WEb/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Aug 2026 09:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzcOt-00000000L2H-0hP8

for dave@doctor.nl2k.ab.ca;

Thu, 27 Aug 2026 09:52:23 -0600

Resent-From: The Doctor

Resent-Date: Thu, 27 Aug 2026 09:52:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f2.google.com ([74.125.227.130]:36708)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzacq-00000000DGj-1vb6

for sales@nk.ca;

Thu, 27 Aug 2026 07:58:49 -0600

Received: by mail-pj2-f2.google.com with SMTP id d9443c01a7336-2ccc2e84048so2858155ad.1

for ; Thu, 27 Aug 2026 06:57:53 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bestappa2zsolution-info.20251104.gappssmtp.com; s=20251104; t=1787839068; x=1788443868; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=uhnq/M79j3WYwlTWCbzk85uHnD78b9OYWLfNAX5bnX8=;

b=O2462AvmoC5eXsBjTp0cerBqorKibO+3Q0x4QK6G68XcLA4r6x8RfrVa1bJdzGOY2M

DrjCpfdHPPDd690LxpQhb7UeArZliBI7DSU8PdM214amzAuvaiP2cFCIFOiNFP69Z/fg

gmBTWe90lMTu2GoQJ9PlzBfq9zm27AM3CwJrOzb0GEG7cvz+2SkuTQnSQCXVmPhjb55h

YRdUJDo/foIXnbFNgv9tNkzKJavNOm3EJBhM/0fI2pLSGseGA38A1EZbXT7EYb/yNOF5

rMMHphvajwe2f5AjEdk0XfDtS5rGaLKeX4tif1Bon42PGtwfF47Or7gLRai45NYMrbFa

Xn1w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787839068; x=1788443868;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=uhnq/M79j3WYwlTWCbzk85uHnD78b9OYWLfNAX5bnX8=;

b=Javgnf2EixoPSl7VRianh/E0k1mv87QpGr+Z6s/VuAWWrFJO8AIK3Tb71VjUaUjpc+

qcKIKK1E0+J01+yse4V8AjsIrcRNYmAamzybsaxc7Osh8PBk5eeeOZkTMWohxYBN7CsK

VPn5+ZJwUGpRdn0osm6leIdBtY1JHUy0DEw2rslcAr23g5laIbjyK+/BqRRQFrhkjfik

+BLLDYKixiciaKEaSp8UglHNX+kk+gWFp0FZVLqfDeMmvJ5/1fvoKkNPzduXVMknJue+

ieG3LFrfJx08elfwe/odlet4FyJjTd9+nWvfX2wUSiHOgOA+tRZuYLD6mfSDGc6a6Uqu

5ovQ==

X-Gm-Message-State: AFuF++kvEZKB7dWjrVrHI7lE071/tgfH85Zjdfx/44dR5mgiAGlKkzOp

IBYoNeeXsJ6OiMckz/LPKPRAuuAbz11Fxttnv3n77o0DARNAvNIDv4NH8FPtRyAEUk9v5H1u74g

S+mM7MeKgMQ==

X-Gm-Gg: AR+sD13z8yX83IlvqASFBD/NWBbahGcRz9shLoTF16MmGLl8XAVj6V+BxLAa85KeCsZ

DCQASo+TkkhCiNZv7NLWyDem9dWPW0E9AB5k656htl/fLKe6nDFWCd1Hwg0aLjMgBtb8sYDClut

/pJwPwgO5S0hCfNWoQOpB4oXyvAhiVe25hdigD+P2SVUeUvOP/5515P/TLXN4NTUaQ+JV8gHhDn

bAJXMwy3dNXGR1pExNd6tkhUqFmAwhx57tyPtB2sYRxwy2Oihez9aaquOnCe/MbOXYzSm9htHTL

ZIAOFuewiN5D24+EA/j+TAAuf54zMGxjTw30E8CdKg05XVGF2DZDiEenq/guCIdakeWmy6Oe7Oi

l756SVK3TRlBcik4qKGgICnwCxxh0m4zwEnWbUA5a5NYjxdiE+Qgz5m7tPr6Wy/PRoDuvmg5Bip

OTzSGpiUkJ9fdAbShdevas34FTt5frFkA7bkncDBg735bYCFZ3Nb8fwYbUBUQygWVCD/eIDXZz5

ZzeLZDi7A==

X-Received: by 2002:a17:903:380b:b0:2d6:fec3:bd57 with SMTP id d9443c01a7336-2d707b6ca38mr319364655ad.14.1787839067647;

Thu, 27 Aug 2026 06:57:47 -0700 (PDT)

Received: from [127.0.0.1] ([2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-3283d63bb23sm20590687eec.7.2026.08.27.06.57.46

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Thu, 27 Aug 2026 06:57:47 -0700 (PDT)

From: Juhi

To: sales@nk.ca

Subject: Mobile App- www.nk.ca ?

Message-ID: <1ec3cc07-681f-4016-b12a-7a694e3238c9@bestappa2zsolution.info>

Content-Transfer-Encoding: quoted-printable

Date: Thu, 27 Aug 2026 13:57:45 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Want to grow your business with a custom mobile app?



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in will-spam-for-food.eu.org]

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

[74.125.227.130 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in dnsbl.ahbl.org]

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in dnsbl.ahbl.org]

[74.125.227.130 listed in dnsbl.ahbl.org]

[74.125.227.130 listed in dnsbl.ahbl.org]

[74.125.227.130 listed in dnsbl.ahbl.org]

[74.125.227.130 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2401:4900:1c5b:394d:a9c7:64e3:fd97:6f82 listed]

[in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.130 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.130 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

1.0 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.130 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Mobile App- www.nk.ca ?



Hi,

Want to grow your business with a custom mobile app?

/>
I'd be happy to share our previous work and development packages.=



Thanks,

Juhi



Loblaw/Weston Packaged Bread Class Actions spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Aug 2026 07:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzaNL-00000000Pqp-1FSC

for dave@doctor.nl2k.ab.ca;

Thu, 27 Aug 2026 07:42:39 -0600

Resent-From: The Doctor

Resent-Date: Thu, 27 Aug 2026 07:42:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ak106.secure.ne.jp ([150.60.159.7]:28241 helo=mta.ak106.secure.ne.jp)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzaKp-00000000LBv-1Gmz

for doctor@nl2k.ab.ca;

Thu, 27 Aug 2026 07:40:11 -0600

Received: from ak106.secure.ne.jp (localhost [127.0.0.1])

by mta.ak106.secure.ne.jp (Postfix) with SMTP id BABE1238637

for ; Thu, 27 Aug 2026 22:39:12 +0900 (JST)

Received: (qmail 32910 invoked from network); 27 Aug 2026 22:39:12 +0900

Received: from unknown (HELO EC2AMAZ-3IGI63Q) (info@sanshiba-works.co.jp@56.155.40.70)

by 0 with SMTP; 27 Aug 2026 22:39:12 +0900

MIME-Version: 1.0

From: "Settlement Member Team"

To: doctor@nl2k.ab.ca

Date: 27 Aug 2026 13:39:12 +0000

Subject: =?utf-8?B?SW5mb3JtYXRpb24gQWJvdXQgdGhlIE9udGFyaW8gU2V0dGxl?=

=?utf-8?B?bWVudCA6IFJlZiBOb8K6IDE0NjA4ODc1NTcgLyA4LzI3LzIwMjYgMToz?=

=?utf-8?B?OToxMiBQTQ==?=

Content-Type: multipart/alternative;

boundary=--boundary_13013_450060a8-1ea3-49e7-862f-6e8f275af1ec

Message-Id: <20260827133912.BABE1238637@mta.ak106.secure.ne.jp>





Settlement Information

Packaged Bread Class Actions



Information Notice

2026

Important Settlement Information

Loblaw/Weston

Packaged Bread Class Actions



Version française suit plus bas.

Recipient Information

You are receiving this email because you were identified as having claimed a $100 to $200 Loblaw Card from the Packaged Bread Loblaw Card Program and/or as having registered with the lawyers handling this class action.

Legal Notice

Authorized by the Superior Court of Justice for Ontario

01



Nature of the Proceedings

Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of individuals and businesses resident in Canada who purchased Packaged Bread alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges for Packaged Bread sold in Canada.

The Courts have not yet made any decision on the merits of the claims or the defences in either of the actions.

National Settlement

$500 Million

$96 million already paid

02



Settlement Terms

The Plaintiffs in the actions have entered into a national settlement with Loblaw/Weston for $500 million and their cooperation in pursuing claims against non-settling defendants in the continuing actions.

If the settlement is approved by the Courts in both actions, the net settlement funds, after approved fees and expenses, will be distributed to and for the benefit of Settlement Class Members in accordance with the applicable distribution protocol.

03



Settlement Class Eligibility

If you are resident anywhere in Canada except Quebec and purchased Packaged Bread between January 1, 2008 and December 31, 2025, inclusive, and wish to participate in the Loblaw/Weston Settlement, please review the official settlement information and eligibility requirements.

Review Official Information

Please review the official settlement materials, eligibility requirements and applicable deadlines.

Apply Now Appliquez

Before submitting any information

Verify the settlement administrator, court notice, claim deadline and official website before providing personal or financial information.

