TD Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 12:06:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMWRv-00000000626-2D1W

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 12:05:39 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 12:05:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp1.guam.net ([202.128.81.31]:39832 helo=smtp4.guam.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMVRz-00000000BkF-20SE

for doctor@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 11:01:46 -0700

Received: from localhost (localhost [127.0.0.1])

by smtp4.guam.net (Postfix) with ESMTP id 8CF6B2006C11;

Sat, 22 Nov 2025 04:00:29 +1000 (ChST)

DKIM-Filter: OpenDKIM Filter v2.11.0 smtp4.guam.net 8CF6B2006C11

X-Virus-Scanned: amavis at guam.net

Received: from smtp4.guam.net ([127.0.0.1])

by localhost (dpacsmtp.guam.net [127.0.0.1]) (amavis, port 10024) with ESMTP

id x56zZnhd9LCi; Sat, 22 Nov 2025 04:00:28 +1000 (ChST)

Received: from [185.170.214.235] (121-55-250-127.d.c100.guam.net [121.55.250.127])

by smtp4.guam.net (Postfix) with ESMTP id 886312006D59;

Sat, 22 Nov 2025 03:59:28 +1000 (ChST)

DMARC-Filter: OpenDMARC Filter v1.4.2 smtp4.guam.net 886312006D59

Authentication-Results: OpenDMARC; dmarc=fail (p=none dis=none) header.from=teleguam.net

Authentication-Results: OpenDMARC; spf=fail smtp.mailfrom=teleguam.net

DKIM-Filter: OpenDKIM Filter v2.11.0 smtp4.guam.net 886312006D59

Content-Type: multipart/alternative; boundary="===============1518565766=="

MIME-Version: 1.0

Subject: =?utf-8?q?Mise_=C3=A0_jour_importante_de_votre_compte!?=

To: GreenPay Service Center

From: "TD Bank"

Date: Fri, 21 Nov 2025 09:59:26 -0800

Message-Id: <20251121180029.8CF6B2006C11@smtp4.guam.net>

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: TD Bank Dear Customer, We are pleased to inform you about

recent updates to your TD Bank account. Please review your account details

by following the button below. Go to TD Bank Sincerely, TD Bank Cu [...]



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[121.55.250.127 listed in dnsbl.ahbl.org]

[121.55.250.127 listed in dnsbl.ahbl.org]

[121.55.250.127 listed in dnsbl.ahbl.org]

[121.55.250.127 listed in dnsbl.ahbl.org]

[202.128.81.31 listed in dnsbl.ahbl.org]

[202.128.81.31 listed in dnsbl.ahbl.org]

[202.128.81.31 listed in dnsbl.ahbl.org]

[202.128.81.31 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[121.55.250.127 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[121.55.250.127 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[121.55.250.127 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[121.55.250.127 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[121.55.250.127 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[121.55.250.127 listed in sbl-xbl.spamhaus.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?utf-8?q?Mise_=C3=A0_jour_importante_de_votre_compte!?=



You will not see this in a MIME-aware mail reader.

--===============1518565766==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

List-Unsubscribe: mailto:?subject=unsubscribe>"

List-Unsubscribe: mailto:?subject=unsubscribe>"

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



TD Bank Dear Customer,

We are pleased to inform you about recent updates to your TD Bank account.

Please review your account details by following the button below.

Go to TD Bank =



Sincerely,

TD Bank Customer Relations

dddddddd

--===============1518565766==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

List-Unsubscribe: mailto:?subject=unsubscribe>"

List-Unsubscribe: mailto:?subject=unsubscribe>"

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>




rt" />










ps://authentication.td.com/uap-ui/assets/img/td-logo.png"> =



TD Bank




Dear Customer,



We are pleased to inform you about recent updates to your TD Bank accoun=

t.



Please review your account details by following the button below.


IV>G=

o to TD Bank =




ter"> 




ter">Sincerely,
TD Bank Customer Relations

dddddddd
L>

--===============1518565766==--

Web/SEO/App Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: daave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 12:06:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMWS8-0000000063x-1zfc

for daave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 12:05:52 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 12:05:52 -0700

Resent-Message-ID:

Resent-To: daave@doctor.nl2k.ab.ca

Received: from mail-pj1-f65.google.com ([209.85.216.65]:47266)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMWR5-000000005KG-31eS

for sales@nk.ca;

Fri, 21 Nov 2025 12:04:57 -0700

Received: by mail-pj1-f65.google.com with SMTP id 98e67ed59e1d1-3437af8444cso2491992a91.2

for ; Fri, 21 Nov 2025 11:04:01 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=appwebzone-com.20230601.gappssmtp.com; s=20230601; t=1763751835; x=1764356635; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=4fMbgCZPmFCU66qVR5NpFCCVSUoRk70uxg7VPOnrMgk=;

b=TQxHlXgsvX0wLhaWY6vL0q5DXG48qO+HMH0XeQuXUVD0LOrPiZJWbcji3df4Gt4geh

ugKTHfOrt6YSwWU2Mb81s8PgDYxyBckW/42MBV7R+tgwNZsC3I2+oTfckTSikAZO65h9

IiF2r8OPox83Pqrzzn20fMwNobC9KkvZKjFbXjbUQt8lx7v61XHAdsJTBe3XQNU3YpvG

+RvRXMvAA3+/dTMLbSzcQNPx/sIEpcP/4Hfy/lXcvRG8AfK/V7wb+tZnMI717wS/ePDY

ThKevtbffH/NM+f+0dh5HujqvywKYzg1i4teo6KthS4AVDCjLpszfxzKRrelN0ciznxv

d7DA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1763751835; x=1764356635;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=4fMbgCZPmFCU66qVR5NpFCCVSUoRk70uxg7VPOnrMgk=;

b=knRo9GONw0YbhOCVsWujN8hI/KGLyAhEHNRx6Sa+/i+6Tskc7yuyDVG7/g6/SE/CFW

SyjA1nCGKcupFUMv9kPXQko3sWqHBUWOkpW3RhxVyGq+JSMcScVQEKteFgjzRwj7enhC

XrWxWpgHO89RYJQ7IbDsPXZH3Xcs+19q3rg2/H83oCQ5VT6WUOC7P7+8qjgGsReavepg

8OxOleCSogT86XlUS9uyOreTTu6IO2Q0cpAFIdEwo2++d9T9Y+PluD0wBDWcOWOyvz1k

NpkNH4c2D6HHwSulzSQ2HnrRly5bc4GvOszR9MUmhkJA3xaszyRKZi3DX7dQ9wAbNPW0

EmLQ==

X-Gm-Message-State: AOJu0Yz1f0/sa77lKtGSTQ6ovKdiG8laGUTahMa+3nSldxyh5LJOdNGC

jkJwHyrJYjDeSvS/T722couuVuv9dc/lUhzL+EVEOtL2KAdaZ4nuQ7TpqYuKIbeyM8CRJFF2vOx

AdoX0s/8=

X-Gm-Gg: ASbGnctev1G6yxb7xsPEa5aUopiFkzWZEuOtl2/5yv0IvHTY4zGQO12RoCpHFj0Z25t

xP1ibux4+TyvDZRYDurj+stbqXgd5g3cPt7x6tlIAitPOwpm9YUPn41IAZdPd17PKaHGJa2EnO7

T/YMqVRTe+x/Ym1jD3WNayOzYGBmk+k5JRqhzXnFa/NLTKaYNy2M5zmzoTPAGihZ+8neyPcbnVj

nnaXNz1K5VokLDwb7DBXOaws5gfHZaGipsm7Jc3EoVxKqsvpMJ0BVQJm85vY2yHZ7EzJ8IpxGjz

gPxVXh21rOb7sNvTQRmQMnz7pMjJz5TOYPBVeSEGOxQsZP+Qn3W6CcvhruSGnPKXYEIPnhaZaek

fGk8WuHETNoMbrKI1iNIx0aJDrSs5gTDrIQUuWKHCArpxLDNHolQVXAPSeBorA631Qmq53tgZPI

LBxQ/qtpFNbGqsRYL3qIMsbHcp8H0=

X-Google-Smtp-Source: AGHT+IExdrN77FZoiaTJ6NIRHMcBFw5dspwamiL2QdGbyo0vSmjGZ+0l3/mPdQxJoEI4txPmXgsm9w==

X-Received: by 2002:a17:90b:2d85:b0:343:688e:3252 with SMTP id 98e67ed59e1d1-34733e77513mr4385832a91.12.1763751834717;

Fri, 21 Nov 2025 11:03:54 -0800 (PST)

Received: from DESKTOPMNUB0HV ([106.219.159.164])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7c3ed076eb3sm6804134b3a.1.2025.11.21.11.03.53

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 21 Nov 2025 11:03:54 -0800 (PST)

From: "Naina"

To:

Subject: Quote?

Date: Sat, 22 Nov 2025 00:33:31 +0530

Message-ID: <29a7701dc5b19$94b37090$be1a51b0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_29A78_01DC5B47.AE6BAC90"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adxa7JK99Eu8JNE1SEuhnD/pTj/Dqw==

Content-Language: en-in

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi sales@nk.ca, I was checking your website www.nk.ca and

see you have a good design, and it looks great, but it's not ranking on Google

and other major search engines. Do you want more targeted visitors on your

webs [...]



Content analysis details: (8.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[106.219.159.164 listed in will-spam-for-food.eu.org]

[106.219.159.164 listed in will-spam-for-food.eu.org]

[106.219.159.164 listed in will-spam-for-food.eu.org]

[106.219.159.164 listed in will-spam-for-food.eu.org]

[106.219.159.164 listed in will-spam-for-food.eu.org]

[106.219.159.164 listed in will-spam-for-food.eu.org]

[106.219.159.164 listed in will-spam-for-food.eu.org]

[106.219.159.164 listed in will-spam-for-food.eu.org]

[209.85.216.65 listed in will-spam-for-food.eu.org]

[209.85.216.65 listed in will-spam-for-food.eu.org]

[209.85.216.65 listed in will-spam-for-food.eu.org]

[209.85.216.65 listed in will-spam-for-food.eu.org]

[209.85.216.65 listed in will-spam-for-food.eu.org]

[209.85.216.65 listed in will-spam-for-food.eu.org]

[209.85.216.65 listed in will-spam-for-food.eu.org]

[209.85.216.65 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[106.219.159.164 listed in dnsbl.ahbl.org]

[106.219.159.164 listed in dnsbl.ahbl.org]

[106.219.159.164 listed in dnsbl.ahbl.org]

[106.219.159.164 listed in dnsbl.ahbl.org]

[209.85.216.65 listed in dnsbl.ahbl.org]

[209.85.216.65 listed in dnsbl.ahbl.org]

[209.85.216.65 listed in dnsbl.ahbl.org]

[209.85.216.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[106.219.159.164 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[106.219.159.164 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[106.219.159.164 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[106.219.159.164 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[106.219.159.164 listed in sbl-xbl.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.65 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.65 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Quote?



This is a multi-part message in MIME format.



------=_NextPart_000_29A78_01DC5B47.AE6BAC90

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi sales@nk.ca,



I was checking your website www.nk.ca and see you have a good design, and it

looks great, but it's not ranking on Google and other major search engines.

Do you want more targeted visitors on your website?



We can place your website on Google 1st page. Yahoo, Facebook, LinkedIn,

YouTube, Instagram, Pinterest etc.).



May I send you a quote, SEO Packages? If interested.



Thanks & Regards

Naina





------=_NextPart_000_29A78_01DC5B47.AE6BAC90

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>


style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:normal'>
n style=3D'font-family:"Cambria","serif"'>Hi sales@nk.ca,

I was =

checking your website
style=3D'font-family:"Cambria","serif"'>www.nk.ca
style=3D'font-family:"Cambria","serif"'> and see you have a good design, =

and it looks great, but it’s not ranking on Google and other major =

search engines. Do you want more targeted visitors on your =

website? 

We can place your website on Google 1st page. =

Yahoo, Facebook, LinkedIn, YouTube, Instagram, Pinterest =

etc.). 

May I send you a quote, SEO Packages? If =

interested. 

Thanks & =

Regards
Naina



------=_NextPart_000_29A78_01DC5B47.AE6BAC90--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 12:06:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMWRM-000000005y8-2Uxz

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 12:05:04 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 12:05:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013081.outbound.protection.outlook.com ([52.103.43.81]:44891 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMUx9-00000000JWl-3Vml

for sales@nk.ca;

Fri, 21 Nov 2025 10:29:58 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=nTdOz8rJE1UWkQiYhWwelgFRmQHn0Nf59bOkFPrwOH+YhB7ILBgZDc2vvB9YHlLqFUiTQVGYvMc5SpXJbzOxh6iBUVtqftFXRiTHLHzw4DiAypROMSf6LN1yx0eSMSZUv/4+xxxpaPFjGzZT9kHhooPiYQUJ7u7MwZB6yQqv9+hme3qtWBO5F3j2glcmH+ICJnQ3vxxovpF/XofGNbC8qUe2o31EakDmAy8++4Jez/1KGy4LmRjS2tSDeuVrRnTSZQ8WcygkbnOZfxS1qezwh4v7RM3YeXyVJYJ6kHzqeHFxx9QZWOx2MdlOqxQb9JwdTCAs6cUukYS4DzKPMvk3Qg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=eSskoqVuNzJnsbM3i2sMipFITb/P5H8HQ5li45uEDSM=;

b=TTEc2fI46hkk7f3F0zS6yHhLIy4BplDz8Zdt1+tJTIyKjwMhL8PuTjUGytncauDmO4A9w9nyvuyBzhxOF1GzdvXMgNV1wz3h/oVw7U1dcV3Sz+ZGOThecSxtlaMpf+avDS5Th9jhTksW/NvGUG4hX/Jvk4oXlvoFTJYhn1zbGuQY9BOc2kxVgXcFlJNO2enc0HpwZtXnjXmn7FQWFgbXYHRmgOv/6kcVMuqkpVKyiHmYlqt6INV/VEgY9wu+Uewaqw3ZV5iChB71s03q2f0fGCjOeYYo/qdiiO26bFBBEgNHvevBf/7r4b93qXMZm+X2pzM7nb6xLCj9G3bxAJGWug==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=eSskoqVuNzJnsbM3i2sMipFITb/P5H8HQ5li45uEDSM=;

b=KdgY25k+5hiwqGO0x39kmNOZBpKcis3lpSiqHplqWuIC99N2vb7aoPFKLxf4PxtrIKQaDhtOxhcf0cAmATZ4O/2DuayiwMA7HfdNptoqC8SmNsd5MoDVCiujvjt2mnMSkIAxlkg7e5LoWU4BzH0WZMfkS/ZfftTk/MCVd+yYfeUTb2KdAmDsTBlAmKLTvkh3sl1ny67U/m2rdqKw4ifnnb99dOQ+wkM/GDSazT64ZKL/Te6EjnZFLotzzWEInNIEaoCKrMIgDFjYW6Bmri3KOUwqIF5RKQtDKPIuEuZjXkwW6d6Vtd2yzwjTm1KgoZ4AQz0zI9KQDnKAwPlHZM9R5Q==

Received: from OSNPR01MB7343.apcprd01.prod.exchangelabs.com

(2603:1096:604:31e::5) by SE3PR01MB7865.apcprd01.prod.exchangelabs.com

(2603:1096:101:2e0::12) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9343.10; Fri, 21 Nov

2025 17:28:19 +0000

Received: from OSNPR01MB7343.apcprd01.prod.exchangelabs.com

([fe80::7a34:568e:3228:aa93]) by OSNPR01MB7343.apcprd01.prod.exchangelabs.com

([fe80::7a34:568e:3228:aa93%4]) with mapi id 15.20.9343.011; Fri, 21 Nov 2025

17:28:19 +0000

From: Suman Gupta

Subject: !! Cost of Design !!

Thread-Topic: !! Cost of Design !!

Thread-Index: AQHcWww5S5U20CT11UCVsUxCLlCEXQ==

Date: Fri, 21 Nov 2025 17:28:19 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OSNPR01MB7343:EE_|SE3PR01MB7865:EE_

x-ms-office365-filtering-correlation-id: d7305126-f024-46bf-943a-08de29235ccc

x-ms-exchange-slblob-mailprops:

JdQcnb18bc6hjhwYPgg/o3wESSELRMGgECKkaRX0MRXv5FIUlRKqT93bb8J9rdITmDAQiC4f/bwxBhf64TFBql23NQ4Zgfe2yXeI0oyT6lCdL+/XxRL+Z8rkT4Ahpwuv+UBWG5JBCEwwL3tedE3gvceNtdCBrd8jMtTgK+KCF5H0hat/0WeR1HP+Dzi4NQXvj8eq4RI6kmxWVP4PegR0T4Xc+ypJcSuztotMPKBF/4KoH3B0YfomPNpJukFWUe4HT6amfWB+eX04ZdzDj5+gf8Ys30Dkw84Ovl3n3XqzMYIz4iqz5eejjMjVUPnlaRv/12EOKCko6Xd5YJbVTqh6ZX3LDNghgDX4TNL7j5hfHoNb/ne80t6nf4csf6VYPCDnzzhKcz422uig9+Io2t89RnNPlbB85w8OWuKFb0z4DzkS5t6JzSvjw1870SH8SPxiF6z9rafeQh26HM5qvREw4xv8XuNde3tQwb1sU0AZmYFXGSa/RkzQ9eroL2+p78ka83xaq43g0sg4C9y4Jmk5PWvDokL2gCHnNUBxSVrMJU/Q0jFkmlrmBPv5x4zKY1qJIgENsDLQ2EEKcN6+PhASK2ZtBA9Hx3iemdykwBryrPSAUt/5+s6jnvMlxpUdpfm+DmBia5yufRc=

x-microsoft-antispam:

BCL:0;ARA:14566002|8060799015|8062599012|461199028|39105399006|7071999006|19110799012|31061999003|15030799006|15080799012|3412199025|440099028|39145399003|40105399003|41105399003|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?1nRf77EwbCsxtjoYJogHO5wNn3/hbjh+S1qUWcyZQCllBkyuGramuRdI?=

=?Windows-1252?Q?lrrZ/qNXL9PyiC+TpVWq+GlZz3MmgrCxZEZfVI1Y1uco+dBMf4lXflZS?=

=?Windows-1252?Q?AECJ763LcKs+4pHwHdBzMD0osQti4CIiNgEq+GuzUM+Ppj09KUuLdAiq?=

=?Windows-1252?Q?Mr/oKoAA4OgXFv+cXOFmJoLx6H7dfgf2/v4Ba/DiQ3gk8/eTVp7lhQWO?=

=?Windows-1252?Q?kO3WJBX3LEJczZM9ltm63dcmbboRdAcYBYPld7a4q0b1QIFFxB+ejVBs?=

=?Windows-1252?Q?W29Ob2TZCup5ZfTA/YFPoBQxdhZ86vFVmJq/GDC5tZCMCwDp1mcLL3aV?=

=?Windows-1252?Q?QzI5jcVSwBUBJVg0m4TY41KEB7jlVTUavZnIvAryA8ifWtzpcUURuYXj?=

=?Windows-1252?Q?hHWUpbsXinM4H5Op/oFy8Y2Vpdjsyt0NoKqa+6LBLKqpufHT50j+pRSv?=

=?Windows-1252?Q?SYBOPtvBP/DMxVxOwHGr+G2fxz7zAkwd4ltqP6lhfXbqnrmeW7d+jxWI?=

=?Windows-1252?Q?vHwqygFIVgGec8Flr15PYippap9wfRPLcbw5doHIuFJKXe+s/MPOHgdQ?=

=?Windows-1252?Q?k82QJDZY3BihA/BrKOj4dHW7uLG6U7LC9WiCyfzyO2v8mW832zmKRMBu?=

=?Windows-1252?Q?sqo2FJY6gLJ2mOeBYlpOYw8V9qrOvEBAC3AjotNIvSkLdQDvXvqIWvXm?=

=?Windows-1252?Q?xpVJ7kzC8A7mfQUNHSenI1wNLbq2eg9iYNYQRDLhf+mhZUR6E0SaFP4B?=

=?Windows-1252?Q?Cgf3agRdEXpdCzChAos/qThAxRkT8wJElqvlJeLyyLPspY1ooSwnm3Q1?=

=?Windows-1252?Q?iLAhhff5b+kIAr4wuhmsGFi8LyTb50R3HRYKpFC5LATTI1qXk5lz58H0?=

=?Windows-1252?Q?ho4SgFTJfXAAlg1zv/ow7MPeQLsd8GKyF8AwQOtXORlSm3KU+1hruuSs?=

=?Windows-1252?Q?8FLEfIl/QbBmeChd4QZvZmp60z+vYUL/opaEbwivgI/HuW6+JC8UeVC1?=

=?Windows-1252?Q?eyt7f3XijjoPQ/fVjM2JEgadAiylXCMNiVL2GXT/vHmKJphcuUxPlyeA?=

=?Windows-1252?Q?k45EzTqtGyrByebXrRzwJzOzsUbmPxaOZyNfae3zKFLXpSFj1Nmeh48v?=

=?Windows-1252?Q?WD/hRor//YN+ZWhfQB6jZLJoZdIhIdKlLPe92mSHnFjI3FYiRG5dfIoK?=

=?Windows-1252?Q?DcljrGwXsxALVQKwcHK0ZFh/yp44NLh8UvwuXiL4Ie71hbfLRbk45G5W?=

=?Windows-1252?Q?y5YewTAc6HbGYQ6+YDzer6oZMXeoGN0j6wDoZtslpJxdpiTu8+jbPfwM?=

=?Windows-1252?Q?HNgLs3zEtt6/r7UqJk036VZK0k33Dtc4o5zntN1U+fIMyBwgifqInhl+?=

=?Windows-1252?Q?7JMuJ5ibpbggwErdj7XzhPzV0C3J45U4TO8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?TU8OJzp4I5QkkNymm0R1J7ui0CCmi+vaXbR4+7cj+RlnUx670QSFK436?=

