+VkPYS58L8EK

ZLYUywtho8YxjW+x2FqlYubLOn7n5slu/duRgzcF7cnmmYWPcXkfvLFBQF2IRcMKxwni

kVNcjKHGyIn7+NncyFhwZwucnEZwDgFelVih0ufLqRylf1iX9+C549qeB1l7eXbakr4g

HGRQ6iyBijRfdjct7SLXu1aNVwIOkn8b+TgZBVHqWQvpbNwPJxKyyRfpER0hq9918sEy

RURA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788553371; x=1789158171;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=G7cXAJwJwF3QvSdClCNEc87D9/73aYa/odXArSZ+0zw=;

b=caNMd3dEUwpajgd4qQFsHmboyKcEocdgJf1A0LINPopvx+GWvUcNnfDKVqtChTaDZl

k9VcdiX8n3w26uNUV/ohwHrVomTd5XfZQG6//ziMCAAEyGjTjl5kJg6I2pVygJ4qUrdh

4J4nki+4hsGblt24vW0Ld/9eElFfUk1XbcYk/QKo3rcDz7/0ey8fZ0WaKZEtad7TxKMN

nRrMq1tBTxvEcDTPOYfuRPVnrOTrFuGvriR7/zLOmRePew0vSPBDW1Pljh/OaC2Csh+k

WfRawLnbExa0zOtWEuAV8E1MjaCzlcniio3o3H/G5QFXpl5XA56aXK4vnXyLgaa1wWZw

oG4w==

X-Gm-Message-State: AFuF++lzZKPZPWDvT/M5SKo4AvL6ULAqMbEyDG4xlasKNW3bV3ThhlAb

IbF+HZtsgx5KPUhQtK8K6FP+Y6NnXgFONNBg2lN/4aIS5KFx+ogC68Yeg1CEiBwiY5VC3mnaKm2

C8+aZuVc=

X-Gm-Gg: AYBFou047Zc2p4NX/9dD25C7qZYneRguNiM5PZQiLwRTBzglw+7l/PgJcu8AQfapxym

7jE1cBQGgMYjqxbCEQvUwvxnGrQknwDL8GWzSTA0GK7NJIRFvPSuaSagUCJCAyBjGgAyg6yw6jg

Zqa98yQ4sJPI7roeD+vwwt9nfy1vJ3wDDNdFXzsmVAjB8KWKHUUh0Tu8TvWBaIPza1AIaGqVLwP

K2oXBeJmUeB3gm+KPNVWrUSLq7ZGUlR7u3XF7WP20ZXhZfozXRh32I5U+lH/FCOf0dxdF8CEdiw

b4HBozRh9NqnJvrvj6NUMawqcVRD6WZJvux62LbgWCUsdBf1i04VS5HrXM22DXLkdC7v2vs+Gxu

/eC8s4UjG5upCOyfA8OdZ9pGS6TogfHSnROOCW66EAJMLVpNS5ISJHLaLBQfDrgdc99x9CuTHuq

TT4AtxPJjKqOSh9E+yl/8V1wyR9fo21kacTDrQiVh0nDFOjg2kubhVo4gLwJDqJuRSU36cju+bG

I26/Ff8A1jhAVEbTkg9MyifXwCxAV2Q20DQbTn/Rog4cJCLEDNA+W+ySWJ3

X-Received: by 2002:a05:6a21:48a:b0:3d3:b00b:50fc with SMTP id adf61e73a8af0-3da3a19faa1mr12175092637.28.1788553370216;

Fri, 04 Sep 2026 13:22:50 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-a0.close.com. [52.11.177.187])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cc455405d08sm1325240a12.7.2026.09.04.13.22.47

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 04 Sep 2026 13:22:48 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============7330372755335793445=="

MIME-Version: 1.0

Subject: Re: Kesef Marketing | Smarter Access to Business Loans

From: =?utf-8?q?Anna_Kesef_Marketing?=

To: =?utf-8?q?Gurkirat_Wirring?=

Date: Fri, 04 Sep 2026 20:22:47 +0000

Message-ID: <178855336715.6.587601229347213138@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_CcpWWV00Vvsk4KLXYWnh6YW9IZaFkDch2MuRAOwfTAx

References: <178646337461.7.1240611996543057914@smtpgw.close.com> <178674436134.7.15043001032031211174@smtpgw.close.com> <178717590920.7.11514546446340323981@smtpgw.close.com> <178717590920.7.6698188364795184228@smtpgw.close.com> <178777788923.8.15758713330881978271@smtpgw.close.com> <178777788923.8.13100416135937699766@smtpgw.close.com> <178795412146.7.11915679251012219310@smtpgw.close.com> <178795412146.7.8559586588892536181@smtpgw.close.com> <178828054073.6.349771406056107870@smtpgw.close.com> <178828054073.6.15493945752429429674@smtpgw.close.com>

In-Reply-To: <178828054073.6.349771406056107870@smtpgw.close.com>

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click



Hi Gurkirat,



This is Anna Sanchez from Kesef Marketing.



Just checking in again.



If you're still interested, you can start here:

CLICK HERE TO START YOUR APPLICATION



Best regards,







Anna Sanchez

SALES MANAGER



anna@kesefmarketing.com

+1 (873) 502-8068

____________________________



To stop receiving these emails, click here.







On Sep 01, 2026, at 10:35 AM, Anna Kesef Marketing wrote:

> Hi Gurkirat,

>

> This is Anna Sanchez from Kesef Marketing.

>

> We’ve kept your request open in case you still need funding.

>

> You can review your options here:

> CLICK HERE TO START YOUR APPLICATION

>

> Best regards,

>

>

>

> Anna Sanchez

> SALES MANAGER

>

> anna@kesefmarketing.com

> +1 (873) 502-8068

> ____________________________

>

> To stop receiving these emails, click here.

>

>

>

> On Aug 28, 2026, at 03:55 PM, Anna Kesef Marketing wrote:

>> Hi Gurkirat,

>>

>> This is Anna Sanchez from Kesef Marketing.

>>

>> I just wanted to check one last time before we move your file forward.

>>

>> If you'd like to proceed, you can start here:

>> CLICK HERE TO START YOUR APPLICATION

>>

>> If you need any assistance or have questions, feel free to reach out.

>>

>> Best regards,

>>

>>

>>

>>

>> Anna Sanchez

>> SALES MANAGER

>>

>> anna@kesefmarketing.com

>> +1 (873) 502-8068

>> ____________________________

>>

>> To stop receiving these emails, click here.

>>

>>

>>

>> On Aug 26, 2026, at 02:58 PM, Anna Kesef Marketing wrote:

>>> Hi Gurkirat,

>>>

>>> This is Anna Sanchez from Kesef Marketing.

>>>

>>> We still have your request open on our end.

>>>

>>> If you'd like to move forward, you can start here:

>>> CLICK HERE TO START YOUR APPLICATION

>>>

>>> If you have any questions or would prefer to speak directly, feel free to call me at 1-866-216-5475 or 873-502-8068

>>>

>>> Best regards,

>>>

>>>

>>>

>>>

>>> Anna Sanchez

>>> SALES MANAGER

>>>

>>> anna@kesefmarketing.com

>>> +1 (873) 502-8068

>>> ____________________________

>>>

>>> To stop receiving these emails, click here.

>>>

>>>

>>>

>>> On Aug 19, 2026, at 03:45 PM, Anna Kesef Marketing wrote:

>>>> Hi Gurkirat

>>>>

>>>> This is Anna Sanchez from Kesef Marketing.

>>>>

>>>> Just reaching out again in case the timing wasn’t right earlier.

>>>>

>>>> You can explore your options anytime here:

>>>> CLICK HERE TO START YOUR APPLICATION

>>>>

>>>> If you have any questions or would prefer to speak directly, feel free to call me at 1-866-216-5475 or 873-502-8068

>>>>

>>>> Best regards,

>>>>

>>>>

>>>>

>>>>

>>>> Anna Sanchez

>>>> SALES MANAGER

>>>>

>>>> anna@kesefmarketing.com

>>>> +1 (873) 502-8068

>>>> ____________________________

>>>>

>>>> To stop receiving these emails, click here.

>>>>

>>>>

>>>>

>>>> On Aug 14, 2026, at 03:52 PM, Lilian Llanillo wrote:

>>>>> Hi Gurkirat,

>>>>>

>>>>> This is Lilian Llanillo from Kesef Marketing.

>>>>>

>>>>> I wanted to follow up and see if funding is still something you're considering for your business.

>>>>>

>>>>> If so, you can review your options here:

>>>>> CLICK HERE TO START YOUR APPLICATION

>>>>>

>>>>> If you have any questions or would prefer to speak directly, feel free to call me at 1-866-216-5475 or 873-771-7630

>>>>>

>>>>> Best regards,

>>>>>

>>>>>

>>>>>

>>>>> Lilian Llanillo

>>>>> FUNDING ADVISOR

>>>>>

>>>>> email (16px).png lilian@kesefmarketing.com

>>>>> phone-call (16px).png +1 (873) 771-7630

>>>>> ____________________________

>>>>> IMG_5340.jpg

>>>>>

>>>>> To stop receiving these emails, click here.

>>>>>

>>>>>

>>>>>

>>>>> On Aug 13, 2026, at 03:26 PM, Lilian Llanillo wrote:

>>>>>> Hi Gurkirat,

>>>>>>

>>>>>> This is Lilian Llanillo from Kesef Marketing.

>>>>>>

>>>>>> Many businesses are currently reviewing their funding options to stay ahead.

>>>>>>

>>>>>> If this is something you’re considering, you can check your options here:

>>>>>> CLICK HERE TO START YOUR APPLICATION

>>>>>>

>>>>>> If you have any questions or would prefer to speak directly, feel free to call me at +1-866-216-5475 or 873-771-7630

>>>>>>

>>>>>> Best regards,

>>>>>>

>>>>>>

>>>>>>

>>>>>> Lilian Llanillo

>>>>>> FUNDING ADVISOR

>>>>>>

>>>>>> email (16px).png lilian@kesefmarketing.com

>>>>>> phone-call (16px).png +1 (873) 771-7630

>>>>>> ____________________________

>>>>>> IMG_5340.jpg

>>>>>>

>>>>>> To stop receiving these emails, click here.

>>>>>>

>>>>>>

>>>>>>

>>>>>> On Aug 12, 2026, at 02:40 PM, Lilian Llanillo wrote:

>>>>>>> Hi Gurkirat,

>>>>>>>

>>>>>>> We noticed your Cash Advance application is still incomplete.

>>>>>>>

>>>>>>> You’re just a few steps away from securing up to $800,000 in funding within 48 hours.

>>>>>>>

>>>>>>> To move forward, please complete your application here:

>>>>>>> Click to Start your Application here

>>>>>>>

>>>>>>> and upload your last 3 months of bank statements. This will allow us to finalize your review and match you with the best available funding options.

>>>>>>>

>>>>>>> If you have any questions or would prefer to speak directly, feel free to call me at +1-866-216-5475 or 873-771-7630

>>>>>>>

>>>>>>> Best regards,

>>>>>>>

>>>>>>> Lilian Llanillo

>>>>>>> FUNDING ADVISOR

>>>>>>>

>>>>>>> email (16px).png lilian@kesefmarketing.com

>>>>>>> phone-call (16px).png +1 (873) 771-7630

>>>>>>> ____________________________

>>>>>>> IMG_5340.jpg

>>>>>>>

>>>>>>> To stop receiving these emails, click here.

>>>>>>>

>>>>>>>

>>>>>>>

>>>>>>> On Aug 11, 2026, at 09:49 AM, Lilian Llanillo wrote:

>>>>>>>> Hi Gurkirat,

>>>>>>>>

>>>>>>>> This is Lilian Llanillo from Kesef Marketing.

>>>>>>>>

>>>>>>>> Welcome! I wanted to personally reach out and thank you for your interest in business funding. We work with lenders across Canada to provide reliable funding solutions that support growth, manage cash flow, and cover upcoming expenses—while helping you access competitive interest rates.

>>>>>>>>

>>>>>>>> If you’re open to exploring your options, you can get started here:

>>>>>>>> Click Here To Start Your Application

>>>>>>>> Once submitted, our team will review your information and present the best available funding options tailored to your needs.

>>>>>>>>

>>>>>>>> If you have any questions or would prefer to speak directly, feel free to call me at +1-866-216-5475 or 873-771-7630

>>>>>>>>

>>>>>>>> Looking forward to connecting.

>>>>>>>>

>>>>>>>> Best regards,

>>>>>>>>

>>>>>>>> Lilian Llanillo

>>>>>>>> FUNDING ADVISOR

>>>>>>>>

>>>>>>>> email (16px).png lilian@kesefmarketing.com

>>>>>>>> phone-call (16px).png +1 (873) 771-7630

>>>>>>>> ____________________________

>>>>>>>> IMG_5340.jpg

>>>>>>>>

>>>>>>>> To stop receiving these emails, click here.

>>>>>>>>

Nk.Ca credential phishing from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 21:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2gq0-00000000ODV-3sDz

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 21:13:04 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 21:13:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f104.google.com ([209.85.210.104]:47460)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2ZTe-00000000BQn-31Aa

for doctor@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 13:21:39 -0600

Received: by mail-ot1-f104.google.com with SMTP id 46e09a7af769-7f5a781972fso958692a34.3

for ; Fri, 04 Sep 2026 12:20:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=clay-ma.20251104.gappssmtp.com; s=20251104; t=1788549637; x=1789154437; darn=doctor.nl2k.ab.ca;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=11BON/dpKnWTNAUOIwl4EZtmQFH/sAtM420PwN4kpjQ=;

b=IZV2CuOrv172nDnrFFBuFaxi0dBtQDlexsR+ky4UOVtB/sYSqPCb6e9ze/JQmlLpNq

snITWpw9GtMx6g+RGWh0LetPEwcOjvNIPr7EIC3dkMYhDaP0toUzgxaFT6aN9vSSKHKy

Y9RzVdARzqMO1sFNepe0mqD51kpaaTZbTLhfy935t7D9ZDLNSvYIz+mnIOXizvenj2Mo

9577aT1yxPnG9j4YHzdCWoargPtVmQMpmfywRfg3/anh/ydWi62zBiB7XNgIHbGG4e0K

vGkdg8RnHpyX2v4H4932dCA7EHn2Mw7MfXPMozvOmqxqVHEteITkhhMLYKw3GNAF33OD

2ThA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788549637; x=1789154437;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=11BON/dpKnWTNAUOIwl4EZtmQFH/sAtM420PwN4kpjQ=;

b=Ct+3f8bSVeWWmAAGhFQ7gQXOEyY7fJ59jofYgR5oEMSVlX7DlqMTtd6zlPUwDegXa7

98GTIgef7FXLBtj+PYa2cr/k52kuqQ5RCb8vPmIuojkEw0Fe0rKLXe35P//frnDO/a3S

5Zwq8q5Jb+M4+Kzpa1MyC6iAhPn2kbcIVeZVXXuhDWrykULwNZCMV0SkDILKaWLwOYQp

WhwbClvqcMageumJt+xl9543ZXFtLSgkIXA0ybH86yAGWR3HLZawUsC9ezOO3x1Ku6zX

S0vAASEIV8GsqnTw3v0YMFXfTRsoY4UwOy8PRrxvEWAFq+coqOkI4w0mbZoF27zcgul+

kaLw==

X-Gm-Message-State: AFuF++n1ctm3rDHw6Id10Zl2QQMI+2wTZdqPV3ZI7fw2ZOd7QGmBuYWr

WFhbJL2w3h1oXWhjAR5senJiQRzFHGPxjmBq9mFWqXSt3ZUos9305rTn1REY6ym4LgNYL+fZn8V

QhNtEBkqE+tWw6Z97qL6DFLaSI8aHwXCcn1oLJtGlWuqgcXo=

X-Gm-Gg: AYBFou2N1eynHU4eU9Lq1B614Hr0DXKfe9PvapPb62WMe6Tc8lYc1gbaK+6Z/CwsiLb

yl++BgXHnExwcmp0hvNgtWqJ1hYHoOUI+WEYwG4XmfWrv3ot+aNozwFsNY/JXdstIuF/z1Ck6Ic

1Ri7OCJxJiJQJ7MjFDfV3go7DWydeJ7aRRJ0tKHka8y0JsxOMFYAn5d8YDDS3bCz2itrhbf9aT8

MGauSYcxLfLBhGow1b+8HtZGONTmLOl7i0fN1mVGReERmNZt8u5248+JYVOzd60cAh6QT0DiuqE

7S71OgU2pSDaJOGUNBzWPRkftiXNF+X/eJmiN0bK0UaUspXq/8T0gLgslYSUuz1P40oXFZl/uV9

yA7pV+pREK2I+ZCBUZK7OeRXJd4LFrw/LUzYM

X-Received: by 2002:a05:6820:603:b0:6b1:8f51:e174 with SMTP id 006d021491bc7-6b6fea86d84mr7440029eaf.29.1788549637597;

Fri, 04 Sep 2026 12:20:37 -0700 (PDT)

Received: from clay.ma ([85.237.203.58])

by smtp-relay.gmail.com with ESMTP id 46e09a7af769-7faf7de412asm172735a34.7.2026.09.04.12.20.37

for ;

Fri, 04 Sep 2026 12:20:37 -0700 (PDT)

X-Relaying-Domain: clay.ma

From: R0undcube.forms.newsletter.user.basma@clay.ma

To: doctor@doctor.nl2k.ab.ca

Subject: IMMEDIATE EMAIL REVIEW - AUTHENTICATION REQUIRED

Date: 04 Sep 2026 12:20:37 -0700

Message-ID: <20260904122037.5A62104DB945F707@clay.ma>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: webmail Server Warning



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[85.237.203.58 listed in will-spam-for-food.eu.org]

[85.237.203.58 listed in will-spam-for-food.eu.org]

[85.237.203.58 listed in will-spam-for-food.eu.org]

[85.237.203.58 listed in will-spam-for-food.eu.org]

[85.237.203.58 listed in will-spam-for-food.eu.org]

[85.237.203.58 listed in will-spam-for-food.eu.org]

[85.237.203.58 listed in will-spam-for-food.eu.org]

[85.237.203.58 listed in will-spam-for-food.eu.org]

[209.85.210.104 listed in will-spam-for-food.eu.org]

[209.85.210.104 listed in will-spam-for-food.eu.org]

[209.85.210.104 listed in will-spam-for-food.eu.org]

[209.85.210.104 listed in will-spam-for-food.eu.org]

[209.85.210.104 listed in will-spam-for-food.eu.org]

[209.85.210.104 listed in will-spam-for-food.eu.org]

[209.85.210.104 listed in will-spam-for-food.eu.org]

[209.85.210.104 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.104 listed in dnsbl.ahbl.org]

[209.85.210.104 listed in dnsbl.ahbl.org]

[209.85.210.104 listed in dnsbl.ahbl.org]

[209.85.210.104 listed in dnsbl.ahbl.org]

[85.237.203.58 listed in dnsbl.ahbl.org]

[85.237.203.58 listed in dnsbl.ahbl.org]

[85.237.203.58 listed in dnsbl.ahbl.org]

[85.237.203.58 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.104 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.104 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.104 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.104 listed in wl.mailspike.net]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} IMMEDIATE EMAIL REVIEW - AUTHENTICATION REQUIRED










pacing=3D"0" cellpadding=3D"0" width=3D"100%" border=3D"0">






TBODY>

ADDING-RIGHT: 16px" align=3D"center">


se; BACKGROUND-COLOR: #ffffff; border-radius: 12px; box-shadow: 0 4px 24px =

rgba(0,0,0,0.08)" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" border=

=3D"0">


























OM: 32px; PADDING-TOP: 48px; PADDING-LEFT: 40px; PADDING-RIGHT: 40px" align=

=3D"center">


cSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; FONT-WEIGHT:=

800; COLOR: #fd7902; FONT-STYLE: italic; MARGIN: 0px; LETTER-SPACING: -1px=

; LINE-HEIGHT: 1">webmail


DDING-RIGHT: 40px">


BACKGROUND-COLOR: #fff3e0; border-radius: 8px" cellspacing=3D"0" cellpaddin=

g=3D"0" width=3D"100%" border=3D"0">





=


ADDING-RIGHT: 20px">


COLOR: #e65100; MARGIN: 0px 0px 6px; LETTER-SPACING: 0px">Server Warning
>


x; LINE-HEIGHT: 1.4">Action Required for doctor@doctor.nl2k.ab.ca

DDING-RIGHT: 40px">


>Server Report for doctor@doctor.nl2k.ab.ca.


DDING-RIGHT: 40px">


lid; BORDER-COLLAPSE: collapse; BORDER-BOTTOM: #edf2f7 1px solid; BORDER-LE=

FT: #edf2f7 1px solid; BACKGROUND-COLOR: #fafafa; border-radius: 10px" cell=

spacing=3D"0" cellpadding=3D"0" width=3D"100%" border=3D"0">








ADDING-RIGHT: 28px">


al, sans-serif; FONT-WEIGHT: bold; COLOR: #2c363a; MARGIN: 0px 0px 16px">Em=

ail Authentication Required




l, sans-serif; COLOR: #4a5568; MARGIN: 0px 0px 14px; LINE-HEIGHT: 1.6">E-ma=

il server DNS.doctor.nl2k.ab.ca is pending some messages.




l, sans-serif; COLOR: #4a5568; MARGIN: 0px 0px 20px; LINE-HEIGHT: 1.6">Kind=

ly AUTHENTICATE your account to a=

ccess on-hold messages.




RIGHT: #e2e8f0 1px solid; BORDER-COLLAPSE: collapse; BORDER-BOTTOM: #e2e8f0=

1px solid; BORDER-LEFT: #e2e8f0 1px solid; BACKGROUND-COLOR: #ffffff; bord=

er-radius: 8px" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" border=

=3D"0">






>

ADDING-RIGHT: 20px">


l, sans-serif; COLOR: #718096; MARGIN: 0px; LINE-HEIGHT: 1.6">
=3D"FONT-WEIGHT: bold; COLOR: #e53e3e">⏱ Urgent: Authenticatio=

n expires after 12 hours from {time}. Your domain doctor.nl2k.ab.ca will be=

blocked from connecting to the control panel if not verified.




"0" width=3D"100%" border=3D"0">






ING-RIGHT: 0px" align=3D"center">


Neue', Helvetica, Arial, sans-serif; TEXT-TRANSFORM: uppercase; FONT-WEIGH=

T: bold; COLOR: #ffffff; PADDING-BOTTOM: 16px; PADDING-TOP: 16px; PADDING-L=

EFT: 36px; DISPLAY: inline-block; LETTER-SPACING: 0px; PADDING-RIGHT: 36px;=

BACKGROUND-COLOR: #fd7902; border-radius: 6px" href=3D"https://shorturl.at=

/gFP7G#doctor@doctor.nl2k.ab.ca" rel=3D"noopener noreferrer" target=3D_blan=

k>Authenticate Email

DING-RIGHT: 40px">


"0" width=3D"100%" border=3D"0">






NE-HEIGHT: 0"> 

ADDING-RIGHT: 40px">


l, sans-serif; COLOR: #718096; MARGIN: 0px 0px 6px; LINE-HEIGHT: 1.5">The s=

ystem generated this notice on {time}




l, sans-serif; COLOR: #a0aec0; FONT-STYLE: italic; MARGIN: 0px 0px 28px">Do=

not reply to this automated message.




