X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 00:22:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQfFT-00000000J6b-3PRl

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:22:27 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 00:22:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f52.google.com ([209.85.218.52]:42443)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQbJk-000000008Mq-2TQ3

for doctor@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 20:10:39 -0600

Received: by mail-ej1-f52.google.com with SMTP id a640c23a62f3a-c434376dbebso286656166b.1

for ; Mon, 09 Nov 2026 18:09:43 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1794276577; cv=none;

d=google.com; s=arc-20260327;

b=jpCNO4sYJg9uGCtNwgqTgfKTkhHqQSMccifiAKgpM3AcWCfH8xRvGIq6SP4qAEGTOn

Im73KZhrSoM5qU0VpoJ4iS2gYuGJ2moVbcPKxKwLX+cZ9C2TJr1bHP20nkF1mH+k2Z5Q

rNcBCVTtaAMBahGv5Hqt3uz3XjgIKP5yNSWG7HKrxlcTTOvucQyvat/zdyiP5esIiYTw

3ZuQHo4xGSSK429b3+xL4hsV7ZEm8lHZCaYZu8iTGvVD+e4sxFKlCuU6MO+37hvZXink

E0DoXZLj0Q0ltIptC39+AscSNkC1qiSI/arLM1daluhQNYdkhwpYYQuHgCNcaaviWvZm

DJBA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=Ylj8HHEZuDRQcBs6AsLlFOjhbgdl/PudGbcn7DjhBoI=;

fh=24474zNkw6ppG75qMUBNudi5LBqZUuuhqmXFt76rsHM=;

b=XZJmcaLWrQveupEw5aVVjhRbRvIsBY2afCeQf5mdd6TGNijYS6dMlXqMPOopu8aOvr

dBaKKTOtyx3oixWcth+uqybhcP0heV7Igdo5hOHAEDP2Wd6/bqG3BVd0gvThnI1Rnr5k

3xpU6iled85xKxl7HwBM/sVtjPU1y171dXY1sgIj9/s1Ieft0gZRYvkGbvAkz5z5Fg+Z

ivP1vI5B/gez8E3F6ISlOi7yPzd0Ofu7GA1idR3gLe1igg/6VfiEsdw3ftJCLtQzSBpP

axk+T19H63ala6SWdp+hUdascsPu6kOurfhknILyT9LJPujqTzA79RMkGCF1ehNaxWnW

5PGA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1794276577; x=1794881377; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=Ylj8HHEZuDRQcBs6AsLlFOjhbgdl/PudGbcn7DjhBoI=;

b=jFSby1mNYqRhZhzeNQUG+Tu7AYtinUnsGcFrMI+O4cWKmqEu99v3/GawH2GbzFo2Yo

lO0R82cwUrmjzn/vEztIU+J/hx6DqKznQ8+CEA57G0W8MB75YcTig42v45SzPID6YBqx

OM3x0n/+0p3z00IbmQS3Y5vJNGudqjNCNcUm81KzSUXMbGgP+ynm3LpSDWM++cap4c3O

KA8FSCV8b/mkMCLIp7nTa4FoFt3yk9JWJpQdVmtWT7RaDm4XgLcEEZ06JS+Fx1RZNjwe

M+oC9w2MZ6OM7BpFBY40iRiR7vdvVG9UjubeRN+ueW8Ggqe99pEqzK1rdRU4iVTmCE/G

ONrQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794276577; x=1794881377;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=Ylj8HHEZuDRQcBs6AsLlFOjhbgdl/PudGbcn7DjhBoI=;

b=trYx81ArjJfCi8RQRg5fp6tr7AxMOW6Y3Mt+eEpA2Zw/gRTHnvXrci2ZL4vNC39Bj/

9+yjm1gd67B+fD2bmor25o8gw8tmIA0KxT5sLW3f0oZrWwH1MiOnH6/0C9WONpmD05tT

A39WhksgEg5MuBTt5EZaN+nXgX2dNSQKILtG40fLeB0GyzaCrIyG4dl6vCQS8eaW61K0

UW8PLaYv8g+glpyHei9QmlxcEiYNr9/ORvzoSGo0OEObkpSuqb6qcQnOrCJQ/62NRx+9

myFsz4Ez77EyatbNYwFEbr8fB5Z4g+a8Tv1ecjenKQ2tSrQj9KuKuNWfSG7AdvWkasH7

GyLw==

X-Forwarded-Encrypted: i=1; AL+hErHw888KsYBsVPVDl9r7TTyZIkt0jaF2zNThXL4XuhFuVYocBGHL3yYxUqnSXS3s8x+eQ2fTT5I=@doctor.nl2k.ab.ca