This communication contains settlement information. Please consult the official settlement materials for the authoritative terms, eligibility requirements and deadlines.



https://www.canadianbreadsettlement.ca/ | Unsubscribe

```





nk.ca credential phishing from sendgrid

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Aug 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzaLG-00000000LRk-0I52

for dave@doctor.nl2k.ab.ca;

Thu, 27 Aug 2026 07:40:30 -0600

Resent-From: The Doctor

Resent-Date: Thu, 27 Aug 2026 07:40:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzbpn.outbound-mail.sendgrid.net ([159.183.235.50]:30198)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzTJo-00000000Cnm-00V6

for sales@nk.ca;

Thu, 27 Aug 2026 00:10:39 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=somnos.io;

h=from:subject:date:mime-version:to:content-type:

content-transfer-encoding:cc:content-type:date:from:subject:to;

s=s1; t=1787810919;

bh=8P5QuMWG2Dq+ASfMEsJ32MCNS1hZcCnuM8uhrKRP4pg=;

b=J5FN/UVIatUbYEy4+51FKMEGTedQd800glL6pOmtjluOLBU+Yvf5IKGZVQtMqKQz1w6w

9kZPtkD0jQvZ07HJrvMni6AUfhHq9Q0ESnGllFl3/Erf/oOoV91tVOK3HFw2eX3bXkE7HH

Dse9uYAuFcDT99RCT+S89qG+BMP/96FA+RUDGddbXaKcGxkcJgIeCakIsHSajqk8+7XdWc

ueFVfRwirr/ma7ythNefYGdCA8KBhNZFu6EB7mgeDYXjf41ZrO1luAYrO/xJy/fjjEreHN

By2i2uxoDab8s9QFOOOQDhg9nQtu7O/gpEgLcw4rv8YqTQipVDjCyXEdv8sb+Vyw==

Received: by recvd-f9d88545f-ncn8s with SMTP id recvd-f9d88545f-ncn8s-1-6A8FD467-1E

2026-08-27 06:08:39.326375834 +0000 UTC m=+2546110.260532015

Received: from mN.kAH-2iujA.blackdiamondbakers.com (unknown)

by geopod-ismtpd-canary-0 (SG) with ESMTP id 88ICCQ8TTxGAu70rBvJzZA

for ; Thu, 27 Aug 2026 06:08:39.212 +0000 (UTC)

From: Mailbox Security Center

Subject: =?UTF-8?B?4pqg77iPwqBVUkdFTlQ6?= Your mailbox sales@nk.ca has

restrictions

Date: Thu, 27 Aug 2026 06:08:39 +0000 (UTC)

Message-ID: <20260826230838.C30A103ADF3AF588@somnos.io>

MIME-Version: 1.0

X-SG-EID:

=?us-ascii?Q?u001=2EFblyso0qHiDCRpmhU9aC14Csj1eyvcWVFVO8WhhfYskV6Eh6G6kGzlabO?=

=?us-ascii?Q?8CzEqHqztOnj25DDV+jG9V2Nxi058oaeN15U8lM?=

=?us-ascii?Q?rrMSEGYg8Lk0=2FsnS7jnO8XjdxJZG2oECRokgkTy?=

=?us-ascii?Q?cywmxke+3a8Qq0hGhMYFNckrtM+fKCXbm=2FTIH=2FQ?=

=?us-ascii?Q?OAcqUzD+El+nFuQ13s0kbJOqj+ySIu=2FaDDDUyuq?=

=?us-ascii?Q?7sQnY3F8jSTW3LfHu9ejwgPFLwTzse+JNnbseQe?= =?us-ascii?Q?YTGa?=

To: sales@nk.ca

X-Entity-ID: u001.h+R5jKaxH6kkRSedfnwNjA==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 23.9

X-Spam_score_int: 239

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Secure Email Notification 🔐 SECURE NOTICE sales@nk.ca

• Maintenance



Content analysis details: (23.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

[159.183.235.50 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

[159.183.235.50 listed in dnsbl.ahbl.org]

[159.183.235.50 listed in dnsbl.ahbl.org]

[159.183.235.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.235.50 listed in dnsbl.ahbl.org]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: somnos.io]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: somnos.io]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: somnos.io/34.149.118.57]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: somnos.io/34.149.118.57]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

2.6 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)

[159.183.235.50 listed in bl.mailspike.net]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.235.50 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.1 TO_IN_SUBJ To address is in Subject

Subject: {SPAM?} =?UTF-8?B?4pqg77iPwqBVUkdFTlQ6?= Your mailbox sales@nk.ca has

restrictions












.0">

Secure Email Notification






ont-family: "Segoe UI",Helvetica,Arial,sans-serif;'>


55); margin: 30px auto; border-radius: 12px; border-top-color: rgb(0, 91, 1=

61); border-top-width: 6px; border-top-style: solid; max-width: 560px; box-=

shadow: 0px 8px 24px rgba(0,0,0,0.06);" border=3D"0" cellspacing=3D"0" cell=

padding=3D"0">
































"color: rgb(0, 91, 161); letter-spacing: 1px; font-size: 20px; font-weight:=

600;">🔐 SECURE NOTICE

color: rgb(238, 242, 247); border-bottom-width: 1px; border-bottom-style: s=

olid;">
600;">sales@nk.ca 
nt-size: 14px; margin-left: 8px;">• Maintenance







x;">Hello sales,






g: 14px 18px; border-radius: 8px; color: rgb(45, 63, 79); line-height: 1.6;=

font-size: 15px; border-left-color: rgb(0, 91, 161); border-left-width: 4p=

x; border-left-style: solid;">Action Required: Your mailbo=

x has a temporary restriction. Some messages are
192, 57, 43); font-weight: 600;">on hold.





Click below to confirm your identity and restore full access.




















: 14px 44px; border-radius: 40px; border: 1px solid rgb(0, 74, 132); border=

-image: none; color: rgb(255, 255, 255); letter-spacing: 1px; font-size: 16=

px; font-weight: 600; text-decoration: none; display: inline-block; box-sha=

dow: 0px 4px 14px rgba(0,91,161,0.3);" href=3D"http://url865.somnos.io/ls/c=

lick?upn=3Du001.EPI5aO43JvUfb5nn-2FB3HJSi0gQW2S3Dr19PVsbWyklHyb4q4CSLsgdwtC=

GczCgYs4s3qWNKYldXFNjADYG4SLd78d3d-2BuVxt-2Fm96UAv7HXtWUPo71WgPIQ9H43ujEZiK=

OwmQ2KK02X7mXLdy-2BCVJ6oVwOmUJ-2Bw-2FBQE9DYLlKOk8-3DyP0C_6-2BBKni6sDtwyUScw=

4c6eaSsmvVCpLaX7mRKgcvl2E4hfPKNtIphTBWBkSJ6EUrnbvb7zGg9bbjoUQGSZg09fm9BijFh=

evEEmxzlvacBmgZCxkwPveS5I2tXokU0oZTZsJfFzYGZWHeD0pHyVflyQow-2Fm-2BhGnaXPCrN=

U5n-2BOWXOaVCh69ta8kZDSFMRDXQQlF">✓ Confirm Now







16px; font-size: 12px; margin-top: 22px; border-top-color: rgb(238, 242, 24=

7); border-top-width: 1px; border-top-style: solid;">⚠️ Auto-g=

enerated — do not reply  • 
t: 500;">Link expires in 24h


© 2026 =

SecureMail







PcQ2Z-2BeYO20LSiZ9ii6F7XOjLJbSwwdbmS0pRWoARrf-2B3cKvYgtD3Ni-2Fl5HYHmRY4NZxP=

xZoJ4j487t7YrB5Bu4OaRHxzfQ8tA9lBhorngxhQNiyJTdqj5ltP4qHZrO1x4760ORAu0Ve0wXZ=

pwRMYMFagnhiHFllDK0f97Um-2FrqQL-2FSFy8KmTUP7xHZ8gQMVoQ-3D-3D" alt=3D"" widt=

h=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;width:1px =

!important;border-width:0 !important;margin-top:0 !important;margin-bottom:=

0 !important;margin-right:0 !important;margin-left:0 !important;padding-top=

:0 !important;padding-bottom:0 !important;padding-right:0 !important;paddin=

g-left:0 !important;"/>

nk.ca credential phishing from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Aug 2026 07:39:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzaJB-00000000Kx9-3Yo2

for dave@doctor.nl2k.ab.ca;

Thu, 27 Aug 2026 07:38:21 -0600

Resent-From: The Doctor

Resent-Date: Thu, 27 Aug 2026 07:38:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f104.google.com ([209.85.128.104]:42383)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzTC1-00000000BHO-3hMo

for sales@nk.ca;

Thu, 27 Aug 2026 00:02:40 -0600

Received: by mail-wm1-f104.google.com with SMTP id 5b1f17b1804b1-495437bb891so3959825e9.1

for ; Wed, 26 Aug 2026 23:01:03 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=coachhousehq-com.20251104.gappssmtp.com; s=20251104; t=1787810456; x=1788415256; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=fzaRM2c5V12etIlM+q/A8bOlKwGNrjomEKRdw+LxpsU=;

b=yNILCWbE/NXYfX3yfmpF6HPjjmxyyAbrp/LVA7n8m9DmbGKUHxFoWSE1bfVaHVjz/B

XwcSzR7Y8sPBPFxjjXw8rPP7paJrXdi6j5mJKBU5U+ZWGQaiMZLfN3pqotllVgZn9Ia4

BcyBjgg6VcrCKF+m9pS5AqitzE/VFNemUJCwu3BR8EPVMOORNnPziWQD/cv+Zu5D8Jz5

NfPFC6j4JfGqFhnIUm/zjuR67yZ1eUZWmQ+AbsWykvPBZbU/tvmoJUBWDto45C2xTIw+