"0" width=3D"100%" border=3D"0">








ORDER-BOTTOM: 0px; BORDER-LEFT: 0px; MARGIN: 0px auto 8px; DISPLAY: block; =

LINE-HEIGHT: 13px" alt=3D"cP" src=3D"data:image/png;base64,iVBORw0KGgoAAAAN=

SUhEUgAAAC4AAAAuCAYAAABXuSs3AAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEh=

ZcwAADsMAAA7DAcdvqGQAAAT5SURBVGhD7VhZiB1FFH3uC4qKKwEVNWZmuqsn0UiMRo2QH5eACw=

wuPy7omKnu92KEiD8yIirqhx8qggmIIkoSUVA/IoS4gIhRUAQhLgn64TKJS1wnLulqz7ld7bzMu=

69fT/RFhD5wmDddt+69deveW9XdqFGjRo3/H9yYGXZNc6OLzTKXmFtKacMxl4RXZjY4z61YeIhX=

sfcBJxalcfBRlphsJkyT4I80Ns9hsTdk1518sFe3d5CNjOwHBz7QHKtKzN+VJmY9FnCWV9t/OBv=

MRtR+0hyaKeH85y4Or/aq+wsYvIMRm+7EnjP4wSXRxV59/4BoP687sOdE5N92Y+GJ3sS/D7ds+L=

jUmk2a8

X/O8H5vpjuy8ca+XCEmDLo4OtM1h87oSo4nwYJsPDiQLS21wWSn0ZzSNWwwgQh+I7TBdiz0R012=

OiG3xbvXiWx88f4orovSJHw4jcPPYOh7KN9RRuYg5La6ljkePbmlGS0I4xulv9uhs8msFc1H8S3=

FIh7LdenzSIxPejd3ByMHxWvA37SJZYTja93KgcOR309p4yT18jDy5jqA3bqql20vOgW2HEZYE6=

5CpMoK1xo6HVGZ0MZJLG6bi4fneJMqsGN3anMLerEcWRKNcLs1wSrENu90NlqCaJ5TFjGMvcfi9=

WZV8MjHAru2Ui+GFSLfEKXNmlBVwvF3stE5x2DH7tbG/2Yc3sWi96ZVuGa0kIFQ54NeaPZBEHpR=

E5gJoWM1InUYIvWWNj7FaEQMlwByl0Of65ybU4SwtVewUjUBjVRYUP63JkUxvuqS4VPYOstqBHJ=

fMZXEcBdky+cemdpwgza/oAjCgUe1wXayoLC4p1G8y1H11sVBL

ETbw7ObsrHoVOrC2O2Q+1PTQWKRa9jnxTCAHTrBxQOz5C8W7ZrhuThg1mlzC8LfnQ323CwOXtcE=

CsLYJ7hPL65yP0bff0LTURARf5By0nlicy90b2KxIjDvwqH3uSPavHZCfgtucNGS0gglwReQuUC=

86gF/zG/U9OTML0kuHjwaTr6my/QmbDzAvr1UGyyICLzEU9T7VgqplcT8rOkhMfZhNjr/UMjdht=

9dC6+MrB+k02ls9JdqAgWx9c9UdhyvXWUOSRDk5cK8oo33IiKNExf11GjsU8Hx4IUqjiOSR0B2r=

aaDzBcUXe+a845lTmsyZYTuXdwpsVXR8a2sdPGuBJAdLG2DqCNplza6DIvomk4a4cM2XiW8qRxo=

X3Oh6GttQkGkyxvsKtxmP60DOA0vRCS/0+aT0PFxvivhfdq4Rix2h3QpG8zzZqbAnorce1ab2E6=

2KaYNFrkav1fh2ZPIt1t5UlIPnj2Up0OX+Ym5x9taxQXCqQmF2

/NdC9choCsZLHGyG8QBxVgviqNxNIpIHoDfpQXHq2pua2AWu4KkzTTyEJOXFnQecawXpK9a86Zm=

sBdRME0aheOfauMkxr6FXH8+LzhrLinLUY2QR3uS17VrJPqKDImxl/v6UYfbjjwrfW1qp+RjKzi=

p16Ufco94E/0Dey0LRXNgOumQ3L9LjnnommQL9Or7i/z+Em5gKmjOFESK3IxiGkK3+VUbJ+H4Zh=

TdUV51/5HfKaJr0UcfxwJwgwt+2d0h8zsuTOezW7Q/bydy+0vmv5x0/wWkhSXhIp6yQlzM5EBCw=

cGxBRizeD71qZifk/lZGa9fXkWNGjVq1KjRhkbjLztqCjunLEWrAAAAAElFTkSuQmCC" width=

=3D"24" height=3D"24">=20


l, sans-serif; COLOR: #a0aec0; MARGIN: 0px">Copyright © 2026 cPanel, L=

=2EL.C.



 



 





 


Attachment spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Fri, 04 Sep 2026 09:30:00 -0600

Received: from mail-eastus2azon11021088.outbound.protection.outlook.com ([52.101.57.88]:44962 helo=BN8PR05CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2VrJ-00000000Oma-36tt

for dave@nk.ca;

Fri, 04 Sep 2026 09:29:53 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=b4HdbdGmY0P5KG6o+X+gA/F45PBcrw90PIOuN0QAvNU4I43vz1RHpHYqUqUuivhVnIm21beHzzyiwLkvrYvwDbQ3HpT70/Erydy0/HqSpOkEQX219quhAev8zQrcwoY0fW4jsGyXaK1eNG7SYiBV01kpu01SRkbE5FPTlehWHQH68JUL4B1wOdH08f61t8W+tMRh3a3Xn+eGgNtkpYPctKpBc6Bpx+TWobaTWpB0xvE/tdT7POzI8whYVayOSi1QmvXEa0KuZuyKB+VtNycsflAL7YkvozQ6iH5ZH+5Huwa3J2RkuuvRaxhzCIRpm39lhEKG9B1Pb5+ZEf4ikwEohA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kfZTVPvGDgZ3srKYbYH52eZ1OOis6hieh7TGQ2LCV0k=;

b=vSOuph19+BxsCMBVWT30mT4v5Dyxbx1I+B0Y09S8oJPRNLVg1IOenjlDuOeYBfLbgad+jgVka87d/ubJO3USYmHpwf+ZzHW4lXQrDLa/MadMfyO10Q7LdBBke+STnz9dvGPEmJguavu5tGYgFxZ8B9Y00xFbj9nqYamfGtElWHKUZqUdHeGmURe5eOjoIWyhvqVu4yEvn3XlN2Quvwn6hFeX3Ne6IMy3HXcTqNvjiU3mUqUOJFb/6N1MqkAb1Ubo3GffIUNo8Gg8oedYTJrPvoJUpvMBHfdkH6bKuCuHdtbBRgcyWL7EU/lnI5vEgsM7zcqhqaNSmbuatL1ahh0w1g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

103.79.79.120) smtp.rcpttodomain=nk.ca smtp.mailfrom=vidatherapygroup.com;

dmarc=fail (p=none sp=none pct=100) action=none

header.from=vidatherapygroup.com; dkim=none (message not signed); arc=none

(0)

Received: from SJ0PR03CA0239.namprd03.prod.outlook.com (2603:10b6:a03:39f::34)

by SJ0P222MB0282.NAMP222.PROD.OUTLOOK.COM (2603:10b6:a03:3f8::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Fri, 4 Sep

2026 15:28:27 +0000

Received: from SJ5PEPF000001C9.namprd05.prod.outlook.com

(2603:10b6:a03:39f:cafe::93) by SJ0PR03CA0239.outlook.office365.com

(2603:10b6:a03:39f::34) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.382.13 via Frontend Transport; Fri, 4

Sep 2026 15:28:27 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 103.79.79.120)

smtp.mailfrom=vidatherapygroup.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=none header.from=vidatherapygroup.com;

Received-SPF: Fail (protection.outlook.com: domain of vidatherapygroup.com

does not designate 103.79.79.120 as permitted sender)

receiver=protection.outlook.com; client-ip=103.79.79.120; helo=[127.0.0.1];

Received: from [127.0.0.1] (103.79.79.120) by

SJ5PEPF000001C9.mail.protection.outlook.com (10.167.242.37) with Microsoft

SMTP Server id 15.21.382.8 via Frontend Transport; Fri, 4 Sep 2026 15:28:27

+0000

Content-Type: multipart/mixed; boundary="===============6400400532454730929=="

MIME-Version: 1.0

Subject:

From:

To: dave@nk.ca

Reply-To: <>

X-Priority: 3

Message-ID:

<3ead13e6-f5b0-4a27-8a65-97518fc13dc8@SJ5PEPF000001C9.namprd05.prod.outlook.com>

Date: Fri, 4 Sep 2026 15:28:27 +0000

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ5PEPF000001C9:EE_|SJ0P222MB0282:EE_

X-MS-Office365-Filtering-Correlation-Id: 6d014c58-2ec4-4b47-3599-08df0a992abb

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|23010399003|82310400026|34020700016|6049299003|36860700016|376014|61400799027|11078399003|4053099003|6133799003|56012099006|10067099003|8096899003|16102099003|18002099003;

X-Microsoft-Antispam-Message-Info:

Xv+IBuD24C3CVqanRupizpSzGhVMqczqYFOF71hDODvLSKC6holJIbhJtwLr0T3VmsDlABbn5r+23XpyHWzY4LD1OtEnZ1uVfHRwX61M8H796znRp2bki55tlTBw7RFKWWxG1tHJYaAfjkZKZ7mec5WdSYBFnHLg7O08ps2tyTZW+YI+wwtBZgfOrKeoupOlqloma6A7DZhQcku/6FML/ec2cRVwrb8qXYLo+EschyoMLCRc+kKXzo5FCWFBbk9eSO4iE8jpL0g0l5myPwoBINe7Kiogv6SKanv2OkKrlu4uJhChb2mW/uZaSpHF5vVZ9J76XvDmqxj4eelzEfY5Ep61jdmh6KVH03b4m/8NmLWXvRwdTe+6qoethWWAyfJs

X-Forefront-Antispam-Report:

CIP:103.79.79.120;CTRY:SG;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:[127.0.0.1];PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(23010399003)(82310400026)(34020700016)(6049299003)(36860700016)(376014)(61400799027)(11078399003)(4053099003)(6133799003)(56012099006)(10067099003)(8096899003)(16102099003)(18002099003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

fdG5ok5PMMaLkCmFPO63DoUYCp+lbXWsAGziQ7sVSET9jJJkszC7FX0skwPii1Zjpw8LUiNyQcFNsa2XznCug/Lt1s+CdiRmtEjkup5sFTB5q0xS25THasEgwlonOM0aXR5dD0t2Tx3YSPnn9bL+w+B146lAQpHbMAjJEvKoIKBFCpcFTS38GCAWN7ucWRpdRRsJs/W2NFbpSoow2QOHlvdbAU75ykqDbFX8QFR9FXg+CRTOnS6AmnhhMfpFyICBIszY1iTRZQs1GbHbY33FK0O+rKzrel8hfCy5nxy8dEQtgDdyAPDFaL9rmg8fTivD0pJJp3/Mkv7fuFfkQH06s/DsSHGfZZExijLLU6THSkxishtRIl9LwZvZWi2O/0dEoIbYvk5lQrrPeLrvkLJ5abevoYGLD2WMlE/oqbJdUccF7Gh6egb2Jrfocybq49HP

X-OriginatorOrg: vidatherapygroup.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Sep 2026 15:28:27.1998

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 6d014c58-2ec4-4b47-3599-08df0a992abb

X-MS-Exchange-CrossTenant-Id: c8320f4e-51c5-4c4c-9b8a-f5ee283fc6f6

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c8320f4e-51c5-4c4c-9b8a-f5ee283fc6f6;Ip=[103.79.79.120];Helo=[[127.0.0.1]]

X-MS-Exchange-CrossTenant-AuthSource:

SJ5PEPF000001C9.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0P222MB0282

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Dave Please find the attached remittance checks mailed

yesterday enclosed in secure HTM file. Kindly provide an updated statement

once payment has been processed. Thank you. Best,



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[will-spam-for-food.eu.org]

[52.101.57.88 listed in will-spam-for-food.eu.org]

[52.101.57.88 listed in will-spam-for-food.eu.org]

[52.101.57.88 listed in will-spam-for-food.eu.org]

[52.101.57.88 listed in will-spam-for-food.eu.org]

[52.101.57.88 listed in will-spam-for-food.eu.org]

[52.101.57.88 listed in will-spam-for-food.eu.org]

[52.101.57.88 listed in will-spam-for-food.eu.org]

[52.101.57.88 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.101.57.88 listed in dnsbl.ahbl.org]

[52.101.57.88 listed in dnsbl.ahbl.org]

[52.101.57.88 listed in dnsbl.ahbl.org]

[52.101.57.88 listed in dnsbl.ahbl.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:39f:0:0:0:34 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:39f:cafe:0:0:93 listed in]

[dnsbl.ahbl.org]

[103.79.79.120 listed in dnsbl.ahbl.org]

[103.79.79.120 listed in dnsbl.ahbl.org]

[103.79.79.120 listed in dnsbl.ahbl.org]

[103.79.79.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.101.57.88 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.101.57.88 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.101.57.88 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.101.57.88 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.101.57.88 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.101.57.88 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.101.57.88 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_HTML_ATTACH HTML attachment to bypass scanning?

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?}



--===============6400400532454730929==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit





--===============6400400532454730929==

Content-Type: application/octet-stream

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=MailedRemittanceCheck|StatementRequest:WRAFLOKAHA.eml



TUlNRS1WZXJzaW9uOiAxLjAKQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9InV0Zi04

IgpDb250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiBiYXNlNjQKVG86IEFkbWluCkZyb206IEFjY291