X-Gm-Message-State: APuU4Z9AvMEvblwVtO0oMQdLjDmkHGLRLmy3I+QaQrwHj60zuSUcTSHS

myp3IYruzujXUI08a2E5mARKnWBJ2Or/yFBVuCL+5co2AJeJDDFKXGQggMzj6z979DR3ulAsaWu

Mwb4pQlB2NKKyfs1q75DSKNaS5EVdt34=

X-Gm-Gg: AYBFou0wnKPZnCeVl2G/8WHySR7qarWk4JBQ054NLoJqRCMcBW/yuC/Jp/P+uQzzvcw

88DrTgyCyHYYKPP8Bda2xDGNvx37xjaVG5uknrxrRwRA7ONJ4BMGI/5ecPPtsc5LpYn3ZayoXh/

TMSbM4TO+vLLoID3ouCqiIegGBRSY6gy4mIwhzuweqF3p09LQ/wvrfS+TiW8yw+a2QGGzKq/EBZ

Gem19u6KY2ZEdVuWpMlXyNdZwo4R9tRcBDh8zC85fDz2uTSLAXhJodf04QV0v/Jrei1dXRA6Har

y8AF55zh0H2sYhUN2Qwgk3FAJnaZtiuxxsuXN0gaPq/NvmijnB/f9eaFLgJvUtzOv8Xf6dHONiV

j0TdQyHOrD43TmkSsE56oytIQ6Uep3tKjpXZoFqhR7/1gMIDrH/dG7upBVZPpYPo1BB2Xx5GSq/

npqJa0yj+JNAT0wOagFx0OmSsrx7j0h1ecRROCqYKYGKZN5a7Zm0kb8kkw0p0gxHie+I9WE4JfL

A==

X-Received: by 2002:a17:906:c155:b0:c2d:d4dd:8d0 with SMTP id

a640c23a62f3a-c5048668296mr86876266b.16.1794276576415; Mon, 09 Nov 2026

18:09:36 -0800 (PST)

MIME-Version: 1.0

Reply-To: rivasnory0@gmail.com

From: "Mrs. Nory River"

Date: Tue, 10 Nov 2026 03:09:23 +0100

X-Gm-Features: AclHuK8m2HjJw5CgnmvlB9YXg1Bw2QST0ANxzXkd6ersftD5Ogu8O2d2dMVaRZw

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000f755f1065fe291cb"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 14.5

X-Spam_score_int: 145

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear partner. Compliments of the day to you. I believe this

message finds you in good health. Please I will appreciate if you could review

this brief message and respond to me as quickly as possible just because

of [...]



Content analysis details: (14.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.52 listed in dnsbl.ahbl.org]

[209.85.218.52 listed in dnsbl.ahbl.org]

[209.85.218.52 listed in dnsbl.ahbl.org]

[209.85.218.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.52 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.52 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.52 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.218.52 listed in bl.score.senderscore.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dbasadre09(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[dbasadre09(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[rivasnory0(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} Hello



--000000000000f755f1065fe291cb

Content-Type: text/plain; charset="UTF-8"



Dear partner.



Compliments of the day to you. I believe this message finds you in good

health. Please

I will appreciate if you could review this brief message and respond to me

as quickly as possible just because of the urgency involved.



I am Mrs. Nory River writing you about our plan of relocation out of Iran

due to the ongoing war in Iran and also regarding a private matter

concerning the estate of my late husband who just passed away in these

ongoing war.



