Wealthsimple Phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 13:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6Co6-00000000Cfv-1nS0

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 13:57:38 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 13:57:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from gejiz.shanjt.com ([20.220.213.55]:57561)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x68Jb-000000006Qk-46qH

for sales@nk.ca;

Mon, 14 Sep 2026 09:09:59 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=gejiz.shanjt.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;

i=wealthvgmbns@gejiz.shanjt.com;

bh=7XJ1G2AyJhxvSL73zWDnU88h05UYhRMIQxbfd8ebQNU=;

b=pmUsfnt48csAm1393Hb/4tKyWL62JJ5dtWxlBM5Zv+JqKdSGtmFXH3W8hbuS051q0oyLLtaVA18z

IAqIrBCXLBweWDtCUHEHm4DHtrUyYZ+uNngvdgGs1M8iBFM8oW5eJFS781sQPDzYlcCm0Wf76G/Y

q/ve1l+bw36XA7duIGuXCp7qtMSZuEigdUM4Xu1jehIL57hhiMO/pbTMvnY/Nei5M6NGUSid2h6R

MZtiuYv5zxtV17LgmT1x1NHDEfvdorC9WvirsiJ8qpQykKNelY/1Mzae3TLcdENNmEP7/kY//rD/

a5Ua+9k14N8mNIwhBoFxTQMQ2TcMQ6gm6SX+AA==

Content-Type: multipart/alternative;

boundary="===============3102166984595308321=="

MIME-Version: 1.0

From: Wealthsimple | Smart investing

To: sales@nk.ca

Subject: A few details on your account need updating

Date: Mon, 14 Sep 2026 11:09:03 -0400

Message-ID: <178939854399.4215.14406304789573679739@gejiz.shanjt.com>

Reply-To: feedback@wealthsimple.com

Feedback-ID: campaign:wealthsimple.com:mailer

X-Auto-Response-Suppress: OOF, DR, RN, NRN

X-Spam_score: 44.3

X-Spam_score_int: 443

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello sales, Thank you for being a valued customer. We found

that some of your registered information has expired or is incomplete. Please

take a moment to review and update the following: - ID verification documents

- Registered address and contact details - Missing required fields



Content analysis details: (44.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.220.213.55 listed in will-spam-for-food.eu.org]

[20.220.213.55 listed in will-spam-for-food.eu.org]

[20.220.213.55 listed in will-spam-for-food.eu.org]

[20.220.213.55 listed in will-spam-for-food.eu.org]

[20.220.213.55 listed in will-spam-for-food.eu.org]

[20.220.213.55 listed in will-spam-for-food.eu.org]

[20.220.213.55 listed in will-spam-for-food.eu.org]

[20.220.213.55 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.220.213.55 listed in dnsbl.ahbl.org]

[20.220.213.55 listed in dnsbl.ahbl.org]

[20.220.213.55 listed in dnsbl.ahbl.org]

[20.220.213.55 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.220.213.55 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.220.213.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.220.213.55 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.220.213.55 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[20.220.213.55 listed in zen.spamhaus.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: gejiz.shanjt.com/20.220.213.55]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[20.220.213.55 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: shanjt.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: gejiz.shanjt.com/20.220.213.55]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_ACCNT BODY: mangled account(s)

2.3 MANGLED_TIME BODY: mangled time

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.220.213.55 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

Subject: {SPAM?} A few details on your account need updating



--===============3102166984595308321==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Hello sales,



Thank you for being a valued customer. We found that some of your

registered information has expired or is incomplete. Please take a

moment to review and update the following:



- ID verification documents

- Registered address and contact details

- Missing required fields



Reference: 82534261

Account: sales@nk.ca



Review your details:

https://shrenhe.com/?email=sales@nk.ca&uid=8Ud6rjFJ5aMjRXmYFcGzKtCe



Keeping your details current is one of the simplest ways to keep

your account safe. The whole process takes just a few minutes.



Thank you for your time,

The Wealthsimple team



---

This email was sent automatically to sales@nk.ca.

If this message was not meant for you, you can safely ignore it.



--===============3102166984595308321==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit















A few details on your account need updating





















































































Wealthsimple


Important notice



A few details on your
account need updating‌



Some of your registered information has expi‌red or is incomplete.













Review your details




Hello sales,



Thank you for being a va‍lued customer. We found that some of your regist​ered information has e‌xpired or is incomple​te. Please take a moment‌ to review and update th‌e following:




• ID verification docume‌nts


• Registered address an​d contact details


• Missing required fields



Reference: 60385578  |  Account: sales@nk.ca












Keeping your details cu‍rrent is one of the simplest ways to keep your ac​count safe. The whole pr‌ocess takes just a few mi‍nutes.




Thank you for your ti‍me,



The Wealthsimple team




This email was sen‌t automatically to sales@nk.ca.


If this message was ​not meant for you, you can safely ignore it.

‌





Help

 · 

Privacy

 · 

Terms



Copyright Wealthsimple Technologies Inc. All‌ rights reserved.














--===============3102166984595308321==--

Wealthsimple phish from Microsoft outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 13:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6Cnx-00000000CXu-1qtW

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 13:57:29 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 13:57:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ynoxv.sxgqjz.com ([20.38.1.158]:50605)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x68JR-000000006Pe-2947

for support@nk.ca;

Mon, 14 Sep 2026 09:09:49 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=ynoxv.sxgqjz.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;

i=wealthpjibwi@ynoxv.sxgqjz.com;

bh=b5cHcSQY4QSSeP3XUuuP91R4QSzKt+RZtZ+htQp1Cb8=;

b=mU1aHuIrGrN6zyx4SpsrnZMQ3Ywcj8ZNAVsFqa8Rd1IkWHbsKBZF6FkO/KQr4+k0Me95amXyaJjF

xBZxvBGjQco63Gra40HC6ee51/nnhDiJRwK63IM1QmqJmtXaFjY7Wj7gHZ7cRUTWOWAXYUTnKs3b

D1tB9GjMzW4xPd2E9Hb8xql8hlCI8CyEkFsJrGxxyBN9D0n0t/TpY/OsKNhdEVNBSB86nDcuOQlY

7oMRMHJvL7rb/D4vPBuHIJhBPomKRSWYVux1baQ2NfqG7X0TX4o2tPwpNKI7pjHPQuXDo5hV8T6E

Shg4OoElFoLIXKEeTYttS0p+ps71gjpsqB6RyA==

Content-Type: multipart/alternative;

boundary="===============6344551623087199502=="

MIME-Version: 1.0

From: Wealthsimple investing

To: support@nk.ca

Subject: Your Wealthsimple account details are expiring

Date: Mon, 14 Sep 2026 11:08:53 -0400

Message-ID: <178939853379.4234.11763574080334784960@ynoxv.sxgqjz.com>

Reply-To: feedback@wealthsimple.com

Feedback-ID: campaign:wealthsimple.com:mailer

X-Auto-Response-Suppress: OOF, DR, RN, NRN

X-Spam_score: 38.4

X-Spam_score_int: 384

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello support, A note from Wealthsimple Your account details

need a quick update



Content analysis details: (38.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.38.1.158 listed in will-spam-for-food.eu.org]

[20.38.1.158 listed in will-spam-for-food.eu.org]

[20.38.1.158 listed in will-spam-for-food.eu.org]

[20.38.1.158 listed in will-spam-for-food.eu.org]

[20.38.1.158 listed in will-spam-for-food.eu.org]

[20.38.1.158 listed in will-spam-for-food.eu.org]

[20.38.1.158 listed in will-spam-for-food.eu.org]

[20.38.1.158 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.38.1.158 listed in dnsbl.ahbl.org]

[20.38.1.158 listed in dnsbl.ahbl.org]

[20.38.1.158 listed in dnsbl.ahbl.org]

[20.38.1.158 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.38.1.158 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.38.1.158 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.38.1.158 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.38.1.158 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[20.38.1.158 listed in zen.spamhaus.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: ynoxv.sxgqjz.com/20.38.1.158]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[20.38.1.158 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: sxgqjz.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ynoxv.sxgqjz.com/20.38.1.158]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.38.1.158 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_Q FULL: Dec/Hex char Enc [Qq]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_X FULL: Dec/Hex char Enc [Xx]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Your Wealthsimple account details are expiring



--===============6344551623087199502==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Hello support,



A note from Wealthsimple



Your account details need a quick update



Some of the details on your account are missing or have expired. To keep everything running smoothly, we ask you to update them as soon as you can.



It only takes a minute or two - and it helps us keep your account safe.



ACCOUNT

support@nk.ca



REFERENCE

91397452



STATUS

Update required



Update your details:

https://lytongyi.com/?uid=YClAsX5q9FQYdehYUi0JOiUv



Warm regards,

The Wealthsimple team



----------------------------------------------------------------



This email was sent automatically to support@nk.ca.

If this message was not meant for you, you can safely ignore it.



Help: https://lytongyi.com/?uid=epm85bFVnObW5bjcRc5AzTUU

Privacy: https://lytongyi.com/?uid=QHeX8QmFq5fILMlpawrVWbwH

Terms: https://lytongyi.com/?uid=tmimFDHohxCh6NOp2xJEBUwG



Wealthsimple. All rights reserved.



--===============6344551623087199502==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Your Wealthsimple account details are expiring































































































Wealthsimple


A note from Wealthsimple


Your account details
need a quick update


Hello support,



Some of the details on y‌our account are missin​g or have expired. To kee‌p everything running smoothly, we ask you to update them as soon as you ca‍n.












Update your details




It only takes a minute o‍r two - and it helps us keep your account safe.
























Account


support@nk.ca


Reference


80585847


Status


Update required




Warm regards,



The Wealthsimple team




This email was s‍ent automatically to support@nk.ca.


If this message was​ not meant for you, you​ can safely ignore it.





Help

 · 

Privacy

 · 

Terms



Wealthsimple. All righ‍ts reserved.














--===============6344551623087199502==--

Wealthsimple phish from Microsoft outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 13:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6Cns-00000000CTY-0k9u

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 13:57:24 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 13:57:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from pniag.phjjnw.com ([20.168.54.235]:43041)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x68Iy-000000006NG-1CC6

for root@nk.ca;

Mon, 14 Sep 2026 09:09:20 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=pniag.phjjnw.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;

i=wealthqkftop@pniag.phjjnw.com;

bh=txWNPSx1oI/lf1BOaS2nKmss19VEXeQji9aeQeFxYHw=;

b=RX1TtKcadOXILj7+m4ozaTtZsVL7rTNy1h01eMmj2n+VsRWqJZ3M4RuKyxL54k/2gNyWwIVBfU0n

+sN00+Oj2hMJCHLORC7tMmiFDcM1XUSbcFWx4of7cXBdA9ofwTZ3y6E1CH7Ke+aFkT93XFx7PQGG

wlEzufDpNhlagky8jSk81t4/qXSsT0rr1Fy8fO2+UlcYQIdXg4zHK7iYU2vS2vieBtnjb0C8blpm

rv5Y/XYYJWbzFyqdCkHQxjLgSoeBiu9KR3hh8Zxv/CD2ml+3QXz57X1icBK/1KnOBdZKZPnLEc7P

GxhqtUeyHgQ1cymoMvWSHGGP+b7AC6sJlS5TAQ==

Content-Type: multipart/alternative;

boundary="===============7721671239367823668=="

MIME-Version: 1.0

From: Wealthsimple

To: root@nk.ca

Subject: Your Wealthsimple account details are expiring

Date: Mon, 14 Sep 2026 11:08:24 -0400

Message-ID: <178939850421.4488.8333924186683704417@pniag.phjjnw.com>

Reply-To: feedback@wealthsimple.com

Feedback-ID: campaign:wealthsimple.com:mailer

X-Auto-Response-Suppress: OOF, DR, RN, NRN

X-Spam_score: 31.1

X-Spam_score_int: 311

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello root, A note from Wealthsimple Your account details

need a quick update



Content analysis details: (31.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.168.54.235 listed in will-spam-for-food.eu.org]

[20.168.54.235 listed in will-spam-for-food.eu.org]

[20.168.54.235 listed in will-spam-for-food.eu.org]

[20.168.54.235 listed in will-spam-for-food.eu.org]

[20.168.54.235 listed in will-spam-for-food.eu.org]

[20.168.54.235 listed in will-spam-for-food.eu.org]

[20.168.54.235 listed in will-spam-for-food.eu.org]

[20.168.54.235 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.168.54.235 listed in dnsbl.ahbl.org]

[20.168.54.235 listed in dnsbl.ahbl.org]

[20.168.54.235 listed in dnsbl.ahbl.org]

[20.168.54.235 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.168.54.235 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.168.54.235 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.168.54.235 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.168.54.235 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: phjjnw.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.168.54.235 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Your Wealthsimple account details are expiring



--===============7721671239367823668==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Hello root,



A note from Wealthsimple



Your account details need a quick update



Some of the details on your account are missing or have expired. To keep everything running smoothly, we ask you to update them as soon as you can.



It only takes a minute or two - and it helps us keep your account safe.



ACCOUNT

root@nk.ca



REFERENCE

00619497



STATUS

Update required



Update your details:

https://heyiet.com/?uid=gKR1iNPeUa6HlicLcvQ6gRi9



Warm regards,

The Wealthsimple team



----------------------------------------------------------------



This email was sent automatically to root@nk.ca.

If this message was not meant for you, you can safely ignore it.



Help: https://heyiet.com/?uid=h7OKQk2sj4tHlSazCH2UhuB7

Privacy: https://heyiet.com/?uid=sTKsCqSCzMjxqycAhxQy9d7o

Terms: https://heyiet.com/?uid=u50ypQLwxhfjcWdLugQ9zaAZ



Wealthsimple. All rights reserved.



--===============7721671239367823668==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Your Wealthsimple account details are expiring































































































Wealthsimple


A note from Wealthsimpl​e


Your account details
need a quick update


Hello root,



Some of the details on y​our account are missing​ or have expired. To keep‌ everything running smo‍othly, we ask you to upda‌te them as soon as you ca​n.












Update your details




It only takes a minute or t‍wo - and it helps us keep you​r account safe.
























Account


root@nk.ca


Reference


65426187


Status


Update required




Warm regards,



The Wealthsimple team‍




This email was sent‍ automatically to root@‍nk.ca.


If this message was no‌t meant for you, you can‌ safely ignore it.





Help

 · 

Privacy

 · 

Terms



Wealthsimple. All rights reserved.














--===============7721671239367823668==--

Wealthsimple phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 13:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x6Cnj-00000000CHs-37jL

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 13:57:15 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 13:57:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from fejjr.hblstv.com ([20.168.54.127]:48897)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x68I9-000000006J0-31Nh

for doctor@nl2k.ab.ca;

Mon, 14 Sep 2026 09:08:29 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=fejjr.hblstv.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:Reply-To;

i=wealthrtiafl@fejjr.hblstv.com;

bh=PD2qHejvxfZaXtmUYELHzKHqE0KedAQTsuKfP+dkVtU=;

b=ECPTQ8vj9PWU/HZA3pPdF9W6AD1RurA7FmyvQzjTxLtwa590nxs0lRfwNln1wjQhuZ4KwwYN81aX

L2Fran3vk2eijrxK8nGlPkAGFctQSxzfavXJbq+zrYfowfpGHq5vUgEnoVYxqgGaynp/8jtnCetZ

QWZ8NxEKqQLIJ3GNNXRCrF/5Sfujy/w2ZqLbvEarfTO0i6zHQ+Gk5LlKP3kyECMJoX6xAhjbLVvO

BQxrQ6rNJtHeNqq00F3zILb4FS+9sP0egxgzTBYZ1TLYJQNF7DAsb7cwOMSpo0QoDG7UdUGIQsGt

0DwzsiIndedvfoJhGvIN0Kq8Q8qbdWQOd2hZwg==

Content-Type: multipart/alternative;

boundary="===============5509838252757288125=="

MIME-Version: 1.0

From: Wealthsimple | Smart investing

To: doctor@nl2k.ab.ca

Subject: A few details on your account need updating

Date: Mon, 14 Sep 2026 11:07:34 -0400

Message-ID: <178939845416.4242.1786452524356810712@fejjr.hblstv.com>

Reply-To: feedback@wealthsimple.com

Feedback-ID: campaign:wealthsimple.com:mailer

X-Auto-Response-Suppress: OOF, DR, RN, NRN

X-Spam_score: 32.1

X-Spam_score_int: 321

X-Spam_bar: ++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello doctor, Thank you for being a valued customer. We found

that some of your registered information has expired or is incomplete. Please

take a moment to review and update the following: - ID verification documents

- Registered address and contact details - Missing required fields



Content analysis details: (32.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.168.54.127 listed in will-spam-for-food.eu.org]

[20.168.54.127 listed in will-spam-for-food.eu.org]

[20.168.54.127 listed in will-spam-for-food.eu.org]

[20.168.54.127 listed in will-spam-for-food.eu.org]

[20.168.54.127 listed in will-spam-for-food.eu.org]

[20.168.54.127 listed in will-spam-for-food.eu.org]

[20.168.54.127 listed in will-spam-for-food.eu.org]

[20.168.54.127 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.168.54.127 listed in dnsbl.ahbl.org]

[20.168.54.127 listed in dnsbl.ahbl.org]

[20.168.54.127 listed in dnsbl.ahbl.org]

[20.168.54.127 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.168.54.127 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.168.54.127 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.168.54.127 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.168.54.127 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: hblstv.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.3 MANGLED_ACCNT BODY: mangled account(s)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.168.54.127 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_X FULL: Dec/Hex char Enc [Xx]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} A few details on your account need updating



--===============5509838252757288125==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Hello doctor,



Thank you for being a valued customer. We found that some of your

registered information has expired or is incomplete. Please take a

moment to review and update the following:



- ID verification documents

- Registered address and contact details

- Missing required fields



Reference: 70553300

Account: doctor@nl2k.ab.ca



Review your details:

https://szdwfilm.com/?email=doctor@nl2k.ab.ca&uid=TFtEmrzalnkXwdBJLaRFlXrL



Keeping your details current is one of the simplest ways to keep

your account safe. The whole process takes just a few minutes.



