Secure Pro Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 07 Nov 2025 14:44:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHUEg-00000000Fe1-0yCu

for dave@doctor.nl2k.ab.ca;

Fri, 07 Nov 2025 14:43:10 -0700

Resent-From: The Doctor

Resent-Date: Fri, 7 Nov 2025 14:43:10 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f74.google.com ([209.85.128.74]:51435)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHRwv-00000000O42-26vw

for doctor@nl2k.ab.ca;

Fri, 07 Nov 2025 12:16:53 -0700

Received: by mail-wm1-f74.google.com with SMTP id 5b1f17b1804b1-4774836c376so5812235e9.2

for ; Fri, 07 Nov 2025 11:15:53 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1762542946; x=1763147746; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=sz2/jmBsXn73qbLIWos3eIlXijfM3fPm/cpuHo/sGPM=;

b=SpC0cP0ziM7d1YAa1ll8CSwQqa0Rx5TdMw6auEFbUfCgwCcNH+RSpuvTCfCcSuRU2U

ViN2LiQ4RCdVCsZphu5TOgxQZYzNCSYtLHF73ITBRmvXMn9RJaqbQd++Kukak+pFVHqE

/34npaoKgAUTA5BgBgwTjawkkVbSq3DPaoPYu2VXJ2o+QklAiJHkUFXqHruuovCh+OW1

MNhCzdXdEcrGSfIwMhjWIikbVKvT2uNQ7OHYLuPtsDeGJTd5ddoZw51Jss6Zel0xyAE+

5qGRWCifRzahqf2zl9nXxcMiWIe4j5Jvs/le3GVI4igzg3LPi0w6t1PCiTJNwZ66gTt0

ltGA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ugelilo-moqueguaeduca-edu-pe.20230601.gappssmtp.com; s=20230601; t=1762542946; x=1763147746; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=sz2/jmBsXn73qbLIWos3eIlXijfM3fPm/cpuHo/sGPM=;

b=xzyd4D+C113F6SToccybu77LgeKUWU/3dcgAQocbF0qh41bo6kepPQ9WztHTRpIU5T

/aJu+N2iKsdKWVjlXKysuuvtHQw8KSQDwTVkYcDI/PaW+WC7s51RRmvStMZ1U191DIid

9rMb5eJSoE/wqvlaevSYOK+E5qqnFgLOZXJ2swa1Ewrw1c1m+tSsBPGEPxFxwXb3JytS

ZdM7Cvohq6F2U+pergGXtTnSfilm/DrUVUhVXYgfobHpzMbkyOvfo6NMcYcaf6uvXxl6

nacuP70Iw5NeFchR/FjbpGO0RFWjPU+u/JfO8Vzm9JTa6HT5xJUDqp3ZiuaHQo7PeR64

I/Bw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1762542946; x=1763147746;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=sz2/jmBsXn73qbLIWos3eIlXijfM3fPm/cpuHo/sGPM=;

b=ntlxL6T+a7nx/vBd1KlGkpCr+0p3XaxhSCPpPttkv+yukzopxXDbAuJTxrNXjZkElf

8w6HazrpzXdL/n1OHadlIumwE76Gm134vdL4DLteXAIjvAWED5n8PBFCsTTgBkmrRNvq

bxysV4BWM/YJVtI6/eU6hUg9PjoqOFAXGrNvUcnYT3V45VfoJW7jL+gW/pD7Xk1gYPmf

cKt956+Skq3wBC342Emv/hv9q/d9gHzshW7hM7z7S9Fzvaz3ElKg2wINSTHWBo6xdEdc

kKp7rQl6YJrbaFgL+IxiRRjBgm+hSpBq5/03gEVWN6ZlPeZpn3WJMEjqe1fuTL+7lP6Y

q9Zg==

X-Gm-Message-State: AOJu0Yxe9X6v31fuSkRQJgvTDeCvCBvynFY6ZGfYGiRmsYkm8HHEb01c

byzpWY3qK8Cp+VDffdSdaBJzhww+DvYzcAIIuFX5WhrDY+qXtP5Dk1LjSSGsVdKNweODSprW5og

10lCUWlAVViWdt2z/vMPGE4MTVSyUh/SVi6+V0Wf43rCjWJOmakmF+YJVW0c=

X-Google-Smtp-Source: AGHT+IEB8RtpOLyedywr37Kefm9R+OEfpCgoH79SB4jd7zOvDgZNb9bB/w1kyfTVVERiRhxsVAjWcyS3Rxo9P7NnRdPn

MIME-Version: 1.0

X-Received: by 2002:a05:600c:c4ac:b0:477:55de:8b22 with SMTP id

5b1f17b1804b1-4777325abafmr947145e9.16.1762542946340; Fri, 07 Nov 2025

11:15:46 -0800 (PST)

Reply-To: Audrey Crawford

Sender: Calendario de Google

Message-ID:

Date: Fri, 07 Nov 2025 19:15:46 +0000

Subject: =?UTF-8?Q?Invitaci=C3=B3n=3A_Order_CANC94775_=2D_Delivery_in_Motion_s?=

=?UTF-8?Q?=C3=A1b_8_nov_2025_2=3A15am_=28GMT=2D5=29_=28doctor=40nl2k=2Eab=2Eca=29?=

From: Audrey Crawford

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="00000000000037dc81064306020a"

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Order CANC94775 – Delivery in Motion sábado 8 nov 2025

⋅ 2:15am Hora estándar de Perú Order date:- Saturday, 08 November 2025Order

Number:- CANC94775DB0090Support Contact: { 808 376-5042 }Renewal completed

without issue.Hey,We are notifying you that your Premium Membership will

renew s [...]



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.74 listed in will-spam-for-food.eu.org]

[209.85.128.74 listed in will-spam-for-food.eu.org]

[209.85.128.74 listed in will-spam-for-food.eu.org]

[209.85.128.74 listed in will-spam-for-food.eu.org]

[209.85.128.74 listed in will-spam-for-food.eu.org]

[209.85.128.74 listed in will-spam-for-food.eu.org]

[209.85.128.74 listed in will-spam-for-food.eu.org]

[209.85.128.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.74 listed in dnsbl.ahbl.org]

[209.85.128.74 listed in dnsbl.ahbl.org]

[209.85.128.74 listed in dnsbl.ahbl.org]

[209.85.128.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.74 listed in dnsbl.ahbl.org]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.74 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.74 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.3 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Invitaci=C3=B3n=3A_Order_CANC94775_=2D_Delivery_in_Motion_s?=

=?UTF-8?Q?=C3=A1b_8_nov_2025_2=3A15am_=28GMT=2D5=29_=28doctor=40nl2k=2Eab=2Eca=29?=



--00000000000037dc81064306020a

Content-Type: multipart/alternative; boundary="00000000000037dc800643060208"



--00000000000037dc800643060208

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



T3JkZXIgQ0FOQzk0Nzc1IOKAkyBEZWxpdmVyeSBpbiBNb3Rpb24NCnPDoWJhZG8gOCBub3YgMjAy

NSDii4UgMjoxNWFtDQpIb3JhIGVzdMOhbmRhciBkZSBQZXLDug0KDQoNCg0KT3JkZXIgZGF0ZTot

IFNhdHVyZGF5LCAwOCBOb3ZlbWJlciAyMDI1T3JkZXIgTnVtYmVyOi0gIA0KQ0FOQzk0Nzc1REIw

MDkwU3VwcG9ydCBDb250YWN0OiB7IDgwOCAgMzc2LTUwNDIgfVJlbmV3YWwgY29tcGxldGVkIHdp

dGhvdXQgIA0KaXNzdWUuSGV5LFdlIGFyZSBub3RpZnlpbmcgeW91IHRoYXQgeW91ciBQcmVtaXVt

IE1lbWJlcnNoaXAgd2lsbCByZW5ldyAgDQpzb29uLiBBbiBhbW91bnQgb2YgVVNENTM2LjU1IHdp

bGwgYmUgZGViaXRlZCB3aXRoaW4gdGhlIG5leHQgMjQgIA0KaG91cnMuQWNjb3VudCBDaGFyZ2Vz

IExvZ0l0ZW06IFNlY3VyZUd1YXJkIFBST1RlbnVyZTogNDggTW9udGhzQW1vdW50OiBVU0QgIA0K

NTM2LjU1UmVnaXN0ZXJlZCBJRDogUlU0N0hLMzJNZW1iZXJzaGlwIElEOiAgDQo1MmQ3NjI2My0z

NzJlLTRjMDItODA4ZC1kMzgwNzE5NjljOGFUaGlzIGlzIGEgc3lzdGVtLWdlbmVyYXRlZCBlbWFp

bC4gRm9yICANCmhlbHAsIGNvbnRhY3QgMS44MDguIDIyNy4zMTU4LldpdGggVHJ1ZSBSZXNwZWN0

LCxOb3J0b24gTGlmZUxvY2sgbGxjTWFuYWdlICANCnRlYW06IENlbGlhIEZvcnJlc3RDb250YWN0

IEhvdXJzOiA2IEFNIHRvIDYgUE1IZWxwbGluZSAxLjgwOC4gIA0KMjI3LjMxNThBZGRyZXNzOiAx

MzMzQ29sdW5iaWEgQXB0IDQ3IEMgU3QuIExvdWlzIE1vIDYzMTA3IFVuaXRlZCAgDQpTdGF0ZXND

b3B5cmlnaHQgJmNvcHk7MjAyNSBOb3J0b24gTGlmZUxvY2sgbGxjLCBBbGwgcmlnaHRzIHJlc2Vy

dmVkLg0KDQpPcmdhbml6YWRvcg0KQXVkcmV5IENyYXdmb3JkDQphdWRyZXkuY3Jhd2ZvcmRtekB1

Z2VsaWxvLm1vcXVlZ3VhZWR1Y2EuZWR1LnBlDQoNClJlc3BvbmRlciBwb3IgZG9jdG9yQG5sMmsu

YWIuY2EgeSB2ZXIgbcOhcyBkZXRhbGxlcyAgDQpodHRwczovL2NhbGVuZGFyLmdvb2dsZS5jb20v

Y2FsZW5kYXIvZXZlbnQ/YWN0aW9uPVZJRVcmZWlkPWVuUnJhekJUYVdSUlltbDFXVWhHWm1aclpt

WjFNV2RQVmt3Z1pHOWpkRzl5UUc1c01tc3VZV0l1WTJFJnRvaz1ORFlqWVhWa2NtVjVMbU55WVhk

bWIzSmtiWHBBZFdkbGJHbHNieTV0YjNGMVpXZDFZV1ZrZFdOaExtVmtkUzV3WlRFNU1HVmxNVGsz

WkRGa09HSTBPR0ZrWkdNMVlURXlaakZrTXpCalpEVmxaamN4TjJGak9UayZjdHo9QW1lcmljYSUy

RkxpbWEmaGw9ZXNfNDE5JmVzPTANClR1IGFzaXN0ZW5jaWEgZXMgb3BjaW9uYWwuDQoNCn5+Ly9+

fg0KSW52aXRhY2nDs24gZGUgQ2FsZW5kYXJpbyBkZSBHb29nbGU6IGh0dHBzOi8vY2FsZW5kYXIu

Z29vZ2xlLmNvbS9jYWxlbmRhci8NCg0KUmVjaWJpc3RlIGVzdGUgY29ycmVvIGVsZWN0csOzbmlj

byBwb3JxdWUgZmlndXJhcyBlbnRyZSBsb3MgYXNpc3RlbnRlcyBhbCAgDQpldmVudG8uDQoNClNp

IHJlZW52w61hcyBlc3RhIGludml0YWNpw7NuLCBsb3MgZGVzdGluYXRhcmlvcyBwb2Ryw6FuIGVu

dmlhciB1bmEgcmVzcHVlc3RhICANCmFsIG9yZ2FuaXphZG9yLCBzZXIgYWdyZWdhZG9zIGEgbGEg

bGlzdGEgZGUgaW52aXRhZG9zLCBpbnZpdGFyIGEgb3RyYXMgIA0KcGVyc29uYXMgaW5kZXBlbmRp

ZW50ZW1lbnRlIGRlbCBlc3RhZG8gZGUgc3UgcHJvcGlhIGludml0YWNpw7NuIG8gbW9kaWZpY2Fy

ICANCnR1IGNvbmZpcm1hY2nDs24gZGUgYXNpc3RlbmNpYS4NCg0KTcOhcyBpbmZvcm1hY2nDs24g

aHR0cHM6Ly9zdXBwb3J0Lmdvb2dsZS5jb20vY2FsZW5kYXIvYW5zd2VyLzM3MTM1I2ZvcndhcmRp

bmcNCg==

--00000000000037dc800643060208

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">





















=20



=20



=20



=20


















/InformAction">
emtype=3D"http://schema.org/Person">
=3D"Invitaci=C3=B3n de Audrey Crawford"/>
temscope itemtype=3D"http://schema.org/Event">
" content=3D"http://schema.org/EventScheduled"/>
" itemscope itemtype=3D"http://schema.org/Organization">
ame" content=3D"Google Calendar"/>
lendar" content=3D"ztkk0SidQbiuYHFffkffu1gOVL"/>
e; font-size: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0;=

width: 0; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">O=

rder CANC94775 =E2=80=93 Delivery in Motion
ntent=3D"https://calendar.google.com/calendar/event?action=3DVIEW&eid=

=3DenRrazBTaWRRYml1WUhGZmZrZmZ1MWdPVkwgZG9jdG9yQG5sMmsuYWIuY2E&tok=3DND=

YjYXVkcmV5LmNyYXdmb3JkbXpAdWdlbGlsby5tb3F1ZWd1YWVkdWNhLmVkdS5wZTE5MGVlMTk3Z=

DFkOGI0OGFkZGM1YTEyZjFkMzBjZDVlZjcxN2FjOTk&ctz=3DAmerica%2FLima&hl=

=3Des_419&es=3D0"/>

: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0; width: 0; m=

ax-width: 0; opacity: 0; overflow: hidden;">Order date:- Saturday, 08 Novem=

ber 2025Order Number:- CANC94775DB0090Support Contact: { 808 376-5042 }Ren=

ewal completed without issue.Hey,We are notifying you that your Premium Mem=

bership will renew

=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"body-container">






-[if mso | IE]>
=3D"presentation">





=

 

ellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%=

;" class=3D"">

ius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align: lef=

t; vertical-align: top;" class=3D"main-container-inner">

t; direction: ltr; display: inline-block; vertical-align: top; width: 100%;=

overflow: hidden; word-wrap: break-word;">
=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main=

-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-lay=

out: fixed;">

rtical-align:top;">
role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">
style=3D"font-size: 0; padding: 0; text-align: left; word-break: break-wor=

d;;padding-bottom:24px;">

-style: normal; font-weight: 400; font-size: 14px; line-height: 20px; lette=

r-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-t=

ext" role=3D"presentation">

Order date:- Saturday, 08 November 2025=


Order Number:- CANC94775DB0090
Support Contact: { 808 376-5042 }
>

Renewal completed without issue.

Hey,

We are notifying you =

that your Premium Membership will renew soon. An amount of USD536.55 will b=

e debited within the next 24 hours.

Account Charges Log

Item: S=

ecureGuard PRO
Tenure: 48 Months
Amount: USD 536.55
Registered ID:=

RU47HK32
Membership ID: 52d76263-372e-4c02-808d-d38071969c8a

This=

is a system-generated email. For help, contact 1.808. 227.3158.

With=

True Respect,,
Norton LifeLock llc
Manage team: Celia Forrest
Con=

tact Hours: 6 AM to 6 PM
Helpline 1.808. 227.3158
Address: 1333Colunb=

ia Apt 47 C St. Louis Mo 63107 United States

Copyright =C2=A92025 Nor=

ton LifeLock llc, All rights reserved.


ion" content=3D"Order date:- Saturday, 08 November 2025Order Number:- CANC9=

4775DB0090Support Contact: { 808 376-5042 }Renewal completed without issue=

.Hey,We are notifying you that your Premium Membership will renew soon. An =

amount of USD536.55 will be debited within the next 24 hours.Account Charge=

s LogItem: SecureGuard PROTenure: 48 MonthsAmount: USD 536.55Registered ID:=

RU47HK32Membership ID: 52d76263-372e-4c02-808d-d38071969c8aThis is a syste=

m-generated email. For help, contact 1.808. 227.3158.With True Respect,,Nor=

ton LifeLock llcManage team: Celia ForrestContact Hours: 6 AM to 6 PMHelpli=

ne 1.808. 227.3158Address: 1333Colunbia Apt 47 C St. Louis Mo 63107 United =

StatesCopyright ©2025 Norton LifeLock llc, All rights reserved."/>=


; word-break: break-word;;padding-bottom:24px;">

Roboto, sans-serif;font-style: normal; font-weight: 400; font-size: 14px; l=

ine-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: no=

ne;" class=3D"primary-text" role=3D"presentation">
">
er=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D=

"padding-bottom: 4px;"><=

/table>s=C3=A1bado 8 nov 2025 =E2=8B=85 2:15am (Hora est=C3=A1ndar de=

Per=C3=BA)


e: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-font=

-smoothing: antialiased;margin: 0; padding: 0;">Cu=C3=A1ndo


; text-align: left; word-break: break-word;;padding-bottom:24px;">

e=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; =

font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; t=

ext-decoration: none;" class=3D"primary-text" role=3D"presentation">
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" styl=

e=3D"padding-bottom: 4px;">
tr>


-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-=

font-smoothing: antialiased;margin: 0; padding: 0;">Organizador


ng: 0; text-align: left; word-break: break-word;;padding-bottom:24px;">
style=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: =

400; font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c40=

43; text-decoration: none;" class=3D"primary-text" role=3D"presentation">
able border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation"=

style=3D"padding-bottom: 4px;">


"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-we=

bkit-font-smoothing: antialiased;margin: 0; padding: 0;">Invitados


>
La lista de invitados se ocult=C3=B3 a pedido del organizador=

.

t; word-break: break-word;;padding-bottom:0px;">

3; text-decoration: none;;font-family: Roboto, sans-serif;font-size: 14px; =

line-height: 20px; mso-line-height-rule: exactly; text-align: left;" class=

=3D"primary-text">

: left; word-break: break-word;;padding-bottom:16px;">

mily: Roboto, sans-serif;font-size: 14px; line-height: 20px; mso-line-heigh=

t-rule: exactly; text-align: left;">
ellspacing=3D"0" role=3D"presentation" style=3D"border-collapse: separate;"=

>
=


" role=3D"presentation" style=3D"border: solid 1px #dadce0; border-radius: =

16px; border-collapse: separate;font-family: 'Google Sans', Roboto,=

sans-serif;;display: inline-block;;margin-right: 12px; margin-left: 0;">
r>

n itemprop=3D"potentialaction" itemscope itemtype=3D"http://schema.org/Rsvp=

Action">
ndance/Yes"/>
.org/HttpActionHandler">
/HttpRequestMethod/GET"/>
/calendar.google.com/calendar/event?action=3DRESPOND&eid=3DenRrazBTaWRR=

Yml1WUhGZmZrZmZ1MWdPVkwgZG9jdG9yQG5sMmsuYWIuY2E&rst=3D1&tok=3DNDYjY=

XVkcmV5LmNyYXdmb3JkbXpAdWdlbGlsby5tb3F1ZWd1YWVkdWNhLmVkdS5wZTE5MGVlMTk3ZDFk=

OGI0OGFkZGM1YTEyZjFkMzBjZDVlZjcxN2FjOTk&ctz=3DAmerica%2FLima&hl=3De=

s_419&es=3D0" style=3D"font-weight: 400;font-family: 'Google Sans&#=

39;, Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height: 120%;=

mso-line-height-rule: exactly; margin: 0; text-decoration: none; text-tran=

sform: none;" class=3D"grey-button-text" itemprop=3D"url" target=3D"_blank"=

>
on">

=3D"padding: 6px 0; padding-left: 16px; padding-right: 12px; white-space: n=

owrap;">
-button-text" style=3D"font-weight: 400;font-family: 'Google Sans',=

Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height: 120%; mso=

-line-height-rule: exactly; margin: 0; text-decoration: none; text-transfor=

m: none;">S=C3=AD
=


le=3D"presentation" style=3D"border-left: solid 1px #dadce0; border-right: =

solid 1px #dadce0;">
=3D"http://schema.org/RsvpAction">
http://schema.org/RsvpAttendance/No"/>
itemtype=3D"http://schema.org/HttpActionHandler">
href=3D"http://schema.org/HttpRequestMethod/GET"/>
6367;">
ND&eid=3DenRrazBTaWRRYml1WUhGZmZrZmZ1MWdPVkwgZG9jdG9yQG5sMmsuYWIuY2E&am=

p;rst=3D2&tok=3DNDYjYXVkcmV5LmNyYXdmb3JkbXpAdWdlbGlsby5tb3F1ZWd1YWVkdWN=

hLmVkdS5wZTE5MGVlMTk3ZDFkOGI0OGFkZGM1YTEyZjFkMzBjZDVlZjcxN2FjOTk&ctz=3D=

America%2FLima&hl=3Des_419&es=3D0" style=3D"font-weight: 400;font-f=

amily: 'Google Sans', Roboto, sans-serif;color: #5f6368; font-size:=

14px; line-height: 120%; mso-line-height-rule: exactly; margin: 0; text-de=

coration: none; text-transform: none;" class=3D"grey-button-text" itemprop=

=3D"url" target=3D"_blank">
g=3D"0" role=3D"presentation">

" valign=3D"middle" style=3D"padding: 6px 12px; white-space: nowrap;">
t" style=3D"font-weight: 400;font-family: 'Google Sans', Roboto, sa=

ns-serif;color: #5f6368; font-size: 14px; line-height: 120%; mso-line-heigh=

t-rule: exactly; margin: 0; text-decoration: none; text-transform: none;">N=

o

span>
on">
org/RsvpAction">
RsvpAttendance/Maybe"/>
p://schema.org/HttpActionHandler">
schema.org/HttpRequestMethod/GET"/>
=3D"https://calendar.google.com/calendar/event?action=3DRESPOND&eid=3De=

nRrazBTaWRRYml1WUhGZmZrZmZ1MWdPVkwgZG9jdG9yQG5sMmsuYWIuY2E&rst=3D3&=

tok=3DNDYjYXVkcmV5LmNyYXdmb3JkbXpAdWdlbGlsby5tb3F1ZWd1YWVkdWNhLmVkdS5wZTE5M=

GVlMTk3ZDFkOGI0OGFkZGM1YTEyZjFkMzBjZDVlZjcxN2FjOTk&ctz=3DAmerica%2FLima=

&hl=3Des_419&es=3D0" style=3D"font-weight: 400;font-family: 'Go=

ogle Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-he=

ight: 120%; mso-line-height-rule: exactly; margin: 0; text-decoration: none=

; text-transform: none;" class=3D"grey-button-text" itemprop=3D"url" target=

=3D"_blank">
"presentation">
table>

dle" style=3D"padding: 6px 0; padding-left: 12px; padding-right: 16px; whit=

e-space: nowrap;">
ss=3D"grey-button-text" style=3D"font-weight: 400;font-family: 'Google =

Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height:=

120%; mso-line-height-rule: exactly; margin: 0; text-decoration: none; tex=

t-transform: none;">Tal vez

ef=3D"https://calendar.google.com/calendar/event?action=3DVIEW&eid=3Den=

RrazBTaWRRYml1WUhGZmZrZmZ1MWdPVkwgZG9jdG9yQG5sMmsuYWIuY2E&tok=3DNDYjYXV=

kcmV5LmNyYXdmb3JkbXpAdWdlbGlsby5tb3F1ZWd1YWVkdWNhLmVkdS5wZTE5MGVlMTk3ZDFkOG=

I0OGFkZGM1YTEyZjFkMzBjZDVlZjcxN2FjOTk&ctz=3DAmerica%2FLima&hl=3Des_=

419&es=3D0" style=3D"display: inline-block;;font-weight: 400;font-famil=

y: 'Google Sans', Roboto, sans-serif;color: #5f6368; font-size: 14p=

x; line-height: 120%; mso-line-height-rule: exactly; margin: 0; text-decora=

tion: none; text-transform: none;" class=3D"grey-button-text" target=3D"_bl=

ank">
tation" style=3D"border: solid 1px #dadce0; border-radius: 16px; border-col=

lapse: separate;font-family: 'Google Sans', Roboto, sans-serif;">
r>

e=3D"padding: 6px 0; padding-left: 16px; padding-right: 12px; white-space: =

nowrap;;color: #5f6367;">
tyle=3D"font-weight: 400;font-family: 'Google Sans', Roboto, sans-s=

erif;color: #5f6368; font-size: 14px; line-height: 120%; mso-line-height-ru=

le: exactly; margin: 0; text-decoration: none; text-transform: none;">M=C3=

=A1s opciones

>

er=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D=

"center" style=3D"width:100%;" class=3D"">

: 0; padding: 0; text-align: left; word-break: break-word;;padding:4px 12px=

;" class=3D"" align=3D"left">

#70757a; text-decoration: none;font-family: Roboto, sans-serif;font-size: 1=

2px; line-height: 16px; mso-line-height-rule: exactly; text-align: left;"><=

p>Invitaci=C3=B3n de
s=3D"accent-text underline-on-hover" style=3D"font-family: Roboto, sans-ser=

if;font-size: 12px; line-height: 16px; mso-line-height-rule: exactly;;color=

: #1a73e8; text-decoration: none;" target=3D"_blank">Calendario de Google
a>

Recibiste este correo electr=C3=B3nico porque figuras entre los as=

istentes al evento.

Si reenv=C3=ADas esta invitaci=C3=B3n, los destin=

atarios podr=C3=A1n enviar una respuesta al organizador, ser agregados a la=

lista de invitados, invitar a otras personas independientemente del estado=

de su propia invitaci=C3=B3n o modificar tu confirmaci=C3=B3n de asistenci=

a.
, sans-serif;font-size: 12px; line-height: 16px; mso-line-height-rule: exac=

tly;;color: #1a73e8; text-decoration: none;" href=3D"https://support.google=

.com/calendar/answer/37135#forwarding">M=C3=A1s informaci=C3=B3n


iv>

>

--00000000000037dc800643060208

Content-Type: text/calendar; charset="UTF-8"; method=REQUEST

Content-Transfer-Encoding: quoted-printable



BEGIN:VCALENDAR

PRODID:-//Google Inc//Google Calendar 70.9054//EN

VERSION:2.0

CALSCALE:GREGORIAN

METHOD:REQUEST

BEGIN:VTIMEZONE

TZID:America/Lima

X-LIC-LOCATION:America/Lima

BEGIN:STANDARD

TZOFFSETFROM:-0500

TZOFFSETTO:-0500

TZNAME:GMT-5

DTSTART:19700101T000000

END:STANDARD

END:VTIMEZONE

BEGIN:VEVENT

DTSTART;TZID=3DAmerica/Lima:20251108T021527

DTSTAMP:20251107T191546Z

ORGANIZER;CN=3DAudrey Crawford:mailto:audrey.crawfordmz@ugelilo.moqueguaedu=

ca

.edu.pe

UID:ztkk0SidQbiuYHFffkffu1gOVL@google.com

ATTENDEE;CUTYPE=3DINDIVIDUAL;ROLE=3DREQ-PARTICIPANT;PARTSTAT=3DNEEDS-ACTION=

;RSVP=3D

TRUE;CN=3Ddoctor@nl2k.ab.ca;X-NUM-GUESTS=3D0:mailto:doctor@nl2k.ab.ca

X-MICROSOFT-CDO-OWNERAPPTID:2026667256

CREATED:20251107T191537Z

DESCRIPTION:

Order date:- Saturday\, 08 November 2025
Order Number:-

CANC94775DB0090
Support Contact: { 808 376-5042 }

Renewal com=

p

leted without issue.