Before his passing, we intended to relocate from Iran due to the crisis in

Iran so therefore he secured a significant family fund/asset in a private

security company.



I want to transfer the funds to you to assist with the management of these

funds within your country, hence that is the reason I contacted you.



Furthermore, once the assets are positioned, we would require assistance in

coordinating the necessary documentation for our relocation. If you are in

a position to assist and can provide assurances of your discretion, I will

be prepared to discuss the specifics of this arrangement and the

compensation for your partnership.

I look forward to your response.



Yours Sincerely



Mrs. Nory River



--000000000000f755f1065fe291cb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Dear partner.

Compliments of the day to you. I beli=

eve this message finds you in good health. Please
I will appreciate if y=

ou could review this brief message and respond to me as quickly as possible=

just because of the urgency involved.

I am Mrs. Nory River writing =

you about our plan of relocation out of Iran due to the ongoing war in Iran=

and also regarding a private matter concerning the estate of my late husba=

nd who just passed away in these ongoing war.

Before his passing, we=

intended to relocate from Iran due to the crisis in Iran so therefore he s=

ecured a significant family fund/asset in a private security company.

r>I want to transfer the funds to you to assist with the management of thes=

e funds within your country, hence that is the reason I contacted you.
<=

br>Furthermore, once the assets are positioned, we would require assistance=

in coordinating the necessary documentation for our relocation. If you are=

in a position to assist and can provide assurances of your discretion, I w=

ill be prepared to discuss the specifics of this arrangement and the compen=

sation for your partnership.
I look forward to your response.

You=

rs Sincerely

Mrs. Nory River

--000000000000f755f1065fe291cb--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 00:22:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQfFH-00000000J4q-1Ywu

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:22:15 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 00:22:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:35920)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQa6V-00000000IBZ-3NSo

for sales@nk.ca;

Mon, 09 Nov 2026 18:52:59 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=zh+12wYrj4apGoSZH+NfwPSIVS

gVmOPgWO61w5ZFCT+LElGC+tB8Ph68cdT3WAeNu1lGrVwxbutVMNHr+SdAWmbc77fXLhC3cckrve/

ry1egUT4pbZHHvjYVtOC2+EQHeynMfWucMs8IrR3DxdEds8cuV2IBCGYEBvc/hUQldcJ9yNT1uW7F

eqxaMHs5u9SOc1IobM+hLD30jva0VuzTOEbO+b8WaFh+caNcOShszlEnrNYfrogNRQHr9dgorhuHQ

m6Ul52eB/xL7cIw604Vnj5wFNwopGWLzr1NoDQqH85OmsCvOU+XZhBFcA9AJyTGJkTYy/Lqj1jy4T

ckxsgNfg==;

Received: from [196.75.116.150] (port=55374 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQa5c-0000000B4mr-1BeI

for sales@nk.ca;

Tue, 10 Nov 2026 01:51:55 +0100

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 00:51:53 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (9.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification

hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

align-items: center; justify-content: center">

30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.

PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">

DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 

1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.

However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD

in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=

href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package

COLOR: #000">Thank you for choosing Dragonfly Express.

COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:

© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!

NetKnow

Netknow now at 295847 from 296156 at Netcraft and pfs compliant



A slight increase! We must do

1. security audits regularly
2. check on illegitimate traffic hitting the web server



3. Effiency of server
and
4. keep design current!

How do we compare with other providers in

Edmonton, Alberta, Canada?

Rogers

Rogers Business Solutions

which rank 7862 from 7849 and are hosted in Europe.

Telus and reviews

Next we have Telus.com

ranked by Netcraft at 8424 from 8352 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :

• NCIX FORUMS



• DSL Reports

Government of Alberta

The Government of Alberta Website

ranks 13626 from 13542 by Netcraft and seems to hosted on Cloudfare.

City of Edmonton

The City of Edmonton ranks 39047 from 38637 by Netcraft and hosted by Google.

University of Alberta

The University of Alberta ranks 51176 from 49580 hosted by Amazon Techonologies.