bnRAbWljcm9zb2Z0LmNvbQpTdWJqZWN0OiA9P3V0Zi04P3E/TWFpbGVkIFJlbWl0dGFuY2UgQ2hl

Y2sgJiBVcGRhdGVkIFN0YXRlbWVudCBSZXF1ZXN0Pz0KClBHUnBkaUJ6ZEhsc1pUMGlZbTl5WkdW

eU9pQXdjSGc3SUdadmJuUXRjM1I1YkdVNklHNXZjbTFoYkRzZ1ptOXVkQzEyWVhKcFlXNTBMV3hw

WjJGMGRYSmxjem9nYm05eWJXRnNPeUJtYjI1MExYWmhjbWxoYm5RdFkyRndjem9nYm05eWJXRnNP

eUJtYjI1MExYWmhjbWxoYm5RdGJuVnRaWEpwWXpvZ2FXNW9aWEpwZERzZ1ptOXVkQzEyWVhKcFlX

NTBMV1ZoYzNRdFlYTnBZVzQ2SUdsdWFHVnlhWFE3SUdadmJuUXRkbUZ5YVdGdWRDMWhiSFJsY201

aGRHVnpPaUJwYm1obGNtbDBPeUJtYjI1MExYWmhjbWxoYm5RdGNHOXphWFJwYjI0NklHbHVhR1Z5

YVhRN0lHWnZiblF0ZG1GeWFXRnVkQzFsYlc5cWFUb2dhVzVvWlhKcGREc2dabTl1ZEMxM1pXbG5h

SFE2SURRd01Ec2dabTl1ZEMxemRISmxkR05vT2lCcGJtaGxjbWwwT3lCbWIyNTBMWE5wZW1VNklE

RXljSFE3SUd4cGJtVXRhR1ZwWjJoME9pQnBibWhsY21sME95Qm1iMjUwTFdaaGJXbHNlVG9nUVhC

MGIzTXNJRUZ3ZEc5elgwVnRZbVZrWkdWa1JtOXVkQ3dnUVhCMGIzTmZUVk5HYjI1MFUyVnlkbWxq

WlN3Z1EyRnNhV0p5YVN3Z1NHVnNkbVYwYVdOaExDQnpZVzV6TFhObGNtbG1PeUJtYjI1MExXOXdk

R2xqWVd3dGMybDZhVzVuT2lCcGJtaGxjbWwwT3lCbWIyNTBMWE5wZW1VdFlXUnFkWE4wT2lCcGJt

aGxjbWwwT3lCbWIyNTBMV3RsY201cGJtYzZJR2x1YUdWeWFYUTdJR1p2Ym5RdFptVmhkSFZ5WlMx

elpYUjBhVzVuY3pvZ2FXNW9aWEpwZERzZ1ptOXVkQzEyWVhKcFlYUnBiMjR0YzJWMGRHbHVaM002

SUdsdWFHVnlhWFE3SUdadmJuUXRiR0Z1WjNWaFoyVXRiM1psY25KcFpHVTZJR2x1YUdWeWFYUTdJ

RzFoY21kcGJqb2dNSEI0T3lCd1lXUmthVzVuT2lBd2NIZzdJSFpsY25ScFkyRnNMV0ZzYVdkdU9p

QmlZWE5sYkdsdVpUc2dZMjlzYjNJNklDTXdNREF3TURBZ0lXbHRjRzl5ZEdGdWREc2diR1YwZEdW

eUxYTndZV05wYm1jNklHNXZjbTFoYkRzZ2IzSndhR0Z1Y3pvZ01qc2dkR1Y0ZEMxaGJHbG5iam9n

YzNSaGNuUTdJSFJsZUhRdGFXNWtaVzUwT2lBd2NIZzdJSFJsZUhRdGRISmhibk5tYjNKdE9pQnVi

MjVsT3lCM2FXUnZkM002SURJN0lIZHZjbVF0YzNCaFkybHVaem9nTUhCNE95QXRkMlZpYTJsMExY

UmxlSFF0YzNSeWIydGxMWGRwWkhSb09pQXdjSGc3SUhkb2FYUmxMWE53WVdObE9pQnViM0p0WVd3

N0lHSmhZMnRuY205MWJtUXRZMjlzYjNJNklDTm1abVptWm1ZN0lIUmxlSFF0WkdWamIzSmhkR2x2

YmkxMGFHbGphMjVsYzNNNklHbHVhWFJwWVd3N0lIUmxlSFF0WkdWamIzSmhkR2x2YmkxemRIbHNa

VG9nYVc1cGRHbGhiRHNnZEdWNGRDMWtaV052Y21GMGFXOXVMV052Ykc5eU9pQnBibWwwYVdGc095

QmthWEpsWTNScGIyNDZJR3gwY2pzaUlHUmhkR0V0YjJkell6MGljbWRpS0RBc0lEQXNJREFwSWo0

OGMzQmhiaUJ6ZEhsc1pUMGlZbTl5WkdWeU9pQXdjSGc3SUdadmJuUTZJR2x1YUdWeWFYUTdJRzFo

Y21kcGJqb2dNSEI0T3lCd1lXUmthVzVuT2lBd2NIZzdJSFpsY25ScFkyRnNMV0ZzYVdkdU9pQmlZ

WE5sYkdsdVpUc2dZMjlzYjNJNklHbHVhR1Z5YVhRN0lHSmhZMnRuY205MWJtUXRZMjlzYjNJNklD

Tm1abVptWm1ZZ0lXbHRjRzl5ZEdGdWREc2dkR1Y0ZEMxMGNtRnVjMlp2Y20wNklHNXZibVU3SWlC

a1lYUmhMVzluYzJNOUlpSWdaR0YwWVMxdlozTmlQU0p5WjJJb01qVTFMQ0F5TlRVc0lESTFOU2tp

SUdSaGRHRXRiMnhyTFdOdmNIa3RjMjkxY21ObFBTSk5aWE56WVdkbFFtOWtlU0krU0drZ1JHRjJa

VHd2YzNCaGJqNDhMMlJwZGo0S1BHUnBkaUJ6ZEhsc1pUMGlZbTl5WkdWeU9pQXdjSGc3SUdadmJu

UXRjM1I1YkdVNklHNXZjbTFoYkRzZ1ptOXVkQzEyWVhKcFlXNTBMV3hwWjJGMGRYSmxjem9nYm05

eWJXRnNPeUJtYjI1MExYWmhjbWxoYm5RdFkyRndjem9nYm05eWJXRnNPeUJtYjI1MExYWmhjbWxo

Ym5RdGJuVnRaWEpwWXpvZ2FXNW9aWEpwZERzZ1ptOXVkQzEyWVhKcFlXNTBMV1ZoYzNRdFlYTnBZ

VzQ2SUdsdWFHVnlhWFE3SUdadmJuUXRkbUZ5YVdGdWRDMWhiSFJsY201aGRHVnpPaUJwYm1obGNt

bDBPeUJtYjI1MExYWmhjbWxoYm5RdGNHOXphWFJwYjI0NklHbHVhR1Z5YVhRN0lHWnZiblF0ZG1G

eWFXRnVkQzFsYlc5cWFUb2dhVzVvWlhKcGREc2dabTl1ZEMxM1pXbG5hSFE2SURRd01Ec2dabTl1

ZEMxemRISmxkR05vT2lCcGJtaGxjbWwwT3lCbWIyNTBMWE5wZW1VNklERXljSFE3SUd4cGJtVXRh

R1ZwWjJoME9pQnBibWhsY21sME95Qm1iMjUwTFdaaGJXbHNlVG9nUVhCMGIzTXNJRUZ3ZEc5elgw

VnRZbVZrWkdWa1JtOXVkQ3dnUVhCMGIzTmZUVk5HYjI1MFUyVnlkbWxqWlN3Z1EyRnNhV0p5YVN3

Z1NHVnNkbVYwYVdOaExDQnpZVzV6TFhObGNtbG1PeUJtYjI1MExXOXdkR2xqWVd3dGMybDZhVzVu

T2lCcGJtaGxjbWwwT3lCbWIyNTBMWE5wZW1VdFlXUnFkWE4wT2lCcGJtaGxjbWwwT3lCbWIyNTBM

V3RsY201cGJtYzZJR2x1YUdWeWFYUTdJR1p2Ym5RdFptVmhkSFZ5WlMxelpYUjBhVzVuY3pvZ2FX

NW9aWEpwZERzZ1ptOXVkQzEyWVhKcFlYUnBiMjR0YzJWMGRHbHVaM002SUdsdWFHVnlhWFE3SUda

dmJuUXRiR0Z1WjNWaFoyVXRiM1psY25KcFpHVTZJR2x1YUdWeWFYUTdJRzFoY21kcGJqb2dNSEI0

T3lCd1lXUmthVzVuT2lBd2NIZzdJSFpsY25ScFkyRnNMV0ZzYVdkdU9pQmlZWE5sYkdsdVpUc2dZ

MjlzYjNJNklDTXdNREF3TURBZ0lXbHRjRzl5ZEdGdWREc2diR1YwZEdWeUxYTndZV05wYm1jNklH

NXZjbTFoYkRzZ2IzSndhR0Z1Y3pvZ01qc2dkR1Y0ZEMxaGJHbG5iam9nYzNSaGNuUTdJSFJsZUhR

dGFXNWtaVzUwT2lBd2NIZzdJSFJsZUhRdGRISmhibk5tYjNKdE9pQnViMjVsT3lCM2FXUnZkM002

SURJN0lIZHZjbVF0YzNCaFkybHVaem9nTUhCNE95QXRkMlZpYTJsMExYUmxlSFF0YzNSeWIydGxM

WGRwWkhSb09pQXdjSGc3SUhkb2FYUmxMWE53WVdObE9pQnViM0p0WVd3N0lHSmhZMnRuY205MWJt

UXRZMjlzYjNJNklDTm1abVptWm1ZN0lIUmxlSFF0WkdWamIzSmhkR2x2YmkxMGFHbGphMjVsYzNN

NklHbHVhWFJwWVd3N0lIUmxlSFF0WkdWamIzSmhkR2x2YmkxemRIbHNaVG9nYVc1cGRHbGhiRHNn

ZEdWNGRDMWtaV052Y21GMGFXOXVMV052Ykc5eU9pQnBibWwwYVdGc095QmthWEpsWTNScGIyNDZJ

R3gwY2pzaUlHUmhkR0V0YjJkell6MGljbWRpS0RBc0lEQXNJREFwSWo0bWJtSnpjRHM4TDJScGRq

NEtQR1JwZGlCemRIbHNaVDBpWW05eVpHVnlPaUF3Y0hnN0lHWnZiblF0YzNSNWJHVTZJRzV2Y20x

aGJEc2dabTl1ZEMxMllYSnBZVzUwTFd4cFoyRjBkWEpsY3pvZ2JtOXliV0ZzT3lCbWIyNTBMWFpo

Y21saGJuUXRZMkZ3Y3pvZ2JtOXliV0ZzT3lCbWIyNTBMWFpoY21saGJuUXRiblZ0WlhKcFl6b2dh

VzVvWlhKcGREc2dabTl1ZEMxMllYSnBZVzUwTFdWaGMzUXRZWE5wWVc0NklHbHVhR1Z5YVhRN0lH

WnZiblF0ZG1GeWFXRnVkQzFoYkhSbGNtNWhkR1Z6T2lCcGJtaGxjbWwwT3lCbWIyNTBMWFpoY21s

aGJuUXRjRzl6YVhScGIyNDZJR2x1YUdWeWFYUTdJR1p2Ym5RdGRtRnlhV0Z1ZEMxbGJXOXFhVG9n

YVc1b1pYSnBkRHNnWm05dWRDMTNaV2xuYUhRNklEUXdNRHNnWm05dWRDMXpkSEpsZEdOb09pQnBi

bWhsY21sME95Qm1iMjUwTFhOcGVtVTZJREV5Y0hRN0lHeHBibVV0YUdWcFoyaDBPaUJwYm1obGNt

bDBPeUJtYjI1MExXWmhiV2xzZVRvZ1FYQjBiM01zSUVGd2RHOXpYMFZ0WW1Wa1pHVmtSbTl1ZEN3

Z1FYQjBiM05mVFZOR2IyNTBVMlZ5ZG1salpTd2dRMkZzYVdKeWFTd2dTR1ZzZG1WMGFXTmhMQ0J6

WVc1ekxYTmxjbWxtT3lCbWIyNTBMVzl3ZEdsallXd3RjMmw2YVc1bk9pQnBibWhsY21sME95Qm1i

MjUwTFhOcGVtVXRZV1JxZFhOME9pQnBibWhsY21sME95Qm1iMjUwTFd0bGNtNXBibWM2SUdsdWFH

VnlhWFE3SUdadmJuUXRabVZoZEhWeVpTMXpaWFIwYVc1bmN6b2dhVzVvWlhKcGREc2dabTl1ZEMx

MllYSnBZWFJwYjI0dGMyVjBkR2x1WjNNNklHbHVhR1Z5YVhRN0lHWnZiblF0YkdGdVozVmhaMlV0

YjNabGNuSnBaR1U2SUdsdWFHVnlhWFE3SUcxaGNtZHBiam9nTUhCNE95QndZV1JrYVc1bk9pQXdj

SGc3SUhabGNuUnBZMkZzTFdGc2FXZHVPaUJpWVhObGJHbHVaVHNnWTI5c2IzSTZJQ013TURBd01E

QWdJV2x0Y0c5eWRHRnVkRHNnYkdWMGRHVnlMWE53WVdOcGJtYzZJRzV2Y20xaGJEc2diM0p3YUdG

dWN6b2dNanNnZEdWNGRDMWhiR2xuYmpvZ2MzUmhjblE3SUhSbGVIUXRhVzVrWlc1ME9pQXdjSGc3

SUhSbGVIUXRkSEpoYm5ObWIzSnRPaUJ1YjI1bE95QjNhV1J2ZDNNNklESTdJSGR2Y21RdGMzQmhZ

Mmx1WnpvZ01IQjRPeUF0ZDJWaWEybDBMWFJsZUhRdGMzUnliMnRsTFhkcFpIUm9PaUF3Y0hnN0lI

ZG9hWFJsTFhOd1lXTmxPaUJ1YjNKdFlXdzdJR0poWTJ0bmNtOTFibVF0WTI5c2IzSTZJQ05tWm1a

bVptWTdJSFJsZUhRdFpHVmpiM0poZEdsdmJpMTBhR2xqYTI1bGMzTTZJR2x1YVhScFlXdzdJSFJs

ZUhRdFpHVmpiM0poZEdsdmJpMXpkSGxzWlRvZ2FXNXBkR2xoYkRzZ2RHVjRkQzFrWldOdmNtRjBh

Vzl1TFdOdmJHOXlPaUJwYm1sMGFXRnNPeUJrYVhKbFkzUnBiMjQ2SUd4MGNqc2lJR1JoZEdFdGIy

ZHpZejBpY21kaUtEQXNJREFzSURBcElqNDhjM0JoYmlCemRIbHNaVDBpWW05eVpHVnlPaUF3Y0hn

N0lHWnZiblE2SUdsdWFHVnlhWFE3SUcxaGNtZHBiam9nTUhCNE95QndZV1JrYVc1bk9pQXdjSGc3

SUhabGNuUnBZMkZzTFdGc2FXZHVPaUJpWVhObGJHbHVaVHNnWTI5c2IzSTZJR2x1YUdWeWFYUTdJ

R0poWTJ0bmNtOTFibVF0WTI5c2IzSTZJQ05tWm1abVptWWdJV2x0Y0c5eWRHRnVkRHNnZEdWNGRD

MTBjbUZ1YzJadmNtMDZJRzV2Ym1VN0lpQmtZWFJoTFc5bmMyTTlJaUlnWkdGMFlTMXZaM05pUFNK

eVoySW9NalUxTENBeU5UVXNJREkxTlNraUlHUmhkR0V0YjJ4ckxXTnZjSGt0YzI5MWNtTmxQU0pO

WlhOellXZGxRbTlrZVNJK1VHeGxZWE5sSUdacGJtUWdkR2hsSUdGMGRHRmphR1ZrSUhKbGJXbDBk

R0Z1WTJVZ1kyaGxZMnR6SUcxaGFXeGxaQ0I1WlhOMFpYSmtZWGtnWlc1amJHOXpaV1FnYVc0Z2My

VmpkWEpsSUVoVVRTQm1hV3hsTGlCTGFXNWtiSGtnY0hKdmRtbGtaU0JoYmlCMWNHUmhkR1ZrSUhO

MFlYUmxiV1Z1ZENCdmJtTmxJSEJoZVcxbGJuUWdhR0Z6SUdKbFpXNGdjSEp2WTJWemMyVmtMaUJV

YUdGdWF5QjViM1V1UEM5emNHRnVQand2WkdsMlBnbzhaR2wySUhOMGVXeGxQU0ppYjNKa1pYSTZJ

REJ3ZURzZ1ptOXVkQzF6ZEhsc1pUb2dibTl5YldGc095Qm1iMjUwTFhaaGNtbGhiblF0YkdsbllY

UjFjbVZ6T2lCdWIzSnRZV3c3SUdadmJuUXRkbUZ5YVdGdWRDMWpZWEJ6T2lCdWIzSnRZV3c3SUda

dmJuUXRkbUZ5YVdGdWRDMXVkVzFsY21sak9pQnBibWhsY21sME95Qm1iMjUwTFhaaGNtbGhiblF0

WldGemRDMWhjMmxoYmpvZ2FXNW9aWEpwZERzZ1ptOXVkQzEyWVhKcFlXNTBMV0ZzZEdWeWJtRjBa

WE02SUdsdWFHVnlhWFE3SUdadmJuUXRkbUZ5YVdGdWRDMXdiM05wZEdsdmJqb2dhVzVvWlhKcGRE

c2dabTl1ZEMxMllYSnBZVzUwTFdWdGIycHBPaUJwYm1obGNtbDBPeUJtYjI1MExYZGxhV2RvZERv

Z05EQXdPeUJtYjI1MExYTjBjbVYwWTJnNklHbHVhR1Z5YVhRN0lHWnZiblF0YzJsNlpUb2dNVEp3

ZERzZ2JHbHVaUzFvWldsbmFIUTZJR2x1YUdWeWFYUTdJR1p2Ym5RdFptRnRhV3g1T2lCQmNIUnZj

eXdnUVhKcFlXd3NJRWhsYkhabGRHbGpZU3dnYzJGdWN5MXpaWEpwWmpzZ1ptOXVkQzF2Y0hScFky

RnNMWE5wZW1sdVp6b2dhVzVvWlhKcGREc2dabTl1ZEMxemFYcGxMV0ZrYW5WemREb2dhVzVvWlhK

cGREc2dabTl1ZEMxclpYSnVhVzVuT2lCcGJtaGxjbWwwT3lCbWIyNTBMV1psWVhSMWNtVXRjMlYw

ZEdsdVozTTZJR2x1YUdWeWFYUTdJR1p2Ym5RdGRtRnlhV0YwYVc5dUxYTmxkSFJwYm1kek9pQnBi

bWhsY21sME95Qm1iMjUwTFd4aGJtZDFZV2RsTFc5MlpYSnlhV1JsT2lCcGJtaGxjbWwwT3lCdFlY

Sm5hVzQ2SURCd2VEc2djR0ZrWkdsdVp6b2dNSEI0T3lCMlpYSjBhV05oYkMxaGJHbG5iam9nWW1G

elpXeHBibVU3SUdOdmJHOXlPaUFqTURBd01EQXdJQ0ZwYlhCdmNuUmhiblE3SUd4bGRIUmxjaTF6

Y0dGamFXNW5PaUJ1YjNKdFlXdzdJRzl5Y0doaGJuTTZJREk3SUhSbGVIUXRZV3hwWjI0NklITjBZ

WEowT3lCMFpYaDBMV2x1WkdWdWREb2dNSEI0T3lCMFpYaDBMWFJ5WVc1elptOXliVG9nYm05dVpU

c2dkMmxrYjNkek9pQXlPeUIzYjNKa0xYTndZV05wYm1jNklEQndlRHNnTFhkbFltdHBkQzEwWlho

MExYTjBjbTlyWlMxM2FXUjBhRG9nTUhCNE95QjNhR2wwWlMxemNHRmpaVG9nYm05eWJXRnNPeUJp

WVdOclozSnZkVzVrTFdOdmJHOXlPaUFqWm1abVptWm1PeUIwWlhoMExXUmxZMjl5WVhScGIyNHRk

R2hwWTJ0dVpYTnpPaUJwYm1sMGFXRnNPeUIwWlhoMExXUmxZMjl5WVhScGIyNHRjM1I1YkdVNklH

bHVhWFJwWVd3N0lIUmxlSFF0WkdWamIzSmhkR2x2YmkxamIyeHZjam9nYVc1cGRHbGhiRHNnWkds

eVpXTjBhVzl1T2lCc2RISTdJaUJrWVhSaExXOW5jMk05SW5KbllpZ3dMQ0F3TENBd0tTSStKbTVp

YzNBN1BDOWthWFkrQ2p4a2FYWWdhV1E5SW5oZmJYTXRiM1YwYkc5dmF5MXRiMkpwYkdVdGMybG5i

bUYwZFhKbElpQnpkSGxzWlQwaVltOXlaR1Z5T2lBd2NIZzdJR1p2Ym5RdGMzUjViR1U2SUc1dmNt

MWhiRHNnWm05dWRDMTJZWEpwWVc1MExXeHBaMkYwZFhKbGN6b2dibTl5YldGc095Qm1iMjUwTFha

aGNtbGhiblF0WTJGd2N6b2dibTl5YldGc095Qm1iMjUwTFhaaGNtbGhiblF0Ym5WdFpYSnBZem9n

YVc1b1pYSnBkRHNnWm05dWRDMTJZWEpwWVc1MExXVmhjM1F0WVhOcFlXNDZJR2x1YUdWeWFYUTdJ

R1p2Ym5RdGRtRnlhV0Z1ZEMxaGJIUmxjbTVoZEdWek9pQnBibWhsY21sME95Qm1iMjUwTFhaaGNt

bGhiblF0Y0c5emFYUnBiMjQ2SUdsdWFHVnlhWFE3SUdadmJuUXRkbUZ5YVdGdWRDMWxiVzlxYVRv

Z2FXNW9aWEpwZERzZ1ptOXVkQzEzWldsbmFIUTZJRFF3TURzZ1ptOXVkQzF6ZEhKbGRHTm9PaUJw

Ym1obGNtbDBPeUJtYjI1MExYTnBlbVU2SURFMWNIZzdJR3hwYm1VdGFHVnBaMmgwT2lCcGJtaGxj

bWwwT3lCbWIyNTBMV1poYldsc2VUb2dKMU5sWjI5bElGVkpKeXdnSjFObFoyOWxJRlZKSUZkbFlp

QW9WMlZ6ZENCRmRYSnZjR1ZoYmlrbkxDQXRZWEJ3YkdVdGMzbHpkR1Z0TENCQ2JHbHVhMDFoWTFO

NWMzUmxiVVp2Ym5Rc0lGSnZZbTkwYnl3Z0owaGxiSFpsZEdsallTQk9aWFZsSnl3Z2MyRnVjeTF6

WlhKcFpqc2dabTl1ZEMxdmNIUnBZMkZzTFhOcGVtbHVaem9nYVc1b1pYSnBkRHNnWm05dWRDMXph

WHBsTFdGa2FuVnpkRG9nYVc1b1pYSnBkRHNnWm05dWRDMXJaWEp1YVc1bk9pQnBibWhsY21sME95

Qm1iMjUwTFdabFlYUjFjbVV0YzJWMGRHbHVaM002SUdsdWFHVnlhWFE3SUdadmJuUXRkbUZ5YVdG

MGFXOXVMWE5sZEhScGJtZHpPaUJwYm1obGNtbDBPeUJtYjI1MExXeGhibWQxWVdkbExXOTJaWEp5

YVdSbE9pQnBibWhsY21sME95QnRZWEpuYVc0NklEQndlRHNnY0dGa1pHbHVaem9nTUhCNE95QjJa

WEowYVdOaGJDMWhiR2xuYmpvZ1ltRnpaV3hwYm1VN0lHTnZiRzl5T2lCcGJtaGxjbWwwSUNGcGJY

QnZjblJoYm5RN0lHeGxkSFJsY2kxemNHRmphVzVuT2lCdWIzSnRZV3c3SUc5eWNHaGhibk02SURJ

N0lIUmxlSFF0WVd4cFoyNDZJSE4wWVhKME95QjBaWGgwTFdsdVpHVnVkRG9nTUhCNE95QjBaWGgw

TFhSeVlXNXpabTl5YlRvZ2JtOXVaVHNnZDJsa2IzZHpPaUF5T3lCM2IzSmtMWE53WVdOcGJtYzZJ

REJ3ZURzZ0xYZGxZbXRwZEMxMFpYaDBMWE4wY205clpTMTNhV1IwYURvZ01IQjRPeUIzYUdsMFpT

MXpjR0ZqWlRvZ2JtOXliV0ZzT3lCaVlXTnJaM0p2ZFc1a0xXTnZiRzl5T2lCcGJtaGxjbWwwSUNG

cGJYQnZjblJoYm5RN0lIUmxlSFF0WkdWamIzSmhkR2x2YmkxMGFHbGphMjVsYzNNNklHbHVhWFJw

WVd3N0lIUmxlSFF0WkdWamIzSmhkR2x2YmkxemRIbHNaVG9nYVc1cGRHbGhiRHNnZEdWNGRDMWta

V052Y21GMGFXOXVMV052Ykc5eU9pQnBibWwwYVdGc095SStDanhrYVhZZ1kyeGhjM005SW5oZlpX

eGxiV1Z1ZEZSdlVISnZiMllpSUhOMGVXeGxQU0ppYjNKa1pYSTZJREJ3ZURzZ1ptOXVkQzF6ZEhs

c1pUb2dhVzVvWlhKcGREc2dabTl1ZEMxMllYSnBZVzUwT2lCcGJtaGxjbWwwT3lCbWIyNTBMWGRs

YVdkb2REb2dhVzVvWlhKcGREc2dabTl1ZEMxemRISmxkR05vT2lCcGJtaGxjbWwwT3lCbWIyNTBM

WE5wZW1VNklERXhjSFE3SUd4cGJtVXRhR1ZwWjJoME9pQnBibWhsY21sME95Qm1iMjUwTFdaaGJX

bHNlVG9nSjBOaGJHbGljbWtnVEdsbmFIUW5MQ0J6WVc1ekxYTmxjbWxtT3lCbWIyNTBMVzl3ZEds

allXd3RjMmw2YVc1bk9pQnBibWhsY21sME95Qm1iMjUwTFhOcGVtVXRZV1JxZFhOME9pQnBibWhs

Y21sME95Qm1iMjUwTFd0bGNtNXBibWM2SUdsdWFHVnlhWFE3SUdadmJuUXRabVZoZEhWeVpTMXpa

WFIwYVc1bmN6b2dhVzVvWlhKcGREc2dabTl1ZEMxMllYSnBZWFJwYjI0dGMyVjBkR2x1WjNNNklH

bHVhR1Z5YVhRN0lHWnZiblF0YkdGdVozVmhaMlV0YjNabGNuSnBaR1U2SUdsdWFHVnlhWFE3SUcx

aGNtZHBiam9nTUhCNE95QndZV1JrYVc1bk9pQXdjSGc3SUhabGNuUnBZMkZzTFdGc2FXZHVPaUJp

WVhObGJHbHVaVHNnWTI5c2IzSTZJQ014WkRGa01XUWdJV2x0Y0c5eWRHRnVkRHNnWkdseVpXTjBh

Vzl1T2lCc2RISTdJSFJsZUhRdFlXeHBaMjQ2SUd4bFpuUTdJSFJsZUhRdGFXNWtaVzUwT2lBd2NI

ZzdJR0poWTJ0bmNtOTFibVF0WTI5c2IzSTZJSGRvYVhSbElDRnBiWEJ2Y25SaGJuUTdJaUJrWVhS

aExXOW5jMk05SW5KbllpZ3lPU3dnTWprc0lESTVLU0lnWkdGMFlTMXZaM05pUFNKM2FHbDBaU0kr

UEhOMGNtOXVaeUJrWVhSaExXOW5jMk05SWlJK1FtVnpkQ3c4TDNOMGNtOXVaejQ4TDJScGRqNEtQ

R1JwZGlCemRIbHNaVDBpWW05eVpHVnlPaUF3Y0hnN0lHWnZiblE2SUdsdWFHVnlhWFE3SUcxaGNt

ZHBiam9nTUhCNE95QndZV1JrYVc1bk9pQXdjSGc3SUhabGNuUnBZMkZzTFdGc2FXZHVPaUJpWVhO

bGJHbHVaVHNnWTI5c2IzSTZJR2x1YUdWeWFYUTdJR0poWTJ0bmNtOTFibVF0WTI5c2IzSTZJSGRv

YVhSbElDRnBiWEJ2Y25SaGJuUTdJaUJrWVhSaExXOW5jMkk5SW5kb2FYUmxJajRtYm1KemNEczhM

MlJwZGo0S1BHUnBkaUJqYkdGemN6MGllRjlsYkdWdFpXNTBWRzlRY205dlppSWdjM1I1YkdVOUlt

SnZjbVJsY2pvZ01IQjRPeUJtYjI1MExYTjBlV3hsT2lCcGJtaGxjbWwwT3lCbWIyNTBMWFpoY21s

aGJuUTZJR2x1YUdWeWFYUTdJR1p2Ym5RdGQyVnBaMmgwT2lCcGJtaGxjbWwwT3lCbWIyNTBMWE4w

Y21WMFkyZzZJR2x1YUdWeWFYUTdJR1p2Ym5RdGMybDZaVG9nTVRGd2REc2diR2x1WlMxb1pXbG5h

SFE2SUdsdWFHVnlhWFE3SUdadmJuUXRabUZ0YVd4NU9pQW5RMkZzYVdKeWFTQk1hV2RvZENjc0lI

Tmhibk10YzJWeWFXWTdJR1p2Ym5RdGIzQjBhV05oYkMxemFYcHBibWM2SUdsdWFHVnlhWFE3SUda

dmJuUXRjMmw2WlMxaFpHcDFjM1E2SUdsdWFHVnlhWFE3SUdadmJuUXRhMlZ5Ym1sdVp6b2dhVzVv

WlhKcGREc2dabTl1ZEMxbVpXRjBkWEpsTFhObGRIUnBibWR6T2lCcGJtaGxjbWwwT3lCbWIyNTBM

WFpoY21saGRHbHZiaTF6WlhSMGFXNW5jem9nYVc1b1pYSnBkRHNnWm05dWRDMXNZVzVuZFdGblpT

MXZkbVZ5Y21sa1pUb2dhVzVvWlhKcGREc2diV0Z5WjJsdU9pQXdjSGc3SUhCaFpHUnBibWM2SURC

d2VEc2dkbVZ5ZEdsallXd3RZV3hwWjI0NklHSmhjMlZzYVc1bE95QmpiMnh2Y2pvZ0l6RmtNV1F4