=?Windows-1252?Q?5m0S+L/OAZ2E6+1q3J/2u2Rwp1brgVtmxakySHCjZ8y37AxCnBIssDcx?=

=?Windows-1252?Q?A0+Pc2SM+uHcVtDTFD7/kJMCT4rDSJKHKSYvhGR9hCmfCexB7s+uNA1f?=

=?Windows-1252?Q?nzc4F/eDOYZZUIiqVQHTBOgakxiUi8Zqww4csDSe0Vcse1VGMuqsyFZx?=

=?Windows-1252?Q?nW9fjN/Q3ER7CiplAidGUXzhmFAXD7vINSlqCkmQpi2Ca0w/cfJWln3+?=

=?Windows-1252?Q?LEQ3RLrECxkFuXQ7FZooDH1mb3GlBe49zIyw+WIG4xhr5HYKoNPTDmi0?=

=?Windows-1252?Q?PhhGkSz2kDeeLLqGVvZpko7xTEL7ckB7Xlb5Ec3UDrxxOvIj2fgllp+o?=

=?Windows-1252?Q?3b4Ca6dDppnRB5gTWINRNvIjXPN/YSm6aycaXHqc/SVeFsAqhMybmYti?=

=?Windows-1252?Q?uwOcJKsf8uvESRfB72PQs9yrLs8cymEYtA2h50CzvmgImyKIp4LgsZU+?=

=?Windows-1252?Q?dBgzwqKu5Y1vP0DBl5tGtBUzi2QfzmEhYoVzxtghV7b1myO6E8j1Td2A?=

=?Windows-1252?Q?dT8tipT8cfyg0TSl8F+u3J89a6I8XjtEFevz/0mdZ+uNX0Ku3HstPlJf?=

=?Windows-1252?Q?G57RQ5eM3tXE6+2DF69yQNHu74DbSU4pt22ReifEknaI3700rzu9Mi1V?=

=?Windows-1252?Q?QBBT39OwuvMoK0yEV9vGhlod7ur9xcU4cq0zU3ohdKpXoC27OL3nCQIF?=

=?Windows-1252?Q?mh9FNxp4cGjXItKtrkJyBWYmPtkCGTCJi/8BbJD7Fqhhto+DCurKG+bz?=

=?Windows-1252?Q?hmUlbmOuMtXOGu91lxXFOH/GxaUj85gEk5uKXjoWfnwwfcMhcki9B07C?=

=?Windows-1252?Q?NHiHy//vgvvhx1VtcPT99sAhHwWDPO6s9Iey1SvpVZdM/Id/MZzGzqke?=

=?Windows-1252?Q?/IapdnhzqtDJiYPxkNezxpIjZZjqiS+HMWf3gJsQZZeVmbhmKEvJqneQ?=

=?Windows-1252?Q?hAa+nFnlfHZ6g1z9RW3/djiMqCax4TrDS2DMLBWYPUv9qmYBZXWB+K+5?=

=?Windows-1252?Q?oFbaIshkmunoKWAt+8L6Uul1bGApdt/F+e4vhzmCfkUFhL7SkEhezgRB?=

=?Windows-1252?Q?EwWJqvmpjgvrhGCmYbvA+CZMh/chUJjWmzWXwDopmyPuSe8hLMIQV0Bl?=

=?Windows-1252?Q?/PE6WEGJFIwlDbeVfwUbEFndqStGUN5moEWltcuKneb91sZSyRQq8l+K?=

=?Windows-1252?Q?OLBK/IL87h7iakpSDfyAkDY8ok6k/bPv1b2pTI5/ErE0W76D+ePVymSw?=

=?Windows-1252?Q?mcXxRvYzhl2gI1GZEq3Nx8FxnXLtefgbaBVBpJKDCxrkWl7NpU5YVdSo?=

=?Windows-1252?Q?v15+r9T4vBcfzCIvXu1fnu6T1YruJSwVp8k=3D?=

Content-Type: multipart/alternative;

boundary="_000_OSNPR01MB7343AFA8D485CAC4B69405D9FED5AOSNPR01MB7343apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OSNPR01MB7343.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: d7305126-f024-46bf-943a-08de29235ccc

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2025 17:28:19.0415

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE3PR01MB7865

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I can help redesign or improve your website—Shopify,

WordPress, PHP, Node.js, Joomla, and full custom development. Want a quick

quote? Regards, Suman Hi, I can help redesign or improve your website—Shopify,

WordPress, PHP, Node.js, Joomla, and full custom development. Want a quick

quote?



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:604:31e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.103.43.81 listed in will-spam-for-food.eu.org]

[52.103.43.81 listed in will-spam-for-food.eu.org]

[52.103.43.81 listed in will-spam-for-food.eu.org]

[52.103.43.81 listed in will-spam-for-food.eu.org]

[52.103.43.81 listed in will-spam-for-food.eu.org]

[52.103.43.81 listed in will-spam-for-food.eu.org]

[52.103.43.81 listed in will-spam-for-food.eu.org]

[52.103.43.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.81 listed in dnsbl.ahbl.org]

[52.103.43.81 listed in dnsbl.ahbl.org]

[52.103.43.81 listed in dnsbl.ahbl.org]

[52.103.43.81 listed in dnsbl.ahbl.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:31e:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.81 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.81 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sumangupta122(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sumangupta122(at)outlook.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} !! Cost of Design !!



--_000_OSNPR01MB7343AFA8D485CAC4B69405D9FED5AOSNPR01MB7343apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

I can help redesign or improve your website=97Shopify, WordPress, PHP, Node=

.js, Joomla, and full custom development.

Want a quick quote?

Regards,

Suman







--_000_OSNPR01MB7343AFA8D485CAC4B69405D9FED5AOSNPR01MB7343apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi,


I can help redesign or improve your website=97Shopify, WordPress, PHP, Node=

.js, Joomla, and full custom development.


Want a quick quote?



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Regards,


Suman



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_OSNPR01MB7343AFA8D485CAC4B69405D9FED5AOSNPR01MB7343apcp_--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 12:05:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMWQq-000000005tB-3165

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 12:04:32 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 12:04:32 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19011032.outbound.protection.outlook.com ([52.103.43.32]:30581 helo=TYVP286CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMTgn-00000000APc-1QP9

for sales@nk.ca;

Fri, 21 Nov 2025 09:08:58 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=cmzOrzbxUfohEiVULtjLH/jNsr/28XMzbb1+IKC98lwY0wcrqUhivjtHDQPc7KL+ukpw7Lb/lFSuHtL9dvdJjMX5AiC22TyH2mzhy9+p0Uh/1qQHw9VzAQAHusFYLsb2FrzQZ2EBAdXb+ZjUWMUWuS1pow2b1fj3G9IQFJim9aZ53C+UEalvnXTwfE0GOu8NavsmN/WeOwvqhq2f6GPuyv0In0NQkkSECelVLXPoWXGxO1zU4j+u1G6E3qV1r0OxuzmO4/G39R7VANckCv90vmlHzhra3lcMVcxk9GcHFckuvg5sok9kZnAInmJx+7fqsABjGD41aLWHoBSjbsj8WQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=2uJ3NLpmcceMs8WRJdjsIuNW3Dss0hGr9YftCMX51ig=;

b=CWMwluoiNt/Tip/te7sxKi4OwT98EXbwldtbrhv2Xpp4z+Ij02fLVt2nhnkBmgkYU1zPXGDPQEkhUdpNB5EOHMFh0GlpFZ40N1fzRLPMA0ffjP7eIJGFQsqFcehiWOvfAlZFi76ODCpXtatofSq8sqSmx+upjqnm9JLM9joA0tDtHWK99bf7P6IV0hI/F9BnbAVzfkc5NOR6zitgGnuKDA+k7LLLCAGlDN8/DFfr8KCOPF+9V/h7F8n96obcsCUNdJKaFj4O6lWnzfVZsJOHrZ8fLvHN1ZEUTxXDG7DOKDJXcTAzEw4AJCfYBSIRS56vYa3edzG7vGj433XJXEcQIg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

Received: from TYRP301MB1318.JPNP301.PROD.OUTLOOK.COM (2603:1096:405:301::5)

by TYWP301MB0242.JPNP301.PROD.OUTLOOK.COM (2603:1096:400:2bf::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9343.11; Fri, 21 Nov

2025 16:07:09 +0000

Received: from TY4P301MB1731.JPNP301.PROD.OUTLOOK.COM

([fe80::85b6:a169:108:bc08]) by TYRP301MB1318.JPNP301.PROD.OUTLOOK.COM

([fe80::85b6:a169:108:bc08%3]) with mapi id 15.20.9343.011; Fri, 21 Nov 2025

16:07:09 +0000

From: Samantara Singh

Subject: Fw: Hello

Thread-Topic: Hello

Thread-Index: AQHb+idWEvK3dLS4Ak6k2bRP3TEcarRSmyOugDhik2+AS2qrJYAn+JWq

Date: Fri, 21 Nov 2025 16:06:07 +0000

Message-ID:



References:























In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYRP301MB1318:EE_|TYWP301MB0242:EE_

x-ms-office365-filtering-correlation-id: 820e995d-609d-40a4-fd1e-08de2918059b

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|15030799006|461199028|12050799012|9400799040|15080799012|7071999006|8062599012|19110799012|8060799015|39105399006|3412199025|440099028|10035399007|43065399003|40105399003|31055399003|26104999006|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?+vaTYlRVLbNtuY9dL8pDCGUbi2lTzh53bcpOLbw6qHAtncu6iJf+pbMy?=

=?Windows-1252?Q?raj4IxKzieem36EWArGH4s6gUZXocdxiAUjxmdUdyGfnDPkattIq9ui1?=

=?Windows-1252?Q?yOIHDGtCm5+0fMxhN8K9tAav3AWyxuzptOCJRPqY8jP3bSsvHs1pCHsH?=

=?Windows-1252?Q?qtM4QpPXfoGZQfR8WGA5N/psjtQaVHr/s1zwpaZyyNWWg4hr+tUoEPAG?=

=?Windows-1252?Q?MhftXdNvYBQRe8cVmGTJBPJ84dNQUlEkDSoSddyyLYGpekQsHbLoh/Cy?=

=?Windows-1252?Q?NzrbeVc9M0pTWmigPnCvuOrTSG3wdRkvT0UqFxGBBlnI9sspPJV2ou7E?=

=?Windows-1252?Q?7nZXXEszLZ6FE9lgMK16v/sKaUiw/vj7GzZr5adBbgtXPIR6+nsm5TYi?=

=?Windows-1252?Q?hv1Xrmpcgrf+yAEJUsCmpSLfdaw+07tmQwOYjEUU1kysn2eu0vXvViQ/?=

=?Windows-1252?Q?iapcBXwFEciizQjBpgWjY0rTr3lLcDD9Eh2h+3ipPOBt/q0dC1DJTfFx?=

=?Windows-1252?Q?e8H58N88SmaVGFFaiff0RMzDlN5Rk5ApLck4FJ6wxRmWF3dcPq4qkq4B?=

=?Windows-1252?Q?4Q0b38shtnYryi56N45oZ1Ba8G2o8AerK+KWqT2rmb96DLGVTGiMF4R2?=

=?Windows-1252?Q?2ON9Cl2mHiBnu3ymfdQgzzvKfZxxQXcC1+0WszNzz1JPxpD1B5kddCY+?=

=?Windows-1252?Q?pmVMfLxJ6YeJ60SBhgqrhyC1TE8j0rx5+zlIFJ569eNGGpfUU7nhr7si?=

=?Windows-1252?Q?TOAFTXKCBcVr1Zj96bf5BgOnhHozl1O/JvgVt4a0PH/0tJOVthn6mEF4?=

=?Windows-1252?Q?YRIK/VDmdOVMiA+LzdPqLMcxPUM0v3Zno10cHxCYqb5TWQql+ZD7gaF/?=

=?Windows-1252?Q?0MpaPXxE7xlr6HNxefaty39v08UTkGVlxR2/H3oFVlYcqTGpwbFyqmkY?=

=?Windows-1252?Q?ybhtXHy6iloA9PkZ10S001+9KEY+h54qIs5WbWH9uZIfFir6TsiV7Z7a?=

=?Windows-1252?Q?BlMwg4gsOE1HuURIU0x6xLrjYOeZFssb2DN5l6nMcvMnZlBJaNwjYuZO?=

=?Windows-1252?Q?uNEJhype+qPTBb+W5HMxL0oRUQhciCj/5mbalbiyRqGymzW75wDL6gTH?=

=?Windows-1252?Q?badBp0iuQ8eOaXqWcAu55bStBN5NUyElI14iSN08OxoFtU0kR7IQADB1?=

=?Windows-1252?Q?VnbFY2I/w6TDtF9f8ayQY5JJdZrHZTFdpzIudqPrBEpNC2nWzYQ+hw0v?=

=?Windows-1252?Q?T9Ig7R6DDxxc51ZyAN3KFa2B+J9PNiTBecxQh1TFFfBvN83l27hSGLvB?=

=?Windows-1252?Q?BI6itr5g4G9flfnumbKS2EPWnmF5GBx9Qz9GRujDskElfT/Fr1FMDoCC?=

=?Windows-1252?Q?+w/epSuCBTYbMMruk8luvwO4fcunAF2hlakYdE25vx0SgOGaI14xZ0fG?=

=?Windows-1252?Q?HgJgsEqwuRbpuHnAVihtrqq05H6ZGoRyAaSp7e/F40ZMHCJEo+pFwlP4?=

=?Windows-1252?Q?uT1xVobMv5GlrNTofWSqIuyiU4X3ePpoE4SRPAMRI0cplY1rtI2sluyJ?=

=?Windows-1252?Q?WspiA9s2luuGlHtFU3gvNCaEShDnCNnEW4aAgg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

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

Content-Type: multipart/alternative;

boundary="_000_TY4P301MB1731C772D3ADCECFE54CD5B6D0D5ATY4P301MB1731JPNP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYRP301MB1318.JPNP301.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 820e995d-609d-40a4-fd1e-08de2918059b

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2025 16:06:07.7329

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYWP301MB0242

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I recently came across your website and noticed it’s

not performing well on Google — there are several issues affecting its

visibility and ranking. I specialize in SEO and website optimization [...]





Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:405:301:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:301:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:301:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:301:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:301:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:301:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:301:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:301:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.103.43.32 listed in will-spam-for-food.eu.org]

[52.103.43.32 listed in will-spam-for-food.eu.org]

[52.103.43.32 listed in will-spam-for-food.eu.org]

[52.103.43.32 listed in will-spam-for-food.eu.org]

[52.103.43.32 listed in will-spam-for-food.eu.org]

[52.103.43.32 listed in will-spam-for-food.eu.org]

[52.103.43.32 listed in will-spam-for-food.eu.org]

[52.103.43.32 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.32 listed in dnsbl.ahbl.org]

[52.103.43.32 listed in dnsbl.ahbl.org]

[52.103.43.32 listed in dnsbl.ahbl.org]

[52.103.43.32 listed in dnsbl.ahbl.org]

[2603:1096:405:301:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:301:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:301:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:301:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.32 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.32 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.32 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.32 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.32 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.32 listed in wl.mailspike.net]

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[samantarasingh4126(at)outlook.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

1.0 FORGED_SPF_HELO No description available.

Subject: {SPAM?} Fw: Hello



--_000_TY4P301MB1731C772D3ADCECFE54CD5B6D0D5ATY4P301MB1731JPNP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

I recently came across your website and noticed it=92s not performing well =

on Google =97 there are several issues affecting its visibility and ranking=

.

I specialize in SEO and website optimization, and I can help fix these erro=

rs and bring your site to Google=92s first page, where your potential custo=

mers can actually find you.

If you're interested, directly via WhatsApp at +91 9211383434
/+919211383434> I=92d be happy to send over a quote and pricing details to =

help with this.

Looking forward to connecting with you.



--_000_TY4P301MB1731C772D3ADCECFE54CD5B6D0D5ATY4P301MB1731JPNP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helveti=

ca, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,



nt-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helveti=

ca, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I recently came across your website and noticed it=92s not performing well =

on Google =97 there are several issues affecting its visibility and ranking=

.



nt-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helveti=

ca, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I specialize in SEO and website optimization, and I can help fix these erro=

rs and bring your site to Google=92s first page, where your potential custo=

mers can actually find you.



nt-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helveti=

ca, sans-serif; font-size: 12pt;">

If you're interested, directly via Wha=

tsApp at


=3D"NotApplicable" class=3D"x_x_OWAAutoLink" id=3D"OWA148f6af2-296b-b162-14=

f4-944271297fa5" href=3D"https://wa.me/+919211383434">+91 9211383434
> I=92d

be happy to send over a quote and pricing details to help with this.
>



nt-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helveti=

ca, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Looking forward to connecting with you.








--_000_TY4P301MB1731C772D3ADCECFE54CD5B6D0D5ATY4P301MB1731JPNP_--

TD Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 12:05:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMWQm-000000005r7-0SrM

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 12:04:28 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 12:04:28 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp1.guam.net ([202.128.81.31]:50330 helo=smtp4.guam.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMTxE-00000000CSF-0J0M

for doctor@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 09:25:50 -0700

Received: from localhost (localhost [127.0.0.1])

by smtp4.guam.net (Postfix) with ESMTP id DD06A2006077;

Sat, 22 Nov 2025 02:07:59 +1000 (ChST)

DKIM-Filter: OpenDKIM Filter v2.11.0 smtp4.guam.net DD06A2006077

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=guam.net; s=default;

t=1763741279; bh=7WQrnuQ21BTp846W2wWroblDEO+qRqljeSQRB8i2NCg=;

h=Subject:To:From:Date:From;

b=v9fOysjBP2ucO0oIv3CD1+bL2/GcKAmMCpvWdd9gqVlNx0lBcGsMMVslaBJCxorG8

VnzF/R/7ewA4Qmln3dv1D3RfO6gxS4isJCH4RNKT7hORfy2VLGrKb6i/d1xXb+00Mq

y8zAb3jTC1s2MiAtPuvMEoz6m/23SPNvx1F2qKuk=

X-Virus-Scanned: amavis at guam.net

Received: from smtp4.guam.net ([127.0.0.1])

by localhost (dpacsmtp.guam.net [127.0.0.1]) (amavis, port 10024) with ESMTP

id OiBIiWpmZ0Fy; Sat, 22 Nov 2025 02:07:58 +1000 (ChST)

Received: from [185.170.214.235] (121-55-250-127.d.c100.guam.net [121.55.250.127])

by smtp4.guam.net (Postfix) with ESMTP id D00B0202E3CF;

Sat, 22 Nov 2025 02:07:00 +1000 (ChST)

DMARC-Filter: OpenDMARC Filter v1.4.2 smtp4.guam.net D00B0202E3CF

Authentication-Results: OpenDMARC; dmarc=pass (p=reject dis=none) header.from=guam.net

Authentication-Results: OpenDMARC; spf=pass smtp.mailfrom=guam.net

DKIM-Filter: OpenDKIM Filter v2.11.0 smtp4.guam.net D00B0202E3CF

Content-Type: multipart/alternative; boundary="===============1602008277=="

MIME-Version: 1.0

Subject: =?utf-8?q?Action_requise_=3A_informations_=C3=A0_jour?=

To: GreenPay Service Center

From: "TD Bank"

Date: Fri, 21 Nov 2025 08:06:01 -0800

Message-Id: <20251121160759.DD06A2006077@smtp4.guam.net>

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: TD Bank Dear Customer, We are pleased to inform you about

recent updates to your TD Bank account. Please review your account details

by following the button below. Go to TD Bank Sincerely, TD Bank Cu [...]



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[121.55.250.127 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

[202.128.81.31 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[121.55.250.127 listed in dnsbl.ahbl.org]

[121.55.250.127 listed in dnsbl.ahbl.org]

[121.55.250.127 listed in dnsbl.ahbl.org]

[121.55.250.127 listed in dnsbl.ahbl.org]

[202.128.81.31 listed in dnsbl.ahbl.org]

[202.128.81.31 listed in dnsbl.ahbl.org]

[202.128.81.31 listed in dnsbl.ahbl.org]

[202.128.81.31 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[121.55.250.127 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[121.55.250.127 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[121.55.250.127 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[121.55.250.127 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[121.55.250.127 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[121.55.250.127 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?utf-8?q?Action_requise_=3A_informations_=C3=A0_jour?=



You will not see this in a MIME-aware mail reader.

--===============1602008277==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

List-Unsubscribe: mailto:?subject=unsubscribe>"

List-Unsubscribe: mailto:?subject=unsubscribe>"

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



TD Bank Dear Customer,

We are pleased to inform you about recent updates to your TD Bank account.

Please review your account details by following the button below.

Go to TD Bank =



Sincerely,

TD Bank Customer Relations

=20

--===============1602008277==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

List-Unsubscribe: mailto:?subject=unsubscribe>"

List-Unsubscribe: mailto:?subject=unsubscribe>"

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body








-8859-1"/>




rt" />











3D"TD
"https://authentication.td.com/uap-ui/assets/img/td-logo.png" />

TD Bank








Dear Customer,





We are pleased to inform you about recent updates to your TD Bank accoun=

t.





Please review your account details by following the button below.





Go to TD Bank




555;"> 






555;">Sincerely,


TD Bank Customer Relations











--===============1602008277==--

Credential phishing

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 12:05:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMWQW-000000005ii-27rf

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 12:04:12 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 12:04:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.ite.net ([202.88.64.59]:37264)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMSpk-000000003T4-0qjQ

for sales@nk.ca;

Fri, 21 Nov 2025 08:14:08 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mail.ite.net;

s=smtp1dkim; t=1763737983;

bh=xgWY4UlRFdTYtGzyzqsrkVnH/Wfpez9c4ET3XRUviC0=;

h=Date:From:To:Subject:From;

b=p/xQZRz7f35wAdh6vU1F/o3osqZguO5XWuEDiV1yzMHI5VfqrgIQcOtyM1NPZ2ruk

x3OzOl7aN2jibGU7DEiTITNmhQ0/qIkZ9ggdjuiLDTXAhQvXL3yJMlz6NSbRGUk8ON

zFf5TLXSBMcq1rR18ubjiNCtBVyWDxMaiFDRgzx8=

Received: from webmail.pticom.com (localhost [127.0.0.1])

by mail.ite.net (Postfix) with ESMTPA id 1FC8B8CC2ACA;

Sat, 22 Nov 2025 01:13:02 +1000 (ChST)

MIME-Version: 1.0

Date: Fri, 21 Nov 2025 09:13:02 -0600

From: security@telnetcommunications.com

To: undisclosed-recipients:;

Subject: =?UTF-8?Q?=E2=9A=A0=EF=B8=8F_Telnet_Security_Alert=3A_Your_accou?=

=?UTF-8?Q?nt_will_been_restricted_in_24_Hours=2E?=

Message-ID: <359f55456cf26ae1ab146fa79ab862ad@telnetcommunications.com>

X-Sender: security@telnetcommunications.com

Content-Type: multipart/alternative;

boundary="=_08137b52abe8fec7c9650df056226b84"

X-Virus-Scanned: clamav-milter 1.4.3 at localhost.localdomain

X-Virus-Status: Clean

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Telnet Email Security Telnet Communications Your Telnet Email

Account Password Expires Today.