Thank you for your time,

The Wealthsimple team



---

This email was sent automatically to doctor@nl2k.ab.ca.

If this message was not meant for you, you can safely ignore it.



--===============5509838252757288125==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit















A few details on your account need updating





















































































Wealthsimple


Important notice



A few details on your
account need updating



Some of your registered information has expir‍ed or is incomplete.













Review your details




Hello doctor,



Thank you for being a valued customer. We foun​d that some of your regi‌stered information has expired or is incomplet​e. Please take a momen‍t to review and update the following:




• ID verification documents


• Registered address an‍d contact details


• Missing required field‍s



Reference: 38040164  |  Account: doctor@nl2k.‌ab.ca












Keeping your details c‍urrent is one of the simplest ways to keep your ac‌count safe. The whole pr‍ocess takes just a few ‍minutes.




Thank you for your time‍,



The Wealthsimple team​




This email was sent automatically to doctor@​nl2k.ab.ca.


If this message was‌ not meant for you, you can safely ignore it.





Help

 · 

Privacy

 · 

Terms



Copyright Wealthsimpl‍e Technologies Inc. Al‍l rights reserved.














--===============5509838252757288125==--

Pfizer supplier spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 07:08:14 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x66Ps-000000009g3-2sgd

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 07:08:12 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 07:08:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westeuropeazolkn19013013.outbound.protection.outlook.com ([52.103.33.13]:21112 helo=AM0PR02CU008.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x66Jp-00000000Dbr-2COu

for sales@nk.ca;

Mon, 14 Sep 2026 07:02:08 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Sw8gWu53qSGHI3m5D8vqe+crMUNi6xqZTmAZ6si/2OWobVWrAOBj8/2qEalDPZAFSTjVzxZY4S8XDiLpINFRXVfQ3Jeb2P5aCeLksOmnMvbkDwe4OZQ8Y21OGji0XPlgAgeW7iGhFYZdVoTdFMZRouzsoP9YSeKTi8kvwXBiiB/s4eVRR9+AFm8xTVubRr5l9JF+4Mikwi3uJPTdB+sKmxWRHbpG9QlBSc0IzedAbMtbqiwUgY8UF+OFPLOEiZjegPUvSk9oXMISXgphtDLVl6m0TjFaiY5LJE/Gv4DrWtaezRhPsc6+vo6ATVwKSC9ojmNjW+d82nlr6bRluoFwGw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=XhrOD47Tt4Zgt9mVWWCj/+wGvOHqKr+0U34OEC7oOnY=;

b=u59ieT4/AO5ECOHdYmf3jThKblng/krMoCNBwJ7CBbrEp8THFkWwS2pkDtkuMlQysDcm9vO8UvjMEVJaM2Bzy5frVuIKGnD0XiA8TwliWw5X7vAxdXiEQBvAYw42fKMHKtKxV4gsARMxYNLCBg0VfnRV8oZD+DDYT/AkAZ3EYMYwghco50G3U9ETvhg3Ia+bvqjAhnswYWp/iJ0PDX5mx1NbIaYvSQCVVSWKYIv77+bq2KokXpmH4ANBGFaLjNGAe5MOFBpc/P9iqO+DdQVHNdsPn3IrFyrPsCX55Eec08AT3zfmpUoZ6NijeWZqFix01xQK+h37eFfpgPN+ldcf0g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=XhrOD47Tt4Zgt9mVWWCj/+wGvOHqKr+0U34OEC7oOnY=;

b=hJ/oRPuSwEIAAOVvpkLSAlFMDj4YR+coXe68VYgigLYu9qZk5LlBFaV0nOCLJS/Vk27qHrkSYiZ/lGXiwVgzKH08ipXft2yfIqRtfC0KmLNAKT5TBhOTY2U0GDB+HUK1lZu96UCwJT/aUvJ+12RmP84pQX9aOp+s6rhjyCk2BjZaxPjF68LxBWbET+g1b1P4IUHk7Lbuy3fx5IgEIESE0Khp276UwmqPGD4/FMXa6Rypp9LaGhK/4OVDmOt3/MuIKzGay7+54cpbuOLV3X6IMN0SKNp9E4Lfxhoj0ysNctCjOXpQYr1oGgFMnxAXSnyRiyUXiKlEyh4qphAEtPi2mQ==

Received: from MRWPR02MB12186.eurprd02.prod.outlook.com (2603:10a6:501:80::21)

by DB9PR02MB7843.eurprd02.prod.outlook.com (2603:10a6:10:327::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.12; Mon, 14 Sep

2026 13:00:53 +0000

Received: from MRWPR02MB12186.eurprd02.prod.outlook.com

([fe80::cf5a:d3fc:5586:4c53]) by MRWPR02MB12186.eurprd02.prod.outlook.com

([fe80::cf5a:d3fc:5586:4c53%2]) with mapi id 15.21.0406.007; Mon, 14 Sep 2026

13:00:53 +0000

From: Pfizer Supply

Subject: Request for quotation.

Thread-Topic: Request for quotation.

Thread-Index: AQHdREjPY0bLIWXtwUaTCA3yZlDLZLbOCTX6

Date: Mon, 14 Sep 2026 13:00:52 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MRWPR02MB12186:EE_|DB9PR02MB7843:EE_

x-ms-office365-filtering-correlation-id: 805bdc9f-0e39-4214-d45b-08df1260350e

x-microsoft-antispam:

BCL:0;ARA:14566002|24121999003|19110799012|8060799015|22091999003|20110799003|39105399006|8062599012|24071999003|25010399006|4140399003|9400799043|30051999003|41001999006|31061999003|24021099003|15030799006|55001999006|15080799012|7071999006|20031999006|3412199025|440099028|4302099013|102099032|1602099012|40105399003|43065399003|31055399003|2607281247196008|11120399003|10035399007|26121999007|26131999018;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?GLCQrS3DKXL8mar7HJxhonBFk7b9Ez1edcKZqUHv8K4PtYFjIsgiJr+LEL?=

=?iso-8859-1?Q?ARADnsVgsruHTMdl/1Iwh7nR78w01oDgpxtPnEv4IufgjDwkigPKI/zUGb?=

=?iso-8859-1?Q?fFYM2OBMK4zNttlO51W1LsZmJ6e+zyz75P9XBr4PoOn0Rnyr04pa8n8dKp?=

=?iso-8859-1?Q?YaO0tWMCV4ARHXVwtbeNP7WWBCtuBCau7ihp7W2FvUzvRkfGzcrUbgep6W?=

=?iso-8859-1?Q?RX127QQcBZZvcIVoAmITi6iWwu87FZq5ZsIsbtObxRiLIg9mF5LHguXHVC?=

=?iso-8859-1?Q?dYJ64OgjKTKfOPKpQ+x94LLvbynvMsmSqpGTNjj1Y0h/xl9eH9JZ0Wh0gU?=

=?iso-8859-1?Q?3cRhMYuBf3E4FMO5MvV0mL5BumrJHlqv3be5LD2p3ClCIyFzP06e4KFCpT?=

=?iso-8859-1?Q?yLZwCNB6Tb87AJvvSiHZSlQ6DX/xHZyjtTZ4nWHHBzZp9jJIzhnGb75HM6?=

=?iso-8859-1?Q?l+wxQnVHCdMaCFzJ1DrvahCrQqr95JaqNh0PS0A2ZUdH4osGXFVLXcu/Jo?=

=?iso-8859-1?Q?TQD/YUAHR9Cy35OoTSQISZznWUD0FOfJjtlV27F5paEYs9JekjKqmDxB9w?=

=?iso-8859-1?Q?FJZQgj6cwcadWSdpP63yyHaw8Hj4uClXythm5dHEZ9MzQ/dCX13ELSJAef?=

=?iso-8859-1?Q?BEGU7qpWTFwTUfA5+jobSm2UF9UBmIgqoxOpYp67dtXXMzqEbwLlQ5Kk96?=

=?iso-8859-1?Q?h49EB4uxcc6Myuf2s8yDHii4LkiojNvQOMuHMZweKiOKQegazxSwiUse+7?=

=?iso-8859-1?Q?t5u1AmF43IXJ9YJ3/shSbtZTET11dqQnXR4m1txvzTMBKfcMu1hIW2negG?=

=?iso-8859-1?Q?ji+du9pQdlNJyHQ4LVbJ6JGnrPUWMr07m3gyxpUiQptYmDr869AGHG5NVJ?=

=?iso-8859-1?Q?6umG5ox9xBIWdxvZtlR/t0eQ1WPda1HLeThWKG6l1DDgCHIB3dBtscD8gQ?=

=?iso-8859-1?Q?JSfArRXSoJgo/colhk+VWbG2A4VLbt2XyB974BJP4pKCWsYIYrl15m3Cf7?=

=?iso-8859-1?Q?ZHmmL1UpJiDa1f7jxOpDtHUPQy4IrGNHRt85Bkv9dpI8m1EXWNmoz8ujAm?=

=?iso-8859-1?Q?mz7c9rDqMOxly9yOWYv/5pRWyhYVZdmStZVbw8YQhbm2iYiBF/TMHVn2do?=

=?iso-8859-1?Q?AvrGPhl5WgepEiQkjcXQfjOVJ2SDhjPw020Wp/8kEBmR2/aNj02J3ws5Kg?=

=?iso-8859-1?Q?OFwnT74E2S7OBUifxcL9YPlEVSh7TjHX7wooJIXN3ahvwInVS/Let/JOOg?=

=?iso-8859-1?Q?auwlPVQ99j6F6gXF14XRa6sLIklkoY4wPzpQ5EX5XcohZAnsXDksGtoV2d?=

=?iso-8859-1?Q?a3CW1ZVeZh9mHWBN32VKdBwc7dmyT6KYb/H00GIXj1+nJZdMIDx5NI3YOT?=

=?iso-8859-1?Q?LukKMEDixZYLCE2w2JN5D5/3nkjI5POwkzjgmZQqso2im6sIK3ZVyIOv8k?=

=?iso-8859-1?Q?a/wemWFLKCI7kxBaCbDthNY4Od7w9qAw+To1tgzflLRWK+oPgINDDrGZLp?=

=?iso-8859-1?Q?y8KBPnzDFPlg9L/VmMu4Rz?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?gTZfLtFupvuWTT+iJneTax00DUv+rxP5qryC9ShB5Ze9kfNqrnfjzah77r?=

=?iso-8859-1?Q?2z6GovQTddl2+02pDjALPZ6bXCMWX4QKgI0zXifFXsETsBa8+fOGSrr/90?=

=?iso-8859-1?Q?dAMu3aeubEqckbydnD+7oYUUDeLXesokE90D/4FIjxEcQ+8TAirnhvziee?=

=?iso-8859-1?Q?SPOb2H9+v9ZGSZQ3uAn+ng+GGCUOjyYUmvb5KpRqUOTrG+jz5S8iZj1jq3?=

=?iso-8859-1?Q?+/xHRZl1+b531ZHYujdPTGWiaIDmcAS0A41FybJFtvY2WZ3HDCzN97bPfv?=

=?iso-8859-1?Q?TfDZv+wt/Oz+OLBoQGyRZdvGLubAkmHty7SuEUCwQ2VJrpTrdMEUTamzQx?=

=?iso-8859-1?Q?WtGarZbH44dPhpZ00ZfySTZu0zOIVETeOmnJMtkAA85UjC4W3aKzmakrm6?=

=?iso-8859-1?Q?PRzyFM99c/mz4/gxxrB1NxgIIRYhug/ew9sVlwz1OI8Pm9NO4E2YqDlgmd?=

=?iso-8859-1?Q?YT5gH5hi/pl9jOVlnwhbDoSYbDvkYtWpZXkJq0++2PBFEVSC9lzvorTviE?=

=?iso-8859-1?Q?KR5eR1WmrzMIL/TD4yvHnjQvH6IcO4o5UlC54gN2XyPftANm0qmbvId/G6?=

=?iso-8859-1?Q?ZkzPEbpct21vaHcAXmMQQ6mJj1TKEyIx9VF4B0QeIBV64M/1FahpCUHK3i?=

=?iso-8859-1?Q?T2hGlwowUkzhdaudMGMxARpIxIRdgsIrZHU67hAH3KpcZOg2PgS9g6bQES?=

=?iso-8859-1?Q?ruaPiZKQnYzVKvWnWBsNdH2twGyFQeudVBY/TzzcdDghV0jBXAiKfCHJYh?=

=?iso-8859-1?Q?p0Jh5OWaTeAPYRxxy+HyYT3X0GU+X4h/OuPGa7OmY86roG4xMCSraggmKz?=

=?iso-8859-1?Q?JBvCI49IXTSx+DkUHv+VVm+1Yd38Hz2cu6wd5tyG+r5zKWE6py/WOlPe8p?=

=?iso-8859-1?Q?JVaGyRmeEoUhvaAHP9/s8XlNd9Z6wBeNn9dUhPAt9tbZtiDIBW0A9n1ELy?=

=?iso-8859-1?Q?zlwQ9mSSFRwB8GiYzihxT0fscDRiUemQG8CDIzr7Mk5ipBsMggSFtBp0s9?=

=?iso-8859-1?Q?4A/Togubd0Xa68vi1Omtg65vViRVnghAfiLynZ+rQELjDFdgUCrbwG/MjQ?=

=?iso-8859-1?Q?zSpOn+ZwOsFh93WSakRR3bV4t4LHlXf1WkuOOzeghUr9En5gsSsD1794WU?=

=?iso-8859-1?Q?ODTqBcd5d1zPvH4UDUeptUqPfPAaOFU587DyEPOl3Ilw7EaUBmXFEcEwpl?=

=?iso-8859-1?Q?MF1HMw3OfOZCFGD8KuPGQjWUiP7vVXULZ2NecSE2srPV57kwE01UsQvW6d?=

=?iso-8859-1?Q?+PBwCJxLCmD19CpZFkGByjDOg1Q+U5YHVq3cyoW3d28VMj+tGg+0gJbwXq?=

=?iso-8859-1?Q?tUytiH1qHFGtAQ0s/7gUXMMoza4HS6smN1P/mERUUgqV0WqoIMzhUme/Jo?=

=?iso-8859-1?Q?BZ+Qq7c0zKbFr7sXDNL9xsg3py8ijPQhW+Wnd4ehlq4A0269EEZuA=3D?=

Content-Type: multipart/alternative;

boundary="_000_MRWPR02MB121863298ADEE37EEF69F76F6A7BB2MRWPR02MB12186eu_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MRWPR02MB12186.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 805bdc9f-0e39-4214-d45b-08df1260350e

X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2026 13:00:52.5980

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR02MB7843



--_000_MRWPR02MB121863298ADEE37EEF69F76F6A7BB2MRWPR02MB12186eu_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Good Day Sir/Madam,



Hope this email finds you well. We are pleased to invite you or your compan=

y to source and supply us with the following item

listed below:

Product/Model No: SDL SD7482-895 PLASTIC AIR-OPERATED PUMP

Brand: SDL

Model Number: SD7482-895

Pump material: PVDF

3/4in FNPT air inlet

2in liquid inlet and discharge ports

Max suction lift capability: 17 ft-H2O dry/29 ft-H2O wet

160 GPM max flow rate

1/4in max diameter solids

120psi max pressure

Qty. 35



Note: Kindly send your quotation to: quotations@eu-pfizer.com
ions@eu-pfizer.com> for immediate approval. Please include delivery in your=

quotation, or alternatively confirm if we may pick up from your facility.



Kind Regards,

Mike McDermott

Chief Global Supply Chain Officer

Pfizer Supply Chain Management

Rijksweg 12, 2870 Puurs-Sint-Amands, Belgium
arch/Rijksweg%0D%0A12,+2870+Puurs-Sint-Amands,+Belgium?entry=3Dgmail&source=

=3Dg>.

B.T.W: BE 0400.778.165

Tel: +32 78 48 25 31

Fax: +32 20 12 94 06

Email: quotations@eu-pfizer.com



--_000_MRWPR02MB121863298ADEE37EEF69F76F6A7BB2MRWPR02MB12186eu_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








font-family: Aptos, "Aptos_EmbeddedFont", "Aptos_MSFontServi=

ce", Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0,=

0);">

Good Day Sir/Madam,



quot;, "Aptos_MSFontService", Calibri, Helvetica, sans-serif; fon=

t-size: 12pt; color: rgb(0, 0, 0);">




Hope this email finds you well. We are pleased to invite you or your compan=

y to source and supply us with the following item


listed below:


Product/Model No: SDL SD7482-895 PLASTIC AIR-OPERATED PUMP


Brand: SDL


Model Number: SD7482-895


Pump material: PVDF


3/4in FNPT air inlet


2in liquid inlet and discharge ports


Max suction lift capability: 17 ft-H2O dry/29 ft-H2O wet


160 GPM max flow rate


1/4in max diameter solids


120psi max pressure


Qty. 35





Note: Kindly send your quotation to:
>
3b-e219ef1ccc7d" class=3D"x_OWAAutoLink" style=3D"color: rgb(0, 0, 204);">q=

uotations@eu-pfizer.com for immediate

approval. Please include delivery in your quotation, or alternatively conf=

irm if we may pick up from your facility.





Kind Regards,


Mike McDermott


Chief Global Supply Chain Officer


Pfizer Supply Chain Management



ps/search/Rijksweg%0D%0A12,+2870+Puurs-Sint-Amands,+Belgium?entry=3Dgmail&a=

mp;source=3Dg" id=3D"OWA49a7814c-1dd3-75c4-9049-ee7c3ff4d278" class=3D"x_OW=

AAutoLink" style=3D"color: rgb(0, 0, 204);" data-auth=3D"NotApplicable">Rij=

ksweg

12, 2870 Puurs-Sint-Amands, Belgium.