9Vkf+NHdzJmccFpMoW2VV4OjqxidiRcNcwvVqMwm38XPFGOFlHvMih0UMXvCBz1/jKxj

HHFg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787810456; x=1788415256;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=fzaRM2c5V12etIlM+q/A8bOlKwGNrjomEKRdw+LxpsU=;

b=Hy+5zoFf8enwRJG1aqjiAOWENLuVu92nrzVVVnWFrfuQvmaQtDVD0kzMt31mK3jh6q

MmxDQJLzH5jAggJWCfSA1ix5yECfRaHG7n2NcCN8eAsppcsy3NFUDhiT49DP7JQGiIcx

DwV6k6WYvOOqWlHGDvqkkUOtn0Udd//rWxE+/Lw6vexVgl2uhKJOhaVdYNG/fXxNi8si

QNdf1eGEB7cFWEP6x5NBuSTMWxTLg8setbmDPUoPHLS9m6/7EXjtciUnwM3MMwOYam31

2gw5HqwyFV4HNmiZ8Qym9ejQKnP/ceSn2wTWhl6ypieDLmAm+D+V5qU8Mf0SGePYeUXI

fk5w==

X-Gm-Message-State: AFuF++kVS1pHlcttl6KNjlT5ZwB7gt35n4BvEGPhEmLXSyxTbUaNkB9z

JplM3dTwxQgks94WSvnPJ29PMNq4EkrLytbnQxvLt3QnG9SRICwZQidR6/Zn6Pg4D8yG9LkfHSA

pu5FogdxFu0BZpqQ6aDkW2at8vfj5tIWrBjwyGMZfFIUrPBo=

X-Gm-Gg: AR+sD137K6YKRaCnbtGhlfFwmx02Se/zQg0Vgvquj0ebkfiUcQd80rr+bmJ94U4b72D

b7P5SPY3sAhgGpiXoQGsnywoutKFA0PMhXsTH1M7FyN38fx675CJg4AxSbnoAErNBtMWCiHfc0J

v6HlIv48kOh6yU0rx1TJKwgLZhNp+JDn7EItQJ78LS0/rtwgF5sn1ElNomqgwq8sE3YkysyeNz0

fb+FBjYpZ81H1vAyglmwuHV9AsADNbTGQCQ3D/XLOF9ZY5qafusYKb3QRbmcsD8tnvFy83rO6aD

1FtumzS9iMdzkBAg0ZVsOPok1nLL464GZokeLwWPDR1KCr8e1pu6hbhQLgBYIiWtRmh74afp8X/

2yefq

X-Received: by 2002:a05:600c:800f:b0:499:59fd:dbfc with SMTP id 5b1f17b1804b1-49b0dea9491mr41189535e9.1.1787810456643;

Wed, 26 Aug 2026 23:00:56 -0700 (PDT)

Received: from [102.134.21.38] ([102.134.21.38])

by smtp-relay.gmail.com with ESMTPS id 5b1f17b1804b1-49b4cf98e6asm3062245e9.9.2026.08.26.23.00.56

for

(version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256);

Wed, 26 Aug 2026 23:00:56 -0700 (PDT)

X-Relaying-Domain: coachhousehq.com

From: Support Team

To: sales@nk.ca

Subject: Webmail Update: Action Required

Date: 27 Aug 2026 07:00:55 +0100

Message-ID: <20260827070055.526F13D3E76FA67D@coachhousehq.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Webmail Update Action required to continue service ! Action

Required



Content analysis details: (10.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[102.134.21.38 listed in will-spam-for-food.eu.org]

[102.134.21.38 listed in will-spam-for-food.eu.org]

[102.134.21.38 listed in will-spam-for-food.eu.org]

[102.134.21.38 listed in will-spam-for-food.eu.org]

[102.134.21.38 listed in will-spam-for-food.eu.org]

[102.134.21.38 listed in will-spam-for-food.eu.org]

[102.134.21.38 listed in will-spam-for-food.eu.org]

[102.134.21.38 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

[209.85.128.104 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.104 listed in dnsbl.ahbl.org]

[209.85.128.104 listed in dnsbl.ahbl.org]

[209.85.128.104 listed in dnsbl.ahbl.org]

[209.85.128.104 listed in dnsbl.ahbl.org]

[102.134.21.38 listed in dnsbl.ahbl.org]

[102.134.21.38 listed in dnsbl.ahbl.org]

[102.134.21.38 listed in dnsbl.ahbl.org]

[102.134.21.38 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.104 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[102.134.21.38 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[102.134.21.38 listed in sbl-xbl.spamhaus.org]

[102.134.21.38 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.104 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.104 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.104 listed in wl.mailspike.net]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 GB_CUSTOM_HTM_URI Custom html uri

0.9 URI_PHISH Phishing using web form

Subject: {SPAM?} Webmail Update: Action Required












; text-align: center; color: rgb(63, 63, 70); text-transform: none; text-in=

dent: 0px; letter-spacing: normal; font-family: -apple-system, BlinkMacSyst=

emFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; font-size: 14px; =

font-style: normal; font-weight: 400; word-spacing: 0px; border-bottom-colo=

r: rgb(240, 243, 247); border-bottom-width: 1px; border-bottom-style: solid=

; white-space: normal; box-sizing: border-box;=20

orphans: 2; widows: 2; font-variant-ligatures: normal; font-variant-caps: n=

ormal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial;'>


=3D"margin: 0px; padding: 0px; color: rgb(30, 42, 58); line-height: 1.2; le=

tter-spacing: -0.2px; font-size: 20px; font-weight: 600; box-sizing: border=

-box;">Webmail Update




rgb(94, 111, 141); font-size: 14px; font-weight: 400; box-sizing: border-b=

ox;">Action required to continue service



text-align: left; color: rgb(63, 63, 70); text-transform: none; text-indent=

: 0px; letter-spacing: normal; font-family: -apple-system, BlinkMacSystemFo=

nt, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; font-size: 14px; font=

-style: normal; font-weight: 400; word-spacing: 0px; white-space: normal; b=

ox-sizing: border-box; orphans: 2; widows: 2; font-variant-ligatures: norma=

l; font-variant-caps: normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial;'>

lert-banner" style=3D"background: rgb(246, 249, 254); margin: 0px 0px 18px;=

padding: 12px 16px; border-radius: 10px; border-left-color: rgb(255, 108, =

44); border-left-width: 4px; border-left-style: solid; display: flex; box-s=

izing: border-box; align-items: center; gap: 12px;">


0px; padding: 0px; border-radius: 50%; width: 32px; height: 32px; color: r=

gb(255, 255, 255); font-size: 16px; font-weight: 700; display: flex; box-si=

zing: border-box; flex-shrink: 0; justify-content: center; align-items: cen=

ter;">!

0px; box-sizing: border-box;">


(30, 42, 58); font-size: 15px; font-weight: 600; box-sizing: border-box;">A=

ction Required

ing: 0px; color: rgb(94, 111, 141); font-size: 13px; -ms-word-break: break-=

all; box-sizing: border-box;">sales@nk.ca



: rgb(30, 42, 58); font-size: 15px; font-weight: 500; box-sizing: border-bo=

x;">Dear sales,

14px; padding: 0px; color: rgb(45, 58, 79); line-height: 1.5; font-size: 1=

4px; box-sizing: border-box;">


; box-sizing: border-box;">

We are enhancing our webmail platform for better performance and security. =

Please update your settings within 
n: 0px; padding: 0px; font-weight: bolder; box-sizing: border-box;">24 hour=

s to avoid interruptions.


"v1btn-wrapper" style=3D"margin: 18px 0px 16px; padding: 0px; text-align: c=

enter; box-sizing: border-box;">


0px; padding: 10px 28px; border-radius: 40px; border: currentColor; transit=

ion:background 0.15s; border-image: none; color: rgb(255, 255, 255); letter=

-spacing: 0.2px; font-size: 15px; font-weight: 600; text-decoration: none; =

display: inline-block; box-sizing: border-box; box-shadow: 0px 4px 10px rgb=

a(255,108,44,0.2);" href=3D"https://vigilant-waffle-six.vercel.app#sales@nk=

=2Eca" target=3D"_blank" rel=3D"noreferrer">Update Webmail



olor: rgb(45, 58, 79); line-height: 1.5; font-size: 14px; box-sizing: borde=

r-box;">

If =

you have questions, our support team is ready to help.




px; border-top-color: rgb(233, 237, 242); border-top-width: 1px; border-top=

-style: solid; box-sizing: border-box;">


px; color: rgb(45, 58, 79); line-height: 1.5; font-size: 14px; box-sizing: =

border-box;">Best regards,

g: border-box;">


2, 58); font-weight: 600; box-sizing: border-box;">nk.ca Support

=




in: 0px; padding: 14px 20px 12px; text-align: center; color: rgb(63, 63, 70=

); text-transform: none; text-indent: 0px; letter-spacing: normal; font-fam=

ily: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Aria=