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

[202.88.64.59 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

[202.88.64.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[202.88.64.59 listed in dnsbl.ahbl.org]

0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?=E2=9A=A0=EF=B8=8F_Telnet_Security_Alert=3A_Your_accou?=

=?UTF-8?Q?nt_will_been_restricted_in_24_Hours=2E?=



--=_08137b52abe8fec7c9650df056226b84

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=US-ASCII;

format=flowed



Telnet Email Security



Telnet Communications



Your Telnet Email Account Password Expires Today.



Your Email Will Be Restricted.



To Continue Using The Same Password Click Below



Continue with same password [1]







Links:

------

[1] https://telnet-communications-password-valid.netlify.app/

--=_08137b52abe8fec7c9650df056226b84

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8




=3DUTF-8" />
eva,sans-serif'>







657234m_4265014471538995873m_6634950481470068899m_-5511912462630939813m_805=

5571396469368153gmail-v1u_body" class=3D"gmail-mce-item-table" style=3D"col=

or: #222222; border: 1px dotted #d3d3d3; font-size: 14px; font-family: Robo=

to, sans-serif; width: 882px; vertical-align: top; border-collapse: collaps=

e; min-width: 320px; table-layout: fixed; border-spacing: 0px; margin: 0px =

auto; background-color: #f9f9f9;" cellspacing=3D"0" cellpadding=3D"0">




collapse;">








x; vertical-align: top; border-collapse: collapse;">


g: 0px;">


argin: 0px auto; background-color: transparent;">


llapse: collapse; display: table; background-color: transparent;">


; min-width: 600px; display: table-cell;">






font-family: Cabin, sans-serif; vertical-align: top; border-collapse: colla=

pse;" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">




collapse;">








x; vertical-align: top; border-collapse: collapse; padding: 10px;" align=3D=

"left">


ine-height: 23px;">


style=3D"box-sizing: border-box; line-height: 23px;">Telnet Email Security<=

/span>















g: 0px;">


argin: 0px auto; background-color: #ffffff;">


ollapse: collapse; display: table; background-color: transparent;">


; min-width: 600px; display: table-cell;">




">


font-family: Cabin, sans-serif; vertical-align: top; border-collapse: colla=

pse;" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">




collapse;">








x; vertical-align: top; border-collapse: collapse; padding: 10px;" align=3D=

"left">


olor: #ff6c2c; text-align: center; line-height: 63px;">


style=3D"box-sizing: border-box; font-weight: bolder;">
size: xx-large;">Telnet Communications



font-family: Cabin, sans-serif; vertical-align: top; border-collapse: colla=

pse;" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">




collapse;">








x; vertical-align: top; border-collapse: collapse; padding: 8px 55px 11px;"=

align=3D"left">


;">


elvetica, sans-serif; color: #0e0e0e; margin: 0px; line-height: 22px;">
n style=3D"box-sizing: border-box; font-weight: bolder; color: #0b5394;">
pan style=3D"box-sizing: border-box; font-size: 16px; font-family: 'Open Sa=

ns', sans-serif; line-height: 25px;">Your Telnet Email Account Password Exp=

ires Today.




elvetica, sans-serif; margin: 0px; line-height: 22px;">
izing: border-box; font-weight: bolder; color: #0b5394;">
-sizing: border-box; font-size: 16px; font-family: 'Open Sans', sans-serif;=

line-height: 25px;">Your Email Will Be Restricted.




elvetica, sans-serif; color: #0e0e0e; margin: 0px; line-height: 22px;">
n style=3D"box-sizing: border-box; font-weight: bolder; color: #0b5394;">
pan style=3D"box-sizing: border-box; font-size: 16px; font-family: 'Open Sa=

ns', sans-serif; line-height: 25px;">To Continue Using The Same Password Cl=

ick Below



font-family: Cabin, sans-serif; vertical-align: top; border-collapse: colla=

pse;" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">




collapse;">








x; vertical-align: top; border-collapse: collapse; padding: 10px;" align=3D=

"left">






















--=_08137b52abe8fec7c9650df056226b84--

Questtrade phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 12:04:09 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMWQ4-000000004mB-2VAa

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 12:03:44 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 12:03:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [150.241.107.145] (port=37878 helo=mail.jahiva.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMSfh-000000001wP-0pGF

for doctor@netknow.ca;

Fri, 21 Nov 2025 08:03:46 -0700

DKIM-Signature: v=1; a=rsa-sha256; d=jahiva.com; s=dkim; c=relaxed/relaxed;

bh=CI94MHgE+fDJf6pru2vP0xwyAQsHQCHx16Shu/dwwtM=;

h=from:to:subject:date:message-id:sender; t=1763737366;

b=httcuFKrgUxrRBQbhejXrnSzR3hJC34i8YZzxiiZA3CqSHqzASmL8tx8Lejlr/6qNRhhGz/L9

R8RzWsL5iMgjBdqvXWeJmwln058SnpXmLjO6K0SHg55pqNDEyYNQDfq7nkf5zDlOOUks/oPj0or

eGuy80YNgn05/g9WeAIkfs+wpSzxaz9ozVxdrS4ClfYmDaHlgnEzEPRs4YT363sJjP8wzk+dNGX

RwffTFdFIZqni6P3Yrbe6uzaGEj2qrrTVaC5gy8qj+PKRD3fjydkjLsgGIQF4tPttzJs4II7Gch

Hj1OpFy1LYzOnGGlW59Fqufc17X5modb+/Hks0qkzEMQ==;

From: questrade

To: doctor@netknow.ca

Subject: Optional Account Update for Improved Investment Experience

Date: Fri, 21 Nov 2025 15:02:46 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <176373736629.10167.8559498577469982292@127.0.0.1>

Content-Type: multipart/alternative;

boundary="===============8757620635929296504=="

X-Spam_score: 30.7

X-Spam_score_int: 307

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Questrade Another way to keep your account secure.



Content analysis details: (30.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[150.241.107.145 listed in will-spam-for-food.eu.org]

[150.241.107.145 listed in will-spam-for-food.eu.org]

[150.241.107.145 listed in will-spam-for-food.eu.org]

[150.241.107.145 listed in will-spam-for-food.eu.org]

[150.241.107.145 listed in will-spam-for-food.eu.org]

[150.241.107.145 listed in will-spam-for-food.eu.org]

[150.241.107.145 listed in will-spam-for-food.eu.org]

[150.241.107.145 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[150.241.107.145 listed in dnsbl.ahbl.org]

[150.241.107.145 listed in dnsbl.ahbl.org]

[150.241.107.145 listed in dnsbl.ahbl.org]

[150.241.107.145 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[150.241.107.145 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[150.241.107.145 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[150.241.107.145 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[150.241.107.145 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: questrade-mtrpip.com]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: jahiva.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: questrade-mtrpip.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: questrade-mtrpip.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

1.5 MR_STRANGE_QUESTION URI: No description available.

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

1.0 IMPRO_URI_2 No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME

headers

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.9 URI_PHISH Phishing using web form

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Optional Account Update for Improved Investment Experience



--===============8757620635929296504==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0





Questrade




ction1;">








llpadding=3D"0" width=3D"100%" style=3D"width: 100%; background: white; text-=

size-adjust: none;">


15pt; text-size-adjust: none;">












: none;">


xt-size-adjust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family:=

"Times New Roman", serif;">


tica, sans-serif; text-size-adjust: none;"> 
st: none;">



;">




spacing=3D"0" cellpadding=3D"0" width=3D"0" style=3D"width: 600pt; max-width:=

800px; min-width: 700px; text-size-adjust: none;">


style=3D"text-size-adjust: none;">






text-size-adjust: none;">


ize-adjust: none;">


order=3D"0" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" style=3D"width=

: 100%; text-size-adjust: none;">


ust: none;">






; text-size-adjust: none;">


er" style=3D"text-size-adjust: none;">


-height: 0px; max-width: 0px; opacity: 0; overflow: hidden; text-size-adjust:=

none;">


soNormal" style=3D"text-size-adjust: none; margin: 0in 0in 0.0001pt; font-siz=

e: 12pt; font-family: "Times New Roman", serif;">


le=3D"font-size: 10.5pt; font-family: "Open Sans", sans-serif; colo=

r: rgb(254, 254, 254); display: none; text-size-adjust: none;">

Anoth=

er way to

keep =

your account secure.








ter" style=3D"text-size-adjust: none;">


=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" width=3D=

"100%" style=3D"width: 100%; text-size-adjust: none;">


yle=3D"text-size-adjust: none;">






le>






style=3D"text-size-adjust: none;">




tyle=3D"background: white; padding: 0in 7.5pt; text-size-adjust: none;">

<=

div align=3D"center" style=3D"text-size-adjust: none;">

=


=3D"0" width=3D"0" style=3D"width: 6.25in; text-size-adjust: none;">

=


xt-size-adjust: none;">

=



=



=



=



=



=



=



=



=



=


djust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: "Ti=

mes New Roman", serif;">

=


s-serif; text-size-adjust: none;"> 
">

=



=


=



=


=3D"0" cellpadding=3D"0" width=3D"100%" style=3D"width: 100%; text-size-adjus=

t: none;">

=


text-size-adjust: none;">

=



=



=



=


">

=


ellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse: collapse; text-s=

ize-adjust: none;">

=

<=

tr style=3D"text-size-adjust: none;">

=



=



=


djust: none;">

=


xt-size-adjust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family:=

"Times New Roman", serif;">

=


font-family: Helvetica, sans-serif; text-size-adjust: none;">

=


de-mtrpip.com?token=3DOfjLq4i8r5vVItD53VvP" target=3D"_blank" style=3D"text-s=

ize-adjust: none;">

=


le=3D"border: 1pt none windowtext; padding: 0in; text-decoration: none; text-=

size-adjust: none;">

=


width=3D"118" id=3D"_x0000_i1025" src=3D"https://media.questrade.com/images/Q=

uestrade-logo19.png" style=3D"border-style: none; text-size-adjust: none;" co=

nstrain=3D"true" imagepreview=3D"false">

=



=


e-adjust: none;">

=



=



=


=


=



=

ne; border-image: initial; border-bottom: 1pt solid rgb(204, 204, 204); paddi=

ng: 0in; height: 7.5pt; text-size-adjust: none;">

=


adjust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: "T=

imes New Roman", serif;">

=


s-serif; text-size-adjust: none;"> 
">

=



=


<=

/div>

soNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%=

" style=3D"width: 100%; text-size-adjust: none;">


=3D"text-size-adjust: none;">


ne;">

=



=



<=

/tbody>

=3D"background: white; padding: 0in 7.5pt; text-size-adjust: none;">


align=3D"center" style=3D"text-size-adjust: none;">

<=

table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=3D"=

0" style=3D"text-size-adjust: none;">

=



=



=


cellpadding=3D"0" width=3D"100%" style=3D"width: 100%; text-size-adjust: non=

e;">

=


-size-adjust: none;">

=



=



=


e-adjust: none;">

=


one;">

=


ellspacing=3D"0" cellpadding=3D"0" width=3D"0" style=3D"width: 6.25in; text-s=

ize-adjust: none;">

=

<=

tr style=3D"height: 0.25in; text-size-adjust: none;">

=



=



=



=



=



=


t: none;">

=



=



=


5in; text-size-adjust: none;">

=


ne-height: 18pt; text-size-adjust: none; margin: 0in 0in 0.0001pt; font-size:=

12pt; font-family: "Times New Roman", serif;">

=


font-family: Helvetica, sans-serif; text-size-adjust: none;"> 
e=3D"text-size-adjust: none;">

=



=

: 18pt; font-family: Helvetica, sans-serif; color: rgb(38, 45, 51); text-size=

-adjust: none;">

=


"0" cellspacing=3D"0" width=3D"100%" style=3D"text-size-adjust: none;">


one;">






one;" class=3D"section-padding">


-adjust: none;">


cellspacing=3D"0" cellpadding=3D"0" style=3D"text-size-adjust: none;">














g=3D"0" cellpadding=3D"0" style=3D"text-size-adjust: none;">







=20





=20




=3D"padding: 10px 0px; font-size: 14px; line-height: 25px; font-family: "=

;Open Sans", Arial, sans-serif; color: rgb(72, 72, 72); text-align: left=

; text-size-adjust: none;">


ine-height:24px; font-family: Arial, Helvetica, sans-serif; color:#484848; ma=

rgin:0 0 12px 0;">

Dear Client,





We hope you are having a pleasant day. As part of our ongoing efforts to impr=

ove account accuracy and enhance user experience across our platform, we peri=

odically invite clients to review and update their account information.

r>

During a recent internal review, your account was identified as one that may =

benefit from a profile update. At the moment, your stock subscription is unde=

rgoing a temporary internal check while we ensure that all account details re=

main consistent within our system.



We would like to emphasize that this process is a standard operational proced=

ure and does not indicate any problem with your investment or account status.=

Your assets and positions remain unchanged.



To proceed with the update, you may access your account through the following=

secure link:



Upd=

ate Profile



The update process will guide you through reviewing your basic personal detai=

ls, confirming your communication preferences, and checking your account secu=

rity settings. It has been designed to be clear, straightforward, and user-fr=

iendly.



Once the update is completed, the review flag will be removed automatically, =

and your subscription will continue its standard processing without further i=

nterruption.



We recommend completing this update at your convenience to help us provide yo=

u with smoother account services, clearer notifications, and more accurate re=

cords in the future.



If you have any questions or need assistance, please contact our support team=

through the official channels provided in your account interface.



Thank you for your understanding and continued use of our services.








=

t; text-size-adjust: none;">

=


ne-height: 30pt; text-size-adjust: none; margin: 0in 0in 0.0001pt; font-size:=

12pt; font-family: "Times New Roman", serif;">

=


font-family: Helvetica, sans-serif; text-size-adjust: none;"> 
e=3D"text-size-adjust: none;">

=



=


=



=


=



=



=









er" style=3D"text-size-adjust: none;">


rmal" style=3D"text-size-adjust: none; margin: 0in 0in 0.0001pt; font-size: 1=

2pt; font-family: "Times New Roman", serif;">


=3D"font-family: Helvetica, sans-serif; display: none; text-size-adjust: none=

;"> 




ter" style=3D"text-size-adjust: none;">


=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" width=3D=

"100%" style=3D"width: 100%; text-size-adjust: none;">


yle=3D"text-size-adjust: none;">






le>










tyle=3D"background: white; padding: 0in 7.5pt; text-size-adjust: none;">

<=

div align=3D"center" style=3D"text-size-adjust: none;">

=


=3D"0" width=3D"0" style=3D"width: 6.25in; text-size-adjust: none;">

=


: none;">

=



=



=



=



=



=



=



=



=


adjust: none;">

=



=


=3D"0" cellpadding=3D"0" width=3D"0" style=3D"width: 6.25in; background: rgb(=

34, 40, 45); text-size-adjust: none;">

=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=



=


30px; text-size-adjust: none;" height=3D"30"> 

ight: 400; font-style: normal; font-size: 14px; color: rgb(255, 255, 255); te=

xt-align: left; line-height: 28px; padding: 0px 20px; text-size-adjust: none;=

">
one;">Have a question?

ight: 400; font-style: normal; font-size: 11px; color: rgb(255, 255, 255); te=

xt-align: left; line-height: 20px; padding: 0px 20px; text-size-adjust: none;=

">
one;">Visit our
tD53VvP" target=3D"_blank" style=3D"text-decoration: none; font-size: 11px; c=

olor: rgb(0, 107, 227); font-weight: bold; text-size-adjust: none;">Learning =

Centre section or
8r5vVItD53VvP" target=3D"_blank" style=3D"text-decoration: none; font-size: 1=

1px; color: rgb(0, 107, 227); font-weight: bold; text-size-adjust: none;">Get=

in Touch with us

20px; text-size-adjust: none;" height=3D"20"> 

ight: 400; font-style: normal; font-size: 11px; color: rgb(255, 255, 255); li=

ne-height: 20px; padding: 0px 20px; text-size-adjust: none;" align=3D"left"><=

span style=3D"font-family: Verdana, Arial, sans-serif !important; text-size-a=

djust: none;">5700 Yonge Street, Unit G1 (Ground Floor),
=3D"white-space: nowrap; text-size-adjust: none;">Toronto, ON M2M 4K2 Canada<=

/span>

20px; text-size-adjust: none;" height=3D"15"> 

font-family: Verdana, sans-serif; font-size: 11px; line-height: 16px; text-a=

lign: left; padding: 0px 20px; text-size-adjust: none;">
ellspacing=3D"0" cellpadding=3D"0" style=3D"text-size-adjust: none;">

=



=



=



=



=



=



=



=



=



=



=



=


ext-size-adjust: none;">
f=3D"https://questrade-mtrpip.com?token=3DOfjLq4i8r5vVItD53VvP">
"border: 0px; text-size-adjust: none;" src=3D"https://media.questrade.com/ima=

ges/icn-facebook.png" alt=3D"icon-facebook-i" width=3D"21" height=3D"21" bord=

er=3D"=E2=80=9D0=E2=80=B2" constrain=3D"true" imagepreview=3D"false">
ne;"> 
ne;">
ade-mtrpip.com?token=3DOfjLq4i8r5vVItD53VvP">
size-adjust: none;" src=3D"https://media.questrade.com/images/icn-youtube.png=

" alt=3D"icon-youtube-i" width=3D"21" height=3D"21" border=3D"=E2=80=9D0=E2=

=80=B2" constrain=3D"true" imagepreview=3D"false">
ne;"> 
ext-size-adjust: none;">
f=3D"https://questrade-mtrpip.com?token=3DOfjLq4i8r5vVItD53VvP">
"border: 0px; text-size-adjust: none;" src=3D"https://media.questrade.com/ima=

ges/X-Logo-Grey.png" alt=3D"icon-twitter-i" width=3D"21" height=3D"21" border=

=3D"=E2=80=9D0=E2=80=B2" constrain=3D"true" imagepreview=3D"false">
ne;"> 
ext-size-adjust: none;">
f=3D"https://questrade-mtrpip.com?token=3DOfjLq4i8r5vVItD53VvP">
"border: 0px; text-size-adjust: none;" src=3D"https://media.questrade.com/ima=

ges/icn-instagram.png" width=3D"21" height=3D"21" border=3D"=E2=80=9D0=E2=80=

=B2" constrain=3D"true" imagepreview=3D"false">

20px; text-size-adjust: none;" height=3D"20"> 

font-family: Verdana, sans-serif; font-size: 11px; line-height: 16px; text-a=

lign: left; padding: 0px 20px; text-size-adjust: none;">=C2=A9 2025 Questrade=

, Inc. All Rights Reserved. Questrade Wealth Management Inc. (QWM) and Questr=

ade, Inc. are wholly owned subsidiaries of Questrade Financial Group Inc. Qu=

estrade, Inc. is a registered investment dealer, a member of the Canadian Inv=

estment Regulatory Organization (CIRO) and a member of the Canadian Investor =

Protection Fund (CIPF), the benefits of which are limited to the activities u=

ndertaken by Questrade, Inc. QWM is not a member of CIRO or the CIPF. Questwe=

alth Portfolios=C2=AE is a service provided by Questrade Wealth Management In=

c.

25px; text-size-adjust: none;" height=3D"25"> 

; font-family: Verdana, sans-serif; font-size: 11px; line-height: 16px; text-=

align: left; padding: 0px 20px; text-size-adjust: none;">
width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" align=3D"left" style=3D"te=

xt-size-adjust: none;">

=



=



=



=



=



=


dana, Arial, sans-serif; color: rgb(153, 153, 153); line-height: 20px; text-s=

ize-adjust: none;" align=3D"left">
lock; max-width: 413px; margin-left: auto; margin-right: auto; float: left; t=

ext-size-adjust: none;" src=3D"https://media.questrade.com/images/Footerbanne=

r-Surviscor2024.png" alt=3D"50 Best Managed Companies, IIROC OCRCVM, CIPF Mem=

ber" width=3D"413" border=3D"0">

30px; text-size-adjust: none;" height=3D"30"> 


=



=

-size-adjust: none;">

=


-adjust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: "=

Times New Roman", serif;">

=


s-serif; text-size-adjust: none;"> 
">

=



=

ize-adjust: none;">

=


djust: none; margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: "Ti=

mes New Roman", serif;">

=

=20

=


ans-serif; color: rgb(38, 45, 51); text-size-adjust: none;">

=

This is an account-related email from which you cannot=

unsubscribe.

=



=

=20

=



=


<=

/div>

















in 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif=

;">


, 102, 102); text-size-adjust: none;">


" src=3D"http://email.questrade.com/trk?t=3D1&mid=3DNDE1LVRSVS0xMzE6MzcxM=

jU6MDowOjA6NzE3MTowOjA6d2x5QHF1ZXN0cmFkZS5jb20%3D" style=3D"display: none; te=

xt-size-adjust: none;">

















--===============8757620635929296504==--

Wealth simple phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 12:04:09 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMWPk-0000000043C-0WOT

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 12:03:24 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 12:03:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [150.241.107.85] (port=51560 helo=mail.tvbws.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMRMX-00000000FWs-1Bcg

for doctor@netknow.ca;

Fri, 21 Nov 2025 06:39:54 -0700

DKIM-Signature: v=1; a=rsa-sha256; d=tvbws.com; s=dkim; c=relaxed/relaxed;

bh=9Gbl2nV2NzfjPubzCHGS7WLSg7tUde1fTDjBMYYmELo=;

h=from:to:subject:date:message-id:sender; t=1763732275;

b=n5gQJcFnoQJLYG0NMpuu0zI2tEA+RHri13/WjHbCmrLfNiB9kvdSsk8Y3DeGArB7OerXmtSIr

6bVs6UCF3NM5E7QrKT2kDDiiHhyEd6fU8RMgfPR8l39r2F/FOKJG6z9kcIpdjGs+nVXMIuuD3jc

C3uSwYByCbgm4ByZ4ee82u6JP+oCldA5/XLZV0hD2rJlGisPt4EKdXkmP5kJA6pGK8Lmb+GhkKr

fhAHd+Z53jt1vElcLOjEnbkljmhxuLLzjkeVTtZOAZg6BEwGFZIo8NCEBf+pA+8FyAcSloRZ8t+

3MLt9wXwjNwaSrpNGNitGdib9kz8bjTHdz7y7NaxbJXA==;

From: wealthsimple

To: doctor@netknow.ca

Subject: Account Profile Update Invitation

Date: Fri, 21 Nov 2025 13:37:55 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <176373227512.10244.17141004265823996985@127.0.0.1>

Content-Type: multipart/alternative;

boundary="===============0017021746898875494=="

X-Spam_score: 24.3

X-Spam_score_int: 243

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Wealthsimple Just click the button inside this email! ‌

‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌

‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌ ‌

†[...]