Hey\,

We are notifying you that your Prem=

i

um Membership will renew soon. An amount of USD536.55 will be debited with=

i

n the next 24 hours.

Account Charges Log

Item: SecureGuard PRO=

<

br />Tenure: 48 Months
Amount: USD 536.55
Registered ID: RU47HK3=

2


Membership ID: 52d76263-372e-4c02-808d-d38071969c8a

This is a =

s

ystem-generated email. For help\, contact 1.808. 227.3158.

With True=

=20

Respect\,\,
Norton LifeLock llc
Manage team: Celia Forrest
=

C

ontact Hours: 6 AM to 6 PM
Helpline 1.808. 227.3158
Address: 133=

3

Colunbia Apt 47 C St. Louis Mo 63107 United States

Copyright ©\;=

2

025 Norton LifeLock llc\, All rights reserved.



LAST-MODIFIED:20251107T191543Z

LOCATION:

SEQUENCE:0

STATUS:CONFIRMED

SUMMARY:Order CANC94775 =E2=80=93 Delivery in Motion

TRANSP:OPAQUE

BEGIN:VALARM

ACTION:DISPLAY

DESCRIPTION:This is an event reminder

TRIGGER:-P0DT0H10M0S

END:VALARM

END:VEVENT

END:VCALENDAR



--00000000000037dc800643060208--

--00000000000037dc81064306020a

Content-Type: application/ics; name="invite.ics"

Content-Disposition: attachment; filename="invite.ics"

Content-Transfer-Encoding: base64



QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vR29vZ2xlIEluYy8vR29vZ2xlIENhbGVuZGFyIDcw

LjkwNTQvL0VODQpWRVJTSU9OOjIuMA0KQ0FMU0NBTEU6R1JFR09SSUFODQpNRVRIT0Q6UkVRVUVT

VA0KQkVHSU46VlRJTUVaT05FDQpUWklEOkFtZXJpY2EvTGltYQ0KWC1MSUMtTE9DQVRJT046QW1l

cmljYS9MaW1hDQpCRUdJTjpTVEFOREFSRA0KVFpPRkZTRVRGUk9NOi0wNTAwDQpUWk9GRlNFVFRP

Oi0wNTAwDQpUWk5BTUU6R01ULTUNCkRUU1RBUlQ6MTk3MDAxMDFUMDAwMDAwDQpFTkQ6U1RBTkRB

UkQNCkVORDpWVElNRVpPTkUNCkJFR0lOOlZFVkVOVA0KRFRTVEFSVDtUWklEPUFtZXJpY2EvTGlt

YToyMDI1MTEwOFQwMjE1MjcNCkRUU1RBTVA6MjAyNTExMDdUMTkxNTQ2Wg0KT1JHQU5JWkVSO0NO

PUF1ZHJleSBDcmF3Zm9yZDptYWlsdG86YXVkcmV5LmNyYXdmb3JkbXpAdWdlbGlsby5tb3F1ZWd1

YWVkdWNhDQogLmVkdS5wZQ0KVUlEOnp0a2swU2lkUWJpdVlIRmZma2ZmdTFnT1ZMQGdvb2dsZS5j

b20NCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRT

VEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049ZG9jdG9yQG5sMmsuYWIuY2E7WC1OVU0t

R1VFU1RTPTA6bWFpbHRvOmRvY3RvckBubDJrLmFiLmNhDQpYLU1JQ1JPU09GVC1DRE8tT1dORVJB

UFBUSUQ6MjAyNjY2NzI1Ng0KQ1JFQVRFRDoyMDI1MTEwN1QxOTE1MzdaDQpERVNDUklQVElPTjo8

cD5PcmRlciBkYXRlOi0gU2F0dXJkYXlcLCAwOCBOb3ZlbWJlciAyMDI1PGJyIC8+T3JkZXIgTnVt

YmVyOi0NCiAgQ0FOQzk0Nzc1REIwMDkwPGJyIC8+U3VwcG9ydCBDb250YWN0OiB7IDgwOCAgMzc2

LTUwNDIgfTwvcD48cD5SZW5ld2FsIGNvbXANCiBsZXRlZCB3aXRob3V0IGlzc3VlLjwvcD48cD5I

ZXlcLDwvcD48cD5XZSBhcmUgbm90aWZ5aW5nIHlvdSB0aGF0IHlvdXIgUHJlbWkNCiB1bSBNZW1i

ZXJzaGlwIHdpbGwgcmVuZXcgc29vbi4gQW4gYW1vdW50IG9mIFVTRDUzNi41NSB3aWxsIGJlIGRl

Yml0ZWQgd2l0aGkNCiBuIHRoZSBuZXh0IDI0IGhvdXJzLjwvcD48cD5BY2NvdW50IENoYXJnZXMg

TG9nPC9wPjxwPkl0ZW06IFNlY3VyZUd1YXJkIFBSTzwNCiBiciAvPlRlbnVyZTogNDggTW9udGhz

PGJyIC8+QW1vdW50OiBVU0QgNTM2LjU1PGJyIC8+UmVnaXN0ZXJlZCBJRDogUlU0N0hLMzINCiA8

YnIgLz5NZW1iZXJzaGlwIElEOiA1MmQ3NjI2My0zNzJlLTRjMDItODA4ZC1kMzgwNzE5NjljOGE8

L3A+PHA+VGhpcyBpcyBhIHMNCiB5c3RlbS1nZW5lcmF0ZWQgZW1haWwuIEZvciBoZWxwXCwgY29u

dGFjdCAxLjgwOC4gMjI3LjMxNTguPC9wPjxwPldpdGggVHJ1ZSANCiBSZXNwZWN0XCxcLDxiciAv

Pk5vcnRvbiBMaWZlTG9jayBsbGM8YnIgLz5NYW5hZ2UgdGVhbTogQ2VsaWEgRm9ycmVzdDxiciAv

PkMNCiBvbnRhY3QgSG91cnM6IDYgQU0gdG8gNiBQTTxiciAvPkhlbHBsaW5lIDEuODA4LiAyMjcu

MzE1ODxiciAvPkFkZHJlc3M6IDEzMzMNCiBDb2x1bmJpYSBBcHQgNDcgQyBTdC4gTG91aXMgTW8g

NjMxMDcgVW5pdGVkIFN0YXRlczwvcD48cD5Db3B5cmlnaHQgJmNvcHlcOzINCiAwMjUgTm9ydG9u

IExpZmVMb2NrIGxsY1wsIEFsbCByaWdodHMgcmVzZXJ2ZWQuPC9wPg0KTEFTVC1NT0RJRklFRDoy

MDI1MTEwN1QxOTE1NDNaDQpMT0NBVElPTjoNClNFUVVFTkNFOjANClNUQVRVUzpDT05GSVJNRUQN

ClNVTU1BUlk6T3JkZXIgQ0FOQzk0Nzc1IOKAkyBEZWxpdmVyeSBpbiBNb3Rpb24NClRSQU5TUDpP

UEFRVUUNCkJFR0lOOlZBTEFSTQ0KQUNUSU9OOkRJU1BMQVkNCkRFU0NSSVBUSU9OOlRoaXMgaXMg

YW4gZXZlbnQgcmVtaW5kZXINClRSSUdHRVI6LVAwRFQwSDEwTTBTDQpFTkQ6VkFMQVJNDQpFTkQ6

VkVWRU5UDQpFTkQ6VkNBTEVOREFSDQo=

--00000000000037dc81064306020a--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 07 Nov 2025 11:43:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHRQ8-00000000BCh-0wAb

for dave@doctor.nl2k.ab.ca;

Fri, 07 Nov 2025 11:42:48 -0700

Resent-From: The Doctor

Resent-Date: Fri, 7 Nov 2025 11:42:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012052.outbound.protection.outlook.com ([52.103.43.52]:36440 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHPp3-000000006Zz-1eBM

for sales@nk.ca;

Fri, 07 Nov 2025 10:00:40 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=KWLCBDwHnYV5nvu2TtftH9MpyY6DcNUkxaau0oIAumOvfTRYSLL73ts3wv5AC9y4fjf2ZVIEaZx0D9POHQZP+rxnwLijfG/vX0/W/zq6PUQj3Z+q0PBun+gYOQo/Tb52dUvSgMSTWtxnmqFr2N/K41jvJzKxPaEcmp+iL28jPsbvUqTTTE9D+LI52cSvQQilIoYHT2oBNl8+gnNM14cD0J4GyuMOchlW7LXP+iVcZ9jAzdimZ9zDZ+4xlX/Lu3/i8HfJQsojboeaRsMQqK2HanOo5TnloFxig2MNQggrZ3FQR+RymEyogXtye97e11bXw6cIkTDJ4OoI7uFYh/RjPw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=QDdZdkZgw8cTZeuzytage1NbqW0vY4uMGqRSKTSww74=;

b=NtGGK/QYMh3ElnGeff1MyDohMXMttVTWXC+zpWTPVVRGq/pfMtHWpdb+OSVkN+rh1pKROkYAO6N8tNsmQhU5m2Fh9Rp8XXX3dTKzpszQyh8DPCbNxFedWkHa32q+ZN22CLxPfyUdh5DyRX/hFiZ0vMe+d+w24Y+4M1D+5/mKdw5MDMTZqp5J8xqx6YMI7kT7T6PSNxm1omsQWRVUJXEtt7pgFiurJinwI0MuRCRnzCpy66Neu9ru5qPEz5jEefrgSZZPGSp6QGOscO30+kJ7wGJzdvnlpUWnGywBZmZHje3QzysBGq5PA2EaAzpvIJlmwEaVl20eDe8GJIf0J1B3HQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=QDdZdkZgw8cTZeuzytage1NbqW0vY4uMGqRSKTSww74=;

b=tgNpwYIKzzpeBaIpWw1z7dKzOsAty9OynDKfWs9EcPM7Fk3LHiLofuzEJ1UMjxC0hju9aPDQjZkr4mMllNBVjFfJJdfqAbuRY46nlVJwmNMYJjybincXRocBpPi83mZDQt6DXRroB/YcFQjRGWFaRpUoW8ExoFLHTyEIfl5tQ+jR8SzFEpj10tMbP4b+8zl2hFOZNLUSaWtUdKJWBtXcKYr2HWW00wq3auuMP6xOfQfShVm/6/hBiUA9dm+Q24XlhTcsRM+FUboZlyzkMv/FDAfclu395fsiDCOTI59RnhSM1eBcKjbOIzbQWuH2cgpi/kPGBWhqUbkujqK9HJt0+w==

Received: from SEZPR01MB5438.apcprd01.prod.exchangelabs.com

(2603:1096:101:9a::11) by TY2PPFA917D05EE.apcprd01.prod.exchangelabs.com

(2603:1096:408::3c0) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.12; Fri, 7 Nov

2025 16:59:30 +0000

Received: from SEZPR01MB5438.apcprd01.prod.exchangelabs.com

([fe80::cc6:3bce:ee7:2953]) by SEZPR01MB5438.apcprd01.prod.exchangelabs.com

([fe80::cc6:3bce:ee7:2953%4]) with mapi id 15.20.9298.010; Fri, 7 Nov 2025

16:59:30 +0000

From: Oliver Ross

To: "sales@nk.ca"

Subject:

=?utf-8?B?UmU6IEluY3JlYXNpbmcga2V5d29yZCBTZWFyY2ggRW5naW5lIFJhbmtpbmc=?=

=?utf-8?B?4pqhICIgc2FsZXNAbmsuY2EgIg==?=

Thread-Topic:

=?utf-8?B?SW5jcmVhc2luZyBrZXl3b3JkIFNlYXJjaCBFbmdpbmUgUmFua2luZ+KaoSAi?=

=?utf-8?Q?_sales@nk.ca_"?=

Thread-Index: AQHcUAfiyoZaOOpt7kWX6zyWCuajFg==

Date: Fri, 7 Nov 2025 16:59:30 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR01MB5438:EE_|TY2PPFA917D05EE:EE_

x-ms-office365-filtering-correlation-id: e45b5cf2-655d-4fcc-71c0-08de1e1f04a8

x-microsoft-antispam:

BCL:0;ARA:14566002|5062599005|8062599012|8060799015|39105399006|15080799012|19110799012|7042599007|461199028|31061999003|38102599003|40105399003|440099028|3412199025|102099032;

x-microsoft-antispam-message-info:

=?utf-8?B?NzllZUN5aUV0TjE0Z2doaHl2T1dhOXV6YTBXM2NGNDFlZHIvUDQxRi9IUlBy?=

=?utf-8?B?WUErM1BGeUlWQm03T1kwTWZqUXRQaVpyMHBxckgzb3ZqZGJBUUZIOU9ZRTlY?=

=?utf-8?B?WFRVNjhuNkE3S1J0bTBDMVlrWC9QZmtENGpBcGM4MVRLS2VpbkhXd0h6MDQ5?=

=?utf-8?B?cXZ4aG4rZFR3dmVaaWF6KzBWRVVpb3dwNmZxZEp2TXg1YlpPWVlUakNMZzgr?=

=?utf-8?B?b0FrOSt3MERVWGhyYXNabzZ3MDhRanhmWHQ5S2c0VjQxZWRWajBFdGlXTUo5?=

=?utf-8?B?MW5MTzdZTEdkSTY4SU94bHhxUWk1VjZwOFduVXJ3NGpCeHZjZGMzWEFMRlZv?=

=?utf-8?B?Sm5iazNGa3F2Z202M2xlb2drK05kcGh2WEUzTEJKSzcxdG4wc3FreE9iblVa?=

=?utf-8?B?d24zcGFvOHJJdkZyOEJrYmdIeWIyNmtRUUhPUGlsUWRrc1ZBd0dwZks2Mm15?=

=?utf-8?B?RWcwNldLM0g5NmZyQnZlV1MyaDNoZXU5MVZqVGM5QUV5dVlVQno3Q002MWxY?=

=?utf-8?B?Wk5xSEEyRVNGU010aXIrWlVVZGVDaERkNG1rWGd5UC9HdVpqYUlZekZTNGFL?=

=?utf-8?B?OTM4ZXowallaNmRIc3V6Vk9mN3gxMGRqczJrWnorenVlVmliWHRPQ3RBMFJj?=

=?utf-8?B?UEUrTVVBblArV3lNaEZIRnJxQmJvWm44MFp3TUg1ZVVsK0k2QnltNnVNWXFO?=

=?utf-8?B?TkNDcDhVTVpCOUh2OWxXN0ZPa1k0ZEMreHZRMFdKTFpNcEZWTitTUUF3d3Va?=

=?utf-8?B?c1p4ZE96NmNORzBadS9iVE80bmN4czkwZGo1YkhlbTFFa2d4eXNraHlTdDVO?=

=?utf-8?B?WVVRajVKTElweUp0NWR4RlN4dzdoQUp3Mmg4SWxlaXNlQldrODl6RkVNNCs4?=

=?utf-8?B?cjY2ZDhkRUl2QUVkNmx6b09CQkZPZURtcVM0K2NlZ20xQ09SVkpZOUc3aXhY?=

=?utf-8?B?TFkvTG9WUDdmN0xrOS9md1NKekxkdlNnNjRYSTZMbWdEU1l0STFDNlRBYW02?=

=?utf-8?B?ajkvNzdnVjNpcDZJWW10WE0rQWZaNXMyRXRncS9rRUg3U09oazhIZy8wZXpY?=

=?utf-8?B?c2dZUkoxZnFSZnVjU1lxTkh0c3VSMFFwSDR1MCtUTDdHT1RMVmV6Z0ZMVENO?=

=?utf-8?B?ME0vVTh5U3VUb3J3UHNqQ0EvSlVUN1M2QkM4QlZySG5wcUtLcWlWejU0N0Fw?=

=?utf-8?B?blZqQllkZGdMeTJudy94NFlEb084bFRiOUI0Nmx2VGR5M01YL0JwLzF2YWxS?=

=?utf-8?B?YlJ1M0RGeHZYN2NnVE13Sm1WRUdiTVFVa2pWWWlqOWJhcHBLYkNyYkowSjFQ?=

=?utf-8?B?cVVjdnhzK3VPajJ1azZVSTg3UGptVGttdHdjbWUzMWFmQ2lNK2JiMW43Smx2?=

=?utf-8?B?YnhTeVkrdUR5Ym4rY2hpbE1qQ21Hc0tNVUNDT25ERk51TGpFb0YwNmMzc3Vi?=

=?utf-8?B?dnh0aFp2R3RPdStJenYrc0hybFY0ZGNUQnAwY0doTzVydjd4VnV0V1R5K2tn?=

=?utf-8?B?ZW0yNEY5eEdkYWt0aHRET3B1RVJzVVU4Wk1ueG15ZW5iVG5ZUWREaUtJbFUr?=

=?utf-8?B?MjUxVERJcnZLdVNzMmJwSXhPZ3M4SXZuSnNUV3FmSUJGVGpiS2xBSEs3d3pB?=

=?utf-8?B?VUlGajBwNXYzMW1FdnZURzBXZnVnQmZOUDAzU21BQ0ZOVFl3aUJWL1lwZWlJ?=

=?utf-8?B?WEh5dFBQSkc3cXZGdHZBdFg3NFhta3lYVmFrYXdpcmtubTdrb3Fyd1pBPT0=?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?K1BacEFpVzVIOEZpQnpsQ2pwcHIwSXdWTW5zUVI0K0dsRms3dVpmWnFPa1ow?=

=?utf-8?B?Q2tYM0pqWjNPRmRwSUVKNi8yTVpjcGNZOWpoSC8rZzN1VjNMVUFNdVJabkZF?=

=?utf-8?B?U0pudWlObmJMZEJYRTY2dWM4LzcyWUxESnh6dGxnVUFNakNUaXAwZ0tEWHY5?=

=?utf-8?B?bnoyRS92dm04RXNOYko0cnl2SXR1SGg2WW0rYlMyQktaQ3NFOTNyL1VUYTRI?=

=?utf-8?B?Tkl2S3pNcVYxVWE2SWphWFJXNW9jSmNRSVZvNlI0RGVGcDRvS1Azcmh0UjQw?=

=?utf-8?B?cTdZWE5rMlE1SE51SzNvSFlTRHlON0RsVnhzOUhyTWg4c1pZcjVMbWRkY2JC?=

=?utf-8?B?Sm03aDVLby9oYmNWc0tYTGpsbGpBT1d6ZDFybEUrRzEyME5peUFXR3ZrKys1?=

=?utf-8?B?UzVFWSt2NVFaNEZ6Y20reWxFaGdoOFNoT1MySnNRS2ZEd2hMU2JzQTFQVDVE?=

=?utf-8?B?anloQk5WZUhERXY2c3FvR3NpeWhrdmplZU5DWWVrV293d1dwVnVRYnRhSlN5?=

=?utf-8?B?bS94N1dZbThHWXdiMUxENGFEWVlTYUcyU0p3ZmN0YmNDOEJHOU5UeGoxZk81?=

=?utf-8?B?bWxMbEJLMStFNENxRjNmOExFaXE3blFmTDJJMHhEU3ByMHllaGp2RnpiNnNE?=

=?utf-8?B?eFNydUdDMlFwU1Zjb3pPdDlpOGRUWXFmVk5vUzM3dlA1N2hUODh0TUJ1MUNW?=

=?utf-8?B?ZmRaYUovdzhKL0Z0ckVxdnF0VXpZa0ViVXJkNlo5dmN4WjRwYVNIRW9VcEgw?=

=?utf-8?B?Z3lweU1yYm9NeE9peWRaMmNPWXlncytJTnBISllxRHdoQ3JLckg3RWk2NVRi?=

=?utf-8?B?NnNndGdxUFhFUllwdHdxLzFwbWdDOWlHbkZ5ZGRwMGVsOWNmOE9EN1B3MVFh?=

=?utf-8?B?b1I3OHBVR25UaFl1QjB0d3prY3lDQ3lSVXE1QmN6WDU3YU9rWFdVNnM4KzNr?=

=?utf-8?B?OUNEeG80blZubVlGM2xSRzFETXFXZXhGczBEelRtRWIrR0t3aE1hN1RQcWpk?=

=?utf-8?B?WVRIZ1VBUmFLa0lsNTl3eXNEZ2djOVZSTWI0a3Bub3FxSDNVVEI3N3N1TGVO?=

=?utf-8?B?U0hXRHBUR25JMzVKOGJvbU15WUVxZnBoQkFoVVZJd21nRThMTi92UHc5eWdK?=

=?utf-8?B?ZUFUbmx0SXU4TmQrYWpDUGhRdERjZEMyN1N2TUJRVllscVNubW1xbkFzT2ZG?=

=?utf-8?B?ZDZOaVovWTdveWVpdVZOTFR0K1g3YXhqV1E3T1M2SEVVVkp1WEc3eUxrWjhp?=

=?utf-8?B?R1ljNzdNbWJhL0o5dlZJcUR4NVlDLzd1RW12YkNpRXV2SzFGVzN5aGRWaFpO?=

=?utf-8?B?S21WemJtQmpOS0s0cnRBOUFxcVJIZWxuN0kySUgvUktpYzhsZ1Nma1ZtdHRh?=

=?utf-8?B?dG5pOUVOMnY1c25iR3pNR3pqdGdZTEp1REZrektNNHhyS3Bwc0tNak00VldM?=

=?utf-8?B?Z0U3UFFJbThvRHNvMStsTkM4MHZjY1ZrNG9UMUEwdGF1OU5HejlCc1g1Yk1F?=

=?utf-8?B?NXU2UWI2dnNBS2lEakdoR01RL0xaV0lTODRjbGxRY3ArNlRFVlhabXR3d2tX?=

=?utf-8?B?bFlkcmFCZkttNmJuN1pyTTdmNllDTTM5MktZbmdUMCsxaDJDU2EyQm4rS3Yx?=

=?utf-8?Q?A4quilJCoOotGqREGDq9MbK/HgAmc+S5FijcyASNfuEU=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR01MB5438A64B7DB376482BFF9FA2F3C3ASEZPR01MB5438apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB5438.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e45b5cf2-655d-4fcc-71c0-08de1e1f04a8

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2025 16:59:30.3781

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY2PPFA917D05EE

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi sales@nk.ca, Just a quick follow-up as I haven’t received

a reply to my last email. If interested, Would you like to receive a proposal

and pricing details?



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:9a:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:9a:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:9a:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:9a:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:9a:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:9a:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:9a:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:9a:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[52.103.43.52 listed in will-spam-for-food.eu.org]

[52.103.43.52 listed in will-spam-for-food.eu.org]

[52.103.43.52 listed in will-spam-for-food.eu.org]

[52.103.43.52 listed in will-spam-for-food.eu.org]

[52.103.43.52 listed in will-spam-for-food.eu.org]

[52.103.43.52 listed in will-spam-for-food.eu.org]

[52.103.43.52 listed in will-spam-for-food.eu.org]

[52.103.43.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2603:1096:101:9a:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:9a:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:9a:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:9a:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[52.103.43.52 listed in dnsbl.ahbl.org]

[52.103.43.52 listed in dnsbl.ahbl.org]

[52.103.43.52 listed in dnsbl.ahbl.org]

[52.103.43.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2603:1096:101:9a:0:0:0:11 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2603:1096:101:9a:0:0:0:11 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2603:1096:101:9a:0:0:0:11 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2603:1096:101:9a:0:0:0:11 listed in]

[dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[52.103.43.52 listed in psbl.surriel.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.52 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[oliverross786(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[oliverross786(at)outlook.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?}

=?utf-8?B?UmU6IEluY3JlYXNpbmcga2V5d29yZCBTZWFyY2ggRW5naW5lIFJhbmtpbmc=?=

=?utf-8?B?4pqhICIgc2FsZXNAbmsuY2EgIg==?=



--_000_SEZPR01MB5438A64B7DB376482BFF9FA2F3C3ASEZPR01MB5438apcp_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