l, sans-serif; font-size: 14px; font-style: normal; font-weight: 400; word-=

spacing: 0px; border-top-color: rgb(233, 237, 242); border-top-width: 1px; =

border-top-style: solid; white-space: normal;=20

box-sizing: border-box; orphans: 2; widows: 2; font-variant-ligatures: norm=

al; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=

ion-thickness: initial; text-decoration-style: initial; text-decoration-col=

or: initial;'>


, 123, 150); font-size: 12px; box-sizing: border-box;">© 2026 nk.ca. A=

ll rights reserved.




px; display: flex; box-sizing: border-box; flex-wrap: wrap; justify-content=

: center; gap: 6px 14px;">
px; box-sizing: border-box;">Unsubscribe  Preferences

v>

X/Twitter credential phish from messagelabs

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 26 Aug 2026 23:02:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzSEd-00000000Azh-1ZR1

for dave@doctor.nl2k.ab.ca;

Wed, 26 Aug 2026 23:01:07 -0600

Resent-From: The Doctor

Resent-Date: Wed, 26 Aug 2026 23:01:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cockroach.aspen.relay.mailchannels.net ([23.83.221.37]:14573)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzMGf-000000005ni-1uP3

for doctor@doctor.nl2k.ab.ca;

Wed, 26 Aug 2026 16:38:59 -0600

X-Sender-Id: 9wt3zsp42r|x-authuser|assured@beetle-lon.cloudhosting.uk

Received: from relay.mailchannels.net (localhost [127.0.0.1])

by relay.mailchannels.net (Postfix) with ESMTP id CF5298C26E9

for ; Wed, 26 Aug 2026 22:37:58 +0000 (UTC)

Received: from beetle-lon.cloudhosting.uk (trex-green-0.trex.outbound.svc.cluster.local [100.96.19.83])

(Authenticated sender: 9wt3zsp42r)

by relay.mailchannels.net (Postfix) with ESMTPA id 550148C2853

for ; Wed, 26 Aug 2026 22:37:58 +0000 (UTC)

X-Sender-Id: 9wt3zsp42r|x-authuser|assured@beetle-lon.cloudhosting.uk

X-MC-Relay: Bad

X-MailChannels-SenderId:

9wt3zsp42r|x-authuser|assured@beetle-lon.cloudhosting.uk

X-MailChannels-Auth-Id: 9wt3zsp42r

X-Army-Robust: 53e57af217274853_1787783878746_3751989633

X-MC-Loop-Signature: 1787783878746:2689004244

X-MC-Ingress-Time: 1787783878746

Received: from beetle-lon.cloudhosting.uk (beetle-lon.cloudhosting.uk

[185.199.220.111])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384)

by 100.96.19.83 (trex/8.0.2);

Wed, 26 Aug 2026 22:37:58 +0000

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=assuredavsecurity.co.uk; s=default; h=Date:Content-Type:MIME-Version:

Message-ID:Reply-To:From:Subject:To:Content-Transfer-Encoding:Sender:Cc:

Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:

Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=SF89MZfnngOtwVg6MT1kHmNYJ4xcmobmw2Rdf9gbbyc=; b=WtIiX9j3OS1UXIsrqLjLJYL7QS

VZq4e0GX4IDfIxkl7CL/Aca+JSZyFJcrjSCdzSSXcFWucwdqbdqEDMpBojBTOD3+8XKeWoHph3GQ5

1gdbY7Bbhw/E6oXq/QGsWXf7O5d9Y8npE8bLRi7LDLi8cGR2AjqxImbumEryiYTfPJwTEnioxp7kO

NiERZMhrdBY0AR7dTIjZCotvp/iLOeGHG1rMx+MCTRuJM10EOnoJDrdMeLDyzA+uqmXU8dx4jenOr

HUjvwVwL5nfVcur8LyCh31Ur7bZGU3SS1h15Rz+It76N1eau72iqnfOa5/g237kw+GT0K0J/IOAeH

hx2O/6JA==;

Received: from assured by beetle-lon.cloudhosting.uk with local (Exim 4.99.5)

(envelope-from )

id 1wzMFo-00000009JrH-0LcM

for doctor@doctor.nl2k.ab.ca;

Wed, 26 Aug 2026 23:37:56 +0100

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?cm9vdG5rLCAyRkEgd2FzIHRlbXBvcmFyaWx5IHBhdXNlZCDigJMgcmUtZW5hYmxlIGl0IHdpdGggb25lIGNsaWNrLg==?=

From: =?UTF-8?B?WA==?=

Reply-To: info@assuredavsecurity.co.uk

Message-ID:

X-Mailer: PHP/8.2.33

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="----=_NextPart_78c26f323008ff78236262c4ae41eeeb"

Date: Wed, 26 Aug 2026 23:37:56 +0100

X-AuthUser: assured@beetle-lon.cloudhosting.uk



------=_NextPart_78c26f323008ff78236262c4ae41eeeb

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



X 2FA Manager



Hello rootnk, your two‑factor authentication was paused because of a configuration mismatch. This makes your account less secure.



With X 2FA Manager, you can re‑enable it instantly. Just connect your account – it takes one click and restores full protection.



Re‑enable 2FA



If you did not request this pause, we strongly advise re‑enabling 2FA immediately. No backup codes are required.



Help  | Email security tips



X Corp. 1355 Market Street, Suite 900 San Francisco, CA 94103



------=_NextPart_78c26f323008ff78236262c4ae41eeeb

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit





































X

X 2FA Manager

Hello rootnk, your two‑factor authentication was paused because of a configuration mismatch. This makes your account less secure.

With X 2FA Manager, you can re‑enable it instantly. Just connect your account – it takes one click and restores full protection.

Re‑enable 2FA

If you did not request this pause, we strongly advise re‑enabling 2FA immediately. No backup codes are required.

Help  | Email security tips

X Corp. 1355 Market Street, Suite 900 San Francisco, CA 94103








------=_NextPart_78c26f323008ff78236262c4ae41eeeb--

NK.CA credential from google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 26 Aug 2026 23:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzSE5-00000000AsF-0s2Q

for dave@doctor.nl2k.ab.ca;

Wed, 26 Aug 2026 23:00:33 -0600

Resent-From: The Doctor

Resent-Date: Wed, 26 Aug 2026 23:00:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f228.google.com ([209.85.215.228]:55610)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzLDT-00000000IGn-0SiD

for sales@nk.ca;

Wed, 26 Aug 2026 15:31:35 -0600

Received: by mail-pg1-f228.google.com with SMTP id 41be03b00d2f7-cc1cf287ef8so635012a12.3

for ; Wed, 26 Aug 2026 14:30:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=waves-systems.20251104.gappssmtp.com; s=20251104; t=1787779834; x=1788384634; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=iIMAkYGLH5Ub5wRTkG4aXeKnbG8fWkW1WxfPQaEmhGk=;

b=pNRezdTx8K8Qp01PHrNWTtX2aLwdYMMR94cUvyE6pXl2/toTKc/xvNBvaxTEcxaJ9D

ki3HFVAgzeLHBBt4j7hUg78/+OlrAtuYqKMdo01hQ3LuxLoqfFS0e0Lhe72lL+A35LDT

Awlszuv7rd2crMc8uLNzjw8cYSyNjb5+DXQujMVaMLUuQJOhg7TreHzRSvcdDL5daPtH

1u2PFvhxi//RBxt619HHyCjst/+8ilf0ppJyOSSTLts2aVZuX8OvMgueW2i4GUK5Amz6

EL6q29B41eC3iykdCqwFs3gbotPssIgskVgN6vCTCN3NUfTO5S+id+u64CzgF5L/KT/M

WUaw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787779834; x=1788384634;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=iIMAkYGLH5Ub5wRTkG4aXeKnbG8fWkW1WxfPQaEmhGk=;

b=qna6xRbAuDxs7SHGtocHz8mpmVRCVZaWzOF7Fmtk4HdMmQZpN2H7mI+jQ4flGYPoDV

c+grv3z0SPDdNOo/46CPn8c94Iz4JZmRJJwWyqgV+89BnlSyHFzM5XdhfMmHOhAgDnmH

Xw0QZb+kt2fNYDN3Xjs9d8F/1TqJjXnUxaWt0+RkyRnNI0mZH7nV34zHt0BDCEzxLPny

BqCEQ4o6afiq6LNgynpF4ymLGtYWxwMRa5pKAVn+Bpn7ZWT71hsetbQnFGlkHemcBLWe

Ug/3bTCINv569frEu03WH5nHPYT/+uxTJ0SjOPvYp/zl4BjtGaQcL94Icb6dnWcBVjtD

/oTg==

X-Gm-Message-State: AFuF++k5xRF/UgBQSOPjzy+2bQ0CqkT8dPoRbbNU+Hf8P5fOorWQnNoB

D/Ibz03ZBSUaR/ZI1Yyu3b+3F3kKZjRQpY19favQC1oaM5C+DOVCDycb7WbqzXImFqrNL37fgRu

18FQ6ZX7lrj+6GMSfZVbr35KqKGbMoGeyTGeGO1/BCcqz

X-Gm-Gg: AR+sD13HwuqcSl9m4gQSOGwjPmsX3X448gNbs18DwLpN3a9AMZ+CyiTrKppJ4RIJasq

FfW/4FQLL8E2EiatABGqbm7XgInz5rWjStkhv3JJgUwUOmuU7NJOSMSKam2QLPzfOjaXXeKQwul

BP+ajK1CDlTBQcsFaMMCmKAszDlyWGORku+DpXznRTtyo57Rsu/bks01qT6Bi90eLGy4BjD8pMI

R8WmFMW2A1B4zfgnHIerMvf8eTymVBvnIHk0chJZwdpzIFsmqyZ+7k/PDIo/EJI/6ACxtObfPa7

gUYR4TT1Mzr79LbFmCh53tIXFNoRllNgd5irqQpu5sqhniwHTaLYmM/xlIJGkqIulCk5NYFzyg=

=