TekSavvy

TekSavvy ranks 197692 from 194825 and are hosted by Microsoft

NAIT / Northern Alberta Institute of Technology

NAIT ranks 217855 from 239754 hosted by Microsoft.

Grant MacEwen University

MacEwan ranks 235725 from 235839

Juno and NetZero

We have Juno Internet ranked on top

at 379398 from 365991 who are the owners of

US Based Netzero at Netcraft Rank 255128 from 244702 .

Internet Centre / CCINet

Internet Centre

rank 287377 from 295075. Their partner Rack Nine ranks > 2000000.

Netknow again

We at Netknow are at 295847 from 18857 since the start of 2026.

Shaw Cable

Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 382663 from 369060 and hosted by Akamai in Europe .



Reviews of Shaw are available :

• Rate It All



• Review Stream



• Review Stream Number 2





• DSL reports

Distributel / 3Web / CIA

Cybersurf

is ranked 935836 from 1069706 and seems to be hosted in USA by DigitalOcean.

Xplornet

xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 944769 from 942861 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.

Primus

Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.

Northern lights Fiber

Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.

OkayVPN

OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.

Radiant Communications / goco.ca

Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .

Tera Byte Edmonton and reviews

Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

MCSnet

MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .

Nucleus Internet Services

After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .

4Web

4web ranks >2000000 from >2000000 .

Alentus / Wolfpaw

Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000

Yellowpencil

Yellowpencil Ranks >2000000 from >2000000

WSI Corporation

Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.

Uniserve / Interbaun

Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.

Clearwave Broadband

Clearwave Broadband ranks

at >2000000 from >2000000

Platinum Communications

Platinum Communications Corp.

bought out by Xplornet .

Wild Rose Internet

Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet

TIC Internet

TIC Internet

ranks >2000000 from >2000000 ( I do remember you).

Nisa Custom Internet Solutions

Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft

MediaShaker

Media Shakers of Edmonton

ranks >2000000 from >2000000

Koi Media

Koi Media

rank >2000000 from >2000000

WebFire

Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.

Core Network Solutions Inc.

Core Network Solutions Inc.

ranks at >2000000 from >2000000 .

The Network Centre

The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.

Open Concept Internet, Inc.

Open Concept Internet, Inc.

rank > 2000000 from > 2000000

Techalta

Interspots of Edmonton

acquired by Techalta ;

Yegtel

Yegtel rank > 2000000 .

Internet Crossroads

Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 17:09:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQYUN-0000000099W-2qf4

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 17:09:23 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 17:09:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:35468)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQUB5-00000000PgO-37J7

for sales@nk.ca;

Mon, 09 Nov 2026 12:33:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=pAVf/Wu3kgkRSvEFNd6kGxCfAQpJsVQMQkO82GE7LHQ=; b=c1x4zAq84SXFdftgFozyJo05lm

7fbmAWi4diJ34HptwzCvIFlioblkXqGYmiY0EihiLaU0Opoj9rEyZ45p+1V1L/heWGfu5brlOOE7R

/iszSjRSS+WRJ+WXbGFEBJqPPMB0bPs4B8MOtRNKu9S7NuuZPJ9jTfTZyxAS0d8tV0dS5IXi31D1x

6as4RmsuCLerH2B2lWl4YyVotOFR7eMdhWiwmtVPoa92UUcSxVRiAZTgkDGzUBOam0nprb9vnB1+3

S01CG9KryM5XwAFbe5gC7LUAGHwwtFm+cSsSekshoA6Bpj1QpMhxEAEs0IHALbg+t/m8ub14/RuLW

irwrniAw==;

Received: from [196.75.116.150] (port=50210 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQUAC-00000009FkN-0Cye

for sales@nk.ca;

Mon, 09 Nov 2026 19:32:15 +0100

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Mon, 09 Nov 2026 18:32:13 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification

hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

align-items: center; justify-content: center">

30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.

PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">

DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 

1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.

However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD

in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=

href=3D"https://dragonfly-servic.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package

COLOR: #000">Thank you for choosing Dragonfly Express.

COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:

© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 17:09:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQYUN-0000000099W-2qf4

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 17:09:23 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 17:09:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:35468)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQUB5-00000000PgO-37J7

for sales@nk.ca;

Mon, 09 Nov 2026 12:33:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=pAVf/Wu3kgkRSvEFNd6kGxCfAQpJsVQMQkO82GE7LHQ=; b=c1x4zAq84SXFdftgFozyJo05lm

7fbmAWi4diJ34HptwzCvIFlioblkXqGYmiY0EihiLaU0Opoj9rEyZ45p+1V1L/heWGfu5brlOOE7R

/iszSjRSS+WRJ+WXbGFEBJqPPMB0bPs4B8MOtRNKu9S7NuuZPJ9jTfTZyxAS0d8tV0dS5IXi31D1x

6as4RmsuCLerH2B2lWl4YyVotOFR7eMdhWiwmtVPoa92UUcSxVRiAZTgkDGzUBOam0nprb9vnB1+3

S01CG9KryM5XwAFbe5gC7LUAGHwwtFm+cSsSekshoA6Bpj1QpMhxEAEs0IHALbg+t/m8ub14/RuLW

irwrniAw==;

Received: from [196.75.116.150] (port=50210 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQUAC-00000009FkN-0Cye

for sales@nk.ca;

Mon, 09 Nov 2026 19:32:15 +0100

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Mon, 09 Nov 2026 18:32:13 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification

hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

align-items: center; justify-content: center">

30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.

PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">

DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 

1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.

However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD

in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=

href=3D"https://dragonfly-servic.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package

COLOR: #000">Thank you for choosing Dragonfly Express.

COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:

© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 17:08:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQYTc-0000000095R-0hq1

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 17:08:36 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 17:08:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f69.google.com ([209.85.208.69]:47325)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQTQX-00000000L0K-12fJ

for root@nk.ca;

Mon, 09 Nov 2026 11:45:08 -0600

Received: by mail-ed1-f69.google.com with SMTP id 4fb4d7f45d1cf-6a615ab0c06sf985069a12.2

for ; Mon, 09 Nov 2026 09:44:05 -0800 (PST)

ARC-Seal: i=3; a=rsa-sha256; t=1794246238; cv=pass;

d=google.com; s=arc-20260327;

b=K5ygcw3QBJzieM1RNYHc2OzqEWT1HSeClxcOLy0Bw4OKW+Azze4lDfyR1pHMLkJBNz

lGG3drpB6MKLJep1A1bH4chE8zpEqVqHP6JKEs9Q68Z8fd2tT9qrXtlFLrETAdDvfN7u

GnfxxlvbuOPjJWCGfYu7RTE1XxosYCqgdlvFaDNKz4SSMgbpcb9RJ3GJsvw4WN7gRXwJ

phgs1bX1lcSk8VUB+gdi6yg05OcyqAEnz/oSDfEf2VXlYxGN/HJZ490sFGzzWKLpOpil

GIv9b01Lqd8iFN0CUEzs+cZemnDkP+j4hOe33F1UdC3Wkuu3jq/JrGpp8t1uYFFZ3Yhi

vqdg==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature;

bh=NhAT5dNTHb4J4nsrjmkrpz17ULIwkYhbAE+cOd8eW68=;

fh=RXrGQUTWKCFBSTOvvtak6azAeb1bXsX+ufjZNjb3gdM=;

b=P3viqTouWXQX89tpOSUje3LDr+WTQ/3f7JTSMdP/+UNoLqNP9sZpoobzd+RZ5QYbRR

Ky+AACyCzYbb6PCb1iyikdOEkzRye2PtcWbG8a3y3x07cVQOky8o4Jw9EpX8hwHC2THo

Lau+utUy8kOtSXE07JteXEzD3KMZzvCVZLfFD2Mgm3eN842W2d+4DIlkcDhgouhDVUqi

7P0BMhY2hNOlISsXVDpRny5q/BDSAF4VcQPdQMjWuSH3zGkIe5vQUbdxb9KIgBM5XXli

B70kpAXtROwB8KFSNrw633zffshglfFF5r7EJ//uTvbrCBywXnQAHiUYiUbD1WqYB4Kl

e+ag==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=oLjEoflI;