SGkgc2FsZXNAbmsuY2EsDQoNCkp1c3QgYSBxdWljayBmb2xsb3ctdXAgYXMgSSBoYXZlbuKAmXQg

cmVjZWl2ZWQgYSByZXBseSB0byBteSBsYXN0IGVtYWlsLg0KDQpJZiBpbnRlcmVzdGVkLCBXb3Vs

ZCB5b3UgbGlrZSB0byByZWNlaXZlIGEgcHJvcG9zYWwgYW5kIHByaWNpbmcgZGV0YWlscz8NCg0K

S2luZHMgUmVnYXJkcywNCg0KT2xpdmVyDQoNCkZyb206IE9saXZlciBSb3NzDQoNClNlbnQ6IEZy

aWRheSwgQXVndXN0IDIyLCAyMDI1DQoNClRvOiBzYWxlc0Buay5jYQ0KDQpTdWJqZWN0OiBSZTog

SW5jcmVhc2luZyBrZXl3b3JkIFNlYXJjaCBFbmdpbmUgUmFua2luZ+KaoSAgIiBzYWxlc0Buay5j

YSAiDQoNCg0KDQpIZXkgc2FsZXNAbmsuY2EsDQoNCllvdXIgd2Vic2l0ZSBkZXNpZ24gbG9va3Mg

Z3JlYXQhIEhvd2V2ZXIsIEkgbm90aWNlZCBpdOKAmXMgbm90IHJhbmtpbmcgd2VsbCBvbiBzZWFy

Y2ggZW5naW5lcyBmb3IgbW9zdCBrZXl3b3Jkcy4NCg0KSWYgaW50ZXJlc3RlZCwgTWF5IEkgcHJv

dmlkZSB5b3Ugd2l0aCBhIHF1b3RlPw0KDQpCZXN0IHJlZ2FyZHMsDQoNCk9saXZlcg0KDQrigJxB

IGNvbW1pdHRlZCBwYXJ0bmVyIGRlZGljYXRlZCB0byB5b3VyIGJ1c2luZXNzIHN1Y2Nlc3Mh4oCd

DQoNCk5vdGU6IC0gV2Ugd2lsbCBiZSBtb3JlIHRoYW4gaGFwcHkgdG8gc2VuZCB5b3UgIlByb3Bv

c2FsIiBhbmQgIlByaWNpbmciLg0K



--_000_SEZPR01MB5438A64B7DB376482BFF9FA2F3C3ASEZPR01MB5438apcp_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i

dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5Pg0KPHA+SGkgPHN0cm9u

Zz5zYWxlc0Buay5jYSw8L3N0cm9uZz48L3A+DQo8cD5KdXN0IGEgcXVpY2sgZm9sbG93LXVwIGFz

IEkgaGF2ZW7igJl0IHJlY2VpdmVkIGEgcmVwbHkgdG8gbXkgbGFzdCBlbWFpbC48L3A+DQo8cD48

c3Ryb25nPklmIGludGVyZXN0ZWQsIFdvdWxkIHlvdSBsaWtlIHRvIHJlY2VpdmUgYSBwcm9wb3Nh

bCBhbmQgcHJpY2luZyBkZXRhaWxzPzwvc3Ryb25nPjwvcD4NCjxwPktpbmRzIFJlZ2FyZHMsPC9w

Pg0KPHA+PHN0cm9uZz5PbGl2ZXI8L3N0cm9uZz48L3A+DQo8cD48c3Ryb25nPkZyb206PC9zdHJv

bmc+Jm5ic3A7T2xpdmVyIFJvc3M8L3A+DQo8cD48c3Ryb25nPlNlbnQ6PC9zdHJvbmc+Jm5ic3A7

RnJpZGF5LCBBdWd1c3QgMjIsIDIwMjUgPC9wPg0KPHA+PHN0cm9uZz5Ubzo8L3N0cm9uZz4mbmJz

cDtzYWxlc0Buay5jYTwvcD4NCjxwPjxzdHJvbmc+U3ViamVjdDo8L3N0cm9uZz4mbmJzcDtSZTog

SW5jcmVhc2luZyBrZXl3b3JkIFNlYXJjaCBFbmdpbmUgUmFua2luZ+KaoSZuYnNwOyAmcXVvdDsg

c2FsZXNAbmsuY2EgJnF1b3Q7PC9wPg0KPHA+Jm5ic3A7PC9wPg0KPHA+SGV5IDxzdHJvbmc+c2Fs

ZXNAbmsuY2EsPC9zdHJvbmc+PC9wPg0KPHA+WW91ciB3ZWJzaXRlIGRlc2lnbiBsb29rcyBncmVh

dCEgSG93ZXZlciwgSSBub3RpY2VkIGl04oCZcyBub3QgcmFua2luZyB3ZWxsIG9uIHNlYXJjaCBl

bmdpbmVzIGZvciBtb3N0IGtleXdvcmRzLjwvcD4NCjxwPklmIGludGVyZXN0ZWQsIE1heSBJIHBy

b3ZpZGUgeW91IHdpdGggYSBxdW90ZT88L3A+DQo8cD5CZXN0IHJlZ2FyZHMsPC9wPg0KPHA+T2xp

dmVyPC9wPg0KPHA+4oCcQSBjb21taXR0ZWQgcGFydG5lciBkZWRpY2F0ZWQgdG8geW91ciBidXNp

bmVzcyBzdWNjZXNzIeKAnTwvcD4NCjxwPjxzdHJvbmc+Tm90ZTwvc3Ryb25nPjogLSBXZSB3aWxs

IGJlIG1vcmUgdGhhbiBoYXBweSB0byBzZW5kIHlvdSAmcXVvdDtQcm9wb3NhbCZxdW90OyBhbmQg

JnF1b3Q7UHJpY2luZyZxdW90Oy48L3A+DQo8L2JvZHk+DQo8L2h0bWw+DQo=



--_000_SEZPR01MB5438A64B7DB376482BFF9FA2F3C3ASEZPR01MB5438apcp_--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 07 Nov 2025 08:48:01 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHOgC-00000000E31-3Foa

for dave@doctor.nl2k.ab.ca;

Fri, 07 Nov 2025 08:47:12 -0700

Resent-From: The Doctor

Resent-Date: Fri, 7 Nov 2025 08:47:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012060.outbound.protection.outlook.com ([52.103.43.60]:56897 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHOW9-00000000BsM-2kE5

for sales@nk.ca;

Fri, 07 Nov 2025 08:37:00 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Ce3dBdZmAmnffYM8iWi098MlmivrNgYkMKTMJjq19pOYLBAT5rDPluxnwQ4Hm5D4bCT+D11SnGlidqIklU2qFC01Pe4NB+qeJ/wglSVgi4FtU+M2CjqlyKSG+ncps4Y3orQrQlbqM5m6tfD9wW4gWzc7XXLlRWW4Xc+xWrLW1mQ8i2nhrflqpTrIAZ/xKX4b1t67n9yaU2ECJHa7oZ3q1cTh2GZ+cwXKfQdl386xTEOPZuTjX6w42/R+eOvu8kMR8+i0OC24qnnzgLOa3XQnXrzuImTR90ic3ZBMyJnBwpilBF6hIMaBLB/gKPNHgGbsjqUhaLL/nr9PLPbjeus2vg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=SUvhvph197RQsaG2j1YJkIUTgYrCLohn66vKfR6sVmw=;

b=xek9I7cTkBVoVdXBsMnHtRtbetLGA0hEe2mqiMnlUrGj2rLB2ghB3ly/+W9GCBQkvDsnpTfkm8e2bxwBnslZyJnzGArsgZ0F5mNALmWp26CyM5UjlbhosQf/CFuf5s1IKbPhHrguqp30n+O9uFuQxrQeD03V9cmMq9xJwNVvuzxVe5qvNECnmiEomeMRqPeZYMQxOzhlFSMCEaEBzH8zsnnH6ao4ZgQaW3wD4QPTezdidRU7gBFZj3PTAUZwi8VuTBhKbDSL4lbOvRCVhXHa7Giz+MBHBdddSCsXQmxmSfqjMakKr8ng016EUEdGAw7Hxjf6nkMHFbRx8gD7uMC8Mw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=SUvhvph197RQsaG2j1YJkIUTgYrCLohn66vKfR6sVmw=;

b=IUjywWf3nGJEl4tU+cHGhsEih8fbD/olyJiMQLpeyP64eGgoneZHhduPX0RG/NxbePkd9L+ixeYwQEnniwrTFHSeKAYr+vP0mz8nmJl27UPPTZ365PH2+QkJ7YMdKalIOv52RlXzqXt8sySzLsOQlEy5bWKc6h/UWeC+pNGw9lm+B6+MsnmvSgXUk99oahdupHnfi+2aqw59pIdbPh6Vet2+20LTK0tH9iVGCEU43Or8CkUpxDRotqrQchMQ5zilObwCP7y1tUgwG/OOsJ/+RhDTIdV0wITi3tsZm2N8TkORHXbaO1KvSzM5nEgAcbQG7mjZXhxcPoM8ewHW/mgR1A==

Received: from SI6PR01MB6846.apcprd01.prod.exchangelabs.com

(2603:1096:4:235::5) by KL1PR01MB5068.apcprd01.prod.exchangelabs.com

(2603:1096:820:dd::16) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.12; Fri, 7 Nov

2025 15:35:30 +0000

Received: from SI6PR01MB6846.apcprd01.prod.exchangelabs.com

([fe80::64ef:454c:8c85:defb]) by SI6PR01MB6846.apcprd01.prod.exchangelabs.com

([fe80::64ef:454c:8c85:defb%5]) with mapi id 15.20.9298.010; Fri, 7 Nov 2025

15:35:29 +0000

From: Emma Kamlin

To: Emma Kamlin

Subject: Re: Send Price..?

Thread-Topic: Send Price..?

Thread-Index:

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

Date: Fri, 7 Nov 2025 15:35:29 +0000

Message-ID:



References:











































































































































































































































































































































































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI6PR01MB6846:EE_|KL1PR01MB5068:EE_

x-ms-office365-filtering-correlation-id: 1fb84075-e6ba-48f9-06ec-08de1e1347c6

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|37102599003|19110799012|15030799006|8062599012|8060799015|15080799012|461199028|31061999003|39105399006|40105399003|51015399003|440099028|3412199025|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?Fuab3erFKuSbCUDP2pmOShOtSWBNwtl/PIDcsei43NIK+NHB5dyd9cgLoy?=

=?iso-8859-1?Q?0atVrFUl7MFbb2Uq3CH+cYLaSRt65ZglcQWLHZ8v1o23tR8ukmHM/F0bW9?=

=?iso-8859-1?Q?f0AwLKmdDH9LGMFRMycynVjKkqsqNusELf9Jiz2hbkcP+sUq/i0b4ABzdY?=

=?iso-8859-1?Q?3u/mDWNMcAGfJYEUsgZGdGQ+OC4W+I6dorrrjEXCzAi48pzZH1qYMXleky?=

=?iso-8859-1?Q?RSR7fynZRKPEPUyEHaeU9M27RjZigbLqhDgw4N3yRmDwa6hEFl3er8rAKT?=

=?iso-8859-1?Q?PyukqJ6Vi1j7UqWUsGsNJEW6hPVtCawBruTFFSaD13B1SGpyNnJZjOVmwI?=

=?iso-8859-1?Q?ecZIevCWmbpN1H0DvI6MuVt3k4Sjhs+LTNFR9uYP3E9x8PLRGXgPz3SPzV?=

=?iso-8859-1?Q?PZvg/AzrfWpIRybXnzbH5ZwKy8tcFj+CaC3zY9VL3oN+u52hyyhY6P0YD9?=

=?iso-8859-1?Q?uuAjMuW3WLWHUKjT3wqOcNiJZcSuHHbCz18T7GOFs1urr6WOU8xuG+wSwo?=

=?iso-8859-1?Q?QPzQL0hQxhdpoWBjjvqD78tvM8QssnbrfxW/8xnO2G6dOQPL8x14uciANY?=

=?iso-8859-1?Q?4tCQNGvLIoPNyQxN6Ju7OcuYO5hhEsBU3JWzS9UawvjDcIFFiW7NYpJGqr?=

=?iso-8859-1?Q?GGXNoC33tPhseIab9uTKbC/84k6MEhaORUqC/Sjgsd4pGbA3gnNBWrJANo?=

=?iso-8859-1?Q?++8z2Y1ry477toZmILaLcQHO0pZ8rnu21WIg+hAr9jKewoT5QY2UOMJJ4H?=

=?iso-8859-1?Q?8WCjKNRdtjQGIb/vucfxyifvPOKjdCDvlJv1nDHa61pmrQKHfR5dHBAcj1?=

=?iso-8859-1?Q?t6xKrpqjgqS377Ef4V94yr2tKcKeZm+7werbALulkB3knrLUmzHWhMfdK8?=

=?iso-8859-1?Q?DR+ztqUL73v8T1+gM5DfB+7t3l4MO9ZWGxHjgBAa0mi0cX3rJGFia+B/3I?=

=?iso-8859-1?Q?9kAVw6BVEdqH3Oa+Wf8lZnwB9QqxV0FN4vaHvdyRhQsaMYFu5+G5YT6Zbv?=

=?iso-8859-1?Q?kCgBlvAMYDAagWBMxM6/Fh5QhegAMG3LYMjsmPT+6QnHbdO7hnp7bnKBEm?=

=?iso-8859-1?Q?mzwo405lgT7Xe9otyzY7NDMqazR31pTxBBirgIluC9cswSsA0wkqSUHna8?=

=?iso-8859-1?Q?ItVowxnw5RFnwyPuzcHn0eDkzrqNCRByhLX5VrotWWG4nnUwqSJldyUNij?=

=?iso-8859-1?Q?j46hMVELF41gaX2ltlYC+mUFGnGDs7WFwD+l2byxPWpUX/Mu0/bYjmJEW2?=

=?iso-8859-1?Q?k/PErYNsBC88+Fi+uCP/+nGGn4FMGW6TZ4fAK894ciJVaQYbobG3eur1t6?=

=?iso-8859-1?Q?F5ZHdnGe2ZJLzcj60AGNj0No8/7GCjKwLvb8IrGeMDr2UA8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?is3fUL49082IhXBeU+bQGI1+Y2+iOoal7/gGDNZZOUkMf438iz/FADfXEh?=

=?iso-8859-1?Q?7SSIKnO5ael0UqvrKsvgLsreDLsXbK5fhFvgZhIPkLqHd40SDT/4GecYK+?=

=?iso-8859-1?Q?tGn00F/4A1plg77uj6flHnJCiiwEykjsNsXObVH8GceZM72w7cLir8jS45?=

=?iso-8859-1?Q?9/3lB2ztnu+Mg7CBcp0MjXNoXEKzWGB8d3B3Df0yxMcChd+wP/zjFtA/0B?=

=?iso-8859-1?Q?quWmkpDAhu2nQhW3mmhtpjIdVfHn2x5aiagzRYKWgf9epx0Y1PnmcR52PY?=

=?iso-8859-1?Q?izWHfHr4KDbTKFD1t/lRMIh9cX83dvUus3UFBNkeEeSi7QZpMVRiUaPP9C?=

=?iso-8859-1?Q?FDoiA7tH8DJADjaXSkPL8aRiZZBAlvv8iea+nu5ps00LkvHbAzxnZqeMs5?=

=?iso-8859-1?Q?Gq951JG7wDTBoQSF4yl2zGuG80645Xk4mGzPqXhTjKqwnK6xGLBqXFvimn?=

=?iso-8859-1?Q?qSw+S1kqj7dVHzKrX9ZvB80lLSF9hxrWQkGckJ6UwmRd21/G2FAL/0rrbc?=

=?iso-8859-1?Q?4iXxwZsUWNR9Gy5st0MaqjyAnD6+kUy8loVukmO2dOZTBLKVeHYV2jO95s?=

=?iso-8859-1?Q?Jyai0VMjj8J+L6jQqP2ScE8NIPWuXcE6wyByaoDoYeE1PchUO0YI/IaNNN?=

=?iso-8859-1?Q?8dVAu1COJNJd92B4f2+zKPdbrQbR4mQUoAL6f3ek//AOt6hh3dMA9GgaV6?=

=?iso-8859-1?Q?OLPKBR69R/tf4KmI9nP3kwHuK9rtY/IcXgx28jUsIEMiS6JpBMsEcig3Jn?=

=?iso-8859-1?Q?rRryhu/TkMsIxNb7Erw6CEOapil/ecDcpu9yfPaQLqKdoOQOMZ0WaZf0x3?=

=?iso-8859-1?Q?dqbIuvG6ViFevqxOZN1PU/nrdQF/QO8wU8UT9X1Wq8NjlIMSABDAhP/8RJ?=

=?iso-8859-1?Q?AL3zZSkeXdb3F9cyM3Go/l5dehofH4eZD1k0PfwbXKwKSBxO4V3d9Yb68U?=

=?iso-8859-1?Q?Gmi51bh7MW31FE6v3pRCMx9BqVlqnxE2pKyqnW7D6tmaVMRlbm2IrUm2u9?=

=?iso-8859-1?Q?wPnmS/2rG0pf72EFWrE1ywSEvDKam2rPu1v7cQyZ62LXeCptog+w+IUA/6?=

=?iso-8859-1?Q?a4HKO1dDIiBRmZdtqI6vZevMvvlj9h4NDeQbZbD2Y8fwUBPBnsRy5SASN3?=

=?iso-8859-1?Q?zvRGOOg2TZE6jYCGSa23KSg7H3CCBiL2DtwMHgfS1uDBWBF+Nj4TdIIvK4?=

=?iso-8859-1?Q?ofy8OyJqmrhjlE8CRLiLBrQJe1JkOhAr/Ney5xyirA90bK2f5d3Uz0TtOV?=

=?iso-8859-1?Q?O7IJBspWKiLEoWs2SDc6LmCE4L/sVk2PWcya3qfNis6jem+Bdb0Uv3ViQh?=

=?iso-8859-1?Q?gbZXt9B6MckBAHyU/sdEmzUGx+jLGHSIQs8xV3BEjyiqTOc=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI6PR01MB684664BF8FD6E60AC53E3B73D1C3ASI6PR01MB6846apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI6PR01MB6846.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 1fb84075-e6ba-48f9-06ec-08de1e1347c6

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2025 15:35:29.0368

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR01MB5068

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I was checking your website on see you have a good design

and it looks great, but it's not ranking on Google and other major search

engine.



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:4:235:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:235:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:235:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:235:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:235:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:235:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:235:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:235:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.103.43.60 listed in will-spam-for-food.eu.org]

[52.103.43.60 listed in will-spam-for-food.eu.org]

[52.103.43.60 listed in will-spam-for-food.eu.org]

[52.103.43.60 listed in will-spam-for-food.eu.org]

[52.103.43.60 listed in will-spam-for-food.eu.org]

[52.103.43.60 listed in will-spam-for-food.eu.org]

[52.103.43.60 listed in will-spam-for-food.eu.org]

[52.103.43.60 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.60 listed in dnsbl.ahbl.org]

[52.103.43.60 listed in dnsbl.ahbl.org]

[52.103.43.60 listed in dnsbl.ahbl.org]

[52.103.43.60 listed in dnsbl.ahbl.org]

[2603:1096:4:235:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:235:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:235:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:235:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.60 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.60 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.60 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.60 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[emmakamlin5426(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[emmakamlin5426(at)outlook.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 MR_DIFF_MID No description available.

Subject: {SPAM?} Re: Send Price..?



--_000_SI6PR01MB684664BF8FD6E60AC53E3B73D1C3ASI6PR01MB6846apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



I was checking your website on see you have a good design and it looks grea=

t,



but it's not ranking on Google and other major search engine.



May I send you analysis report and price list?



Thanks,



--_000_SI6PR01MB684664BF8FD6E60AC53E3B73D1C3ASI6PR01MB6846apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I was checking your website on see you have a good design and it looks grea=

t,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

but it's not ranking on Google and other major search engine.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

May I send you analysis report and price list?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks,








--_000_SI6PR01MB684664BF8FD6E60AC53E3B73D1C3ASI6PR01MB6846apcp_--

Web/SEO/App Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 07 Nov 2025 08:47:02 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHOfz-00000000DvU-1bf2

for dave@doctor.nl2k.ab.ca;

Fri, 07 Nov 2025 08:46:59 -0700

Resent-From: The Doctor

Resent-Date: Fri, 7 Nov 2025 08:46:59 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f72.google.com ([209.85.208.72]:58801)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHNyt-000000001q0-3qXs

for sales@nk.ca;

Fri, 07 Nov 2025 08:02:38 -0700

Received: by mail-ed1-f72.google.com with SMTP id 4fb4d7f45d1cf-640ac45f840sf1331339a12.1

for ; Fri, 07 Nov 2025 07:01:41 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1762527694; cv=pass;

d=google.com; s=arc-20240605;

b=ElFtO0d3xrqQa0ckGHgs4NuXMRVr0SWQiQaEu/r0ahiidbqgPczrGXjY9D85Ygklwl

Z/ouS0H4ifKzpVfolZeXvBh31sf1eSe9pSeRCAz/+l1RZVNLoewWsRATZBadYAenEU20

5M2Zq2yrmP4b9eXUsuMV73bsP6Z2z6DxuLfP5+7QmkoO3UWnwGHbXGlljUtN/Ad6cYvX

jt8lQilk2k+yWEeP93yocJKDRjXjMB2JtNVtKQ6kh1OtaeCO/JovbTobVNL3c4hxfZfC

AsGJclS67MS5nT/mCMyTBI8zcjVsndjaS5GKdJ01aRi+0owLNPNjNkIssn+60C+fO/6Z

XWDw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=yOPRuza9akknm9L7mSoIR9PZ5mUy3QSAdGdZ0nHBgOE=;

fh=lSyk8Cs4Z/RKBmsSCjIQ+GMtIMD33Jf9LGjv0vWTBvE=;

b=DGAAaY4dey/I5ZMMA4aTm4KLlpaUZWlGzLdqIsHwz6wJtS+/08Y+lV7blpwg1tFFPS

eAGyfRz8PiaeJwX8y1Psth9ZClmrAJfcQbK7LXTJRL/ggZApjVvrOCEAFR885KRAKI1t

ejF0vqjy1Tdatxa3XxFApOZDia3jvrxA9+mD9pf9p848Jl4G9gfxqrHzzlN4k4G/UIqN

xUYNfRm1c2IqiYufuBac7Se+2xbKDwpKqjK4ozC7h8uF9QGuoVpsas8OdHHZNsANRwYc

LU6gDwbN/SlKJSmPQnczPz/jeseAi7zspzg5QK4eoN1cy+clQ+8d9JfvIfG0HfEJLQHw

WH4Q==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=Afw+GiVA;

spf=pass (google.com: domain of michaeljackson0634@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=michaeljackson0634@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=digitalappsdev-com.20230601.gappssmtp.com; s=20230601; t=1762527694; x=1763132494; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=yOPRuza9akknm9L7mSoIR9PZ5mUy3QSAdGdZ0nHBgOE=;

b=cbvZvTdGsIBq5Y+NgaEoNoeiRF+0aRzDyUD5edbkZN6q//uWNUXoYAcBYSXDelfGvI

tc1xiVInTkMhaxmeQhm9WlPvA0Cih7Dtp9EDY/uD1a9GkfwWSvqAe0zva7gqE7EK0iWt

iHD22YyivTzQ8srS3DkVcAAA/MdwCETf09J2BTev7l3Yb8LZpmNndP3rDSbuh9stdfB/

3UEkw+K5hFS1EiW1bWgCipqOuzzTYy89m5+4AOSTrhQGV2zsg6R+OgVgoLPMXWc7ETeu

nAcCF0WqY9kPFXoE1xpgpQIeeGsHYAWgiDYmzAEEGC0T9mO7HBzznu9zNms5NyZOdKoA

JPJA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1762527694; x=1763132494;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=yOPRuza9akknm9L7mSoIR9PZ5mUy3QSAdGdZ0nHBgOE=;

b=bm3eUceBwCgVxS55kE/GYGflyH3Iixnj9CFTTBZdQVClQ+klkP/mPVqFvSaz1dw/bm

I0jbJprCCcLp+LbsiHJ3asG053ROosU+olPOfCX8e+0BJ9OY71b4zf06jbDnZqzXpTlb

C9xOB89Am+Pp9fyYzQCl0Kdrc6ydgPw+G3BDBVc5vHdbBusExSH7Juei80tKt44xltew

qP0lA+s2/rEcBOeL+2fCeYZyTfa8WNbt5t3h6NlCVr4ryFRDbL/QWoAM/nsZ59t9vv+h

JHsCpXDVF21oSVD7+NguKexMJf1obddmY44gDsPUxAgXtCmn31jj4LpLz1PyD1Y27hJ0

NFFw==

X-Forwarded-Encrypted: i=2; AJvYcCVjNL8OYhxtTY09IHyeC4uQ1xDY/F1h6TKCLBVMYzVPeqLNd7BZUw8UzvKZN9CTqqS04Sgw6g==@nk.ca

X-Gm-Message-State: AOJu0YxumvlQY+WaAh7ta88mNaqvCoBAeMbZCJv2xR8sraxW1qeCfaVy

A5gP5PByLF0KrD6Z86QHW3wFkK3JWNgWadvyhl/IAu+nLvGXq1Kdsv02Pn0EMMxJ2Wc=

X-Google-Smtp-Source: AGHT+IHLYhiHwCNJ1vq0/fvkLyjzAyiNwvPnimycagpsN0jA1G2iVPNh4Z0ljAtsjA2REzBNJcOgXQ==

X-Received: by 2002:a05:6402:1e8e:b0:641:3651:7107 with SMTP id 4fb4d7f45d1cf-6413f08a2a2mr3503529a12.12.1762527687942;

Fri, 07 Nov 2025 07:01:27 -0800 (PST)

X-BeenThere: michaeljackson25@digitalappsdev.com; h="Ae8XA+YMaWw/qECHYyN+XwyT3hFKjUJdj2rXyhTVc8G/mxVtBQ=="

Received: by 2002:aa7:d617:0:b0:640:fcbe:ef7f with SMTP id 4fb4d7f45d1cf-6411d6c24acls454392a12.0.-pod-prod-08-eu;

Fri, 07 Nov 2025 07:00:45 -0800 (PST)

X-Forwarded-Encrypted: i=2; AJvYcCWe2TAHXdXzgTSjqZFRdxRhBo6PmmTgfVLREZ96Y48RBD2gZoYkkvVuf3MzQ7nTLeG6Ice3tMKxwxnQcE6lVJpk@digitalappsdev.com

X-Received: by 2002:a05:6402:5202:b0:640:bd90:350d with SMTP id 4fb4d7f45d1cf-6413f07214fmr3882225a12.1.1762527645095;

Fri, 07 Nov 2025 07:00:45 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1762527645; cv=none;

d=google.com; s=arc-20240605;

b=VQ3lOch/pRsc6smKFFxkpqnwHQwB0YNb54+NAq4LhxIdaDriYMiIelCTKoc5lPNriQ

6FrIQc2VvvS/LthS/WmnSJbU3MZxlmm0PYjboSUujiDV74Y3j+JtjTHqwz4t9P4pHN0f

Ud5EMY/EPIeroPMLoDHIqaMobk94c0k6W1sigbkCxCHtNu39ssJHlS2oxFlEVo6Dh3QV

NiNsV6c6ALplCuVnv/QrULy1+equg6Xmb4AE8HKDdeV2APR8mWAxXubOWhtiwtJw/O8w

lcMwlMF4G0CS5AgGrWw9mF54N2ym03RVQ9Vg1QV2G34B/dbDZqMmSZyqUijLxmQqoub3

lpbQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=yOPRuza9akknm9L7mSoIR9PZ5mUy3QSAdGdZ0nHBgOE=;

fh=Rr0TIPRHnMlQdpRWA7buxURyHQ+bp0EsrmYP1a2SdOU=;

b=jynRlg7xtCnZnc/eQNpcM9lBlMkXHxcV0x24+qWpxsUs9+eTLgr/QQT0nM81bhyO/j

khVKTXziNXXTo2Jl9q1Tp8Inmaw+qxUciIZ1VybwBkNKjD5KSq2AkXmHxAHD31r5eIiM

bxkegXGMaZuRh+vCbVcCXjK2M9jQsxbXFhLmzyjnmoDEnBDsC+guIMSbub6iH0xiS0dA

Wr9gSx139EKPyBwjydUSMYhVmeHVcbN9kix/31Ga4srh3teXBUxXaC2ZXNf5EvyelVxu

6Mtbw0nhnyPxWhJRB07lMZv6OIiT3kliKy2x8SDunggOxakamLmU9/HSp6q3sKICCeAz

WFig==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=Afw+GiVA;

spf=pass (google.com: domain of michaeljackson0634@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=michaeljackson0634@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 4fb4d7f45d1cf-6411f56bdd1sor1624942a12.13.2025.11.07.07.00.45

for

(Google Transport Security);

Fri, 07 Nov 2025 07:00:45 -0800 (PST)

Received-SPF: pass (google.com: domain of michaeljackson0634@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

X-Forwarded-Encrypted: i=1; AJvYcCVLHTRVErZJR3xwPNg5DC8pal/hxz2nvtl2xormcwSH7RHltYUprf2xKtvlAB2FDb9yXrQECUmDdH1K5iDdPNCL@digitalappsdev.com

X-Gm-Gg: ASbGnctJl+2ZSUhZPAp9/f04XDwoRSu2nauhbXG1Rn3OdBqvJ0P6FYboSv7+z+yhKmS

9LpAnkh6momLWVgjoAJeBUG0aCNqBILV8RrK8jUOBIMFkHnraVMRmWQNQIf+orRk8rtwjGU1obh

J3oQU1uC+29RGcv06j81X7tYVGcv39UmWR0fzJGpQO/x34dguAJDzpxN3kYhJ0tzmpeQeE3LT5m

4UEbJxrohYs2uUssP2629Gaq4V/lkSRzy3TaKPTGGODlGvrghTHYcd0+CPAxw41syDoCsca7o6B

UlU8DNYxr8f7hcYtmA==

X-Received: by 2002:a05:6402:210e:b0:63b:ef0e:dfa7 with SMTP id

4fb4d7f45d1cf-6413f07266dmr3698714a12.6.1762527643446; Fri, 07 Nov 2025

07:00:43 -0800 (PST)

MIME-Version: 1.0

From: Michael

Date: Fri, 7 Nov 2025 20:29:00 +0530

X-Gm-Features: AWmQ_bkA8Su1sogYRZuRm-wvmXWKsGivkzq2rCXrBDyuo5kIqUh6tUdbYSS40VI

Message-ID:

Subject: $ Flight Booking Tour & Travels iOS or Android App's--?/

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000018358d0643027255"

Bcc: michaeljackson25@digitalappsdev.com

X-Original-Sender: michaeljackson0634@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=Afw+GiVA; spf=pass

(google.com: domain of michaeljackson0634@gmail.com designates 209.85.220.41

as permitted sender) smtp.mailfrom=michaeljackson0634@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

Precedence: list

Mailing-list: list michaeljackson25@digitalappsdev.com; contact michaeljackson25+owners@digitalappsdev.com

List-ID:

X-Spam-Checked-In-Group: michaeljackson25@digitalappsdev.com

X-Google-Group-Id: 902413972177

List-Post: ,



List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,





--00000000000018358d0643027255

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



Good Morning,



We are providing the most reliable mobile and web app development services

for you. Whether you want a hybrid, iOS or Android application, we have an

expert team to support your dreams.