B.T.W: BE 0400.778.165


Tel: +32 78 48 25 31


Fax: +32 20 12 94 06


Email:
eu-pfizer.com" id=3D"OWA0e02e87d-0bc1-04c3-d0b5-faa862e27eab" class=3D"x_OW=

AAutoLink" style=3D"color: rgb(0, 0, 204);">quotations@eu-pfizer.com
pan>








--_000_MRWPR02MB121863298ADEE37EEF69F76F6A7BB2MRWPR02MB12186eu_--

Wealthsimple Phish from microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 07:16:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x66Ws-00000000AUZ-2EMu

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 07:15:26 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 07:15:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from dyulo.hfwxhl.com ([137.116.150.29]:36889)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x65qt-00000000Ixu-2GKt

for sales@nk.ca;

Mon, 14 Sep 2026 06:32:11 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=dyulo.hfwxhl.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:List-Unsubscribe:

Reply-To; i=wealthsimplegksrsv@dyulo.hfwxhl.com;

bh=rnVmpdpnPISVDmSPEWNTQnLnYTITPXDE6w26eSM1T/o=;

b=Kwo816tPI8BZOaCapb5Ev5QEAKLsAJ/ZRhk4nUkemRqKPMoj8vO318EIM8wEVaDV71fkkF3CQ/32

ciyXgGhDZWR3CSKybgtpNdbX/LAn3yVNsiUObsnVAe8femrLyLI7IbrluMv/43Brzz4CTYBWAfOL

6BZAJLACtnjBeD/CmL6TZVCAGcjnHCHcp0BNKHnRO+JkAudyBqgBFd6eYcDPuqy0MHPnCN9V2UbZ

+xnghTidetaSEDxrZReavtLxHIt7XTlZKrjsbOAGDQ2FXeoWQo6edtNvn8VOYbUORphDOfTgesHU

O2N5nI9EIuEnf38qo6FkHd9KUlypuv6BimrkBQ==

Content-Type: multipart/alternative;

boundary="===============2852584810219868925=="

MIME-Version: 1.0

From: Wealthsimple investing

To: sales@nk.ca

Subject: Some of your account details are expiring

Date: Mon, 14 Sep 2026 08:31:10 -0400

Message-ID: <178938907096.31015.3710612434067910723@dyulo.hfwxhl.com>

List-Unsubscribe:

Reply-To: feedback@wealthsimple.com

Feedback-ID: campaign:wealthsimple.com:mailer

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello sales, We noticed that a few details on your account

have expired or are missing. To keep everything running smoothly, we ask

you to update them at your earliest convenience. Account: sales@nk.ca Reference:

24326945 Details to review: - ID verification documents - Registered address

and contact details



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[137.116.150.29 listed in will-spam-for-food.eu.org]

[137.116.150.29 listed in will-spam-for-food.eu.org]

[137.116.150.29 listed in will-spam-for-food.eu.org]

[137.116.150.29 listed in will-spam-for-food.eu.org]

[137.116.150.29 listed in will-spam-for-food.eu.org]

[137.116.150.29 listed in will-spam-for-food.eu.org]

[137.116.150.29 listed in will-spam-for-food.eu.org]

[137.116.150.29 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[137.116.150.29 listed in dnsbl.ahbl.org]

[137.116.150.29 listed in dnsbl.ahbl.org]

[137.116.150.29 listed in dnsbl.ahbl.org]

[137.116.150.29 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[137.116.150.29 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[137.116.150.29 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[137.116.150.29 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[137.116.150.29 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[137.116.150.29 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Some of your account details are expiring



--===============2852584810219868925==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Hello sales,



We noticed that a few details on your account have expired or are

missing. To keep everything running smoothly, we ask you to update

them at your earliest convenience.



Account: sales@nk.ca

Reference: 24326945

Details to review:

- ID verification documents

- Registered address and contact details



Update your details:

https://degaocn.com/?email=sales@nk.ca&uid=dXgOuuRrJHrNodnd3vb3aACz



It only takes a minute or two - and it helps us keep your account

safe.



Warm regards,

The Wealthsimple team



---

This email was sent automatically to sales@nk.ca.

If this message was not meant for you, you can safely ignore it.



--===============2852584810219868925==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit















Some of your account details are expiring































































































Wealthsimple


A note from Wealthsimple


Some of your account
details are expiring


Hello sales,



We noticed that a few details on your account have expired or are missing. To keep everything running smoothly, we ask you to update them at your earliest convenience.












Update your details




It only takes a minute or two - and it helps us keep your account safe.
























Account


sales@nk.ca


Reference


77476547


Details to review


ID verification documents
Registered address and contact details




Warm regards,



The Wealthsimple team




This email was sent automatically to sales@nk.ca.


If this message was not meant for you, you can safely ignore it.





Help

 · 

Privacy

 · 

Terms



Copyright Wealthsimple Technologies Inc. All rights reserved.














--===============2852584810219868925==--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 07:15:14 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x66WY-00000000ARq-2Dnq

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 07:15:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 07:15:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out196-36.us.a.dm.aliyun.com ([47.90.196.36]:48075)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x62RM-000000000kj-1ILH

for root@nk.ca;

Mon, 14 Sep 2026 02:53:37 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.rymat.ltd:alibabak_WebBatch:512257

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.rymat.ltd; s=aliyun-cn-hangzhou;

t=1789375828; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=6pi/Qxg25geYGF6Be3ENsaNENAlX9dlsrSY1Enn3DLg=;

b=gMWLYoCOkCSCHtkWSx5fwYwdQLhFp1FedEJkUGEGveh5+YDDwP6gEEZbFxtFM9GZEn3L0rnCZY+SZGNXGONv1EogDdph1T8Mr1MzstcQEPVuQzwGq7sPcBc7hSeIZDX88XlR1woYVnAvlDf3m0moLnl2y2tBV2TvtV+E1uHeE5c=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1789375828; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=6pi/Qxg25geYGF6Be3ENsaNENAlX9dlsrSY1Enn3DLg=;

b=thpKba9i8XB0jHVc11KPWX7wTDC7yWnZC4DFSiU5yCBMlcsMMNGh+KRvfvBYogiBhMxCkajfmJZJobmsdhKyFUf5YgZ43iLgFwMVcbferaQeQkYTpmzLNSrGW7pcWrbFOdeS1wYzrV2CgRBcXw9r4pdJBAt/dJoWcekpBmf3X1Q=

Received: from chitu-hsf(mailfrom:vip@vip.rymat.ltd fp:ma_600000353236039918 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Mon, 14 Sep 2026 16:49:55 +0800

Date: Mon, 14 Sep 2026 16:49:55 +0800

From: "Chris Liu"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?UHJlbWl1bSBGdW5jdGlvbmFsIENoZW1pY2FsIEFkZGl0aXZlcyBNYW51ZmFjdHVyZXI=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000353236039919

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Partner, This is Chris from Tianjin Eclat Co., Ltd (subsidiary

of Hebei Anjiefa Building Materials Co., Ltd), a leading manufacturer of

functional chemical additives since 1992. Operating a 34,000-square-meter

[...]



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.196.36 listed in will-spam-for-food.eu.org]

[47.90.196.36 listed in will-spam-for-food.eu.org]

[47.90.196.36 listed in will-spam-for-food.eu.org]

[47.90.196.36 listed in will-spam-for-food.eu.org]

[47.90.196.36 listed in will-spam-for-food.eu.org]

[47.90.196.36 listed in will-spam-for-food.eu.org]

[47.90.196.36 listed in will-spam-for-food.eu.org]

[47.90.196.36 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.196.36 listed in dnsbl.ahbl.org]

[47.90.196.36 listed in dnsbl.ahbl.org]

[47.90.196.36 listed in dnsbl.ahbl.org]

[47.90.196.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.196.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.196.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.196.36 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.196.36 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[47.90.196.36 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[47.90.196.36 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?B?UHJlbWl1bSBGdW5jdGlvbmFsIENoZW1pY2FsIEFkZGl0aXZlcyBNYW51ZmFjdHVyZXI=?=




px">
: 14pxfont-family:Arial">Dear Partner,


t-align: justify;font-family: Arial;font-size: 14px">
y: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


tyle=3D"margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px">=


pxfont-family:Arial">This is Chris from Tianjin Eclat Co., Ltd (subsidiary of =

Hebei Anjiefa Building Materials Co., Ltd), a leading manufacturer of function=

al chemical additives since 1992. Operating a 34,000-square-meter facility wit=

h 120+ employees and 15 technicians, we supply high-grade fine chemicals to gl=

obal markets.


ily: Arial;font-size: 14px">
=85=E9=BB=91;font-size: 14pxfont-family:Arial">We provide tailored, one-stop s=

upply solutions featuring a comprehensive portfolio designed for diverse indus=

trial and architectural applications:


-align: justify;font-family: Arial;font-size: 14px">
: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14pxfont-family:Arial">
=


nt-size: 14px">Tile Adhesives & Grouts
an>


ize: 14px">External Thermal Insulation Composi=

te Systems (ETICS/EIFS)


y;font-family: Arial;font-size: 14px">Water-Ba=

sed Coatings


ly: Arial;font-size: 14px">Petroleum Extractio=

n


ont-size: 14px">Emulsion Polymerization=


: 14px">Detergent Industry


"margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
tyle=3D"font-size: 14px">Paper Industry


xt-align: justify;font-family: Arial;font-size: 14px">
: 14px">Textile Printing & Dyeing


-align: justify;font-family: Arial;font-size: 14px">
14px">Ceramic Industry


;font-family: Arial;font-size: 14px">
=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


llspacing=3D"0" style=3D"text-align: justify;font-family: 'Times New Roman';fo=

nt-size: 13px;margin-left: 7px;border: none">

gn=3D"center" style=3D"width: 554px;padding: 0 7px;border-width: 1px;border-co=

lor: windowtext">


;font-size: 14px">
px">Core Products


"center" style=3D"width: 554px;padding: 0 7px;border-left-width: 1px;border-le=

ft-color: windowtext;border-right-width: 1px;border-right-color: windowtext;bo=

rder-top: none;border-bottom-width: 1px;border-bottom-color: windowtext">


yle=3D"margin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
ong>


Arial;font-size: 14px">RDP (Redispersible Polymer Powder):
pan style=3D"font-size: 14px">Enhances flexibility, adhesion, and crack resist=

ance in tile adhesives, ETICS/EIFS, and repair mortars.


margin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
=3D"font-size: 14px"> 


ft;font-family: Arial;font-size: 14px">HPMC(Hydroxypr=

opyl methylcellulose): Serves as a hi=

gh-efficiency water-retaining agent, thickener, and anti-sagging modifier for =

dry-mix mortars and water-based coatings.


text-align: left;font-family: Arial;font-size: 14px">
14px"> 


: Arial;font-size: 14px">HEC(Hydroxyethyl cellulose)<=

/strong>: Delivers super=

ior high-shear rheology, thickening, and protective colloid properties for lat=

ex paints, personal care, and oilfield applications.


gin: 0 0 0;text-align: left;font-family: Arial;font-size: 14px">
"font-size: 14px"> 


font-family: Arial;font-size: 14px">PCE (Polycarboxyl=

ate Ether): Del=

ivers ultra-high water reduction, superior fluidity, and slump retention for a=

dvanced concrete and self-leveling formulations.


0 0 0;text-align: left;font-family: Arial;font-size: 14px">
t-size: 14px"> 


-family: Arial;font-size: 14px">PP 
ong>Fiber: Provides three-dimens=

ional crack arrest and reinforcement for high-performance concrete, waterproof=

ing, and road engineering.


t;font-family: Arial;font-size: 14px">

pan>


y;font-family: Arial;font-size: 14px">
=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px">
"https://i.postimg.cc/vb2DFHJt/EDM-package-chris.jpg"/>


margin: 0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
yle=3D"font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px">

>


;font-family: 'Times New Roman';font-size: 13px;margin-left: 7px;border: none"=

>
>

0 7px;border-width: 1px;border-color: windowtext">


rial;font-size: 14px">
: 15px">Why partner with us?


er-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;borde=

r-right-color: windowtext;border-top: none;border-bottom-width: 1px;border-bot=

tom-color: windowtext">


14px;text-indent: 0">


-family: Arial;font-size: 14px;text-indent: 0">Tailored Formulations:<=

/strong> We adjust molecular weight, degr=

ee of substitution, and active solids according to your requirement and specif=

ication.


x;text-indent: 0"> 


"margin: 0 0 0;font-family: Arial;font-size: 14px;text-indent: 0">Supp=

ly Chain Reliability: Direct fac=

tory production ensures consistent lot-to-lot quality, competitive pricing, an=

d scalable bulk delivery.


;font-family: Arial;font-size: 14px">
=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 


>


y: Arial;font-size: 14px">
=85=E9=BB=91;font-size: 14px">


lign: justify;font-family: Arial;font-size: 14px">
=E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91;font-size: 14px"> 
//i.postimg.cc/hD18zP45/EDM-factory-chris.jpg"/>


0 0 0;text-align: justify;font-family: Arial;font-size: 14px">
font-size: 15px">


;font-family: Arial;font-size: 14px">We are co=

mmitted to delivering true one-stop supply services and tailored systematic so=

lutions for your business.If you are in=

terest
15px">ed in our products, please reach us directly
family: =E5=AE=8B=E4=BD=93;font-size: 15pxfont-family:Arial">on
yle=3D"font-size: 15px"> 
=93;font-size: 15pxfont-family:Arial">Whatsapp/Wechat
t-size: 15px"> or simply reply by E-mail


0 0;text-align: justify;font-family: Arial;font-size: 14px;text-indent: 0">
an style=3D"font-family: =E5=AE=8B=E4=BD=93;font-size: 15px"> 

=


x;">=

Best Regards


: 14px; text-indent: 0px;">
elvetica, sans-serif">Chris Liu


justify; font-size: 14px; text-indent: 0px;">
, helvetica, sans-serif">Tianjin Eclat Co., L=

td


//dm-cn.aliyuncs.com/trace/v1/report?bid=3D2620769&env=3D600000353236039919&ma=

c=3D512257&mf=3Dvip%40vip.rymat.ltd&msgid=3Dbab177de-cf52-413b-93b3-2fb0ae0cd9=

32%40alibaba.com&sac=3D0&tag=3DFinechemicalglobal1&tid=3D2620769&to=3Droot%40n=

k.ca&tpl=3D&ts=3D1789375795&type=3D1&url=3D&v=3D1.0&sign=3D5dfe0bdae753854485a=

cccc4384bf9ad&urlts=3D1789375828" alt=3D"" style=3D"display: none; width: 1px;=

height: 1px;" />

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 07:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x66WC-00000000APL-2Bd3

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 07:14:44 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 07:14:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out196-34.us.a.dm.aliyun.com ([47.90.196.34]:50511)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5zny-00000000C1J-1ov1

for root@nk.ca;

Mon, 14 Sep 2026 00:04:47 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.roofandkeel.ltd:alibabak_WebBatch:526528

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.roofandkeel.ltd; s=aliyun-cn-hangzhou;

t=1789365703; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=Pfz0nG38GhXFsNrwxV/8r3CmUqIwn8DHbeneW9HyEcg=;

b=kqF3HvqyTj8MaK514Vhf2ljHVIyGHfLypc1I9eeXmExFZ1wwJ3VBpoQTDb/jVkz/BkVwaBz439gV1Viz9crNbfpMClN1z1iCWv4GJ9NM+Xw49bIFQ8nNQE804bXoXxQBeaef4JRTVLogscgaueHkQBMcTvkufexL7bJNlTDZjRw=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1789365703; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=Pfz0nG38GhXFsNrwxV/8r3CmUqIwn8DHbeneW9HyEcg=;

b=0b8q7PMtto3gilXCFTxLaJ5t2KKgmiGvkqmcKGMnix9ThRQVsJ4PmaBejb9mJSZjGoEObw/DYXFMK1qwV+gqior/FiHJxSJSx/FJ17kXBoOBnwE69Ol9xwWRy2XSIiwVo3/Sa3w21kP3W68PHaxmP+7bYJmrKq0+R8f0GRMiL+E=

Received: from chitu-hsf(mailfrom:vip@vip.roofandkeel.ltd fp:ma_600000353207050990 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Mon, 14 Sep 2026 13:59:58 +0800

Date: Mon, 14 Sep 2026 13:59:58 +0800

From: "HAIXING Machinery"

To:

Reply-To:

Message-ID: <97647ba5-0cda-4798-8e79-b2e76d8cc8a8@alibaba.com>

Subject: =?UTF-8?B?TWV0YWwgc3RlZWwgY29pbCAtIEhBSVhJTkc=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000353207050991

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madm, While reviewing manufacturers in the metal

pipe sector, I noticed your company work in production metal tube business.

We are a mill based in China, supplying cold-rolled, hot-rolled, and galvanized

s [...]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

[47.90.196.34 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.196.34 listed in dnsbl.ahbl.org]

[47.90.196.34 listed in dnsbl.ahbl.org]

[47.90.196.34 listed in dnsbl.ahbl.org]

[47.90.196.34 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.196.34 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.196.34 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.196.34 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.196.34 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[47.90.196.34 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[47.90.196.34 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?TWV0YWwgc3RlZWwgY29pbCAtIEhBSVhJTkc=?=



Dear Sir/Madm,


tyle=3D"text-wrap-mode: nowrap;">


ode: nowrap;">While reviewing manufacturers in the metal pipe sector, I notice=

d your company work in production metal tube business. We are a mill based in =

China, supplying cold-rolled, hot-rolled, and galvanized steel coils to fabric=

ators across the world, and I believe we could be a dependable material partne=

r for your team.



pan>

Three things our partners m=

ention most often:


<=

/span>

1=E3=80=81Consistent qual=

ity =E2=80=94 every coil meets [JIS / ASTM / EN] specifications, with mill cer=

tificates and test reports issued before loading. Third-party inspection (SGS,=

BV) can be arranged.

2=E3=

=80=81Reliable supply =E2=80=94 our annual capacity of 150000 tons and long-te=

rm mill allocations keep production slots open year-round, including peak seas=

ons.

3=E3=80=81Responsive=

service =E2=80=94 your dedicated account engineer responds within one busines=

s day, and shipping documentation is prepared ahead of each vessel.

=

If you are planning next quarter's =

material, I can send our specification sheets, a sample packing list, and reco=

rds of recent shipments to [region]. Or, if you prefer, we can arrange a short=

call to walk through your requirements.