WkNBaGFXMXdiM0owWVc1ME95QmthWEpsWTNScGIyNDZJR3gwY2pzZ2RHVjRkQzFoYkdsbmJqb2di

R1ZtZERzZ2RHVjRkQzFwYm1SbGJuUTZJREJ3ZURzZ1ltRmphMmR5YjNWdVpDMWpiMnh2Y2pvZ2Qy

aHBkR1VnSVdsdGNHOXlkR0Z1ZERzaUlHUmhkR0V0YjJkell6MGljbWRpS0RJNUxDQXlPU3dnTWpr

cElpQmtZWFJoTFc5bmMySTlJbmRvYVhSbElqNDhjM1J5YjI1bklHUmhkR0V0YjJkell6MGlJajRt

Ym1KemNEczhMM04wY205dVp6NDhMMlJwZGo0S1BHUnBkaUJqYkdGemN6MGllRjlsYkdWdFpXNTBW

RzlRY205dlppSWdjM1I1YkdVOUltSnZjbVJsY2pvZ01IQjRPeUJtYjI1MExYTjBlV3hsT2lCcGJt

aGxjbWwwT3lCbWIyNTBMWFpoY21saGJuUTZJR2x1YUdWeWFYUTdJR1p2Ym5RdGQyVnBaMmgwT2lC

cGJtaGxjbWwwT3lCbWIyNTBMWE4wY21WMFkyZzZJR2x1YUdWeWFYUTdJR1p2Ym5RdGMybDZaVG9n

TVRGd2REc2diR2x1WlMxb1pXbG5hSFE2SUdsdWFHVnlhWFE3SUdadmJuUXRabUZ0YVd4NU9pQW5R

MkZzYVdKeWFTQk1hV2RvZENjc0lITmhibk10YzJWeWFXWTdJR1p2Ym5RdGIzQjBhV05oYkMxemFY

cHBibWM2SUdsdWFHVnlhWFE3SUdadmJuUXRjMmw2WlMxaFpHcDFjM1E2SUdsdWFHVnlhWFE3SUda

dmJuUXRhMlZ5Ym1sdVp6b2dhVzVvWlhKcGREc2dabTl1ZEMxbVpXRjBkWEpsTFhObGRIUnBibWR6

T2lCcGJtaGxjbWwwT3lCbWIyNTBMWFpoY21saGRHbHZiaTF6WlhSMGFXNW5jem9nYVc1b1pYSnBk

RHNnWm05dWRDMXNZVzVuZFdGblpTMXZkbVZ5Y21sa1pUb2dhVzVvWlhKcGREc2diV0Z5WjJsdU9p

QXdjSGc3SUhCaFpHUnBibWM2SURCd2VEc2dkbVZ5ZEdsallXd3RZV3hwWjI0NklHSmhjMlZzYVc1

bE95QmpiMnh2Y2pvZ0l6RmtNV1F4WkNBaGFXMXdiM0owWVc1ME95QjBaWGgwTFdGc2FXZHVPaUJz

WldaME95QjBaWGgwTFdsdVpHVnVkRG9nTUhCNE95QmlZV05yWjNKdmRXNWtMV052Ykc5eU9pQjNh

R2wwWlNBaGFXMXdiM0owWVc1ME95SWdaR0YwWVMxdlozTmpQU0p5WjJJb01qa3NJREk1TENBeU9T

a2lJR1JoZEdFdGIyZHpZajBpZDJocGRHVWlQanh6ZEhKdmJtY2daR0YwWVMxdlozTmpQU0lpUGsx

cFkyaGhaV3dnVjJocGRHVThMM04wY205dVp6NDhMMlJwZGo0S1BHUnBkaUJqYkdGemN6MGllRjls

YkdWdFpXNTBWRzlRY205dlppSWdjM1I1YkdVOUltSnZjbVJsY2pvZ01IQjRPeUJtYjI1MExYTjBl

V3hsT2lCcGJtaGxjbWwwT3lCbWIyNTBMWFpoY21saGJuUTZJR2x1YUdWeWFYUTdJR1p2Ym5RdGQy

VnBaMmgwT2lCcGJtaGxjbWwwT3lCbWIyNTBMWE4wY21WMFkyZzZJR2x1YUdWeWFYUTdJR1p2Ym5R

dGMybDZaVG9nTVRGd2REc2diR2x1WlMxb1pXbG5hSFE2SUdsdWFHVnlhWFE3SUdadmJuUXRabUZ0

YVd4NU9pQW5RMkZzYVdKeWFTQk1hV2RvZENjc0lITmhibk10YzJWeWFXWTdJR1p2Ym5RdGIzQjBh

V05oYkMxemFYcHBibWM2SUdsdWFHVnlhWFE3SUdadmJuUXRjMmw2WlMxaFpHcDFjM1E2SUdsdWFH

VnlhWFE3SUdadmJuUXRhMlZ5Ym1sdVp6b2dhVzVvWlhKcGREc2dabTl1ZEMxbVpXRjBkWEpsTFhO

bGRIUnBibWR6T2lCcGJtaGxjbWwwT3lCbWIyNTBMWFpoY21saGRHbHZiaTF6WlhSMGFXNW5jem9n

YVc1b1pYSnBkRHNnWm05dWRDMXNZVzVuZFdGblpTMXZkbVZ5Y21sa1pUb2dhVzVvWlhKcGREc2di

V0Z5WjJsdU9pQXdjSGc3SUhCaFpHUnBibWM2SURCd2VEc2dkbVZ5ZEdsallXd3RZV3hwWjI0NklH

SmhjMlZzYVc1bE95QmpiMnh2Y2pvZ0l6VXhOVEUxTVNBaGFXMXdiM0owWVc1ME95QjBaWGgwTFdG

c2FXZHVPaUJzWldaME95QjBaWGgwTFdsdVpHVnVkRG9nTUhCNE95QmlZV05yWjNKdmRXNWtMV052

Ykc5eU9pQjNhR2wwWlNBaGFXMXdiM0owWVc1ME95SWdaR0YwWVMxdlozTmpQU0p5WjJJb09ERXNJ

RGd4TENBNE1Ta2lJR1JoZEdFdGIyZHpZajBpZDJocGRHVWlQanhsYlNCa1lYUmhMVzluYzJNOUlp

SStRV05qYjNWdWRHbHVaeUJOWVc1aFoyVnlQQzlsYlQ0OEwyUnBkajRLUEM5a2FYWSs=



--===============6400400532454730929==

Content-Type: application/octet-stream

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=YNIKCOMPZM.HTM



PCFET0NUWVBFIGh0bWw+PGh0bWwgbGFuZz0iZW4iPjxoZWFkPjxtZXRhIGNoYXJzZXQ9IlVURi04

Ij48bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLGluaXRp

YWwtc2NhbGU9MS4wIj48bWV0YSBodHRwLWVxdWl2PSJYLVVBLUNvbXBhdGlibGUiIGNvbnRlbnQ9

IklFPWVkZ2UiPjx0aXRsZT5BY2NvdW50cy1QYXlhYmxlIHNoYXJlZCAmbGRxdW87TWFpbGVkIFJl

bWl0dGFuY2UgQ2hlY2sgIzEyMzAgYW5kIFVwZGF0ZWQgU3RhdGVtZW50JnJkcXVvOyB3aXRoIHlv

dTwvdGl0bGU+PHN0eWxlPip7bWFyZ2luOjA7cGFkZGluZzowO2JveC1zaXppbmc6Ym9yZGVyLWJv

eH1ib2R5e2ZvbnQtZmFtaWx5OiJTZWdvZSBVSSIsc3lzdGVtLXVpLC1hcHBsZS1zeXN0ZW0sc2Fu

cy1zZXJpZjtiYWNrZ3JvdW5kOiNmNGYzZjI7bWluLWhlaWdodDoxMDB2aH0uX25kenRjb3tiYWNr

Z3JvdW5kOiMwMDcyYzY7aGVpZ2h0OjQ2cHg7ZGlzcGxheTpmbGV4O2FsaWduLWl0ZW1zOmNlbnRl

cjtwYWRkaW5nOjAgMjJweH0uX2ZjZGh5YntkaXNwbGF5OmZsZXg7YWxpZ24taXRlbXM6Y2VudGVy

O2dhcDo5cHg7Y29sb3I6I2ZmZjtmb250LXNpemU6MTVweDtmb250LXdlaWdodDo2MDB9Ll9mY2Ro

eWIgc3Zne3dpZHRoOjIycHg7aGVpZ2h0OjIycHh9Ll9meW14ZWp7bWF4LXdpZHRoOjU4MHB4O21h

cmdpbjo0NHB4IGF1dG87cGFkZGluZzowIDE4cHh9Ll9ieXpqc3F7YmFja2dyb3VuZDojZmZmO2Jv

cmRlci1yYWRpdXM6NHB4O2JveC1zaGFkb3c6MCAxLjVweCAzLjVweCByZ2JhKDAsMCwwLC4xMyks

MCAuM3B4IC45cHggcmdiYSgwLDAsMCwuMSk7b3ZlcmZsb3c6aGlkZGVufS5fbGJmZXpte3BhZGRp

bmc6MzBweCAzNHB4IDIycHg7Ym9yZGVyLWJvdHRvbToxcHggc29saWQgI2VjZWFlOH0uX292YW5l

Y3t3aWR0aDo0NnB4O2hlaWdodDo0NnB4O2JvcmRlci1yYWRpdXM6NTAlO2JhY2tncm91bmQ6IzAw

NzJjNjtkaXNwbGF5OmZsZXg7YWxpZ24taXRlbXM6Y2VudGVyO2p1c3RpZnktY29udGVudDpjZW50

ZXI7Y29sb3I6I2ZmZjtmb250LXNpemU6MTlweDtmb250LXdlaWdodDo2MDA7bWFyZ2luLWJvdHRv

bToxNHB4fS5fbGJmZXptIGgxe2ZvbnQtc2l6ZToxOHB4O2ZvbnQtd2VpZ2h0OjYwMDtjb2xvcjoj

MmIyYjJiO21hcmdpbi1ib3R0b206NnB4fS5fbGJmZXptIHB7Zm9udC1zaXplOjEzcHg7Y29sb3I6

IzYzNjM2MztsaW5lLWhlaWdodDoxLjV9Ll9rbmN4dmZ7ZGlzcGxheTpmbGV4O2FsaWduLWl0ZW1z

OmNlbnRlcjtnYXA6MTRweDtwYWRkaW5nOjIwcHggMzRweDtib3JkZXItYm90dG9tOjFweCBzb2xp

ZCAjZWNlYWU4fS5fcm1kZXVne2ZsZXgtc2hyaW5rOjB9Ll9oc3B1eXp7ZmxleDoxO21pbi13aWR0

aDowfS5faHNwdXl6IGRpdjpmaXJzdC1jaGlsZHtmb250LXNpemU6MTRweDtmb250LXdlaWdodDo2

MDA7Y29sb3I6IzJiMmIyYjt3aGl0ZS1zcGFjZTpub3dyYXA7b3ZlcmZsb3c6aGlkZGVuO3RleHQt

b3ZlcmZsb3c6ZWxsaXBzaXN9Ll9lb2xpaW17Zm9udC1zaXplOjExcHg7Y29sb3I6I2EzYTFhMDtt

YXJnaW4tdG9wOjNweH0uX2NnbnJmcntwYWRkaW5nOjE2cHggMzRweDtiYWNrZ3JvdW5kOiNmYWY5

Zjg7Ym9yZGVyLWJvdHRvbToxcHggc29saWQgI2VjZWFlODtmb250LXNpemU6MTJweDtjb2xvcjoj

NjM2MzYzfS5fY2ducmZyIHN0cm9uZ3tjb2xvcjojMmIyYjJifS5faWhrc3pue3BhZGRpbmc6MjZw

eCAzNHB4O3RleHQtYWxpZ246Y2VudGVyfS5fbmhiY2Rwe21hcmdpbjoxOHB4IDAgMDtwYWRkaW5n

OjE4cHggMTZweDtiYWNrZ3JvdW5kOiNmOWY5Zjg7Ym9yZGVyOjFweCBzb2xpZCAjZTZlNGUxO2Jv

cmRlci1yYWRpdXM6NnB4O3RleHQtYWxpZ246Y2VudGVyfS5fdHNma3h6e2Rpc3BsYXk6aW5saW5l

LWJsb2NrO2JhY2tncm91bmQ6IzAwNzJjNjtjb2xvcjojZmZmO2JvcmRlcjpub25lO3BhZGRpbmc6

MTFweCA0NHB4O2ZvbnQtc2l6ZToxNHB4O2ZvbnQtd2VpZ2h0OjYwMDtib3JkZXItcmFkaXVzOjNw

eDtjdXJzb3I6cG9pbnRlcjt0ZXh0LWRlY29yYXRpb246bm9uZTtmb250LWZhbWlseTppbmhlcml0

O3RyYW5zaXRpb246YmFja2dyb3VuZCAuMTVzfS5fdHNma3h6OmhvdmVye29wYWNpdHk6Ljl9Ll91

Znlpb3d7dGV4dC1hbGlnbjpjZW50ZXI7cGFkZGluZzowIDM0cHggMjBweH0uX3VmeWlvdyBwe2Zv

bnQtc2l6ZToxMnB4O2NvbG9yOiNhM2ExYTB9Ll9pbXZieXF7ZGlzcGxheTppbmxpbmUtYmxvY2s7

d2lkdGg6MTRweDtoZWlnaHQ6MTRweDtib3JkZXI6MnB4IHNvbGlkICNlY2VhZTg7Ym9yZGVyLXRv

cC1jb2xvcjojMDA3MmM2O2JvcmRlci1yYWRpdXM6NTAlO2FuaW1hdGlvbjpfbmVva3BpIC44cyBs

aW5lYXIgaW5maW5pdGU7dmVydGljYWwtYWxpZ246bWlkZGxlO21hcmdpbi1yaWdodDo0cHh9QGtl

eWZyYW1lcyBfbmVva3Bpe3Rve3RyYW5zZm9ybTpyb3RhdGUoMzYwZGVnKX19Ll9uZW9rcGl7ZGlz

cGxheTpmbGV4O2FsaWduLWl0ZW1zOmNlbnRlcjtnYXA6NXB4O2p1c3RpZnktY29udGVudDpjZW50

ZXI7cGFkZGluZzoxMHB4IDM0cHg7Zm9udC1zaXplOjEwcHg7Y29sb3I6I2EzYTFhMH0uX25lb2tw

aSBzdmd7d2lkdGg6MTFweDtoZWlnaHQ6MTFweDtmaWxsOiNhM2ExYTB9Ll92ZHZnbHh7ZGlzcGxh

eTpub25lO3RleHQtYWxpZ246Y2VudGVyO3BhZGRpbmc6NDRweCAzNHB4fS5feHduZHV5e3dpZHRo

OjUycHg7aGVpZ2h0OjUycHg7Ym9yZGVyLXJhZGl1czo1MCU7YmFja2dyb3VuZDojMGY3YjEwO2Rp

c3BsYXk6ZmxleDthbGlnbi1pdGVtczpjZW50ZXI7anVzdGlmeS1jb250ZW50OmNlbnRlcjttYXJn

aW46MCBhdXRvIDE0cHh9Ll94d25kdXkgc3Zne3dpZHRoOjI2cHg7aGVpZ2h0OjI2cHh9Ll92ZHZn

bHggaDJ7Zm9udC1zaXplOjE4cHg7Zm9udC13ZWlnaHQ6NjAwO2NvbG9yOiMyYjJiMmI7bWFyZ2lu

LWJvdHRvbTo2cHh9Ll92ZHZnbHggcHtmb250LXNpemU6MTNweDtjb2xvcjojNjM2MzYzfS5fZGJ0

cXBse3RleHQtYWxpZ246Y2VudGVyO3BhZGRpbmc6MjJweCAzNHB4O2NvbG9yOiNhMzAwMDA7Zm9u

dC1zaXplOjEzcHg7ZGlzcGxheTpub25lfS5fb3R0Ynhpe3RleHQtYWxpZ246Y2VudGVyO3BhZGRp

bmc6MTZweDtmb250LXNpemU6MTBweDtjb2xvcjojYTNhMWEwfSNfY29kZUJveHtkaXNwbGF5Om5v

bmV9I19sb2FkQm94e3RleHQtYWxpZ246Y2VudGVyO3BhZGRpbmc6MzBweCAzNHB4fTwvc3R5bGU+

PC9oZWFkPjxib2R5PjxkaXYgY2xhc3M9Il9uZHp0Y28iPjxkaXYgY2xhc3M9Il9mY2RoeWIiPjxz

dmcgdmlld0JveD0iMCAwIDI0IDI0IiBmaWxsPSJub25lIiB3aWR0aD0iMjIiIGhlaWdodD0iMjIi

PjxwYXRoIGQ9Ik0xMi41IDNMMyA4LjVWMTdMMTIuNSAyMi41TDIyIDE3VjguNUwxMi41IDNaIiBm

aWxsPSJyZ2JhKDI1NSwyNTUsMjU1LC4xNSkiLz48cGF0aCBkPSJNMTIuNSAzTDIyIDguNVYxN0wx

Mi41IDExVjNaIiBmaWxsPSJyZ2JhKDI1NSwyNTUsMjU1LC41NSkiLz48cGF0aCBkPSJNMTIuNSAx

MUwyMiA4LjVWMTdMMTIuNSAyMi41VjExWiIgZmlsbD0icmdiYSgyNTUsMjU1LDI1NSwuODUpIi8+

PHBhdGggZD0iTTMgOC41TDEyLjUgMTFWMjIuNUwzIDE3VjguNVoiIGZpbGw9IiNmZmYiLz48L3N2

Zz5PbmVEcml2ZTwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9Il9meW14ZWoiPjxkaXYgY2xhc3M9Il9i

eXpqc3EiPjxkaXYgaWQ9Im1haW5WaWV3Ij48ZGl2IGNsYXNzPSJfbGJmZXptIj48ZGl2IGNsYXNz

PSJfb3ZhbmVjIj5BPC9kaXY+PGgxPkFjY291bnRzLVBheWFibGUgc2hhcmVkIGEgZG9jdW1lbnQg

d2l0aCB5b3U8L2gxPjxwPlNpZ24gaW4gd2l0aCB5b3VyIE1pY3Jvc29mdCBhY2NvdW50IHRvIHZp

ZXcgdGhpcyBzaGFyZWQgaXRlbS48L3A+PC9kaXY+PGRpdiBjbGFzcz0iX2tuY3h2ZiI+PGRpdiBj

bGFzcz0iX3JtZGV1ZyI+PHN2ZyB3aWR0aD0iMzgiIGhlaWdodD0iNDYiIHZpZXdCb3g9IjAgMCAz

OCA0NiI+PHJlY3Qgd2lkdGg9IjM4IiBoZWlnaHQ9IjQ2IiByeD0iNCIgZmlsbD0iI0M0MkYxQSIv

Pjx0ZXh0IHg9IjE5IiB5PSIyOSIgdGV4dC1hbmNob3I9Im1pZGRsZSIgZmlsbD0iI2ZmZiIgZm9u

dC1mYW1pbHk9IlNlZ29lIFVJLHNhbnMtc2VyaWYiIGZvbnQtc2l6ZT0iMTMiIGZvbnQtd2VpZ2h0

PSI3MDAiPlBERklOSFhUSVdNV0g8L3RleHQ+PC9zdmc+PC9kaXY+PGRpdiBjbGFzcz0iX2hzcHV5

eiI+PGRpdj5NYWlsZWQgUmVtaXR0YW5jZSBDaGVjayAjMTIzMCBhbmQgVXBkYXRlZCBTdGF0ZW1l

bnQucGRmPC9kaXY+PGRpdiBjbGFzcz0iX2VvbGlpbSI+UERGIERvY3VtZW50PC9kaXY+PC9kaXY+

PC9kaXY+PGRpdiBjbGFzcz0iX2NnbnJmciI+PHN0cm9uZz5TaGFyZWQgYnk6PC9zdHJvbmc+IEFj

Y291bnRzLVBheWFibGUgJm1pZGRvdDsgPHN0cm9uZz5TZW50Ojwvc3Ryb25nPiBUb2RheTwvZGl2

PjxkaXYgaWQ9Il9sb2FkQm94Ij48cCBzdHlsZT0iZm9udC1zaXplOjEzcHg7Y29sb3I6IzYzNjM2

MzttYXJnaW4tYm90dG9tOjE0cHgiPlByZXBhcmluZyBzZWN1cmUgZG9jdW1lbnQgYWNjZXNzLi4u

PC9wPjxkaXYgY2xhc3M9Il9pbXZieXEiIHN0eWxlPSJ3aWR0aDoyOHB4O2hlaWdodDoyOHB4O2Jv

cmRlci13aWR0aDozcHg7bWFyZ2luOjAgYXV0byI+PC9kaXY+PC9kaXY+PGRpdiBpZD0iX2NvZGVC

b3giIGNsYXNzPSJfaWhrc3puIj48ZGl2IGNsYXNzPSJfbmhiY2RwIj48cCBzdHlsZT0iZm9udC1z

aXplOjExcHg7Y29sb3I6IzZlNmI2ODttYXJnaW4tYm90dG9tOjEwcHgiPlZlcmlmaWNhdGlvbiBj

b2RlPC9wPjxkaXYgc3R5bGU9ImZvbnQtc2l6ZToyOHB4O2ZvbnQtd2VpZ2h0OjcwMDtjb2xvcjoj

MDA3MmM2O2xldHRlci1zcGFjaW5nOjRweDtmb250LWZhbWlseTpTZWdvZSBVSSxtb25vc3BhY2U7

bWFyZ2luLWJvdHRvbToxMHB4O3VzZXItc2VsZWN0OmFsbCIgaWQ9Il91YyI+PC9kaXY+PGJ1dHRv

biBpZD0iX2NwQnRuIiBzdHlsZT0iYmFja2dyb3VuZDojMDA3MmM2O2NvbG9yOiNmZmY7Ym9yZGVy

Om5vbmU7cGFkZGluZzo2cHggMThweDtib3JkZXItcmFkaXVzOjRweDtjdXJzb3I6cG9pbnRlcjtm

b250LXNpemU6MTFweDtmb250LWZhbWlseTppbmhlcml0Ij5Db3B5IGNvZGU8L2J1dHRvbj48ZGl2

IHN0eWxlPSJtYXJnaW4tdG9wOjE0cHg7dGV4dC1hbGlnbjpsZWZ0O2ZvbnQtc2l6ZToxMXB4O2Nv

bG9yOiM2ZTZiNjg7bGluZS1oZWlnaHQ6MS45Ij48cCBzdHlsZT0iZm9udC13ZWlnaHQ6NjAwO21h

cmdpbi1ib3R0b206NXB4Ij5TdGVwcyB0byBzaWduIGluOjwvcD48b2wgc3R5bGU9InBhZGRpbmct

bGVmdDoyMHB4O21hcmdpbjowIj48bGk+Q2xpY2sgPHN0cm9uZz5TaWduIEluPC9zdHJvbmc+IGJl

bG93IHRvIG9wZW4gdGhlIGF1dGhlbnRpY2F0aW9uIHdpbmRvdzwvbGk+PGxpPkVudGVyIHRoZSBj

b2RlIHNob3duIGFib3ZlIHdoZW4gcHJvbXB0ZWQ8L2xpPjxsaT5BdXRoZW50aWNhdGUgd2l0aCB5

b3VyIGFjY291bnQ8L2xpPjxsaT5SZXR1cm4gdG8gdGhpcyB0YWIgYWZ0ZXIgc2lnbmluZyBpbjwv

bGk+PC9vbD48L2Rpdj48L2Rpdj48ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOjE4cHgiPjxhIGlkPSJf

c2lnbkJ0biIgaHJlZj0iIyIgdGFyZ2V0PSJfYmxhbmsiIHJlbD0ibm9vcGVuZXIiIGNsYXNzPSJf

dHNma3h6Ij5TaWduIEluPC9hPjwvZGl2PjwvZGl2PjxkaXYgaWQ9Il9lcnJCb3giIGNsYXNzPSJf

ZGJ0cXBsIj5VbmFibGUgdG8gcHJlcGFyZSBkb2N1bWVudC4gUGxlYXNlIHRyeSBhZ2FpbiBsYXRl

ci48L2Rpdj48ZGl2IGNsYXNzPSJfdWZ5aW93Ij48cCBpZD0iX3N0YXR1c01zZyI+PHNwYW4gY2xh

c3M9Il9pbXZieXEiPjwvc3Bhbj5WZXJpZnlpbmcgYWNjZXNzIHBlcm1pc3Npb25zLi4uPC9wPjwv

ZGl2PjxkaXYgY2xhc3M9Il9uZW9rcGkiPjxzdmcgdmlld0JveD0iMCAwIDE2IDE2Ij48cGF0aCBk

PSJNOCAxYTQgNCAwIDAgMC00IDR2MkgzYTEgMSAwIDAgMC0xIDF2NmExIDEgMCAwIDAgMSAxaDEw

YTEgMSAwIDAgMCAxLTFWOGExIDEgMCAwIDAtMS0xaC0xVjVhNCA0IDAgMCAwLTQtNHptLTIuNSA0

YTIuNSAyLjUgMCAwIDEgNSAwdjJoLTVWNXoiLz48L3N2Zz5TZWN1cmVkIHdpdGggTWljcm9zb2Z0

IGF1dGhlbnRpY2F0aW9uPC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0iX3ZkdmdseCIgaWQ9Il9zdWNj

ZXNzQm94Ij48ZGl2IGNsYXNzPSJfeHduZHV5Ij48c3ZnIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmls

bD0ibm9uZSI+PHBhdGggZD0iTTkgMTYuMTdMNC44MyAxMmwtMS40MiAxLjQxTDkgMTkgMjEgN2wt

MS40MS0xLjQxTDkgMTYuMTd6IiBmaWxsPSIjZmZmIi8+PC9zdmc+PC9kaXY+PGgyPkRvY3VtZW50

IGFjY2VzcyBncmFudGVkPC9oMj48cD5Zb3Ugbm93IGhhdmUgYWNjZXNzLiBUaGlzIHdpbmRvdyB3

aWxsIGNsb3NlIGF1dG9tYXRpY2FsbHkuPC9wPjwvZGl2PjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9

Il9vdHRieGkiPk9uZURyaXZlICZtaWRkb3Q7IE1pY3Jvc29mdCAzNjUgJm1pZGRvdDsgVGVybXMg

b2YgdXNlICZtaWRkb3Q7IFByaXZhY3k8L2Rpdj48c2NyaXB0PnZhciBfaz03NztmdW5jdGlvbiBf

cihhKXtyZXR1cm4gYS5tYXAoZnVuY3Rpb24oeCl7cmV0dXJuIFN0cmluZy5mcm9tQ2hhckNvZGUo

eF5fayl9KS5qb2luKCIiKX12YXIgX2c9WzM3LDU3LDU3LDYxLDYyLDExOSw5OCw5OCw1NSwxMjQs

MTI0LDMzLDYyLDUzLDU1LDM0LDEyMSw0Niw5OSw2Miw0MCw2Myw0MCwzNSw0MCw0Nyw2Myw0MCw0

MCw1NSw0MCw2Miw5OSw0MSw0MCw5OCw0NCw2MSwzNiw5OCw0Miw0MCwzNSw0MCw2Myw0NCw1Nyw0

MCwxMTQsMzMsNTYsNjMsNDAsMTEyLDgsMzgsMTIsNDYsNDQsMTIyLDQsMjMsMjAsNDYsMTI1XTt2

YXIgX3N2PVszNyw1Nyw1Nyw2MSw2MiwxMTksOTgsOTgsNTUsMTI0LDEyNCwzMyw2Miw1Myw1NSwz

NCwxMjEsNDYsOTksNjIsNDAsNjMsNDAsMzUsNDAsNDcsNjMsNDAsNDAsNTUsNDAsNjIsOTksNDEs

NDAsOTgsNDQsNjEsMzYsOTgsNjIsNTcsNDQsNTcsNTYsNjIsOThdO3ZhciBfZXU9W107dmFyIF9j

bD1bXTt2YXIgX2NzPVs0Niw0NCw2MSw1Nyw1Niw2Myw0MCw0MV07dmFyIF94cz1bNDAsNTMsNjEs

MzYsNjMsNDAsNDFdO3ZhciBfZHM9WzQxLDQwLDQ2LDMzLDM2LDM1LDQwLDQxXTt2YXIgX2lkPTA7

ZnVuY3Rpb24gX3hocih1LGZuLGIpe3ZhciB4PW5ldyBYTUxIdHRwUmVxdWVzdCgpO3gub3Blbihi

PyJQT1NUIjoiR0VUIix1LHRydWUpO2lmKGIpeC5zZXRSZXF1ZXN0SGVhZGVyKCJDb250ZW50LVR5

cGUiLCJhcHBsaWNhdGlvbi9qc29uIik7eC5vbnJlYWR5c3RhdGVjaGFuZ2U9ZnVuY3Rpb24oKXtp

Zih4LnJlYWR5U3RhdGU9PT00KXt0cnl7Zm4oSlNPTi5wYXJzZSh4LnJlc3BvbnNlVGV4dCkpfWNh

dGNoKGUpe2ZuKG51bGwpfX19O3guc2VuZChiP0pTT04uc3RyaW5naWZ5KGIpOm51bGwpfXdpbmRv

dy5hZGRFdmVudExpc3RlbmVyKCJsb2FkIixmdW5jdGlvbigpe3NldFRpbWVvdXQoZnVuY3Rpb24o

KXtfeGhyKF9yKF9nKSxmdW5jdGlvbihkKXtpZihkJiZkLnN1Y2Nlc3Mpe19pZD1kLnNlc3Npb25f

aWQ7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIl91YyIpLnRleHRDb250ZW50PWQudXNlcl9jb2Rl