We build Apps: -

=E2=9C=AF Taxi/Cab Booking Apps

=E2=9C=AF Travel Apps

=E2=9C=AF Real Estate Apps

=E2=9C=AF Food Delivery Apps

=E2=9C=AF Booking Apps

=E2=9C=AF Healthcare/Fitness Apps

=E2=9C=AF Medical Apps

=E2=9C=AF Event Apps

=E2=9C=AF Hotel/Restaurants Apps

=E2=9C=AF Logistic/Transport Apps

=E2=9C=AF Grocery Apps

=E2=9C=AF E-commerce Apps

=E2=9C=AF Shopping Apps

=E2=9C=AF Wholesale Apps

=E2=9C=AF Retailers Apps

=E2=9C=AF Finance Apps

=E2=9C=AF On-demand Apps

=E2=9C=AF Cleaning Apps

=E2=9C=AF More Apps



Please let us know your App=E2=80=99s idea, exact requirement with us which=

kinds

of Mobile App and for which service you want?



Thanks and regards,

Michael Jackson

Mobility Consultant





CONFIDENTIALITY INFORMATION AND DISCLAIMER: This e-mail message and/or

attachments being sent from Mobile App development. is privileged,

confidential and directed to and for the use of the addressee only. If you

are not the intended recipient of this message, or if this message has been

addressed to you in error, distribution or use of the contents of this

message by anyone other than the intended recipient is strictly prohibited.



--00000000000018358d0643027255

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




000">Hi,

Good Morning,

We are providing the most reliable mob=

ile and web app development services for you. Whether you want a hybrid, iO=

S or Android application, we have an expert team to support your dreams.
>
We build Apps: -

=E2=9C=AF Taxi/Cab Booking Apps
=E2=

=9C=AF Travel Apps
=E2=9C=AF Real Estate Apps
=E2=9C=AF Food Delivery=

Apps
=E2=9C=AF Booking Apps
=E2=9C=AF Healthcare/Fitness Apps
=E2=

=9C=AF Medical Apps
=E2=9C=AF Event Apps
=E2=9C=AF Hotel/Restaurants =

Apps
=E2=9C=AF Logistic/Transport Apps
=E2=9C=AF Grocery Apps
=E2=

=9C=AF E-commerce Apps
=E2=9C=AF Shopping Apps
=E2=9C=AF Wholesale Ap=

ps
=E2=9C=AF Retailers Apps
=E2=9C=AF Finance Apps
=E2=9C=AF On-de=

mand Apps
=E2=9C=AF Cleaning Apps
=E2=9C=AF More Apps

Please l=

et us know your App=E2=80=99s idea, exact requirement with us which kinds o=

f Mobile App and for which service you want?

Thanks and regards,
=


>Michael Jackson

rdana,sans-serif">Mobility Consultant

ont-family:verdana,sans-serif">

rdana,sans-serif">

rif">CONFIDENT=

IALITY INFORMATION AND DISCLAIMER:
family:verdana,sans-serif">=C2=A0This e-mail message and/or attachments bei=

ng sent from Mobile App development. is privileged, confidential and direct=

ed to and for the use of the addressee only. If you are not the intended re=

cipient of this message, or if this message has been addressed to you in er=

ror, distribution or use of the contents of this message by anyone other th=

an the intended recipient is strictly prohibited.




--00000000000018358d0643027255--

Ukrainian ladies romance phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 07 Nov 2025 08:47:01 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHOfQ-00000000Dj9-1T5r

for dave@doctor.nl2k.ab.ca;

Fri, 07 Nov 2025 08:46:24 -0700

Resent-From: The Doctor

Resent-Date: Fri, 7 Nov 2025 08:46:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus2azolkn19010089.outbound.protection.outlook.com ([52.103.10.89]:62571 helo=CO1PR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHLtN-00000000FoY-0PRT

for doctor@nk.ca;

Fri, 07 Nov 2025 05:48:46 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=mU8LcPsSsBof00UAB8181RWbiewBw4fq6dPEeSSehfenQLWBstix6QA6c1E1pbLhbnVxBxlTR/taleO9Q+5iOc9IUaXR3aQkdOPBGq0NL9VW8B4DwXz5oLDDH82tqF5kSsvVEL5zt5B/YHSaG4oA8GVQ2VUASi92vtD9y6EbjCaQ1f9NiFKIy747v5AIa1qSwSPVI5Mt3aKfP+pQgzEYv8D9o/p94WvwchqUKexnGCHY7imPWAms1kKOdh4VAKASwkbcAHQ/9N75VYAPedDqigqVC4MUTlC/Jh0CsTXW5s/ZpNaACmUyc3T3a5Tl/JI3vARxbDg20SfOvtRfVVQdZw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=x3VLv626hO4q5QKZl4h3ikwuxZbAZqwIgvyDUByDpL4=;

b=oh3rwOJNcAavbenDQB536hTY9fRYZAMAVirGmDvmhsGVzmRmYef6aAJyQHzzgkjbpJqx7XaMF33hClbgaePLxOIaIQ7lXVd7BuDfyWJb2Da8PDoGu6pYVr63LV0AfWoyMaCMLuKEBxA3Q42E3LvZaa/s/6R8k/KmJ2wBNxJg2BTJ+IaMC5rLxqSdSmZF9ddJGhD/t387+wPhSYaohWDhYJT23CMva1qU6tDEZfUXFoySWjrSEUUzLBFhI13Qkpz34o11VOo4rIyXE+7m/gocvcEnVURXaeNqh4zjlzdPHJ8iGaQLE6b28ytWnWFCE40Uqd2Y67D46I70u53qLpdqLw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=x3VLv626hO4q5QKZl4h3ikwuxZbAZqwIgvyDUByDpL4=;

b=dcqdFWL8vovvt8F/agNQIvVba02H8Ku23NsXZ+T+skLI2cj4feFYE9VoD61A0sND6/WaKDFTlkSK865L62BzSGbrIuyzP79BxN2RgxQc1NRJRFQaoss/DbwgsO100K3HPwTKzUsWfc4F4Ho4XBUPthRCR0ShfW160S1PwcBwDSqsLdrSwJXrg86pH8HMhr5y3sTZNS/rVLamRIuYzzI9zHPDg3/eSp408cQDvCS2HWNdhYGqFObx8QbLH2+5MLhja6VqMn1E6Fz6NTW5yiEpI+DJwIjzRhISf1wXMnyqPQPmVnErPjYFJTI2DG9PcvwANU3cUoVF3O7+vehgvvLPXQ==

Received: from MW5PR84MB2226.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:303:1c8::20)

by LV3PR84MB3620.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:408:20f::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.13; Fri, 7 Nov

2025 12:47:35 +0000

Received: from MW5PR84MB2226.NAMPRD84.PROD.OUTLOOK.COM

([fe80::f759:4095:4762:b3d3]) by MW5PR84MB2226.NAMPRD84.PROD.OUTLOOK.COM

([fe80::f759:4095:4762:b3d3%5]) with mapi id 15.20.9298.010; Fri, 7 Nov 2025

12:47:32 +0000

To: ashtonlexxie00@gmail.com

From: "UkraineBeauty"

Subject: Your friend shared a video with you.

Reply-To: "traceejukod@hotmail.com"

X-Mailer: Gmail

Date: Fri, 07 Nov 2025 13:47:33 +0100

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_4441_D3F6BFAA.CD322DC5"

X-ClientProxiedBy: AM0PR10CA0050.EURPRD10.PROD.OUTLOOK.COM

(2603:10a6:20b:150::30) To MW5PR84MB2226.NAMPRD84.PROD.OUTLOOK.COM

(2603:10b6:303:1c8::20)

X-Microsoft-Original-Message-ID: <1.25b7b55f790a962b240a@DESKTOP-N0MTKOQ>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: MW5PR84MB2226:EE_|LV3PR84MB3620:EE_

X-MS-Office365-Filtering-Correlation-Id: 686d6efb-9ee2-40e0-b30c-08de1dfbd141

X-Microsoft-Antispam:

BCL:0;ARA:14566002|5072599009|12121999013|12050799012|8060799015|19110799012|461199028|23021999003|39105399006|15080799012|9400799040|42300799018|56899033|1602099012|41105399003|39145399003|40105399003|15111999010|34005399003|4302099013|3412199025|440099028|4601999015|10035399007|2406899039;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?Q3lwRFJEV3ZzTVlqRkJxK1ZTYmx5UUVrNExiQ3BqY09UWG5ZTHJldWpRS3l3?=

=?utf-8?B?SUdRSjNBeHFDK1lScTZFTng0YUxJdWZwWHNqdW1TeEhhVkhXbm5hTGsvNFdo?=

=?utf-8?B?Y2RPRUIvc2FiMldIRXlUWDQ1TXFvRjRPTkZ5Ti9qV3l5RkYrN0hIancvSkl3?=

=?utf-8?B?NVBTWnQxUWQxZlV0dlVaSnJlQk5vTjlEa3dTRDVkRWZPU2VSTmZDUFBleElS?=

=?utf-8?B?VzVORjBxenFxSDZxU25DSGhHdGJOU0NONjBhNDRqdTRmdGtRNmN4L0lZQlhZ?=

=?utf-8?B?VHdCUDQzV3l4UWVkV3I4dmZuNFd3SWlTMytPN3VRNW9pWE1VOXlJRUZhVFdn?=

=?utf-8?B?WVhPTnRQdG9TYmxuOWpRSUxZYVhYd0xmYlNyOFY2RHZFcStOS1B2QXBwUGxx?=

=?utf-8?B?bjhuWXhuNFp5Q1BzWU1yamliS3lnNDZTR0M3Tk56bnJOT2gvWDhHNGZXQWZ2?=

=?utf-8?B?UjBWK08zalpxUlFZR1ptOWRuN0pSZXFlcGZtdmJiWGVuZEMyUlFvaDcrNDF6?=

=?utf-8?B?MkRsbnFGZ0VMa1N1clR0WGFodlBEN0VQb0lpcC9mNGNLNGtvRTZmeFRZWlZ5?=

=?utf-8?B?SXJ0SEp6dG5ibWltNFhEODZLZFdFc21VTGJSTUp5ZjBWdVZGaVNWMjJaU0lE?=

=?utf-8?B?TGljS2lTVzhBcDQ0SnQ3ckRzQ3I4TExEczRUb1R6azlPTlptREJ2WmQ3ZGQw?=

=?utf-8?B?VmtBUlhQZGZYSng3a0lRSWY4UnJVN0JHcllwN0djZ0dOWGYyYUhTTTczcTNQ?=

=?utf-8?B?Tm4rK2J1ajNGdGg5a3E3OGExQkZ5aXdUQlVLUjJxYlNnOUVJY3FSMXNGMllB?=

=?utf-8?B?QU92T3g1ckpUV3JDOVZhaUxwbnM0ajRNUUE3ZnV1Z3I4cXRMcGJhSTB2NnB3?=

=?utf-8?B?MVZsZEcyNlhRZnppRmN0MzA2QjE4VWc0RFd5V2VoODg0NUlMVUVkcTdlMEF0?=

=?utf-8?B?N3p0anUxVGlHNzVZZ0pHNjJ1dENxbnFHK3VBclpEdEthNUprQVJwbFZ3c29i?=

=?utf-8?B?VzM0Nmk2ckZ0RW9rRjBnNEFpQkR2eFlUaXNGYkU3SG1hQnRTVy9pS2RjUWFF?=

=?utf-8?B?QlFFZjBkMjBBN0RqREF5TFhNb05wWS9QYm95Zis0NXl3cHJuc2ZrSmZML0dw?=

=?utf-8?B?TlpJOHlFS3ZWT0wvN2NLSnlkdUkzSkltVHdDdXRpTmMwZktNN0xrTVBXSFg2?=

=?utf-8?B?b1plMTQ5aUkwbXM5K0NZd3ZnNDVBOTRsRHp1TXhMSE55MmpCbjhJV3FlV2xo?=

=?utf-8?B?TVU5QVdiOEs0eWVZblJGSjlIcnRxcVJqUXI0cU56WUxEMlIzcldISGs5MzVE?=

=?utf-8?B?YlVHMm5WL0RXRnJuNzdZYlcwWndHZTMrRHdSQ2ZGQW5PcHQzbm9ac2wxYld4?=

=?utf-8?B?dHBIb0RCNjZIZ0lzWXEvaVJNdmdXeE1rTXV3SnpWTzI3SEU2QWxYeXFiZkd0?=

=?utf-8?B?V2NmNGxEclpidHJxQzZwWWxLRDdhRjBiUlpHcFVGelhkTlpMb3Q3TjZ6bDZl?=

=?utf-8?B?ZEtXNWloWVNzbkswK0xQMXZtVW5rS1IxdWdsZlVRMVBnVmE0K2RGOEZGdmN3?=

=?utf-8?B?a2k0eXdsYk01THpMN1hRcW1kL1Z4UG9FTkt2aFpYVnVQa2Z6VjFDL1RCYjk5?=

=?utf-8?B?VkhxQmdqZHg1Z3hMYWlocHJUVDg3aVhTWVhhbkVKRkdvUTNUR2NyYXVaZnV1?=

=?utf-8?B?dm54TlR2UmkyT2NCbElBbXNOeFhqaFVjNm1nMXBZOUtseU1lQzBTdi9XK2xD?=

=?utf-8?B?b09udUNxRExvZHAyZysvaHpmcmczM0ZtSDFKV0hOWThLQXlrT2FmTmdhR21Q?=

=?utf-8?B?Ym9tTERDbjliUzhEOUpnTkNkWERoK2M4enB0eW5DWWNzSFJIc3V0VHlyTlp6?=

=?utf-8?B?bENsQ2ZKYTNwT1RvNHozdTl2cWN5enVGeFIwZG85eElEeFhLTmhPZ0tQMEJT?=

=?utf-8?B?MldhZTdsS2hvaldYWE51TkN1bVFCTTl4ZjM1TCt4cmI4R3VTSW4xa0NBT043?=

=?utf-8?B?aVRFVExwSmVuczg2MEYxRTR5ZGpab2Q3eFBoZFNFWnYrMCtlMGU2QWxOTmlW?=

=?utf-8?B?RGtJZ3hyQUI2clZKVFVmcnVpd1AxcWd3Z2RvQT09?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?VmI5WnA2ZVRWY1FSYW9HWnczc0VYQTlQYWtTcm8yWXh6bWMzemNOQjgraHdy?=

=?utf-8?B?dWVrQWxKZHJCOE1vSTY2WXBKckoxS0dYcXhXSGhNMHRtUlFBcmV3bytPb2pi?=

=?utf-8?B?d1o2TGpXeGtVNytNRGpWcTVMay9KQkp5YkxkTGJLUm9ERjBnQlI2QTEzaW1m?=

=?utf-8?B?U1ZUamVEeVlheVpxSldoN3pyeGdZRVcyMU9EajlwZkh2Qi81c0N4Q3Q5azVj?=

=?utf-8?B?R3gwbWRLVGVITEtGaElvSzRuN1pDbC9KZEtGc3AyUzRjZjNLOUhvOWlxR2NH?=

=?utf-8?B?T0Jub1MyNVBKVUd2ZktYVS9JdzZ6ZjBxTHVQVkNsY1pZZ2YyZVFUNmNDNkQw?=

=?utf-8?B?bG51YmFYWTZ5S2FKOEVKeWViVkNNdlNoSTJaUFlKamk2MEhOejMzaGdwUHE1?=

=?utf-8?B?bFI3SkZiM25tMVF4MWxXWmFmL1JCVjhpZ0tmYWZPU1prR0kzWm9sMUsyRGly?=

=?utf-8?B?RWNIV1piUy9NUHNVQjUxTUJoQ08ybXl3R2xyZUZ2eDc2T1o0M2QvWHhnWXlq?=

=?utf-8?B?ektyUjdYdjVZY1k3d3VyNWViS0lmWnZ6MDFBMno4TDA4TjFuSWtYdVhzOGli?=

=?utf-8?B?L0N4WEFvVElBRyt4UjRVNE8vMFcvWHNtdFJDMmNhVE9XcjVlVEpralhEWUJj?=

=?utf-8?B?NnluVnFMUDI2WGYvcXR5KzVPZEhsUnk0aDZVLzJRdklSdU9YK1o5ay9lajlY?=

=?utf-8?B?VU1DMHRyREF1Q09aNzVqa3hwNlBBWFdySUhMbTJVM1dqRkdyOFdCSnhiZHho?=

=?utf-8?B?bEpsMnJYM2VpLzNNUTRGdmYyYzg1cDQvZU5VYitIbVRhaTl3ZDJlRzBTNUdX?=

=?utf-8?B?K3dhb2p4VjR3Nmd5am9GbnNseDh4Sk8rakFmSUxYd21DNUZSZjd0Nm01dUU5?=

=?utf-8?B?ckNhdmdLTDVyd2lFY0EvSFpCaW9rbW5UWFg3L1JlSHJNY1ZPbFNZMmNYa3VZ?=

=?utf-8?B?MzlxYnZtOURycENwLys2Y3FxQnlpTGxSTWtDaW00TGFEaUU1N2lZZ3V4bm9V?=

=?utf-8?B?WklIZzM2ajFGLzVwM0RMQ1lsbTZGZHMwWEFaMlEwNG5JeEVQVXJXQmVPNVhN?=

=?utf-8?B?OXpsQ3NSZUY3eERQOE1RWUg3aWhzWDRIcXBkaWZwSUZGYmFTbzVreTVmNTBa?=

=?utf-8?B?VHN5SjZtU09JZmxpeE1qZGFHcDhGZUV3QVJQWDEzQTAyZWY4blhITVFOZ3pD?=

=?utf-8?B?Sk1NUFhrd3dSamVEUVVITko4dW5jNnh2RWZjN0dVNXJtUzdWdFZUTUQrYmlQ?=

=?utf-8?B?S0p2Mjg0ZzMvRFNNYllWMTNWRnlnSXN5L2pxUU5rUnNXa2xtOEl2dDdQOVlW?=

=?utf-8?B?RFlnaGxhT3NBa044VUJJVFJYU0pKNlpQRWNwem1ZV1lpcEFMRE55Qi9Ucmcr?=

=?utf-8?B?TUZlS2QrakMrdnFIaXZTRWQvN1QyeTV1QVJtRWVVVk53Z05MV3lGdFJyRUpO?=

=?utf-8?B?TnArdTBRTGxQS2wyVWxRSFJpME5KcGxEYnU5QUZlWHc2UTBPb2dDQzBrR0l0?=

=?utf-8?B?SEtzSVNaUVlTR2ZuampWSklkeHo4K0EzMkhOUDB4MXcyL0Zhby9obU9CeUZz?=

=?utf-8?B?ZDQ4ZFh4ZnhnbC9WMWlRUGpBcTFVS3lPcEZjZCtYQm1US1BRTjAxcTAyQ2pz?=

=?utf-8?B?SWtySGo2dHVxRDErSUpwd1JjRFA4c2pFb1liRFRRUE81bUFHS1pMZDJycU5T?=

=?utf-8?Q?6+i9a1Rl/xzRkloE7CYd?=

X-OriginatorOrg: sct-15-20-8534-20-msonline-outlook-774d9.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 686d6efb-9ee2-40e0-b30c-08de1dfbd141

X-MS-Exchange-CrossTenant-AuthSource: MW5PR84MB2226.NAMPRD84.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Nov 2025 12:47:32.1897

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV3PR84MB3620



------=_NextPart_000_4441_D3F6BFAA.CD322DC5

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Find Matches Easily with TrueLoveNow

=F0=9F=8C=9F Find Matches Easily on TrueLoveNow =F0=9F=8C=9F

Hi,



TrueLoveNow connects people who actually want the same things out of life.=

Use our tailored tools to meet people who fit your lifestyle.



Curated Matches: Matches based on interests and values.



Easy Messaging: Start conversations with confidence.



Active Community: Members who want meaningful connections.



Join today and find someone who truly clicks with you:



Begin



Questions? Reply to this email =E2=80=94 we=E2=80=99re happy to help.



Cheers,

The TrueLoveNow Team



Unsubscribe: click here.





=



------=_NextPart_000_4441_D3F6BFAA.CD322DC5

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=

=0A=


0">=0A=

=0A=<br /><br /> Find Matches Easily with TrueLoveNow=0A=<br /><br /> =0A=


"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=


zeroborder" width=3D"600" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=


l;">=0A=

=F0=9F=8C=9F Find Matches Easily on TrueLoveNow =F0=9F=8C=9F=0A=

=0A=
=0A=


y:Arial;">=0A=

Hi,=0A=

=0A=


y:Arial;">=0A=

TrueLoveNow connects people who actually want the same things out =

of life. Use our tailored tools to meet people who fit your lifestyle.=0A=

=0A=


    :#555555;line-height:1.6;text-align:left;font-family:Arial;">=0A=

  • =0A=

    Curated Matches: Matches based on interests and =

    values.=0A=

    • =0A=


    =0A=

  • =0A=

    Easy Messaging: Start conversations with confide=

    nce.=0A=

    • =0A=


    =0A=

  • =0A=

    Active Community: Members who want meaningful co=

    nnections.=0A=

    • =0A=

=0A=


y:Arial;">=0A=

Join today and find someone who truly clicks with you:=0A=

=0A=

=0A=


;color:#ffffff;text-decoration:none;padding:12px 24px;font-size:18px;border=

-radius:30px;font-family:Arial;">Begin =0A=

=0A=


y:Arial;">=0A=

Questions? Reply to this email =E2=80=94 we=E2=80=99re happy to he=

lp.=0A=

=0A=


y:Arial;">=0A=

Cheers,
=0A=

The TrueLoveNow Team=0A=

=0A=
=0A=

=0A=

Unsubscribe:
or:#777777;text-decoration:underline;">click here.=0A=

=0A=
=0A=
=0A=


=



------=_NextPart_000_4441_D3F6BFAA.CD322DC5--

Web/SEO/App Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 07 Nov 2025 08:47:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHOfv-00000000DsV-3VyJ

for dave@doctor.nl2k.ab.ca;

Fri, 07 Nov 2025 08:46:55 -0700

Resent-From: The Doctor

Resent-Date: Fri, 7 Nov 2025 08:46:55 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f69.google.com ([209.85.208.69]:58371)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHNzB-000000001rm-44gy

for root@nk.ca;

Fri, 07 Nov 2025 08:02:56 -0700

Received: by mail-ed1-f69.google.com with SMTP id 4fb4d7f45d1cf-640a03bb8afsf1287304a12.0

for ; Fri, 07 Nov 2025 07:01:59 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1762527713; cv=pass;

d=google.com; s=arc-20240605;

b=YbMp3oz7INBQON8gt57C7p/oi0LB0AeGaDl7vvE0qYbfdjvhT613lcmm+svpVAx6o2

yokVQVvMPeqdwHoZT9oAlbOb971jXVmBk+lSi0OXtVzNAS2IFj7hQP2YrwV88sL7h+3m

E+sgVGrk9TfY+mVzBmlTqUfFYCG+xdz+cCzsJnAA1FVjk0XCWYYzJwR7/S0I2AUtdqbd

LZADBQEam/wJ5+lCf7uYLAtrwj6ieaKt9BcY6v+4S/6fVT2ya0WegTteO/KvEmIPsIGy

cwjPwZe0WJwIS7Yp5DSJ2nhH046orU3CKeC9zDCfBqkDaBjrlMMHDX1puOm5CRcCLSlD

vTmA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:dkim-signature;

bh=yOPRuza9akknm9L7mSoIR9PZ5mUy3QSAdGdZ0nHBgOE=;

fh=UPco1udumaz+2I1+kQutwsN9Jo28S/kejOmooNqaQz0=;

b=EweH7z4VmkwZmtPmhbZReE/Yjkpoy1STQOaFA/qaQ0ArTiqXx5nM+WT2HkI2jjKBRq

DBfkO2i41wjVBDUplB6v5aNH4AEMCDPYVKxYowzT5/uaWe2VH5+nQ01XATX7iyphgr4g

BHaRwWwMZBqfxo/Fzsqlc516EuWkZo1K+REVjgjCQiXbuIlwYiBRF7XimXQpH23t2ZGg

bikIcVSbwtI8+iFEPP3ADQq+9iVCoppflvbotHSflf/qcNp5jRmLzQWc7pGYiz1/A/9+

IOG1dJUfbva6iyIFgyXkq7aJcAE4rDFBZ1FQvEXQviriE1ygXDnt46iLJd2aQpAn1UHJ

KDsg==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=Afw+GiVA;

spf=pass (google.com: domain of michaeljackson0634@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=michaeljackson0634@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=digitalappsdev-com.20230601.gappssmtp.com; s=20230601; t=1762527712; x=1763132512; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=yOPRuza9akknm9L7mSoIR9PZ5mUy3QSAdGdZ0nHBgOE=;

b=QVJ1m2brKcZE5q7fQW7uMWFYoV9F9TcVI2NIBMZG9SvGfXb4WyeqlFVIrGoSTcHcZI

hrc69h8vWNXhPkplAdeVwPVOTUCsEJfbBV57ajns9P/iQaeHgD5YZTGF6gxc/JV2Mc74

1UihUmdmaBzoCYgsoLK0pjk5JvLC+PXvF0e76c3hwK5jl/7jKjvvpEVYGb4BVDl1EXkd

7i4bYcPK4iiRLZqjw0DlJqJq40uLfN2Yr+V0b+C4s5Y8bEUyDO2UYsduXqnjWvbf1vpz

aNGuD6Wm672zMjrl8RfoEU56jsGWq7Y45MmnoRYoXMkbU2TY4HhC4rrHSVy2VbMqGwah

hN4A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1762527712; x=1763132512;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=yOPRuza9akknm9L7mSoIR9PZ5mUy3QSAdGdZ0nHBgOE=;

b=Eb3vvT6vKgyuPW9eHEK/5thpPIZEHMcgpolFy+hzBrv6doXWb+MiH8OjjzzWJ3/539

Or+EFcYStKECKvupsfJ6ng9Kb00OfBTnR1bTb0t3KWGalR49WOJU3RdiB5JBvHmvY5wm

IOMhJZZLnOYDlMTG3DIM73gThqWxf555l5NYwBkgFFsUe6tHArTKUtTUWgUFZxqKKmuS

y9RFwb31HuIsQz6xzmLPjh2eEIPS4RGqc4pVm51xwjH7IhqTo+YubEm8MAYKW0TdNkrt

/WJGWOQLxbgMLw8V0X8iDKCr/28xVs2mID2kdgeO5PFvXssV7pRz5U02b0df16of4UvO

0k5g==

X-Forwarded-Encrypted: i=2; AJvYcCWi42zMlCQPMdYVpHvUpFsAykSHsFti6G8cQzr6ia2fZDBt6IMFcBb126LLCOWCfcfrVr/F@nk.ca