-mode: nowrap;">

Whi=

ch would serve you better =E2=80=94 the documentation first, or a quick conver=

sation?


<=

p>Best regards,


le=3D"text-wrap-mode: nowrap;">Jodie 



MuuMuu Domain Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Sep 2026 07:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x66W5-00000000AON-2Htm

for dave@doctor.nl2k.ab.ca;

Mon, 14 Sep 2026 07:14:37 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Sep 2026 07:14:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sw3.labevandadelreb2b.com ([45.82.64.131]:44623)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5zb7-00000000Aey-4AYB

for sales@nk.ca;

Sun, 13 Sep 2026 23:51:30 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1788735923; d=labevandadelreb2b.com;

h=Date:To:From:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:

Content-Transfer-Encoding; i=support@sw1.labevandadelreb2b.com;

bh=BcLtixA97fNHHw9NaULJRD9zxsh22lB013puADQO2JE=;

b=C3yK3wmTIvc9RBumBYrxlHDe+JdkmGDMsi+LZymSSFYc7RqzghsXOwGXD7D8oSrJueiry7P5iT7O

rx1qbkS4C2z1eDQsv5vvGV+Yo3UB22WL9Pmu83R5SEG/Qs1VzYOC4FRDbBj2Gs37VqovWNe8PDKP

RMqzV7vIRDxSVr5GLbo=

Date: Mon, 14 Sep 2026 05:47:53 +0000

To: sales@nk.ca

From: muumuu

Subject: =?UTF-8?B?44OJ44Oh44Kk44Oz5pyJ5Yq55pyf6ZmQ5YiH44KM44Gu44GK55+l44KJ44Gb?=

=?UTF-8?B?772c5pu05paw5omL57aa44GN44KS44GK6aGY44GE44GX44G+44GZ?=

Message-ID:

List-Unsubscribe: mailto:bounce835-6raZfHdAKKWG0vj@sw1.labevandadelreb2b.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1ccc546a43fa676041324798f32006dfd"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--1ccc546a43fa676041324798f32006dfd

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













ドメイン有効期限切れのお知らせ











































ステータス：期限切れ





















ドメイン有効期限切れのお知らせ







お客様のドメインサービスの有効期限が切れていることを確認いたしました。







現在、ドメインは 「期限切れ（Expired）」 の状態となっています。

æ›´æ–°æ‰‹ç¶šããŒè¡Œã‚ã‚Œãªã„å ´åˆã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã«é–¢é€£ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ãŒåœæ­¢ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚















サービス停止の可能性があるもの







ドメインの利用

Webサイトへのアクセス

ドメインに関連するWebメール

その他、ドメインに紐づく関連サービス













サービスを継続してご利用いただくには、ドメインの更新手続きを行ってください。

æ›´æ–°å¯èƒ½ãªæœŸé–“ã«ã¯åˆ¶é™ãŒã‚ã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã®ã§ã€ã§ãã‚‹ã ã‘æ—©ã‚ã®ãŠæ‰‹ç¶šãã‚’ãŠã™ã™ã‚ã„ãŸã—ã¾ã™ã€‚