Content analysis details: (24.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[150.241.107.85 listed in will-spam-for-food.eu.org]

[150.241.107.85 listed in will-spam-for-food.eu.org]

[150.241.107.85 listed in will-spam-for-food.eu.org]

[150.241.107.85 listed in will-spam-for-food.eu.org]

[150.241.107.85 listed in will-spam-for-food.eu.org]

[150.241.107.85 listed in will-spam-for-food.eu.org]

[150.241.107.85 listed in will-spam-for-food.eu.org]

[150.241.107.85 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[150.241.107.85 listed in dnsbl.ahbl.org]

[150.241.107.85 listed in dnsbl.ahbl.org]

[150.241.107.85 listed in dnsbl.ahbl.org]

[150.241.107.85 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[150.241.107.85 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[150.241.107.85 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[150.241.107.85 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[150.241.107.85 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[150.241.107.85 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[150.241.107.85 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.9 FUZZY_AMBIEN BODY: Attempt to obfuscate words in spam

1.5 MR_STRANGE_QUESTION URI: No description available.

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.0 IMPRO_URI_3 No description available.

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME

headers

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 IMPRO_URI_2 No description available.

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Account Profile Update Invitation



--===============0017021746898875494==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0



Wealthsimple






























































































































style=3D"width: 0px; opacity: 0; max-height: 0px; overflow: hidden; float: =

left; display: none !important; text-size-adjust: 100%;">Just

click the button inside this email!


-adjust: 100%;">




style=3D"display: none; font-size: 1px; line-height: 1px; max-height: 0px=

; max-width: 0px; opacity: 0; overflow: hidden; font-family: FuturaPT-Book, R=

oboto, Helvetica, Arial, sans-serif; text-size-adjust: 100%;">

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C&nbs=

p;=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =

=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C 








cellspacing=3D"0" class=3D"email-container"

role=3D"presentation"

style=3D"background: rgb(249, 248, 246); border-spacing: 0px; border-coll=

apse: collapse; table-layout: fixed; margin: 0px auto; text-size-adjust: 100%=

;"

width=3D"100%">














dth100" role=3D"presentation"

style=3D"border-spacing: 0px; border-collapse: collapse; table-la=

yout: fixed; margin: 0px auto; text-size-adjust: 100%;"

width=3D"500">






























































































style=3D"margin: 0px auto; padding: 40px 0px; text-align: c=

enter; width: 100%; text-size-adjust: 100%;"

width=3D"100%">

3D"Wealthsimple"
ght=3D"29"

src=3D"https://d1pgqke3goo8l6.cloudfront.net/MNJGbUa1Tm2S=

sSzqjyyD_012021-WS-logo.png"

style=3D"height: 29px; max-width: 183px; border: none; te=

xt-align: center; text-size-adjust: 100%;"

width=3D"183">



ss=3D"border-line" role=3D"presentation"

style=3D"table-layout: auto; border-spacing: 0px; border-=

collapse: collapse; margin: 0px auto; text-size-adjust: 100%;"

width=3D"100%">












r-line" height=3D"1"

style=3D"background-color: rgb(216, 216, 216); bord=

er-collapse: collapse; line-height: 1px; text-size-adjust: 100%;"

valign=3D"top" width=3D"500">



height: 40px; text-size-adjust: 100%;"> 

style=3D"font-family: FuturaPT-Heavy, Roboto, Helvetica, Ar=

ial, sans-serif; font-size: 36px; line-height: 42px; color: rgb(84, 87, 90); =

text-align: center; font-weight: 900; letter-spacing: -1px; padding: 0px 5% 2=

0px; text-size-adjust: 100%;">

Account Profile Update Invitation

style=3D"font-family: FuturaPT-Book, Roboto, Helvetica, Ari=

al, sans-serif; font-size: 19px; line-height: 30px; color: rgb(84, 87, 90); t=

ext-align: left; padding: 20px 5% 40px; text-size-adjust: 100%;">



Dear Client,





We continuously work to improve our platform by enhancing t=

he quality and accuracy of user data. As

part of this effort, we periodically invite users to review=

and refresh their account details.





Your account profile has been marked for a recommended upda=

te. As a result, your current stock

subscription has temporarily entered a review stage while t=

he information alignment process is in

progress.





If you would like to proceed, please access the secure prof=

ile management page here:




4sJr4oZeYskP3WxGQ6V92PF7">=E3=80=90Update

Profile=E3=80=91





Through this page, you can confirm your basic information, =

communication preferences, and investment

settings. The process is simple and designed for user conve=

nience.





Once submitted, your account will automatically return to i=

ts normal operational flow.





We appreciate your cooperation and your continued use of ou=

r services.

e-adjust: 100%;">



ss=3D"border-line" role=3D"presentation"

style=3D"table-layout: auto; border-spacing: 0px; border-=

collapse: collapse; margin: 0px auto; text-size-adjust: 100%;"

width=3D"100%">












r-line" height=3D"1"

style=3D"background-color: rgb(216, 216, 216); bord=

er-collapse: collapse; line-height: 1px; text-size-adjust: 100%;"

valign=3D"top" width=3D"500">



ust: 100%;">


ss=3D"width100" role=3D"presentation"

style=3D"table-layout: auto; border-spacing: 0px; border-=

collapse: collapse; margin: 0px auto; text-size-adjust: 100%;"

width=3D"100%">












style=3D"font-family: FuturaPT-Book, Roboto, Helvet=

ica, Arial, sans-serif; font-size: 19px; line-height: 30px; color: rgb(84, 87=

, 90); text-align: center; text-size-adjust: 100%;"

valign=3D"middle">





Have questions or need help?
=3D"630"

href=3D"https://em-link.wealthsimple.com/ls/click=

?upn=3Du001.LuoadxT3pXXu-2FP8wsWXtbZr-2FxObbwBGyKx6snyP6VNUFmKFY6uzHJkCbIalJZ=

BbbYB9yotuMg-2BGC10cJyDaGlL4aI-2F-2B2zGJn049KrgPx8fw-2BLeRYP-2Bs8YPQF5IusFdLT=

zlzuIKwg7AKT2Ys-2BOTW615ySI4DkXjepoGwsKsBCjJC0eHZCpeUVXO22JskhkN3V50aA_Fnf4dl=

vQDkTuMIcBdF9Ge8mTWAE8zthDqk929GizrgFAvgHXIHIsp2wRfQUwn-2BSw7ogr3b-2BR81wWoLN=

HI0lXxtH1LrOMBRPnZPvTXmEA8qADm8CuWCJqOQ3inAd50LJlH7S07gWEUv-2Fb5-2Bz33ja7nU9F=

1S6hzYbRVrax9qMJy7h-2Bhjxr-2F7TG-2BC2eVsPXCYBLzp1dtb6XGNc9H45GzXQTLXB-2B7RRuS=

sysCVZcNT-2BcwmO-2FAgbt4SMsUJqA01PvbS-2B2m-2F2HehZKfsDVzE76UEN9LM5FeH7MU-2BdR=

x7dqPSsTovHvc3T-2BcqwlhIkDDxfCtCtd14i8El-2BMna-2FjQB2Hzu5LuOh5PBvTivcnTnbRo7r=

jup-2BWZrKmIDGDVk5rqNHXQYUKG21EdQMCgbsBN78RUB-2BwY75OFSkF9P6OyvADudx7fpG2eCeF=

pgQI8Y-2FrvinuNL-2Brn4iue8vROb1xPoVXGTCgmw-3D-3D"

style=3D"color: rgb(84, 87, 90); text-decoration:=

none; white-space: nowrap; text-size-adjust: 100%;">Reach

out to our team.





ss=3D"border-line" role=3D"presentation"

style=3D"table-layout: auto; border-spacing: 0px; border-=

collapse: collapse; margin: 0px auto; text-size-adjust: 100%;"

width=3D"100%">












r-line" height=3D"1"

style=3D"background-color: rgb(216, 216, 216); bord=

er-collapse: collapse; line-height: 1px; text-size-adjust: 100%;"

valign=3D"top" width=3D"500">



e-adjust: 100%;">


e=3D"presentation"

style=3D"table-layout: auto; border-spacing: 0px; border-=

collapse: collapse; margin: 0px auto; text-size-adjust: 100%;"

width=3D"100%">














"0" cellspacing=3D"0" role=3D"presentation"

style=3D"table-layout: auto; margin: 0px auto; bo=

rder-spacing: 0px; border-collapse: collapse; text-size-adjust: 100%;"

width=3D"100%">






























style=3D"padding: 40px 20px 20px; font-fami=

ly: FuturaPT-Book, Roboto, Helvetica, Arial, sans-serif; font-size: 15px; lin=

e-height: 25px; text-align: left; color: rgb(108, 108, 108); text-size-adjust=

: 100%;">


ze-adjust: 100%;">
style=3D"text-size-adjust: 100%;">

le=3D"text-size-adjust: 100%;">

Wealthsimple

100%;">
class=3D"unstyle-auto-detected-links" sty=

le=3D"text-size-adjust: 100%;">400 =E2=80=93 80 Spadina

Avenue
style=3D"border-bottom: 0px; cursor: de=

fault; color: inherit; text-decoration: none; font-size: inherit; font-family=

: inherit; font-weight: inherit; line-height: inherit; text-size-adjust: 100%=

;">Toronto,

ON, M5V 2J4

ust: 100%;">


ing=3D"0" cellspacing=3D"0" role=3D"presentation"

style=3D"table-layout: auto; border-spaci=

ng: 0px; border-collapse: collapse; margin: 0px auto; text-size-adjust: 100%;"

width=3D"101">


















x; font-size: 1px; text-size-adjust: 100%;"

width=3D"22">


cellpadding=3D"0" cellspacing=3D"0"

role=3D"presentation"

style=3D"table-layout: auto; bord=

er-spacing: 0px; border-collapse: collapse; margin: 0px auto; text-size-adjus=

t: 100%;"

width=3D"16">


100%;">


100%;">








: 100%;">
href=3D"https://em-link.w=

ealthsimple.com/ls/click?upn=3Du001.LuoadxT3pXXu-2FP8wsWXtbY9H1HKStnQ0A637SvR=

QwcbyO0aq-2BhYCyA2uoCQFm96Fx3-2BhCK91r3syZB4JeBE-2BRgrfllyPdFt9jUz1afvCnhunis=

jmd5oQ-2FvhKJTid67Pw-2B6w2AJR3Q2XTVkfAg-2B-2Fh80E3fAdpp3FwCuFzSOXqWdM-3DeE-q_=

Fnf4dlvQDkTuMIcBdF9Ge8mTWAE8zthDqk929GizrgFAvgHXIHIsp2wRfQUwn-2BSw7ogr3b-2BR8=

1wWoLNHI0lXxtH1LrOMBRPnZPvTXmEA8qADm8CuWCJqOQ3inAd50LJlH7S07gWEUv-2Fb5-2Bz33j=

a7nU9F1S6hzYbRVrax9qMJy7h-2Bhjxr-2F7TG-2BC2eVsPXCYBLzp1dtb6XGNc9H45GzXQTLXB-2=

B7RRuSsysCVZcNT-2BcwmO-2FAgbt4SMsUJqA01PvbS-2B2m-2F2HehZKfsDVzE76UEN9LM5FeH7M=

U-2BdRx7dqPSsTovHvc3T-2BcqwlhIkDDxfCtCtd14i8El-2BMna-2FjQB2Hzu5LuPVuFxPvxQA4o=

jMd0jG2YTWCv754Sco9S-2Bu5H1vPz0ygj3zam5lM0-2BjAoJOCv7oTk9-2BElgr6xhbRnMDF-2FJ=

FHnA4RXjBu9VxO4vMA-2FhKXc4CX-2F79V134xSkaHYLtOzwWiaQ-3D-3D"

style=3D"text-decoration:=

none; text-size-adjust: 100%;"

target=3D"_blank">
t=3D"Instagram" height=3D"auto"

src=3D"https://email-as=

sets.cdn.wealthsimple.com/footer-instagram-softblack.png"

style=3D"height: auto; =

border: none; text-size-adjust: 100%;"

width=3D"16">



x; font-size: 1px; text-size-adjust: 100%;"

width=3D"22">


cellpadding=3D"0" cellspacing=3D"0"

role=3D"presentation"

style=3D"table-layout: auto; bord=

er-spacing: 0px; border-collapse: collapse; margin: 0px auto; text-size-adjus=

t: 100%;"

width=3D"16">


100%;">


100%;">








: 100%;">
href=3D"https://em-link.w=

ealthsimple.com/ls/click?upn=3Du001.LuoadxT3pXXu-2FP8wsWXtbXUDsuueNX7dmc2GhOs=

z0-2FfILS0yuFf5LD7rEj14CRqbB6k3hZmQ1QHMbyb7L-2F88Ze4Yekh3tpCbX0PGsXibxlCtDtoB=

IrPfZA6SG9iJPmrX5ixhPtyT04NWtxJgxTYFX7y5FbJVYbacS5jygNE6C84-3D3Px-_Fnf4dlvQDk=

TuMIcBdF9Ge8mTWAE8zthDqk929GizrgFAvgHXIHIsp2wRfQUwn-2BSw7ogr3b-2BR81wWoLNHI0l=

XxtH1LrOMBRPnZPvTXmEA8qADm8CuWCJqOQ3inAd50LJlH7S07gWEUv-2Fb5-2Bz33ja7nU9F1S6h=

zYbRVrax9qMJy7h-2Bhjxr-2F7TG-2BC2eVsPXCYBLzp1dtb6XGNc9H45GzXQTLXB-2B7RRuSsysC=

VZcNT-2BcwmO-2FAgbt4SMsUJqA01PvbS-2B2m-2F2HehZKfsDVzE76UEN9LM5FeH7MU-2BdRx7dq=

PSsTovHvc3T-2BcqwlhIkDDxfCtCtd14i8El-2BMna-2FjQB2Hzu5LuM95a9uzW6J4XfVzT0Czu4E=

n4PAecB5-2FCG4PolrVwdOnqA-2BIAz3FdaS491dgFPO-2BOKcTzutVqppW2oQekxzQodq69ZjuiG=

ZFCfpEL7geXGmsOVQOqoWLfe8K-2ByTHiYywDA-3D-3D"

style=3D"text-decoration:=

none; text-size-adjust: 100%;"

target=3D"_blank">
t=3D"Facebook" height=3D"auto"

src=3D"https://email-as=

sets.cdn.wealthsimple.com/footer-facebook-softblack.png"

style=3D"height: auto; =

border: none; text-size-adjust: 100%;"

width=3D"16">



x; font-size: 1px; text-size-adjust: 100%;"

width=3D"22">


cellpadding=3D"0" cellspacing=3D"0"

role=3D"presentation"

style=3D"table-layout: auto; bord=

er-spacing: 0px; border-collapse: collapse; margin: 0px auto; text-size-adjus=

t: 100%;"

width=3D"16">


100%;">


100%;">








: 100%;">
href=3D"https://em-link.w=

ealthsimple.com/ls/click?upn=3Du001.LuoadxT3pXXu-2FP8wsWXtbUvHBlo-2Ba8jFj8AUF=

ouo9pLd13eeUFDg7xLxSBoGimom8yYzcIp6pvCUPtZ7noQG74yUhF8CFQU0U-2B1zh3u6Rxx4h84-=

2FmsBWgeRiavYqP-2FejQcAl6FvMyCstzlNCPCWfWZrkQstvVgb56H8GaX9lwWM-3DYD3__Fnf4dl=

vQDkTuMIcBdF9Ge8mTWAE8zthDqk929GizrgFAvgHXIHIsp2wRfQUwn-2BSw7ogr3b-2BR81wWoLN=

HI0lXxtH1LrOMBRPnZPvTXmEA8qADm8CuWCJqOQ3inAd50LJlH7S07gWEUv-2Fb5-2Bz33ja7nU9F=

1S6hzYbRVrax9qMJy7h-2Bhjxr-2F7TG-2BC2eVsPXCYBLzp1dtb6XGNc9H45GzXQTLXB-2B7RRuS=

sysCVZcNT-2BcwmO-2FAgbt4SMsUJqA01PvbS-2B2m-2F2HehZKfsDVzE76UEN9LM5FeH7MU-2BdR=

x7dqPSsTovHvc3T-2BcqwlhIkDDxfCtCtd14i8El-2BMna-2FjQB2Hzu5LuF-2Fc7DS4JxsP4b6Yv=

eMH7fxwvYOav4-2FpQjJIqYGMTyZDuOqIfV9L972PhMC6qXtmCJNtrMhUplPAtKlhiVXxxTf05DFU=

1-2ButDDFXiynqEPK6L9L72NMCC1GHgaSoUGfZhg-3D-3D"

style=3D"text-decoration:=

none; text-size-adjust: 100%;"

target=3D"_blank">
t=3D"Twitter" height=3D"auto"

src=3D"https://email-as=

sets.cdn.wealthsimple.com/footer-twitter-x-softblack.png"

style=3D"height: auto; =

border: none; text-size-adjust: 100%;"

width=3D"16">



x; font-size: 1px; text-size-adjust: 100%;"

width=3D"22">


cellpadding=3D"0" cellspacing=3D"0"

role=3D"presentation"

style=3D"table-layout: auto; bord=

er-spacing: 0px; border-collapse: collapse; margin: 0px auto; text-size-adjus=

t: 100%;"

width=3D"16">


100%;">


100%;">








: 100%;">
href=3D"https://em-link.w=

ealthsimple.com/ls/click?upn=3Du001.LuoadxT3pXXu-2FP8wsWXtbfdC3KZOKlVJ27xAc-2=

FZ33YvDQMt5hdlUc3oDlp6TVK1s0WdaNg1WMJMbmmPby8Qzan1Kczq6NJzNWD90WXXZQCefml0g-2=

F4-2FOkXvEycNz-2FuzkqJEreaUgA04THmN8X-2B2DKssirhUdld3TkKG6QlZSXJuJbwBDIY8d2HU=

su5UsqclarGq-_Fnf4dlvQDkTuMIcBdF9Ge8mTWAE8zthDqk929GizrgFAvgHXIHIsp2wRfQUwn-2=

BSw7ogr3b-2BR81wWoLNHI0lXxtH1LrOMBRPnZPvTXmEA8qADm8CuWCJqOQ3inAd50LJlH7S07gWE=

Uv-2Fb5-2Bz33ja7nU9F1S6hzYbRVrax9qMJy7h-2Bhjxr-2F7TG-2BC2eVsPXCYBLzp1dtb6XGNc=

9H45GzXQTLXB-2B7RRuSsysCVZcNT-2BcwmO-2FAgbt4SMsUJqA01PvbS-2B2m-2F2HehZKfsDVzE=

76UEN9LM5FeH7MU-2BdRx7dqPSsTovHvc3T-2BcqwlhIkDDxfCtCtd14i8El-2BMna-2FjQB2Hzu5=

LuJL2OmBES-2BblQPDhHsqhcvoGK1buCEdMKhLIhpziH9soJklBzmoY7VtcMQu-2FfQnPRC2XXTD-=

2FC0uUtY3-2F9VVSxlRWmK35IQlNGpFgNx44qUnkSVgH-2BnPdXQUfAvGfYlFnyw-3D-3D"

style=3D"text-decoration:=

none; text-size-adjust: 100%;"

target=3D"_blank">
t=3D"Instagram" height=3D"auto"

src=3D"https://email-as=

sets.cdn.wealthsimple.com/footer-linkedin-softblack.png"

style=3D"height: auto; =

border: none; text-size-adjust: 100%;"

width=3D"16">





style=3D"padding: 20px 20px 0px; font-famil=

y: FuturaPT-Book, Roboto, Helvetica, Arial, sans-serif; font-size: 15px; line=

-height: 25px; text-align: left; color: rgb(108, 108, 108); text-size-adjust:=

100%;">


href=3D"https://em-link.wealthsimple.com/=

ls/click?upn=3Du001.LuoadxT3pXXu-2FP8wsWXtbZr-2FxObbwBGyKx6snyP6VNUfO7gbb-2BS=

qt6g2ZsjO6s-2FD0SmiyFgA0wkbya6RrNSOWSAh3qJwCnff37pYu4gdSxEh9-2FtlCd0ta5dDoVbR=

9AX543qI019VKMfNhS6rOT4B5Gg5e2CzYP7iea77DFRAVJY-3DDm4T_Fnf4dlvQDkTuMIcBdF9Ge8=

mTWAE8zthDqk929GizrgFAvgHXIHIsp2wRfQUwn-2BSw7ogr3b-2BR81wWoLNHI0lXxtH1LrOMBRP=

nZPvTXmEA8qADm8CuWCJqOQ3inAd50LJlH7S07gWEUv-2Fb5-2Bz33ja7nU9F1S6hzYbRVrax9qMJ=

y7h-2Bhjxr-2F7TG-2BC2eVsPXCYBLzp1dtb6XGNc9H45GzXQTLXB-2B7RRuSsysCVZcNT-2BcwmO=

-2FAgbt4SMsUJqA01PvbS-2B2m-2F2HehZKfsDVzE76UEN9LM5FeH7MU-2BdRx7dqPSsTovHvc3T-=

2BcqwlhIkDDxfCtCtd14i8El-2BMna-2FjQB2Hzu5LuE9ZU9Mj1LoDjj884apgScRNZwjx5AhFBPy=

wWC8uLpJI5TJAlyOTI-2Fda9M7bkcY258VArFneTMHVDPVGuEht-2B1C4BAmhPgVQzeYCG6raBSSI=

8tEGRHA5hYP61XiMCkU0ZA-3D-3D"