arc=pass (i=1);

spf=pass (google.com: domain of jasonking3531@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=jasonking3531@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@wdseoservices.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wdseoservices.com; s=google; t=1794246238; x=1794851038; darn=nk.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:sender:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=NhAT5dNTHb4J4nsrjmkrpz17ULIwkYhbAE+cOd8eW68=;

b=iMk8giQuneRHHYz/iekKnFq2ZA7dZeXgiiS1f0bCJ8TmqxY5IOnZAHpaHBE70AfvFD

jV4IQAIbWkg1xzFvR8H3HTLrFMKePcRHOCf+rdLeOTvQmGqcZlPU/EJSJEQQuwJ1C4Vu

cIQElqeN5LqaS5wFQQttFEA5O9UGzD4A5JS3GYwFOY4Bzlyky3fFCfWK1RGOw4jxdjhD

lRL+dqIhMMIHx+6PJHJOsKlhcrMAdPM1q9K84ErV3+fkj3hfD4jNljc0KbTPTqSAhHFp

IuIv1Rq6ocsycIWkuJLyXdwegar+SxqbBjiuGAHxa2dM6uunM8xcHazh2McJnNp5/HGo

cgvg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794246238; x=1794851038;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:sender:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=NhAT5dNTHb4J4nsrjmkrpz17ULIwkYhbAE+cOd8eW68=;

b=wlOscE+Z+KMOfV/xTc/IPsgdzxRjK0i2kVDPnqSLrBiw2JPPaJQdGpqTcNrelspFRm

ZZXFPkFYueudhlV7g/2pE1WyV4gEyOYPcRWYNExu7IDALZZbnO7lKPQKjsNUZElSgx9c

jR1ZM4jAqEQHuH13FS7f6ZfeLQ+/7cNDMIy/Zm5KTEON2gbfTu+mWN0WctxWueYaVJu6

ClHWIcENXI7yrW+Qriu1Egv+wGGYA5eYU4HDaJxj6Fy/uosSUKS5s6ex5SDkyOEuoqCe

DfWgCMHRy5jAnxN4Y5TdByajOKCLP8xM4/bT3d/KgLmwHZB17J1KveFkBOd3H1z16xjF

BW4Q==

Sender: michael_turner@wdseoservices.com

X-Forwarded-Encrypted: i=3; AL+hErHTPumLpcH5F0dFeRu6oJIBgrQhz56Fz/iw3dG8yTfgRfET9VYSAY1ph3PfttVt0gD+rni7@nk.ca

X-Gm-Message-State: APuU4Z+r71jN6ht6lmPQ7oDq6u5wmnl1vOBja1I+5WvDNXKq++wm6/Rq

P/GskItp6YMxW9p9wIpio8UsK+xsYjw8dexRLcDGqb7gwh07+ljztMWYgYCbCPvOPQw=

X-Received: by 2002:aa7:dc01:0:b0:6b5:8233:95d6 with SMTP id 4fb4d7f45d1cf-6b7565f8310mr192840a12.8.1794246237848;

Mon, 09 Nov 2026 09:43:57 -0800 (PST)

X-BeenThere: michael_turner@wdseoservices.com; h="ATskLdeuWfeDf4k94MdoS4cbJpoMFJlcZexbsYUrSdxB9rnsjg=="

Received: by 2002:a05:6402:5192:b0:6b4:6460:d469 with SMTP id

4fb4d7f45d1cf-6b71cd0cd1fls1813563a12.1.-pod-prod-02-eu; Mon, 09 Nov 2026

09:42:57 -0800 (PST)

X-Received: by 2002:a17:907:3f03:b0:c50:475d:9804 with SMTP id a640c23a62f3a-c5049583bf0mr6505166b.13.1794246176667;