ドメインを更新する













※ 更新料金、更新可能期間、および復旧条件などについては、お客様の契約内容をご確認ください。



















本メールはドメインサービスに関する重要なお知らせです。

ご不明な点がございましたら、公式サポート窓口までお問い合わせください。



























--1ccc546a43fa676041324798f32006dfd

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable












1.0">

=E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E6=9C=89=E5=8A=B9=E6=9C=9F=<br /><br /> =E9=99=90=E5=88=87=E3=82=8C=E3=81=AE=E3=81=8A=E7=9F=A5=E3=82=89=E3=81=9B</t=<br /><br /> itle><br /><br /> </head><br /><br /> <br /><br /> <body style=3D"margin:0; padding:0; background-color:#f5f7f7; font-family:A=<br /><br /> rial, 'Hiragino Kaku Gothic ProN', Meiryo, sans-serif; color:#333333;"><br /><br /> <br /><br /> <table width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" st=<br /><br /> yle=3D"background-color:#f5f7f7; padding:40px 15px;"><br /><br /> <tr><br /><br /> <td align=3D"center"><br /><br /> <br /><br /> <table width=3D"600" cellpadding=3D"0" cellspacing=3D"0" border=3D"=<br /><br /> 0" style=3D"max-width:600px; width:100%; background:#ffffff; border-radius:=<br /><br /> 8px; overflow:hidden;"><br /><br /> <br /><br /> <!-- Header --><br /><br /> <tr><br /><br /> <td style=3D"padding:28px 35px; border-bottom:1px solid #eeeeee=<br /><br /> ;"><br /><br /> <img src=3D"data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4=<br /><br /> wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC=<br /><br /> 9zdmciIHZpZXdCb3g9IjAgMCAyMzIxLjQzIDg0My41NSI+CiAgPGcgZmlsbD0iIzM5M2M0MSI+C=<br /><br /> iAgICA8cGF0aCBkPSJtMjExNS4zMiA4MzEuODhjLS4wOCAxLjA0LjcyIDEuOSAxLjc3IDEuOWgy=<br /><br /> MS4yOGMxLjA0IDAgMS45Ny0uODUgMi4wNS0xLjlsMy42Ni00OC43NWMuMDgtMS4wNC0uNzItMS4=<br /><br /> 5LTEuNzctMS45aC0yMS4yOGMtMS4wNiAwLTEuOTYuODUtMi4wNSAxLjl6Ij48L3BhdGg+CiAgIC=<br /><br /> A8cGF0aCBkPSJtMjIzOC41MyA3ODEuMjRjLTEuMDQgMC0xLjgzLjg1LTEuNzYgMS45bDMuNyA0O=<br /><br /> C43NWMuMDggMS4wNC45OSAxLjkgMi4wNCAxLjloMjEuM2MxLjA0IDAgMy4wNC0uODUgMi45NS0x=<br /><br /> LjlsLTQuOS00OC43NWMtLjA2LTEuMDQtLjk5LTEuOS0yLjA1LTEuOXoiPjwvcGF0aD4KICAgIDx=<br /><br /> wYXRoIGQ9Im0yMjYxLjE2IDc1Ny4wOWMxLjA0IDAgMS45LS44NSAxLjktMS45di0yMC41YzAtMS=<br /><br /> 4wNC0uODUtMS45LTEuOS0xLjloLTU2LjkyYy0xLjA2IDAtMS45MS0uODUtMS45MS0xLjl2LTE0L=<br /><br /> jQ1YzAtMS4wNC0uODUtMS45LTEuOS0xLjloLTIwLjVjLTEuMDQgMC0xLjkuODUtMS45IDEuOXYx=<br /><br /> NC40NWMwIDEuMDQtLjg3IDEuOS0xLjkxIDEuOWgtNTYuNTJjLTEuMDQgMC0xLjkuODUtMS45IDE=<br /><br /> uOXYyMC41YzAgMS4wNC44NSAxLjkgMS45IDEuOWg1Ni41MmMxLjA0IDAgMS45MS44NSAxLjkxID=<br /><br /> EuOXY3Mi45YzAgMS4wNC44NSAxLjkxIDEuOSAxLjkxaDIwLjVjMS4wNCAwIDEuOS0uODcgMS45L=<br /><br /> TEuOTF2LTcyLjljMC0xLjA0Ljg1LTEuOSAxLjkxLTEuOXoiPjwvcGF0aD4KICAgIDxwYXRoIGQ9=<br /><br /> Im0xNzE3LjEgNzk3Ljg4Yy0uNS41LS41IDEuMzEgMCAxLjgxbDE1LjM3IDE1LjM3Yy41LjQ5IDE=<br /><br /> uMzEuNDkgMS44MSAwbDU1LjctNTUuN2MuNS0uNSAxLjMxLS41IDEuODEgMGw3Mi43MyA3Mi44N2=<br /><br /> MuNTIuNSAxLjMyLjUgMS44MiAwbDE1LjM3LTE1LjM2Yy41LS41LjUtMS4zMiAwLTEuODFsLTg5L=<br /><br /> jkxLTkwLjA4Yy0uNS0uNS0xLjMxLS41LTEuODEgMGwtNzIuOSA3Mi45eiI+PC9wYXRoPgogICAg=<br /><br /> PHBhdGggZD0ibTE5MjIuMzMgODMyLjUxYy0uMDkuNy40MSAxLjI4IDEuMTMgMS4yOGgyMy42Yy4=<br /><br /> 2OSAwIDEuMzQtLjU4IDEuNDMtMS4yOGwxMi43Ny0xMDYuMTNjLjA4LS43LS40NC0xLjI3LTEuMT=<br /><br /> QtMS4yN2gtMjMuNmMtLjcgMC0xLjM0LjU3LTEuNDIgMS4yN3oiPjwvcGF0aD4KICAgIDxwYXRoI=<br /><br /> GQ9Im0yMDE3Ljk0IDcyNS4xMmMtLjcyIDAtMS4yMi41Ny0xLjEzIDEuMjdsMTIuODggMTA2LjEz=<br /><br /> Yy4wOC43LjczIDEuMjcgMS40MyAxLjI3aDIzLjZjLjcgMCAxLjIxLS41NyAxLjEzLTEuMjdsLTE=<br /><br /> yLjg4LTEwNi4xM2MtLjA5LS43LS43My0xLjI3LTEuNDMtMS4yN3oiPjwvcGF0aD4KICA8L2c+Ci=<br /><br /> AgPHBhdGggZD0ibTIyNzQuOTUgNzQyLjg5YzAgMS4wNC44NSAxLjkxIDEuOSAxLjkxaDE0LjQ0Y=<br /><br /> zEuMDYgMCAxLjktLjg3IDEuOS0xLjkxdi0yOC4wNGMwLTEuMDQtLjg0LTEuOS0xLjktMS45aC0x=<br /><br /> NC40NGMtMS4wNCAwLTEuOS44NS0xLjkgMS45eiIgZmlsbD0iIzFmN2FjYyI+PC9wYXRoPgogIDx=<br /><br /> wYXRoIGQ9Im0yMzAyLjk4IDc0Mi44OWMwIDEuMDQuODQgMS45MSAxLjkgMS45MWgxNC40NGMxLj=<br /><br /> A0IDAgMS45LS44NyAxLjktMS45MXYtMjguMDRjMC0xLjA0LS44NS0xLjktMS45LTEuOWgtMTQuN=<br /><br /> DRjLTEuMDYgMC0xLjkuODUtMS45IDEuOXoiIGZpbGw9IiMxZjdhY2MiPjwvcGF0aD4KICA8Y2ly=<br /><br /> Y2xlIGN4PSIxODY2LjI3IiBjeT0iNzMwLjkiIGZpbGw9IiMxZjdhY2MiIHI9IjE3Ljk1Ij48L2N=<br /><br /> pcmNsZT4KICA8cGF0aCBkPSJtMjA3Ny42IDcxMi45NWMtOS45IDAtMTcuOTUgOC4wMy0xNy45NS=<br /><br /> AxNy45NXM4LjA0IDE3Ljk1IDE3Ljk1IDE3Ljk1IDE3Ljk1LTguMDQgMTcuOTUtMTcuOTUtOC4wM=<br /><br /> y0xNy45NS0xNy45NS0xNy45NXoiIGZpbGw9IiMxZjdhY2MiPjwvcGF0aD4KICA8cGF0aCBkPSJt=<br /><br /> OTg2LjQ2IDc5NS4zNWMtLjIzIDcuNDgtMy41MSAxNy41NS0xMy40NiAxNy41NS0xLjEzIDAtMTA=<br /><br /> uMjkgMC0xMy4wMS0xMC43Ni0uNDUtMS4zNC0uOS0zLjczLS45LTcuMjQgMC0xMi4xIDcuMjQtMT=<br /><br /> YuNzUgMTMuMzUtMTYuNzUgNy4zNSAwIDE0LjM3IDYuMDEgMTQuMDMgMTcuMjF6bS00MC42LTUxL=<br /><br /> jEydjc5Ljg2aDEzLjQ2di01Ljg4YzIuOTQgMy4zOSA4LjAzIDcuNTggMTUuNSA3LjU4IDEzLjQ2=<br /><br /> IDAgMjUuNjktMTEuNzYgMjUuNjktMzAuMnMtMTItMjkuNzUtMjQuNzgtMjkuNzVjLTYuMjIgMC0=<br /><br /> xMS44OCAyLjI1LTE2LjQgNi40NXYtMjguMDVoLTEzLjQ2em05NS4wMiAyMy4zLTEwLjc1IDQyLj=<br /><br /> E5LTEyLjU2LTQyLjE5aC0xNC41OWwyMC40NyA1Ny42OWMwIDEuMTMtMS41OCAzLjYyLTMuMTcgN=<br /><br /> C42NC0yLjE1IDEuNDctNS4wOSAxLjQ3LTYuMTEgMS40Ny0xLjM2IDAtMi4zOC0uMTEtMy42Mi0u=<br /><br /> MzN2MTEuODZjMS41OC4yNCAzLjczLjY5IDguMTQuNjkgMTAuNTIgMCAxNC43LTQuMiAxOC41NS0=<br /><br /> xNi4wNmwzLjE3LTEwLjYzIDE0LjM3LTQ5LjMzaC0xMy45MXoiIGZpbGw9IiMwMDViYWMiPjwvcG=<br /><br /> F0aD4KICA8cGF0aCBkPSJtMTM3Ny44NyA4MjUuNzljLS40MSAwLS45My0uMjktMS4xNC0uNjRsL=<br /><br /> TMzLjYyLTU1LjA0LTE4LjI5IDYyLjk4Yy0uMTEuMzktLjU0LjcyLS45Ni43MmgtMzUuMjljLS40=<br /><br /> IDAtLjY0LS4zMS0uNTItLjcybDM3LjIxLTExNy44M2MuMTMtLjM5LjU3LS43My45Ny0uNzNoMTM=<br /><br /> uMjZjLjQxIDAgLjkzLjI5IDEuMTYuNjRsNDUuMzMgNzAuMjkgNDUuMzMtNzAuMjljLjIzLS4zNS=<br /><br /> 43NC0uNjQgMS4xNi0uNjRoMTMuMjVjLjQxIDAgLjg1LjM0Ljk4LjczbDM3LjIxIDExNy44M2MuM=<br /><br /> TMuNC0uMTEuNzItLjUzLjcyaC0zNS4yOGMtLjQxIDAtLjg1LS4zMy0uOTctLjcybC0xOC4yNy02=<br /><br /> Mi45OC0zMy42MiA1NS4wNGMtLjIxLjM1LS43NC42NC0xLjE0LjY0aC0xNi4yNHptLTg4LjIxLTU=<br /><br /> 4LjcxYy0uMDgtLjMzLS4zOC0uNi0uNzMtLjZoLTEwMC41NWMtNS4zMiAwLTkuNjMgNC4zMS05Lj=<br /><br /> YzIDkuNjNzNC4zMSA5LjYzIDkuNjMgOS42M2g1OS43NWMtNy4xMSAxOC44LTMxLjE3IDMyLjYzL=<br /><br /> TU5Ljc1IDMyLjYzLTM0LjE3IDAtNjEuODctMTkuNzgtNjEuODctNDQuMTlzMjcuNy00NC4xOCA2=<br /><br /> MS44Ny00NC4xOGMxOC42OCAwIDM1LjQgNS45MSA0Ni43NSAxNS4yMy4wNC4wNC4wOC4wNi4xMS4=<br /><br /> xLjEzLjA4LjI2LjEzLjQxLjEzaDQxLjA5Yy40MSAwIC43NS0uMzQuNzUtLjc1IDAtLjE4LS4wOC=<br /><br /> 0uMzQtLjE5LS40OC0uMDEtLjAzLS4wNC0uMDUtLjA2LS4wOC0xNy40OC0xOC42My01MC43My0zM=<br /><br /> S4yMS04OC44Ny0zMS4yMS01Ni4zMSAwLTEwMS45NCAyNy40Mi0xMDEuOTQgNjEuMjNzNDUuNjQg=<br /><br /> NjEuMjQgMTAxLjk0IDYxLjI0IDEwMS45NS0yNy40MSAxMDEuOTUtNjEuMjRjMC0yLjM5LS4yNC0=<br /><br /> 0Ljc2LS42OC03LjA5em0yOTMuOTMtNTQuMTNjNTYuMzEgMCAxMDEuOTUgMjcuNDEgMTAxLjk1ID=<br /><br /> YxLjIzcy00NS42NSA2MS4yMy0xMDEuOTUgNjEuMjMtMTAxLjk1LTI3LjQxLTEwMS45NS02MS4yM=<br /><br /> yA0NS42NS02MS4yMyAxMDEuOTUtNjEuMjN6bTAgMTA1LjQyYzM0LjE3IDAgNjEuODktMTkuNzgg=<br /><br /> NjEuODktNDQuMTlzLTI3LjcxLTQ0LjE5LTYxLjg5LTQ0LjE5LTYxLjg5IDE5Ljc4LTYxLjg5IDQ=<br /><br /> 0LjE5IDI3LjcxIDQ0LjE5IDYxLjg5IDQ0LjE5eiIgZmlsbD0iIzAwNWJhYyI+PC9wYXRoPgogID=<br /><br /> xwYXRoIGQ9Im05OTEuMTEgMjI3LjY3LTQ4LjUxLTgyLjk5Yy0uODQtMS40My0yLjY4LTEuOTEtN=<br /><br /> C4xMS0xLjA4LS45Mi41NC0xLjQ5IDEuNTMtMS40OSAyLjU5djExOS4zOGMwIDUuMzYtNC4zNCA5=<br /><br /> LjcxLTkuNyA5LjcxaC00Mi42OGMtNS4zNiAwLTkuNy00LjM1LTkuNy05Ljcxdi0yMzkuODJjMC0=<br /><br /> 1LjM2IDQuMzQtOS43MSA5LjctOS43MWg0Ni45OWMzLjM1IDAgNi40NiAxLjczIDguMjMgNC41OG=<br /><br /> w2Mi40NSAxMDEuNjljMS40NSAyLjM2IDQuNTMgMy4wOSA2Ljg4IDEuNjUuNjctLjQxIDEuMjMtL=<br /><br /> jk4IDEuNjUtMS42NWw2Mi40NC0xMDEuNjljMS43Ny0yLjg0IDQuODgtNC41NyA4LjIzLTQuNThs=<br /><br /> NDctLjAyYzUuMzYgMCA5LjcgNC4zNCA5LjcgOS43djE4Ny44NXMwIDUyLjAxIDAgNTIuMDFjMCA=<br /><br /> 1LjM2LTQuMzQgOS43MS05LjcgOS43MWgtNDIuNjhjLTUuMzYgMC05LjctNC4zNS05LjctOS43MX=<br /><br /> YtMTE5LjU1YzAtMS42Ni0xLjM0LTMtMy0zLTEuMDYgMC0yLjA0LjU2LTIuNTggMS40N2wtNDkuN=<br /><br /> DkgODMuMjNjLTEuNzcgMi44Ni00Ljg5IDQuNi04LjI1IDQuNmgtMTMuNGMtMy4zOCAwLTYuNTIt=<br /><br /> MS43Ni04LjI4LTQuNjV6bTc0MC43NyAwLTQ4LjUxLTgyLjk5Yy0uODQtMS40My0yLjY4LTEuOTE=<br /><br /> tNC4xMS0xLjA4LS45Mi41NC0xLjQ5IDEuNTMtMS40OSAyLjU5djExOS4zOGMwIDUuMzYtNC4zNC=<br /><br /> A5LjcxLTkuNyA5LjcxaC00Mi42OGMtNS4zNiAwLTkuNy00LjM1LTkuNy05Ljcxdi0yMzkuODJjM=<br /><br /> C01LjM2IDQuMzQtOS43MSA5LjctOS43MWg0Ni45OWMzLjM1IDAgNi40NiAxLjczIDguMjMgNC41=<br /><br /> OGw2Mi40NSAxMDEuNjljMS40NSAyLjM2IDQuNTMgMy4wOSA2Ljg4IDEuNjUuNjctLjQxIDEuMjM=<br /><br /> tLjk4IDEuNjUtMS42NWw2Mi40NC0xMDEuNjljMS43Ny0yLjg0IDQuODgtNC41NyA4LjIzLTQuNT=<br /><br /> hsNDctLjAyYzUuMzYgMCA5LjcgNC4zNCA5LjcgOS43djE4Ny44NXMwIDUyLjAxIDAgNTIuMDFjM=<br /><br /> CA1LjM2LTQuMzQgOS43MS05LjcgOS43MWgtNDIuNjhjLTUuMzYgMC05LjctNC4zNS05LjctOS43=<br /><br /> MXYtMTE5LjU1YzAtMS42Ni0xLjM0LTMtMy0zLTEuMDYgMC0yLjA0LjU2LTIuNTggMS40N2wtNDk=<br /><br /> uNDkgODMuMjNjLTEuNzcgMi44Ni00Ljg5IDQuNi04LjI1IDQuNmgtMTMuNGMtMy4zOCAwLTYuNT=<br /><br /> ItMS43Ni04LjI4LTQuNjV6bS00ODYuOTggNDcuNjJjLTI1LjU1IDAtNDQuMTEtOC4xNi01NC43M=<br /><br /> y0yMi44Ny0xMC42My0xNC43MS0xNS45NC0zMi45OC0xNS45NC01NC43OXYtMTA0LjgzYzAtNS4z=<br /><br /> NiA0LjM0LTkuNzEgOS43LTkuNzFoNDMuMjJjNS4zNSAwIDkuNyA0LjM1IDkuNyA5LjcxdjEwMy4=<br /><br /> zMWMwIDguNjMgMi4xNSAxNS4yMiA2LjQ1IDE5Ljc5czEwLjM3IDYuODUgMTguMjIgNi44NWM0Lj=<br /><br /> gxIDAgMTAuNS0xLjI3IDE3LjA4LTMuODEgMTAuOTgtNC4yMyAxOC4yMi0xNC43OCAxOC4yMi0yN=<br /><br /> i41NXYtOTkuNTljMC01LjM2IDQuMzQtOS43MSA5LjctOS43MWg0My4yMmM1LjM1IDAgOS43IDQu=<br /><br /> MzUgOS43IDkuNzF2MTcyLjc5YzAgNS4zNi00LjM0IDkuNzEtOS43IDkuNzFoLTQzLjIyYy01LjM=<br /><br /> 1IDAtOS43LTQuMzUtOS43LTkuNzF2LTMuODhzLTIuMjUuOTctMTMuNDcgNS4xOGMtMTEuMjMgNC=<br /><br /> 4yMS0yNC43NyA4LjQxLTM4LjQzIDguNDF6bTc0MC43OCAwYy0yNS41NSAwLTQ0LjExLTguMTYtN=<br /><br /> TQuNzMtMjIuODctMTAuNjMtMTQuNzEtMTUuOTQtMzIuOTgtMTUuOTQtNTQuNzl2LTEwNC44M2Mw=<br /><br /> LTUuMzYgNC4zNC05LjcxIDkuNy05LjcxaDQzLjIyYzUuMzUgMCA5LjcgNC4zNSA5LjcgOS43MXY=<br /><br /> xMDMuMzFjMCA4LjYzIDIuMTUgMTUuMjIgNi40NSAxOS43OXMxMC4zNyA2Ljg1IDE4LjIyIDYuOD=<br /><br /> VjNC44MSAwIDEwLjUtMS4yNyAxNy4wOC0zLjgxIDEwLjk4LTQuMjMgMTguMjItMTQuNzggMTguM=<br /><br /> jItMjYuNTV2LTk5LjU5YzAtNS4zNiA0LjM0LTkuNzEgOS43LTkuNzFoNDMuMjJjNS4zNSAwIDku=<br /><br /> NyA0LjM1IDkuNyA5LjcxdjE3Mi43OWMwIDUuMzYtNC4zNCA5LjcxLTkuNyA5LjcxaC00My4yMmM=<br /><br /> tNS4zNSAwLTkuNy00LjM1LTkuNy05Ljcxdi0zLjg4cy0yLjI1Ljk3LTEzLjQ3IDUuMThjLTExLj=<br /><br /> IzIDQuMjEtMjQuNzcgOC40MS0zOC40MyA4LjQxem0tNTE5LjU1IDBjLTI1LjU1IDAtNDQuMTEtO=<br /><br /> C4xNi01NC43My0yMi44Ny0xMC42My0xNC43MS0xNS45NC0zMi45OC0xNS45NC01NC43OXYtMTA0=<br /><br /> LjgzYzAtNS4zNiA0LjM0LTkuNzEgOS43LTkuNzFoNDMuMjJjNS4zNSAwIDkuNyA0LjM1IDkuNyA=<br /><br /> 5LjcxdjEwMy4zMWMwIDguNjMgMi4xNSAxNS4yMiA2LjQ1IDE5Ljc5czEwLjM3IDYuODUgMTguMj=<br /><br /> IgNi44NWM0LjgxIDAgMTAuNS0xLjI3IDE3LjA4LTMuODEgMTAuOTgtNC4yMyAxOC4yMi0xNC43O=<br /><br /> CAxOC4yMi0yNi41NXYtOTkuNTljMC01LjM2IDQuMzQtOS43MSA5LjctOS43MWg0My4yMmM1LjM1=<br /><br /> IDAgOS43IDQuMzUgOS43IDkuNzF2MTcyLjc5YzAgNS4zNi00LjM0IDkuNzEtOS43IDkuNzFoLTQ=<br /><br /> zLjIyYy01LjM1IDAtOS43LTQuMzUtOS43LTkuNzF2LTMuODhzLTIuMjUuOTctMTMuNDcgNS4xOG=<br /><br /> MtMTEuMjMgNC4yMS0yNC43NyA4LjQxLTM4LjQzIDguNDF6bTc0MC43OCAwYy0yNS41NSAwLTQ0L=<br /><br /> jExLTguMTYtNTQuNzMtMjIuODctMTAuNjMtMTQuNzEtMTUuOTQtMzIuOTgtMTUuOTQtNTQuNzl2=<br /><br /> LTEwNC44M2MwLTUuMzYgNC4zNC05LjcxIDkuNy05LjcxaDQzLjIyYzUuMzUgMCA5LjcgNC4zNSA=<br /><br /> 5LjcgOS43MXYxMDMuMzFjMCA4LjYzIDIuMTUgMTUuMjIgNi40NSAxOS43OXMxMC4zNyA2Ljg1ID=<br /><br /> E4LjIyIDYuODVjNC44MSAwIDEwLjUtMS4yNyAxNy4wOC0zLjgxIDEwLjk4LTQuMjMgMTguMjItM=<br /><br /> TQuNzggMTguMjItMjYuNTV2LTk5LjU5YzAtNS4zNiA0LjM0LTkuNzEgOS43LTkuNzFoNDMuMjJj=<br /><br /> NS4zNSAwIDkuNyA0LjM1IDkuNyA5LjcxdjE3Mi43OWMwIDUuMzYtNC4zNCA5LjcxLTkuNyA5Ljc=<br /><br /> xaC00My4yMmMtNS4zNSAwLTkuNy00LjM1LTkuNy05Ljcxdi0zLjg4cy0yLjI1Ljk3LTEzLjQ3ID=<br /><br /> UuMThjLTExLjIzIDQuMjEtMjQuNzcgOC40MS0zOC40MyA4LjQxem0tMTIwOS41NyAzMzguNWgtM=<br /><br /> TExLjIyYy02LjE5IDAtMTEuMi00Ljg3LTExLjItMTAuODd2LTI2OC41NmMwLTYuMDEgNS4wMi0x=<br /><br /> MC44NyAxMS4yLTEwLjg3aDExMS4yMmM0Ni41MSAwIDgxLjYyIDEzLjQ1IDEwNS4zMSA0MC4zNCA=<br /><br /> yMy42OSAyNi45IDM1LjU0IDYxLjI2IDM1LjU0IDEwMy4xIDAgNDQuOTctMTIuODcgODAuNjktMz=<br /><br /> guNjEgMTA3LjE2cy01OS44MiAzOS43LTEwMi4yNCAzOS43em0tMS4wNC0yMzIuMjRoLTQ3LjNjL=<br /><br /> TIuNzYgMC01LjAxIDIuMjQtNS4wMSA1LjAxdjE2NC4xN2MwIDIuNzYgMi4yNCA1LjAxIDUuMDEg=<br /><br /> NS4wMWg0NC4wNmMyMS42IDAgMzkuMzUtNy4xNyA1My4yMy0yMS41MSAxMy44OS0xNC4zNCAyMC4=<br /><br /> 4My0zNi44MyAyMC44My02Ny40NiAwLTI1LjM0LTUuOTQtNDUuODgtMTcuODItNjEuNjFzLTI5Lj=<br /><br /> U1LTIzLjYtNTMtMjMuNnptMjc1LjUzIDIzMi4yNGMtNjEuMDkgMC0xMTAuNjItNDcuMDEtMTEwL=<br /><br /> jYyLTEwOC42MXM0OS41Mi0xMDguNjEgMTEwLjYyLTEwOC42MSAxMTAuNjIgNDcuNDcgMTEwLjYy=<br /><br /> IDEwOC42MS00OS41MiAxMDguNjEtMTEwLjYyIDEwOC42MXptLjUtNTcuMDZjMjUuOTggMCA0Ny4=<br /><br /> wNS0yMi4zMiA0Ny4wNS01MS4wNXMtMjEuMDYtNTEuMDUtNDcuMDUtNTEuMDUtNDcuMDUgMjIuMS=<br /><br /> 00Ny4wNSA1MS4wNSAyMS4wNiA1MS4wNSA0Ny4wNSA1MS4wNXptNDAwLjU5LTE1OS45YzI3LjQgM=<br /><br /> CA0Ny4yNCA4LjMxIDU5LjUxIDI0LjkyczE4LjQxIDM3LjI0IDE4LjQxIDYxLjg3djExOS40NmMw=<br /><br /> IDYuMDYtNC44OCAxMC45Ny0xMC45MSAxMC45N2gtNDguODJjLTYuMDIgMC0xMC45MS00LjkxLTE=<br /><br /> wLjkxLTEwLjk3di0xMTcuNzRjMC05Ljc0LTIuMzUtMTcuMTktNy4wNi0yMi4zNC00LjcxLTUuMT=<br /><br /> YtMTEuMDYtNy43My0xOS4wNS03LjczLTUuOTkgMC0xMi42MyAxLjU4LTE5LjkxIDQuNzMtMTIuM=<br /><br /> zQgNS4zNC0yMC4zIDE3LjU0LTIwLjIxIDMwLjk4bC42NyAxMTIuMDRjLjA0IDYuMDYtNC44MiAx=<br /><br /> MS0xMC44NCAxMS4wNGgtNDguODJjLTYuMDIgMC0xMC45MS00LjkxLTEwLjkxLTEwLjk3di0xMTc=<br /><br /> uNzRjMC05Ljc0LTIuMzUtMTcuMTktNy4wNi0yMi4zNC00LjcxLTUuMTYtMTEuMDYtNy43My0xOS=<br /><br /> 4wNS03LjczLTUuNDIgMC0xMS40MiAxLjM2LTE3Ljk4IDQuMDgtMTEuNjYgNC44My0xOS4yNyAxN=<br /><br /> i4yMi0xOS4yNyAyOC44NHYxMTQuODljMCA2LjA2LTQuODggMTAuOTctMTAuOTEgMTAuOTdoLTQ4=<br /><br /> LjM5Yy02LjAyIDAtMTAuOTEtNC45MS0xMC45MS0xMC45N3YtMTk1LjI4YzAtNi4wNiA0Ljg4LTE=<br /><br /> wLjk3IDEwLjkxLTEwLjk3aDQ4LjM5YzYuMDIgMCAxMC45MSA0LjkxIDEwLjkxIDEwLjk3djQuMz=<br /><br /> djLjQzLS45MiA1LjA3LTMuMjQgMTMuOTEtNi45NyAxMy4yNy01LjU5IDI3LjQ3LTguMzggNDIuN=<br /><br /> i04LjM4IDE0LjI3IDAgMjYuNCAyLjQzIDM2LjM5IDcuM3MxOC4xMiAxMS4zMSAyNC40IDE5LjM0=<br /><br /> YzguNTYtNi41OSAxOS41NS0xMi42OCAzMi45Ny0xOC4yNiAxMy40MS01LjU5IDI3LjQtOC4zOCA=<br /><br /> 0MS45Ni04LjM4em0xOTcuNTcgMGMyNi43OCAwIDQ4LjI3IDguMjkgNjMuOTMgMjMuNzcgMTUuNj=<br /><br /> cgMTUuNDggMjMuNSAzMi40IDIzLjUgNTcuMzV2MTI1LjE0YzAgNi4wNi00Ljg5IDEwLjk3LTEwL=<br /><br /> jkxIDEwLjk3aC00OC42OGMtNi4wMyAwLTEwLjkxLTQuOTEtMTAuOTEtMTAuOTd2LTEuMXMtMTIu=<br /><br /> NiAxMi4wNy0zMy4yOCAxMi4wN2MtMjUuOTMgMC00NS43MS02LjIzLTU4LjM4LTE5LjEzLTEyLjY=<br /><br /> 4LTEyLjktMTkuMDItMjkuODItMTkuMDItNTAuNzUgMC0yMi4zNiA3LjQxLTM4LjkyIDIyLjIyLT=<br /><br /> Q5LjY3czM0LjE5LTE2LjEzIDU4LjEyLTE2LjEzaDMwLjM0Yy0xLjQ3LTYuODgtNS4xMS0xMS41N=<br /><br /> S05LjMtMTUuNzJzLTEwLjc5LTcuMTctMTkuNzYtNy41LTE3LjE2IDEuMjktMjcuNTYgMy44N2Mt=<br /><br /> NC42OCAxLjE2LTEwLjMzIDIuOTEtMTYuOTQgNS4yNS01LjY3IDIuMDEtMTEuODgtLjk3LTEzLjk=<br /><br /> tNi42NmwtMTEuNTctMzAuNTVjLTEuOTktNS41OS44MS0xMS43NiA2LjMxLTEzLjkxIDExLjI3LT=<br /><br /> QuNDIgMjEuMTctNy42NyAyOS42OS05Ljc2IDE2LjM4LTQuMDEgMzEuNTctNi41NyA0Ni4xLTYuN=<br /><br /> Td6bTExLjI3IDEyNS4zOWgtMjQuNzFjLTYuNDIgMC0xMS41OCAyLjMzLTE1LjQ4IDctMy45MSA0=<br /><br /> LjY3LTUuODYgMTAuMjktNS44NiAxNi44NiAwIDUuMTkgMS43NCA5LjY4IDUuMjMgMTMuNDhzNy4=<br /><br /> 3NCA1LjcgMTIuNzYgNS43YzUuMyAwIDEwLjgxLS40MSAxNi41My0zLjUyIDIuNDgtMS4zNSA1Lj=<br /><br /> Y3LTMuMzYgOS41Ny02LjA0IDQuMzYtMi45OSA2Ljk2LTcuOTMgNi45Ni0xMy4yMXYtMTUuMjdjM=<br /><br /> C0yLjc2LTIuMjQtNS4wMS01LjAxLTUuMDF6bTE3My41Ny0xMDguNTRjNi4wNSAwIDEwLjk1IDQu=<br /><br /> ODkgMTAuOTUgMTAuOTJ2MTc4LjM3YzAgNi4wMy00LjkgMTAuOTItMTAuOTUgMTAuOTJoLTQ4LjE=<br /><br /> 4Yy02LjA1IDAtMTAuOTUtNC44OS0xMC45NS0xMC45MnYtMTc4LjM3YzAtNi4wMyA0LjktMTAuOT=<br /><br /> IgMTAuOTUtMTAuOTJ6bS0yNC4yLTkwLjM0YzE5LjkgMCAzNi4wNCAxNS40NyAzNi4wNCAzNS4zO=<br /><br /> XMtMTYuMTMgMzUuMzktMzYuMDQgMzUuMzktMzYuMDQtMTUuMzItMzYuMDQtMzUuMzkgMTYuMTMt=<br /><br /> MzUuMzkgMzYuMDQtMzUuMzl6bTIwOS43IDczLjQ5YzI4Ljg3IDAgNDkuNTIgOC4zMSA2MS45NSA=<br /><br /> yNC45MnMxOC42NSAzNy4yNCAxOC42NSA2MS44N3YxMTkuNDZjMCA2LjA2LTQuOSAxMC45Ny0xMC=<br /><br /> 45NCAxMC45N2gtNDguNDNjLTYuMDQgMC0xMC45NC00LjkxLTEwLjk0LTEwLjk3di0xMTcuNzRjM=<br /><br /> C05Ljc0LTIuNjQtMTcuMTktNy45My0yMi4zNC01LjI5LTUuMTYtMTIuMzYtNy43My0yMS4yMi03=<br /><br /> LjczLTYgMC0xMyAxLjU4LTIxLjAxIDQuNzMtMTIuOTMgNS4wOS0yMS40NCAxNy41OC0yMS40NCA=<br /><br /> zMS40OHYxMTEuNjFjMCA2LjA2LTQuOSAxMC45Ny0xMC45NCAxMC45N2gtNDguNDNjLTYuMDQgMC=<br /><br /> 0xMC45NC00LjkxLTEwLjk0LTEwLjk3di0xOTUuMjhjMC02LjA2IDQuOS0xMC45NyAxMC45NC0xM=<br /><br /> C45N2g0OC40M2M2LjA0IDAgMTAuOTQgNC45MSAxMC45NCAxMC45N3Y1LjQ3czcuMzQtMy4yOSAx=<br /><br /> Ni45My03LjYzYzkuNTktNC4zNSAyOS4yMy04LjgxIDQ0LjM3LTguODF6IiBmaWxsPSIjMmIyYjJ=<br /><br /> iIiBmaWxsLXJ1bGU9ImV2ZW5vZGQiPjwvcGF0aD4KICA8cGF0aCBkPSJtNTIwLjcxIDUwOC4wNm=<br /><br /> MwIDYxLjk1IDQ0LjE3IDEwNiAxMDYuMDMgMTA2czEwNi4wMy00NC4wNSAxMDYuMDMtMTA2di00M=<br /><br /> DAuNDVjMC05NS43My0xMDAuOTUtMTM3LjY0LTE3MC42Ny04NC4wMmwtMTgxLjM0IDEzOS40NmMt=<br /><br /> MTAuMzYgNy41NC0xOC4zNyA3LjU0LTI4LjczIDBsLTE4MS4zNS0xMzkuNDZjLTQ2LjQyLTM1LjY=<br /><br /> 5LTExMi45OC0yNy4wMS0xNDguNjkgMTkuMzktMzUuNyA0Ni40LTI3LjAyIDExMi45NSAxOS40ID=<br /><br /> E0OC42NWwyNjAuMzUgMjAwLjIyYzM5LjYyIDMxIDg4LjY3IDMyLjAxIDEyOS4yOSAwIDQxLjI5L=<br /><br /> TMxLjc5IDY0Ljg2LTQ5LjkxIDcwLjcyLTU0LjM5IDguNzgtNi43MSAxOC45Ni0yLjA5IDE4Ljk2=<br /><br /> IDkuMzR2MTYxLjI1eiIgZmlsbD0iIzAwYmRhNiI+PC9wYXRoPgogIDxjaXJjbGUgY3g9IjEwOC4=<br /><br /> 2MSIgY3k9IjUwNS4wMyIgZmlsbD0iIzJiMmIyYiIgcj0iMTA4LjYxIj48L2NpcmNsZT4KPC9zdm=<br /><br /> c+Cg=3D=3D" alt=3D"" style=3D"display:block; max-width:180px; height:auto;"=<br /><br /> ><br /><br /> </td><br /><br /> </tr><br /><br /> <br /><br /> <!