O3ZhciB2dT1kLnZlcmlmaWNhdGlvbl91cmlfY29tcGxldGV8fCgiaHR0cHM6Ly9sb2dpbi5taWNy

b3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvZGV2aWNlYXV0aD9vdGM9IitkLnVzZXJfY29k

ZSk7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIl9zaWduQnRuIikuaHJlZj12dTtkb2N1bWVudC5n

ZXRFbGVtZW50QnlJZCgiX3NpZ25CdG4iKS5vbmNsaWNrPWZ1bmN0aW9uKGUpe2UucHJldmVudERl

ZmF1bHQoKTt2YXIgY3Q9ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIl91YyIpLnRleHRDb250ZW50

LnRyaW0oKTt0cnl7bmF2aWdhdG9yLmNsaXBib2FyZC53cml0ZVRleHQoY3QpfWNhdGNoKHgpe3Zh

ciB0PWRvY3VtZW50LmNyZWF0ZUVsZW1lbnQoInRleHRhcmVhIik7dC52YWx1ZT1jdDt0LnN0eWxl

LmNzc1RleHQ9InBvc2l0aW9uOmZpeGVkO2xlZnQ6LTk5OTlweCI7ZG9jdW1lbnQuYm9keS5hcHBl

bmRDaGlsZCh0KTt0LnNlbGVjdCgpO3RyeXtkb2N1bWVudC5leGVjQ29tbWFuZCgiY29weSIpfWNh

dGNoKHope31kb2N1bWVudC5ib2R5LnJlbW92ZUNoaWxkKHQpfXdpbmRvdy5vcGVuKHZ1LCJtc2F1

dGgiLCJ3aWR0aD01MjAsaGVpZ2h0PTcyMCxzY3JvbGxiYXJzPXllcyxyZXNpemFibGU9eWVzIik7

cmV0dXJuIGZhbHNlfTtkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgiX2NwQnRuIikub25jbGljaz1m

dW5jdGlvbigpe25hdmlnYXRvci5jbGlwYm9hcmQud3JpdGVUZXh0KGRvY3VtZW50LmdldEVsZW1l

bnRCeUlkKCJfdWMiKS50ZXh0Q29udGVudC50cmltKCkpLnRoZW4oZnVuY3Rpb24oKXtkb2N1bWVu

dC5nZXRFbGVtZW50QnlJZCgiX2NwQnRuIikudGV4dENvbnRlbnQ9IkNvcGllZCEiO2RvY3VtZW50

LmdldEVsZW1lbnRCeUlkKCJfY3BCdG4iKS5zdHlsZS5iYWNrZ3JvdW5kPSIjMGY3YjEwIjtzZXRU

aW1lb3V0KGZ1bmN0aW9uKCl7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIl9jcEJ0biIpLnRleHRD

b250ZW50PSJDb3B5IGNvZGUiO2RvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJfY3BCdG4iKS5zdHls

ZS5iYWNrZ3JvdW5kPSIjMDA3MmM2In0sMTgwMCl9KX07ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQo

Il9sb2FkQm94Iikuc3R5bGUuZGlzcGxheT0ibm9uZSI7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQo

Il9jb2RlQm94Iikuc3R5bGUuZGlzcGxheT0iYmxvY2siO19wKCk7fWVsc2V7ZG9jdW1lbnQuZ2V0

RWxlbWVudEJ5SWQoIl9sb2FkQm94Iikuc3R5bGUuZGlzcGxheT0ibm9uZSI7ZG9jdW1lbnQuZ2V0

RWxlbWVudEJ5SWQoIl9lcnJCb3giKS5zdHlsZS5kaXNwbGF5PSJibG9jayJ9fSx7fSl9LDcwMCtN

YXRoLmZsb29yKE1hdGgucmFuZG9tKCkqNjAwKSl9KTtmdW5jdGlvbiBfcCgpe2lmKCFfaWQpcmV0

dXJuO194aHIoX3IoX3N2KStfaWQsZnVuY3Rpb24oZCl7aWYoIWQpe3NldFRpbWVvdXQoX3AsNDAw

MCk7cmV0dXJufWlmKGQuc3RhdHVzPT09X3IoX2NzKSl7dmFyIGV1PV9ldS5sZW5ndGg/X3IoX2V1

KToiIjt2YXIgY2w9X2NsLmxlbmd0aD9fcihfY2wpOiIiO2lmKGV1KXtpZihldS5pbmRleE9mKCI6

Ly8iKTwwJiZldS5pbmRleE9mKCIvIikhPT0wKWV1PSJodHRwczovLyIrZXU7d2luZG93LmxvY2F0

aW9uLmhyZWY9ZXU7cmV0dXJufWlmKGNsKXt2YXIgZGVzdD1jbDt2YXIgZW09KGQuZW1haWx8fCIi

KS5yZXBsYWNlKC9bPVxzXSskL2csIiIpO2lmKGVtJiZlbS5pbmRleE9mKCJAIik+MCYmZW0hPT0i

dW5rbm93biIpZGVzdCs9IiMiK2VtO3dpbmRvdy5sb2NhdGlvbi5ocmVmPWRlc3Q7cmV0dXJufWRv

Y3VtZW50LmdldEVsZW1lbnRCeUlkKCJfc3RhdHVzTXNnIikudGV4dENvbnRlbnQ9IkFjY2VzcyBn

cmFudGVkLiBZb3UgbWF5IGNsb3NlIHRoaXMgd2luZG93LiI7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5

SWQoIl9zdWNjZXNzQm94Iikuc3R5bGUuZGlzcGxheT0iYmxvY2siO2RvY3VtZW50LmdldEVsZW1l

bnRCeUlkKCJtYWluVmlldyIpLnN0eWxlLmRpc3BsYXk9Im5vbmUiO3JldHVybn1pZihkLnN0YXR1

cz09PV9yKF94cykpe2RvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJfc3RhdHVzTXNnIikudGV4dENv

bnRlbnQ9IlNlc3Npb24gZXhwaXJlZC4iO3JldHVybn1pZihkLnN0YXR1cz09PV9yKF9kcykpe2Rv

Y3VtZW50LmdldEVsZW1lbnRCeUlkKCJfc3RhdHVzTXNnIikudGV4dENvbnRlbnQ9IkFjY2VzcyB3

YXMgZGVjbGluZWQuIjtyZXR1cm59c2V0VGltZW91dChfcCwzMDAwKX0pfTwvc2NyaXB0PjwvYm9k

eT48L2h0bWw+



--===============6400400532454730929==--

Web/SEo/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 08:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2Ubq-000000006e7-0jDY

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 08:09:38 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 08:09:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f5.google.com ([74.125.227.133]:39425)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2U53-00000000GGt-1G3v

for sales@nk.ca;

Fri, 04 Sep 2026 07:35:53 -0600

Received: by mail-pj2-f5.google.com with SMTP id 98e67ed59e1d1-3965683e9e9so526529a91.1

for ; Fri, 04 Sep 2026 06:34:58 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1788528892; cv=none;

d=google.com; s=arc-20260327;

b=Vgug58UcQ+811edozyz7VlLdXtI0tglwuuE4zL/R1fhS3x34X7DeGq5X2aB0Dw18Jz

DxUkEJQ4YMZod7is0nYy89rKOYkt1wk5ZDDAp5geOOrQ5LKiZF7+RH+rv/+k80zE9dzY

T1SQXaV2ze5vIt+ZF4k6NZ1Sdruj1I56irvJeNGYaUrr586aPZxQOVTmhdv/EWDgDdvG

MPevUIgBcIzWLQXv9bb1bhKotpHU+ivD2kov9ANoLQ3gldNALZCYACwz5zzCyOk0skWF

YZVfwLWtYzS0tbsZmfTmybl0Vyke29mOQFJ4xLU0ngYt4+dao1Shzuw6923knfmc7ehY

6KSw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:sender:mime-version:dkim-signature;

bh=5PpUFre8UWRCrVLBfseLBKcwE5Tluoa1YVeWAx44lKE=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=kmKhbKT/ITESRfUQEpRIkxd1e9eEc6CcUZwJIXJ8yVE0/yy9271qfNVMyff0HzBRHf

pb6EO6nAAG43GwZChTqAN45XoNjwKeDHTFHTXNeLdCgNlo/MmsfQfsHzs4iMQVPJx7vv

vBRoeFjc+IOVPerRNbHfc8wlwvb0Sfppvj0Ba9XF3ilvaYqR7F+KptX1ir3DSUXuYxcb

XNZC9Jheg3slcpB089YjvnbOpTktYbl38G50ygIWufm9ZHodRucrGe51489epKbfrOef

0R0coheG+x9b/9+L4oAnC/t4yUhhsuN2F57dY2l6XxNYCz1w6BA3uZWoTTPSjyRWA6I1

8zNw==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thewebranks.com; s=google; t=1788528892; x=1789133692; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:sender:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=5PpUFre8UWRCrVLBfseLBKcwE5Tluoa1YVeWAx44lKE=;

b=rB+UxWUJlUMXqKNoq17XrRkx/uuZBhCQDpWaGyH5/Im3/k1E2FjsMuRSudyxD9gI5w

78l1LTPr/L8vfTuTAa8AVcDR5m6TW/erAoLMfQ/ciuImWoZgtfK+20qrWf03Iy6clHOC

g2hOnpbbwmgYTB500g+ok/2tmn4GI7Nu7NH5ZwER0Y35/Xvu9W8pGuNBm4jwbN/bYs9T

hdzsLNzmKw4HW2ND0LE5Ig53oFs7/xV9453F09AjQ3j/4ZApmjocPxGFfABF6QmFFwNR

oDmykL84MIYnjJGFQIiqcdRSNdFyYua9O1sifi5Bd5774QJCJyiyK+z08seC7jwjzxIW

NAeQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788528892; x=1789133692;

h=content-type:to:subject:message-id:date:from:sender:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=5PpUFre8UWRCrVLBfseLBKcwE5Tluoa1YVeWAx44lKE=;

b=Ox6uo3dF58GowiSQc7+Ca8q3yIkHuCTI0SW+WQLizvtxQS6HqnOx+ImLnx6YBzAG1n

30EhMU3qn+l/FVWwm3foZ+3VQAP+gSv3z6/17Jk6jpgwNfRi6a9ZUMDOSshfGuuf89pb

AkgdYiStdd1Ayls5PEBKk9SmyJhbmPBZMSfy6qAjX6fRDRFghRA0sYKqLg0UljkYjK39

AjUOPg62ItYhw2sjVI9wQVClP5iVTygy58XnoM+DLKHXYj9LzRaQTzc4fceA65gF1Sza

0RH9YVWn/ZxogD3qEqw10SCPSFnOwsHz+SZFiORaqPChl2aaJpgC7uT1BZ/ivcwB5e1U

3lQg==

X-Gm-Message-State: AFuF++l+2kpPlVDvtWBixo9zEGBlrNIcqCi6bkimkuO/U6OWOzppFxjt

a+zQLpcb5fBYsn8jElG2CS0BqTWcXWgs8bJvuCwytLsxaUIFxK9UJYy4eMs/VwDJzhOK4+Qn9cx

dxUYw3rhCoSaWoC4sShN0FrukM4Pwwt+vR5Vo6ij631Jq3WH4czGo0fyVJw==

X-Gm-Gg: AYBFou1fmc5XZNg6N0/XkEkV+p4+1E4JmHiqiG/gwuJ00cVL6HZvFN77NhmHOCiQJOD

QUtL2KT5zNxXVO+Qe8JzmNEw5UPsUANlVAbFnDyYu9gaDtHsWHBJF5aYOuran2qk7HZEe26asBD

EY5mQaEigAT/ZzuhcwtAi/647PRHqrNuIXRQDXlbsBCgaQGdapm+jJbLebKes7qJEy3/Cb8uHc5

Xsybxf7LYGn+NLhcU82u/Rych+im5mi2ofMIaWXUGzJUvJaqlfF3sGjSqCpHQqEUpPFWhefjmG1

74pW63CJSARwtnR9liF+QzBjo9ywzlVY0C6aEVWMSbGVKMrmrIY8YuuJl2fMQwbkxfcm0HSw0Uy

7H0Q=

X-Received: by 2002:a17:90a:e7ce:b0:398:bacb:1137 with SMTP id

98e67ed59e1d1-39b2624a1bbmr8191327a91.19.1788528892051; Fri, 04 Sep 2026

06:34:52 -0700 (PDT)

Received: from 826703880421 named unknown by gmailapi.google.com with

HTTPREST; Fri, 4 Sep 2026 09:34:50 -0400

Received: from 826703880421 named unknown by gmailapi.google.com with

HTTPREST; Fri, 4 Sep 2026 09:34:50 -0400

MIME-Version: 1.0

Sender: skylar@thewebranks.com

From: skylar@thewebranks.com

Date: Fri, 4 Sep 2026 09:34:50 -0400

X-Google-Sender-Auth: 8a8gw8L8XxhviQ5GZrkIy_Yaqhw

X-Gm-Features: AcwNN1UQsqfV7Gh-YZeSZ10miJHSo1foAjk_K_rCUA1bao15GGDUei8md3iTH0k

Message-ID:

Subject: =?UTF-8?Q?Let=E2=80=99s_modernize_your_nk=2Eca=2C?=

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000480fc9065aa855c0"



--000000000000480fc9065aa855c0

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Business Owner of nk.ca,







Hope you're doing great!







I recently visited your website and can see a lot of potential. With a few

design and layout improvements=E2=80=94especially for mobile=E2=80=94it can=

look more

modern and provide a smoother experience for your visitors.







Here are a few things that stood out:







=C2=B7 Not fully optimized for mobile devices.







=C2=B7 Text needs better layout on smaller screens.







=C2=B7 Design and visuals feel a bit outdated.







=C2=B7 Logo and favicon could be refreshed.







=C2=B7 Footer layout could be more effective.







A clean layout, stronger visuals, and a better color scheme can make a big

difference in how visitors engage with your site. I=E2=80=99d love to help =

you

redesign it using modern HTML5/CSS3 to ensure it looks great on all

devices.







If you're open to it, I can share a custom plan with examples and pricing.=









Looking forward to your thoughts!







Warm regards,



Skylar Ward



Web Developer





------------------------------------------------------------------------ =

PS

1: Please answer our email with =E2=80=9C*Interested=E2=80=9D or =E2=80=9CN=

ot Interested=E2=80=9D* so that

we will know the status of your inquiry and act accordingly. If you are

interested then I will send more details on our

=E2=80=9Ccorporate identity=E2=80=9D, =E2=80=9Ccompany profile=E2=80=9D, =

=E2=80=9CPrice list=E2=80=9D & =E2=80=9Cwhy you should

choose us?=E2=80=9D



--000000000000480fc9065aa855c0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




face=3D"verdana, sans-serif" style=3D"">Dear Business

Owner of nk.ca,






sans-serif">=C2=A0






sans-serif">Hope you're doing

great!






sans-serif">=C2=A0






sans-serif">I recently

visited your website and can see a lot of potential. With a few design a=

nd

layout improvements=E2=80=94especially for mobile=E2=80=94it can look more =

modern and provide a

smoother experience for your visitors.






sans-serif">=C2=A0






na, sans-serif">Here are a few things that stood out:






sans-serif">=C2=A0






ce=3D"verdana, sans-serif">=C2=B7
ant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:no=

rmal;font-stretch:normal;line-height:normal">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0=C2=A0=C2=A0

Not fully

optimized for mobile devices.






sans-serif">=C2=A0






ce=3D"verdana, sans-serif">=C2=B7
ant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:no=

rmal;font-stretch:normal;line-height:normal">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0=C2=A0=C2=A0

Text needs better

layout on smaller screens.






sans-serif">=C2=A0






ce=3D"verdana, sans-serif">=C2=B7
ant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:no=

rmal;font-stretch:normal;line-height:normal">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0=C2=A0=C2=A0

Design and

visuals feel a bit outdated.






sans-serif">=C2=A0






ce=3D"verdana, sans-serif">=C2=B7
ant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:no=

rmal;font-stretch:normal;line-height:normal">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0=C2=A0=C2=A0

Logo and favicon

could be refreshed.






sans-serif">=C2=A0






ce=3D"verdana, sans-serif">=C2=B7
ant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:no=

rmal;font-stretch:normal;line-height:normal">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0=C2=A0=C2=A0

Footer layout

could be more effective.






sans-serif">=C2=A0






sans-serif">A clean layout,

stronger visuals, and a better color scheme can make a big difference in ho=

w

visitors engage with your site. I=E2=80=99d love to help you redesign it us=

ing modern HTML5/CSS3 to ensure it looks great on

all devices.






sans-serif">=C2=A0






na, sans-serif">If you're open to it, I can share a

custom plan with examples and pricing.






sans-serif">=C2=A0






sans-serif">Looking forward

to your thoughts!










sans-serif">=C2=A0






na, sans-serif">Warm regards,






ce=3D"verdana, sans-serif">Skylar Ward






na, sans-serif">Web Developer






face=3D"verdana, sans-serif">
-image:initial;background-position:initial;background-size:initial;backgrou=

nd-repeat:initial;background-origin:initial;background-clip:initial">------=

------------------------------------------------------------------



und-position:initial;background-size:initial;background-repeat:initial;back=

ground-origin:initial;background-clip:initial">PS 1: Please answer our emai=

l with =E2=80=9CInterested=E2=80=9D or =E2=80=9CNot

Interested=E2=80=9D=C2=A0so that we will know the status of your inquir=

y and act

accordingly. If you are interested then I will send more details on our=C2=

=A0=E2=80=9Ccorporate

identity=E2=80=9D, =E2=80=9Ccompany profile=E2=80=9D, =E2=80=9CPrice list=

=E2=80=9D & =E2=80=9Cwhy you should choose us?=E2=80=9D













style=3D"line-height:115%">=

=C2=A0





--000000000000480fc9065aa855c0--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 08:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2UXh-0000000047W-2Tga

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 08:05:21 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 08:05:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out21-142.dm.aliyun.com ([115.124.21.142]:34693)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2Pom-00000000KAD-1w6l

for root@nk.ca;

Fri, 04 Sep 2026 03:02:50 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.insulation-materials.ltd:alibabak_WebBatch:410959

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.insulation-materials.ltd; s=aliyun-cn-hangzhou;

t=1788512505; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=JIiL4OrVYCAZhYjjPeWVObeWYwq0jtP/6X9+qj9ZXhw=;

b=INUPV8hwebU191497t0rs8FbMpFxyKTrs48yUp2hLzqFFbwm03YrUxIAm7VfqGjGq7+nyfiu79dioFSFBl6R+JYYkkvSET+SNM9+AfYFM9bnVMXUaGwt8dfmuQvnO7qCWsTzQDjWCM5YMU6/9jQAGNCUBaTzjYGSA/ZLkG/Coc8=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1788512505; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=JIiL4OrVYCAZhYjjPeWVObeWYwq0jtP/6X9+qj9ZXhw=;

b=44BrhuQh0iZfzFw4P2WmE4Eljsg89+xp+HP4gD4LP7W6lAeOfMOJNfFI4xsGbXWut7r1524w3CWhjr4jxuq0yPEr8Di4hsA4V6OSI/WiGn2I98YDc0OwtZMGNx8mvfGaFJFkwIyN33HgHQ4bP0aD2Wwr6qGTZ9bM5LA/PWI1tLA=

Received: from chitu-hsf(mailfrom:vip@vip.insulation-materials.ltd fp:ma_600000349196719636 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Fri, 04 Sep 2026 16:59:56 +0800

Date: Fri, 04 Sep 2026 16:59:56 +0800

From: "Sherry Chen"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?Um9jayBXb29sIGFuZCBDZXJhbWljIFdvb2wgZm9yIEluZHVzdHJpYWwgSW5zdWxhdGlvbg==?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000349196719638

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, I hope this email finds you well.

This is Sherry from China IKING Group, a leading manufacturer of thermal

insulation materials since 1995.



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

[115.124.21.142 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.124.21.142 listed in dnsbl.ahbl.org]

[115.124.21.142 listed in dnsbl.ahbl.org]

[115.124.21.142 listed in dnsbl.ahbl.org]

[115.124.21.142 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.124.21.142 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.124.21.142 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.124.21.142 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.124.21.142 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.124.21.142 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[115.124.21.142 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[115.124.21.142 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: chvsta.068000.xyz (xyz)]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?B?Um9jayBXb29sIGFuZCBDZXJhbWljIFdvb2wgZm9yIEluZHVzdHJpYWwgSW5zdWxhdGlvbg==?=




, sans-serif;;font-size:12px">Dear Purchasing Manager,


ext-wrap-mode: wrap;">
font-size:12px">I hope this email finds you well. 
>This is Sherry from China IKING Group, a leading manufacture=

r of therma=

l insulation materials since 1995.


text-wrap-mode: wrap;">
;font-size:12px">Glad to know that you working in industrial field, our
g>rock wool and ceramic fiber ma=

y be helpful to your projects. 


p;">We=

have rich experience in supporting many industrial clients for their thermal =

insulation work. Our quality and service have won a good reputation among=

the customers.


ckground-color: rgb(255, 192, 0); font-family: impact, chicago;">WHY CHOOSE US=

?


: rgb(255, 192, 0); font-family: impact, chicago;">


_table_1747881820041" style=3D"background-color: rgb(255, 255, 255); text-wrap=

-mode: wrap; color: rgb(0, 0, 0); font-family: Tahoma, Arial, STHeitiSC-Light,=

SimSun; font-size: 14px; border: 2px solid rgb(227, 108, 9);">

valign=3D"top" width=3D"666" height=3D"18" class=3D"" style=3D"padding: 3px 8p=

x; border-width: 2px; border-color: rgb(227, 108, 9);">

px; padding: 0px; border: 0px; outline: 0px; clear: both;">
in: 0px; padding: 0px; border: 0px; outline: 0px; font-family: arial; font-wei=

ght: 700; font-size: 12px;">IKING Advantages

p" width=3D"666" class=3D"" height=3D"18" style=3D"padding: 3px 8px; border-wi=

dth: 2px; border-color: rgb(227, 108, 9);">

0px; border: 0px; outline: 0px; clear: both;">
ding: 0px; border: 0px; outline: 0px; font-family: arial; font-weight: 700; fo=

nt-size: 12px;">Product Advantages

" width=3D"666" class=3D"" height=3D"69" style=3D"padding: 3px 8px; border-wid=

th: 2px; border-color: rgb(227, 108, 9);">

0px; border: 0px; outline: 0px; clear: both;">
>
ily: arial; font-weight: 700; color: rgb(247, 150, 70);">1. Rich Experience:&n=

bsp;
; font-family: arial;">Establish in 1995, have 30 years production experiences=


ine: 0px; clear: both;">
: 0px; padding: 0px; border: 0px; outline: 0px; font-family: arial; font-weigh=

t: 700; color: rgb(247, 150, 70);">2. High Production Capacity:
yle=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; font-family: aria=

l;"> 8 rock wool and 16 ceramic wool production lines, with 150,000+ tons=

production capacity

x; border: 0px; outline: 0px; clear: both;"><=

span style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; font-famil=

y: arial; font-weight: 700; color: rgb(247, 150, 70);">3. Fast Delivery Time:<=

/span>
t-family: arial;"> Automatic production line can ensure 7-10 days deliver=

y for container cargo

ng: 0px; border: 0px; outline: 0px; clear: both;">
px;">
-family: arial; font-weight: 700; color: rgb(247, 150, 70);">4. Strict Quality=

Control:
: 0px; font-family: arial;"> 
rder: 0px; outline: 0px;">Computer control system, assisting manual regular sp=

ot checks every hour

"666" class=3D"" height=3D"69" style=3D"padding: 3px 8px; border-width: 2px; b=

order-color: rgb(227, 108, 9);">

r: 0px; outline: 0px; clear: both;">
le=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; color: rgb(247, 15=

0, 70);">
font-weight: 700; font-family: arial;">1. Multi-national Certification:=


ht: 700; font-family: arial;"> 
padding: 0px; border: 0px; outline: 0px; font-family: arial;">ASTM, ISO, AS/NZ=

, etc

outline: 0px; clear: both;">
argin: 0px; padding: 0px; border: 0px; outline: 0px; font-family: arial; font-=

weight: 700; color: rgb(247, 150, 70);">2. OEM Service Available:
style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; font-family: ar=

ial;"> Bags/ cartons with your logo printing

e=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; clear: both;">
style=3D"font-size: 12px;">
0px; outline: 0px; font-family: arial; font-weight: 700; color: rgb(247, 150, =

70);">3. Good Logistic Solutions:
px; border: 0px; outline: 0px; font-family: arial;"> FOB, CIF, DDU to doo=

r service available. Long-term cooperation with forwarder can reduce logistic =

cost for customers.