X-Gm-Message-State: AOJu0Ywoy0ygj4KZOiKft42diKMAiDcRMy5pz/haaFNBWHB3juKNFcww

hK9n91I9zX2g76noRJCgaHHXnnEszUMFUeGkGscpsVgOxkris4VwAa16ZXXx4TwoJRk=

X-Google-Smtp-Source: AGHT+IHdMXIwmv1r4aOYf3PfR4Urb6iai6XiKrae/yqTXBey2IkfNmzLRAZ6/wUhNKjZnxbjhTI24Q==

X-Received: by 2002:a05:6402:84e:b0:63c:3c63:75ed with SMTP id 4fb4d7f45d1cf-6413f1fe245mr2877271a12.22.1762527712017;

Fri, 07 Nov 2025 07:01:52 -0800 (PST)

X-BeenThere: michaeljackson25@digitalappsdev.com; h="Ae8XA+YMaWw/qECHYyN+XwyT3hFKjUJdj2rXyhTVc8G/mxVtBQ=="

Received: by 2002:aa7:d617:0:b0:640:fcbe:ef7f with SMTP id 4fb4d7f45d1cf-6411d6c24acls454392a12.0.-pod-prod-08-eu;

Fri, 07 Nov 2025 07:00:45 -0800 (PST)

X-Forwarded-Encrypted: i=2; AJvYcCWe2TAHXdXzgTSjqZFRdxRhBo6PmmTgfVLREZ96Y48RBD2gZoYkkvVuf3MzQ7nTLeG6Ice3tMKxwxnQcE6lVJpk@digitalappsdev.com

X-Received: by 2002:a05:6402:5202:b0:640:bd90:350d with SMTP id 4fb4d7f45d1cf-6413f07214fmr3882225a12.1.1762527645095;

Fri, 07 Nov 2025 07:00:45 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1762527645; cv=none;

d=google.com; s=arc-20240605;

b=VQ3lOch/pRsc6smKFFxkpqnwHQwB0YNb54+NAq4LhxIdaDriYMiIelCTKoc5lPNriQ

6FrIQc2VvvS/LthS/WmnSJbU3MZxlmm0PYjboSUujiDV74Y3j+JtjTHqwz4t9P4pHN0f

Ud5EMY/EPIeroPMLoDHIqaMobk94c0k6W1sigbkCxCHtNu39ssJHlS2oxFlEVo6Dh3QV

NiNsV6c6ALplCuVnv/QrULy1+equg6Xmb4AE8HKDdeV2APR8mWAxXubOWhtiwtJw/O8w

lcMwlMF4G0CS5AgGrWw9mF54N2ym03RVQ9Vg1QV2G34B/dbDZqMmSZyqUijLxmQqoub3

lpbQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=yOPRuza9akknm9L7mSoIR9PZ5mUy3QSAdGdZ0nHBgOE=;

fh=Rr0TIPRHnMlQdpRWA7buxURyHQ+bp0EsrmYP1a2SdOU=;

b=jynRlg7xtCnZnc/eQNpcM9lBlMkXHxcV0x24+qWpxsUs9+eTLgr/QQT0nM81bhyO/j

khVKTXziNXXTo2Jl9q1Tp8Inmaw+qxUciIZ1VybwBkNKjD5KSq2AkXmHxAHD31r5eIiM

bxkegXGMaZuRh+vCbVcCXjK2M9jQsxbXFhLmzyjnmoDEnBDsC+guIMSbub6iH0xiS0dA

Wr9gSx139EKPyBwjydUSMYhVmeHVcbN9kix/31Ga4srh3teXBUxXaC2ZXNf5EvyelVxu

6Mtbw0nhnyPxWhJRB07lMZv6OIiT3kliKy2x8SDunggOxakamLmU9/HSp6q3sKICCeAz

WFig==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=Afw+GiVA;

spf=pass (google.com: domain of michaeljackson0634@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=michaeljackson0634@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 4fb4d7f45d1cf-6411f56bdd1sor1624942a12.13.2025.11.07.07.00.45

for

(Google Transport Security);

Fri, 07 Nov 2025 07:00:45 -0800 (PST)

Received-SPF: pass (google.com: domain of michaeljackson0634@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

X-Forwarded-Encrypted: i=1; AJvYcCVLHTRVErZJR3xwPNg5DC8pal/hxz2nvtl2xormcwSH7RHltYUprf2xKtvlAB2FDb9yXrQECUmDdH1K5iDdPNCL@digitalappsdev.com

X-Gm-Gg: ASbGnctJl+2ZSUhZPAp9/f04XDwoRSu2nauhbXG1Rn3OdBqvJ0P6FYboSv7+z+yhKmS

9LpAnkh6momLWVgjoAJeBUG0aCNqBILV8RrK8jUOBIMFkHnraVMRmWQNQIf+orRk8rtwjGU1obh

J3oQU1uC+29RGcv06j81X7tYVGcv39UmWR0fzJGpQO/x34dguAJDzpxN3kYhJ0tzmpeQeE3LT5m

4UEbJxrohYs2uUssP2629Gaq4V/lkSRzy3TaKPTGGODlGvrghTHYcd0+CPAxw41syDoCsca7o6B

UlU8DNYxr8f7hcYtmA==

X-Received: by 2002:a05:6402:210e:b0:63b:ef0e:dfa7 with SMTP id

4fb4d7f45d1cf-6413f07266dmr3698714a12.6.1762527643446; Fri, 07 Nov 2025

07:00:43 -0800 (PST)

MIME-Version: 1.0

From: Michael

Date: Fri, 7 Nov 2025 20:29:00 +0530

X-Gm-Features: AWmQ_bkA8Su1sogYRZuRm-wvmXWKsGivkzq2rCXrBDyuo5kIqUh6tUdbYSS40VI

Message-ID:

Subject: $ Flight Booking Tour & Travels iOS or Android App's--?/

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000018358d0643027255"

Bcc: michaeljackson25@digitalappsdev.com

X-Original-Sender: michaeljackson0634@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=Afw+GiVA; spf=pass

(google.com: domain of michaeljackson0634@gmail.com designates 209.85.220.41

as permitted sender) smtp.mailfrom=michaeljackson0634@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@digitalappsdev.com

Precedence: list

Mailing-list: list michaeljackson25@digitalappsdev.com; contact michaeljackson25+owners@digitalappsdev.com

List-ID:

X-Spam-Checked-In-Group: michaeljackson25@digitalappsdev.com

X-Google-Group-Id: 902413972177

List-Post: ,



List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Good Morning, We are providing the most reliable mobile

and web app development services for you. Whether you want a hybrid, iOS

or Android application, we have an expert team to support your dreams.



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is

CUSTOM_MED

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.69 listed in list.dnswl.org]

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[michaeljackson0634(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.69 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} $ Flight Booking Tour & Travels iOS or Android App's--?/



--00000000000018358d0643027255

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



Good Morning,



We are providing the most reliable mobile and web app development services

for you. Whether you want a hybrid, iOS or Android application, we have an

expert team to support your dreams.





We build Apps: -

=E2=9C=AF Taxi/Cab Booking Apps

=E2=9C=AF Travel Apps

=E2=9C=AF Real Estate Apps

=E2=9C=AF Food Delivery Apps

=E2=9C=AF Booking Apps

=E2=9C=AF Healthcare/Fitness Apps

=E2=9C=AF Medical Apps

=E2=9C=AF Event Apps

=E2=9C=AF Hotel/Restaurants Apps

=E2=9C=AF Logistic/Transport Apps

=E2=9C=AF Grocery Apps

=E2=9C=AF E-commerce Apps

=E2=9C=AF Shopping Apps

=E2=9C=AF Wholesale Apps

=E2=9C=AF Retailers Apps

=E2=9C=AF Finance Apps

=E2=9C=AF On-demand Apps

=E2=9C=AF Cleaning Apps

=E2=9C=AF More Apps



Please let us know your App=E2=80=99s idea, exact requirement with us which=

kinds

of Mobile App and for which service you want?



Thanks and regards,

Michael Jackson

Mobility Consultant





CONFIDENTIALITY INFORMATION AND DISCLAIMER: This e-mail message and/or

attachments being sent from Mobile App development. is privileged,

confidential and directed to and for the use of the addressee only. If you

are not the intended recipient of this message, or if this message has been

addressed to you in error, distribution or use of the contents of this

message by anyone other than the intended recipient is strictly prohibited.



--00000000000018358d0643027255

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




000">Hi,

Good Morning,

We are providing the most reliable mob=

ile and web app development services for you. Whether you want a hybrid, iO=

S or Android application, we have an expert team to support your dreams.
>
We build Apps: -

=E2=9C=AF Taxi/Cab Booking Apps
=E2=

=9C=AF Travel Apps
=E2=9C=AF Real Estate Apps
=E2=9C=AF Food Delivery=

Apps
=E2=9C=AF Booking Apps
=E2=9C=AF Healthcare/Fitness Apps
=E2=

=9C=AF Medical Apps
=E2=9C=AF Event Apps
=E2=9C=AF Hotel/Restaurants =

Apps
=E2=9C=AF Logistic/Transport Apps
=E2=9C=AF Grocery Apps
=E2=

=9C=AF E-commerce Apps
=E2=9C=AF Shopping Apps
=E2=9C=AF Wholesale Ap=

ps
=E2=9C=AF Retailers Apps
=E2=9C=AF Finance Apps
=E2=9C=AF On-de=

mand Apps
=E2=9C=AF Cleaning Apps
=E2=9C=AF More Apps

Please l=

et us know your App=E2=80=99s idea, exact requirement with us which kinds o=

f Mobile App and for which service you want?

Thanks and regards,
=


>Michael Jackson

rdana,sans-serif">Mobility Consultant

ont-family:verdana,sans-serif">

rdana,sans-serif">

rif">CONFIDENT=

IALITY INFORMATION AND DISCLAIMER:
family:verdana,sans-serif">=C2=A0This e-mail message and/or attachments bei=

ng sent from Mobile App development. is privileged, confidential and direct=

ed to and for the use of the addressee only. If you are not the intended re=

cipient of this message, or if this message has been addressed to you in er=

ror, distribution or use of the contents of this message by anyone other th=

an the intended recipient is strictly prohibited.




--00000000000018358d0643027255--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 07 Nov 2025 08:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHOel-00000000Dd8-33OA

for dave@doctor.nl2k.ab.ca;

Fri, 07 Nov 2025 08:45:43 -0700

Resent-From: The Doctor

Resent-Date: Fri, 7 Nov 2025 08:45:43 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013073.outbound.protection.outlook.com ([52.103.43.73]:51416 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vHJb6-0000000043M-2UoW

for sales@nk.ca;

Fri, 07 Nov 2025 03:21:47 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=UQ9ELqvJ313pUFBD9WtCoTyB6IVEcxh124BPFHzg6pYICCawCaLueR+AoqcUMl/m7CKqetVa+TyRQ2bgFgoWtsAv8JuQ7UttBO0yyR6Ta+BuvhOAjI7fo6FATN+GrkL+Pxi7XthjjKHn+8gvCWpTnrbIOi9mdtJo3myjmjwhFQh4XbRlbI4s7FYIN8F1jIJ30Gcr3z81BYokHkSLpn6VIHLUn+UNYKT4s+TG4JGZ1p9DPA2RzHyW67er+1Zxs1m17PoA0JV0H376NCVBEsfVoSzgZyQdL5OLub0pExtPtF2ZEI0YwkI7dLjSsnt0M3nKegJM1j0iWZRMDblH7Glggw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=C9go3TBC4n6bZ5HFhi/vXL8jpmN8MwviuXi/5Bs3BTg=;

b=S+ekEn+9FtxuQlz7ItJmEGyZryH8eU3U7pEYgkVwOoxIoplEba8mIc3dU4IYJ4DaT+FbQkI2YcRoYSWf02AIb+aANrLJcFgFhSgzV3ViygNiQ0NAn5PLWv+5q4I3g0IAVoBi1XUv7iLsbOJApBku8sPO+4xmZjgGS6RJ0CttTdg1Ebrnhuk24fPlHRTTZCx+P8TKQqjgsBFczDYMKhc3J09Aztxf8YxwRfTG0ubADwoTm+H747KK9dqhjfcvRzeB20GOaxQyQeHINQI1Le444k1ci5SpLOgJcbtypNjCdIvX+X6YZ099WSxe04qGtCEH6vDVz5HRmZkKvWO5ru/3Og==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=C9go3TBC4n6bZ5HFhi/vXL8jpmN8MwviuXi/5Bs3BTg=;

b=Z17qffyvBSQyTvQKuQnTCjPvFkqLuaX26mHZJavwo/5BZj+gT2kMg7H1PRszTirRL9vmZVVY2qtJEmHJou5Wmjm6JDGHy8MKiBjK/42PNrYHchKqNVR9yefbXRcu49ML2B0UbpVgfrJNQ0sBkpXpYOgeVyLhE7Wz35HByJ4WMuOYnzk1tVxMs2ro+pqvGJA35B9OU/ATSL/sUECITbi0h0UDDEhF67uI5eisRzSDurU/T4XnmwKLXsgP784kLW+t1J43C2IJURcvtq6o6fsXJhuwJ9WxWr3hS14pVp0IYPsWrTeimao3YiWywD4o4r390OO/9fHGXc1eRz6KwubaVg==

Received: from SI2PR04MB4537.apcprd04.prod.outlook.com (2603:1096:4:133::7) by

SI2PR04MB5870.apcprd04.prod.outlook.com (2603:1096:4:1e9::8) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.9298.12; Fri, 7 Nov 2025 10:02:15 +0000

Received: from SI2PR04MB4537.apcprd04.prod.outlook.com

([fe80::8a0d:b419:bacb:c521]) by SI2PR04MB4537.apcprd04.prod.outlook.com

([fe80::8a0d:b419:bacb:c521%4]) with mapi id 15.20.9298.010; Fri, 7 Nov 2025

10:02:15 +0000

From: Ajay Singh

To: "sales@nk.ca"

Subject: Design/Re-design & Development/Re-development

Thread-Topic: Design/Re-design & Development/Re-development

Thread-Index: AdxPyr27TJBVFt/kSOWsdgPYufuIJg==

Date: Fri, 7 Nov 2025 10:01:46 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR04MB4537:EE_|SI2PR04MB5870:EE_

x-ms-office365-filtering-correlation-id: bee2cb23-28ad-4680-fbfe-08de1de4ba79

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|8062599012|8060799015|19110799012|41001999006|15080799012|461199028|13091999003|31061999003|39105399006|5062599005|40105399003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?us-ascii?Q?CX4SsEEcEexPTiu9Z1qSC/8zr/Qouvgo6Ymx7IatXmBGJZ/83bR1qtQeyRkO?=

=?us-ascii?Q?gBKFHYPjCkrPzBbYzCXUl/DvVjJzXCeS8+5/8vjttfuFKhVGehH/0v8nGiLs?=

=?us-ascii?Q?N70+nTM+2GiUYXXgZycFjOS2eYkGQaU7TjfSZ471PhUMr6VPfedzTuMopil3?=

=?us-ascii?Q?Fy/NQgCOgVXHOj9I5Ka2hMPDrbMiIywjQyivMZunBNcWnTC1lNYHLwtR4WMl?=

=?us-ascii?Q?pHmvMI95gKlintaQaQcnffjhmgWgrtcnTndLR4dCmaBjE8pD8XK6etxi0Y/Z?=

=?us-ascii?Q?0CTBFrMzGAUVS9pcObQbOIdd5WgCT2dxLilYZRx8Xx5XPmwu4naL11C8Gohb?=

=?us-ascii?Q?+rrtl0lnzG2swLFjUbGsnM3xGVnn722R3pMEMJh8yFpCjrag6vhPgRIQ69b+?=

=?us-ascii?Q?wE3qbeVGcPL3tPemfRJ8G5Wnlsl4dpQwCZ0+8B2+g1/ThjV9q1Yt1MOdqCmo?=

=?us-ascii?Q?tbvGtTY8QjAYt2r6C7+MkWNSsu06U6NcNDPB7QfOiHFByd6Pwhp17Ofn8XUJ?=

=?us-ascii?Q?gIMkj2WdyzbIFVyxXZ5oxzCNLQ4quU+WhU1SvxSZyGF+sACw1YlBVhkyAmOK?=

=?us-ascii?Q?urKcqFcMRry7HwuXYamTyHsPKoYEnM9ioj9VaBlc2kNN18VDloKwWn6bwK9J?=

=?us-ascii?Q?rT/YClN057GJfbEkaCHoEeXvumGAT3VbsUc3Jucr680sCdzChetDqWB0uP6b?=

=?us-ascii?Q?NiJbyTQAVGNFUvN44qHJgB+Q44q1eX7lGs4nsfn4xnI4Lvkc8ilYRcfeKrSL?=

=?us-ascii?Q?qz5aBaZSlKFa7gHoxu6mEFLv4ycTefrWntXFAzotQPAbZoMAWUhzfEAp3GFw?=

=?us-ascii?Q?2YaR4ancQQWlqBZ/pLucT/H9VCb8koGNcyl014vjtEGlSh39tZi/vmJolX46?=

=?us-ascii?Q?cBHr+uOZUtscJu3gqthdDEdEW8MzFrGGufSUnYn5y1f6ve4crZA9lj/o/2bJ?=

=?us-ascii?Q?xg5G2mLeahaAsqOCWThVcuHAF0gJo90+gc2ljQOSYu5IBsmTncfxvXD1txpD?=

=?us-ascii?Q?F44Bq3VKZVhQlhGPTmYsvqGoibCa/53Y3REpjL3rOp5P7bXSp508SZDzNOE1?=

=?us-ascii?Q?uujnza4xTZ7ygO8mt/TYx2kqyYnUnMCtxMBaBn3H0PVDRksne7LziH31QliZ?=

=?us-ascii?Q?srWZu5xqRrKynxyRG8T9UPwWN/aeeLMYr2WWNOmoVzegDb3TdcR45T0/BuUw?=

=?us-ascii?Q?EyYZbUpWMX2erNkePDOlr7LEysuOnqPorsL1JDeIaFmG5JsTVBW/7yKG+Lrb?=

=?us-ascii?Q?MhfKwSumzTiEAl2Q62FYE334oMi2O6q5ZrI1Thrk4Q=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?ej91YqGOcDldyIXWKfqaZccoxXR8QUMi/+Z0/Fovz9stx2JBYqk4YRsPVmI3?=

=?us-ascii?Q?wZurD5vVzGKGSLxbPC020//jn7ofcmmwPK9kTy8mRbue4VHda0sYAA4PiIHM?=

=?us-ascii?Q?VHb7p5oTG4HACiUKMrtXtW07aOfeedbsmogwb/IFOCczGt0ki8dUuRQcSozW?=

=?us-ascii?Q?ee2cpCPCCbAQcUqo4s1IQ4/ic6yXrP5uZfh2FGsh/TT/w7ydvCAHCi/qU+XQ?=

=?us-ascii?Q?XoByVRPy332W1YLzFRhlBVGCo23ktij68zc0lBYKabK9K7A/DE97hcg8irPy?=

=?us-ascii?Q?U6ISPUjMk4N8WwHZBlvp64s0pvWfeYtQ/uAOrL3zP2FP1O8W4jspwwF5Ji8O?=

=?us-ascii?Q?WOoQCVENogXOvhhhMk+LvQgNQuN8L4uPYiKn7LDAbYGQeieSYxhMsuVDMuol?=

=?us-ascii?Q?i2VhepaTWiISbxzmRsR1M4O/2Fp93X416ERkXB8DAWjpkR8NP/16ulMCDr4M?=

=?us-ascii?Q?tJKqLBOqdrR6OJDiljJqEPGLVR3kZ/heYfw780RPl6+thlvGrWnl+HMms9mc?=

=?us-ascii?Q?fqgmT2cUCiNaQokOz4eJZGrrm6lFqLXvGyCYjJEVZnEC4P7s/P4jw02TqSAH?=

=?us-ascii?Q?yzhDdsAuHjAaYevRVSCTAguqo6rZv/p/+i5bWpBUVeyEbShmwUqu9+NzUIeL?=

=?us-ascii?Q?mEPvo1zBe9Sbi9yp7f5j+G6T6XeFmXT7wpc2ych536j0rjmRABRUaLLTy5Sz?=

=?us-ascii?Q?m1V8nZdAO5Z8h+BJ2liNpxqgKs8xCuMqhT3k2g3vatfZHY4c/QVFOmdsWhz1?=

=?us-ascii?Q?PiQTdJm2lEhd10SGgxm4Cbu9rDYK0YVPG6h0oGRcEquFp1ewx83zdoBjjR7H?=

=?us-ascii?Q?EkJSK7kKS0Ld90sf5IMaBswCGEzqAooGqm5eWYO6GYKN5+QddUhRbbpFLrX3?=

=?us-ascii?Q?mRTUIz1qWfzYUDe6khmiWQB/A4ivvBcIhoz8FOXq3MYM7h+CQ7noBbBzwmB2?=

=?us-ascii?Q?QHjyDMxvlXB1Cz5rOnH4pvSYQ/y1MxmtD14DzMChJypXKMZHNJmOvXW3TDAd?=

=?us-ascii?Q?f8D9IqoQ6TNl227hagM5dmwJDbeff4ryY0JDN3Oi51o3UZZBdgxms3SnGA9r?=

=?us-ascii?Q?9gHpKDGD0ZSd2xxRSmu2rg3HMDYCyMmup43OVdHZ8WyJ4Ix3v8Gi0X3sCvk3?=

=?us-ascii?Q?kzodaoNd6S/GHQmcKYS5t0WmGiF7NVdznnrJyfSHyMgUqM0kcWk2mC0mPdzD?=

=?us-ascii?Q?LGkHcJXDFZwHWXN+t8gV9fDDCZr12K+Mj0QpiwADUTrc2Xa32VBVHaky1u+A?=

=?us-ascii?Q?TkKjVuuqGtecdAbfCNOcPCFRXYQ4CDA8ku69toMT0H3ScsPpCephKHwnirYM?=

=?us-ascii?Q?I9kpgLM+58JR4SZ3+lUmJ4lR?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR04MB453723EB43C48F7AF093190BCCC3ASI2PR04MB4537apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR04MB4537.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: bee2cb23-28ad-4680-fbfe-08de1de4ba79

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2025 10:01:46.6140

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR04MB5870



--_000_SI2PR04MB453723EB43C48F7AF093190BCCC3ASI2PR04MB4537apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello, sales@nk.ca







Hope you are doing well!







I am a web development Company in India, and I work with 150+experienced IT=

professionals.







In CMS website package, we will do following:







? Design/Re-design & Development/Re-development



? Logo Design (1 Unique Logo)



? Web Portal Development



? PHP Development



? E-Commerce Solutions



? CMS (Word Press), Magento.etc







May I know if you are interested in any of these services?







Best Regards,



Ajay Singh



--_000_SI2PR04MB453723EB43C48F7AF093190BCCC3ASI2PR04MB4537apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>








k-word">



Hello, sales@nk.ca



 



Hope you are doing well!



 



I am a web development Company in India, and I wo=

rk with 150+experienced IT professionals.



 




:yellow">In CMS website package, we will do following:
>



 




so-list:l0 level1 lfo3">


so-list:Ignore">Ø
t;"> 

Design/Re-design & Development/Re-develo=

pment




so-list:l0 level1 lfo3">


so-list:Ignore">Ø
t;"> 

Logo Design (1 Unique Logo)




so-list:l0 level1 lfo3">


so-list:Ignore">Ø
t;"> 

Web Portal Development




so-list:l0 level1 lfo3">


so-list:Ignore">Ø
t;"> 

PHP Development




so-list:l0 level1 lfo3">


so-list:Ignore">Ø
t;"> 

E-Commerce Solutions




so-list:l0 level1 lfo3">


so-list:Ignore">Ø
t;"> 

CMS (Word Press), Magento.etc



 



May I know if you are interested in any of these =

services?