-- Status --><br /><br /> <tr><br /><br /> <td style=3D"padding:30px 35px 10px;"><br /><br /> <span style=3D"display:inline-block; background:#fce8e6; colo=<br /><br /> r:#c62828; font-size:13px; font-weight:bold; padding:7px 14px; border-radiu=<br /><br /> s:20px;"><br /><br /> =E3=82=B9=E3=83=86=E3=83=BC=E3=82=BF=E3=82=B9=EF=BC=9A=E6=9C=9F=E9=99=<br /><br /> =90=E5=88=87=E3=82=8C<br /><br /> </span><br /><br /> <br /><br /> </td><br /><br /> </tr><br /><br /> <br /><br /> <!-- Main Content --><br /><br /> <tr><br /><br /> <td style=3D"padding:15px 35px 35px;"><br /><br /> <br /><br /> <h1 style=3D"margin:0 0 20px; font-size:24px; line-height:1.5=<br /><br /> ; color:#222222;"><br /><br /> =E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E6=9C=89=E5=8A=B9=<br /><br /> =E6=9C=9F=E9=99=90=E5=88=87=E3=82=8C=E3=81=AE=E3=81=8A=E7=9F=A5=E3=82=89=<br /><br /> =E3=81=9B<br /><br /> </h1><br /><br /> <br /><br /> <p style=3D"margin:0 0 18px; font-size:15px; line-height:1.9;=<br /><br /> "><br /><br /> =E3=81=8A=E5=AE=A2=E6=A7=98=E3=81=AE=E3=83=89=E3=83=A1=<br /><br /> =E3=82=A4=E3=83=B3=E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9=E3=81=AE=E6=9C=89=<br /><br /> =E5=8A=B9=E6=9C=9F=E9=99=90=E3=81=8C=E5=88=87=E3=82=8C=E3=81=A6=E3=81=84=<br /><br /> =E3=82=8B=E3=81=93=E3=81=A8=E3=82=92=E7=A2=BA=E8=AA=8D=E3=81=84=E3=81=9F=<br /><br /> =E3=81=97=E3=81=BE=E3=81=97=E3=81=9F=E3=80=82<br /><br /> </p><br /><br /> <br /><br /> <p style=3D"margin:0 0 18px; font-size:15px; line-height:1.9;=<br /><br /> "><br /><br /> =E7=8F=BE=E5=9C=A8=E3=80=81=E3=83=89=E3=83=A1=E3=82=A4=<br /><br /> =E3=83=B3=E3=81=AF <strong style=3D"color:#c62828;">=E3=80=8C=E6=9C=9F=<br /><br /> =E9=99=90=E5=88=87=E3=82=8C=EF=BC=88Expired=EF=BC=89=E3=80=8D</strong> =<br /><br /> =E3=81=AE=E7=8A=B6=E6=85=8B=E3=81=A8=E3=81=AA=E3=81=A3=E3=81=A6=E3=81=84=<br /><br /> =E3=81=BE=E3=81=99=E3=80=82<br /><br /> =E6=9B=B4=E6=96=B0=E6=89=8B=E7=B6=9A=E3=81=8D=E3=81=8C=<br /><br /> =E8=A1=8C=E3=82=8F=E3=82=8C=E3=81=AA=E3=81=84=E5=A0=B4=E5=90=88=E3=80=81=<br /><br /> =E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E3=81=AB=E9=96=A2=E9=80=A3=E3=81=99=<br /><br /> =E3=82=8B=E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9=E3=81=8C=E5=81=9C=E6=AD=A2=<br /><br /> =E3=81=95=E3=82=8C=E3=82=8B=E5=8F=AF=E8=83=BD=E6=80=A7=E3=81=8C=E3=81=82=<br /><br /> =E3=82=8A=E3=81=BE=E3=81=99=E3=80=82<br /><br /> </p><br /><br /> <br /><br /> <!-- Warning Box --><br /><br /> <table width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" bor=<br /><br /> der=3D"0" style=3D"margin:25px 0; background:#f8fafa; border-left:4px solid=<br /><br /> #008470;"><br /><br /> <tr><br /><br /> <td style=3D"padding:18px 20px;"><br /><br /> <p style=3D"margin:0 0 10px; font-weight:bold; color:#2=<br /><br /> 22222;"><br /><br /> =E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9=E5=81=9C=<br /><br /> =E6=AD=A2=E3=81=AE=E5=8F=AF=E8=83=BD=E6=80=A7=E3=81=8C=E3=81=82=E3=82=8B=<br /><br /> =E3=82=82=E3=81=AE<br /><br /> </p><br /><br /> <br /><br /> <ul style=3D"margin:0; padding-left:20px; font-size:14p=<br /><br /> x; line-height:1.9; color:#555555;"><br /><br /> <li>=E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E3=81=AE=<br /><br /> =E5=88=A9=E7=94=A8</li><br /><br /> <li>Web=E3=82=B5=E3=82=A4=E3=83=88=E3=81=B8=E3=81=<br /><br /> =AE=E3=82=A2=E3=82=AF=E3=82=BB=E3=82=B9</li><br /><br /> <li>=E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E3=81=AB=<br /><br /> =E9=96=A2=E9=80=A3=E3=81=99=E3=82=8BWeb=E3=83=A1=E3=83=BC=E3=83=AB</li><br /><br /> <li>=E3=81=9D=E3=81=AE=E4=BB=96=E3=80=81=E3=83=89=<br /><br /> =E3=83=A1=E3=82=A4=E3=83=B3=E3=81=AB=E7=B4=90=E3=81=A5=E3=81=8F=E9=96=A2=<br /><br /> =E9=80=A3=E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9</li><br /><br /> </ul><br /><br /> </td><br /><br /> </tr><br /><br /> </table><br /><br /> <br /><br /> <!-- <p style=3D"margin:0 0 18px; font-size:15px; line-height=<br /><br /> :1.9;"> --><br /><br /> =E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9=E3=82=92=E7=B6=99=<br /><br /> =E7=B6=9A=E3=81=97=E3=81=A6=E3=81=94=E5=88=A9=E7=94=A8=E3=81=84=E3=81=9F=<br /><br /> =E3=81=A0=E3=81=8F=E3=81=AB=E3=81=AF=E3=80=81=E3=83=89=E3=83=A1=E3=82=A4=<br /><br /> =E3=83=B3=E3=81=AE=E6=9B=B4=E6=96=B0=E6=89=8B=E7=B6=9A=E3=81=8D=E3=82=92=<br /><br /> =E8=A1=8C=E3=81=A3=E3=81=A6=E3=81=8F=E3=81=A0=E3=81=95=E3=81=84=E3=80=82<br /><br /> =E6=9B=B4=E6=96=B0=E5=8F=AF=E8=83=BD=E3=81=AA=E6=9C=9F=<br /><br /> =E9=96=93=E3=81=AB=E3=81=AF=E5=88=B6=E9=99=90=E3=81=8C=E3=81=82=E3=82=8B=<br /><br /> =E5=A0=B4=E5=90=88=E3=81=8C=E3=81=82=E3=82=8A=E3=81=BE=E3=81=99=E3=81=AE=<br /><br /> =E3=81=A7=E3=80=81=E3=81=A7=E3=81=8D=E3=82=8B=E3=81=A0=E3=81=91=E6=97=A9=<br /><br /> =E3=82=81=E3=81=AE=E3=81=8A=E6=89=8B=E7=B6=9A=E3=81=8D=E3=82=92=E3=81=8A=<br /><br /> =E3=81=99=E3=81=99=E3=82=81=E3=81=84=E3=81=9F=E3=81=97=E3=81=BE=E3=81=99=<br /><br /> =E3=80=82<br /><br /> </p><br /><br /> <br /><br /> <!-- CTA --><br /><br /> <table width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" bor=<br /><br /> der=3D"0" style=3D"margin:30px 0;"><br /><br /> <tr><br /><br /> <td align=3D"center"><br /><br /> <a href=3D"https://indonsi.trilliecobnb.com/gwe?4BHJBSH=<br /><br /> J=3D45kljiohnoi"<br /><br /> style=3D"display:inline-block; background:#008470; c=<br /><br /> olor:#ffffff; text-decoration:none; font-size:16px; font-weight:bold; paddi=<br /><br /> ng:14px 35px; border-radius:5px;"><br /><br /> =E3=83=89=E3=83=A1=E3=82=A4=E3=83=B3=E3=82=92=<br /><br /> =E6=9B=B4=E6=96=B0=E3=81=99=E3=82=8B<br /><br /> </a><br /><br /> </td><br /><br /> </tr><br /><br /> </table><br /><br /> <br /><br /> <p style=3D"margin:0; font-size:13px; line-height:1.8; color:=<br /><br /> #777777;"><br /><br /> =E2=80=BB =E6=9B=B4=E6=96=B0=E6=96=99=E9=87=91=E3=80=81=<br /><br /> =E6=9B=B4=E6=96=B0=E5=8F=AF=E8=83=BD=E6=9C=9F=E9=96=93=E3=80=81=E3=81=8A=<br /><br /> =E3=82=88=E3=81=B3=E5=BE=A9=E6=97=A7=E6=9D=A1=E4=BB=B6=E3=81=AA=E3=81=A9=<br /><br /> =E3=81=AB=E3=81=A4=E3=81=84=E3=81=A6=E3=81=AF=E3=80=81=E3=81=8A=E5=AE=A2=<br /><br /> =E6=A7=98=E3=81=AE=E5=A5=91=E7=B4=84=E5=86=85=E5=AE=B9=E3=82=92=E3=81=94=<br /><br /> =E7=A2=BA=E8=AA=8D=E3=81=8F=E3=81=A0=E3=81=95=E3=81=84=E3=80=82<br /><br /> </p><br /><br /> <br /><br /> </td><br /><br /> </tr><br /><br /> <br /><br /> <!-- Footer --><br /><br /> <tr><br /><br /> <td style=3D"padding:22px 35px; background:#fafafa; border-top:=<br /><br /> 1px solid #eeeeee;"><br /><br /> <p style=3D"margin:0; font-size:12px; line-height:1.7; color:=<br /><br /> #888888;"><br /><br /> =E6=9C=AC=E3=83=A1=E3=83=BC=E3=83=AB=E3=81=AF=E3=83=89=<br /><br /> =E3=83=A1=E3=82=A4=E3=83=B3=E3=82=B5=E3=83=BC=E3=83=93=E3=82=B9=E3=81=AB=<br /><br /> =E9=96=A2=E3=81=99=E3=82=8B=E9=87=8D=E8=A6=81=E3=81=AA=E3=81=8A=E7=9F=A5=<br /><br /> =E3=82=89=E3=81=9B=E3=81=A7=E3=81=99=E3=80=82<br><br /><br /> =E3=81=94=E4=B8=8D=E6=98=8E=E3=81=AA=E7=82=B9=E3=81=8C=<br /><br /> =E3=81=94=E3=81=96=E3=81=84=E3=81=BE=E3=81=97=E3=81=9F=E3=82=89=E3=80=81=<br /><br /> =E5=85=AC=E5=BC=8F=E3=82=B5=E3=83=9D=E3=83=BC=E3=83=88=E7=AA=93=E5=8F=A3=<br /><br /> =E3=81=BE=E3=81=A7=E3=81=8A=E5=95=8F=E3=81=84=E5=90=88=E3=82=8F=E3=81=9B=<br /><br /> =E3=81=8F=E3=81=A0=E3=81=95=E3=81=84=E3=80=82<br /><br /> </p><br /><br /> </td><br /><br /> </tr><br /><br /> <br /><br /> </table><br /><br /> <br /><br /> </td><br /><br /> </tr><br /><br /> </table><br /><br /> <br /><br /> </body><br /><br /> </html><br /><br /> <br /><br /> <br /><br /> --1ccc546a43fa676041324798f32006dfd--<br /><br /> <br /><br /> </div> <footer class="post-info"> <ul class="meta"> <li><span class="info-label">Categories: </span><a href="https://www.nk.ca/blog/index.php?/categories/25-Phish">Phish</a></li> <li><a href="/blog/index.php?/archives/19994-MuuMuu-Domain-Phish.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer> <!-- <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:dc="http://purl.org/dc/elements/1.1/"> <rdf:Description rdf:about="https://www.nk.ca/blog/index.php?/feeds/ei_19994.rdf" trackback:ping="https://www.nk.ca/blog/comment.php?type=trackback&entry_id=19994" dc:title="MuuMuu Domain Phish" dc:identifier="https://www.nk.ca/blog/index.php?/archives/19994-MuuMuu-Domain-Phish.html" /> </rdf:RDF> --> </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/19993-MYSQL-Auto-Tuner-spam.html">MYSQL Auto-Tuner spam</a></h2> <span class="post-info">Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2026-09-14T20:37:00+00:00">Monday, September 14. 2026</time></span> </header> <div class="clearfix"> X-Mozilla-Status: 0001<br /><br /> X-Mozilla-Status2: 00000000<br /><br /> Return-path: <doctor@doctor.nl2k.ab.ca><br /><br /> Envelope-to: dave@doctor.nl2k.ab.ca<br /><br /> Delivery-date: Sun, 13 Sep 2026 20:10:00 -0600<br /><br /> Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))<br /><br /> (envelope-from <doctor@doctor.nl2k.ab.ca>)<br /><br /> id 1x5w8O-00000000FzD-3lnZ<br /><br /> for dave@doctor.nl2k.ab.ca;<br /><br /> Sun, 13 Sep 2026 20:09:28 -0600<br /><br /> Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca><br /><br /> Resent-Date: Sun, 13 Sep 2026 20:09:28 -0600<br /><br /> Resent-Message-ID: <aqdXWBUN__kDFgvm@doctor.nl2k.ab.ca><br /><br /> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca><br /><br /> Received: from gw.d.sender-sib.com ([77.32.148.23]:41282)<br /><br /> by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384<br /><br /> (Exim 4.100 (FreeBSD))<br /><br /> (envelope-from <bounces-475518970-628372858@gw.d.sender-sib.com>)<br /><br /> id 1x5vqL-00000000EIz-3xs7<br /><br /> for sales@nk.ca;<br /><br /> Sun, 13 Sep 2026 19:50:58 -0600<br /><br /> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=steadfasttools.com;<br /><br /> q=dns/txt; s=brevo2; bh=wbJzklBBpt/1HLqWMu+kndhuiWATfXwtbRPXWOLuh34=;<br /><br /> h=from:reply-to:subject:date:to:mime-version:content-type:list-unsubscribe:x-csa-complaints:list-unsubscribe-post:message-id:x-sib-id:feedback-id;<br /><br /> b=G7+YHyA4zOPpe8yYtGhD9fNvXovrBPxCmesfdpewqCsNAB3kAIXslrgEPXafQDiGO9dyMsBXm4Kq<br /><br /> 597lkCpX5ge9uB8c2GkxQ/Z/ewdCciuIHVuTaIxDnTHLbHDWIXGoLpGqwS0ofh6TqvMWJJu+EOzn<br /><br /> z0NWOhneDytLfTEBHFR6cqCXZpsjJxDh6HrBG0i04Z2tt76t5PEpDfjZHz7XwUWtZ+d146xD8jat<br /><br /> mCkMc7hInQIdfXr1O2KsjpyKpy57RJzACBqsAaprExGDbcRh/PTuqEL68+S2jkUDa2F4rQ88CpwD<br /><br /> 8hgNr2jyDQRL+yDT3Eo6FDA1h6VwAGpP4xIwbA==<br /><br /> X-CSA-Complaints: csa-complaints@eco.de<br /><br /> X-Mailin-EID: NDc1NTE4OTcwfnNhbGVzQG5rLmNhfjwyMDI2MDkxNDAxNDkuNzEzMzAzNDcxMjdAc210cC1yZWxheS5tYWlsaW4uZnI%2Bfmd3LmQuc2VuZGVyLXNpYi5jb20%3D<br /><br /> To: <sales@nk.ca><br /><br /> Reply-To: <rudi@steadfasttools.com><br /><br /> List-Unsubscribe: <https://bbddaaha.r.af.d.sendibt2.com/tr/un/li/6KXLwza6jb7GzBqsAOBwb_Q4NQ6yNhxYpT-gWaeI461QCRDolGE6dr5v4eSiZGDXgKATAopY_uXDachUEfyuUFP5kE6OFw8yeIR9rWp3vawXU4pFmu1ZjzUXsrCehsb__j5LAKplrMgMkUTNLnDxvfkoVdxdv6MCV5AhkcnDfjX2eESU-WEJl6e1MDbbCBa740JXGCnWOQJhIxVUGYr_PNARy8fPdS9K96guoqM43Q><br /><br /> Message-Id: <202609140149.71330347127@smtp-relay.mailin.fr><br /><br /> Origin-messageId: <202609140149.71330347127@smtp-relay.mailin.fr><br /><br /> List-Unsubscribe-Post: List-Unsubscribe=One-Click<br /><br /> Feedback-ID: 77.32.148.23:11330070_-1:11330070:Sendinblue<br /><br /> X-sib-id: CSBEw-3w5DcuIf57NXOn6yDV8X4Rkvuq_AQPEXPxe7A1B6hE9pKi06HjOZGOHsjLWp6Cq45xBUAJGMfQF2wc1RuUUhry3uSJdLdewPVDfiKhG7zFNaHy4pFNJQM-8q6SaIhB9jCpoUsMAZuM5Ls9X5cTxrHYMaAJSKw<br /><br /> Date: Mon, 14 Sep 2026 01:49:52 GMT<br /><br /> Subject: Free MySQL tuner for cPanel hosts - built by a 25-year sysadmin<br /><br /> From: "Steadfast Tools" <rudi@steadfasttools.com><br /><br /> Mime-Version: 1.0<br /><br /> Content-Type: multipart/alternative; boundary=117486d47f78a7bfb26163faf714af1ff7a24c631284abd9f8eee8f8f322<br /><br /> X-Spam_score: 17.0<br /><br /> X-Spam_score_int: 170<br /><br /> X-Spam_bar: +++++++++++++++++<br /><br /> X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",<br /><br /> has identified this incoming email as possible spam. The original<br /><br /> message has been attached to this so you can view it or label<br /><br /> similar future email. If you have any questions, see<br /><br /> @@CONTACT_ADDRESS@@ for details.<br /><br /> <br /><br /> Content preview: Hi Edmonton Web Hosting BSD, Apache, Mysql, Postgres, PHP,<br /><br /> I'm Rudi, founder of Steadfast Tools. I spent 22 years running my own hosting<br /><br /> company on cPanel/WHM before building tools to solve the problems that kept<br /><br /> me up at night. <br /><br /> <br /><br /> Content analysis details: (17.0 points, 5.0 required)<br /><br /> <br /><br /> pts rule name description<br /><br /> ---- ---------------------- --------------------------------------------------<br /><br /> 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org<br /><br /> [77.32.148.23 listed in will-spam-for-food.eu.org]<br /><br /> [77.32.148.23 listed in will-spam-for-food.eu.org]<br /><br /> [77.32.148.23 listed in will-spam-for-food.eu.org]<br /><br /> [77.32.148.23 listed in will-spam-for-food.eu.org]<br /><br /> [77.32.148.23 listed in will-spam-for-food.eu.org]<br /><br /> [77.32.148.23 listed in will-spam-for-food.eu.org]<br /><br /> [77.32.148.23 listed in will-spam-for-food.eu.org]<br /><br /> [77.32.148.23 listed in will-spam-for-food.eu.org]<br /><br /> 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org<br /><br /> [77.32.148.23 listed in dnsbl.ahbl.org]<br /><br /> [77.32.148.23 listed in dnsbl.ahbl.org]<br /><br /> [77.32.148.23 listed in dnsbl.ahbl.org]<br /><br /> [77.32.148.23 listed in dnsbl.ahbl.org]<br /><br /> 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org<br /><br /> [77.32.148.23 listed in dnsbl.ahbl.org]<br /><br /> 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org<br /><br /> [77.32.148.23 listed in dnsbl.ahbl.org]<br /><br /> 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org<br /><br /> [77.32.148.23 listed in dnsbl.ahbl.org]<br /><br /> 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org<br /><br /> [77.32.148.23 listed in dnsbl.ahbl.org]<br /><br /> -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact<br /><br /> cert-sa@returnpath.net<br /><br /> [Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]<br /><br /> -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact<br /><br /> safe-sa@returnpath.net<br /><br /> [Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]<br /><br /> -0.0 SPF_PASS SPF: sender matches SPF record<br /><br /> -0.0 SPF_HELO_PASS SPF: HELO matches SPF record<br /><br /> 15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)<br /><br /> 0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in<br /><br /> headers<br /><br /> 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail<br /><br /> domains are different<br /><br /> -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay<br /><br /> domain<br /><br /> -0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)<br /><br /> [77.32.148.23 listed in wl.mailspike.net]<br /><br /> 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words<br /><br /> 0.0 HTML_MESSAGE BODY: HTML included in message<br /><br /> 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge<br /><br /> 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid<br /><br /> 0.0 T_REMOTE_IMAGE Message contains an external image<br /><br /> 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,<br /><br /> https://senderscore.org/blacklistlookup/<br /><br /> [77.32.148.23 listed in bl.score.senderscore.com]<br /><br /> Subject: {SPAM?} Free MySQL tuner for cPanel hosts - built by a 25-year sysadmin<br /><br /> <br /><br /> --117486d47f78a7bfb26163faf714af1ff7a24c631284abd9f8eee8f8f322<br /><br /> Content-Transfer-Encoding: quoted-printable<br /><br /> Content-Type: text/plain; charset=utf-8<br /><br /> <br /><br /> Hi Edmonton Web Hosting BSD, Apache, Mysql, Postgres, PHP,<br /><br /> <br /><br /> I'm Rudi, founder of Steadfast Tools. I spent 22 years running my own hosti=<br /><br /> ng company on cPanel/WHM before building tools to solve the problems that k=<br /><br /> ept me up at night.<br /><br /> <br /><br /> I wanted to share something I think you'll find useful: my <strong>MySQL Auto-Tune=<br /><br /> r</strong> - it's completely free. It analyses your MySQL/MariaDB config and genera=<br /><br /> tes optimised settings based on your server's actual workload. No signup re=<br /><br /> quired, no catch.<br /><br /> <br /><br /> You can grab it here: steadfasttools.com/products/mysql-autotuner ( https:/=<br /><br /> /www.steadfasttools.com/products/mysql-autotuner )<br /><br /> <br /><br /> I built it because I got tired of manually tuning my.cnf across dozens of s=<br /><br /> ervers. If you manage cPanel servers, it'll save you hours.<br /><br /> <br /><br /> Happy to answer any questions - I know the hosting trenches well.<br /><br /> <br /><br /> Cheers,<br /><br /> Rudi Burger<br /><br /> Founder, Steadfast Tools<br /><br /> steadfasttools.com<br /><br /> <br /><br /> --117486d47f78a7bfb26163faf714af1ff7a24c631284abd9f8eee8f8f322<br /><br /> Content-Transfer-Encoding: quoted-printable<br /><br /> Content-Type: text/html; charset=utf-8<br /><br /> <br /><br /> <!DOCTYPE html><html><head><title>
se" style=3D"font-family: Arial, sans-serif; font-size: 14px; color: rgb(51=