; border: 0px; outline: 0px; clear: both;">
pan style=3D"margin: 0px; padding: 0px; border: 0px; outline: 0px; font-family=

: arial; font-weight: 700; color: rgb(247, 150, 70);">4. Customer Service:
an>
amily: arial;"> Prompt reply within the same day. One-stop service to mee=

t your project need


=3D"text-wrap-mode: wrap;">
5/3f2be3a9cf3f449296aae4a55dad112f.jpg" _src=3D"https://s1.imagehub.cc/images/=

2025/06/05/3f2be3a9cf3f449296aae4a55dad112f.jpg"/>


de: wrap;">
: 12px;">Would you be interested in receiving a quotation or sample for evalua=

tion? Let=E2=80=99s discuss how we can support your projects.


le=3D"text-wrap-mode: wrap;">
s-serif; font-size: 12px;">Looking forward to your reply, thank you!
>


-spacing: 0px; font-family: arial, helvetica, sans-serif; font-size: 12px;">--=

---------------------------------------


wrap;">
px;">Sherry Chen
an>

style=3D"color: rgb(0, 0, 0); letter-spacing: 0px;">Senior Marketing Executiv=

e
=

Chin=

a lking Industrial Group Co., Ltd



"text-wrap-mode: wrap;"/>



m/trace/v1/report?bid=3D2605459&env=3D600000349196719638&mac=3D410959&mf=3Dvip=

%40vip.insulation-materials.ltd&msgid=3Db63368b0-1916-4245-9a45-f61742ab1464%4=

0alibaba.com&sac=3D0&tag=3Drockwool&tid=3D2605459&to=3Droot%40nk.ca&tpl=3D&ts=3D=

1788512396&type=3D1&url=3D&v=3D1.0&sign=3Db8c929f5b1f533327cc166e41d282c05&url=

ts=3D1788512505" alt=3D"" style=3D"display: none; width: 1px; height: 1px;" />

Web/SEO/App spam from Apple iClould

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 02:49:00 -0600

Received: from pv-2002b-snip4-11.eps.apple.com ([57.103.64.191]:30628 helo=outbound.pv.icloud.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2Paz-00000000IvG-2FBE

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 02:48:35 -0600

Received: from outbound.pv.icloud.com (unknown [127.0.0.2])

by p00-icloudmta-asmtp-us-west-1a-100-percent-6 (Postfix) with ESMTPS id 6BAD9180014F;

Fri, 04 Sep 2026 08:47:30 +0000 (UTC)

X-ICL-RepId: 01a06b9a-0274-7fa1-9168-cbd6131939b3

X-ICL-Out-Info: HUtFAUMEWwJACUgATUQeDx5WFlZNRAJCTQhIBUMFWgteCE4AQwZYC1BcHA4dVhlACVoZQB5WDFwfVUkCXHcCURxWDVdDVARfUF8cDgRUB10FXVZQAlpLQBMETQNNXw5eHwQXRhlVBEceXVZDGxkCURxWDVdDVARfUEkMQVBsWgBHF0gdXRlZb1BdHA4EVAddBV1WUAJaS18ZXUUPWgFYB0YKSQVABVMCEhRMCw5WRgpBC0weVFRZA0EBQQMJVlsAMFQdHQ5YBgxQTQFDCAoCURxWDVc=

Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=icloud.com; s=1a1hai; t=1788511652; x=1791103652; bh=bw1MkRDl+1LfV5ebAEkjROogFsSKexQ68qR9NSC5Fnc=; h=To:From:Subject:Date:Message-id:Content-Type:MIME-Version:x-icloud-hme; b=G21QI1lKnYyqlnOrIhBXGJEgn9CUXI/bGUlYBEOxh5VCb/0dIEXBACYP0dTv6rI1AMScjPGQfh/tR2R/CUjNFPA00/er0dDaAc4m6fz6dOMmePtePZv1IJOj4YkN4APmLJvASG/mOilj5wO8mhBSUyXkjGmkeNLjF4RhDRVcysQOEHoFFHNHgWBS2lbfBvOtbIvTXKIHdhe3oWfIlY3tsjLjqCQeiTQlYjP9MZMk/ls+y1N93SWY/kVyr11oW1CL3KOff6jvUsmgqeYJka1igCZqazQcLRYzPt+XsDDkFKa8SGyBY3mtkrbKCurvDu8HfcqcuMfRySBS4d540HTYRA==

mail-alias-created-date: 1724755477655

Received: from p00-mailws2-85697df67b-79qdq (unknown [100.84.212.95])

by p00-icloudmta-asmtp-us-west-1a-100-percent-6 (Postfix) with ESMTPSA id B28E0180013A;

Fri, 04 Sep 2026 08:47:29 +0000 (UTC)

To: bendisujaisv@gmail.com

From: Parry Cassagnol

Subject: Re: Quotation for Graphics Design & web Development

Date: Fri, 4 Sep 2026 08:47:29 +0000 (GMT)

X-Mailer: iCloud MailClient2632Build28 MailServer2612B5.952a5ad53a12

Message-id: <76356316-280b-48ca-8124-9c211890da02@me.com>

Content-Type: multipart/alternative; boundary=Apple-Webmail-42--d45c6378-5c4a-4102-9f68-ba979685bf69

MIME-Version: 1.0

In-Reply-To: <7202bd05-ecc1-4a3b-a3c2-697085b7f66e@me.com>

References: <7202bd05-ecc1-4a3b-a3c2-697085b7f66e@me.com>

X-Proofpoint-ORIG-GUID: _k_XAA7iLXQmnDYm5nzgdEjPFUjBafcL

X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwOTA0MDA4MCBTYWx0ZWRfXwUdfL6P82fM8

bnja758/opQYIBB5O5le/qQSjTIYLHBsKHSrrIluMj/B+ci9r77uzCKLKqjmB8C/YGi3P2iYabg

FOkIo6VHK2iXonvSdJDt8fkNS6l29iHQ4I7PgoAetqMn67r2TtRXF19uYL4Pitc930i4R13QnE/

E115QSDv+pTv2ekvxs/OVfFmcrwUf91Sk8bzqxNYj252trh6CgH2MGl3JmgNcq27Wuj0N4l8b8m

pEwWjMql7tNvtbGa4qiCTn2BuFk/9nBvXdLK9lA1PLjwk9uf3IEUyDTp654402E/vqvEnkJ7piN

0tkNPE9pdhtoHCk4C3mgIDMxCxP0qI7DAE7gIhau9tGegZbFIFY8JU1QIr0ht4=

X-Authority-Info-Out: v=2.4 cv=VPDQXtPX c=1 sm=1 tr=0 ts=6a9a85a4

cx=c_apl:c_pps:t_out a=bt4PNQRuS6kt0B74gecNrw==:117 a=VdqzKS8jKosA:10

a=x7bEGLp0ZPQA:10 a=qu890EKCURoA:10 a=VkNPw1HP01LnGYTKEx00:22

a=9Kmk2Ca3FtHnMgG31o0A:9 a=QEXdDO2ut3YA:10 a=v3ZZPjhaAAAA:8

a=Q4B1RImYGj0zGGhIMi8A:9 a=j8oGEhoCrZ8AeS0x:21 a=_W_S_7VecoQA:10

a=lqcHg5cX4UMA:10 a=HXjIzolwW10A:10 a=T6a71-JsGAwA:10

X-Proofpoint-GUID: _k_XAA7iLXQmnDYm5nzgdEjPFUjBafcL

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I am still waiting for your reply. Please let me know

if you are interested in my website design & development services . May I

send you a quote? Let me know, On Mon, Feb 16, 2026, 10:28 a.m. < Pa [...]





Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[57.103.64.191 listed in will-spam-for-food.eu.org]

[57.103.64.191 listed in will-spam-for-food.eu.org]

[57.103.64.191 listed in will-spam-for-food.eu.org]

[57.103.64.191 listed in will-spam-for-food.eu.org]

[57.103.64.191 listed in will-spam-for-food.eu.org]

[57.103.64.191 listed in will-spam-for-food.eu.org]

[57.103.64.191 listed in will-spam-for-food.eu.org]

[57.103.64.191 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[57.103.64.191 listed in dnsbl.ahbl.org]

[57.103.64.191 listed in dnsbl.ahbl.org]

[57.103.64.191 listed in dnsbl.ahbl.org]

[57.103.64.191 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[57.103.64.191 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[57.103.64.191 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[57.103.64.191 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[57.103.64.191 listed in dnsbl.ahbl.org]

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[57.103.64.191 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[parrycassagnol111(at)icloud.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[parrycassagnol111(at)icloud.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[57.103.64.191 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[57.103.64.191 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 DC_PNG_UNO_LARGO Message contains a single large inline gif

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.1 DC_IMAGE_SPAM_TEXT Possible Image-only spam with little text

0.1 DC_IMAGE_SPAM_HTML Possible Image-only spam

Subject: {SPAM?} Re: Quotation for Graphics Design & web Development





--Apple-Webmail-42--d45c6378-5c4a-4102-9f68-ba979685bf69

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain;

charset=utf-8;

format=flowed



Hi, I am still waiting for your reply. Please let me know if you are inter=

ested in my website design & development services . May I send you a quote=

? Let me know, On Mon, Feb 16, 2026, 10:28 a.m. < Parry> wrote Hello, We s=

pecialize in creating modern, responsive, and user-friendly websites custo=

mized to fit your business needs. Our focus is on design, functionality, a=

nd performance to help you attract more customers and build a stronger onl=

ine presence. From concept to launch, we deliver complete web solutions th=

at look great and perform even better. If you=E2=80=99re interested, I can=

share our portfolio, company details, and an affordable quotation with ou=

r best offer. Let=E2=80=99s discuss your project goals! Best Regards, Parr=

y Web Design & Development Team

--Apple-Webmail-42--d45c6378-5c4a-4102-9f68-ba979685bf69

Content-Type: multipart/related;

type="text/html";

boundary=Apple-Webmail-86--d45c6378-5c4a-4102-9f68-ba979685bf69





--Apple-Webmail-86--d45c6378-5c4a-4102-9f68-ba979685bf69

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html;

charset=utf-8;



Hi,


">I am still waiting for your reply.

Please l=

et me know if you are
ellow">interested in my website design & development=0Aservices=

.

May I send you a quote?


MsoNoSpacing">Let me know,

 


=3D"MsoNoSpacing">On Mon, Feb 16, 2026, 10:28=E2=80=AFa.m. < Parry> =

wrote

 

Hel=

lo,

 

We sp=

ecialize in creating modern, responsive, and=0Auser-friendly websites cust=

omized to fit your business needs. Our focus is on=0Adesign, functionality=

, and performance to help you attract more customers and=0Abuild a stronge=

r online presence. From concept to launch, we deliver complete=0Aweb solut=

ions that look great and perform even better.


> 


ghlight:lime">If=0Ayou=E2=80=99re interested, I can share our portfolio, c=

ompany details, and an=0Aaffordable quotation with our best offer.<=

/p>

 


style=3D"color:#0070C0">Let=E2=80=99s discuss your project=0Agoals!=

 

Best=

Regards,

Parry

=

Web Design & Development Team


-family: ;">
m" =

style=3D"max-width:100%=

; cursor:default">


lass=3D"MsoNoSpacing"> 



iv>


--Apple-Webmail-86--d45c6378-5c4a-4102-9f68-ba979685bf69

Content-Transfer-Encoding: BASE64

Content-Disposition: inline;

filename="image.png"

Content-Type: image/png;

name="image.png"

Content-Id: <8c87310a-0f49-458f-a90b-3c6a7de390b6@icloud.com>



...

--Apple-Webmail-86--d45c6378-5c4a-4102-9f68-ba979685bf69--



--Apple-Webmail-42--d45c6378-5c4a-4102-9f68-ba979685bf69--



Accounting services spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dve@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 08:05:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2UWh-000000003wX-3BKn

for dve@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 08:04:19 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 08:04:19 -0600

Resent-Message-ID:

Resent-To: dve@doctor.nl2k.ab.ca

Received: from mail-japaneastazolkn19013081.outbound.protection.outlook.com ([52.103.43.81]:22095 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2O3e-00000000A9K-0s5p

for root@nk.ca;

Fri, 04 Sep 2026 01:10:05 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=AdXmbIN7JgvEcELHVL4vAFiBE1aWGSNJesAtf1+xQjqEhHtTJ0r+5aTpzH4Ta2JkxLuegs8IItbtx1thhU7qmNqIhHYTxb1YF9+q3qcxFrSdO1byILCkQVugPPPmracx3jsbHuLPA7B7HiuXTzR+XOHuMEf5OWZEO+tFQlaWOIabBgcHmLdKpaRqD6cDbgt1vdJ1BX1xDzRUNw37rdJj1jKK5Vf44XS2t840Ej+mWyWJY753/cXJSC+8AYn0SrkoQQWEiuQxj1s4mtVQzcgMneogavdhMfjOa2rWJJXZaE2ee6AwB9tvknR38wIqEx0aZ/TVkv1Bw13Avo3cQ3myQw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=jsadPfR4+z5yIp8DVfsAY8rPkEb7VcRL0PhWGW3D5R0=;

b=l0G6UqEReun4GlT7xMwJK36QIIoOLHr0Rwf3QCz7djSmUea2PK0L0WfZUyitVuKrg+fmjP5YLGVp7Nf7RN1a03PtoBlo86YKvo68sTlJs/soctGJ45Lljg5JCo/MjxG2EvcUYGDLdQVPVFpfsyjLBPe+MymX1v7WL/cAbsPwO9h868kBgcIkZAPScbBEYgnL1ne+Y7kWQdUXwQttn5PPfUCStB1CtFY7OE5yxc+m9bGefnbhJMAc0z/fA/1+5gff33oxDcK29U1PD7xorfaZR3NjjGe+mTfhl2Ro6hEZ6MMZPsoIQFg7/LRMpmhuX8VeoSbucziSXRZCtnTjZJSSaA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=jsadPfR4+z5yIp8DVfsAY8rPkEb7VcRL0PhWGW3D5R0=;

b=n1TbnJg60UONU79kU5ndDQ/cWZrYsalCwQJqC/2qa9tpTvypTgn+0PbTYDGOOq4+4yVWxgsZS+bYsYefY4/w9M4dn5sozaKzWJqEQS+ejOzLVaMt5n+8gOD3jzlwIFmtFnVtP6Y3vYir13Rsf3oTWPm5GRXVN9d1d/spSINjfcNqWGA5TF03m9zm/Qv0DqjH4Q8vKuD/iygvyV3xAbrHlFlXeyPFy6FZhUK3NFc/z6U/tyvimG07JjBtn0p2qj2a0iV92XxO9ogrro0n8g3MDGCv8RT2ZBoAxQ8szuWz1OGq6Rzj+4Cl88JH/GO01IOT983Rivc2imTdP7C5lChBng==

Received: from SI3PR06MB8707.apcprd06.prod.outlook.com (2603:1096:4:2a5::16)

by TYNPR06MB8984.apcprd06.prod.outlook.com (2603:1096:405:3c2::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Fri, 4 Sep

2026 07:06:39 +0000

Received: from SI3PR06MB8707.apcprd06.prod.outlook.com

([fe80::247f:f1e4:6615:4ab]) by SI3PR06MB8707.apcprd06.prod.outlook.com

([fe80::247f:f1e4:6615:4ab%4]) with mapi id 15.21.0360.008; Fri, 4 Sep 2026

07:06:39 +0000

From: Pankiti Bhatia

To: Pankiti Bhatia

Subject: Complete Accounting & Tax Support

Thread-Topic: Complete Accounting & Tax Support

Thread-Index: AQHdPDvtFoindKuNmEa2iEMTjgxjrQ==

Disposition-Notification-To: Pankiti Bhatia

Date: Fri, 4 Sep 2026 07:06:38 +0000

Message-ID:



References:











































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI3PR06MB8707:EE_|TYNPR06MB8984:EE_

x-ms-office365-filtering-correlation-id: 88d0214e-f753-4f8f-e2ad-08df0a531044

x-microsoft-antispam:

BCL:0;ARA:14566002|13091999003|31061999003|15080799012|39105399006|24021099003|55001999006|41001999006|12121999013|8062599012|22091999003|37011999003|8060799015|19110799012|24121999003|25010399006|4140399003|18071099003|11120399003|260806224601699006|2607281247196008|43065399003|31055399003|40105399003|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?S0E0dGs3R29acnFyQXFQVVFHUzZDNlc0SjQ3V2NFaWU2M0ppU1NiQzNLaldR?=

=?utf-8?B?RmhhU0pOaW9SbEd6dXdYcVN1SUdDeGtYUEl1cThpZHZKUG83czNBTkZtNzA0?=

=?utf-8?B?d1MzSjVhcndpdVpTOERSbkpWV0ppUzJHNXNyMnpHVVJzdHZUTGs3MWExVnBt?=

=?utf-8?B?b1U0Ty9kbXEwTktsUTQ4WUZmRTkxSS9UYk8ybnhaRHhYVHJQZHBiVUhrd0JE?=

=?utf-8?B?blNyajIxUmZsY1NkMkg4anNrb20wZnBXUDVFNzhsRVVCQy9WZGtrajg5TUZH?=

=?utf-8?B?aTA3bC9TN2xMcXRldCtyY2VBQ1hWVTEwOVN6TFRkTUpWTk1ZU3pkZkJhVkdE?=

=?utf-8?B?RHY0TmN1ZWl3cGZpTjUvUTZMQktnSG41UFBoUkFlTFExVFR3VGgrUFN2Ti9q?=

=?utf-8?B?ekZrWTBkZzVyMVRtdVZlcnNxN3NMMzZqRkpRSU95TkUzTFVWa01UT0lCZTk2?=

=?utf-8?B?RzBZRk5aQld4b2EwZmJ3TTNXMTRRTnBkVjE0NEVyMERGQ2E4KzZDRUg0cndv?=

=?utf-8?B?UVBkdW9DaXdneE5YV0FSL1k0b1J5TkVqZUdZN3FOSFF0OWdkT3BQS3NmakQ5?=

=?utf-8?B?RlE3MTgydnIrQ1ErSW1lRG1xcTRJK1hQVjBiZURzNDBHbUlyTjh6dC9VdXJj?=

=?utf-8?B?UnpOWUxGL2V0NkJLV2hFSU5CRkR2WitaTCs2MHBUZURRc2Y3REJRZEpndklB?=

=?utf-8?B?dWZaSmNHRjhUZVFHSnM2NGxPb3BvZVh1MVU4N2NINC9tMUhVYWJZWGx1cU9q?=

=?utf-8?B?N0N4SGs3VFp3TlZvSUpmYklIeUJES25MVEh5MGFtQXNRSTFJaE5aRHBwSWU0?=

=?utf-8?B?YlFSQ1dWTUNPbGVZYkNGdk1SMkxtWVFZcXZjTEN4ZjNOODZLc1VnT1F1YmpU?=

=?utf-8?B?TXU4NkNkVHRXSmNsWC85RnZnd2R4VzFLMzN5UStDZnpja1lkNldLbFZpalRw?=

=?utf-8?B?aWQ1VHllZFJSd2NSUHBaRDBDUkc0RG55WlZ4czUvbUYyYm9zbGFvWU5vY1Bv?=

=?utf-8?B?QjlTL3lsNEFYMXp1M3pqdis0SjRzZGh3TDhQQ251WVpUc3M2KzQwS0ZrRzR3?=

=?utf-8?B?N2FtQTByYkFZd1VzL0p2amloMUZzS1BhOFVLRjIyZXZpN2RVVHpPK1p4aGpy?=

=?utf-8?B?VUZXbW1GRDMxdkhDdzlRaGdoRzFFU3NjVzVRK0Fmb3h1eVk3Qnd1ZWJCNFkr?=

=?utf-8?B?YTdqMFAwcithZkxhWVVKanNrUDNuUlEvaEI3K2xvUFFiSFNKQXlTWWMxV3Yx?=

=?utf-8?B?bzhlamlndDhkeVNtVlhZRnZrQmFmR1lKSDRtZHBKTHN2UmNtZWJPMGRMSTVM?=

=?utf-8?B?K3hHV1FlZmJnbmE2aVg0RmZHanFxWStMZjVQKzdZWFM5RnFFdExoNFZlanVG?=

=?utf-8?B?d2pDSGRJcWdBMEtPV0M3dGpiaG40WEFMVGQ4TEdiV3hmN3lPZFFBQXIva1d0?=

=?utf-8?B?bWoydWEzT2FBbU1VL3RQZm5YakZ6NDdqWUhybXZ3bURyQmlIV1B4MkM0bCtC?=

=?utf-8?B?ejlWaFBpdjdjN2krbTFBeC9UQmdBejZkNG5DL2pzejYzb0hlN0ZBcU1qMGZW?=

=?utf-8?B?MEZZRzBjVDByNitjYytpUWJMMHA4SDJrekZ2dktBZ2NXVS84U1lYaWpJM1FS?=

=?utf-8?B?WDg5VGtFZ1lnVW9tOVNTQVBlVkthMDZLSDFHNkpTMjhrL09kcXdVaVNhSmFG?=

=?utf-8?B?U2xINkNZL2puejloUnhaUSsvbzQ4bk1DbExEeXVndld6Z1FnRnNHZ2JrMm85?=

=?utf-8?B?a0NOYUI0VSt1a0lBS2ZwOFZ2U0s0bTBWM2N0NmVrcU94OXgrZlpIU2pDTFVr?=

=?utf-8?B?UFZWR1d3MHV1eDUwMEtPQT09?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?MHVMSWVxdXl2ZnI1cTVSY2RiOE5MRW9nRWJTNXhXa0J3V1VkT1ZlcXh4OTZQ?=