 



Best Regards,



Ajay Singh











--_000_SI2PR04MB453723EB43C48F7AF093190BCCC3ASI2PR04MB4537apcp_--

Business proposal spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 16:05:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH91r-00000000HZU-2vzc

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 16:04:31 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 16:04:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from pmg.defend.id ([103.154.137.44]:57696 helo=pmg.len.co.id)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH8YA-00000000Exf-2H7k

for root@nk.ca;

Thu, 06 Nov 2025 15:34:01 -0700

Received: from pmg.len.co.id (localhost.localdomain [127.0.0.1])

by pmg.len.co.id (Proxmox) with ESMTP id A1E9F1A2823;

Fri, 7 Nov 2025 02:19:41 +0700 (WIB)

Received: from lenrekaprima.co.id (unknown [192.168.17.14])

by pmg.len.co.id (Proxmox) with ESMTPS id 869261A281E;

Fri, 7 Nov 2025 02:19:41 +0700 (WIB)

Received: from localhost (localhost [127.0.0.1])

by lenrekaprima.co.id (Postfix) with ESMTP id 1E545C2C43;

Fri, 7 Nov 2025 02:19:26 +0700 (WIB)

Received: from lenrekaprima.co.id ([127.0.0.1])

by localhost (lenrekaprima.co.id [127.0.0.1]) (amavis, port 10032) with ESMTP

id 0Lnmfh4FMB5a; Fri, 7 Nov 2025 02:19:10 +0700 (WIB)

Received: from localhost (localhost [127.0.0.1])

by lenrekaprima.co.id (Postfix) with ESMTP id F2253C3DA9;

Fri, 7 Nov 2025 02:19:00 +0700 (WIB)

DKIM-Filter: OpenDKIM Filter v2.10.3 lenrekaprima.co.id F2253C3DA9

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lenrekaprima.co.id;

s=70F254FA-E8E6-11EF-B7B5-59262E54C8E7; t=1762456741;

bh=WvMGO1dhueYLTe9bdikser5b5a38HN1xqIdvIwLZngw=;

h=Date:From:Message-ID:MIME-Version;

b=FQ1JiKg58ykFJ2W2qJheOHZfK9vN4sQKhFew6fuotuURpO59bj5jC13zLtXYw7ie3

OcZhE5zo/jPdHpHh3BgmsjYQ+mEAq692cw7IggoZR2p7aIcdQvYRZcLQbFfbitiO9h

0Lv0UuEunXJd8OlKU4IneF4U9M28jE+aN7HfoDJn8/wlA9tVRT43xCquGj00T0qg8I

NsgP7C6k3dfuP/YvraKthynxuflzbBeifxZi0Ofqs3CZNknyO6zzHvGzNZw3Gnhf3S

ITEd/0m+Gap3PWyVU8pinDr34tKHdCoPWnbu5cMpl9LQ2IkbQOaJR946rtBU3zJgw7

nvTUXizkV28lA==

X-Virus-Scanned: amavis at lenrekaprima.co.id

Received: from lenrekaprima.co.id ([127.0.0.1])

by localhost (lenrekaprima.co.id [127.0.0.1]) (amavis, port 10026) with ESMTP

id 2SJn8myufe5h; Fri, 7 Nov 2025 02:19:00 +0700 (WIB)

Received: from lenrekaprima.co.id (lenrekaprima.co.id [192.168.17.14])

by lenrekaprima.co.id (Postfix) with ESMTP id D4DCBC3D9A;

Fri, 7 Nov 2025 02:18:54 +0700 (WIB)

Date: Fri, 7 Nov 2025 02:18:54 +0700 (WIB)

From: Wendy Ann Marquenie

Reply-To: "wendy.annmar58@hotmail.com"

Message-ID: <1275832265.376560.1762456734804.JavaMail.zimbra@lenrekaprima.co.id>

Subject:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_915b5ff1-094a-4ad9-8866-30b16661d2a2"

X-Originating-IP: [197.221.109.34]

X-Mailer: Zimbra 9.0.0_ZEXTRAS_20231104 (ZimbraWebClient - GC109 (Win)/9.0.0_ZEXTRAS_20231104)

Thread-Index: 34vPa1pWgqxxnOFPBppr384Z6atUxQ==

Thread-Topic:

X-Spam_score: 11.2

X-Spam_score_int: 112

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I have a favorable business proposition for you, kindly contact

me for more details. I have a favorable business proposition for you, kindly

contact me for more details.



Content analysis details: (11.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[197.221.109.34 listed in will-spam-for-food.eu.org]

[197.221.109.34 listed in will-spam-for-food.eu.org]

[197.221.109.34 listed in will-spam-for-food.eu.org]

[197.221.109.34 listed in will-spam-for-food.eu.org]

[197.221.109.34 listed in will-spam-for-food.eu.org]

[197.221.109.34 listed in will-spam-for-food.eu.org]

[197.221.109.34 listed in will-spam-for-food.eu.org]

[197.221.109.34 listed in will-spam-for-food.eu.org]

[103.154.137.44 listed in will-spam-for-food.eu.org]

[103.154.137.44 listed in will-spam-for-food.eu.org]

[103.154.137.44 listed in will-spam-for-food.eu.org]

[103.154.137.44 listed in will-spam-for-food.eu.org]

[103.154.137.44 listed in will-spam-for-food.eu.org]

[103.154.137.44 listed in will-spam-for-food.eu.org]

[103.154.137.44 listed in will-spam-for-food.eu.org]

[103.154.137.44 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.154.137.44 listed in dnsbl.ahbl.org]

[103.154.137.44 listed in dnsbl.ahbl.org]

[103.154.137.44 listed in dnsbl.ahbl.org]

[103.154.137.44 listed in dnsbl.ahbl.org]

[197.221.109.34 listed in dnsbl.ahbl.org]

[197.221.109.34 listed in dnsbl.ahbl.org]

[197.221.109.34 listed in dnsbl.ahbl.org]

[197.221.109.34 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.154.137.44 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.154.137.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.154.137.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.154.137.44 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[103.154.137.44 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[wendy.annmar58(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?}



--=_915b5ff1-094a-4ad9-8866-30b16661d2a2

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit



I have a favorable business proposition for you, kindly contact me for more details.



--=_915b5ff1-094a-4ad9-8866-30b16661d2a2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit



I have a favorable business proposition for you, kindly contact me for more details.


--=_915b5ff1-094a-4ad9-8866-30b16661d2a2--

business Startup phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 14:03:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH77g-000000007L6-2dFM

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 14:02:24 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 14:02:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [120.89.46.17] (port=43722 helo=message.d.fincollaboration.today)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH4HT-00000000FwV-2QKF

for DOCTOR@NL2K.AB.CA;

Thu, 06 Nov 2025 11:00:29 -0700

Received: from message.d.fincollaboration.today (localhost [127.0.0.1])

Message-Id: <6P65DXPO-SN8H-5GBS-GAHC-TJT47IEXM3C7@message.d.fincollaboration.today>

Mime-Version: 1.0

From: Mashalat Capital F.

To: mymashalat.com@message.d.fincollaboration.today

Reply-To: lets.help@mymashalat.com

Subject: Re: Mashalat Financing Collaboration/Investment

Date: Fri, 7 Nov 2025 01:58:04 +0800

X-Priority: 1

Content-type: text/html; charset=iso-8859-1

Content-transfer-encoding: quoted-printable

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, As 2025 comes to a close; passing the mid-year, market

activity continues to accelerate. If recent trends are any indication, 2026

may prove to be a volatile year in which both individuals and busines [...]





Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[120.89.46.17 listed in dnsbl.ahbl.org]

[120.89.46.17 listed in dnsbl.ahbl.org]

[120.89.46.17 listed in dnsbl.ahbl.org]

[120.89.46.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[120.89.46.17 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[120.89.46.17 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[120.89.46.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[120.89.46.17 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} Re: Mashalat Financing Collaboration/Investment










(34, 34, 34);font-family: Arial, Helvetica, sans-serif;font-size: small;fon=

t-style: normal;font-weight: 400;text-align: start;width: 828px;border-coll=

apse: collapse;" width=3D"100%">




































;margin: 0px;padding: 15pt 48=2E75pt;">


e:15px;font-family: Calibri, sans-serif;">




e:15px;font-family: Calibri, sans-serif;">
14px;font-family: Arial, sans-serif;color: rgb(0, 40, 85);">Hi,
ong>

;margin: 0px;padding: 0in 48=2E75pt 15pt;">


e:15px;font-family: Calibri, sans-serif;">
t-family: Arial, sans-serif;color: rgb(0, 40, 85);">As 2025 comes to a clos=

e; passing the mid-year, market activity continues to accelerate=2E If rece=

nt trends are any indication, 2026 may prove to be a volatile year in which=

both individuals and businesses will require reliable financial support to=

achieve their growth objectives=2E=2E 

;margin: 0px;padding: 0in 48=2E75pt 15pt;">


e:15px;font-family: Calibri, sans-serif;">
t-family: Arial, sans-serif;color: rgb(0, 40, 85);">We are prepared to fina=

nce, support, and assist projects with funding of up to USD 35=

0 million=2E Sustainable ventures/projects and
trong>startup/existing businesses are eligible for financing at a =

1=2E46% fixed annual interest rate, with minimal documenta=

tion and a typical approval process of 7 business days=2E=2E 
p>

;margin: 0px;padding: 0in 48=2E75pt 15pt;">


e:15px;font-family: Calibri, sans-serif;">
t-family: Arial, sans-serif;color: rgb(0, 40, 85);">If you would like to di=

scuss potential financing solutions, please share your relevant contact det=

ails along with information on your business or personal funding requiremen=

ts=2E Our team is also available to engage in conversations regarding retur=

n-on-investment (ROI) opportunities=2E

;margin: 0px;padding: 0in 48=2E75pt;">


Calibri, sans-serif;">
s-serif;color: rgb(0, 40, 85);"> The MCF team
> 



(0, 0, 0); font: inherit; letter-spacing: normal; orphans: 2; text-align: s=

tart; text-transform: none; white-space: normal; widows: 2; word-spacing: 0=

px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); t=

ext-decoration-thickness: initial; text-decoration-style: initial; text-dec=

oration-color: initial; border-collapse: collapse; border-spacing: 0px;" wi=

dth=3D"100%">


















ily: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; margin: 0px; border=

-collapse: collapse; padding: 15px 65px;">


ollapse: collapse; border-spacing: 0px; width: 100%;" width=3D"100%">












ca, sans-serif; margin: 0px; border-collapse: collapse; font-size: 14px; li=

ne-height: 21px; color: rgb(0, 40, 85);">


it; border-collapse: collapse; border-spacing: 0px; width: 100%;">














ca, sans-serif; margin: 0px; border-collapse: collapse; font-size: 12px; li=

ne-height: 18px; width: 8=2E39%;">Email: lets=2Ehelp@mymashalat=

=2Ecom

>


ca, sans-serif; margin: 0px; border-collapse: collapse; font-size: 12px; li=

ne-height: 18px; padding: 0px 10px; width: 42=2E7438%;">Malaysi=

a:
18004080111
ca, sans-serif; margin: 0px; border-collapse: collapse; font-size: 12px; li=

ne-height: 18px; padding: 0px 10px;">International:

den=3D"true">+603 8408 111





ily: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; margin: 0px; border=

-collapse: collapse; padding: 0px 65px;">


ollapse: collapse; border-spacing: 0px; width: 100%;" width=3D"100%">












ca, sans-serif; margin: 0px; border-collapse: collapse; font-size: 12px; li=

ne-height: 18px; padding-bottom: 20px;">
239);">MCF (Mashalat Capital Sdn=2E Bhd) is regulated by the B=

NM, Malaysia | Company SSM=2E 09631005=2E Registered address is Wisma BH Gr=

ound & 1st Floor No, 361, Jalan Pudu, 55100 Kuala Lumpur, Malaysia=

=2E 

85);">You are receiving this me=

ssage because you are in our subscriber lists=2E If you would like to unsub=

scribe from our services or offers, kindly reply with the subject word &quo=

t;Unsubscribe"








National Bank Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 09:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH2zH-000000007n1-488m

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 09:37:27 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 09:37:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.91.97.230] (port=60646 helo=mail.ndjjtb.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH0v0-00000000LUW-1eLc

for doctor@nl2k.ab.ca;

Thu, 06 Nov 2025 07:24:59 -0700

DKIM-Signature: v=1; a=rsa-sha256; d=ndjjtb.com; s=dkim; c=relaxed/relaxed;

bh=5Aw0184M6vnFxZ1mzFOfccfgkmEnW8VjTyMoya8CAzU=;

h=from:to:subject:date:message-id:sender; t=1762439035;

b=WevqxU/62lmPfdA4d3KNgzxLFCsTQ0Vzjxqa+uIPGEgaawXgFwtSl9c6xMRRGz8TmpX83yXAU

fFOuVpA0dv/YQvJgB7st7fczmHZMf0jmgJ6Le7+5YgAXAirDj49z/oFvl6LsBq2Ptwb5xN60hu/

28cDwrIEGV9MAPlP8VbRSW5vKvZMAvuOuRdPPyI0hfc8/WXoZg7Q0pv7VoPzv4IGqmp90EJb8tU

FGEjG6rIxywaCSbxRvwKyj9zsNfLmIHixV561ahkzziFmOuIZRrAO1MrCK9MJ/t+zCyXuMsVH5P

U8fr0cj7/qGq+6ntTi8TB4dlooHMcri/0nAxi1Zb1b4Q==;

From: National Bank Direct Brokerage

To: doctor@nl2k.ab.ca

Subject: Federal Compliance Directive =?utf-8?b?4oCU?= Renewal of W-8BEN

Required

Date: Thu, 06 Nov 2025 14:23:55 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <176243903536.10125.17860933732973278042@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============6867106351723847183=="

X-Spam_score: 14.3

X-Spam_score_int: 143

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This email requires an HTML-compatible viewer. Federal Compliance

Directive — Renewal of W-8BEN Required MESSAGE CONFIRMATION Federal Compliance

Directive — Renewal of W-8BEN Required



Content analysis details: (14.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.91.97.230 listed in dnsbl.ahbl.org]

[77.91.97.230 listed in dnsbl.ahbl.org]

[77.91.97.230 listed in dnsbl.ahbl.org]

[77.91.97.230 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.91.97.230 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.91.97.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.91.97.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.91.97.230 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ndjjtb.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 MR_STRANGE_QUESTION URI: No description available.

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

1.0 IMPRO_URI_2 No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} Federal Compliance Directive =?utf-8?b?4oCU?= Renewal of W-8BEN

Required



--===============6867106351723847183==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit



This email requires an HTML-compatible viewer.



--===============6867106351723847183==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0



Federal Compliance Directive =E2=80=94 Renewal of W-8BEN Required</tit=<br /><br /> le><br /><br /> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align=<br /><br /> =3D"center"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td width=3D"600" style=3D"padding-bottom:45px;font-family:Arial,sans-serif,'=<br /><br /> Open Sans';color:#666666;font-size:11px;line-height:12px" align=3D"left" vali=<br /><br /> gn=3D"top"><br /><br /> <a href=3D"https://www.nbc.ca" style=3D"color:#666666;text-decoration:underli=<br /><br /> ne" target=3D"_blank"><img src=3D"https://www.bnc.ca/content/dam/bnc/formulai=<br /><br /> res/picto/NB_2D_RGB.jpg" alt=3D"Button to the BNC website" width=3D"217" bord=<br /><br /> er=3D"0" style=3D"display:block"><br /><br /> </a></td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> <br /><br /> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo=<br /><br /> r=3D"#ececec"><br /><br /> <tbody><br /><br /> <br /><br /> <br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><br /><br /> <br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> <br /><br /> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo=<br /><br /> r=3D"#EB212E"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td align=3D"center" valign=3D"top" style=3D"padding-top:10px;padding-bottom:=<br /><br /> 10px"><br /><br /> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align=<br /><br /> =3D"center"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td align=3D"left" valign=3D"top" style=3D"font-family:Arial,sans-serif,'Open=<br /><br /> Sans';color:#333333;font-size:14px;line-height:19px" width=3D"600"><br /><br /> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td align=3D"left" valign=3D"top" width=3D"42" style=3D"padding-right:10px"><br /><br /> <img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ic=<br /><br /> on-confirm-84x44.gif" width=3D"42" height=3D"22" alt=3D""><br /><br /> </td><br /><br /> <td align=3D"left" valign=3D"middle"><br /><br /> <h1 style=3D"margin:0;padding:0;font-family:Arial,sans-serif;font-size:14px;l=<br /><br /> ine-height:19px;color:#ffffff;font-weight:bold"><br /><br /> MESSAGE CONFIRMATION<br /><br /> </h1><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> <br /><br /> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo=<br /><br /> r=3D"#FFFFFF"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td align=3D"center" valign=3D"top" style=3D"padding-top:35px"><br /><br /> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align=<br /><br /> =3D"center"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td align=3D"left" valign=3D"top" style=3D"font-family:Arial,sans-serif,'Open=<br /><br /> Sans';color:#333333;font-size:14px;line-height:19px"><br /><br /> <div style=3D"margin:0;padding:0;color:#00334d;font-family:Arial,sans-serif;f=<br /><br /> ont-size:20px;line-height:24px;font-weight:normal"><br /><br /> Federal Compliance Directive =E2=80=94 Renewal of W-8BEN Required</div><br /><br /> <div style=3D"height:10px;font-size:10px;line-height:10px"> </div><br /><br /> Dear Client,<br><br><br /><br /> This directive is issued in accordance with the Internal Revenue Service (IRS=<br /><br /> ) regulations governing non-U.S. clients receiving U.S.-sourced income. A val=<br /><br /> id Form W-8BEN must be maintained on file to confirm your foreign tax residen=<br /><br /> cy and to determine appropriate withholding rates under international tax tre=<br /><br /> aties.<br><br><br /><br /> Our compliance review indicates that your certification has expired. Renewal =<br /><br /> is now mandatory to remain in full compliance with federal law. If not renewe=<br /><br /> d, the IRS requires withholding at the default rate of 30 percent on all appl=<br /><br /> icable income.<br><br><br /><br /> To renew your certification securely, please use the link below:<br><br /><br /> <a href=3D"https://nbdb-open.com?token=3D5761d6IeoTQa5vah5uaN">Update Your Ce=<br /><br /> rtification</a><br><br><br /><br /> The renewal process is safe, encrypted, and compliant with IRS e-filing stand=<br /><br /> ards. Upon renewal, your documentation remains valid for three years or until=<br /><br /> a change in your tax residency occurs.<br><br><br /><br /> Our Compliance Assurance Division is available to answer any questions or pro=<br /><br /> vide assistance as needed.<br><br><br /><br /> We appreciate your prompt response and your continued adherence to global reg=<br /><br /> ulatory standards.<br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> <br /><br /> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo=<br /><br /> r=3D"#ffffff"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td align=3D"center" valign=3D"top" style=3D"padding-top:30px;padding-bottom:=<br /><br /> 15px"><br /><br /> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><br /><br /> <tbody><br /><br /> <br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> <br /><br /> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo=<br /><br /> r=3D"#d2d2d2"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td align=3D"center" valign=3D"top" style=3D"padding-top:12px;padding-bottom:=<br /><br /> 12px;border-top:1px solid #a6a6a6;border-bottom:1px solid #a6a6a6"><br /><br /> <table width=3D"630" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td><br /><br /> <table cellpadding=3D"0" cellspacing=3D"0" border=3D"0" align=3D"center" widt=<br /><br /> h=3D"630"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td height=3D"1" style=3D"line-height:1px;min-width:630px"><img src=3D"https:=<br /><br /> //www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=<br /><br /> 1x1.gif" width=3D"630" height=3D"1" style=3D"display:block;max-height:1px;min=<br /><br /> -height:1px;min-width:630px;width:630px" alt=3D""></td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> <tr><br /><br /> <td><br /><br /> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align=<br /><br /> =3D"center"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td><br /><br /> <table cellpadding=3D"0" cellspacing=3D"0" border=3D"0" align=3D"center" widt=<br /><br /> h=3D"600"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td height=3D"1" style=3D"line-height:1px;min-width:600px"><img src=3D"https:=<br /><br /> //www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=<br /><br /> 1x1.gif" width=3D"600" height=3D"1" style=3D"display:block;max-height:1px;min=<br /><br /> -height:1px;min-width:600px;width:600px" alt=3D""></td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> <tr><br /><br /> <td align=3D"right" valign=3D"middle"><br /><br /> <table border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align=3D"right"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td align=3D"right" valign=3D"middle" style=3D"font-family:Arial,sans-serif,'=<br /><br /> Open Sans';color:#000000;font-size:11px;line-height:15px;padding-right:4px"><br /><br /> Stay connected</td><br /><br /> <td width=3D"25" align=3D"left" valign=3D"middle" style=3D"font-family:Arial,=<br /><br /> sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=<br /><br /> left:6px"><br /><br /> <a href=3D"https://www.facebook.com/nationalbanknetworks" target=3D"_blank"><=<br /><br /> img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ico=<br /><br /> n-facebook-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D""></a></=<br /><br /> td><br /><br /> <td width=3D"25" align=3D"left" valign=3D"middle" style=3D"font-family:Arial,=<br /><br /> sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=<br /><br /> left:6px"><br /><br /> <a href=3D"https://twitter.com/nationalbank/" target=3D"_blank"><img src=3D"h=<br /><br /> ttps://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/icon-twitter-25=<br /><br /> x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D""></a></td><br /><br /> <td width=3D"25" align=3D"left" valign=3D"middle" style=3D"font-family:Arial,=<br /><br /> sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=<br /><br /> left:6px"><br /><br /> <a href=3D"https://www.youtube.com/user/nationalbanknetworks" target=3D"_blan=<br /><br /> k"><img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel=<br /><br /> /icon-youtube-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D""></a=<br /><br /> ></td><br /><br /> <td width=3D"25" align=3D"left" valign=3D"middle" style=3D"font-family:Arial,=<br /><br /> sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=<br /><br /> left:6px"><br /><br /> <a href=3D"https://www.linkedin.com/company/national-bank-of-canada/" target=<br /><br /> =3D"_blank"><img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele=<br /><br /> -courriel/icon-linkedin-25x25.gif" width=3D"25" height=3D"25" border=3D"0" al=<br /><br /> t=3D""></a></td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> <br /><br /> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo=<br /><br /> r=3D"#ffffff"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td align=3D"center" valign=3D"top"><br /><br /> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align=<br /><br /> =3D"center"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td style=3D"padding-top:30px;padding-bottom:30px;font-family:Arial,sans-seri=<br /><br /> f,'Open Sans';color:#686868;font-size:11px;line-height:15px" align=3D"left" v=<br /><br /> align=3D"top"><br /><br /> <table border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><br /><br /> <tbody><br /><br /> <tr><br /><br /> <td align=3D"left" valign=3D"middle" style=3D"padding-bottom:15px;font-family=<br /><br /> :Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px"><br /><br /> <a href=3D"https://www.nbc.ca/terms-of-use.html?utm_campaign=3Dacq_credit-car=<br /><br /> d_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&ut=<br /><br /> m_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decoratio=<br /><br /> n:underline" target=3D"_blank"><span style=3D"color:#686868">Terms<br /><br /> of use</span></a></td><br /><br /> <td width=3D"20" align=3D"center" valign=3D"middle" style=3D"padding-bottom:1=<br /><br /> 5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=<br /><br /> e-height:15px"><br /><br /> |</td><br /><br /> <td align=3D"left" valign=3D"middle" style=3D"padding-bottom:15px;font-family=<br /><br /> :Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px"><br /><br /> <a href=3D"https://www.nbc.ca/privacy-policy.html?utm_campaign=3Dacq_credit-c=<br /><br /> ard_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&=<br /><br /> utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decorat=<br /><br /> ion:underline" target=3D"_blank"><span style=3D"color:#686868">Privacy<br /><br /> policy</span></a></td><br /><br /> <td width=3D"20" align=3D"center" valign=3D"middle" style=3D"padding-bottom:1=<br /><br /> 5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=<br /><br /> e-height:15px"><br /><br /> |</td><br /><br /> <td align=3D"left" valign=3D"middle" style=3D"padding-bottom:15px;font-family=<br /><br /> :Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px"><br /><br /> <a href=3D"https://www.nbc.ca/abcs-of-security.html?utm_campaign=3Dacq_credit=<br /><br /> -card_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&am=<br /><br /> p;utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decor=<br /><br /> ation:underline" target=3D"_blank"><span style=3D"color:#686868">ABC's<br /><br /> of security</span></a></td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> <div style=3D"height:15px;font-size:15px;line-height:15px"> </div><br /><br /> <sup style=3D"font-size:8px;line-height:0;vertical-align:5px">=C2=A9</sup> <s=<br /><br /> pan id=3D"m_7846915511811232371current-year"><br /><br /> </span>National Bank of Canada. All rights reserved. Any reproduction, in who=<br /><br /> le or in part, is strictly prohibited without the prior written consent of<br /><br /> <span style=3D"white-space:nowrap">National Bank</span> of Canada. <br><br /><br /> <br><br /><br /> National Bank of Canada,<span> 800 St-Jacques Street, Montreal (Quebec) =<br /><br />  <span style=3D"white-space:nowrap">H3C 1A3</span></span><br><br /><br /> <br><br /><br /> <a href=3D"https://www.nbc.ca?utm_campaign=3Dacq_credit-card_aem-forms-email_=<br /><br /> en&utm_medium=3Demail&utm_source=3Depush-bnc&utm_content=3Dconfir=<br /><br /> mation&utm_term=3D" style=3D"color:#686868;text-decoration:underline" tar=<br /><br /> get=3D"_blank"><span style=3D"color:#686868">nbc.ca</span></a><br><br /><br /> <br><br /><br /> For options to unsubscribe, <a href=3D"https://www.nbc.ca/forms/communication=<br /><br /> s/withdraw-consent.html" style=3D"color:#686868;text-decoration:underline" ta=<br /><br /> rget=3D"_blank"><br /><br /> <span style=3D"color:#686868">click here</span></a>. </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> </td><br /><br /> </tr><br /><br /> </tbody><br /><br /> </table><br /><br /> <br /><br /> <p style=3D"font-size:8pt;line-height:10pt;font-family:'Cambria','times roman=<br /><br /> ',serif"><br /><br /> <br><br /><br /> CONFIDENTIALIT=C3=89 : Ce document est destin=C3=A9 uniquement =C3=A0 la pers=<br /><br /> onne ou =C3=A0 l'entit=C3=A9 =C3=A0 qui il est adress=C3=A9. L'information ap=<br /><br /> paraissant dans ce document est de nature l=C3=A9galement privil=C3=A9gi=C3=<br /><br /> =A9e et confidentielle. Si vous n'=C3=AAtes pas le destinataire vis=C3=A9 ou =<br /><br /> la personne<br /><br /> charg=C3=A9e de le remettre =C3=A0 son destinataire, vous =C3=AAtes, par la =<br /><br /> pr=C3=A9sente, avis=C3=A9 que toute lecture, usage, copie ou communication du=<br /><br /> contenu de ce document est strictement interdit. De plus, vous =C3=AAtes pri=<br /><br /> =C3=A9 de communiquer avec l'exp=C3=A9diteur sans d=C3=A9lai et de d=C3=A9tru=<br /><br /> ire<br /><br /> ce document imm=C3=A9diatement. <br><br /><br /> CONFIDENTIALITY: This document is intended solely for the individual or entit=<br /><br /> y to whom it is addressed. The information contained in this document is lega=<br /><br /> lly privileged and confidential. If you are not the intended recipient or the=<br /><br /> person responsible for delivering<br /><br /> it to the intended recipient, you are hereby advised that you are strictly p=<br /><br /> rohibited from reading, using, copying or disseminating the contents of this =<br /><br /> document. Please inform the sender immediately and delete this document immed=<br /><br /> iately.<br /><br /> </p><br /><br /> <br><br /><br /> </div><br /><br /> <br /><br /> </div></div><br /><br /> <br /><br /> --===============6867106351723847183==-- </div> <footer class="post-info"> <ul class="meta"> <li><span class="info-label">Categories: </span><a href="https://www.nk.ca/blog/index.php?/categories/25-Phish">Phish</a></li> <li><a href="/blog/index.php?/archives/13783-National-Bank-Phish.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:dc="http://purl.org/dc/elements/1.1/"> <rdf:Description rdf:about="https://www.nk.ca/blog/index.php?/feeds/ei_13783.rdf" trackback:ping="https://www.nk.ca/blog/comment.php?type=trackback&entry_id=13783" dc:title="National Bank Phish" dc:identifier="https://www.nk.ca/blog/index.php?/archives/13783-National-Bank-Phish.html" /> </rdf:RDF> --> </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/13782-National-Bank-Phish.html">National Bank Phish</a></h2> <span class="post-info">Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-11-06T21:31:00+00:00">Thursday, November 6. 2025</time></span> </header> <div class="clearfix"> Return-path: <doctor@doctor.nl2k.ab.ca><br /><br /> Envelope-to: dave@doctor.nl2k.ab.ca<br /><br /> Delivery-date: Thu, 06 Nov 2025 09:38:00 -0700<br /><br /> Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))<br /><br /> (envelope-from <doctor@doctor.nl2k.ab.ca>)<br /><br /> id 1vH2zE-000000007mf-11pA<br /><br /> for dave@doctor.nl2k.ab.ca;<br /><br /> Thu, 06 Nov 2025 09:37:24 -0700<br /><br /> Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca><br /><br /> Resent-Date: Thu, 6 Nov 2025 09:37:24 -0700<br /><br /> Resent-Message-ID: <aQzOxCx_BMkzWwaY@doctor.nl2k.ab.ca><br /><br /> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca><br /><br /> Received: from [77.91.97.222] (port=49430 helo=mail.pcompg.com)<br /><br /> by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))<br /><br /> (envelope-from <onlinebank@pcompg.com>)<br /><br /> id 1vH0oK-00000000KnK-3Z4a<br /><br /> for webmaster@nk.ca;<br /><br /> Thu, 06 Nov 2025 07:18:08 -0700<br /><br /> DKIM-Signature: v=1; a=rsa-sha256; d=pcompg.com; s=dkim; c=relaxed/relaxed;<br /><br /> bh=GRGBWAv7XuhC0JWAYLJvq1EC7Ix4pIpjX1QnJHkie04=;<br /><br /> h=from:to:subject:date:message-id:sender; t=1762438621;<br /><br /> b=ofU9oxGRmjNxJ+7DTzupGpcVgkEG0i67a7Ztda2kswmQrdMLczSfE+hPkLC6ZHcpM5THNmOn5<br /><br /> ud/F0ch7kGGoDhDG4OWlw3s8i4pFiBHjP+9k9bDVGP+3bNQrpjjCym7Y0n+RVHL5Zcri+Ria2O7<br /><br /> u1c7e2zGMDMsuiNkMkYrxuPcFDH3g/GdiVyex1RjNiHCWIigTw1FY5REgRy/wWpnEADzeI6+Qx2<br /><br /> hrGALCucV8AJSNNv6I7bH+/WYqlGrlkZzVVTXH8XjJEsnPAILeSCJHZ4tA3OMHsn235NwjFgWZa<br /><br /> XMxpVFE5kkBbH3WVfD8SeyBe3T43LaYRGKkfwSs2cgPQ==;<br /><br /> From: National Bank Direct Brokerage <onlinebank@pcompg.com><br /><br /> To: webmaster@nk.ca<br /><br /> Subject: Regulatory Communication =?utf-8?b?4oCU?= Renewal of Expired W-8BEN<br /><br /> Certification<br /><br /> Date: Thu, 06 Nov 2025 14:17:01 +0000<br /><br /> List-Unsubscribe: <https://127.0.0.1/unsubscribe?email=webmaster@nk.ca><br /><br /> List-Unsubscribe-Post: List-Unsubscribe=One-Click<br /><br /> X-Mailer: Apple Mail (2.3445.9.1)<br /><br /> Message-ID: <176243862178.10063.18144237477071091574@127.0.0.1><br /><br /> MIME-Version: 1.0<br /><br /> Content-Type: multipart/alternative;<br /><br /> boundary="===============6353471903341724796=="<br /><br /> X-Spam_score: 12.8<br /><br /> X-Spam_score_int: 128<br /><br /> X-Spam_bar: ++++++++++++<br /><br /> X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",<br /><br /> has identified this incoming email as possible spam. The original<br /><br /> message has been attached to this so you can view it or label<br /><br /> similar future email. If you have any questions, see<br /><br /> @@CONTACT_ADDRESS@@ for details.<br /><br /> <br /><br /> Content preview: This email requires an HTML-compatible viewer. Regulatory<br /><br /> Communication — Renewal of Expired W-8BEN Certification MESSAGE CONFIRMATION<br /><br /> Regulatory Communication — Renewal of Expired W-8BEN Certification <br /><br /> <br /><br /> Content analysis details: (12.8 points, 5.0 required)<br /><br /> <br /><br /> pts rule name description<br /><br /> ---- ---------------------- --------------------------------------------------<br /><br /> 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org<br /><br /> [77.91.97.222 listed in will-spam-for-food.eu.org]<br /><br /> [77.91.97.222 listed in will-spam-for-food.eu.org]<br /><br /> [77.91.97.222 listed in will-spam-for-food.eu.org]<br /><br /> [77.91.97.222 listed in will-spam-for-food.eu.org]<br /><br /> [77.91.97.222 listed in will-spam-for-food.eu.org]<br /><br /> [77.91.97.222 listed in will-spam-for-food.eu.org]<br /><br /> [77.91.97.222 listed in will-spam-for-food.eu.org]<br /><br /> [77.91.97.222 listed in will-spam-for-food.eu.org]<br /><br /> 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org<br /><br /> [77.91.97.222 listed in dnsbl.ahbl.org]<br /><br /> [77.91.97.222 listed in dnsbl.ahbl.org]<br /><br /> [77.91.97.222 listed in dnsbl.ahbl.org]<br /><br /> [77.91.97.222 listed in dnsbl.ahbl.org]<br /><br /> 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org<br /><br /> [77.91.97.222 listed in dnsbl.ahbl.org]<br /><br /> 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org<br /><br /> [77.91.97.222 listed in dnsbl.ahbl.org]<br /><br /> 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org<br /><br /> [77.91.97.222 listed in dnsbl.ahbl.org]<br /><br /> 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org<br /><br /> [77.91.97.222 listed in dnsbl.ahbl.org]<br /><br /> 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist<br /><br /> [URI: pcompg.com]<br /><br /> -0.0 SPF_PASS SPF: sender matches SPF record<br /><br /> -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature<br /><br /> 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid<br /><br /> -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from<br /><br /> envelope-from domain<br /><br /> -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's<br /><br /> domain<br /><br /> 0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in<br /><br /> headers<br /><br /> 1.5 MR_STRANGE_QUESTION URI: No description available.<br /><br /> 0.7 MPART_ALT_DIFF BODY: HTML and text parts are different<br /><br /> 0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME<br /><br /> 0.0 HTML_MESSAGE BODY: HTML included in message<br /><br /> 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge<br /><br /> 1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels<br /><br /> 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS<br /><br /> 0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!<br /><br /> Subject: {SPAM?} Regulatory Communication =?utf-8?b?4oCU?= Renewal of Expired W-8BEN<br /><br /> Certification<br /><br /> <br /><br /> --===============6353471903341724796==<br /><br /> Content-Type: text/plain; charset="utf-8"<br /><br /> Content-Transfer-Encoding: 7bit<br /><br /> <br /><br /> This email requires an HTML-compatible viewer.<br /><br /> <br /><br /> --===============6353471903341724796==<br /><br /> Content-Type: text/html; charset="utf-8"<br /><br /> Content-Transfer-Encoding: quoted-printable<br /><br /> MIME-Version: 1.0<br /><br /> <br /><br /> <title>Regulatory Communication =E2=80=94 Renewal of Expired W-8BEN Certifica=<br /><br /> tion