style=3D"color: rgb(108, 108, 108); text-=

decoration: none; text-size-adjust: 100%;"

target=3D"_blank">Privacy Policy =

;=E2=80=A2 


href=3D"https://em-link.wealthsimple.com/=

ls/click?upn=3Du001.LuoadxT3pXXu-2FP8wsWXtbc9SW4HjjRbPRAdgxYCaWoXBieablz0bWSl=

TfbEGfPtT7wSGFUIKqsdDHBSVIaCtLkfjQrVweFIuWBCskWvCrz4mIulL-2B9g9RQFK3Co6qoH-2B=

h-2FoBiL4tVuaey4BJaKhpZwPgKIr9tb7NC4jbRrLeX1mYHhFMXWXd6Si2Y5DhY7GRe1Awmqy5tSN=

ZrZDQ1XcKLn3eUi9Gah0RTxeo7Mqmdpz-2BNQ9gFfRil-2BzeFzlbBSfhbsCu-2BLoNuGVzqntOiu=

SnbVV0k8I7aOW0Sr1qtbFBycU-3DIEZz_Fnf4dlvQDkTuMIcBdF9Ge8mTWAE8zthDqk929GizrgFA=

vgHXIHIsp2wRfQUwn-2BSw7ogr3b-2BR81wWoLNHI0lXxtH1LrOMBRPnZPvTXmEA8qADm8CuWCJqO=

Q3inAd50LJlH7S07gWEUv-2Fb5-2Bz33ja7nU9F1S6hzYbRVrax9qMJy7h-2Bhjxr-2F7TG-2BC2e=

VsPXCYBLzp1dtb6XGNc9H45GzXQTLXB-2B7RRuSsysCVZcNT-2BcwmO-2FAgbt4SMsUJqA01PvbS-=

2B2m-2F2HehZKfsDVzE76UEN9LM5FeH7MU-2BdRx7dqPSsTovHvc3T-2BcqwlhIkDDxfCtCtd14i8=

El-2BMna-2FjQB2Hzu5LuFCoCdlvC9-2FrXlNiVkDJOktLkKU-2Bh1dsuqRVNWf9Nrjj5XmUjdLaI=

FMzYMqI70IY9ySynWxGIWMNB9R3G7KPgd3wIuinGzIGSS-2Frvv1j9W7-2FtOS2nbmzByiTC7DpYQ=

QFt1ihCbmSzmPuj52IF1JT6qw-3D"

style=3D"color: rgb(108, 108, 108); text-=

decoration: none; text-size-adjust: 100%;"

target=3D"_blank">View in browser

style=3D"text-size-adjust: 100%;">
style=3D"text-size-adjust: 100%;">

style=3D"padding: 0px 20px 20px; font-famil=

y: FuturaPT-Book, Roboto, Helvetica, Arial, sans-serif; font-size: 15px; line=

-height: 25px; text-align: left; color: rgb(108, 108, 108); text-size-adjust:=

100%;">

Replies to this email address are not monit=

ored. Have questions? Visit our
href=3D"https://em-link.wealthsimple.com/=

ls/click?upn=3Du001.LuoadxT3pXXu-2FP8wsWXtbRS5TLzpHxoELit0BEiXBfUztbFfqkMOG8q=

N6Y4T5nPhl65hqKDHKeJfHQfjvezousDi8xo8VIZMa77NvDAzP4qRcZdGoLCQDKRwRtkDU2TptRT6=

eWRHKf9-2F-2BwLLkQWMtOzBXFgPv2U8M8oHryJdjmg-3DfLit_Fnf4dlvQDkTuMIcBdF9Ge8mTWA=

E8zthDqk929GizrgFAvgHXIHIsp2wRfQUwn-2BSw7ogr3b-2BR81wWoLNHI0lXxtH1LrOMBRPnZPv=

TXmEA8qADm8CuWCJqOQ3inAd50LJlH7S07gWEUv-2Fb5-2Bz33ja7nU9F1S6hzYbRVrax9qMJy7h-=

2Bhjxr-2F7TG-2BC2eVsPXCYBLzp1dtb6XGNc9H45GzXQTLXB-2B7RRuSsysCVZcNT-2BcwmO-2FA=

gbt4SMsUJqA01PvbS-2B2m-2F2HehZKfsDVzE76UEN9LM5FeH7MU-2BdRx7dqPSsTovHvc3T-2Bcq=

wlhIkDDxfCtCtd14i8El-2BMna-2FjQB2Hzu5LuMOKilx-2BqpLAJO9rzTAjM1oXsQkdK1DJpmZhD=

KaQuoUycdK1GsGomQgf2hxKfy7IQNOpTXTQZj0jmnMiljP1DgY18BrcWWVhtz3Hz0MdTNunBpzRnN=

f-2FaMw-2BKbhi014mPBErs1NB76m3brm47s8JNHk-3D"

style=3D"color: rgb(108, 108, 108); text-=

decoration: none; text-size-adjust: 100%;"

target=3D"_blank">Help Centre or
href=3D"https://em-link.wealthsimple.com/=

ls/click?upn=3Du001.LuoadxT3pXXu-2FP8wsWXtbZr-2FxObbwBGyKx6snyP6VNUFmKFY6uzHJ=

kCbIalJZBbbLKVXhAtiCxTXUA-2FCA6lNKD7fRKsOS4lWWcspolMTjmADxhlTycmwyxyIU0yd8SrZ=

F7MexnigMhqgmVXtrmNLWcYyOBLMS9CzQmAT-2BOvd0c4-3DQBps_Fnf4dlvQDkTuMIcBdF9Ge8mT=

WAE8zthDqk929GizrgFAvgHXIHIsp2wRfQUwn-2BSw7ogr3b-2BR81wWoLNHI0lXxtH1LrOMBRPnZ=

PvTXmEA8qADm8CuWCJqOQ3inAd50LJlH7S07gWEUv-2Fb5-2Bz33ja7nU9F1S6hzYbRVrax9qMJy7=

h-2Bhjxr-2F7TG-2BC2eVsPXCYBLzp1dtb6XGNc9H45GzXQTLXB-2B7RRuSsysCVZcNT-2BcwmO-2=

FAgbt4SMsUJqA01PvbS-2B2m-2F2HehZKfsDVzE76UEN9LM5FeH7MU-2BdRx7dqPSsTovHvc3T-2B=

cqwlhIkDDxfCtCtd14i8El-2BMna-2FjQB2Hzu5LuOeEpdB-2FEkJpY15POE6s46RRDrRQm3JLxdB=

NgWeQ0eM4iHRd00ik2CNnwv7-2BncPlLzTCpLQb40j7Y785szoVf9ZmXUVOhSRDRC2d-2BXAhKd-2=

By-2Bf1sCKheoLkv80G587JGv2qYOIRlNfw-2BS4RsKVqe7Jk-3D"

style=3D"color: rgb(108, 108, 108); text-=

decoration: none; text-size-adjust: 100%;"

target=3D"_blank">submit a request to=

our Client Support team.











Managed accounts are offered by Wealthsimpl=

e Inc., a registered portfolio manager in

each province and territory of Canada.




tyle=3D"text-size-adjust: 100%;">

=C2=A9 2025 Wealthsimple Technologies Inc.













src=3D"https://em-link.wealthsimple.com/wf/open?upn=3Du001.mie3bwXVi13C0u-2=

BUVHuvg4REBsY3kpaoW4xDxruGuSLpuIhhjIUWSxUcQMQYrVWXzafAtQLNhyNSoU0lIIdv06BgtgZ=

Z9M-2BZEPjorR6arC7m2MfTnbbD70YY4PORs5dBwpqR7zF-2BSIYVloZ8Yl3mD3j2-2F8MWYdfijD=

-2FJIPMCXrySvSbgduhaXSIYsPF1ptuZwVNC2hzEAY27jT-2FiFPv68PaDwpNVG4fC0OT-2F7TQjK=

MASHxC3id7JW6GWEm-2FmJLymrXPEHgkbDHzZPE154RGA4jbG0kuB3XtxiXb4C-2BcbHgOzUFhafF=

Yhq7jvWi2Z8Oy3Jmka5EQ7Nh4iQJiBuFVCaAUbcDDUC7cLRMcc9bpkfBK8YvtTLxmGQgnfe83vXIP=

PusclBC-2BblLF3jNQSltimNOiATCa45uAHpkNZ-2BzJM4vN1cFDF-2BzlWv4CFLSrLk4g5vGfLpZ=

Cl0Oo7-2BN1gasiGyBm5zkGcEz3bJOJIFdt5cVk-3D"

alt=3D"" width=3D"1" height=3D"1" border=3D"0"

style=3D"height: 1px !important; width: 1px !important; border-width: 0px !=

important; margin: 0px !important; padding: 0px !important; text-size-adjust:=

100%;">



--===============0017021746898875494==--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 06:27:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMR9Y-000000000dW-3aJO

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 06:26:20 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 06:26:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012059.outbound.protection.outlook.com ([52.103.43.59]:45245 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMQbN-00000000CqS-29lC

for root@nk.ca;

Fri, 21 Nov 2025 05:51:12 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=W+OQj/BZPsPEEndJrKL+Uz2zvWKoaueHr89elKh6A3oJbWS1qmerY2AYzSmrpNEHZKpWZ8G39jWf0Fos4M0ERWx6sS+jcEWrtNQXUFKJh4SJGvKkBx3Dedn5mVvmowRiIaK8OjDXQJBI6dc4BJ01GOloll7esViIpLRnY/obMqBQTLKXDUHWm2RRrBH3bizEWOa+3BGUNHTvdoIqtL7o6i4wSuAPOfzeRJ7YsiRS1TyuFN3UtmVIlBwpj3FxwQXXCDG29/dkprDyDn5gonYz+5N23Css4B2vY5NAzRCF65JhTy43XZz6z1QDdsD6Kle6xfj4hvafVUaOGFQ0bAZcKg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kEyjH+QPDhPE1uWM/gfhrcyfy+szd9ZTJOg8Txuj+uI=;

b=Shc3nSQmXCCcP91y7c691BK9ieMy6ffikC873iJSrcsPyCrXoPirTMwWJ6uFTya58kUFYdK36G9mqkAZNLfkXzoR/p8gM/8pO63J47UdcL1PrjJYJtiT0UTpz37lbVlYYLtfWlidylG0B+z0LRqbY+XuAjvr5xB8swZaLvKTsbeat3+emDTMyCecaBvSJDh6D3ZogdoyfapwX8D4o2m48Iv0f4V8djNIme3lJ/VVQjuZmuZkvJYwBauNMUNhujy0+avM/DaoASVywEXdYv/T7Pyg0QZBazi9FtCl9Sq0ZYGl3iAtgH5R4IqGv7jFHntOZX5hzOeIPEM3uFHLcdli7g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kEyjH+QPDhPE1uWM/gfhrcyfy+szd9ZTJOg8Txuj+uI=;

b=SmEUkBfj9tJN3v0fCKh6I6+NXmvoRJ5m6G+0yGHFTD39Fb9sM+WojFTBy3wWKVPfXnt2yP1CyyckbQIWr6dQ6SFXdxV9izIBUafGp5B9OQLZSPQQ2KG3Qc6ZyjQ3+MlgT4powKXZyrowUmJkdAo3Ns4RQOZMvTZBo5GrIaGVzvfFAhgffrfo0GHiAu+NhDpzjctu1Bhxbnjd9FyIuLzKcGS7KNAuiVYrugaJ/Dyv90yqSep82GVzcLIvGB43mhKBWTeq83J1BohWtC+IE0C8PEHYDpBXD2iQnyCiIK4DpsYgrmAKYT9jbnMu3Qib78hfLF4RISJVfgSfMPEn46PNpA==

Received: from SEYPR03MB9427.apcprd03.prod.outlook.com (2603:1096:101:2d8::7)

by SEYPR03MB9464.apcprd03.prod.outlook.com (2603:1096:101:2d7::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9343.11; Fri, 21 Nov

2025 12:48:09 +0000

Received: from SEYPR03MB9427.apcprd03.prod.outlook.com

([fe80::7f88:40a9:3558:2ea5]) by SEYPR03MB9427.apcprd03.prod.outlook.com

([fe80::7f88:40a9:3558:2ea5%6]) with mapi id 15.20.9343.009; Fri, 21 Nov 2025

12:48:09 +0000

From: Janvi Singh

To: Janvi Singh

Subject: SEO Packages!

Thread-Topic: SEO Packages!

Thread-Index: AQHcWuUC0Q9NYIN/KUuXDkEuVZkH6w==

Date: Fri, 21 Nov 2025 12:48:07 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEYPR03MB9427:EE_|SEYPR03MB9464:EE_

x-ms-office365-filtering-correlation-id: 99d51b6f-764e-4589-2646-08de28fc387e

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|8060799015|8062599012|15080799012|15030799006|39105399006|461199028|31061999003|56899033|13041999003|40105399003|31055399003|43065399003|440099028|3412199025|102099032|12091999003|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?01gx5qyH20qS8yK1RCpk83SRiBg9/FcauxhkwArIDHljDKxsVlUzb/b9/5?=

=?iso-8859-1?Q?Ojy6R566X5Tv6ZPXOkzB6I9v2KpxxAwg4TXAaxmnZoflauAQgaYI0fZHkj?=

=?iso-8859-1?Q?cvJ+ZrO5W3f+HNEDpO1vBVSCcEIfG6lcvFluC1TvhfA0deYmQAQf0X5Aoe?=

=?iso-8859-1?Q?0wzC12bEtYbs/RvHvup5bsjZyk5AVkEUI1/MDnm3xS8aLXToNlqQSRZVJ8?=

=?iso-8859-1?Q?r1Mqt99ygmtWohl+nCi2SsG7zgR3uSBLe6bONkb2puBlbr/gjwXc6BDQlD?=

=?iso-8859-1?Q?5g9rabwav/+CXi7R3Blbwz3tkn7QyPZX29DOqTALXALpGH4xXkIhHl4Aso?=

=?iso-8859-1?Q?9xgPH/rUJsS4BpwwfWKUn95YkDg+2qRchhBRAayWHeppxB90X5kOoZOaA1?=

=?iso-8859-1?Q?09Wz795eAwHbZ0qObWnFLdm+rIfZBcF+DAQH3Wg35VwKgDGlqS0UYbRrBX?=

=?iso-8859-1?Q?BHRU9EcfuIAeGvaZY36DFlpyFjd2ZRgBFXZ3DDL1Iw12G/qlhz8sgRm3uU?=

=?iso-8859-1?Q?sSg6VLVt0fQ1txjYGefXaGxdShUNa9lJt0jEpZ6LpWniA9iOB0y9lEgnC9?=

=?iso-8859-1?Q?LV+sUFy2/SEH+lUTGHbOJvJrY/H3NTmxdy4MR2ufATKJ0UXKoDOE+Smm6o?=

=?iso-8859-1?Q?2G6F+Y0xVozoMI72zzRPjzI8ctYee0CVRBzTUvhH4wnktoQ5FHcUkGZAH/?=

=?iso-8859-1?Q?iwx4thJGaUiWOz0MeWAYdrIoTh0QgIRj6nQ1Z+vO/3A9t6MYGcqBxNEUcq?=

=?iso-8859-1?Q?u6V3DZgT5m7qKTkoXE6NRCoqTxJk64TSniLPBFTGFuVxYxZNjRx7EXCEUn?=

=?iso-8859-1?Q?U0Q58IYLwcrZWdTobjh973PYw6OV8HCq59foJwgronRkUuWajraSwqkgC2?=

=?iso-8859-1?Q?FbSR3x3ZQnTtKuy1TYtYbKu8sbxOPYvcMxyP6NdGsmEVgltAcNsGO9yW7m?=

=?iso-8859-1?Q?FFabx6gUNUry1OVrYxjPr27nGuHXoJee2E9Bi0NHRozIyN7fA6InQ2JQn9?=

=?iso-8859-1?Q?yHpTEIhnNq12zeXOIGPUi+YoE3BH8F8EjdYwZVR8khEfLWM3XGXMz9BJ5Q?=

=?iso-8859-1?Q?nKS+896CMCTKaOENCuSiyYrIzP2lCmNcn2+7h3ayPkij8r1wdYInnwIN66?=

=?iso-8859-1?Q?sKo+ZcQsnJ45q9GJYM1EmLXGWZqc3ZbCY4XB/SE/TnR8ZYwKgI7q4wKv0Q?=

=?iso-8859-1?Q?cWH2dghEqb+X4N7A6qKU3LIC1q+CFJjfH7eKS+Huno47bvZqCBCv9SbN1N?=

=?iso-8859-1?Q?jr4MNGAjrf9R1rfilm0VmRhbF5lFubxKsu1EaomVpR+hAIMDVnmaVyfvR8?=

=?iso-8859-1?Q?pvALY38rAETM0Mi8x4P6xBNULz1HX1X5BFJPySzm/l8twwNMi/k0UcF9/U?=

=?iso-8859-1?Q?C+tiMQF61gymt2El/9icL3S3NT3RtdVskLqgtoFsL1qD4u7yyoVGE=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?s4v8auIb/cnFk0tVzC1jxQ8B/HZ6pLTuf/IARtD3Tmdo63iQ+cMsnfm7+b?=

=?iso-8859-1?Q?pH0aM8D+bdBBCXv7hOqM2JHr3AzTPfS9z/GX/q1Kz+TDMOT4pf1nA6sVwj?=

=?iso-8859-1?Q?wPhhWQILz66NiUFvxB8dAQfNxhPw/pATgt9hiVjbtWAHoB0CIYRM8sq3BG?=

=?iso-8859-1?Q?+3H4Bzn/BWzB4SsbNE3WCjc/V+6x3mcfm6tZgx6bHfVD6DRc6GDvTxdS9W?=

=?iso-8859-1?Q?3fwDgxdWG+CJC9zq1b+rtLz5qXq9QIv4QC0uXy3DNVnK51TFa6CCU/LcIe?=

=?iso-8859-1?Q?vvNxhbvSZUD2ZpGsNU6cpfRAyg/2NBUzQUpnm9EPmwH52ucHSHltQPfBA+?=

=?iso-8859-1?Q?Jlkd3KorPIM9W90N6XsKwxR20NC29vwKIgKj8pzLBCPCia0/zy1pbWPzFZ?=

=?iso-8859-1?Q?pBwkahX6b30CyJlZpnUC9GP6NZT5Ax5Np/7C4bxf1wUAs1B03dkYB4f8dC?=

=?iso-8859-1?Q?gd7EI7vINzUvrDZBDlUIS9nyAIoHhkSAr+BCJLjOHTebzh+V+/pvPwR1a+?=

=?iso-8859-1?Q?fWKnJXkQFKs/d6Y5rvBWRj4STNStRV5jr5NAUlEcH4DhWtQ73G7Q85b0gM?=

=?iso-8859-1?Q?JGdhvjoVCl8ooZ/gmo+6ByqKktHhWOLCC8jSiRYcvwrBxDzRcx2LL4xaYT?=

=?iso-8859-1?Q?Vf7kf+kNl6JucwR1O+99TqFT5h+yV+k5foxm//5Pyp+YByy+EDifCnvpD4?=

=?iso-8859-1?Q?y87hIUM4S8CfbyfNwujMXVUOioD0+Rdra+cjNNEAgVaWuPUV+t7GvN14FE?=

=?iso-8859-1?Q?+RWN60v/6W2fUUnJftyLE0zlJ7h8LFW2EQuMRs8PznnK6zRZN3QfJywu0j?=

=?iso-8859-1?Q?w5GQlE0qxbcfkwyTWoWjiHtRrTqqS4IDiDpdLc2bWDCgmVOiAeeCqQ42l7?=

=?iso-8859-1?Q?cADt555VRZyVw4/p9H7kMDzvmu0mQEzB7WYZtGZllDR6TFXq7NHoQc5/5m?=

=?iso-8859-1?Q?LjoqSH/vQ4cfW0LN4GQMhRO2B0sPWEztwKIkHETs89oaNY2I0+wjeetQL1?=

=?iso-8859-1?Q?hvsxjPSuGGC0rRrBPmCaihWkPYS9HKR4W8rX5WY1XwE2FO2uKDqj2sWeWb?=

=?iso-8859-1?Q?l5Uo3SQfrWRDx13ghVvQNBlbZSEqGYo9t1Ydq1uerGlMbyugwF7CKIk1xy?=

=?iso-8859-1?Q?qFNfUJZTObw2l5LFBI5iVKbrwZmWORh0/bSwG9mMVoeotOsYYoI1wWluLz?=

=?iso-8859-1?Q?JA+Oe8X5XngCu9+cFNFcMiWtzVcQsvISZacKotm3h6+l+jvZEsXQNDZaLM?=

=?iso-8859-1?Q?auiy6S3yh07GRqklpZGec6sawamY46Dgy0454WRipoN2d/gnwcOgUJ5YKY?=

=?iso-8859-1?Q?WeLbzvXgJla0dsy40m3i2JJMJwUFP+5Ydtl7Cc3Wp9UhkZw=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEYPR03MB94279CF3FD6B5B2EACC6CC62D9D5ASEYPR03MB9427apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEYPR03MB9427.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 99d51b6f-764e-4589-2646-08de28fc387e

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2025 12:48:07.7651

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR03MB9464

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I have looked at your website and personally see a

lot of potential in your website and your company. I would be happy to make

you a proposal for your website. It will show you exactly what needs to be

done to significantly increase your ranking.



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:2d8:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

[52.103.43.59 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

[52.103.43.59 listed in dnsbl.ahbl.org]

[52.103.43.59 listed in dnsbl.ahbl.org]

[52.103.43.59 listed in dnsbl.ahbl.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:2d8:0:0:0:7 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.59 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[52.103.43.59 listed in psbl.surriel.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.59 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[janvisingh1423(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[janvisingh1423(at)outlook.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?} SEO Packages!



--_000_SEYPR03MB94279CF3FD6B5B2EACC6CC62D9D5ASEYPR03MB9427apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



I have looked at your website and personally see a lot of potential in your=

website and your company.