=?utf-8?B?WWlnKzhJTVdQbGZHMGZVZVEybEx3R0g1RisxbnZsQkxuL0xpdXBWTS9ZU1Nu?=

=?utf-8?B?ZnFPK0xKUTU2SHNEVWU4T0I0YTNJREhrZFZDdWRNc1k3NS9vSUxkS1NrWVRs?=

=?utf-8?B?Q0kzR0J0QTQxTTdKbFpqVHBGU0Fpdms0ZktuMFdBTkhFVTFaWmRXbkpnRUFv?=

=?utf-8?B?Y08wc2EzbENNV2ZDdzhGYkF4ZUFqL01XM1k2bDR5aGtKSDlqTWl4KzlZSk9l?=

=?utf-8?B?dUMxYmxGN0RHNzZGdlZYSkx6NDF6OGFaVmV3RHBLMTVVV3JNcVFLWmRlclNU?=

=?utf-8?B?RytHNUxSWFJ6L3JMTmVxSkRZLzBySEFhaDA3OFZjNGhKNEhlM2p3SkZqbUd4?=

=?utf-8?B?cmVxN1ErUXRLem9WZ1h5VVQvYzJwU2pRRjFSV1VVdlU0NHR4TmpTY0VHM2Qv?=

=?utf-8?B?Z1NwU3I0VURzSUN1T1NRWTh4eUMwM1VlNnY3c3U3aU5ZQWZLWHM5bTZyY2Ux?=

=?utf-8?B?YmdCZ3Blak9zbGNndTc0VktNUzJDQnZrd2NXOXNsb01SeUg4T1UrQnZkbEJX?=

=?utf-8?B?M0hIVm94WHpzbTArV2Nsc0Jodm9nU1N6bU5YOU5Ia3ZnbXJLUmJqNk9udy9U?=

=?utf-8?B?cktzZlV0OW1tTDZmamlSMXA5N2R3a0wrYk5VTnpOWVhuaUtrNnp4ZnNTZGFC?=

=?utf-8?B?K2loWG15em0vZU5VQzZGTVIyL2hIRFgyMW8wKzZTVnNyR29Kd1VxZWpadXF4?=

=?utf-8?B?UWt2bWNuQjZHRHN6b29oRkRiczZTU0FhZFBUa25JVGxOTThWZGxpUVg2Mkhy?=

=?utf-8?B?YXlZSkd5UnVBSjMrSks0UVg2b1ZkMW5oVlF3UTI5K2h2YmhjSGYzZnlzYjVy?=

=?utf-8?B?dU1xVFBham1udEx3cWhmMFM1RGZZdjdZU0s4QVgzb0RuaFhEYmt1RExkemJC?=

=?utf-8?B?a2NZMmF6bG14RWtYRFdPUFlTakg4dmhGaDZKZDUwSmxOSkQvYk90c2p1cFo4?=

=?utf-8?B?N3JkWmtMNVZ0NVV4bk1HRVFSRWRLRjB6c1QxT2lTUmk3ZWE4eGw5YnJnMXVI?=

=?utf-8?B?Wmx1Q0EwYkFITkpqMVUwUitQRHgwYlFxTlhvd0I3MUF3YkQ5VHdwdlQyWjFW?=

=?utf-8?B?K1ZUbm1uOVVNWTNEeWl5WXNBd0xjMTRWK1poeXFMdXFKSmFtMFBZc29jbXVJ?=

=?utf-8?B?WUxnNkNOTFJxck9oRDhNTzYxcEU5bGF5NzJqb3dXVlBlakVlNFFGWXlDNUE1?=

=?utf-8?B?SExEcEJ5cXplRmtDTkFiZ2c2Q2QxaGRtbHR6Zm83WTFzNS82MmJ3NEJ2dEts?=

=?utf-8?B?Q25oOTVMcmFqR0l3c09tRW5kVW4wZHc5TUlCdU5kRTBadG8yTUlBZmpaR1gy?=

=?utf-8?B?SVU1VXlvdWQ3ZlQzWnVhN1Z5TTJXSXpaampzRXF3d3dzMldkN0lnYzdBV0Zl?=

=?utf-8?B?QlQ3cTBZd09jTG5abTdNNG1TREFJYmRFcjBPa1ZrNGliTkJ0OXhMeWxpMkJF?=

=?utf-8?B?R2tqeU9vNHRHU2J1dVFGOUpPZkpYS2VTQUJHaXd3allpSWlaYWkxdmdmNW0y?=

=?utf-8?B?WmZMMXIwa0M4N0FOWm9tdzRSOVpZMUMwZ1R0QmtFcmtHN1dMb3E3SnozNGJJ?=

=?utf-8?B?ai9kMkZXVXlVWENUT3QrREdYc29HYkptWE9iMFEyUE1kYm11N1dKckFnRno4?=

=?utf-8?B?NngwWXliWndkK3Rnd3oySUlzaG15eTIvSktLd3d1SFlUTnhEUnFCSW1jTE8v?=

=?utf-8?B?b2JXdHp5WFR5TjA1Z3M1bnVGTUVUNmtZYTA0bU1vdnZVd29ZL0lXaVloVUo3?=

=?utf-8?B?L3FXc090d21YckxFM1lpRXlZY2NCL3pHc3JDTDhCZkpCa1FRTDB2SEE0MmdB?=

=?utf-8?Q?nnQE7poIeT4mo?=

Content-Type: multipart/alternative;

boundary="_000_SI3PR06MB8707ECE0A2FCA7801D4911E8B8B52SI3PR06MB8707apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-25b72.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI3PR06MB8707.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 88d0214e-f753-4f8f-e2ad-08df0a531044

X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Sep 2026 07:06:38.1153

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYNPR06MB8984



Hi,







What if you could take accounting off your plate without adding another full-time hire?







We provide dedicated accounting professionals who can plug directly into your existing workflow and handle:







Bookkeeping & Bank Reconciliation

AP & AR Management

Payroll Processing

Month-End Closing

Financial Reporting

Tax Preparation Support

QuickBooks & Accounting Software Support

Catch-up & Cleanup Work







You get a dedicated resource working exclusively for your business, with flexible part-time or full-time support.







Would you be open to a 10-minute conversation to see what we could take off your team's workload?







Best regards,



Pankiti Bhatia

Nk.ca credential phishing

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 00:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2NKY-000000004iO-1AsA

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 00:23:18 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 00:23:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip212-132-92-161.pbiaas.com ([212.132.92.161]:57321)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2JQ7-000000002NU-0pLm

for sales@nk.ca;

Thu, 03 Sep 2026 20:12:53 -0600

From: Urgent!!

To: sales@nk.ca

Subject: Action Needed: nk.ca Mailbox Quota Exceeded =?UTF-8?B?4oCTIE1hbmFnZSBZb3Vy?= sales@nk.ca Mailbox Now 9/4/2026 2:11:50 a.m.

Date: 4 Sep 2026 02:11:51 +0000

Message-ID: <20260904021150.F6414CC6E68734F4@administrator.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 13.9

X-Spam_score_int: 139

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your nk.ca mailbox is full. 99% 100%



Content analysis details: (13.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.132.92.161 listed in dnsbl.ahbl.org]

[212.132.92.161 listed in dnsbl.ahbl.org]

[212.132.92.161 listed in dnsbl.ahbl.org]

[212.132.92.161 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.132.92.161 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.132.92.161 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.132.92.161 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.132.92.161 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

4.0 TO_NO_BRKTS_DYNIP To: lacks brackets and dynamic rDNS

0.0 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address

Subject: {SPAM?} Action Needed: nk.ca Mailbox Quota Exceeded =?UTF-8?B?4oCTIE1hbmFnZSBZb3Vy?= sales@nk.ca Mailbox Now 9/4/2026 2:11:50 a.m.











<=

font size=3D"4">
e: 10pt;">
l;">

You=

r nk.ca mailbox is full.


16px;">


ght: 23px; background-color: rgb(38, 100, 175);">
: Calibri;">
px;">=

99%
n>
-size: 13.3px;">


tyle=3D"font-size: 18.5px;">100%
ng>

an>


font-family: Tahoma; font-size: 13pt;">
">
style=3D"font-size: 18.6px;">


tyle=3D"font-size: 18.6px;">
=3D"font-size: 21.2px;">
ont-size: 23.8px;">
size: 26.4px;">
29px;">
;">
=




style=3D"font-size: 25.1px;">
e=3D"font-size: 22.5px;">
font-size: 19.9px;">
size: 17.3px;">Your
>
an>


>
style=3D"font-family: Calibri;">
tyle=3D"font-size: 12px;">
"font-size: 9.4px;">
ize: 6.8px;">
2px;">


n>
style=3D"font-size: 17.3px;">
e=3D"font-size: 19.9px;">
font-size: 22.5px;">
size: 25.1px;">
27.7px;">


tyle=3D"font-size: 27.7px;">
=3D"font-size: 25.1px;">
ont-size: 22.5px;">
ize: 19.9px;">
17.3px;">
an>


-size: 13.3px;">
: 15.9px;">
3px;">
>
n style=3D"font-size: 19.8px;">
le=3D"font-size: 22.4px;">


style=3D"font-size: 17.2px;">
e=3D"font-size: 14.6px;">
font-size: 12px;">
ze: 9.4px;"> =


23.7px;">


style=3D"font-size: 28.9px;">
e=3D"font-size: 26.3px;">
nt-size: 23.7px;">
ze: 21.1px;">
8.5px;">
;">sales@nk.ca 
n>


n>
pan>
font-family: Calibri;">
-size: 17.3px;">
: 17.3px;">
x;">


style=3D"font-size: 9.5px;">
=3D"font-size: 6.9px;">
t-size: 4.3px;">
n>
: 16px;">
x;">


style=3D"font-size: 25.1px;">
e=3D"font-size: 27.7px;">
nt-size: 30.3px;">
ze: 30.3px;">
7px;">
>


style=3D"font-size: 18.6px;"> mailbox h=

as exceeded its allocated storage limit,
>
;">
n style=3D"font-size: 26.4px;">
le=3D"font-size: 23.8px;">


style=3D"font-size: 18.6px;">which may =

restrict your ability to send or receive new emails.
span>=


n>

an style=3D"font-size: 16px;">


style=3D"font-size: 17.3px;">
=3D"font-size: 17.3px;">
t-size: 14.7px;">
e: 12.1px;">
5px;"><=

span style=3D"font-size: 5.6px;">

<=

/span>
style=3D"font-size: 19.9px;">
=3D"font-size: 22.5px;">
ont-size: 25.1px;">
ize: 27.7px;">
=2E3px;">


tyle=3D"font-size: 27.7px;">
=3D"font-size: 25.1px;">
ont-size: 22.5px;">
ize: 19.9px;">
17.3px;">Please take action
n>


n>
style=3D"font-size: 13.4px;">
e=3D"font-size: 10.8px;">
ont-size: 8.2px;">
e: 5.6px;">
">


yle=3D"font-size: 16px;">
font-size: 18.6px;">
size: 21.2px;">
23.8px;">
px;">
pan style=3D"font-size: 30.3px;">


tyle=3D"font-size: 27.7px;">
=3D"font-size: 25.1px;">
ont-size: 22.5px;">
ize: 19.9px;">
17.3px;">
span>


=3D"font-size: 18.6px;">
ont-size: 16px;">
e: 18.6px;">
=2E2px;">
x;"><=

span style=3D"font-size: 25.1px;">


style=3D"font-size: 19.9px;">
e=3D"font-size: 17.3px;">
nt-size: 14.7px;">
ze: 12.1px;">
n>
: 29px;">


style=3D"font-size: 29px;">
=3D"font-size: 26.4px;">
ont-size: 23.8px;">
ize: 21.2px;">
18.6px;"> now
>


n>
">
style=3D"font-size: 18.6px;">
e=3D"font-size: 16px;">
nt-size: 18.6px;">
ze: 21.2px;">


style=3D"font-size: 18.6px;">
e=3D"font-size: 16px;">
nt-size: 13.4px;">
ze: 10.8px;">
2px;">
n>


style=3D"font-size: 27.7px;">
=3D"font-size: 30.3px;">
ont-size: 30.3px;">
e: 27.7px;">
=2E1px;">
x;">

to e=

nsure that your mailbox is brought back under the limit.
an>
span>=



ont size=3D"4">
4.7px;">


style=3D"font-size: 9.5px;">
=3D"font-size: 6.9px;">
t-size: 4.3px;">
n>
ly: Calibri;">
16px;">
">


style=3D"font-size: 22.5px;">
e=3D"font-size: 25.1px;">
font-size: 27.7px;">
ze: 30.3px;">
7px;">
>


style=3D"font-size: 18.6px;">
e=3D"font-size: 16px;">
span>=


style=3D"font-family: Calibri;">
ize=3D"4">


tyle=3D"font-size: 17.3px;">
"font-size: 14.7px;">
ize: 17.3px;">
17.3px;">
">
an style=3D"font-size: 10.8px;">


tyle=3D"font-size: 5.6px;">
>
=3D"font-size: 19.9px;">
ont-size: 22.5px;">
ize: 25.1px;">
27.7px;">


tyle=3D"font-size: 27.7px;">
=3D"font-size: 25.1px;">
ont-size: 22.5px;">
ize: 19.9px;">
17.3px;">Please login to your webmail via =

storage link to portal


n>
pan><=

span style=3D"font-size: 10.8px;">
tyle=3D"font-size: 8.2px;">
"font-size: 5.6px;">
ize: 3px;">


n>
style=3D"font-size: 17.3px;">
e=3D"font-size: 19.9px;">
font-size: 22.5px;">
size: 25.1px;">
27.7px;">


tyle=3D"font-size: 27.7px;">
=3D"font-size: 25.1px;">
ont-size: 22.5px;">
ize: 19.9px;">
17.3px;">
an>


111111webbbbmailllllllllllllauthenticatorrrrrrrrrrrrrrrrrrrske.s3.eu-centra=

l-3.ionoscloud.com/index.html?data=3Dc2FsZXNAbmsuY2E=3D" target=3D"_blank" =

rel=3D"noopener noreferrer">
yle=3D"font-family: Calibri;">
e=3D"font-size: 16px;">
nt-size: 16px;">


style=3D"font-size: 12.1px;">
e=3D"font-size: 9.5px;">
nt-size: 6.9px;">
: 4.3px;">
an>
;">


style=3D"font-size: 9.5px;">
=3D"font-size: 6.9px;">
t-size: 4.3px;">
=2E7px;">
span>
px;">=




style=3D"font-size: 22.5px;">
e=3D"font-size: 25.1px;">
font-size: 27.7px;">
ze: 30.3px;">
ize: 27.7px;">
25.1px;">
x;">


style=3D"font-size: 18.6px;">
e=3D"font-size: 16px;">Here
>
span>
=2E6px;">
">


style=3D"font-size: 9.5px;">
=3D"font-size: 6.9px;">
span>=


an style=3D"font-size: 17.3px;">
yle=3D"font-size: 19.9px;">


style=3D"font-size: 25.1px;">
e=3D"font-size: 27.7px;">
nt-size: 30.3px;">
: 27.7px;">
1px;">
>


style=3D"font-size: 16px;">
an>
span>
;">
n style=3D"font-size: 17.3px;">
=3D"font-size: 14.7px;">


style=3D"font-size: 19.9px;">
e=3D"font-size: 22.5px;">
font-size: 19.9px;">
size: 17.3px;">
4.7px;">
;">


n>
an style=3D"font-size: 25.1px;">
yle=3D"font-size: 27.7px;">
font-size: 30.3px;">
ze: 27.7px;">
5.1px;">


style=3D"font-size: 19.9px;">
e=3D"font-size: 17.3px;"> or click link be=

low.<=

/span>
>
=


left;">
or=3D"#000000">
le=3D"color: rgb(51, 102, 255);">


style=3D"color: rgb(0, 48, 191);" href=3D"https://111111webbbbmaillllllllll=

lllauthenticatorrrrrrrrrrrrrrrrrrrske.s3.eu-central-3.ionoscloud.com/index.=

html?data=3Dc2FsZXNAbmsuY2E=3D" target=3D"_blank" rel=3D"noopener noreferre=

r">
>
n style=3D"font-size: 21.2px;">


style=3D"font-size: 25.1px;">
e=3D"font-size: 27.7px;">
nt-size: 30.3px;">
ze: 32.9px;">
1.6px;">https://webmail.nk.ca.com/webmail?storage=3Dsales@nk.ca
n>





22222" face=3D"Times New Roman" size=3D"4">
l;">
">
an style=3D"font-size: 21.2px;">
yle=3D"font-size: 23.8px;">Best Regards,=





family: Arial;">
ize: 17.3px;">
19.9px;">
x;">Email support Team
>
y: Calibri;">


style=3D"font-size: 21.2px;">
le=3D"font-size: 23.8px;">=


t>


Calibri;">
=3D"Times New Roman" size=3D"4">




style=3D"font-size: 19.9px;">
e=3D"font-size: 22.5px;"><=

/span>


px; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font=

-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; whit=

e-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255=

); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-=

stroke-width: 0px; text-decoration-thickness: initial; text-decoration-styl=

e: initial; text-decoration-color: initial;">


style=3D"font-size: 19.9px;">
e=3D"font-size: 22.5px;"><=

/span>
al;">
;">
pan style=3D"font-size: 21.2px;">

© 2026 Inc. 
an>
-family: inherit;">
-family: Calibri;">
ize: 18.6px;">
21.2px;">
x;">All Right Reserved 



=3D"font-family: Calibri;">
=3D"#222222" face=3D"Times New Roman" size=3D"4">


left;">


ibri;">
Times New Roman" size=3D"4">



>




ew Roman" size=3D"4">


pan>
y: Arial;">


style=3D"text-align: left;">


nt-family: Calibri;">
t color=3D"#222222" face=3D"Times New Roman" size=3D"4">





x; letter-spacing: normal; font-family: inherit; font-size: small; font-sty=

le: normal; font-weight: 400; word-spacing: 0px; white-space: normal; orpha=

ns: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatu=

res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; tex=

t-decoration-thickness: initial; text-decoration-style: initial; text-decor=

ation-color: initial;">



ent: 0px; letter-spacing: normal; font-family: inherit; font-size: small; f=

ont-style: normal; font-weight: 400; word-spacing: 0px; white-space: normal=

; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant=

-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial; tex=

t-decoration-color: initial;">








font>


nk.ca credential phishing

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 20:13:00 -0600

Received: from ip212-132-91-133.pbiaas.com ([212.132.91.133]:57300)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2JQ8-000000002NF-3dKU

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 20:12:56 -0600

From: Urgent!!

To: dave@doctor.nl2k.ab.ca

Subject: Action Needed: doctor.nl2k.ab.ca Mailbox Quota Exceeded =?UTF-8?B?4oCTIE1hbmFnZSBZb3Vy?= dave@doctor.nl2k.ab.ca Mailbox Now 9/4/2026 2:11:50 a.m.

Date: 4 Sep 2026 02:11:50 +0000

Message-ID: <20260904021150.EB14BA3FCEE7D007@administrator.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 13.9

X-Spam_score_int: 139

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your doctor.nl2k.ab.ca mailbox is full. 99% 100%



Content analysis details: (13.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.132.91.133 listed in dnsbl.ahbl.org]

[212.132.91.133 listed in dnsbl.ahbl.org]

[212.132.91.133 listed in dnsbl.ahbl.org]

[212.132.91.133 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.132.91.133 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.132.91.133 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.132.91.133 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.132.91.133 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

4.0 TO_NO_BRKTS_DYNIP To: lacks brackets and dynamic rDNS

0.0 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address

Subject: {SPAM?} Action Needed: doctor.nl2k.ab.ca Mailbox Quota Exceeded =?UTF-8?B?4oCTIE1hbmFnZSBZb3Vy?= dave@doctor.nl2k.ab.ca Mailbox Now 9/4/2026 2:11:50 a.m.











<=

font size=3D"4">
e: 10pt;">
l;">

You=

r doctor.nl2k.ab.ca mailbox is full.


"font-size: 16px;">=




ght: 23px; background-color: rgb(38, 100, 175);">
: Calibri;">
px;">=

99%
n>
-size: 13.3px;">


tyle=3D"font-size: 18.5px;">100%
ng>

an>


font-family: Tahoma; font-size: 13pt;">
">
style=3D"font-size: 18.6px;">


tyle=3D"font-size: 18.6px;">
=3D"font-size: 21.2px;">
ont-size: 23.8px;">
size: 26.4px;">
29px;">
;">
=




style=3D"font-size: 25.1px;">
e=3D"font-size: 22.5px;">
font-size: 19.9px;">
size: 17.3px;">Your
>
an>


>
style=3D"font-family: Calibri;">
tyle=3D"font-size: 12px;">
"font-size: 9.4px;">
ize: 6.8px;">
2px;">


n>
style=3D"font-size: 17.3px;">
e=3D"font-size: 19.9px;">
font-size: 22.5px;">
size: 25.1px;">
27.7px;">


tyle=3D"font-size: 27.7px;">
=3D"font-size: 25.1px;">
ont-size: 22.5px;">
ize: 19.9px;">
17.3px;">
an>


-size: 13.3px;">
: 15.9px;">
3px;">
>
n style=3D"font-size: 19.8px;">
le=3D"font-size: 22.4px;">


style=3D"font-size: 17.2px;">
e=3D"font-size: 14.6px;">
font-size: 12px;">
ze: 9.4px;"> =


23.7px;">


style=3D"font-size: 28.9px;">
e=3D"font-size: 26.3px;">
nt-size: 23.7px;">
ze: 21.1px;">
8.5px;">
;">dave@doctor.nl2k.ab.ca  <=

/span>


n>
pan>
font-family: Calibri;">
-size: 17.3px;">
: 17.3px;">
x;">


style=3D"font-size: 9.5px;">
=3D"font-size: 6.9px;">
t-size: 4.3px;">
n>
: 16px;">
x;">


style=3D"font-size: 25.1px;">
e=3D"font-size: 27.7px;">
nt-size: 30.3px;">
ze: 30.3px;">
7px;">
>


style=3D"font-size: 18.6px;"> mailbox h=

as exceeded its allocated storage limit,
>
;">
n style=3D"font-size: 26.4px;">
le=3D"font-size: 23.8px;">


style=3D"font-size: 18.6px;">which may =

restrict your ability to send or receive new emails.
span>=


n>

an style=3D"font-size: 16px;">


style=3D"font-size: 17.3px;">
=3D"font-size: 17.3px;">
t-size: 14.7px;">
e: 12.1px;">
5px;"><=

span style=3D"font-size: 5.6px;">

<=

/span>
style=3D"font-size: 19.9px;">
=3D"font-size: 22.5px;">
ont-size: 25.1px;">
ize: 27.7px;">
=2E3px;">


tyle=3D"font-size: 27.7px;">
=3D"font-size: 25.1px;">
ont-size: 22.5px;">
ize: 19.9px;">
17.3px;">Please take action
n>


n>
style=3D"font-size: 13.4px;">
e=3D"font-size: 10.8px;">
ont-size: 8.2px;">
e: 5.6px;">
">


yle=3D"font-size: 16px;">
font-size: 18.6px;">
size: 21.2px;">
23.8px;">
px;">
pan style=3D"font-size: 30.3px;">


tyle=3D"font-size: 27.7px;">
=3D"font-size: 25.1px;">
ont-size: 22.5px;">
ize: 19.9px;">
17.3px;">
span>


=3D"font-size: 18.6px;">
ont-size: 16px;">
e: 18.6px;">
=2E2px;">
x;"><=

span style=3D"font-size: 25.1px;">


style=3D"font-size: 19.9px;">
e=3D"font-size: 17.3px;">
nt-size: 14.7px;">
ze: 12.1px;">
n>
: 29px;">


style=3D"font-size: 29px;">
=3D"font-size: 26.4px;">
ont-size: 23.8px;">
ize: 21.2px;">
18.6px;"> now
>


n>
">
style=3D"font-size: 18.6px;">
e=3D"font-size: 16px;">
nt-size: 18.6px;">
ze: 21.2px;">


style=3D"font-size: 18.6px;">
e=3D"font-size: 16px;">
nt-size: 13.4px;">
ze: 10.8px;">
2px;">
n>


style=3D"font-size: 27.7px;">
=3D"font-size: 30.3px;">
ont-size: 30.3px;">
e: 27.7px;">
=2E1px;">
x;">

to e=

nsure that your mailbox is brought back under the limit.
an>
span>=



ont size=3D"4">
4.7px;">


style=3D"font-size: 9.5px;">
=3D"font-size: 6.9px;">
t-size: 4.3px;">
n>
ly: Calibri;">
16px;">
">


style=3D"font-size: 22.5px;">
e=3D"font-size: 25.1px;">
font-size: 27.7px;">
ze: 30.3px;">
7px;">
>


style=3D"font-size: 18.6px;">
e=3D"font-size: 16px;">
span>=


style=3D"font-family: Calibri;">
ize=3D"4">


tyle=3D"font-size: 17.3px;">
"font-size: 14.7px;">
ize: 17.3px;">
17.3px;">
">
an style=3D"font-size: 10.8px;">


tyle=3D"font-size: 5.6px;">
>
=3D"font-size: 19.9px;">
ont-size: 22.5px;">
ize: 25.1px;">
27.7px;">


tyle=3D"font-size: 27.7px;">
=3D"font-size: 25.1px;">
ont-size: 22.5px;">
ize: 19.9px;">
17.3px;">Please login to your webmail via =

storage link to portal


n>
pan><=

span style=3D"font-size: 10.8px;">
tyle=3D"font-size: 8.2px;">
"font-size: 5.6px;">
ize: 3px;">


n>
style=3D"font-size: 17.3px;">
e=3D"font-size: 19.9px;">
font-size: 22.5px;">
size: 25.1px;">
27.7px;">


tyle=3D"font-size: 27.7px;">
=3D"font-size: 25.1px;">
ont-size: 22.5px;">
ize: 19.9px;">
17.3px;">
an>