Mon, 09 Nov 2026 09:42:56 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1794246176; cv=pass;

d=google.com; s=arc-20260327;

b=kJGFBjV9H6k67Pp8kyUlPpeznu0l7429zfKesXO7d5YDsCwEtbxlIW13RNeL9aJoP+

E19f9zst5bFzhduv5lgbQdxvfxWCrDMjcWvE9hOmGfN9vkzbThex/OPsxaqa8RqF6ahu

voNxYLzULgYFGzZE1bbczlqiVQGLMZoPvK7KRbF30jKHNgC8Bw80f+HMXR/cxKYJKgeW

sqmhympZsh7hpnS4jF0DRYC1V2IksYZobsCWzMpswHH0DS5PtWOGdzOQ6wmGV6DojFac

M8hwGOQnpKFkxlDJJcCBkQNKUKEV+uSjvRfHuf4Agyd/nCx0Z/yU0XgBknjPCqhphnHr

DuBA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=ShNMU8UI+MwRm6YQB0Ghu+CkkzMfns/U8b9REmtLiqk=;

fh=SN3QT/9UbwujMk6SE8R9BX7IG6QhvvfMnZwLJOzNdWg=;

b=buVihnYJPhW247cONR03Plg4CdPC6AFWjTUcPDBIhFaWKV22nnPKxIR5cYaLSev56j

e+/L/a0WNw/0phqJFVcRNfOz/+jQjp8B5shK0i4j00dIJBrg7r3YSRHUICwxHAMzq13V

t3CQhahq2eC4zlPj62/GuL8THcA18BGchlYFIbBZCL4Xn4n41MSvP4NcaPFganwvgdeH

8H9ICxiH7Rr3Gk14+3l6SvszJr9Lp9KTsmelgYKPicJDPOHni3oKenYbNAsv94NLMJDz

EH5rnv3dl5aZxeOStjmeYdkwwEQBUQxKDSGNmAwKXTo5U9gbknoLFEJ96FYmvDtWDQ4r

Hk7w==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=oLjEoflI;

arc=pass (i=1);

spf=pass (google.com: domain of jasonking3531@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=jasonking3531@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@wdseoservices.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id a640c23a62f3a-c4d69a647d1sor100379766b.18.2026.11.09.09.42.56

for

(Google Transport Security);

Mon, 09 Nov 2026 09:42:56 -0800 (PST)

Received-SPF: pass (google.com: domain of jasonking3531@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1794246176; cv=none;

d=google.com; s=arc-20260327;

b=eB6San1TNR6PFYuUKPL/s5YuVmnMNpNJB4KN7+3/mDVQzWNlpncB5N0JfPjk00aiUq

hVZQi7jBRTM9FXz0m6HV8bHWgt7DBVDHaCcPOJ0bC3/7iw29n6AHTi9L09Y8F99bi/Kf

FYe2TjRAbO6VuT225U44ml0eOZODe6SL1fy9hWe2uFOImycmpIh2INLcxtmqJ6SM0Ek9

1mAyBPmKfVarWsK8OGPVq7+SsN+v/zJniO9rbOd/3LqJbbL+qxcRHA+hfOJDKq2f8eCS

aFlX/ExgdtAv6tpan9nSqn0fXtYLYGOEL+Ll9is+ZU2MePxAk7V97QMgHLHls2T9xyKJ

htSQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=ShNMU8UI+MwRm6YQB0Ghu+CkkzMfns/U8b9REmtLiqk=;

fh=SN3QT/9UbwujMk6SE8R9BX7IG6QhvvfMnZwLJOzNdWg=;

b=aIkzUEQkl7RQFimq+41f44Z3kD7P7M9YDunFgAN3OKM8uc9pzQjdzMpMykgB6ngg3l

nwwblxui9nHnN024SUbg8UVjkJJxlIRJYlvcrcvwQzjQqJnfVTb+3ZwiuGE9Z7+Dr04q

Qo2Nebd6Ytigy2U3PqbFDia7tEhfwx/zK1WU0qslNSgjmlurT+9q53gK2tLpRGUNTSGH

liSDgDXAQMbuvOEsMN9ONFrdWnBUADjDD8if5QhuNJmJBOF0uW40ZvNVM7dBVWg9hz5f

QDWE48wud2OUE3SDA9YEMpcF1a1CxpZ8+aYSD+B3c7FaurKS8LtSBs/iK4iqJDJvAx+8

TDBg==;