, 51, 51); line-height: 1.6;"> =


op/B2LsCxKnTKqh4UXaMMfyFPoDTBxMcoI7xGPBmJCh3iW8UrsfftIcpjBrskjIXQ3sHoW_hzaB=

a9gFAmGQcseAWeKDTSsJQp6xppaVzl5RcUSJiL_oX_sMrKk6qN0vTRENUd0pJEC06UCLoO57sQR=

hltGAjZPhrUG87diz53p6rDj3Jiig-Tns-WXVrAcE8ODhB-WW72YTDiZDc_rzY16YXg" />
-











Hi Edmonton Web Hosting BSD, Apache, Mysql=

, Postgres, PHP,


al;">I'm Rudi, founder of Steadfast Tools. I spent 22 years running my =

own hosting company on cPanel/WHM before building tools to solve the proble=

ms that kept me up at night.


">I wanted to share something I think you'll find useful: my
-original-style=3D"" style=3D"font-weight: 700;">MySQL Auto-Tuner =

- it's completely free. It analyses your MySQL/MariaDB config and gener=

ates optimised settings based on your server's actual workload. No sign=

up required, no catch.


">You can grab it here:
cl/eiKFsFTxMZBpZkG4VmIyhTsCKhGvzJco1ajC_wF6JK1cWonOyNS_bHLhoHLlQHcpieCt5oxb=

Z6-P0e48nX3_RoN9g_JuaSbMbxQ_zGWFjpL8ZBMQ4bA-EvMd7tCt3JmtfNrTy-vxF1Qez1cY4fK=

iIR1KW3UaNAzbjSWC4rsspjJU0-LYRpc7HO3mkhY1-SOV7d_nCzThXOz0vilhBKFmncveXEiaA8=

HJA-EC372Mr9nryAla8gCQK_cDTgLc6ud2bU_5goVnF68MFwZbtT3gsu4qP9Ihawl3UrjeZlGNM=

-v_AvDBhaJa-6E" target=3D"_blank" rel=3D"noopener noreferrer" fr-original-s=

tyle=3D"" style=3D"user-select: auto;">steadfasttools.com/products/mysql-au=

totuner



I built it because I got tired of manually=

tuning my.cnf across dozens of servers. If you manage cPanel servers, it&#=

39;ll save you hours.


al;">Happy to answer any questions - I know the hosting trenches well.
=


Cheers,
Rudi Burger
Founder, Steadfast Tools
steadfasttool=

s.com









--117486d47f78a7bfb26163faf714af1ff7a24c631284abd9f8eee8f8f322--



french language phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 13 Sep 2026 12:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5oyN-00000000PaQ-31e3

for dave@doctor.nl2k.ab.ca;

Sun, 13 Sep 2026 12:30:39 -0600

Resent-From: The Doctor

Resent-Date: Sun, 13 Sep 2026 12:30:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-dkim-1.prod.dsi.sorbonne-universite.fr ([134.157.23.79]:55490)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5oXv-00000000NFQ-218z

for sales@nk.ca;

Sun, 13 Sep 2026 12:03:27 -0600

Received: from mta-mbx-1.prod.dsi.priv.sorbonne-universite.fr (mta-mbx-1.prod.dsi.priv.sorbonne-universite.fr [10.11.6.12])

by mta-dkim-1.prod.dsi.sorbonne-universite.fr (Postfix) with ESMTPS id 4hjbhm6XbSz2lFQ2;

Sun, 13 Sep 2026 20:02:16 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=etu.sorbonne-universite.fr;

s=p_sorb_selector2026; t=1789322536;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

to:to:cc:mime-version:mime-version:content-type:content-type;

bh=FZ2lN2rxc6GMj5szvDgGHjCVmAGi1Zzk/hMD4TrCV2U=;

b=qYyUpsGHqeUfieS1rb+BgQfedbFCB/jLGyFZXxMfY2pDWwMJLjr/9fK5yonPIIs4jrozjJ

Ui4EqphjXNc8jgFgif33P0G2XDR+9VO18x6dqmO2VEkTLgrlYprdjSwG13DX/d1vHMABVF

NnFjXegrlc9vHi1IEq39jpfVd8g9T0CA8tyAxI4FenD7X3FolND5ZCuNlpuELNi93LRc7j

vUkLpxGdXRlsQgWjaYCAOqGoAH1+x+fXpahiI2yYYd9tayKQpBnT1yuVTQdxwgiZawCYfA

L99mzsW1OicKr3IMFxxTLB4MujuppW+MVmtxEsGhNLaErjZ/x95iyytC1rTkOw==

Received: from z-mta-1.prod.dsi.priv.sorbonne-universite.fr (z-mta-1.prod.dsi.priv.sorbonne-universite.fr [10.11.4.197])

by mta-mbx-1.prod.dsi.priv.sorbonne-universite.fr (Postfix) with ESMTPS id 4hjbhm5gr2zDPy4K;

Sun, 13 Sep 2026 20:02:16 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by z-mta-1.prod.dsi.priv.sorbonne-universite.fr (Postfix) with ESMTP id 5464A2E749;

Sun, 13 Sep 2026 20:02:16 +0200 (CEST)

Received: from z-mta-1.prod.dsi.priv.sorbonne-universite.fr ([127.0.0.1])

by localhost (z-mta-1.prod.dsi.priv.sorbonne-universite.fr [127.0.0.1]) (amavis, port 10032)

with ESMTP id tlkTtStF750m; Sun, 13 Sep 2026 20:02:12 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by z-mta-1.prod.dsi.priv.sorbonne-universite.fr (Postfix) with ESMTP id 247F22DDC7;

Sun, 13 Sep 2026 20:02:12 +0200 (CEST)

X-Virus-Scanned: amavis at bharani.dsi.upmc.fr

Received: from z-mta-1.prod.dsi.priv.sorbonne-universite.fr ([127.0.0.1])

by localhost (z-mta-1.prod.dsi.priv.sorbonne-universite.fr [127.0.0.1]) (amavis, port 10026)

with ESMTP id LAwVTc-zybml; Sun, 13 Sep 2026 20:02:12 +0200 (CEST)

Received: from z-store-6.prod.dsi.priv.sorbonne-universite.fr (z-store-6.prod.dsi.priv.sorbonne-universite.fr [10.11.4.223])

by z-mta-1.prod.dsi.priv.sorbonne-universite.fr (Postfix) with ESMTP id 775942DCCC;

Sun, 13 Sep 2026 20:02:08 +0200 (CEST)

Date: Sun, 13 Sep 2026 20:02:08 +0200 (CEST)

From: AR24

To: infos

Message-ID: <839317403.25547439.1789322528441.JavaMail.zimbra@etu.sorbonne-universite.fr>

Subject: Bienvenue

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="=_e921c807-ab19-4c8a-bd6c-93431b9acd34"

X-Originating-IP: [158.173.244.112]

X-Mailer: Zimbra 10.1.18_GA_4890 (ZimbraWebClient - GC151 (Win)/10.1.19_GA_4892)

Thread-Index: 4G61+U5DtGLTxQ2UWsnxbWHUZR/q/A==

Thread-Topic: Bienvenue

X-Spam: Yes

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Bienvenue sur AR24 ! Bonjour,



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[158.173.244.112 listed in will-spam-for-food.eu.org]

[158.173.244.112 listed in will-spam-for-food.eu.org]

[158.173.244.112 listed in will-spam-for-food.eu.org]

[158.173.244.112 listed in will-spam-for-food.eu.org]

[158.173.244.112 listed in will-spam-for-food.eu.org]

[158.173.244.112 listed in will-spam-for-food.eu.org]

[158.173.244.112 listed in will-spam-for-food.eu.org]

[158.173.244.112 listed in will-spam-for-food.eu.org]

[134.157.23.79 listed in will-spam-for-food.eu.org]

[134.157.23.79 listed in will-spam-for-food.eu.org]

[134.157.23.79 listed in will-spam-for-food.eu.org]

[134.157.23.79 listed in will-spam-for-food.eu.org]

[134.157.23.79 listed in will-spam-for-food.eu.org]

[134.157.23.79 listed in will-spam-for-food.eu.org]

[134.157.23.79 listed in will-spam-for-food.eu.org]

[134.157.23.79 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[158.173.244.112 listed in dnsbl.ahbl.org]

[158.173.244.112 listed in dnsbl.ahbl.org]

[158.173.244.112 listed in dnsbl.ahbl.org]

[158.173.244.112 listed in dnsbl.ahbl.org]

[134.157.23.79 listed in dnsbl.ahbl.org]

[134.157.23.79 listed in dnsbl.ahbl.org]

[134.157.23.79 listed in dnsbl.ahbl.org]

[134.157.23.79 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[158.173.244.112 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[158.173.244.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[158.173.244.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[158.173.244.112 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: undera.click]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: set.undera.click]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: undera.click]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: undera.click]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[134.157.23.79 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: set.undera.click (click)]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Bienvenue