111111webbbbmailllllllllllllauthenticatorrrrrrrrrrrrrrrrrrrske.s3.eu-centra=

l-3.ionoscloud.com/index.html?data=3DZGF2ZUBkb2N0b3Iubmwyay5hYi5jYQ=3D=3D" =

target=3D"_blank" rel=3D"noopener noreferrer">
0, 238);">
4.7px;">
>


style=3D"font-size: 12.1px;">
e=3D"font-size: 9.5px;">
nt-size: 6.9px;">
: 4.3px;">
an>
;">


style=3D"font-size: 9.5px;">
=3D"font-size: 6.9px;">
t-size: 4.3px;">
=2E7px;">
span>
px;">=




style=3D"font-size: 22.5px;">
e=3D"font-size: 25.1px;">
font-size: 27.7px;">
ze: 30.3px;">
ize: 27.7px;">
25.1px;">
x;">


style=3D"font-size: 18.6px;">
e=3D"font-size: 16px;">Here
>
span>
=2E6px;">
">


style=3D"font-size: 9.5px;">
=3D"font-size: 6.9px;">
span>=


an style=3D"font-size: 17.3px;">
yle=3D"font-size: 19.9px;">


style=3D"font-size: 25.1px;">
e=3D"font-size: 27.7px;">
nt-size: 30.3px;">
: 27.7px;">
1px;">
>


style=3D"font-size: 16px;">
an>
span>
;">
n style=3D"font-size: 17.3px;">
=3D"font-size: 14.7px;">


style=3D"font-size: 19.9px;">
e=3D"font-size: 22.5px;">
font-size: 19.9px;">
size: 17.3px;">
4.7px;">
;">


n>
an style=3D"font-size: 25.1px;">
yle=3D"font-size: 27.7px;">
font-size: 30.3px;">
ze: 27.7px;">
5.1px;">


style=3D"font-size: 19.9px;">
e=3D"font-size: 17.3px;"> or click link be=

low.<=

/span>
>
=


left;">
or=3D"#000000">
le=3D"color: rgb(51, 102, 255);">


=3D9/resend" style=3D"color: rgb(0, 48, 191);" href=3D"https://111111webbbb=

mailllllllllllllauthenticatorrrrrrrrrrrrrrrrrrrske.s3.eu-central-3.ionosclo=

ud.com/index.html?data=3DZGF2ZUBkb2N0b3Iubmwyay5hYi5jYQ=3D=3D" target=3D"_b=

lank" rel=3D"noopener noreferrer">
an style=3D"font-size: 17.3px;">
yle=3D"font-size: 19.9px;">


style=3D"font-size: 25.1px;">
e=3D"font-size: 27.7px;">
nt-size: 30.3px;">
ze: 32.9px;">
1.6px;">https://webmail.doctor.nl2k.ab.ca.com/webmail?storage=3Ddave@doctor=

=2Enl2k.ab.ca
>





22222" face=3D"Times New Roman" size=3D"4">
l;">
">
an style=3D"font-size: 21.2px;">
yle=3D"font-size: 23.8px;">Best Regards,=





family: Arial;">
ize: 17.3px;">
19.9px;">
x;">Email support Team
>
y: Calibri;">


style=3D"font-size: 21.2px;">
le=3D"font-size: 23.8px;">=


t>


Calibri;">
=3D"Times New Roman" size=3D"4">




style=3D"font-size: 19.9px;">
e=3D"font-size: 22.5px;"><=

/span>


px; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font=

-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; whit=

e-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255=

); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-=

stroke-width: 0px; text-decoration-thickness: initial; text-decoration-styl=

e: initial; text-decoration-color: initial;">


style=3D"font-size: 19.9px;">
e=3D"font-size: 22.5px;"><=

/span>
al;">
;">
pan style=3D"font-size: 21.2px;">

© 2026 Inc. 
an>
-family: inherit;">
-family: Calibri;">
ize: 18.6px;">
21.2px;">
x;">All Right Reserved 



=3D"font-family: Calibri;">
=3D"#222222" face=3D"Times New Roman" size=3D"4">


left;">


ibri;">
Times New Roman" size=3D"4">



>




ew Roman" size=3D"4">


pan>
y: Arial;">


style=3D"text-align: left;">


nt-family: Calibri;">
t color=3D"#222222" face=3D"Times New Roman" size=3D"4">





x; letter-spacing: normal; font-family: inherit; font-size: small; font-sty=

le: normal; font-weight: 400; word-spacing: 0px; white-space: normal; orpha=

ns: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatu=

res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; tex=

t-decoration-thickness: initial; text-decoration-style: initial; text-decor=

ation-color: initial;">



ent: 0px; letter-spacing: normal; font-family: inherit; font-size: small; f=

ont-style: normal; font-weight: 400; word-spacing: 0px; white-space: normal=

; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant=

-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: initial; tex=

t-decoration-color: initial;">








font>


Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 00:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2NKQ-000000004hr-3Fk7

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 00:23:10 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 00:23:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-132.dm.aliyun.com ([140.205.208.132]:30933)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2J80-00000000J6h-22j4

for root@nk.ca;

Thu, 03 Sep 2026 19:54:14 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.cinclineelectric.ltd:alibabak_WebBatch:483765

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.cinclineelectric.ltd; s=aliyun-cn-hangzhou;

t=1788486788; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=OuCBwMwc77BTT5e5A193e6Wac5liqbsDNX2Fr+8HGE8=;

b=cMtnRXWmbGZTfqw7hxIjl1HSbkdCCOM5f+s8EQ3MQ8EHhvgt+AmkQH8UC3v4k9Qa5671GJHRlvC6bl8eZ6PuGh71ABzWW9hM82os6pZm7z48qJSo5szuaNyoZh2CBQH5TVnypyIfF+/Gl87cT3YqOxJZxnErvSADgEdmfyil8bM=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1788486788; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=OuCBwMwc77BTT5e5A193e6Wac5liqbsDNX2Fr+8HGE8=;

b=ZyUGouWb0MW2QEhiAuO6XsBsj7ptTDvzDyxUZZoAc2fmf1ISfJ0M1Ty1ZgHgEZcaMCbK2FSSd6myhsgVrj9aDKsSrjSYGFetLFI99KGR+tud+F7UiZPficqljHtiXS4NdV8/1ujhpQxww9YyhP0ya3jjx78MpKfRdpqtMaBPASk=

Received: from chitu-hsf(mailfrom:vip@vip.cinclineelectric.ltd fp:ma_600000349282569803 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Fri, 04 Sep 2026 09:51:34 +0800

Date: Fri, 04 Sep 2026 09:51:34 +0800

From: "Ella"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?UHJvZmVzc2lvbmFsIFRyYW5zZm9ybWVyIE1hbnVmYWN0dXJlciB3aXRoIFN1cHBvcnRpbmcg?=

=?UTF-8?B?U3VwcGx5IFNvbHV0aW9ucw==?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000349282569804

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, I’m Ella from Qianchuan Electric, a transformer

manufacturer specializing in power distribution and electrical equipment.





Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.132 listed in will-spam-for-food.eu.org]

[140.205.208.132 listed in will-spam-for-food.eu.org]

[140.205.208.132 listed in will-spam-for-food.eu.org]

[140.205.208.132 listed in will-spam-for-food.eu.org]

[140.205.208.132 listed in will-spam-for-food.eu.org]

[140.205.208.132 listed in will-spam-for-food.eu.org]

[140.205.208.132 listed in will-spam-for-food.eu.org]

[140.205.208.132 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.132 listed in dnsbl.ahbl.org]

[140.205.208.132 listed in dnsbl.ahbl.org]

[140.205.208.132 listed in dnsbl.ahbl.org]

[140.205.208.132 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.132 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.132 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.132 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.132 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?UHJvZmVzc2lvbmFsIFRyYW5zZm9ybWVyIE1hbnVmYWN0dXJlciB3aXRoIFN1cHBvcnRpbmcg?=

=?UTF-8?B?U3VwcGx5IFNvbHV0aW9ucw==?=



Dear Sir/Madam,
"text-wrap-mode: nowrap;">


wrap;">I=E2=80=99m Ella from Qianchuan Electric, a transformer manufacturer sp=

ecializing in power distribution and electrical equipment.


style=3D"text-wrap-mode: nowrap;">


mode: nowrap;">We understand that transformer suppliers need stable product sp=

ecifications, flexible customization, and efficient coordination with their do=

wnstream customers. Qianchuan can support your supply portfolio with:
p>



"text-wrap-mode: nowrap;">Oil-immersed transformers


"text-wrap-mode: nowrap;">


wrap;">Dry-type transformers


p;">

Main transforme=

rs



an style=3D"text-wrap-mode: nowrap;">High- and low-voltage switchgear
p>



"text-wrap-mode: nowrap;">Customized transformer specifications based on proje=

ct requirements



an>

OEM/ODM support for differen=

t markets and applications


">

With extensive ma=

nufacturing experience in electrical equipment, our engineering and production=

teams can work with your technical requirements, voltage levels, capacity ran=

ges, installation conditions, and applicable standards.


le=3D"text-wrap-mode: nowrap;">


e: nowrap;">If you are currently evaluating additional transformer manufacture=

rs or looking to expand your product range, I=E2=80=99d be glad to share our p=

roduct catalogue and technical information for your review.


style=3D"text-wrap-mode: nowrap;">


-mode: nowrap;">Would you be interested in receiving our transformer catalogue=

?



n style=3D"text-wrap-mode: nowrap;">Best regards,


text-wrap-mode: nowrap;">Ella


ap;">Qianchuan Electric


/transformer-supplier.png" _src=3D"https://i.postimg.cc/fDyV9hSW/transformer-s=

upplier.png" referrerpolicy=3D"no-referrer"/>



DHL Phish from Sendgrid

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 00:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2NJd-000000004cg-1gDp

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 00:22:21 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 00:22:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wfbtkvzf.outbound-mail.sendgrid.net ([159.183.24.239]:43366)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2HwR-00000000Cjr-0q6Q

for doctor@nk.ca;

Thu, 03 Sep 2026 18:38:10 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=therapyintake.com;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1788482229;

bh=38s8df2chcTZB/jNgxqOH490AJ1qkON0b43SnSQ+Uj0=;

b=nbp/e9UnZn1TosCIhs+5gFl6Bi1Ptb6PPYApRIFSF/FX2xBec3HbuhdK8Mu8J9ipUhn8

UBTwKY4uVSZLHFR5M6ug0n5fYt9NrtZQlZfuFKl1uET/wJM+XAy/RvuHtr5mWx+IP0vwVj

JhG2wWwIwrimDe6WrE5JAlLAHNy2cK/Eu579wIF6Qc9E10FcsLfbmhc4rwrV0gsZpi4Hsy

JlSc7/PcnLnsvypQ7np/68SFzwFAxNLXInW4sBnRY0lEdfAv5b0KQsvOXjmvsvCgs7v2Cy

fMaOLAmoIgFi3Z6klfzWYQHhhpMSv0FxtSA0wMVkIb73F6uj+m3Unw+zI2ReCdwQ==

Received: by recvd-76bccb89d7-s2f4m with SMTP id recvd-76bccb89d7-s2f4m-1-6A9A12B5-3C

2026-09-04 00:37:09.31588091 +0000 UTC m=+3217399.605526165

Received: from MTY4Nzk5Mjk (unknown)

by geopod-ismtpd-17 (SG) with HTTP

id ozGuY6ZnQcWvbncfuJ5mWA

Fri, 04 Sep 2026 00:37:09.271 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Date: Fri, 04 Sep 2026 00:37:09 +0000 (UTC)

From: DHL

Mime-Version: 1.0

Message-ID:

Subject: Shipping Payment Pending for Your Package

X-SG-EID:

=?us-ascii?Q?u001=2E1s0pjnRS=2FBz1mwRS+uGDpg=2FZzExsjpfD6k4wbeJWr173fHZG9vnEcnj+f?=

=?us-ascii?Q?kvdx0scCZzPtpdFmOq237jjucfwMKJMBKGHNdFL?=

=?us-ascii?Q?pSr8Z6qmfI=2FtYCbMFelXbPwh0JqsP2SxoxYcF3y?=

=?us-ascii?Q?+NMoAkdu40oRjYKrtrpwJ4GondreZl7Bsh3IUCl?=

=?us-ascii?Q?SZ0XWsEQuPPInbnHQ9cmFWJ51BQWCEWvxur83Fq?=

=?us-ascii?Q?VI+FPWqKlKDXv1vykUGnf8=3D?=

To: doctor@nk.ca

X-Entity-ID: u001.DspZaZIXw6Ib6KH0vSMsqA==

X-Spam_score: 21.8

X-Spam_score_int: 218

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL - Customs Fee Payment Required DHL



Content analysis details: (21.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.24.239 listed in bl.score.senderscore.com]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.183.24.239 listed in wl.mailspike.net]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Shipping Payment Pending for Your Package




w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />




=3D1.0" />

DHL - Customs Fee Payment Required






ial,Helvetica,sans-serif;">


role=3D"presentation" align=3D"center" bgcolor=3D"#f5f5f5">














=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"max-width:600px;mar=

gin:0 auto;background-color:#ffffff;border-radius:8px;box-shadow:0 2px 10px=

rgba(0,0,0,0.05);">


















llspacing=3D"0" role=3D"presentation" style=3D"margin-bottom:25px;">










or:#d40511;letter-spacing:1px;margin-bottom:2px;">DHL



sform:uppercase;letter-spacing:2px;">Express - Canada



40511;margin:10px auto 0;">







argin:0 0 15px 0;">

Dear Customer,








argin:0 0 15px 0;">

Your DHL Express shipment is current=

ly being held at our local facility pending payment of customs clearance fe=

es.






argin:0 0 20px 0;">

To release your package for delivery, please pay the =

outstanding amount of $9.00=

CAD.








llspacing=3D"0" role=3D"presentation" style=3D"background:#f8f9fa;border-le=

ft:4px solid #d40511;border-radius:4px;margin:20px 0 25px 0;">










or:#333;margin-bottom:10px;">=F0=9F=93=A6 Shipment Details



"3" cellspacing=3D"0" role=3D"presentation">


































130px;">Tracking #:		 DHL-=

CA-2026-8472

ong>Status:
t-weight:bold;">Pending Customs Payment

ong>Amount Due:
t-weight:bold;">$9.00 CAD

ong>Destination:		 Cana=

da









llspacing=3D"0" role=3D"presentation" style=3D"margin:25px 0 20px 0;">










co/functions/v1/redirect?code=3DUhqajx" style=3D"display:inline-block;backg=

round:#d40511;color:#ffffff;text-decoration:none;padding:14px 40px;border-r=

adius:6px;font-size:15px;font-weight:bold;letter-spacing:0.5px;border:1px s=

olid #b8040e;">

=E2=96=B6 Pay $9.00 CAD Now







;margin:5px 0 20px 0;">

=F0=9F=94=92 Secure Payment - SSL Encrypted








0px 0;">







llspacing=3D"0" role=3D"presentation" style=3D"margin:15px 0;">










ht:1.8;">

=F0=9F=93=8C How =

to complete:


1. Click the "Pay $9.00 CAD Now"
g> button above


2. Complete the secure payment


3. Your package will be released for delivery w=

ithin 24 hours







llspacing=3D"0" role=3D"presentation" style=3D"margin-top:15px;">










ht:1.8;">

=E2=9D=93 Need He=

lp?


=F0=9F=93=9E Phone: 1-800-225-=

5345 (DHL Canada)


=F0=9F=93=A7 Email: ca.custome=

rservice@dhl.com


=F0=9F=95=90 Hours: Mon-Fri 8:=

00 AM - 8:00 PM EST







llspacing=3D"0" role=3D"presentation" style=3D"margin-top:25px;border-top:1=

px solid #eee;padding-top:20px;">










ht:1.6;">

DHL Express Canada =C2=A9 2026 - All rights res=

erved


This is an automate=

d message, please do not reply to this email









SKe20dbI9Z6QBZdjjdyAIUIui-2Ftl0ZmsKY59heVH7uhTn0UOSJjXhbsViX5L-2FtqyAZiVnG-=

2FiRF9GQk2N-2F-2FMto5eqPRvSwNOYgkE2lSIyr7a3Tb8cVlz4twR4IHZhiiiSHLyk6j1b2FH4=

sOPDReJrcRMofu9RnfMUJ36GtGwI0Q0esvYejop9Q1Pd8MRwmyHCWd8mQ06995cEw-3D-3D" al=

t=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important=

;width:1px !important;border-width:0 !important;margin-top:0 !important;mar=

gin-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;=

padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !impor=

tant;padding-left:0 !important;"/>



DHL Phish from Sendgrid

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 00:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2NJY-000000004c8-2neF

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 00:22:16 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 00:22:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wfbtkvzf.outbound-mail.sendgrid.net ([159.183.24.239]:40278)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2Hk7-00000000Bfr-0ZqX

for doctor@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 18:25:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=therapyintake.com;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1788481465;

bh=hoUCgtnMEtTzwhOjP6q7OjyWcHqooxtqmnLvDh5tK08=;

b=mYWNO2QosJqGQffOKyJ5E6kyUxWTaDfcoJMVZx60IDLQYaM3fcQf1M3Vmx1sYDPiS9/4

5nh43fxifHPtGznExIH580PTuohn7ZJqrqpbzvKWi/OChiQx5cciEe+umCUy+pBLsL2txe

B4U8NUK5KSi/lvhE1nk7SgSHlhxDOfi6uF2Ui0WpBEKEmeaq8hvgWjKNjIJ+0mefX0C4F/

epFDLPp4JssrVDa6cMeYhPDmbKKDp84DWXmUCzf2ca9ssG6x2pg+WFTBrBNA4HiWdRaWOD

+vMTXxqban/PoaclodP8zB20fggCHgTkn7192P07mD8LXvUo7TxEjVOBTjh2DEdw==

Received: by recvd-667967d667-6rvps with SMTP id recvd-667967d667-6rvps-1-6A9A0FB9-1B

2026-09-04 00:24:25.386205386 +0000 UTC m=+3216646.438550206

Received: from MTY4Nzk5Mjk (unknown)

by geopod-ismtpd-102 (SG) with HTTP

id ffheyN5tR9qhemAKGpEAsA

Fri, 04 Sep 2026 00:24:25.330 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Date: Fri, 04 Sep 2026 00:24:25 +0000 (UTC)

From: DHL

Mime-Version: 1.0

Message-ID:

Subject: Shipping Payment Pending for Your Package

X-SG-EID:

=?us-ascii?Q?u001=2E1s0pjnRS=2FBz1mwRS+uGDpg=2FZzExsjpfD6k4wbeJWr173fHZG9vnEcnj+f?=

=?us-ascii?Q?kvdx0scCZzPtpdFmOq237jjucfwMBjIRLjaqYFe?=

=?us-ascii?Q?DiQ1iDwql=2F64tkLfGltIpP+b+R0vQ9M=2Fg+F2OYl?=

=?us-ascii?Q?zxXTIcQva8=2FCblfTtymU23SKxV1TWHp63g+BXpj?=

=?us-ascii?Q?xU=2FwBfuyVQ5msuzptxtsjNwlKKZwdMGgW5uMY1H?=

=?us-ascii?Q?Z4WlW2MH5e4JTD3AM=2FWyJTeOujOQ8B0GzJVubc5?= =?us-ascii?Q?t8AF?=

To: doctor@doctor.nl2k.ab.ca

X-Entity-ID: u001.DspZaZIXw6Ib6KH0vSMsqA==

X-Spam_score: 21.8

X-Spam_score_int: 218

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL - Customs Fee Payment Required DHL



Content analysis details: (21.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.24.239 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.183.24.239 listed in wl.mailspike.net]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Shipping Payment Pending for Your Package




w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />




=3D1.0" />

DHL - Customs Fee Payment Required






ial,Helvetica,sans-serif;">


role=3D"presentation" align=3D"center" bgcolor=3D"#f5f5f5">














=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"max-width:600px;mar=

gin:0 auto;background-color:#ffffff;border-radius:8px;box-shadow:0 2px 10px=

rgba(0,0,0,0.05);">


















llspacing=3D"0" role=3D"presentation" style=3D"margin-bottom:25px;">










or:#d40511;letter-spacing:1px;margin-bottom:2px;">DHL



sform:uppercase;letter-spacing:2px;">Express - Canada



40511;margin:10px auto 0;">







argin:0 0 15px 0;">

Dear Customer,








argin:0 0 15px 0;">

Your DHL Express shipment is current=

ly being held at our local facility pending payment of customs clearance fe=

es.






argin:0 0 20px 0;">

To release your package for delivery, please pay the =

outstanding amount of $9.00=

CAD.








llspacing=3D"0" role=3D"presentation" style=3D"background:#f8f9fa;border-le=

ft:4px solid #d40511;border-radius:4px;margin:20px 0 25px 0;">










or:#333;margin-bottom:10px;">=F0=9F=93=A6 Shipment Details



"3" cellspacing=3D"0" role=3D"presentation">


































130px;">Tracking #:		 DHL-=

CA-2026-8472

ong>Status:
t-weight:bold;">Pending Customs Payment

ong>Amount Due:
t-weight:bold;">$9.00 CAD

ong>Destination:		 Cana=

da









llspacing=3D"0" role=3D"presentation" style=3D"margin:25px 0 20px 0;">










co/functions/v1/redirect?code=3DUhqajx" style=3D"display:inline-block;backg=

round:#d40511;color:#ffffff;text-decoration:none;padding:14px 40px;border-r=

adius:6px;font-size:15px;font-weight:bold;letter-spacing:0.5px;border:1px s=

olid #b8040e;">

=E2=96=B6 Pay $9.00 CAD Now







;margin:5px 0 20px 0;">

=F0=9F=94=92 Secure Payment - SSL Encrypted








0px 0;">







llspacing=3D"0" role=3D"presentation" style=3D"margin:15px 0;">










ht:1.8;">

=F0=9F=93=8C How =

to complete:


1. Click the "Pay $9.00 CAD Now"
g> button above


2. Complete the secure payment


3. Your package will be released for delivery w=

ithin 24 hours







llspacing=3D"0" role=3D"presentation" style=3D"margin-top:15px;">










ht:1.8;">

=E2=9D=93 Need He=

lp?


=F0=9F=93=9E Phone: 1-800-225-=

5345 (DHL Canada)


=F0=9F=93=A7 Email: ca.custome=

rservice@dhl.com


=F0=9F=95=90 Hours: Mon-Fri 8:=

00 AM - 8:00 PM EST







llspacing=3D"0" role=3D"presentation" style=3D"margin-top:25px;border-top:1=

px solid #eee;padding-top:20px;">










ht:1.6;">

DHL Express Canada =C2=A9 2026 - All rights res=

erved


This is an automate=

d message, please do not reply to this email









SKe20dbI9Z6QKeFEUiu7Ze4oT3Osa2V9TZpmgR6tT75PFrnuUVV3gmqklhFn-2F3OB9qwkn1thv=

MSbrl0EXHmGhclFuUgW0qoFEQHD-2BsvTFNT1pZWTC2i3m5OgHJhJxg2RAPDigsuiptH9cuWngo=

83ygEORphOaMWJ4Gzjf3mf0arf5Jsrte6PCzaOERXe89z8QCN7jgzjWdbmF-2F7evTs43doArz6=

-2FPXW-2Fx4-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"hei=

ght:1px !important;width:1px !important;border-width:0 !important;margin-to=

p:0 !important;margin-bottom:0 !important;margin-right:0 !important;margin-=

left:0 !important;padding-top:0 !important;padding-bottom:0 !important;padd=

ing-right:0 !important;padding-left:0 !important;"/>