darn=wdseoservices.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AYBFou1IhnR4wtaruHQ3yQrW8UHLHEe20rqdTNJ+hdyAnpzyq/A68Dk/OinveS7vA1F

aVk5JGDddF3Hc5YldtZRC8JPoEC6JlYZxL7xEARVGG3OVSw/3OPdIPlzD0+jbmiQVB1L3xHxD9o

spGkt2WXbADRj9i0x6FK1/BUsNPBc3RrxzrUMqLomKJGUS1fl/FChvq7aF/U6o6Tb5MaHNwXFxn

XDJAKQn0BzT8A35M89QHXpnRx3q9yh3FaH+6iCeuaEXCFOzCd5TbA9MQLM80clf/vWjZ9heQyp/

WMg+fAQ2gQio/YhdVp7RDsKd7CNbgFWIn8N+ARHatN2XkBcFpx20ZrnurAUD5JS6dhgk/nf65px

8CaWmAD3jcURgNQj0tt1pRDc2M7tPY8utjTmQwqIdBwxRRdNwqI/QdA3HJFhbbQr0awSfswHxeL

G5X0BJhofoGJSPFqcCWy//DE2jupOSPUXD0HamAih/FLJvbspgsWMnhyglaGn4el694YmEzLJx0

FODvw==

X-Received: by 2002:a17:907:e915:b0:c4d:456c:4a29 with SMTP id

a640c23a62f3a-c5049582a21mr7927866b.14.1794246176069; Mon, 09 Nov 2026

09:42:56 -0800 (PST)

MIME-Version: 1.0

From: Jason King

Date: Mon, 9 Nov 2026 23:12:44 +0530

X-Gm-Features: AclHuK9HctL3DippbeRWeDnPn2MM6LympxNYulbG9oyyscEXVW8ssX7rdrV5Nf8

Message-ID:

Subject: Few website design and SEO issues

To: michael_turner@wdseoservices.com

Content-Type: multipart/alternative; boundary="000000000000f6e234065fdb7dd3"

X-Original-Sender: JasonKing3531@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20260707 header.b=oLjEoflI; arc=pass

(i=1); spf=pass (google.com: domain of jasonking3531@gmail.com

designates 209.85.220.41 as permitted sender) smtp.mailfrom=jasonking3531@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@wdseoservices.com

Precedence: list

Mailing-list: list michael_turner@wdseoservices.com; contact michael_turner+owners@wdseoservices.com

List-ID:

X-Spam-Checked-In-Group: michael_turner@wdseoservices.com

X-Google-Group-Id: 85016566341

List-Post: ,



List-Help: ,



List-Archive:

List-Unsubscribe: ,



X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I’ve prepared screenshots of a few website design

and SEO issues I found on your site. Just reply “YES” and they’ll

be in your inbox shortly. Thanks,



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: wdseoservices.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: wdseoservices.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: wdseoservices.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jasonking3531(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.69 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.69 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.69 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} Few website design and SEO issues



--000000000000f6e234065fdb7dd3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



I=E2=80=99ve prepared screenshots of a few website design and SEO issues=

I

found on your site.

Just reply =E2=80=9CYES=E2=80=9D and they=E2=80=99ll be in your inbox sho=

rtly.



Thanks,



To unsubscribe from this group and stop receiving emails from it, send an e=

mail to michael_turner+unsubscribe@wdseoservices.com.



--000000000000f6e234065fdb7dd3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hi,

I=E2=80=99ve prepared screenshots
ong> of a few website design and SEO issues I found on you=

r site.
Just reply =E2=80=9CYES=E2=80=9D and they=E2=80=

=99ll be in your inbox shortly.

Thanks,=C2=A0=C2=A0

v>

To unsubscribe from this group and stop receiving emails from it, send an e=

mail to mic=

hael_turner+unsubscribe@wdseoservices.com.




--000000000000f6e234065fdb7dd3--