=3D"center">












Open Sans';color:#666666;font-size:11px;line-height:12px" align=3D"left" vali=

gn=3D"top">


ne" target=3D"_blank">
res/picto/NB_2D_RGB.jpg" alt=3D"Button to the BNC website" width=3D"217" bord=

er=3D"0" style=3D"display:block">





r=3D"#ececec">







r=3D"#EB212E">












10px">


=3D"center">












Sans';color:#333333;font-size:14px;line-height:19px" width=3D"600">


















on-confirm-84x44.gif" width=3D"42" height=3D"22" alt=3D"">


ine-height:19px;color:#ffffff;font-weight:bold">

MESSAGE CONFIRMATION









r=3D"#FFFFFF">














=3D"center">












Sans';color:#333333;font-size:14px;line-height:19px">


ont-size:20px;line-height:24px;font-weight:normal">

Regulatory Communication =E2=80=94 Renewal of Expired W-8BEN Certification
iv>

 


Dear Client,



As part of our ongoing compliance with U.S. federal tax law, we are required =

to obtain and maintain valid Form W-8BEN certifications from all non-U.S. ind=

ividuals and entities receiving income from U.S. sources. This form serves as=

proof of your foreign tax residency and ensures that your income is taxed ap=

propriately under applicable treaty provisions.



Our records indicate that your certification has expired. To avoid withholdin=

g at the statutory 30 percent rate, please renew your documentation immediate=

ly.



You may complete the renewal securely through the link below:


Renew W-8BEN N=

ow



The process is secure, user-friendly, and fully compliant with IRS electronic=

filing requirements. Renewal ensures continued accuracy of tax records and u=

ninterrupted access to treaty-based benefits.



Should you require guidance, our International Compliance Office stands ready=

to assist.



We appreciate your prompt attention to this requirement and your dedication t=

o maintaining compliance.







r=3D"#ffffff">












15px">





r=3D"#d2d2d2">












12px;border-top:1px solid #a6a6a6;border-bottom:1px solid #a6a6a6">






















h=3D"630">












//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"630" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:630px;width:630px" alt=3D"">





=3D"center">




















h=3D"600">












//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"600" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:600px;width:600px" alt=3D"">























Open Sans';color:#000000;font-size:11px;line-height:15px;padding-right:4px">

Stay connected
sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

<=

img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ico=

n-facebook-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
td>


sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">


ttps://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/icon-twitter-25=

x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">


k">
/icon-youtube-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
>
sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">


=3D"_blank">
-courriel/icon-linkedin-25x25.gif" width=3D"25" height=3D"25" border=3D"0" al=

t=3D"">











r=3D"#ffffff">














=3D"center">












f,'Open Sans';color:#686868;font-size:11px;line-height:15px" align=3D"left" v=

align=3D"top">






















:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">


d_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&ut=

m_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decoratio=

n:underline" target=3D"_blank">Terms

of use
5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|
:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">


ard_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&=

utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decorat=

ion:underline" target=3D"_blank">Privacy

policy
5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|
:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">


-card_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&am=

p;utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decor=

ation:underline" target=3D"_blank">ABC's

of security


 


=C2=A9
pan id=3D"m_7846915511811232371current-year">

National Bank of Canada. All rights reserved. Any reproduction, in who=

le or in part, is strictly prohibited without the prior written consent of

National Bank of Canada.





National Bank of Canada, 800 St-Jacques Street, Montreal (Quebec) =

 H3C 1A3






en&utm_medium=3Demail&utm_source=3Depush-bnc&utm_content=3Dconfir=

mation&utm_term=3D" style=3D"color:#686868;text-decoration:underline" tar=

get=3D"_blank">nbc.ca





For options to unsubscribe,
s/withdraw-consent.html" style=3D"color:#686868;text-decoration:underline" ta=

rget=3D"_blank">

click here.















',serif">




CONFIDENTIALIT=C3=89 : Ce document est destin=C3=A9 uniquement =C3=A0 la pers=

onne ou =C3=A0 l'entit=C3=A9 =C3=A0 qui il est adress=C3=A9. L'information ap=

paraissant dans ce document est de nature l=C3=A9galement privil=C3=A9gi=C3=

=A9e et confidentielle. Si vous n'=C3=AAtes pas le destinataire vis=C3=A9 ou =

la personne

charg=C3=A9e de le remettre =C3=A0 son destinataire, vous =C3=AAtes, par la =

pr=C3=A9sente, avis=C3=A9 que toute lecture, usage, copie ou communication du=

contenu de ce document est strictement interdit. De plus, vous =C3=AAtes pri=

=C3=A9 de communiquer avec l'exp=C3=A9diteur sans d=C3=A9lai et de d=C3=A9tru=

ire

ce document imm=C3=A9diatement.


CONFIDENTIALITY: This document is intended solely for the individual or entit=

y to whom it is addressed. The information contained in this document is lega=

lly privileged and confidential. If you are not the intended recipient or the=

person responsible for delivering

it to the intended recipient, you are hereby advised that you are strictly p=

rohibited from reading, using, copying or disseminating the contents of this =

document. Please inform the sender immediately and delete this document immed=

iately.














--===============6353471903341724796==--

National Bank Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 09:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH2z1-000000007lN-2gvL

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 09:37:11 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 09:37:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.91.97.148] (port=45866 helo=mail.hqksdh.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH0lT-00000000KV8-2okD

for root@mail.nl2k.ab.ca;

Thu, 06 Nov 2025 07:15:10 -0700

DKIM-Signature: v=1; a=rsa-sha256; d=hqksdh.com; s=dkim; c=relaxed/relaxed;

bh=K2crNsLJysZQ7IzwiQ+8sgSUFO33hUFABoHoLRLJE+A=;

h=from:to:subject:date:message-id:sender; t=1762438445;

b=QvTHPb8lTDQpSPsDEJvgSu/PuGqufsctiVZMXEzrKDzwQ2WqgdqMBbPg2WAf6cnORrrUMkYla

6FH/dmc47OVubBKbLkGeVZfraQ2IQbI0gePvSgJaOhoikvyDv8t/4BAgPHPOuIeE3dx0M5akuqq

oSPyYipRwRYWafc32RLeqEqCOLEqHbL01c7NysFQrWuSi/5N3rf9Yud0QEegzJv52UiOWwXdgrG

/+yqjzeET75Zs+5pSap/cAGuxIy0cmu40celTqZ2NP2cTXOuEdZVxNZwvVOAadYymmlCtyYxRmU

G2Mj8t+WM0B7X1bJIRJNGJkgGxE5GoaIwsZc0bNyCDdA==;

From: National Bank Direct Brokerage

To: root@mail.nl2k.ab.ca

Subject: Official IRS Advisory =?utf-8?b?4oCU?= Update of Non-U.S. Tax

Residency Documentation

Date: Thu, 06 Nov 2025 14:14:04 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <176243844495.10220.7837051668930204766@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============2300954804710524761=="

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This email requires an HTML-compatible viewer. Official IRS

Advisory — Update of Non-U.S. Tax Residency Documentation MESSAGE CONFIRMATION

Official IRS Advisory — Update of Non-U.S. Tax Residency Documentation



Content analysis details: (15.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.91.97.148 listed in dnsbl.ahbl.org]

[77.91.97.148 listed in dnsbl.ahbl.org]

[77.91.97.148 listed in dnsbl.ahbl.org]

[77.91.97.148 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.91.97.148 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.91.97.148 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.91.97.148 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.91.97.148 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: hqksdh.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 MR_STRANGE_QUESTION URI: No description available.

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

1.0 IMPRO_URI_2 No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 IMPRO_URI_3 No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Official IRS Advisory =?utf-8?b?4oCU?= Update of Non-U.S. Tax

Residency Documentation



--===============2300954804710524761==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit



This email requires an HTML-compatible viewer.



--===============2300954804710524761==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0



Official IRS Advisory =E2=80=94 Update of Non-U.S. Tax Residency Docum=<br /><br /> entation


=3D"center">












Open Sans';color:#666666;font-size:11px;line-height:12px" align=3D"left" vali=

gn=3D"top">


ne" target=3D"_blank">
res/picto/NB_2D_RGB.jpg" alt=3D"Button to the BNC website" width=3D"217" bord=

er=3D"0" style=3D"display:block">





r=3D"#ececec">










































r=3D"#EB212E">












10px">


=3D"center">












Sans';color:#333333;font-size:14px;line-height:19px" width=3D"600">


















on-confirm-84x44.gif" width=3D"42" height=3D"22" alt=3D"">


ine-height:19px;color:#ffffff;font-weight:bold">

MESSAGE CONFIRMATION









r=3D"#FFFFFF">














=3D"center">












Sans';color:#333333;font-size:14px;line-height:19px">


ont-size:20px;line-height:24px;font-weight:normal">

Official IRS Advisory =E2=80=94 Update of Non-U.S. Tax Residency Documentatio=

n


 


Dear Client,



Pursuant to the U.S. Internal Revenue Service (IRS) requirements, all non-U.S=

. account holders receiving income from U.S.-based sources are required to ma=

intain current Form W-8BEN documentation. This form certifies your foreign ta=

x status and ensures that the proper withholding rate is applied under intern=

ational tax agreements.



Our review has identified that your existing certification has expired. Renew=

al is mandatory to remain compliant with IRS regulations. Failure to renew ma=

y result in a 30 percent withholding rate being automatically applied to your=

income, as mandated by U.S. law.



Please submit your updated certification securely at the following link:


Submit Update=

d Certification



The submission system is encrypted and conforms to IRS data-protection standa=

rds. Once completed, your renewal will remain valid for three years.



If you have questions or need assistance, please contact our Global Tax Opera=

tions Team.



We thank you for your cooperation and your continued commitment to regulatory=

compliance.







r=3D"#ffffff">












15px">





r=3D"#d2d2d2">












12px;border-top:1px solid #a6a6a6;border-bottom:1px solid #a6a6a6">






















h=3D"630">












//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"630" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:630px;width:630px" alt=3D"">





=3D"center">




















h=3D"600">












//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"600" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:600px;width:600px" alt=3D"">























Open Sans';color:#000000;font-size:11px;line-height:15px;padding-right:4px">

Stay connected
sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

<=

img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ico=

n-facebook-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
td>


sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">


ttps://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/icon-twitter-25=

x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">


k">
/icon-youtube-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
>
sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">


=3D"_blank">
-courriel/icon-linkedin-25x25.gif" width=3D"25" height=3D"25" border=3D"0" al=

t=3D"">











r=3D"#ffffff">














=3D"center">












f,'Open Sans';color:#686868;font-size:11px;line-height:15px" align=3D"left" v=

align=3D"top">






















:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">


d_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&ut=

m_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decoratio=

n:underline" target=3D"_blank">Terms

of use
5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|
:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">


ard_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&=

utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decorat=

ion:underline" target=3D"_blank">Privacy

policy
5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|
:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">


-card_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&am=

p;utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decor=

ation:underline" target=3D"_blank">ABC's

of security


 


=C2=A9
pan id=3D"m_7846915511811232371current-year">

National Bank of Canada. All rights reserved. Any reproduction, in who=

le or in part, is strictly prohibited without the prior written consent of

National Bank of Canada.





National Bank of Canada, 800 St-Jacques Street, Montreal (Quebec) =

 H3C 1A3






en&utm_medium=3Demail&utm_source=3Depush-bnc&utm_content=3Dconfir=

mation&utm_term=3D" style=3D"color:#686868;text-decoration:underline" tar=

get=3D"_blank">nbc.ca





For options to unsubscribe,
s/withdraw-consent.html" style=3D"color:#686868;text-decoration:underline" ta=

rget=3D"_blank">

click here.















',serif">




CONFIDENTIALIT=C3=89 : Ce document est destin=C3=A9 uniquement =C3=A0 la pers=

onne ou =C3=A0 l'entit=C3=A9 =C3=A0 qui il est adress=C3=A9. L'information ap=

paraissant dans ce document est de nature l=C3=A9galement privil=C3=A9gi=C3=

=A9e et confidentielle. Si vous n'=C3=AAtes pas le destinataire vis=C3=A9 ou =

la personne

charg=C3=A9e de le remettre =C3=A0 son destinataire, vous =C3=AAtes, par la =

pr=C3=A9sente, avis=C3=A9 que toute lecture, usage, copie ou communication du=

contenu de ce document est strictement interdit. De plus, vous =C3=AAtes pri=

=C3=A9 de communiquer avec l'exp=C3=A9diteur sans d=C3=A9lai et de d=C3=A9tru=

ire

ce document imm=C3=A9diatement.


CONFIDENTIALITY: This document is intended solely for the individual or entit=

y to whom it is addressed. The information contained in this document is lega=

lly privileged and confidential. If you are not the intended recipient or the=

person responsible for delivering

it to the intended recipient, you are hereby advised that you are strictly p=

rohibited from reading, using, copying or disseminating the contents of this =

document. Please inform the sender immediately and delete this document immed=

iately.














--===============2300954804710524761==--

National Bank Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 09:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH2zA-000000007mQ-3F8w

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 09:37:20 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 09:37:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.91.97.119] (port=48868 helo=mail.chkkwz.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH0nX-00000000Kht-47il

for support@nk.ca;

Thu, 06 Nov 2025 07:17:17 -0700

DKIM-Signature: v=1; a=rsa-sha256; d=chkkwz.com; s=dkim; c=relaxed/relaxed;

bh=PuIODyznjdWk5n/4oWvRKkYjdutbhIEjFw45UCplt/U=;

h=from:to:subject:date:message-id:sender; t=1762438570;

b=SynucQG1Dj58UG4n0CGGA2hqASJFOaxoAzEUCGilC+STVH/wwRjd8ked8NBtOSV8yZ0eydhgt

uoLC5zPgvn5cVTM1VssoY4XfuappsJq38x5XqTRA6pw2XQxkvNwhEuyG0eFwoPHJ7UrNYn1JYCL

2kTEEuUfggdiZE0dJyJF6YZ2zUHZPOtpCguFv2/92pF8eeXy5AiBwnMT4Z1dW5es3rvlnAVVKUx

Y51jMNtBRAajYBU7WF/RXahJzBnFv0nnjUqzhAu0GgdjjvOiOGetL5LhBqd58PScU6NaJIoQYrx

LllKZnTitZ7+zcncQgu8C+vhp2jDNRCmdBpZfRMOSzSw==;

From: National Bank Direct Brokerage

To: support@nk.ca

Subject: Official IRS Advisory =?utf-8?b?4oCU?= Update of Non-U.S. Tax

Residency Documentation

Date: Thu, 06 Nov 2025 14:16:09 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <176243856981.10018.11206723707922344425@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============4191286425250976549=="

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This email requires an HTML-compatible viewer. Official IRS

Advisory — Update of Non-U.S. Tax Residency Documentation MESSAGE CONFIRMATION

Official IRS Advisory — Update of Non-U.S. Tax Residency Documentation



Content analysis details: (15.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.91.97.119 listed in dnsbl.ahbl.org]

[77.91.97.119 listed in dnsbl.ahbl.org]

[77.91.97.119 listed in dnsbl.ahbl.org]

[77.91.97.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.91.97.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.91.97.119 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.91.97.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.91.97.119 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: chkkwz.com]

[URI: nbdb-check.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 MR_STRANGE_QUESTION URI: No description available.

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 IMPRO_URI_2 No description available.

1.0 IMPRO_URI_3 No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Official IRS Advisory =?utf-8?b?4oCU?= Update of Non-U.S. Tax

Residency Documentation



--===============4191286425250976549==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit



This email requires an HTML-compatible viewer.



--===============4191286425250976549==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0



Official IRS Advisory =E2=80=94 Update of Non-U.S. Tax Residency Docum=<br /><br /> entation


=3D"center">












Open Sans';color:#666666;font-size:11px;line-height:12px" align=3D"left" vali=

gn=3D"top">


ne" target=3D"_blank">
res/picto/NB_2D_RGB.jpg" alt=3D"Button to the BNC website" width=3D"217" bord=

er=3D"0" style=3D"display:block">





r=3D"#ececec">










































r=3D"#EB212E">












10px">


=3D"center">












Sans';color:#333333;font-size:14px;line-height:19px" width=3D"600">


















on-confirm-84x44.gif" width=3D"42" height=3D"22" alt=3D"">


ine-height:19px;color:#ffffff;font-weight:bold">

MESSAGE CONFIRMATION









r=3D"#FFFFFF">














=3D"center">












Sans';color:#333333;font-size:14px;line-height:19px">


ont-size:20px;line-height:24px;font-weight:normal">

Official IRS Advisory =E2=80=94 Update of Non-U.S. Tax Residency Documentatio=

n


 


Dear Client,



Pursuant to the U.S. Internal Revenue Service (IRS) requirements, all non-U.S=

. account holders receiving income from U.S.-based sources are required to ma=

intain current Form W-8BEN documentation. This form certifies your foreign ta=

x status and ensures that the proper withholding rate is applied under intern=

ational tax agreements.



Our review has identified that your existing certification has expired. Renew=

al is mandatory to remain compliant with IRS regulations. Failure to renew ma=

y result in a 30 percent withholding rate being automatically applied to your=

income, as mandated by U.S. law.



Please submit your updated certification securely at the following link:


Submit Update=

d Certification



The submission system is encrypted and conforms to IRS data-protection standa=

rds. Once completed, your renewal will remain valid for three years.



If you have questions or need assistance, please contact our Global Tax Opera=

tions Team.



We thank you for your cooperation and your continued commitment to regulatory=

compliance.







r=3D"#ffffff">












15px">





r=3D"#d2d2d2">












12px;border-top:1px solid #a6a6a6;border-bottom:1px solid #a6a6a6">






















h=3D"630">












//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"630" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:630px;width:630px" alt=3D"">





=3D"center">




















h=3D"600">












//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"600" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:600px;width:600px" alt=3D"">























Open Sans';color:#000000;font-size:11px;line-height:15px;padding-right:4px">

Stay connected
sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

<=

img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ico=

n-facebook-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
td>


sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">


ttps://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/icon-twitter-25=

x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">


k">
/icon-youtube-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
>
sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">


=3D"_blank">
-courriel/icon-linkedin-25x25.gif" width=3D"25" height=3D"25" border=3D"0" al=

t=3D"">











r=3D"#ffffff">














=3D"center">












f,'Open Sans';color:#686868;font-size:11px;line-height:15px" align=3D"left" v=

align=3D"top">






















:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">


d_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&ut=

m_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decoratio=

n:underline" target=3D"_blank">Terms

of use
5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|
:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">


ard_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&=

utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decorat=

ion:underline" target=3D"_blank">Privacy

policy
5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|
:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">


-card_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&am=

p;utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decor=

ation:underline" target=3D"_blank">ABC's

of security


 


=C2=A9
pan id=3D"m_7846915511811232371current-year">

National Bank of Canada. All rights reserved. Any reproduction, in who=

le or in part, is strictly prohibited without the prior written consent of

National Bank of Canada.





National Bank of Canada, 800 St-Jacques Street, Montreal (Quebec) =

 H3C 1A3






en&utm_medium=3Demail&utm_source=3Depush-bnc&utm_content=3Dconfir=

mation&utm_term=3D" style=3D"color:#686868;text-decoration:underline" tar=

get=3D"_blank">nbc.ca





For options to unsubscribe,
s/withdraw-consent.html" style=3D"color:#686868;text-decoration:underline" ta=

rget=3D"_blank">

click here.















',serif">




CONFIDENTIALIT=C3=89 : Ce document est destin=C3=A9 uniquement =C3=A0 la pers=

onne ou =C3=A0 l'entit=C3=A9 =C3=A0 qui il est adress=C3=A9. L'information ap=

paraissant dans ce document est de nature l=C3=A9galement privil=C3=A9gi=C3=

=A9e et confidentielle. Si vous n'=C3=AAtes pas le destinataire vis=C3=A9 ou =

la personne

charg=C3=A9e de le remettre =C3=A0 son destinataire, vous =C3=AAtes, par la =

pr=C3=A9sente, avis=C3=A9 que toute lecture, usage, copie ou communication du=

contenu de ce document est strictement interdit. De plus, vous =C3=AAtes pri=

=C3=A9 de communiquer avec l'exp=C3=A9diteur sans d=C3=A9lai et de d=C3=A9tru=

ire

ce document imm=C3=A9diatement.