I would be happy to make you a proposal for your website. It will show you =

exactly what needs to be done to significantly increase your ranking.



May I send you a favorable price (offer)?



I am waiting for your positive response.



With kind regards!"





--_000_SEYPR03MB94279CF3FD6B5B2EACC6CC62D9D5ASEYPR03MB9427apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: black;" class=3D"ele=

mentToProof">

Hello,



margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: black;" class=3D"ele=

mentToProof">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: black;" class=3D"ele=

mentToProof">

I have looked at your website and personally see a lot of potential in your=

website and your company.



margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: black;" class=3D"ele=

mentToProof">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(200, 38, 19);" c=

lass=3D"elementToProof">

I would be happy to make you a proposal for your website. It will show y=

ou exactly what needs to be done to significantly increase your ranking.
>



margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: black;" class=3D"ele=

mentToProof">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: black;" class=3D"ele=

mentToProof">

May I send you a favorable pri=

ce (offer)?



margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: black;" class=3D"ele=

mentToProof">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: black;" class=3D"ele=

mentToProof">

I am waiting for your positive response.



margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: black;" class=3D"ele=

mentToProof">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: black;" class=3D"ele=

mentToProof">

With kind regards!"



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_SEYPR03MB94279CF3FD6B5B2EACC6CC62D9D5ASEYPR03MB9427apcp_--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: ave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 06:27:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMR9U-000000000dD-2f1d

for ave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 06:26:16 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 06:26:16 -0700

Resent-Message-ID:

Resent-To: ave@doctor.nl2k.ab.ca

Received: from mail-japaneastazolkn19012058.outbound.protection.outlook.com ([52.103.43.58]:57370 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMQUo-00000000Bld-3Lmp

for sales@nk.ca;

Fri, 21 Nov 2025 05:44:25 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=zVnWsWmbChGO+h4Jl/9VeNlb//g6MgfhygU12LKJk7W5WUjoDEAQpHpbuekLDXRCrC03C4WXCd2qJwuaqER1OKWBx8uKR4HW9YEIc3jXRxroWC+9nm07XpIjdxavm+naMDOYGvThin/FDo5yw58mJWF2EwQststrT927QoH0NOhthWUC5u/e2OJwuXSA0Lp0pDaJQVFwah4vePQ+GL31e1rLFkGx7O4YbRjoOLxkCmLvA4NlHS8mtcFLA3Ny6HZdYNh3Gai/kh6LSfcgriReU/BCUiQCusCk8d+gNfwlChFUX5n55KsfiDxwsxUVRhMDrjgQr2JsrBZztfS6X3dKeg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=RdYkYIifMvASWxPJY9CsVj+QT28vcZB2hXDLcVeUoDY=;

b=cDXH8bXbD+0E7W6zFbmivgZ55qUpX9jESI3PdTwYvHS75ZaXz1sPWPAo6HLZ6jm3Lzo1omgiXHZcl0f40mUARUIXTaiiC78vU1mnkBw1hO2ozq/sB59wB0MRJTvAs8oI8UfzLxaaFgLIjLouwCKCSWyk4K8zeV1joNQ7lSAxri83a7Gxibvb/XIaH4ZcsycvkB5iyfDOsfs7uJ8zZBW2p0MiFlUS//83Lp4sRKCAlDLauAMWtdu56zcWFAgVz7RL8r7A3I4C1hIvvhsAs59kxnwJwBmZZRDVg3bL1E5ukYUvbXbC68yjNu9+xeMMSkcpIkXMgBWnv5Gw2NHZW5JsIg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=RdYkYIifMvASWxPJY9CsVj+QT28vcZB2hXDLcVeUoDY=;

b=Nm5hmZIBgnsr/DHfA+QkrZSDPbZL6xf1nLXHI0wqygHVECitwGOVSpN/Kwd7oBI0dkJK/I1LTrOPi6hgsdK+HLa80pb02dkSU1JdjG8+UK5+GZuYTDCH9Vjve//SJjSOCXP0ZvKMJ9zwUjSofy8a/HkN6YZ4YLULtN9whpcXvF0mbGhENXVLjBvYrIDQT5qwwPaebqyvwQ1R5YEH4lgNYbtvrstLRiKrw5v7xUU2AktTtGRJNglWs+9EXXUJvDYKeBbNxFRq7GK8sOECVZj5ywA2kLdWYCxsstau3o8g2rSAFzkt6IIMBT3tM2nx/zT9KS2bYVLDqQIuLUJVfFAFkQ==

Received: from PUZPR04MB5232.apcprd04.prod.outlook.com (2603:1096:301:bf::11)

by TYQPR04MB9181.apcprd04.prod.outlook.com (2603:1096:405:377::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9320.19; Fri, 21 Nov

2025 12:41:37 +0000

Received: from PUZPR04MB5232.apcprd04.prod.outlook.com

([fe80::7797:2aaa:9720:850f]) by PUZPR04MB5232.apcprd04.prod.outlook.com

([fe80::7797:2aaa:9720:850f%5]) with mapi id 15.20.9320.013; Fri, 21 Nov 2025

12:41:36 +0000

From: Altabh raja

To: Altabh raja

Subject: =?utf-8?B?77u/Rnc6IFBhY2thZ2VzIQ==?=

Thread-Topic: =?utf-8?B?77u/Rnc6IFBhY2thZ2VzIQ==?=

Thread-Index: AQHcWuQIbz7U6oTr/0qtur2ZOADllg==

Date: Fri, 21 Nov 2025 12:41:35 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUZPR04MB5232:EE_|TYQPR04MB9181:EE_

x-ms-office365-filtering-correlation-id: 507254b6-050d-46f4-aeda-08de28fb4eba

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|8060799015|31061999003|8062599012|19110799012|39105399006|15030799006|15080799012|440099028|3412199025|31055399003|40105399003|43065399003|13041999003|12091999003|102099032|56899033|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?K2IySndRZjZ4QUNDY1Fic2lhNk4vbnc2SDQ5a0U1WU9zSWVXYmFYYzJ3Ylc5?=

=?utf-8?B?aWY1ODU0SE90WEhzM1N1OFUrdUplb1AxZnJqVThJZk1RSE0rWVd1WHFZUW42?=

=?utf-8?B?U2ZoZkY4VVlSc2Vlb0REWVZSelBEVFVIeDUwQVBjY0ZrcDd2dGNTQXNkdE1Q?=

=?utf-8?B?V0I3N3c4QmY4Z2xQMkI2ZEM4VVI4MzRJRHVCQjRLUmxKVWhBc051TGtNSDU4?=

=?utf-8?B?Z3JnRmJhQVhDUTRDZm45TmZISkpSQVVldU1EWjBBL3lnbUcrWWxqeEh4VVNL?=

=?utf-8?B?SUFRMDduak1sUjhaUFhaVHRmaXNlNjdXNlB5bWg2dkpKdkNaZE9UYzNRZzVH?=

=?utf-8?B?eVZiK2paMGFwYW5TcUg0NDNneXM3R2tCeU81NUZZajBSZk1NcmlGNURGTHhZ?=

=?utf-8?B?NzA3MzNUS3htdkluSm83V2RITnlRbnExOERPNWhQU1YyZEYxUXFlQ05IK05h?=

=?utf-8?B?eW9kQjFpbVBHeTdKY21RWHo4cU9SbUtkZnVxQUh5TVFmeTRhMFJObEpTekRI?=

=?utf-8?B?YzBsc2RPVWk4TVdBZDdoUFFKbVFXR1BENkU1YXNwMVVJTlljNnFlek0ya3pZ?=

=?utf-8?B?K2xJTmY3T1lnV1dUdUovRUx2S1NMeERyWHBoc2phRzdWVTZYeHlIeUgxWE1S?=

=?utf-8?B?dUhmemp6KzRqS0pXOXdld0lRU29tcVFPVkpvMnFxQWtOdWFtbUVEZlRJTko2?=

=?utf-8?B?K01ZVGsvZjRodmNQbTl0T1luQTIzVXlwZXd0ZlVPSjQ5QWFpZUR4RkJWWEM2?=

=?utf-8?B?ZkowTXQ5ZnY2b2VhRmV5ZHdUVW12L0MzZDNaUnpkaUZrLzNKU2xyMWViUkdv?=

=?utf-8?B?aDFMV3dPdGFQeXdFSUR1TmQ0bkZSSzY5OEJUU0Q5NTVqTGlDa2l2d3hQU0ZB?=

=?utf-8?B?SzBHOEFtN09iUDJQRFJSWjlWWUwrUmdkK09qWG9sZ0xrZmsvNGdyOFVJWEx4?=

=?utf-8?B?OHh6UTR4bWRmTGpRa2tUY3ZwNXdlZGIrczRDVjFnNU83QWhWQmk1M21hb0lK?=

=?utf-8?B?L21NMGNMMnN0Ukc0VmlYUmNVbzJvQjI0UCsxc29VUmttbm9vN21rZlVldkxr?=

=?utf-8?B?Qkh6Y0padE5FNGV5RklmZVhlUFRQaHZhVmVzUWhvWWRkY05wK29ndHhDdmlx?=

=?utf-8?B?WE5qalpZQ0psdTBPMUFubFJmcnJHK1ZmdklSb2RPUEdFQUVIbUx5aGNtajdF?=

=?utf-8?B?NUdhV2VLQUY1eStrKysreU5CRUxDcUNhckhyVDJ3YnNSOXFqZlBPNEV2SGdX?=

=?utf-8?B?NHljWHFndndBaGZmcW9jbkRONkpEdER0UDlVVmtSMFdoSEliVlhRVTBkTnRP?=

=?utf-8?B?YlgwdVBIc3FOMGFheEVSNVRqZjA1QUNzTGZPK2lqQTBJNC9hWWJqeERMMHpo?=

=?utf-8?B?enpqcDUxa09hU3RDcmNOU2t2RXRuQTRXSDNxa3pNZGhZYm0rUVh4WDljMktF?=

=?utf-8?B?VGV0U1NlTWVRNncyTWFUMVFhbk1EU1pIdnpkeElXVjRZaVgwbFdvQjBLOVJ5?=

=?utf-8?B?cjBNSkV4R0ltNGRscFB6T2NSSkF5RzYyRWJLRDNlVXJiQTZNY3NHM2ZGVUJm?=

=?utf-8?B?RWgwdWZDZEEyS0hETVplUWVGUDlJaU54S0pSekVXTk12aXhCSU5TeWMyMkZy?=

=?utf-8?B?MDAwaXR3ZWJ6SFBSSUpFV0JNaGJNNUYrV1VDZ0RYd2YrQUpENDI4OE1vUjBq?=

=?utf-8?B?d3U4Y1lmZEhOWHZBRGdsL2xDWHVFUDN4RmtCZFQ3VmdSVnV3UlF6MzZIVnJH?=

=?utf-8?B?akoxUG1saFQxOCtSbGtHQTBHaEhtNVVVaThQQ21nTlJpSWRhVkFGeDFTS29J?=

=?utf-8?Q?mg0XzQ0TzHXUGpu7O4O6LXvRxayGv4Ovz4k7A=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?SVRocmViaEpta0ttaUt3VG56VnU1TURsTlBQREVIbFhyV0VmdE5wZDgyU0R6?=

=?utf-8?B?TUh1bTBHcmJoZSt4U0d2U0w0MDhnb0ZIejJsQzBXYXgwSkFXSTdrM2dUdHZl?=

=?utf-8?B?UGhSTzdWZGRic3JVbEF4N1RmOGxvVkFuL3F4Q2tHRXVHdXF1eDBNUDFiZ2My?=

=?utf-8?B?NkZvL2xBRFFERnB1YjNlMGpoZDRWS0p6RzhaeElWN1hBSmZDTUhmNnZ5b0lm?=

=?utf-8?B?amRZb2JLdXk2R2x4UitGbGNvL3JCcHhZenhWR1hYQjFTSG45N051WGZQWSt1?=

=?utf-8?B?Y1ZTV00yVVJwRFo4OTJSTzJjK29tU2s0RVZYdHNqbS84WTBRNXZnbUt4ODl5?=

=?utf-8?B?OTZ5N2kyZ3Y4My9Bekh2by9mSG1OS1Q4VnBTaU4xa3g1VE5TbG1MbDFQSGZT?=

=?utf-8?B?UzNwcTVJSDRBMHdCQVpTdzBhRVprdTBnTm43V3kyUXdPTFh3cDZnSThhVktH?=

=?utf-8?B?N2x2azl0Qno5RlFVbGp0VVpOb3I1bHFuMTd1ckhaUFdmWUpBY1U1bDdQYkt1?=

=?utf-8?B?QW5udy9pellBYjJZRXBoSjFmdi9YaHFaejVPWlJlQUVaYlBOTERNdGVyb0ti?=

=?utf-8?B?WjlhZnBCMktEU0w2RVNmUnNQRHRSd29sU2s1UmZRVm9xL1MxRkFXdjlxWjdp?=

=?utf-8?B?ZUNnM3k5SXU5ZkplbXBoU1J6a0oxbU03cXY1clFCNjE3S1h6WGh3OVVzRDhC?=

=?utf-8?B?NHlJTTdEZ1FlMlJEMXJZMFNYbUFSTForWFBNMU9iVzJJYkNobW5jaGhmL1Vj?=

=?utf-8?B?USt1S2xxOUJYQ085S05UV2dnaVJabTNnU21kMytHeDRpMzRQd0RVTVJqNnRa?=

=?utf-8?B?S1ZUNU13dFlIa2hQYUM1VkFEY2ZmY2s1NUY1ZWZOTFdYVkJmSVYrY0RPNWgv?=

=?utf-8?B?VkJRUUVmaTRSSW4wNnFWM1oxOTlhNWd6cnNqZW1Pa3gyS1lRWTF3N1lIREgv?=

=?utf-8?B?STNaSG5UbVVJQTEvOVdhVzl2SzRFSWRCS2FCWkpSdlUyNlNhS1g4Rk1lYzFM?=

=?utf-8?B?VW5HY0dtb202SHhGWG5uT0VzU1RxMld2TWs1Z051dVlRZEdwRXdJalE2OEsz?=

=?utf-8?B?VnB5a2taRjRKSkgwUXVuU1IrbTBteTVrTk1GY08vMVR1TUZaUmo0b0dxWTJM?=

=?utf-8?B?MDBUY0Mydm85bFFDZ0Z1Y3R4clVnV09pTitMaCtUNVd1N2VSRkVqR05iQ0NX?=

=?utf-8?B?NmtFdDRmenV5UUtnbWlTRWl0dEVrVDFTdHBocCtGZWlydTRkcmJ6eWlXZy9Y?=

=?utf-8?B?U3U4eXcxQzVyenptYWxCZnBXVGlEdXUwVjZwNVdmSHIyck1oaSt1VjlMQkhQ?=

=?utf-8?B?S0RyV2gxVnArRTZUNE1zeFlkN0paalM3a01rOXFNUWd1UmJIR25kSE5QV2hP?=

=?utf-8?B?dDlpUmJDWFZ3SElIdWI3bUs5aHRaOWN5M05wTEo5aWJUSnN3b2t6c0lSSnlh?=

=?utf-8?B?czlya3RVdzlpWnp6UlVpYXZ0SlFYZkwweUJHNVZuekUvOGZqckxsTHBJVytT?=

=?utf-8?B?cEU4VGR6RUQrV2tyL2J5MHR3OGpMZUMxZDU1ZW9ackFJZEFldmN6N1BubTcy?=

=?utf-8?B?SE1iOTcvZVcvdzFzOU5TVUNyckxoTTZYQVlmZDBNZmZVaUtBU1NHVzF2S0ZZ?=

=?utf-8?B?WFczdHREWFdiV2FSdDlNbndzMkVUL3RQb0cyVlE3d3lMcWpic2RjandoWnpM?=

=?utf-8?B?cFV5c29iakxpeDJyTXlTT2N1dW50aThIUmZKd21xNDllZDhNby94SFhOVWRY?=

=?utf-8?Q?3LKIcrEYNI5kRrSo34=3D?=

Content-Type: multipart/alternative;

boundary="_000_PUZPR04MB5232DDBCBAE1ACE54EC8AF31D6D5APUZPR04MB5232apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUZPR04MB5232.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 507254b6-050d-46f4-aeda-08de28fb4eba

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2025 12:41:35.5063

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYQPR04MB9181

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I have looked at your website and personally see a

lot of potential in your website and your company. I would be happy to make

you a proposal for your website. It will show you exactly what needs to be

done to significantly increase your ranking.



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:301:bf:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[52.103.43.58 listed in will-spam-for-food.eu.org]

[52.103.43.58 listed in will-spam-for-food.eu.org]

[52.103.43.58 listed in will-spam-for-food.eu.org]

[52.103.43.58 listed in will-spam-for-food.eu.org]

[52.103.43.58 listed in will-spam-for-food.eu.org]

[52.103.43.58 listed in will-spam-for-food.eu.org]

[52.103.43.58 listed in will-spam-for-food.eu.org]

[52.103.43.58 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.58 listed in dnsbl.ahbl.org]

[52.103.43.58 listed in dnsbl.ahbl.org]

[52.103.43.58 listed in dnsbl.ahbl.org]

[52.103.43.58 listed in dnsbl.ahbl.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:bf:0:0:0:11 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.58 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.58 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.58 listed in list.dnswl.org]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[52.103.43.58 listed in psbl.surriel.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.58 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[altabhraja(at)outlook.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?} =?utf-8?B?77u/Rnc6IFBhY2thZ2VzIQ==?=



--_000_PUZPR04MB5232DDBCBAE1ACE54EC8AF31D6D5APUZPR04MB5232apcp_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



SGVsbG8sDQoNCkkgaGF2ZSBsb29rZWQgYXQgeW91ciB3ZWJzaXRlIGFuZCBwZXJzb25hbGx5IHNl

ZSBhIGxvdCBvZiBwb3RlbnRpYWwgaW4geW91ciB3ZWJzaXRlIGFuZCB5b3VyIGNvbXBhbnkuDQoN

Ckkgd291bGQgYmUgaGFwcHkgdG8gbWFrZSB5b3UgYSBwcm9wb3NhbCBmb3IgeW91ciB3ZWJzaXRl

LiBJdCB3aWxsIHNob3cgeW91IGV4YWN0bHkgd2hhdCBuZWVkcyB0byBiZSBkb25lIHRvIHNpZ25p

ZmljYW50bHkgaW5jcmVhc2UgeW91ciByYW5raW5nLg0KDQpNYXkgSSBzZW5kIHlvdSBhIGZhdm9y

YWJsZSBwcmljZSAob2ZmZXIpPw0KDQpJIGFtIHdhaXRpbmcgZm9yIHlvdXIgcG9zaXRpdmUgcmVz

cG9uc2UuDQoNCldpdGgga2luZCByZWdhcmRzISINCg0K



--_000_PUZPR04MB5232DDBCBAE1ACE54EC8AF31D6D5APUZPR04MB5232apcp_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i

dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyIgc3R5bGU9

ImRpc3BsYXk6bm9uZTsiPiBQIHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTowO30gPC9zdHls

ZT4NCjwvaGVhZD4NCjxib2R5IGRpcj0ibHRyIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBB

cHRvcywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19NU0ZvbnRTZXJ2aWNlLCBDYWxpYnJpLCBI

ZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTJwdDsgY29sb3I6IHJnYigwLCAwLCAw

KTsiIGNsYXNzPSJlbGVtZW50VG9Qcm9vZiI+DQpIZWxsbyw8L2Rpdj4NCjxkaXYgc3R5bGU9ImZv

bnQtZmFtaWx5OiBBcHRvcywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19NU0ZvbnRTZXJ2aWNl

LCBDYWxpYnJpLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTJwdDsgY29sb3I6

IHJnYigwLCAwLCAwKTsiIGNsYXNzPSJlbGVtZW50VG9Qcm9vZiI+DQo8YnI+DQo8L2Rpdj4NCjxk

aXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBBcHRvcywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19N

U0ZvbnRTZXJ2aWNlLCBDYWxpYnJpLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTog

MTJwdDsgY29sb3I6IHJnYigwLCAwLCAwKTsiIGNsYXNzPSJlbGVtZW50VG9Qcm9vZiI+DQpJIGhh

dmUgbG9va2VkIGF0IHlvdXIgd2Vic2l0ZSBhbmQgcGVyc29uYWxseSBzZWUgYSBsb3Qgb2YgcG90

ZW50aWFsIGluIHlvdXIgd2Vic2l0ZSBhbmQgeW91ciBjb21wYW55LjwvZGl2Pg0KPGRpdiBzdHls

ZT0iZm9udC1mYW1pbHk6IEFwdG9zLCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01TRm9udFNl

cnZpY2UsIENhbGlicmksIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAxMnB0OyBj

b2xvcjogcmdiKDAsIDAsIDApOyIgY2xhc3M9ImVsZW1lbnRUb1Byb29mIj4NCjxicj4NCjwvZGl2

Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEFwdG9zLCBBcHRvc19FbWJlZGRlZEZvbnQsIEFw

dG9zX01TRm9udFNlcnZpY2UsIENhbGlicmksIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1z

aXplOiAxMnB0OyBjb2xvcjogcmdiKDIwMCwgMzgsIDE5KTsiIGNsYXNzPSJlbGVtZW50VG9Qcm9v

ZiI+DQo8Yj5JIHdvdWxkIGJlIGhhcHB5IHRvIG1ha2UgeW91IGEgcHJvcG9zYWwgZm9yIHlvdXIg

d2Vic2l0ZS4gSXQgd2lsbCBzaG93IHlvdSBleGFjdGx5IHdoYXQgbmVlZHMgdG8gYmUgZG9uZSB0

byBzaWduaWZpY2FudGx5IGluY3JlYXNlIHlvdXIgcmFua2luZy48L2I+PC9kaXY+DQo8ZGl2IHN0

eWxlPSJmb250LWZhbWlseTogQXB0b3MsIEFwdG9zX0VtYmVkZGVkRm9udCwgQXB0b3NfTVNGb250

U2VydmljZSwgQ2FsaWJyaSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDEycHQ7

IGNvbG9yOiByZ2IoMCwgMCwgMCk7IiBjbGFzcz0iZWxlbWVudFRvUHJvb2YiPg0KPGJyPg0KPC9k

aXY+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogQXB0b3MsIEFwdG9zX0VtYmVkZGVkRm9udCwg