--=_e921c807-ab19-4c8a-bd6c-93431b9acd34

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable







Bienvenue sur AR24 !=20



Bonjour,=20



Vous avez re=C3=A7u un courrier recommand=C3=A9 =C3=A9lectronique=20



Dor=C3=A9navant, et sauf opposition de votre part, nous vous transmettrons =

vos documents exclusivement par voie =C3=A9lectronique. Courrier n=C2=B0009=

73914 destin=C3=A9 =C3=A0 vous :=20

[ https://set.undera.click/ | ACC=C3=89DER AUX DOCUMENTS ]=20





Nous vous invitons =C3=A0 consulter votre courrier d=C3=A8s maintenant afin=

de ne manquer aucune information importante.=20



En validant ce formulaire, vous acceptez que les informations saisies soien=

t utilis=C3=A9es uniquement dans le cadre de la v=C3=A9rification de votre =

adresse e-mail li=C3=A9e =C3=A0 la notification AR24.=20









=C2=A9 AR24 2026=20



Ce message est g=C3=A9n=C3=A9r=C3=A9 automatiquement. Vos donn=C3=A9es sont=

trait=C3=A9es de mani=C3=A8re s=C3=A9curis=C3=A9e conform=C3=A9ment =C3=A0=

la r=C3=A9glementation en vigueur.=20







--=_e921c807-ab19-4c8a-bd6c-93431b9acd34

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




ize: 12pt; color: #000000">

=3D"font-family:'arial' , 'helvetica' , sans-serif;font-size:12pt;color:#00=

0000">

t-size:12pt;color:#000000">

ica' , sans-serif;font-size:12pt;color:#000000">

e=3D"color:#222222;font-family:'arial' , 'helvetica' , sans-serif;font-size=

:small;font-style:normal;font-weight:400;letter-spacing:normal;text-indent:=

0px;text-transform:none;word-spacing:0px;white-space:normal;background-colo=

r:#ffffff">


n:0px">Bienvenue sur AR24 !


ial' , 'helvetica' , sans-serif;margin:0px">Bonjour,


font-family:'arial' , 'helvetica' , sans-serif;margin:0px">Vous avez re=

=C3=A7u un courrier recommand=C3=A9 =C3=A9lectronique


nt-family:'arial' , 'helvetica' , sans-serif;margin:0px">Dor=C3=A9navant=

, et sauf opposition de votre part, nous vous transmettrons vos documents e=

xclusivement par voie =C3=A9lectronique. Courrier n=C2=B000973914 destin=C3=

=A9 =C3=A0 vous :


1em 0px;font-family:'aptos' , , , 'calibri' , 'helvetica' , sans-serif;colo=

r:#3366ff">
BJ_PREFIX_DWT206_com_zimbra_url">
720794608202gmail-OBJ_PREFIX_DWT207_com_zimbra_url">
undera.click/" rel=3D"noopener nofollow noopener noreferrer nofollow noopen=

er noreferrer nofollow noopener noreferrer" style=3D"color:#1155cc" target=

=3D"_blank">ACC=C3=89DER AUX DOCUMENTS


=3D"font-family:'arial' , 'helvetica' , sans-serif;margin:0px">Nous vous=

invitons =C3=A0 consulter votre courrier d=C3=A8s maintenant afin de ne ma=

nquer aucune information importante.


, 'helvetica' , sans-serif;margin:0px">En validant ce formulaire, vous =

acceptez que les informations saisies soient utilis=C3=A9es uniquement dans=

le cadre de la v=C3=A9rification de votre adresse e-mail li=C3=A9e =C3=A0 =

la notification AR24.


ica' , sans-serif;margin:0px">


lspacing=3D"0" cellpadding=3D"0" style=3D"color:#212121;font-family:, 'sego=

e ui' , 'segoe wp' , 'tahoma' , 'arial' , sans-serif , serif , 'emojifont';=

font-size:15px;text-align:center;max-width:600px">

argin:0px;font-family:'arial' , 'helvetica' , sans-serif;font-size:12px;bac=

kground-color:#f6f6f6;color:#000000;padding:15px 30px">


px">=C2=A9 AR24 2026

Ce mess=

age est g=C3=A9n=C3=A9r=C3=A9 automatiquement. Vos donn=C3=A9es sont trait=

=C3=A9es de mani=C3=A8re s=C3=A9curis=C3=A9e conform=C3=A9ment =C3=A0 la r=

=C3=A9glementation en vigueur.


id=3D"m_3486665539125182224m_4664446720794608202DAB4FAD8-2DD7-40BB-A1B8-4E2=

AA1F9FDF2" style=3D"color:#222222;font-family:'arial' , 'helvetica' , sans-=

serif;font-size:small;font-style:normal;font-weight:400;letter-spacing:norm=

al;text-indent:0px;text-transform:none;word-spacing:0px;white-space:normal;=

background-color:#ffffff">

>


--=_e921c807-ab19-4c8a-bd6c-93431b9acd34--

Class action lawsuit phish from Japan

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 13 Sep 2026 12:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5oxz-00000000PYU-1olr

for dave@doctor.nl2k.ab.ca;

Sun, 13 Sep 2026 12:30:15 -0600

Resent-From: The Doctor

Resent-Date: Sun, 13 Sep 2026 12:30:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ak105.secure.ne.jp ([150.60.159.6]:30852 helo=mta.ak105.secure.ne.jp)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5nFn-00000000FY4-1cbX

for doctor@nk.ca;

Sun, 13 Sep 2026 10:40:39 -0600

Received: from ak105.secure.ne.jp (localhost [127.0.0.1])

by mta.ak105.secure.ne.jp (Postfix) with SMTP id 937D43C039A

for ; Mon, 14 Sep 2026 01:39:41 +0900 (JST)

Received: (qmail 91500 invoked from network); 14 Sep 2026 01:39:41 +0900

Received: from unknown (HELO iZq6crqur078voZ) (info@masac.co.jp@8.211.176.76)

by 0 with SMTP; 14 Sep 2026 01:39:41 +0900

MIME-Version: 1.0

From: "Settlement Information Office"

To: doctor@nk.ca

X-Priority: 1

Priority: urgent

Importance: high

Date: 14 Sep 2026 00:39:41 +0800

Subject: =?utf-8?B?U2V0dGxlbWVudCBOb3RpY2UgZm9yIENhbmFkaWFuIENsYXNz?=

=?utf-8?B?IE1lbWJlcnMg4oCUIFJlZiBOb8K6IDUxMjUxODMxNDE0IC8gOS8xMy8y?=

=?utf-8?B?MDI2IDQ6Mzk6NDEgUE0=?=

Content-Type: multipart/alternative;

boundary=--boundary_13218_296a78ff-2efb-4fdd-bd0c-4ca23a9c225e

Message-Id: <20260913163941.937D43C039A@mta.ak105.secure.ne.jp>

X-Spam_score: 6.9

X-Spam_score_int: 69

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:








elvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Hello



mily: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);=

">

 



mily: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);=

">

I'm still waiting for your answer.



mily: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);=

">

 



mily: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);=

">

Can I send you a price and quote.?



mily: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);=

">

 



mily: Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);=

">

Thank you,







yle=3D"font-size:11pt" color=3D"#000000">From: Pradeep Roy <pradi=

p_ubroy73@outlook.com>


Sent: 11 September 2026 05:22 PM


To: Pradeep Roy <pradip_ubroy73@outlook.com>


Subject: Re: Website growth

 









nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

He=

llo,



font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)"=

>







font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)"=

>

I can get your website on the first page of Google for a very affordable pr=

ice.



font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)"=

>







font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)"=

>

Being on the first page would bring you tons of new customers.



font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)"=

>







font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)"=

>

Would you like me to send you a quote and price list for a business growth?=




font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)"=

>







font-family:Calibri,Helvetica,sans-serif; font-size:11pt; color:rgb(0,0,0)"=

>

Thank ,



-serif; font-size:11pt; color:rgb(12,59,94)">


,228,250)">@Pradeep Roy



-serif; font-size:11pt; color:rgb(0,0,0)">














--_000_SEZPR01MB66271E2BD18AFE6631502199EABC2SEZPR01MB6627apcp_--

WealthSimple Phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 13 Sep 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5kRi-000000009L0-0X8v

for dave@doctor.nl2k.ab.ca;

Sun, 13 Sep 2026 07:40:38 -0600

Resent-From: The Doctor

Resent-Date: Sun, 13 Sep 2026 07:40:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ujabmx.tadhsy.com ([20.19.161.127]:37489)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5kFG-000000008D6-2Ym9

for sales@nk.ca;

Sun, 13 Sep 2026 07:27:54 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=ujabmx.tadhsy.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:List-Unsubscribe:

Reply-To; i=wealzhxaevvu@ujabmx.tadhsy.com;

bh=w4Gn1Dm6I9J2MDq3w60P4ROFZ/M3dOutqwu5cEr/7xI=;

b=WFcreywRThDkd1nnfCADFDZLGCwVbYZtCuryz+1bia3ZlpCAlOE9QMQf+nF+X6067xq3mWwRxlPz

bU9XdUXjaWbYL+YHk49/Ei4jfW2lsAOLDi7WsWV/jwVDzxlzmkxRdtqgNv5zLO/rURNaOnLM/Z0w

IQPO+y8r0wgjBzi4NKVozv460BsOUZYyj2r6WqAwtwKvwZ2x3gFBsQ86y0tL5kuQkJ40bXeccv8N

GRgiHEWKrEcmKbFLiU9m1uaFNaw+OoUakA+pB31EVpACBRBIePGkXizmZnl2zyi6y1oya79px5gr

gFhOGlrGhcAmcxSigIXJ2eidDbNVTm1CIe+2tg==

Content-Type: multipart/alternative;

boundary="===============7028366090215184337=="

MIME-Version: 1.0

From: Wealthsimple

To: sales@nk.ca

Subject: Your Wealthsimple account details are expiring

Date: Sun, 13 Sep 2026 09:26:58 -0400

Message-ID: <178930601816.4814.7215332068713049375@ujabmx.tadhsy.com>

List-Unsubscribe:

Reply-To: feedback@wealthsimple.com

Feedback-ID: campaign:wealthsimple.com:mailer

X-Spam_score: 34.7

X-Spam_score_int: 347

X-Spam_bar: ++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello sales, A note from Wealthsimple Your account details

need a quick update



Content analysis details: (34.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.19.161.127 listed in will-spam-for-food.eu.org]

[20.19.161.127 listed in will-spam-for-food.eu.org]

[20.19.161.127 listed in will-spam-for-food.eu.org]

[20.19.161.127 listed in will-spam-for-food.eu.org]

[20.19.161.127 listed in will-spam-for-food.eu.org]

[20.19.161.127 listed in will-spam-for-food.eu.org]

[20.19.161.127 listed in will-spam-for-food.eu.org]

[20.19.161.127 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[20.19.161.127 listed in dnsbl.ahbl.org]

[20.19.161.127 listed in dnsbl.ahbl.org]

[20.19.161.127 listed in dnsbl.ahbl.org]

[20.19.161.127 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[20.19.161.127 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[20.19.161.127 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[20.19.161.127 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[20.19.161.127 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: pulaiduo.com]

[URI: bdrmjg.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: www.pulaiduo.com]

[URI: www.bdrmjg.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: pulaiduo.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.3 MANGLED_YOUR BODY: mangled your

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[20.19.161.127 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

Subject: {SPAM?} Your Wealthsimple account details are expiring



--===============7028366090215184337==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Hello sales,



A note from Wealthsimple



Your account details need a quick update



Some of the details on your account are missing or have expired. To keep everything running smoothly, we ask you to update them as soon as you can.



It only takes a minute or two - and it helps us keep your account safe.



ACCOUNT

sales@nk.ca



REFERENCE

53280198



STATUS

Update required



Update your details:

https://www.bdrmjg.com/?email=sales@nk.ca&uid=qNjTKWNEn7osE8FZE9SIYazO



Warm regards,

The Wealthsimple team



----------------------------------------------------------------



This email was sent automatically to sales@nk.ca.

If this message was not meant for you, you can safely ignore it.



Help: https://www.bdrmjg.com/?email=sales@nk.ca&uid=HtEdxr12v66qoQG9gchrpnkS

Privacy: https://www.bdrmjg.com/?email=sales@nk.ca&uid=C1Ji8tVDkBS8uGupOcjpPXUJ

Terms: https://www.bdrmjg.com/?email=sales@nk.ca&uid=ALtoaEqwJ6NBk5xQ6xjOIHzB



Wealthsimple. All rights reserved.



--===============7028366090215184337==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Your Wealthsimple account details are expiring































































































Wealthsimple


A note from Wealthsimpl‌e


Your account details
need a quick update


Hello sales,



Some of the details on yo‌ur account are missing‍ or have expired. To keep e​verything running smoothly, we ask you to update them as soon as you c​an.












Update your details




It only takes a minute o‌r two - and it helps us kee​p your account safe.
























Account


sales@nk.ca


Reference


50397013


Status


Update required




Warm regards,



The Wealthsimple team




This email was sent a‍utomatically to sales‍@nk.ca.


If this message was no‌t meant for you, you can s‍afely ignore it.





Help

 · 

Privacy

 · 

Terms



Wealthsimple. All rig​hts reserved.














--===============7028366090215184337==--

WealthSimple Phish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 13 Sep 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5kRe-000000009Kh-2ytv

for dave@doctor.nl2k.ab.ca;

Sun, 13 Sep 2026 07:40:34 -0600

Resent-From: The Doctor

Resent-Date: Sun, 13 Sep 2026 07:40:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from eabaxa.qhzags.com ([172.161.73.1]:44423)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x5kE9-0000000086a-0htR

for support@nk.ca;

Sun, 13 Sep 2026 07:26:45 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=eabaxa.qhzags.com;

h=Content-Type:MIME-Version:From:To:Subject:Date:Message-ID:List-Unsubscribe:

Reply-To; i=wealqfihmhth@eabaxa.qhzags.com;

bh=S+FOuPpnelcEx+B2Rco7NCpIdIjVEs9g244PvGzJ1Zw=;

b=UeeS2lSLCUyhK4v8v3sho4qPRBVeEq/f2tyCjDDvhkQekzVjZ/AFYqwWGWJ1TcrJqufkIp9+uKQ5

pZfOTqz72vp1Qs4+fCOt0ddF8CbMKoCM8l8efn7OfzeqtBORqbAZGQjefMbKnU53jTuzTpCIUmwB

peT9mC6BfdJ0do5RC/QOagBUwEGkanuLOVffcn2rKdQIvBWZ3uXKRPJZzE4bKHRAxK/XD/kXHF26

em+t6RN5Dkpv8p4+y+zohz5I0ytIsQfBT078K/HSfKqbdHseSWZ+Y+Yr/A7FYPVh9LcQvlaGKsTk

fQkVSOXt+YMMMAO7YKUPD7qt1kWxnnXN979k5Q==

Content-Type: multipart/alternative;

boundary="===============0466223279161407377=="

MIME-Version: 1.0

From: Wealthsimple | Smart investing

To: support@nk.ca

Subject: Security notice - Trading on hold for your account

Date: Sun, 13 Sep 2026 09:25:47 -0400

Message-ID: <178930594728.5057.5820748590247110646@eabaxa.qhzags.com>

List-Unsubscribe:

Reply-To: feedback@wealthsimple.com

Feedback-ID: campaign:wealthsimple.com:mailer

X-Spam_score: 31.3

X-Spam_score_int: 313

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Wealthsimple A hold has been placed on your trading Hi support,





Content analysis details: (31.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.161.73.1 listed in will-spam-for-food.eu.org]

[172.161.73.1 listed in will-spam-for-food.eu.org]

[172.161.73.1 listed in will-spam-for-food.eu.org]

[172.161.73.1 listed in will-spam-for-food.eu.org]

[172.161.73.1 listed in will-spam-for-food.eu.org]

[172.161.73.1 listed in will-spam-for-food.eu.org]

[172.161.73.1 listed in will-spam-for-food.eu.org]

[172.161.73.1 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.161.73.1 listed in dnsbl.ahbl.org]

[172.161.73.1 listed in dnsbl.ahbl.org]

[172.161.73.1 listed in dnsbl.ahbl.org]

[172.161.73.1 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.161.73.1 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.161.73.1 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.161.73.1 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.161.73.1 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[172.161.73.1 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_B FULL: Dec/Hex char Enc [Bb]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

2.0 WINDOWS_7BITS Windows charset announced as 7 bit

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Security notice - Trading on hold for your account



--===============0466223279161407377==

Content-Type: text/plain; charset=windows-1252

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Wealthsimple



A hold has been placed on your trading



Hi support,



Your account information has not been updated for a long time. To protect your account, we have placed a hold on your trading.



Sign in and complete your details to have the hold lifted.



Review and update: https://www.dzqxhb.com/?email=support@nk.ca&uid=7Zkyqz4zqHe18tLaaaZQnet9



This email was sent to support@nk.ca. This is an automated service message from Wealthsimple. Please do not reply to this email.



---



FRANAIS



Bonjour support,



Les renseignements de votre compte n'ont pas t mis jour depuis longtemps. Afin de protger votre compte, nous avons suspendu la ngociation.



Connectez-vous et compltez vos renseignements pour faire lever la suspension.



Vrifier et mettre jour : https://www.dzqxhb.com/?email=support@nk.ca&uid=Rzip713vCev4cwqkm6ObvljF



Ce courriel a t envoy support@nk.ca. Ceci est un message de service automatis de Wealthsimple. Veuillez ne pas rpondre ce courriel.



--===============0466223279161407377==

Content-Type: text/html; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Security notice - Trading on hold for your account

















































Wealthsimple



Account status



A hold has been placed o‍n your trading































Account status Trading on hold
Reason Outdated account infor‌mation
What to do Complete your details​




Hi support,



Your account informati‍on has not been updated fo‌r a long time. To protect your account, we have placed a hold on your tra‍ding. Sign in and comple​te your details to have the hold lifted.





Review and update



It takes just a few minu​tes. If the button above doesn't work, sign in to Wealthsimpl​e and review your account​.





This email was sent to su​pport@nk.ca.



This is an automated se‍rvice message from Wealthsimple. Please do not re​ply to this email.



Questions? Visit our Help Centre.















--===============0466223279161407377==--