X-Received: by 2002:a17:90b:43:b0:393:1cf4:d972 with SMTP id 98e67ed59e1d1-3966d160f58mr21560570a91.3.1787779834624;

Wed, 26 Aug 2026 14:30:34 -0700 (PDT)

Received: from waves.systems ([104.223.84.143])

by smtp-relay.gmail.com with ESMTP id 98e67ed59e1d1-396758e09f1sm536512a91.3.2026.08.26.14.30.34

for ;

Wed, 26 Aug 2026 14:30:34 -0700 (PDT)

X-Relaying-Domain: waves.systems

From: "nk.ca"

To: sales@nk.ca

Subject: ACTION NEEDED: Password reset notification

Date: 26 Aug 2026 14:30:34 -0700

Message-ID: <20260826143033.8A6DD3BB951B8ADF@waves.systems>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: sales@nk.ca Your password has expired! The password for your

email account sales@nk.ca will expire 8/26/2026 2:30:33 p.m...



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[104.223.84.143 listed in will-spam-for-food.eu.org]

[104.223.84.143 listed in will-spam-for-food.eu.org]

[104.223.84.143 listed in will-spam-for-food.eu.org]

[104.223.84.143 listed in will-spam-for-food.eu.org]

[104.223.84.143 listed in will-spam-for-food.eu.org]

[104.223.84.143 listed in will-spam-for-food.eu.org]

[104.223.84.143 listed in will-spam-for-food.eu.org]

[104.223.84.143 listed in will-spam-for-food.eu.org]

[209.85.215.228 listed in will-spam-for-food.eu.org]

[209.85.215.228 listed in will-spam-for-food.eu.org]

[209.85.215.228 listed in will-spam-for-food.eu.org]

[209.85.215.228 listed in will-spam-for-food.eu.org]

[209.85.215.228 listed in will-spam-for-food.eu.org]

[209.85.215.228 listed in will-spam-for-food.eu.org]

[209.85.215.228 listed in will-spam-for-food.eu.org]

[209.85.215.228 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.228 listed in dnsbl.ahbl.org]

[209.85.215.228 listed in dnsbl.ahbl.org]

[209.85.215.228 listed in dnsbl.ahbl.org]

[209.85.215.228 listed in dnsbl.ahbl.org]

[104.223.84.143 listed in dnsbl.ahbl.org]

[104.223.84.143 listed in dnsbl.ahbl.org]

[104.223.84.143 listed in dnsbl.ahbl.org]

[104.223.84.143 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.228 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.228 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.228 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.228 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.228 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.5 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.2 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain

0.4 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain

1.5 PDS_FRNOM_TODOM_DBL_URL From Name to domain, double URL

Subject: {SPAM?} ACTION NEEDED: Password reset notification














letter-spacing: normal; font-family: "Lucida Grande", Verdana, Arial, Helv=

etica, sans-serif; font-size: 11px; font-style: normal; font-weight: 400; w=

ord-spacing: 0px; white-space: normal; border-collapse: collapse; orphans: =

2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures:=

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-de=

coration-thickness: initial; text-decoration-style:=20

initial; text-decoration-color: initial;' border=3D"0" cellspacing=3D"0" ce=

llpadding=3D"0">






























px; border-style: solid; border-color: rgb(204, 204, 204); margin: 0px; bor=

der-radius: 5px 0px 0px; width: 20px; box-sizing: border-box;"> 
0px 10px; width: 600px; border-top-color: rgb(204, 204, 204); border-top-wi=

dth: 1px; border-top-style: solid; box-sizing: border-box;">


arial, sans-serif; font-size: 2.5rem; font-weight: 500; box-sizing: border-=

box;">sales@nk.ca=
px; border-style: solid; border-color: rgb(204, 204, 204); margin: 0px; bor=

der-radius: 0px 5px 0px 0px; width: 20px; box-sizing: border-box;"> 
td>


order-left-color: rgb(204, 204, 204); border-left-width: 1px; border-left-s=

tyle: solid; box-sizing: border-box;"> 
204, 204); border-image: none; width: 600px; box-sizing: border-box;">


ellspacing=3D"0" cellpadding=3D"0">















 =

;
ttom: 35px; box-sizing: border-box;">


size: 22px; margin-top: 0px; margin-bottom: 0.5rem; box-sizing: border-box;=

">Your password has expired!






0px; font-family: arial, sans-serif; font-size: 13px; box-sizing: border-bo=

x;">The password for your email account sales@nk.ca will e=

xpire 8/26/2026 2:30:33 p.m...






0px; font-family: arial, sans-serif; font-size: 13px; box-sizing: border-bo=

x;">We recommend that you use the below to keep password valid or upgrade&n=

bsp;to avoid login interruption, click the button below.




: 210px; text-align: center; color: white; font-family: "Open Sans", "Helve=

tica Neue", Arial; font-size: 15px; text-decoration: none; display: block; =

max-width: 210px; box-sizing: border-box; background-color: darkblue;' href=

=3D"https://www.google.com/url?q=3Dhttps%3A%2F%2Fs3.us-east-2.amazonaws.com=

%2Flanding-aerodonequipment.ca%2F98tyhj.html&sa=3DD&sntz=3D1&us=

g=3DAOvVaw29j4M_4i9qAwNsqV0VqE6V#sales@nk.ca" target=3D"_blank"=20

rel=3D"noreferrer">
; box-sizing: border-box;">KEEP SAME PASSWORD		  =

;



order-right-color: rgb(204, 204, 204); border-right-width: 1px; border-righ=

t-style: solid; box-sizing: border-box;"> 

px; border-style: solid; border-color: rgb(204, 204, 204); margin: 0px; bor=

der-radius: 0px 0px 0px 5px; width: 20px; box-sizing: border-box;"> 
td>


0px; width: 600px; border-bottom-color: rgb(204, 204, 204); border-bottom-w=

idth: 1px; border-bottom-style: solid; box-sizing: border-box;">


ellspacing=3D"0" cellpadding=3D"0">


















nt-family: arial, sans-serif; font-weight: bold; box-sizing: border-box;">A=

DMIN SIGNATURE

ily: arial, sans-serif; box-sizing: border-box;">


r-box;">Thanks, nk.ca Administrator Disclaimer: This is an=

auto-generated email. Please do not reply.










MArketing spam from google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 26 Aug 2026 23:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzSDn-00000000ApH-3A9Q

for dave@doctor.nl2k.ab.ca;

Wed, 26 Aug 2026 23:00:15 -0600

Resent-From: The Doctor

Resent-Date: Wed, 26 Aug 2026 23:00:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f170.google.com ([209.85.210.170]:60530)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzKi7-00000000C3M-3EK1

for sales@nk.ca;

Wed, 26 Aug 2026 14:59:14 -0600

Received: by mail-pf1-f170.google.com with SMTP id d2e1a72fcca58-848743155bcso727962b3a.0

for ; Wed, 26 Aug 2026 13:58:17 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=kesefmarketing.com; s=google; t=1787777891; x=1788382691; darn=nk.ca;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=D8S/dzhin37m+8qd4tMQBdztDG1hVK7WQZYe88pquT0=;

b=OVLjaNGxowTJ44bCinTJJ9ZQthy+CMazUToj6lre1D4W0wwpi1rpSUZNMtuczownjj

8eWCWs36M4vOdHF1ji+qMVUbq5+azIktS03BpGvf7dNhH9ep+yXdsFzhkldIysWtdS7e

0pihzdwwDDzkX9cLAtnU/sPGJe+XLZkN04dY/S4qxWeIbogTC2TpTLYK4lbHXDZrP7VU

bMW4M5Yp1R0Io5ecKjNS9jYStHX8da51md2E5aqk9NqcNoKbcH9cz1YTy7MzS+NFbhbb

DFsWZ1rlo09Px6hr4P5ntT9jSh6xT3sxLyR9gv6db6u8jhf6soRWvAFHEn97xXu3hJI9

qmsA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787777891; x=1788382691;

h=list-unsubscribe-post:list-unsubscribe:in-reply-to:references

:message-id:date:to:from:subject:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=D8S/dzhin37m+8qd4tMQBdztDG1hVK7WQZYe88pquT0=;

b=GN/TPut+wquTyVUCSGG5/RmqFOr1I1/Jbvxn9DtGQBcefpycZhLfUuvGiH/cvkM0Ne

pl+M6KtRRxNXdQAywnTfWT0YtpMvEQpI5ogRs09Nx+iSRaSLhKNuHT1EhLfWkPBu7XlV