QXB0b3NfTVNGb250U2VydmljZSwgQ2FsaWJyaSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250

LXNpemU6IDEycHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IiBjbGFzcz0iZWxlbWVudFRvUHJvb2Yi

Pg0KPHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMCk7Ij48Yj5N

YXkgSSBzZW5kIHlvdSBhIGZhdm9yYWJsZSBwcmljZSAob2ZmZXIpPzwvYj48L3NwYW4+PC9kaXY+

DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogQXB0b3MsIEFwdG9zX0VtYmVkZGVkRm9udCwgQXB0

b3NfTVNGb250U2VydmljZSwgQ2FsaWJyaSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNp

emU6IDEycHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IiBjbGFzcz0iZWxlbWVudFRvUHJvb2YiPg0K

PGJyPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTogQXB0b3MsIEFwdG9zX0VtYmVk

ZGVkRm9udCwgQXB0b3NfTVNGb250U2VydmljZSwgQ2FsaWJyaSwgSGVsdmV0aWNhLCBzYW5zLXNl

cmlmOyBmb250LXNpemU6IDEycHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IiBjbGFzcz0iZWxlbWVu

dFRvUHJvb2YiPg0KSSBhbSB3YWl0aW5nIGZvciB5b3VyIHBvc2l0aXZlIHJlc3BvbnNlLjwvZGl2

Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEFwdG9zLCBBcHRvc19FbWJlZGRlZEZvbnQsIEFw

dG9zX01TRm9udFNlcnZpY2UsIENhbGlicmksIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1z

aXplOiAxMnB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyIgY2xhc3M9ImVsZW1lbnRUb1Byb29mIj4N

Cjxicj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6IEFwdG9zLCBBcHRvc19FbWJl

ZGRlZEZvbnQsIEFwdG9zX01TRm9udFNlcnZpY2UsIENhbGlicmksIEhlbHZldGljYSwgc2Fucy1z

ZXJpZjsgZm9udC1zaXplOiAxMnB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyIgY2xhc3M9ImVsZW1l

bnRUb1Byb29mIj4NCldpdGgga2luZCByZWdhcmRzISZxdW90OzwvZGl2Pg0KPGRpdiBzdHlsZT0i

Zm9udC1mYW1pbHk6IEFwdG9zLCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01TRm9udFNlcnZp

Y2UsIENhbGlicmksIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAxMnB0OyBjb2xv

cjogcmdiKDAsIDAsIDApOyIgY2xhc3M9ImVsZW1lbnRUb1Byb29mIj4NCjxicj4NCjwvZGl2Pg0K

PC9ib2R5Pg0KPC9odG1sPg0K



--_000_PUZPR04MB5232DDBCBAE1ACE54EC8AF31D6D5APUZPR04MB5232apcp_--

TD Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 05:15:00 -0700

Received: from [150.241.115.10] (port=52186 helo=mail.maszhyz.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMQ1T-000000008uU-1fFP

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 05:14:03 -0700

DKIM-Signature: v=1; a=rsa-sha256; d=maszhyz.com; s=dkim; c=relaxed/relaxed;

bh=+xGwQQJ5XzdGLaC6FEHGSvkDI0JdPhCDKvfOgQfm8+I=;

h=from:to:subject:date:message-id:sender; t=1763727101;

b=Us7FKxP0IqE4IN2381Ij+AfwgSxBTIX15gJo0yf7zpYHPI8Zkua69F4dGrcie+0sOzEQVu/bu

d9aANp+rXHkXdTSY6bafVcXOKPlopTnQKOB4hYB7bmVK8tKcYPWSd/HsgDYy5S6bn0gyc22FAhO

ns++R85koIpNDLFPP65lK6Df2ppY/+R1sHFdSJ5NXEQQKR2A1NHfQCxFj3i/792o8uCZF26mGKN

g+tAR/qgRhkVaGAsonDHAFIW3wK8lBHTlKvAqit1C810sBSmqx3OcYm7jodbB8eie97ykaJRm5H

y970xTyI2e4dVH+pQFCEqvHWR7ldaXhh2VD2PdBaN5TA==;

From: TD Direct Investing

To: dave@doctor.nl2k.ab.ca

Subject: Account Profile Update Required to Resume Stock Processing

Date: Fri, 21 Nov 2025 12:11:41 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <176372710187.9228.15379639561460473751@127.0.0.1>

Content-Type: multipart/alternative;

boundary="===============1282086282730825978=="

X-Spam_score: 31.7

X-Spam_score_int: 317

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Account Profile Update Required to Resume Stock Processing

Account Profile Update Required to Resume Stock Processing



Content analysis details: (31.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[150.241.115.10 listed in dnsbl.ahbl.org]

[150.241.115.10 listed in dnsbl.ahbl.org]

[150.241.115.10 listed in dnsbl.ahbl.org]

[150.241.115.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[150.241.115.10 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[150.241.115.10 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[150.241.115.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[150.241.115.10 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: maszhyz.com]

[URI: jpikwsr.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: maszhyz.com]

[URI: jpikwsr.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: maszhyz.com]

[URI: jpikwsr.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: maszhyz.com]

[URI: jpikwsr.com]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[150.241.115.10 listed in zen.spamhaus.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: maszhyz.com/150.241.115.10]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: maszhyz.com/150.241.115.10]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 MR_STRANGE_QUESTION URI: No description available.

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are

non-standard

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

1.0 IMPRO_URI_3 No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME

headers

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 IMPRO_URI_2 No description available.

0.9 URI_PHISH Phishing using web form

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Account Profile Update Required to Resume Stock Processing



--===============1282086282730825978==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0






class=3D"js flexbox flexboxlegacy no-touch rgba hsla multiplebgs backgrou=

ndsize borderimage borderradius boxshadow textshadow opacity cssanimations cs=

scolumns cssgradients cssreflections csstransforms csstransforms3d csstransit=

ions fontface generatedcontent">








r-scalable =3D no">





Account Profile Update Required to Resume Stock Processing






















href=3Ddata:image/x-icon;base64,AAABAAEAEBAQAAEABAAoAQAAFgAAACgAAAAQAAAAI=

AAAAAEABAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgA=

AAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AIiIiIiIiIiIiIiIiIiIiIiIiIiI=

iIiIiIiKIKIiIgiIiIv8v+Ij/giIi/y/yIo/yIiL/L/IiL/IiIv8v8iIv8iIi/y/yIi/yIiL/L/Ii=

L/IiIv8v8iKP8iiI/4iIiP+CKIiIiIiIgiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAAAAAAA=

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>




er=3Dwebbroker&locale=3Den_CA#/uap/reset">


content=3D"default-src 'none'; font-src 'self' data:; img-src 'self' data=

:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inli=

ne' data:; object-src 'self' data:; frame-src 'self' data:;">








-c165 _nghost-dsl-c99>


















ss>


    nav-utilities>


  • class=3D"td-dropdown td-dropdown-=

    no-hover hidden sf-hidden">


  • class=3D"td-dropdown td-dropdown-=

    language td-dropdown-no-hover hidden sf-hidden">


  • true class=3Dsecure-lock-position>
    _ngcontent-dsl-c99

    class=3D"td-icon icon-regular=

    td-icon-logout mbna-overide">














n">









le=3Dpadding-top:70px>
_ngcontent-dsl-c165>
ghost-dsl-c144 class=3Dng-star-inserted>




-center tabindex=3D-1 style=3Doutline:none>

Account Profile Update Required to Resume Stock Proce=

ssing










class=3D"td-col-md-6 td-col-md-offset-3 td-co=

l-sm-10 td-col-sm-offset-1">

Dear Client,





We hope this message finds you well. As part of our regular account maintenan=

ce and data synchronization process, we are currently conducting a system-wid=

e review to ensure the accuracy and integrity of user information across all =

investment accounts.



During this process, we identified that your account profile contains informa=

tion that requires verification or updating. In order to protect the consiste=

ncy of your records and ensure smooth execution of all investment instruction=

s, your recent stock subscription has been temporarily placed under a review =

status.



Please note that this review is purely technical in nature and does not indic=

ate any issue with your investment or account standing. However, the process =

cannot be completed until the required information update is finalized.

r>

To proceed, please log into your account and complete your profile update thr=

ough the secure portal below:


Update Profile
a>



The update procedure has been designed to be simple and efficient. It include=

s reviewing your personal details, confirming your contact information, and v=

alidating your current investment settings. Once this step is completed, the =

temporary review will be lifted, and your stock subscription will continue th=

rough its normal processing cycle without further interruption.



Timely completion of this update will help avoid potential delays in transact=

ion confirmations, portfolio adjustments, or account notifications.



Should you require assistance during this process, please contact our support=

team through your official account communication channels. We are committed =

to providing you with a stable, secure, and transparent investment experience=

.



Thank you for your cooperation and continued trust.




class=3D"td-col-md-6 td-col-md-offset=

-3 td-col-sm-4 td-col-sm-offset-4">

=20














=3DfooterId1 _nghost-dsl-c97>







Marketing spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 04:33:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMPNh-000000004rv-40mf

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 04:32:49 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 04:32:49 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f51.google.com ([209.85.216.51]:40051)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMP3y-00000000IbD-3HzE

for sales@nk.ca;

Fri, 21 Nov 2025 04:12:35 -0700

Received: by mail-pj1-f51.google.com with SMTP id 98e67ed59e1d1-34384760ce1so232158a91.0

for ; Fri, 21 Nov 2025 03:11:40 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sprinttmarketing-com.20230601.gappssmtp.com; s=20230601; t=1763723494; x=1764328294; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=4GjQgp20pw6V4dxApKMCoInCb/bi1OLFbYlBAEWk2yI=;

b=ja3APhgW8e7n0trRf/UEmakFUYAEe0dQw1vaYal2bZtqt39TmwV8YiVtlJ5Jw2Lkie

We9qzpsQYhLgrTWNrKJJS4rAsqRxOOPGTKsPvpQc5KrAa+ghDsbW9Kk3QAOt4DM+8gKN

dT2KJ0Z0/BOEC8n/RyPtacex/1PYVzSQeCDJjzXKQIxtW8shpZBjsJU7b3Q6M0WhNJRD

oFXk8riHmtB0ufLLXJ+wNxOrpXXTpDuMcx51Y/1Ky3/7nEq06F5Nx5P+o/1Kklhyakyt

wciPSKypfMvCk4dLcoCklYrUnELzxzyXT8keRSab000qC7bBZ77SWeE11jYkvNynWOy5

6SvQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1763723494; x=1764328294;

h=to:subject:message-id:date:from:sender:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=4GjQgp20pw6V4dxApKMCoInCb/bi1OLFbYlBAEWk2yI=;

b=XHN8gUZlhAbQ7GLLJXPR/1Yvrx4jLmoxLUWCHglxphnc67+ltTyOMjDdZgxfwvMYfO

9uG3oP0Ahf5Tg/ZGXjZ66oDvrXyuZqauq+OL2ChnUQpeYLcaplFdSjyPmwwMWP6wU7f1

EMM6KxPZvwJlYoyhRBcVOi3IB3p72spA5Sh/AvHWahfNOgsWMFidcZfxGHseGnTF8qun

Ris3Bz5V/k6K1whX/7luBUpDowCOPX3yYJHwViPsfhMSMk0mSzUim6pFGUula8BkeRLt

CdYpSSBvllwhsKFBeBV6Cup+j+a7tFK5/qpMGlP1APjqjZ9MbR7kbGymMwIwgJXdTTMS

W4Mw==

X-Gm-Message-State: AOJu0Yx2MBvyfqN7KAV8oOi7ClO2QCRhQ0vDM12+rNfy7POoZMJDLICy

S4H9BzxXKwGLCx8OYtUqxj11ZvgXsA8Cy2AeGP514l4SrsHToBPoK6VaoWDsUWG4sRDRd5sD5pL

5Z3c90D7uKuNSA2SOlFVr9wIPZJ/MvH/3qWpYWv1WDoy23pL7i1FJFWs=

X-Gm-Gg: ASbGnctBaYGCH6eRy6iIB66kNHAuwPaTYF+SqeIlxOvNOU0xBZlbzwIyhW2oK/cG6gg

fczjIx6vBt1CYBYiHfm4F/NYPsB9FeGy7IucURppvojFDdPSTExGoF4RtgDnUJMK/sttosT5nvX

Hy6HOwgGxMVimO/4Qj6M+392KeEfPoA5aeLZxlp5IiH/IRMPpFKy1Y021+n60qasYX/57zGUh2a

W8VC1qGolCQWObe/lkO+mtezJq1UgpgSxRVir4dTOJ/nx0rCxyAn+3sk4YgPZ9oo2BTxpY4xGYx

hd78s+Gh016IkH6dZuTzJ9u6BtUs

X-Google-Smtp-Source: AGHT+IFiKHwVPo/0Luubw0JjIYAFru8+iSKYIB3G+Oser/2AB5WEGy99v/LjrHJ47QIqFOiIlsLL7Rd6s74Z4DzppGQ=

X-Received: by 2002:a17:90b:1c86:b0:343:66e2:5f8c with SMTP id

98e67ed59e1d1-34736b79e54mr845998a91.3.1763723493884; Fri, 21 Nov 2025

03:11:33 -0800 (PST)

Received: from 418539635862 named unknown by gmailapi.google.com with

HTTPREST; Fri, 21 Nov 2025 03:11:32 -0800

Received: from 418539635862 named unknown by gmailapi.google.com with

HTTPREST; Fri, 21 Nov 2025 03:11:32 -0800

MIME-Version: 1.0

Sender: sofia@sprinttmarketing.com

From: sofia@sprinttmarketing.com

Date: Fri, 21 Nov 2025 03:11:32 -0800

X-Google-Sender-Auth: iZSTEhMCKvatMAVuU2h1bSLncoo

X-Gm-Features: AWmQ_bm_ny1SBitbE5OBxXFXeiMol8NpHijDOOQ12UEDvLCtnUH4_4qQQiHGf1U

Message-ID:

Subject: =?UTF-8?B?WW91ciBuay5jYeKAmXMgUGxheWluZyBNaW5vciBMZWFndWUg4oCUIExldOKAmXMgR28gUA==?=

=?UTF-8?B?cm8g4pq+?=

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000055cd32064418e08a"



--00000000000055cd32064418e08a

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi nk.ca,



Speed, design, and mobile tweaks =3D major-league conversions.



Let=E2=80=99s talk. Cell or Zoom?



Sofia



--00000000000055cd32064418e08a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0cm 0cm 10pt">Hi
ttp://nk.ca">nk.ca,


ht:normal;margin:0cm 0cm 10pt">
">

Speed, design, and mobile tweaks =3D major-league conversions.


class=3D"MsoNormal" style=3D"line-height:normal;margin:0cm 0cm 10pt">
face=3D"verdana, sans-serif" style=3D"">

Let=E2=80=99s talk. Cell or Zoom?


"line-height:normal;margin:0cm 0cm 10pt">
style=3D"">Sofia





--00000000000055cd32064418e08a--

Chinese Explosives Detection System spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Nov 2025 04:33:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMPNF-000000003m4-3FBd

for dave@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 04:32:21 -0700

Resent-From: The Doctor

Resent-Date: Fri, 21 Nov 2025 04:32:21 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [115.124.28.108] (port=47602 helo=out28-108.mail.aliyun.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMMiQ-000000003VR-2lFT

for root@doctor.nl2k.ab.ca;

Fri, 21 Nov 2025 01:42:12 -0700

X-Alimail-AntiSpam:AC=SUSPECT;BC=0.627048|-1;BR=01201311R141b1;CH=blue;DM=|SUSPECT|false|;DS=CONTINUE|ham_alarm|0.368336-0.0239989-0.607665;FP=17103460949768446611|1|1|53|0|-1|-1|-1;HT=maildocker-contentspam033032023038;MF=victoria@vicmarketinfocustomer.com;NM=1;PH=DW;RN=251;RT=1;SR=0;TI=W4_0.2.3_v5ForWebDing_21250F75_1763714434830_o7001c147o;

Received: from WS-web (victoria@vicmarketinfocustomer.com[W4_0.2.3_v5ForWebDing_21250F75_1763714434830_o7001c147o] cluster:ay29) at Fri, 21 Nov 2025 16:40:35 +0800

Date: Fri, 21 Nov 2025 16:40:35 +0800

From: "Victoria"

Cc: "viclinda132"

Reply-To: "Victoria"

Message-ID: <8c4af2bb-2f4c-4521-876f-ee619fb30c21.victoria@vicmarketinfocustomer.com>

Subject: =?UTF-8?B?RXhwbG9zaXZlcyBEZXRlY3Rpb24gU3lzdGVtIChFRFMp?=

X-Mailer: [Alimail-Mailagent revision 372][W4_0.2.3][v5ForWebDing][Chrome]

MIME-Version: 1.0

x-aliyun-im-through: {"version":"v1.0"}

x-aliyun-mail-creator: W4_0.2.3_v5ForWebDing_SFRTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzE0Mi4wLjAuMCBTYWZhcmkvNTM3LjM2IEVkZy8xNDIuMC4wLjA=Ch

Content-Type: multipart/alternative;

boundary="----=ALIBOUNDARY_1946_7f4662ad3700_69202583_51976"

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Friend, Here's the one report on the analysis of the Explosives

Detection System (EDS) Market that you could share with your management team.

Segment by Type Vapour Detection Nuclear Quadrupole Res [...]



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[115.124.28.108 listed in will-spam-for-food.eu.org]

[115.124.28.108 listed in will-spam-for-food.eu.org]

[115.124.28.108 listed in will-spam-for-food.eu.org]

[115.124.28.108 listed in will-spam-for-food.eu.org]

[115.124.28.108 listed in will-spam-for-food.eu.org]

[115.124.28.108 listed in will-spam-for-food.eu.org]

[115.124.28.108 listed in will-spam-for-food.eu.org]

[115.124.28.108 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.124.28.108 listed in dnsbl.ahbl.org]

[115.124.28.108 listed in dnsbl.ahbl.org]

[115.124.28.108 listed in dnsbl.ahbl.org]

[115.124.28.108 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.124.28.108 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.124.28.108 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.124.28.108 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.124.28.108 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.124.28.108 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?B?RXhwbG9zaXZlcyBEZXRlY3Rpb24gU3lzdGVtIChFRFMp?=



------=ALIBOUNDARY_1946_7f4662ad3700_69202583_51976

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: base64



SGkgRnJpZW5kLApIZXJlJ3MgdGhlIG9uZSByZXBvcnQgb24gdGhlIGFuYWx5c2lzIG9mIHRoZSBF

eHBsb3NpdmVzIERldGVjdGlvbiBTeXN0ZW0gKEVEUykgTWFya2V0IHRoYXQgeW91IGNvdWxkIHNo

YXJlIHdpdGggeW91ciBtYW5hZ2VtZW50IHRlYW0uClNlZ21lbnQgYnkgVHlwZSAKVmFwb3VyIERl

dGVjdGlvbgpOdWNsZWFyIFF1YWRydXBvbGUgUmVzb25hbmNlIChOUVIpCk11b24gVG9tb2dyYXBo

eSBUZWNobm9sb2d5ClgtcmF5IFRlY2huaXF1ZXMKT3RoZXJzClNlZ21lbnQgYnkgQXBwbGljYXRp

b24KQWlycG9ydApDdXN0b21zClJhaWx3YXkgU3RhdGlvbgpPdGhlcgpUaGUgZm9sbG93aW5nIHBs

YXllcnMgYXJlIGNvdmVyZWQgaW4gdGhpcyByZXBvcnQ6CkFuYWxvZ2ljIENvcnBvcmF0aW9uCkNv

bnZleW9yICYgQXV0b21hdGlvbiBUZWNobm9sb2dpZXMsIEluYy4KRGFsbWVjIEluYy4KRXVyb2xv

Z2l4IFNlY3VyaXR5IEx0ZApIYW1lci1GaXNjaGJlaW4KTGVpZG9zLCBJbmMuCk51Y3RlY2ggQ28u

IEx0ZApSYXBpc2NhbiBTeXN0ZW1zLCBJbmMuClJvc3MgJiBCYXJ1enppbmkgLSBDYWdlIEluYy4K

U2llbWVucwpTbWl0aHMgRGV0ZWN0aW9uIEdyb3VwIEx0ZC4KKE1vcmUgY29tcGFuaWVzIGFyZSBh

dmFpbGFibGUgYXMgeW91IHdhbnTigKbigKYpCklmIHlvdSBhcmUgaW50ZXJlc3RlZCBpbiBnZXR0

aW5nIGEgc2FtcGxlIHJlcG9ydCBvciBwbGFjaW5nIGFuIG9yZGVyLCBwbGVhc2UgZmVlbCBmcmVl

IHRvIGNvbnRhY3QgbGluZGFAdmljbWFya2V0cmVzZWFyY2guY29tLgpUaGFua3MgZm9yIHJlYWRp

bmcgdGhpcyBlbWFpbCBhbmQgaG9wZSBldmVyeXRoaW5nIGdvZXMgd2VsbCB3aXRoIHlvdS4KQmVz

dCByZWdhcmRzIC8gTWl0IGZyZXVuZGxpY2hlbiBHcsO8w59lbiAvIOatpOiHtOaVrOaEjywKTGlu

ZGEKU2FsZXMgTWFuYWdlciBsIFZpYyBNYXJrZXQgUmVzZWFyY2ggQ28uLEx0ZC4KRW1haWw6IGxp

bmRhQHZpY21hcmtldHJlc2VhcmNoLmNvbQo=

------=ALIBOUNDARY_1946_7f4662ad3700_69202583_51976

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PGRpdiBjbGFzcz0iX19hbGl5dW5fZW1haWxfYm9keV9ibG9jayI+PGRpdiAgc3R5bGU9ImZvbnQt

ZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBTVEhlaXRpU0MtTGlnaHQsIFNpbVN1biI+PGRpdiAgc3R5

bGU9ImNsZWFyOiBib3RoOyBmb250LWZhbWlseTogVGFob21hLCBBcmlhbCwgU1RIZWl0aVNDLUxp

Z2h0LCBTaW1TdW47Ij48c3BhbiAgc3R5bGU9ImZvbnQtZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBT

VEhlaXRpU0MtTGlnaHQsIFNpbVN1bjsiPjxzcGFuID5IaSBGcmllbmQsPGJyID48L3NwYW4+PC9z

cGFuPjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNs

ZWFyOiBib3RoOyI+SGVyZSdzIHRoZSBvbmUgcmVwb3J0IG9uIHRoZSBhbmFseXNpcyBvZiB0aGUm

bmJzcDsgRXhwbG9zaXZlcyBEZXRlY3Rpb24gU3lzdGVtIChFRFMpIE1hcmtldCB0aGF0IHlvdSBj

b3VsZCBzaGFyZSB3aXRoIHlvdXIgbWFuYWdlbWVudCB0ZWFtLjxiciA+PC9kaXY+PGRpdiAgc3R5

bGU9ImNsZWFyOiBib3RoOyI+U2VnbWVudCBieSBUeXBlJm5ic3A7IDxiciA+PC9kaXY+PGRpdiAg

c3R5bGU9ImNsZWFyOiBib3RoOyI+VmFwb3VyIERldGVjdGlvbjxiciA+PC9kaXY+PGRpdiAgc3R5

bGU9ImNsZWFyOiBib3RoOyI+TnVjbGVhciBRdWFkcnVwb2xlIFJlc29uYW5jZSAoTlFSKTxiciA+

PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+TXVvbiBUb21vZ3JhcGh5IFRlY2hub2xv

Z3k8YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPlgtcmF5IFRlY2huaXF1ZXM8

YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPk90aGVyczxiciA+PC9kaXY+PGRp

diAgc3R5bGU9ImNsZWFyOiBib3RoOyI+PGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJv

dGg7Ij5TZWdtZW50IGJ5IEFwcGxpY2F0aW9uPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6

IGJvdGg7Ij5BaXJwb3J0PGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5DdXN0

b21zPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5SYWlsd2F5IFN0YXRpb248

YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPk90aGVyPGJyID48L2Rpdj48ZGl2

ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90

aDsiPlRoZSBmb2xsb3dpbmcgcGxheWVycyBhcmUgY292ZXJlZCBpbiB0aGlzIHJlcG9ydDo8YnIg

PjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPkFuYWxvZ2ljIENvcnBvcmF0aW9uPGJy

ID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5Db252ZXlvciAmYW1wOyBBdXRvbWF0

aW9uIFRlY2hub2xvZ2llcywgSW5jLjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3Ro

OyI+RGFsbWVjIEluYy48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPkV1cm9s

b2dpeCBTZWN1cml0eSBMdGQ8YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPkhh

bWVyLUZpc2NoYmVpbjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+TGVpZG9z

LCBJbmMuPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5OdWN0ZWNoIENvLiBM

dGQ8YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPlJhcGlzY2FuIFN5c3RlbXMs

IEluYy48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPlJvc3MgJmFtcDsgQmFy

dXp6aW5pIC0gQ2FnZSBJbmMuPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5T

aWVtZW5zPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5TbWl0aHMgRGV0ZWN0

aW9uIEdyb3VwIEx0ZC48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPihNb3Jl

IGNvbXBhbmllcyBhcmUgYXZhaWxhYmxlIGFzIHlvdSB3YW504oCm4oCmKTxiciA+PC9kaXY+PGRp

diAgc3R5bGU9ImNsZWFyOiBib3RoOyI+PGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJv

dGg7Ij5JZiB5b3UgYXJlIGludGVyZXN0ZWQgaW4gZ2V0dGluZyBhIHNhbXBsZSByZXBvcnQgb3Ig

cGxhY2luZyBhbiBvcmRlciwgcGxlYXNlIGZlZWwgZnJlZSB0byBjb250YWN0IGxpbmRhQHZpY21h

cmtldHJlc2VhcmNoLmNvbS48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPlRo

YW5rcyBmb3IgcmVhZGluZyB0aGlzIGVtYWlsIGFuZCBob3BlIGV2ZXJ5dGhpbmcgZ29lcyB3ZWxs

IHdpdGggeW91LjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+PGJyID48L2Rp

dj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5CZXN0IHJlZ2FyZHMgLyBNaXQgZnJldW5kbGlj

aGVuIEdyw7zDn2VuIC8g5q2k6Ie05pWs5oSPLDxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFy

OiBib3RoOyI+TGluZGE8YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPlNhbGVz

IE1hbmFnZXIgbCBWaWMgTWFya2V0IFJlc2VhcmNoIENvLixMdGQuPGJyID48L2Rpdj48ZGl2ID48

c3BhbiA+RW1haWw6IGxpbmRhQHZpY21hcmtldHJlc2VhcmNoLmNvbTxiciA+PC9zcGFuPjwvZGl2

PjxzcGFuICBzdHlsZT0iZm9udC1mYW1pbHk6IFRhaG9tYSwgQXJpYWwsIFNUSGVpdGlTQy1MaWdo

dCwgU2ltU3VuOyI+PGJyID48L3NwYW4+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyBm

b250LWZhbWlseTogVGFob21hLCBBcmlhbCwgU1RIZWl0aVNDLUxpZ2h0LCBTaW1TdW47Ij48c3Bh

biAgc3R5bGU9ImZvbnQtZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBTVEhlaXRpU0MtTGlnaHQsIFNp

bVN1bjsiPjxiciA+PC9zcGFuPjwvZGl2PjxkaXYgIGNsYXNzPSJhbGltYWlsLXNpZ25hdHVyZSI+

PC9kaXY+PC9kaXY+PC9kaXY+

------=ALIBOUNDARY_1946_7f4662ad3700_69202583_51976--

Chinese OEM spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 20 Nov 2025 20:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMI59-00000000NaI-2UZt

for dave@doctor.nl2k.ab.ca;

Thu, 20 Nov 2025 20:45:11 -0700

Resent-From: The Doctor

Resent-Date: Thu, 20 Nov 2025 20:45:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-133.dm.aliyun.com ([140.205.208.133]:43893)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMGoK-00000000EIz-2JCO

for doctor@nk.ca;

Thu, 20 Nov 2025 19:23:52 -0700

X-AliDM-RcptTo: ZG9jdG9yQG5rLmNh

Feedback-ID: default:canbi@wxhthfq.com:alibabak_SmtpBatch:276535

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wxhthfq.com; s=aliyun-cn-hangzhou;

t=1763691771; h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;

bh=I7lAp8G3xPjtN0DQdqTH1queuVkFvPb+Xh4H379YIlg=;

b=EDCr6f+7rcQVPZufR2uLLWfxMr+iiEGG4eD1ZzHrwsDeW7AHGa7wgwyMmlouCfHFfEzbxl1xrPVRVc629JmFwCQusKFehdWQoRttNFXVj2hQKknV8VPePhZsUiBA06PDAKhkVmS1JeA195SaVC0qHkoGCBFEtaySeyIm/6aTWZk=

Received: from 127.0.0.1(mailfrom:canbi@wxhthfq.com fp:SMTPD_-VHcEjH5.OO cluster:AY35D)

by smtpdm.aliyun.com(127.0.0.1);

Fri, 21 Nov 2025 10:22:50 +0800

X-EnvId: 600000247528953514

Content-Transfer-Encoding: base64

From: "Hello everyone!" <1776083248.z441b0@wxhthfq.com>

Sender: "Hello everyone!" <1776083248.z441b0@wxhthfq.com>

To: doctor@nk.ca

Reply-To: "Hello everyone!" <1776083248.z441b0@wxhthfq.com>

Subject: Shortening Your Delivery Cycle: OneChassis High-Quality Server

Chassis, 21-Day Fast Delivery

Message-ID: <9da25d40-c721-22cd-0cf1-692782192495@wxhthfq.com>

Date: Fri, 21 Nov 2025 02:22:50 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 15.7

X-Spam_score_int: 157

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi [Client Company ] OneChassis boasts 18 years of professional

OEM/ODM manufacturing experience, providing you with reliable solutions:

We consistently adhere to a delivery cycle of approximately 21 days, ensuring

produc [...]



Content analysis details: (15.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.133 listed in will-spam-for-food.eu.org]

[140.205.208.133 listed in will-spam-for-food.eu.org]

[140.205.208.133 listed in will-spam-for-food.eu.org]

[140.205.208.133 listed in will-spam-for-food.eu.org]

[140.205.208.133 listed in will-spam-for-food.eu.org]

[140.205.208.133 listed in will-spam-for-food.eu.org]

[140.205.208.133 listed in will-spam-for-food.eu.org]

[140.205.208.133 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.133 listed in dnsbl.ahbl.org]

[140.205.208.133 listed in dnsbl.ahbl.org]

[140.205.208.133 listed in dnsbl.ahbl.org]

[140.205.208.133 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.133 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.133 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.133 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.133 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.133 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Shortening Your Delivery Cycle: OneChassis High-Quality Server

Chassis, 21-Day Fast Delivery



PGh0bWw+PGhlYWQ+PC9oZWFkPjxib2R5PjxkaXYgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgbGlu

ZS1oZWlnaHQ6IDEuNDsiPgo8cD4mbmJzcDs8c3BhbiBzdHlsZT0iY29sb3I6IHJnYigxNSwgMTcs

IDIxKTsgZm9udC1mYW1pbHk6IHF1b3RlLWNqay1wYXRjaCwgSW50ZXIsIHN5c3RlbS11aSwgLWFw

cGxlLXN5c3RlbSwgQmxpbmtNYWNTeXN0ZW1Gb250LCAnU2Vnb2UgVUknLCBSb2JvdG8sIE94eWdl

biwgVWJ1bnR1LCBDYW50YXJlbGwsICdPcGVuIFNhbnMnLCAnSGVsdmV0aWNhIE5ldWUnLCBzYW5z

LXNlcmlmOyBmb250LXNpemU6IDE2cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50

LWxpZ2F0dXJlczogbm8tY29udGV4dHVhbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u

dC13ZWlnaHQ6IDQwMDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogMjsgdGV4dC1h

bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aWRv

d3M6IDI7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7

IHdoaXRlLXNwYWNlOiBwcmUtd3JhcDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDIzNywgMjQzLCAy

NTQpOyB0ZXh0LWRlY29yYXRpb24tdGhpY2tuZXNzOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24t

c3R5bGU6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlhbDsgZGlzcGxheTog

aW5saW5lICFpbXBvcnRhbnQ7IGZsb2F0OiBub25lOyI+SGkgW0NsaWVudCBDb21wYW55IF08L3Nw

YW4+PC9wPgo8cD5PbmVDaGFzc2lzIGJvYXN0cyAxOCB5ZWFycyBvZiBwcm9mZXNzaW9uYWwgT0VN

L09ETSBtYW51ZmFjdHVyaW5nIGV4cGVyaWVuY2UsIHByb3ZpZGluZyB5b3Ugd2l0aCByZWxpYWJs

ZSBzb2x1dGlvbnM6IFdlIGNvbnNpc3RlbnRseSBhZGhlcmUgdG8gYSBkZWxpdmVyeSBjeWNsZSBv

ZiBhcHByb3hpbWF0ZWx5IDIxIGRheXMsIGVuc3VyaW5nIHByb2R1Y3QgcXVhbGl0eSBhbmQgYWNj

ZWxlcmF0aW5nIHlvdXIgcHJvamVjdCBwcm9ncmVzcy48L3A+CjxwPk91ciBjb3JlIHN0cmVuZ3Ro

czo8L3A+CjxwPkZhc3QgUHJvY2VzczogV2UgaGF2ZSBvdXIgb3duIHNoZWV0IG1ldGFsLCBDTkMg

bWFjaGluaW5nLCBhc3NlbWJseSwgYW5kIHRlc3RpbmcgcHJvZHVjdGlvbiBsaW5lcywgZW5hYmxp

bmcgZWZmaWNpZW50IGNvbGxhYm9yYXRpb24gYW5kIDIxLWRheSBkZWxpdmVyeS48L3A+CjxwPkhp

Z2ggUXVhbGl0eTogUHJvZHVjdHMgY29tcGx5IHdpdGggaW50ZXJuYXRpb25hbCBzdGFuZGFyZHMg

c3VjaCBhcyBDRSwgRkNDLCBVTCwgYW5kIFJvSFMuPC9wPgo8cD5DdXN0b21pemFibGU6IFdlIHNw

ZWNpYWxpemUgaW4gdGhlIFImYW1wO0QgYW5kIHByb2R1Y3Rpb24gb2YgR1BVIHNlcnZlciBjaGFz

c2lzLCBzdG9yYWdlIHNlcnZlcnMsIGFuZCB2YXJpb3VzIHJhY2stbW91bnQgY2hhc3Npcy48L3A+

CjxwPklmIHlvdSBjdXJyZW50bHkgcHJpb3JpdGl6ZSBmYXN0IGFuZCByZWxpYWJsZSBoYXJkd2Fy

ZSBkZWxpdmVyeSwgSSB3b3VsZCBiZSBoYXBweSB0byBzaGFyZSBzb21lIGJlc3Qtc2VsbGluZyBt

b2RlbHMgdGhhdCBoYXZlIHJlY2VpdmVkIGhpZ2ggcHJhaXNlIGluIHNpbWlsYXIgYnVzaW5lc3Mg

c2NlbmFyaW9zIGZvciB5b3VyIHJlZmVyZW5jZS48L3A+CjxwPkxvb2tpbmcgZm9yd2FyZCB0byB5

b3VyIHJlcGx5LjwvcD4KPHA+U2luY2VyZWx577yBJm5ic3A7PC9wPgo8cD5MdWN5PC9wPgo8cD5P

bmVDaGFzc2lzIEZhY3Rvcnk8L3A+CjwvZGl2PjwvYm9keT48L2h0bWw+PGRpdj48aW1nIHdpZHRo

PSIwIiBoZWlnaHQ9IjAiIGFsdD0iZDFub2Q2aHVxemVneSIgc3R5bGU9ImRpc3BsYXk6ZmxleCIg

c3JjPSJodHRwczovL3d4aHRoZnEuY29tL2NlbnRlci9yL2Qxbm9kNmh1cXplZ3kucG5nIi8+PC9k

aXY+

Chinese OEM spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 20 Nov 2025 19:25:00 -0700

Received: from [47.90.196.21] (port=42233 helo=out196-21.us.a.dm.aliyun.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vMGpP-00000000EPF-0DHy

for dave@nk.ca;

Thu, 20 Nov 2025 19:24:59 -0700

X-AliDM-RcptTo: ZGF2ZUBuay5jYQ==

Feedback-ID: default:laido@rgkgwv.com:alibabak_SmtpBatch:276535

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rgkgwv.com; s=aliyun-cn-hangzhou;

t=1763691793; h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;

bh=ir9G59onPsaZziuiWAEl1pYKiXX0/gc24QzSR7PdCAI=;

b=Y20IQlAEMDoZY759/JIhwJJEH0DgiNjo4xN2ihUUs7B/BcyRF1vPkISXENe2DHsxXVquQwSjZiossSivfU6rEGTqtM9BkSXmGNyhoD3GWyQiOJpOhVgedkq9r9tqkS16s+85mr9I7b/fDsvmPtn8g8hvVMQXQWK+n4s/lDMmKKw=

Received: from 127.0.0.1(mailfrom:laido@rgkgwv.com fp:SMTPD_-VHcEjIoyOD cluster:AY35D)

by smtpdm.aliyun.com(127.0.0.1);

Fri, 21 Nov 2025 10:23:13 +0800

X-EnvId: 600000247557777065

Content-Transfer-Encoding: base64

From: "Hello everyone!" <1776083248.z441b0@rgkgwv.com>

Sender: "Hello everyone!" <1776083248.z441b0@rgkgwv.com>

To: dave@nk.ca

Reply-To: "Hello everyone!" <1776083248.z441b0@rgkgwv.com>

Subject: Shortening Your Delivery Cycle: OneChassis High-Quality Server

Chassis, 21-Day Fast Delivery

Message-ID:

Date: Fri, 21 Nov 2025 02:23:13 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 14.0

X-Spam_score_int: 140

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi [Client Company ] OneChassis boasts 18 years of professional

OEM/ODM manufacturing experience, providing you with reliable solutions:

We consistently adhere to a delivery cycle of approximately 21 days, ensuring

produc [...]



Content analysis details: (14.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.196.21 listed in will-spam-for-food.eu.org]

[47.90.196.21 listed in will-spam-for-food.eu.org]

[47.90.196.21 listed in will-spam-for-food.eu.org]

[47.90.196.21 listed in will-spam-for-food.eu.org]

[47.90.196.21 listed in will-spam-for-food.eu.org]

[47.90.196.21 listed in will-spam-for-food.eu.org]

[47.90.196.21 listed in will-spam-for-food.eu.org]

[47.90.196.21 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.196.21 listed in dnsbl.ahbl.org]

[47.90.196.21 listed in dnsbl.ahbl.org]

[47.90.196.21 listed in dnsbl.ahbl.org]

[47.90.196.21 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.196.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.196.21 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.196.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.196.21 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[47.90.196.21 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Shortening Your Delivery Cycle: OneChassis High-Quality Server

Chassis, 21-Day Fast Delivery



PGh0bWw+PGhlYWQ+PC9oZWFkPjxib2R5PjxkaXYgc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgbGlu

ZS1oZWlnaHQ6IDEuNDsiPgo8cD4mbmJzcDs8c3BhbiBzdHlsZT0iY29sb3I6IHJnYigxNSwgMTcs

IDIxKTsgZm9udC1mYW1pbHk6IHF1b3RlLWNqay1wYXRjaCwgSW50ZXIsIHN5c3RlbS11aSwgLWFw

cGxlLXN5c3RlbSwgQmxpbmtNYWNTeXN0ZW1Gb250LCAnU2Vnb2UgVUknLCBSb2JvdG8sIE94eWdl

biwgVWJ1bnR1LCBDYW50YXJlbGwsICdPcGVuIFNhbnMnLCAnSGVsdmV0aWNhIE5ldWUnLCBzYW5z

LXNlcmlmOyBmb250LXNpemU6IDE2cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50

LWxpZ2F0dXJlczogbm8tY29udGV4dHVhbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u

dC13ZWlnaHQ6IDQwMDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogMjsgdGV4dC1h

bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aWRv

d3M6IDI7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7

IHdoaXRlLXNwYWNlOiBwcmUtd3JhcDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDIzNywgMjQzLCAy

NTQpOyB0ZXh0LWRlY29yYXRpb24tdGhpY2tuZXNzOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24t

c3R5bGU6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlhbDsgZGlzcGxheTog

aW5saW5lICFpbXBvcnRhbnQ7IGZsb2F0OiBub25lOyI+SGkgW0NsaWVudCBDb21wYW55IF08L3Nw

YW4+PC9wPgo8cD5PbmVDaGFzc2lzIGJvYXN0cyAxOCB5ZWFycyBvZiBwcm9mZXNzaW9uYWwgT0VN

L09ETSBtYW51ZmFjdHVyaW5nIGV4cGVyaWVuY2UsIHByb3ZpZGluZyB5b3Ugd2l0aCByZWxpYWJs

ZSBzb2x1dGlvbnM6IFdlIGNvbnNpc3RlbnRseSBhZGhlcmUgdG8gYSBkZWxpdmVyeSBjeWNsZSBv

ZiBhcHByb3hpbWF0ZWx5IDIxIGRheXMsIGVuc3VyaW5nIHByb2R1Y3QgcXVhbGl0eSBhbmQgYWNj

ZWxlcmF0aW5nIHlvdXIgcHJvamVjdCBwcm9ncmVzcy48L3A+CjxwPk91ciBjb3JlIHN0cmVuZ3Ro

czo8L3A+CjxwPkZhc3QgUHJvY2VzczogV2UgaGF2ZSBvdXIgb3duIHNoZWV0IG1ldGFsLCBDTkMg

bWFjaGluaW5nLCBhc3NlbWJseSwgYW5kIHRlc3RpbmcgcHJvZHVjdGlvbiBsaW5lcywgZW5hYmxp

bmcgZWZmaWNpZW50IGNvbGxhYm9yYXRpb24gYW5kIDIxLWRheSBkZWxpdmVyeS48L3A+CjxwPkhp

Z2ggUXVhbGl0eTogUHJvZHVjdHMgY29tcGx5IHdpdGggaW50ZXJuYXRpb25hbCBzdGFuZGFyZHMg

c3VjaCBhcyBDRSwgRkNDLCBVTCwgYW5kIFJvSFMuPC9wPgo8cD5DdXN0b21pemFibGU6IFdlIHNw

ZWNpYWxpemUgaW4gdGhlIFImYW1wO0QgYW5kIHByb2R1Y3Rpb24gb2YgR1BVIHNlcnZlciBjaGFz

c2lzLCBzdG9yYWdlIHNlcnZlcnMsIGFuZCB2YXJpb3VzIHJhY2stbW91bnQgY2hhc3Npcy48L3A+

CjxwPklmIHlvdSBjdXJyZW50bHkgcHJpb3JpdGl6ZSBmYXN0IGFuZCByZWxpYWJsZSBoYXJkd2Fy

ZSBkZWxpdmVyeSwgSSB3b3VsZCBiZSBoYXBweSB0byBzaGFyZSBzb21lIGJlc3Qtc2VsbGluZyBt

b2RlbHMgdGhhdCBoYXZlIHJlY2VpdmVkIGhpZ2ggcHJhaXNlIGluIHNpbWlsYXIgYnVzaW5lc3Mg

c2NlbmFyaW9zIGZvciB5b3VyIHJlZmVyZW5jZS48L3A+CjxwPkxvb2tpbmcgZm9yd2FyZCB0byB5

b3VyIHJlcGx5LjwvcD4KPHA+U2luY2VyZWx577yBJm5ic3A7PC9wPgo8cD5MdWN5PC9wPgo8cD5P

bmVDaGFzc2lzIEZhY3Rvcnk8L3A+CjwvZGl2PjwvYm9keT48L2h0bWw+PGRpdj48aW1nIHdpZHRo

PSIwIiBoZWlnaHQ9IjAiIGFsdD0ieGI0M2NmcnR5MzNucSIgc3R5bGU9ImRpc3BsYXk6ZmxleCIg

c3JjPSJodHRwczovL3Jna2d3di5jb20vY2VudGVyL3IveGI0M2NmcnR5MzNucS5wbmciLz48L2Rp

dj4=