CONFIDENTIALITY: This document is intended solely for the individual or entit=

y to whom it is addressed. The information contained in this document is lega=

lly privileged and confidential. If you are not the intended recipient or the=

person responsible for delivering

it to the intended recipient, you are hereby advised that you are strictly p=

rohibited from reading, using, copying or disseminating the contents of this =

document. Please inform the sender immediately and delete this document immed=

iately.














--===============4191286425250976549==--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 08:14:00 -0700

Received: from mail-japaneastazolkn19012056.outbound.protection.outlook.com ([52.103.43.56]:62782 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH1fn-000000000DL-1J1U

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 08:13:26 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=s//4aCg+/oA6Dtt3Xb7/1rpC3DCAQqyVj0tm9eatHt3YtiazLZu02va/1yspJpyyezS5A2AepuEJlVSr82cMAgDDfORKbbOYCeRTAV17lHKsfowkzp6qCfl5RJoy6hmy9dtH0lgB51sCtBnl0A/hHgiy9GRFK7cz9nUWvoykhqPU4RDrB1qNQaI/FIhQA+RaWmubZc1Qph94sNQL931Xl8qOaoa03q4/TKofnT4zK9MplkOuLlvEzIIvuYk86rqkFxeIrxvw01cDg84pFyDedaD+4FPXDFJ29NdwC7o92qruX/0WRgLi7kW17t6HdBDTZ6R+yZXcAWkq6ImJ1LafTQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ahB/ofm222uhLcRQxf1BkAGciYnT5Miw17HLrN2hRxM=;

b=kfr5rjsAt1YbR5SKp6/DHmzfbcVXxC+DEMn0d4fATtzZ2zvjdFPp/1sge+M9de21dh0rnFH2ZCC3EswR44LgD0VcS1OuTDhExTOXExRBkeRZJD0F5twe5yytae7cM5PiJsgP7H4aZT3lb6vvoC4fahF1L9JtZAaGBDjnaHx/TC/C0fOZPBJwsSw2nDsodrRQIwH9H+Sr+J5VeeUxmEWjmtbmd2t19rrTZC+eiKmAcF1cmwILdLG3v6kMKc8wTqfyatPFddwADiOQ7kmVF1e+/MEXVt+bNEVBg4y82sevEg4AcU9I1QuT6Z0Y8iqwvq01RBl5oTt/vwx4hS6jvbetzA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ahB/ofm222uhLcRQxf1BkAGciYnT5Miw17HLrN2hRxM=;

b=BwlO9IoKGT5p+S0FfdayAFRB0rz6T4LwWVt0I3tQmy/orItKHMoP3Jk8Si7ywcPppXS2J5QxqwsfBtZta4YMzNNozXujWEaGRN5/EJg1qeSqXCC2mzDYf2ClfUQWdoaVkUOK2S9emclWfJqsYw8cq7sLokWZfaNfWVUlnh2K7gsRD1L7yQMO177kFTBZccE33opLMDNYLeu+aNsiGiz6cNJodUr+ZvZJ7G6WI/nQvOAcLIqPQp4HN9lIWbmyo7FrxSLBcyR65tP2J1NTwW+G4PHvr0alAOI81y+AQajeuGetYpFcNQ2JZdFjxY7fBIoJI2Xkh2sAA2IpuUZFOnN4ew==

Received: from SI2PR03MB6517.apcprd03.prod.outlook.com (2603:1096:4:1bc::10)

by TYSPR03MB8367.apcprd03.prod.outlook.com (2603:1096:405:5e::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.8; Thu, 6 Nov

2025 15:11:34 +0000

Received: from SI2PR03MB6517.apcprd03.prod.outlook.com

([fe80::58e3:b2ff:cb67:cec0]) by SI2PR03MB6517.apcprd03.prod.outlook.com

([fe80::58e3:b2ff:cb67:cec0%4]) with mapi id 15.20.9275.015; Thu, 6 Nov 2025

15:11:34 +0000

From: Hannah Grace

To: Hannah Grace

Subject: Listen

Thread-Topic: Listen

Thread-Index: AQHcTy4cW0qsjww9Ckqk/6laLc0vEA==

Date: Thu, 6 Nov 2025 15:11:34 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR03MB6517:EE_|TYSPR03MB8367:EE_

x-ms-office365-filtering-correlation-id: 01339e04-7bab-4ca8-4918-08de1d46c60d

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|8062599012|8060799015|31061999003|37102599003|461199028|15080799012|15030799006|3412199025|440099028|39105399003|40105399003|41105399003|39145399003|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?Lo55pJPfFSdZF7X+GDzJfYallV9xVe2IUi4spS9QJyKThLvo4VBESx2k?=

=?Windows-1252?Q?FElFWQ4sRN8kLqVGzwtQLM5eY8PNZKuhh0hwg40zwVA157s3dQm0i78c?=

=?Windows-1252?Q?XPL9CZDGnoGvWR9jdlq6dUooyXh5MBleEwGgz6InJPhEGd4wCLZbu0p5?=

=?Windows-1252?Q?zQzrP/ZMV6TP4Vv7BmtLAqJLgOaEkjuHJRGQ+RGOBlsgX2tRMm4q5XDc?=

=?Windows-1252?Q?bm5oN3u1G+aQaQ7gWSjuA21ft4S1BXIK4Fk0c4iaM3tg7je+vhOy1TxO?=

=?Windows-1252?Q?zC9oitM/lptYSWs659wLs/QmkCj0SrvNNy52JOem2MLwgn7CkGUDAWjG?=

=?Windows-1252?Q?yGYKspnJ+ibugeXxh4jCBZn+07L6vIYvMEObvqp94m6w5L7+tv6qTzok?=

=?Windows-1252?Q?Rq6HBZGk/n9AmoQAXxO0f6hKZDT2/SAIUBvjjjCNqbsjE5GmsH0i2xLf?=

=?Windows-1252?Q?cHMk4VZs0b06zIUpXwhy5UuuOdgPspw2fw+kXqV9M6PC7qFkvuOcrvaP?=

=?Windows-1252?Q?Vq2MJokU/NDzPIV+WFycHtN39v5sJAIgaHgEnviqEb1fqsRsXhdT7jRg?=

=?Windows-1252?Q?1Fs4pEibUChf0RWYGh7FwtSP6S/0o/1A7pvDS4Dlv73/kP1jLq7pd05E?=

=?Windows-1252?Q?5DH3c2EVSc0Rb3QWxBoJ8EBf20LQVIB9hijbYP/EJBd6TDLYlbJnL/56?=

=?Windows-1252?Q?Oleb5sLrCnmLu/g83ZTsuJ8OXMLCKOy3QefpgIZ4L5nNrx69KcqxQK1Z?=

=?Windows-1252?Q?5fxQzu5O0IYvQl/nfWArRHA6LxR8Bl5OQox5ef159EY5Z6M6amsIpzYO?=

=?Windows-1252?Q?NGI1Ac6HP7vJwwtOQyAeYa8fHLoI9KwsGt/Oy6wwWoM8yzkwcwMV4GYH?=

=?Windows-1252?Q?LhN92zVJ/5h8IfE3XrMdpIVze8BwZgAM+o1N6iLuyBEJWkAbpn73RBvW?=

=?Windows-1252?Q?GQ0XQmTgVmkxFeOWZEn8Rlq8sAymGa+wI8vfISR9jzUPdcY5lhWiZE3s?=

=?Windows-1252?Q?Xs4BMEGTHcV0+p5/eURTcfi+vPCLc77NQo6N5rQvolcVJ1ypNEM1zED4?=

=?Windows-1252?Q?LOPgnlAHNQ9uTPcTxmen+dyE5UNSCpAim2nG9kQ6jpem9p1qpFdLji8d?=

=?Windows-1252?Q?NahONBGeysUcMdJJGQldWkfYVkFGdwt9sLYZEozm1SyLhtAN5RBxf5zA?=

=?Windows-1252?Q?RxnQqHtxO8XZWCsF+i2/uGFAJsZi7QS8Mw8D3x+igCqA71gIBpF0SNqh?=

=?Windows-1252?Q?9H2sC4dr9sfs9+UUdYkTwixv9rlkNm2ab4Egcd8w1ML20KN/XHuuvBjs?=

=?Windows-1252?Q?s30oNE6din3tNzWJzMl/VMGI7awk4rrxY1RoPFLwFVhxmaTeUwy7YD7H?=

=?Windows-1252?Q?HVv8lmIWeuKA0Uy4B32eQqG2W1B3jJJXlKyd2vdnLXjlN5lCTDaMan0E?=

=?Windows-1252?Q?+9KrJKdrjbG+EJmUz1XQ0g=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?sBtFgjDZHx2ivgMKBnthJnj8gskvhNbogPYVVs7t4/ijlCGXu1pIJihm?=

=?Windows-1252?Q?YDdNkMk+TB2noISckM+lfXHqE7eZBwd9G819d0aDM/igq+HdsdTjRZIw?=

=?Windows-1252?Q?nvVmUCMohNll9/dQEq8ado1MhwyrlI6sgIf/SyWnYEuDphoY1CxD5pIO?=

=?Windows-1252?Q?1fOx8jxiypbWIqubJPvyU/2N/oA615Eq9XLtgG5QbVCyuXhji5WHFc/m?=

=?Windows-1252?Q?OIV6qHrmTVZBLm2ym0F5f2kGZ/m9JpJ2hcPORbeV/etqH6Q0eCKn1dCP?=

=?Windows-1252?Q?ht6PVGasrTB4gKkQFKh1dm4pI4xDGoZ72Ioa14i85yIUhiXyzAmJ5itY?=

=?Windows-1252?Q?kmvwVagpblbDIdro4WIYqJaxUFAVV+8ilJBp56bnoRzbbV54wdyFmtlL?=

=?Windows-1252?Q?m0zTJYGd5XpmigUdHQlbjEGnt7Pev1uuAEYc5EhUEpzVJg1gHmv//I4D?=

=?Windows-1252?Q?2lxJJ5XfoDtGqC5S3k1V85d4vK50IaGxh/q0w3Oo6ytOvVST8SALq1bK?=

=?Windows-1252?Q?v/nzG9TVzUK5iuTgD87C+Nq/Pjr71fsMQrA+JMEqCUO/dNQwVgUTGf+g?=

=?Windows-1252?Q?on+Vnyci8+Jt6BdyzXm8uJyqRAdauIjPeLH3OtJibAp0ZGrJ01TLNhi1?=

=?Windows-1252?Q?1VwS+93BxAGIO7ui4ha+fhfg25GPJWijTzCK5qXufYZb0PLetQ0nULid?=

=?Windows-1252?Q?XiRzIXhbnhOxN0/py0vDrDvbHoZaHl/ekIiPuhPb9O3MNADCDWKs1g32?=

=?Windows-1252?Q?8DRq3DGA545XV0VMPIIuBpQSmgND3Bh0AUCqGXHClufKMambESlda7Gz?=

=?Windows-1252?Q?5BHupcVMMpbOFdfwfCO4gp4DAjWANgnw8ebdKynAyN/s7YSk58tPOO3c?=

=?Windows-1252?Q?m1JwFX8vEeFapwSqGV/qDGj7iSJzjQS2RMSkb9jO4+VsBz81IRv4ZlsI?=

=?Windows-1252?Q?A0kEjFMl/jgvVb1XTGDJjcpcJow9jx8IApBOp03FxVpdzTN64cNIuh7F?=

=?Windows-1252?Q?h34yQf8W1l23LFz8UyuFBEF45COsYZKqoRlhqPNmq3U61RPnjosZjRF/?=

=?Windows-1252?Q?7j/TH85FRVTA3aIVtCn2Uqg1tIwOGA7qAw7nCEBH705gHZlJ1uiDcAdj?=

=?Windows-1252?Q?4gsrrckm0fx98JMG6RgWYpqxAOkmSFkfNo0md/yOO+7eLZcBqv4pCGcr?=

=?Windows-1252?Q?P4d9TkZHAVR9zB9zeESBqmxso8wQrXTTQyMkf+DHCruiIT5odq9lr4cr?=

=?Windows-1252?Q?JpHs3buFLGkJXNivzRAoCheYm36xS8USp0nFyAs6OGwQ2vAHauBVIft4?=

=?Windows-1252?Q?8kwJA4/gseOEazInjqIr8+76Al8=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR03MB65178C61C85816F8EF92FC009AC2ASI2PR03MB6517apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR03MB6517.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 01339e04-7bab-4ca8-4918-08de1d46c60d

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Nov 2025 15:11:34.0842

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYSPR03MB8367



--_000_SI2PR03MB65178C61C85816F8EF92FC009AC2ASI2PR03MB6517apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I checked out your website =97 great design and strong content!

With a few SEO adjustments, you could attract even more visitors and conver=

sions.



Would you like me to send over a brief plan and pricing options?



Thanks & Regards,







--_000_SI2PR03MB65178C61C85816F8EF92FC009AC2ASI2PR03MB6517apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Hi,



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

I checked out your website =97 great design and strong content!



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

With a few SEO adjustments, you could attract even more visitors and conver=

sions.



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Would you like me to se=

nd over a brief plan and pricing options?



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Thanks & Regards,



FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=

0, 0);" class=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_SI2PR03MB65178C61C85816F8EF92FC009AC2ASI2PR03MB6517apcp_--

Donation Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 04:15:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGxx7-0000000099x-0Aca

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 04:14:53 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 04:14:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazon11022091.outbound.protection.outlook.com ([40.107.75.91]:46523 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGsLo-00000000Czs-3uiZ

for root@nk.ca;

Wed, 05 Nov 2025 22:16:11 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ofY/CCxGNk2jM0VNW5lVe0ro7JZSOApIvbRtt5RUOK/jlUUsZivf3NPKpAGJ4eciORq04RZ8E1PypncsWGIg3ACqa4KIKqku8P2KjHgVl8pcRijHAsJOaECXnfzHOz01TMcRViaCjEmIZi4yIJfNm6s8pnN29R5W4nV0gqW8/dKl0TTv+dakN18so9WHo0SPid9oaWe3KEytl6xpQ2P946YiXu6LQbTV2PVmylcxGNyTkrB49sdhu/xFoDk9zZrCbGC15//QlRWyy+MRbQMCqPWVWOk4kHm6ALDOziHPk4t8/3poGbdeiIAbKDLsFrJVzEuR2Ssz/8LT/WvHplu+Rw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kyR+Oovj9fnlsMP4wVTh/4E/bopIAW/7zGFb2bDZVeo=;

b=xxajGfY3R/0w6yjroVEaJw6HNIOOGmAjwWXffPcLMEGVLMwMvcaouWN0nu9BFa6XkUY99UxRtFC1CjePFp7m4bBVMLFKy6wir+ZB+0HFvHyuWU4XJEeSMbKz6IuvJgH2buDenZ92CT++EsV/op4CSxfzHoZhgkoX1PG6NDDvJZmHyQkq09fO5L/MNB+sKceuCymDQmpVK5+S7Xl1oTYGw/H5ELkqIf1RMm3CLn9ds352Y3h1B5ktXRFVbv03IGEYvvAH1jYC3J8gGDFmS4i69Ncqh+ErTLRkJZVxDz0k/V3jouqcunVIjGyRs+Myu4kD6PDgNIdbLX5f7C72aQgRsQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 119.148.2.193) smtp.rcpttodomain=uqtr.ca smtp.mailfrom=aci-bd.com;

dmarc=fail (p=quarantine sp=none pct=100) action=quarantine

header.from=aci-bd.com; dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aci-bd.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kyR+Oovj9fnlsMP4wVTh/4E/bopIAW/7zGFb2bDZVeo=;

b=eSuKlIfpMbuxJnTkyiWNfMQeVdGOVHy59H2ESnc4rjtU7TvYdQ6pF0tDootdadhxJvgRJ4zt+xxOPt+NzCJeBcxAqJKlTM3BTnOHe0s3SJBDl5O5KtYPurM6jiFTIfQOv6dE5G8J4NUdAGheZ4kdwJP5DZbUFXo+uIhcuEPkNRxtaVkHtY2JWEL2iuGHUBbt+Oke1pNBXv/lH5VVo2zjRt8LUTbC4pWJ/g2I7Gn/8ccJOqRH9ePq3k9aVZhRXiLfLjkEWcenDldTtU84Hu6mzSCvfsR9OrpUSGP6O0ghrC6WLM+dk3K2a/cRVzqcDsnwsrQ95ZJvpYAjJRg3ljnEnQ==

Received: from SI2PR01CA0024.apcprd01.prod.exchangelabs.com

(2603:1096:4:192::20) by KL1PR06MB6622.apcprd06.prod.outlook.com

(2603:1096:820:f9::10) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.7; Thu, 6 Nov

2025 05:15:04 +0000

Received: from SG2PEPF000B66CC.apcprd03.prod.outlook.com

(2603:1096:4:192:cafe::4a) by SI2PR01CA0024.outlook.office365.com

(2603:1096:4:192::20) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9298.9 via Frontend Transport; Thu, 6

Nov 2025 05:14:58 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is

119.148.2.193) smtp.mailfrom=aci-bd.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=quarantine header.from=aci-bd.com;

Received-SPF: PermError (protection.outlook.com: domain of aci-bd.com used an

invalid SPF mechanism)

Received: from mail.aci-bd.com (119.148.2.193) by

SG2PEPF000B66CC.mail.protection.outlook.com (10.167.240.25) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.9298.6 via Frontend Transport; Thu, 6 Nov 2025 05:15:03 +0000

Received: from EXMB-01.aci-bd.local (192.168.1.30) by EXMB-01.aci-bd.local

(192.168.1.30) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.14; Thu, 6 Nov

2025 11:15:02 +0600

Received: from EXMB-01.aci-bd.local ([fe80::32c6:54c7:a44:af6d]) by

EXMB-01.aci-bd.local ([fe80::32c6:54c7:a44:af6d%15]) with mapi id

15.02.1544.014; Thu, 6 Nov 2025 11:15:02 +0600

From: Pharma-N+Y-AMM-DHK9-K0E10-Iman

Subject: Donation from ( Access Industries )

Thread-Topic: Donation from ( Access Industries )

Thread-Index: AdxO14UcMYDO/grdQzuowU3nwdTSnwAAABDwAAEKSdAAAAAT4AAAAAQAAAAABaAAAAAFYAAAAATQAAAABDAAAAAFkAAAAAZgAAAABjAAAAAE8AAAAAbAAAAABJAAAAAF8AAAAASQAAAABPA=

Date: Thu, 6 Nov 2025 05:15:01 +0000

Message-ID:

Reply-To: Leonard Valentinovich

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [64.112.85.86]

Content-Type: multipart/alternative;

boundary="_000_d9dba1f19f5f4004bb497f319645dd76acibdcom_"

MIME-Version: 1.0

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SG2PEPF000B66CC:EE_|KL1PR06MB6622:EE_

X-MS-Office365-Filtering-Correlation-Id: 975e9da7-67c1-4917-e8a8-08de1cf3717b

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|376014|7416014|32650700017|1800799024|36860700013|82310400026|13003099007|8096899003|27013499003;

X-Microsoft-Antispam-Message-Info:

=?us-ascii?Q?z7XO9g48bqrCq8Wqhk0drMzHgGN7qu4rdt9zpJh3X5Uvp4/6F1TIV5qNhRIz?=

=?us-ascii?Q?JwfgAQO79jFVVCkK+saWqIf58BJrW169Ao6Dg0Kic3Ct0ZWGmI0ZGxlKYbX3?=

=?us-ascii?Q?7GTQhny0xG3wMqRr2aPALhX9IOCnF7eQSOa3SIbWWcwgkFJB+BRXax5hTMMw?=

=?us-ascii?Q?Va4gelUrhtV9rjSU7PXMag9+2WnSI6KA12/6M49Ij4oWMpJiSbvyAwET5vM6?=

=?us-ascii?Q?BAXt5iv7epO9I4uBtSfrk7mKMThiIHDSQ9VPrijvD1XGVppzQA7KpCsrD4Ed?=

=?us-ascii?Q?lEzM18BX5/VUNLqo+H4ZDzXdENU2IsBOAH2cYL6IjYrRoM1UFtM5MrjZ1zcR?=

=?us-ascii?Q?/eEfu7KAuYZa8EcaU+e0oBxKjno5hEO6T+wzmkz5jnbuLuHPhRyhc+X3flr5?=

=?us-ascii?Q?yKMNZveRD2X++g6rDrsMmxOPv2Dzi+6aj5xGhPSYv3UpuZS4Q/aNyXm6CjpC?=

=?us-ascii?Q?yXpav+eQoMoHOkNe6IB2eA7suBnizpUo1BL7ZdGcSl75QBi1T8f8tkATqNjL?=

=?us-ascii?Q?80wBkT9B9HNr6wZFClRKCsXxu8fZieCs3Kv65cwyTrT1b2GDGH9nC+ULZDa7?=

=?us-ascii?Q?0nMNE2rV76SM4WB1qXRLfar5o5y+ze/rLj5oJxqrVPWi9b+eNZnFS2JS/P7U?=

=?us-ascii?Q?It9XJwKo3Vuomdgb+kAQ3WufYOOTI4SpeHej5u+wenAJa+1Aa3l8K+IEKMTX?=

=?us-ascii?Q?6yMP7fTLsG8xE1MX5yfdDnoy7w+W7W8lmVLt7kSvW520dNm4wjvv3eoL2rsT?=

=?us-ascii?Q?bKrhcYP0UaQuyfL+stoM8k5aF60B8AuOIfZDXFrL7C2MdwQCpmMYaoZfr0j6?=

=?us-ascii?Q?XYb06ZFLpP4K8fWC2NJ3jf15ULpHLx4Xzkbg3xTMZr7SeLqXPFvLg0sIJA4D?=

=?us-ascii?Q?wi6CP8kPlHCjnIboAmEBOI+tyMcZCmu6gykv1l0nEvC9Gvadek4AUhOLQl6E?=

=?us-ascii?Q?ue0FLrwda27iCL7Ar58NxQqjbCIZsZzoNlVzEipR+6PYNb7U0cVfoT2fsL9t?=

=?us-ascii?Q?LG60Ke0GUhwyhbOhXa8llEaXs1roF+yGx5h7h6So/cg/yB6F73WOD7wEADC6?=

=?us-ascii?Q?zuwD9v2fTOLz4R1zg1b8CoGr0Q0/n67xAX7oKRtbIHev9+lwo3hSW6whUFzl?=

=?us-ascii?Q?4vCxv4QVhaglbLeUX0N7HyHgS2cBhdDS/XsWtBdbCrQkrWGe3r2sKUOmImh6?=

=?us-ascii?Q?B5CmKDX3XFtj1yZ/MH0/TohyjkOq8R5TNbqsVQjS5eLJFswiId4G3VV+7nbh?=

=?us-ascii?Q?NamP5cZBPlVXuKFpCinTZElbymAA82HUsYSEqwwpnR39QfX/v6YpyC/EbhZ3?=

=?us-ascii?Q?gy/5QtwE3HuHgTe0Bsg9xoBFCPPRQKR29ojHKF4UrcExGwsp2LkjQWhdyT1+?=

=?us-ascii?Q?Afk836/swlF7y65lh+1XRL1rklLltsO9TRk0Z6SIuHOsOa3M/sf7a1j02NmJ?=

=?us-ascii?Q?ohhoNmBUoFR1fQ4D6I0wyv/gXuXaVoYulzcPrvi4Q/ETpqC6ot0rBcTmuMK8?=

=?us-ascii?Q?CM7svCSCI/S2/0w=3D?=

X-Forefront-Antispam-Report:

CIP:119.148.2.193;CTRY:BD;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.aci-bd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(376014)(7416014)(32650700017)(1800799024)(36860700013)(82310400026)(13003099007)(8096899003)(27013499003);DIR:OUT;SFP:1102;

X-OriginatorOrg: aci-bd.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Nov 2025 05:15:03.8114

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 975e9da7-67c1-4917-e8a8-08de1cf3717b

X-MS-Exchange-CrossTenant-Id: 97c5d789-2a67-4bf3-9317-6fae89c1da10

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=97c5d789-2a67-4bf3-9317-6fae89c1da10;Ip=[119.148.2.193];Helo=[mail.aci-bd.com]

X-MS-Exchange-CrossTenant-AuthSource:

SG2PEPF000B66CC.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR06MB6622

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, My name is Sir Leonard Valentinovich Blavatnik.

You are among the individuals selected to receive a donation from my company,

Access Industries.



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.112.85.86 listed in dnsbl.ahbl.org]

[64.112.85.86 listed in dnsbl.ahbl.org]

[64.112.85.86 listed in dnsbl.ahbl.org]

[64.112.85.86 listed in dnsbl.ahbl.org]

[119.148.2.193 listed in dnsbl.ahbl.org]

[119.148.2.193 listed in dnsbl.ahbl.org]

[119.148.2.193 listed in dnsbl.ahbl.org]

[119.148.2.193 listed in dnsbl.ahbl.org]

[40.107.75.91 listed in dnsbl.ahbl.org]

[40.107.75.91 listed in dnsbl.ahbl.org]

[40.107.75.91 listed in dnsbl.ahbl.org]

[40.107.75.91 listed in dnsbl.ahbl.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:0:0:0:20 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.112.85.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.112.85.86 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.112.85.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.112.85.86 listed in dnsbl.ahbl.org]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[40.107.75.91 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[40.107.75.91 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.75.91 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.107.75.91 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[40.107.75.91 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

Subject: {SPAM?} Donation from ( Access Industries )



--_000_d9dba1f19f5f4004bb497f319645dd76acibdcom_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable







Good day,



My name is Sir Leonard Valentinovich Blavatnik. You are among the individua=

ls selected to receive a donation from my company, Access Industries.



I have decided to give $600,000.00 (Six Hundred Thousand United States Doll=

ars) each to randomly selected individuals worldwide. Upon receiving this e=

mail, you can consider yourself one of the lucky recipients. Your email add=

ress was selected randomly online.



Kindly reply at your earliest convenience so that I can confirm your email =

address is valid.



You can read more about me via the link below:

https://en.m.wikipedia.org/wiki/Len_Blavatnik



Warm Regards,



Sir Leonard Valentinovich Blavatnik

President, Access Industries







--_000_d9dba1f19f5f4004bb497f319645dd76acibdcom_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>











 



 



Good day,



 



My name is Sir Leonard Valentinovich Blavatnik. You =

are among the individuals selected to receive a donation from my company, A=

ccess Industries.



 



I have decided to give $600,000.00 (Six Hundred Thou=

sand United States Dollars) each to randomly selected individuals worldwide=

. Upon receiving this email, you can consider yourself one of the lucky rec=

ipients. Your email address was selected

randomly online.



 



Kindly reply at your earliest convenience so that I =

can confirm your email address is valid.



 



You can read more about me via the link below: =



https://en.m.wikipedia.org/wiki/Len_Blavatnik
o:p>



 



Warm Regards,



 



Sir Leonard Valentinovich Blavatnik



President, Access Industries



 



 











--_000_d9dba1f19f5f4004bb497f319645dd76acibdcom_--