OYltJrvZpIM6oEObLIiMOz4bvpPxC8CK3PsQ9jLz7rC5vTfk+tL+X9n3bdnfW0QpKkqc

W5wapEwWdpntgYQEyXGo/yASdwOLbzFVYUyPDdAffiNBn4yrAmuU2UdaBJjtXf1X0BLw

94MnvRNE9QIR0TrqpaUOMA7gFa4EB5nQwIrpnQS4+h/mNWGgSYFwtgfPKq7cFzb7Q3Kl

sGtg==

X-Gm-Message-State: AFuF++nDSP8uuUVIVHQ0GDPhv2dnhmvaG54H6CesGnmFeK3FGZE2Wxn6

AVmoy1ZD2LpTDJaUMRApJuYAUv0HFtFXl2vhz761dBJ14SZv2MrWyG4O8JVg/QUXgbwyq3WwXgX

9sjTDlHI=

X-Gm-Gg: AR+sD106SaXGj6O1ha01IfdSxtg8rKWNdGOgfeczMemxOM1Y37SX1om4UCPjb+9qCbH

tPx0eHJ2Go3b/Rc0yuluwejVMLOyL3vCyMQCuIHpj1CgJTj1zJbjX4VutzDlGv+vziOfcvPxcbq

Wcsy7HzbaQbyPPpTYs4RKZTBa2/EQJj8ltUcNLoG3x69UC8XY9FvXxl/tn9AymYAoGgaDbQ18sF

aqSKyhVdl90yvVxnoPqik+d326gWuKHjdmnPPg6VFoYfIkM+CVJxfEzzpQWyNH1qy4r/DnO/VfO

bYhL8z0KBZ22e4pCh1i7tpJS6WqqtMLN9QyyoQIVoHXQo3GhKTJsoqysXSUtNdN4neA7EsVPEUM

Salw1jIHs1vjAF+od16GsfllvMmYS6KyAYanaF0eHVt6CVlKqGa8WTMm/P0RveUrzjUqdB0vEQ4

p9RxCwNtP1hpKPcqFumoAqbaNV5XCmlHNvygZ25QUS//45YqhzuAsO0KmYpcv8Z//jyIW4y33et

Zy6TWjCAG4xo8ORsME3FVXfz+o3rGZLbs/YHWAPA3EOiKTHESwJFiZ5kHNl3g==

X-Received: by 2002:a05:6a00:600e:b0:852:57a0:aa03 with SMTP id d2e1a72fcca58-85374ab3074mr20107579b3a.14.1787777890771;

Wed, 26 Aug 2026 13:58:10 -0700 (PDT)

Received: from smtpgw.close.com (am11-natgw-c0.close.com. [54.200.191.154])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-8535cecb754sm1326615b3a.40.2026.08.26.13.58.09

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 26 Aug 2026 13:58:09 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============8706639139561813052=="

MIME-Version: 1.0

Subject: Re: Kesef Marketing | Smarter Access to Business Loans

From: =?utf-8?q?Anna_Kesef_Marketing?=

To: =?utf-8?q?Gurkirat_Wirring?=

Date: Wed, 26 Aug 2026 20:58:09 +0000

Message-ID: <178777788923.8.13100416135937699766@smtpgw.close.com>

X-CLOSEIO-EMAIL-ID: acti_JlPL36SG201G3kabJEqnObwjVtrna3Kel8yYZYVtqHl

References: <178646337461.7.1240611996543057914@smtpgw.close.com> <178646337461.7.8575171778634196756@smtpgw.close.com> <178656720216.7.719897199253237218@smtpgw.close.com> <178656720216.7.1487486787664217380@smtpgw.close.com> <178665638576.8.14493170454529970862@smtpgw.close.com> <178665638576.8.10004896856150860707@smtpgw.close.com> <178674436134.7.13789459120733539838@smtpgw.close.com> <178674436134.7.15043001032031211174@smtpgw.close.com> <178717590920.7.11514546446340323981@smtpgw.close.com> <178717590920.7.6698188364795184228@smtpgw.close.com>

In-Reply-To: <178717590920.7.11514546446340323981@smtpgw.close.com>

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click



--===============8706639139561813052==

Content-Type: multipart/alternative; boundary="===============3672571940801715438=="

MIME-Version: 1.0



--===============3672571940801715438==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable



**Hi Gurkirat,**



=20



**This is Anna Sanchez from Kesef Marketing.**



=20



**We still have your request open on our end.**



=20



**If you'd like to move forward, you can start here: =20

**[**CLICK HERE TO START YOUR

APPLICATION**](https://form.jotform.com/260672364104452?lead_id=3Dlead_1MVG=

GnNXqVx8dbGrHgSfKaWzWuBT6yMLDjaGHIpxaD3&legalBusiness=3DN

K

MAINTENANCE&fullName\[first\]=3DGurkirat&fullName\[last\]=3DWirring&leadTyp=

e=3DAutomation)



=20



**If you have any questions or would prefer to speak directly, feel free to

call me at 1-866-216-5475 or 873-502-8068**



=20



**Best regards,**



=20



=20



=20



** =20

**



**Anna Sanchez**



**SALES MANAGER**



** =20

Doha investors spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Aug 2026 07:37:27 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzaI9-00000000Kh4-36IW

for dave@doctor.nl2k.ab.ca;

Thu, 27 Aug 2026 07:37:17 -0600

Resent-From: The Doctor

Resent-Date: Thu, 27 Aug 2026 07:37:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from bsgw-00000025.cafe24.com ([118.219.235.56]:47092)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzXZS-00000000DOe-2Yw3

for sales@nk.ca;

Thu, 27 Aug 2026 04:43:08 -0600

Received: from [130.254.47.122] ([46.203.215.8])

(AUTH: LOGIN pppjm1234@moonmyung.co.kr)

by bsgw-00000025.cafe24.com with esmtp; Wed, 26 Aug 2026 00:30:53 +0900

id 000000000350ADEB.000000006A8DB52E.00001F81

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Investment partnership

To: sales@nk.ca

From: "doha consultant"

Date: Tue, 25 Aug 2026 08:30:53 -0700

Reply-To: info@doha-consultant.com

Received-SPF: softfail (Address does not pass the Sender Policy Framework)

SPF=FROM;

sender=pppjm1234@moonmyung.co.kr;

remoteip=46.203.215.8;

remotehost=;

helo=[130.254.47.122];

receiver=bsgw-00000025.cafe24.com;

Message-ID:

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings How are you doing? Do you need an investment partner

for any of your projects? I have many investors who are willing and able

to invest in your project for partnership. Send me your whatsaap for faster

communications



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

[118.219.235.56 listed in dnsbl.ahbl.org]

[118.219.235.56 listed in dnsbl.ahbl.org]

[118.219.235.56 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[46.203.215.8 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[46.203.215.8 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[118.219.235.56 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.5 DATE_IN_PAST_24_48 Date: is 24 to 48 hours before Received: date

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Investment partnership



Greetings



How are you doing? Do you need an investment partner for any of your projec=

ts? I have many investors who are willing and able to invest in your projec=

t for partnership.



Send me your whatsaap for faster communications



Warm regards,

Ahmed Ahn Abudadi

investment consultant

Doha investors spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Aug 2026 07:37:27 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzaI9-00000000Kh4-36IW

for dave@doctor.nl2k.ab.ca;

Thu, 27 Aug 2026 07:37:17 -0600

Resent-From: The Doctor

Resent-Date: Thu, 27 Aug 2026 07:37:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from bsgw-00000025.cafe24.com ([118.219.235.56]:47092)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzXZS-00000000DOe-2Yw3

for sales@nk.ca;

Thu, 27 Aug 2026 04:43:08 -0600

Received: from [130.254.47.122] ([46.203.215.8])

(AUTH: LOGIN pppjm1234@moonmyung.co.kr)

by bsgw-00000025.cafe24.com with esmtp; Wed, 26 Aug 2026 00:30:53 +0900

id 000000000350ADEB.000000006A8DB52E.00001F81

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Investment partnership

To: sales@nk.ca

From: "doha consultant"

Date: Tue, 25 Aug 2026 08:30:53 -0700

Reply-To: info@doha-consultant.com

Received-SPF: softfail (Address does not pass the Sender Policy Framework)

SPF=FROM;

sender=pppjm1234@moonmyung.co.kr;

remoteip=46.203.215.8;

remotehost=;

helo=[130.254.47.122];

receiver=bsgw-00000025.cafe24.com;

Message-ID:

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings How are you doing? Do you need an investment partner

for any of your projects? I have many investors who are willing and able

to invest in your project for partnership. Send me your whatsaap for faster

communications



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

[118.219.235.56 listed in dnsbl.ahbl.org]

[118.219.235.56 listed in dnsbl.ahbl.org]

[118.219.235.56 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[46.203.215.8 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[46.203.215.8 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[118.219.235.56 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.5 DATE_IN_PAST_24_48 Date: is 24 to 48 hours before Received: date

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Investment partnership



Greetings



How are you doing? Do you need an investment partner for any of your projec=

ts? I have many investors who are willing and able to invest in your projec=

t for partnership.



Send me your whatsaap for faster communications



Warm regards,

Ahmed Ahn Abudadi

investment consultant

Doha investors spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Aug 2026 07:37:27 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzaI9-00000000Kh4-36IW

for dave@doctor.nl2k.ab.ca;

Thu, 27 Aug 2026 07:37:17 -0600

Resent-From: The Doctor

Resent-Date: Thu, 27 Aug 2026 07:37:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from bsgw-00000025.cafe24.com ([118.219.235.56]:47092)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzXZS-00000000DOe-2Yw3

for sales@nk.ca;

Thu, 27 Aug 2026 04:43:08 -0600

Received: from [130.254.47.122] ([46.203.215.8])

(AUTH: LOGIN pppjm1234@moonmyung.co.kr)

by bsgw-00000025.cafe24.com with esmtp; Wed, 26 Aug 2026 00:30:53 +0900

id 000000000350ADEB.000000006A8DB52E.00001F81

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Investment partnership

To: sales@nk.ca

From: "doha consultant"

Date: Tue, 25 Aug 2026 08:30:53 -0700

Reply-To: info@doha-consultant.com

Received-SPF: softfail (Address does not pass the Sender Policy Framework)

SPF=FROM;

sender=pppjm1234@moonmyung.co.kr;

remoteip=46.203.215.8;

remotehost=;

helo=[130.254.47.122];

receiver=bsgw-00000025.cafe24.com;

Message-ID:

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings How are you doing? Do you need an investment partner

for any of your projects? I have many investors who are willing and able

to invest in your project for partnership. Send me your whatsaap for faster

communications



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[46.203.215.8 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

[118.219.235.56 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

[118.219.235.56 listed in dnsbl.ahbl.org]

[118.219.235.56 listed in dnsbl.ahbl.org]

[118.219.235.56 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

[46.203.215.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[118.219.235.56 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[46.203.215.8 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[46.203.215.8 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[118.219.235.56 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_FROM From username looks random

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.5 DATE_IN_PAST_24_48 Date: is 24 to 48 hours before Received: date

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Investment partnership



Greetings



How are you doing? Do you need an investment partner for any of your projec=

ts? I have many investors who are willing and able to invest in your projec=

t for partnership.



Send me your whatsaap for faster communications



Warm regards,

Ahmed Ahn Abudadi

investment consultant

Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 26 Aug 2026 14:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzK8u-00000000P7B-1GAX

for dave@doctor.nl2k.ab.ca;

Wed, 26 Aug 2026 14:22:40 -0600

Resent-From: The Doctor

Resent-Date: Wed, 26 Aug 2026 14:22:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from zmail.eplanetglobal.com ([66.219.96.109]:44370)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzIzM-00000000Ech-33HE

for sales@nk.ca;

Wed, 26 Aug 2026 13:09:02 -0600

Received: from localhost (localhost [127.0.0.1])

by zmail.eplanetglobal.com (Postfix) with ESMTP id 03C087C8727

for ; Wed, 26 Aug 2026 15:04:51 -0400 (EDT)

Received: from zmail.eplanetglobal.com ([127.0.0.1])

by localhost (zmail.eplanetglobal.com [127.0.0.1]) (amavis, port 10032)

with ESMTP id HAfgDFv2mAvg for ;

Wed, 26 Aug 2026 15:04:50 -0400 (EDT)

Received: from localhost (localhost [127.0.0.1])

by zmail.eplanetglobal.com (Postfix) with ESMTP id 74A5E7C8322

for ; Wed, 26 Aug 2026 15:04:50 -0400 (EDT)

DKIM-Filter: OpenDKIM Filter v2.10.3 zmail.eplanetglobal.com 74A5E7C8322

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=eplanetglobal.com;

s=5A63B480-AE9A-11EF-B85C-7A3477DD596D; t=1787771090;

bh=LfZj7rc3TmHGvNxFzFRUld6qJTeDDYsBdOHrEbuhyds=;

h=From:To:Message-ID:Date:MIME-Version;

b=pkaYG+AP2OT8duH/C0FC/U2Ru8j3Al8its2rj6cHqHLpYpBROYUiT5gkyxAckc/3V

OnzpIwAJIjSdKuNxJkxU3XbfVelXABzbOUNpss+bzTiErkJ44nEE53kjCyYFHN4b/X

wSDvbUitcMgxwVvTySKJ8uB2uCoNgsw2TLPUE9YOSpudipVAxaSp3Q0PYDSH111TSh

p4Cm6kUxVtsjHQXDMSjDOo7crzRU0BVIzN0IJXUwwqUg028fkgkzyXwBhz8OP6lUkw

dmIeD0BSQ9MO1bzF9hmGla4GzOGcXHRDcs0EJL/hYgYeJTLKhFjykOkLQn1VcZsaUs

qY12A4IotkV2w==

X-Virus-Scanned: amavis at zmail.eplanetglobal.com

Received: from zmail.eplanetglobal.com ([127.0.0.1])

by localhost (zmail.eplanetglobal.com [127.0.0.1]) (amavis, port 10026)

with ESMTP id GCc35JV94udb for ;

Wed, 26 Aug 2026 15:04:50 -0400 (EDT)

Received: from [127.0.0.1] (unknown [196.74.228.253])

by zmail.eplanetglobal.com (Postfix) with ESMTPSA id 205607564A1

for ; Wed, 26 Aug 2026 15:04:49 -0400 (EDT)

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <7f5ec407-0bb0-f21a-8c32-8934f1f65af2@eplanetglobal.com>

Content-Transfer-Encoding: quoted-printable

Date: Wed, 26 Aug 2026 19:04:37 +0000

MIME-Version: 1.0

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[66.219.96.109 listed in wl.mailspike.net]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[66.219.96.109 listed in bb.barracudacentral.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.74.228.253 listed in will-spam-for-food.eu.org]

[196.74.228.253 listed in will-spam-for-food.eu.org]

[196.74.228.253 listed in will-spam-for-food.eu.org]

[196.74.228.253 listed in will-spam-for-food.eu.org]

[196.74.228.253 listed in will-spam-for-food.eu.org]

[196.74.228.253 listed in will-spam-for-food.eu.org]

[196.74.228.253 listed in will-spam-for-food.eu.org]

[196.74.228.253 listed in will-spam-for-food.eu.org]

[66.219.96.109 listed in will-spam-for-food.eu.org]

[66.219.96.109 listed in will-spam-for-food.eu.org]

[66.219.96.109 listed in will-spam-for-food.eu.org]

[66.219.96.109 listed in will-spam-for-food.eu.org]

[66.219.96.109 listed in will-spam-for-food.eu.org]

[66.219.96.109 listed in will-spam-for-food.eu.org]

[66.219.96.109 listed in will-spam-for-food.eu.org]

[66.219.96.109 listed in will-spam-for-food.eu.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.74.228.253 listed in dnsbl.ahbl.org]

[196.74.228.253 listed in dnsbl.ahbl.org]

[196.74.228.253 listed in dnsbl.ahbl.org]

[196.74.228.253 listed in dnsbl.ahbl.org]

[66.219.96.109 listed in dnsbl.ahbl.org]

[66.219.96.109 listed in dnsbl.ahbl.org]

[66.219.96.109 listed in dnsbl.ahbl.org]

[66.219.96.109 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.74.228.253 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.74.228.253 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.74.228.253 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.74.228.253 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: dragonfly-express.duckdns.org/31.207.34.211]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: dragonfly-express.duckdns.org/31.207.34.211]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[66.219.96.109 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-express.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 26 Aug 2026 14:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzK8D-00000000OuY-3CPX

for dave@doctor.nl2k.ab.ca;

Wed, 26 Aug 2026 14:21:57 -0600

Resent-From: The Doctor

Resent-Date: Wed, 26 Aug 2026 14:21:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f200.google.com ([209.85.208.200]:54574)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzHSK-00000000Bje-2tix

for root@nk.ca;

Wed, 26 Aug 2026 11:30:42 -0600

Received: by mail-lj1-f200.google.com with SMTP id 38308e7fff4ca-39f72d86889sf3801531fa.1

for ; Wed, 26 Aug 2026 10:29:45 -0700 (PDT)

ARC-Seal: i=3; a=rsa-sha256; t=1787765378; cv=pass;

d=google.com; s=arc-20260327;

b=ItCj7bPwien5Xu8OHEY5XeDtHm9HpTo7KhxiZ+s4w2oFvr9RTgLjJdcU/VNehFRx9U

Q5aYX/XNE9zrerGbkV83erYXCyaneEITgXeDW6REvi7WuvHdLYeFgz+4SGL+Ge6PT92h

5U7p3bfXug/YAVVPDHX0VaRjxfml9SxpSJ/6J1vI8OmLJxTPwiofGRqdWu6XTrvE82uF

RfVJHo5yFqb45G0/yaOGcKeXp6p3nZqUUiG92tiNWr8EPcnuLKss71h1YL9nG7CuJtGI

XYw1tZlnRnmMyn1dKN/FqtPG8c1SuUN1YYxv4WREyQLaNnbpg9nlIkKEjMC7hjYc8zJX

7plQ==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:to:subject:message-id:date:from

:in-reply-to:references:mime-version:sender:dkim-signature;

bh=yFTTuB+Whtu0hdzlZA6kboA0ZBtBWK1h7Jnfi/UjQvA=;

fh=OYqZ3+rrMDY2aAJEHM/mAZ7bZUqRpd2G/oLfeAKhFI4=;

b=XvmWxdhenSmTaaKpsvGr0iVdmc3CT2qgH77vLcPsG+yDOxEFdhA776XljtonjX4UW/

fTjRJDFogqOuHwiKQfnpyKHymXQlDU668KChfJts5KgSoQ/dqntwwlkdQ3YvNqfS/izG

xnpy+JXkULV7k/grEIZrVZXP6azGOtWLmm9qmztOofiUMYubc8MENEO3pfqDwpYynmTz

ebM32kHo6QZQuin4QXDhmlNicAZpr7kqloeIEf/dranrnyzi3SCnha4Yj2MId3cSWrlX

zBUJ7xn9XL1L1P5YvaQguiBUIyOjC3+OCI4uo0MNkLKr9m/P2fPwsNkY31xgI7Zgx9pB

2dKg==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=ap3KAlFA;

arc=pass (i=1);

spf=pass (google.com: domain of anaya.singh3226@gmail.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=anaya.singh3226@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@rankbeacon.xyz

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rankbeacon.xyz; s=google; t=1787765378; x=1788370178; darn=nk.ca;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:list-id:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:in-reply-to:references:mime-version:sender:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=yFTTuB+Whtu0hdzlZA6kboA0ZBtBWK1h7Jnfi/UjQvA=;

b=PHAmo5wtpxDjJK89s803BRl+8Z6I/28YZ2qLXdFqpMZj4r9wx7lh7pEdYai37q+7rf

4T44sqBPfINpkVtr8pmXEt+ss3S8NZNYcTZy0+w7zDqrP19P386vz6yxxEuBsd3l+o1F

Vr+TLxAHLCBFrrTy8uejDfMHtVQ79+BJL5vrsbvl000ls9qpT4/eXfu5ojpEN9CreuRy

hJh+fBRg8g1/sRgjyZKL3C/YO+5BaC1X0nGP+hRBf7FvqvCtVRNg1r59Q2m+Vxazfp/m

LpYl8RUbVjRVVv37i2CycsOE/VUVjyKFvAqvejie/7wWp86r10gIngX+Hb6TLLXcJ/A8

nXFQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787765378; x=1788370178;

h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-beenthere:x-gm-message-state:sender:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=yFTTuB+Whtu0hdzlZA6kboA0ZBtBWK1h7Jnfi/UjQvA=;

b=fnAHP+RovCnAlpOxW+wgwGG67Tybvz8VnPTrQ1nVTu+J26RywjEDUA7wU7H1L4S4BU

vUQtdQ41fBL8IMvEHa5QvTMvdq9BeUubXwH1uv6F01XXA9L8TRRvARLff4DrxlsytAo1

V0S5K093+d68gpTiGpUJwCRjw5guD3i606yMG+0zRKUtuB+bgaUBrYn4qNf8q2IcXl1+

gq+lvnFcSlPVXfcm2B92dswVloPHZWshvZaBLFpREVlisAkyQ9JQYR3NyQSGes8x729q

8/WZm5XE6HJOBBKeBvi7s0ymE8exYTsUg3PoqJP9nDO42nUZj6b5In2GYRCYiTebtlJq

ps6g==

Sender: google_seo@rankbeacon.xyz

X-Forwarded-Encrypted: i=3; AHgh+RqIGpQAjVzcYsDyuESCjF73FIX/LkoIK0b4Aft2y4XE3S4926euWG0xKQ5VFa+8lIDDnz0G@nk.ca

X-Gm-Message-State: AFuF++lbiIYtK++BpuyCLQUDcPjAAKPbDpiE26KruetxZyX3J3UI8RTo

Nj+R90qCz84wJfPyK4YDssYQsmt+bigumfVK4hUQtgtlV1T6Y/uG4LYTk4QnVeEoB2s=

X-Received: by 2002:a05:651c:b2b:b0:39c:8124:93b3 with SMTP id 38308e7fff4ca-3a1fd625883mr21135911fa.9.1787765378200;

Wed, 26 Aug 2026 10:29:38 -0700 (PDT)

X-BeenThere: google_seo@rankbeacon.xyz; h="ATskLddte4rdGxl0TG25Y8bXOnVGCQpOlhHEYbi/yOVil3mP2A=="

Received: by 2002:a05:651c:4384:10b0:3a1:e61d:46c6 with SMTP id

38308e7fff4ca-3a1e61d4a0dls6788161fa.1.-pod-prod-06-eu; Wed, 26 Aug 2026

10:27:17 -0700 (PDT)

X-Received: by 2002:a2e:be27:0:b0:3a1:d468:f988 with SMTP id 38308e7fff4ca-3a1fd453e09mr20760611fa.1.1787765237167;

Wed, 26 Aug 2026 10:27:17 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1787765237; cv=pass;

d=google.com; s=arc-20260327;

b=DbjhD1q+DkJAnkzWai+9NmX8VF1JZ+FLikJ81ucEXX/ZtdQCH0WgrRHoT8QA4pdQ7t

U6GYNpNhVQ1m1AJhXyRRfWju7TbsDKphx6tBUpZDZLnLW84EsX92uoqsTLmVF+05LWek

06B8YF8YFFhYHboCyCcwQLRHhjFbkIVsEKFuEcy3ioKaBna+PNRgc4x1OPi21tY+UVEC

DvBIw2F9JWjnh3A7RP2X+T7w+ifPBAfHDJTvTpLu+6BorTQMcKZ/tlKJmqGyolKA/bjd

ufqhzo7fUEZzyjumpU3BGujQy35tBbmDfMqjcgia0zr4NxXtNjjc24NAHlwoWX6pr69m

9QBA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=5XMxGduRYt5NfI8LlM3FKwgWeJEAuv1iSPTf08LPrbc=;

fh=PWSUFaEq1CkbsfShP2jell5RPg3MDtCYx7KzhsUuaJc=;

b=hnI4fYznMWdJEzVaBvWWzAUwX7T3Ra/mcIBt3G5N/2v2a6q8oieVQdNZlcPZhaoRn8

MMHRHneoHoJHRUho8zwxh7/g2WYcJEPTXmJksMVaZVKITCDHzv1m2MnaOmddj79gKz46

B0he0CgQ94GkYOxOc2Njc6gD5n476Tng+61VEZCk0cQfN6ftbaBrLGK4SPHoJlQ1dzwN

BGnFp90YYkZRsWnZPqn/tvUn0d0Y4MmueMDk29tDYH8Iy4QBXT6lxe1Ahoun+OX1GQXg

eeXMdXQGf+LSUAvthYDmUAvZYL/vB9mZWx9zDdjwimF03485FznwbUJOfyaR+Sb5DEW+

hCqQ==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20251104 header.b=ap3KAlFA;

arc=pass (i=1);

spf=pass (google.com: domain of anaya.singh3226@gmail.com designates 209.85.220.65 as permitted sender) smtp.mailfrom=anaya.singh3226@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@rankbeacon.xyz

Received: from mail-sor-f65.google.com (mail-sor-f65.google.com. [209.85.220.65])

by mx.google.com with SMTPS id 38308e7fff4ca-3a1fd2723e2sor5027611fa.22.2026.08.26.10.27.17

for

(Google Transport Security);

Wed, 26 Aug 2026 10:27:17 -0700 (PDT)

Received-SPF: pass (google.com: domain of anaya.singh3226@gmail.com designates 209.85.220.65 as permitted sender) client-ip=209.85.220.65;

ARC-Seal: i=1; a=rsa-sha256; t=1787765237; cv=none;

d=google.com; s=arc-20260327;

b=i6r+QdBdw6L/FDxJRM3BMF8I8ZVY2iMritxj8N7gwvS8QPCPIP1LvlNMQw8cqZQ5Zc

09EirzK/jEaoqzEgTYmj8eX3OhCmtFCVkaAVD8amfcIitzTu49rI2F/zR7EmR10GsJMJ

5vURIlMts9vs8A8urqr3umGWK91/aWIGWERxfpg0JdJfbUQ51ubmArqvrlI35jsyREGv

MchD3lRLvyZADL/6BS72QkM0e73WMu/qJlvzItDe6LfypcqK/AC3K6iqwnapl5+IAsxk

CpscPRqpzshGaywHNOA+KXeL78orR4UW7mr4y2bl/Hiacmv/SkTfva/QFflcE8PZXeVW

7iCg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=5XMxGduRYt5NfI8LlM3FKwgWeJEAuv1iSPTf08LPrbc=;

fh=PWSUFaEq1CkbsfShP2jell5RPg3MDtCYx7KzhsUuaJc=;

b=MFe4ud+at2vmyjlhuPzZB2Kfpofm597IS1ZKUEU6ZIoHPNVY5okVmMlTbD0J1F17zL

Tu7vlbVhr7rUSKQ+R7dR7Nc5k4yu3PxnjqJukMrdwhJFe8tLt1BZ9zaufqckkLvJ3FVT

9f09VrYgb8wH0Q2yGK9W3d4XLAJNAF1qmsx1vt5TK9swRmSxKv9YHu35ovmvo3vbDXai

0/2li7un2yhcCuzvgNaqSJGxBwai4d4FwcO/blz6OwcnrfEb7422EpwnO9h/+tdKcFkd

arFETHnBGY/8uMZUMV7LnHmTJWcvW6LxiCou9by85DaNgiPYQwcAQQ+DVIBONlyfJy6N

MAzA==;

darn=rankbeacon.xyz

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AR+sD1371+4PqjPj4qUvJ+yC8iKA8luwmF5xvc3wNb1bWMn0ZiYSQuy1nDlgyqfzmIu

ozSanMqyjqcUKTmK18/Sm3rD+3ju25SXhurZFfCLgnAjpc8m04i4nKrp5RZsX2y+R9/G0+51Uvw

kIANwNqdn6TaM5II1ytpc4698uDuhPy6gVbuWc+sicvZQNsuwvyiysHFFyeF8BWHkPBpk0v4vRd

6ZejwJJ9p2RY7ge9q0vnxi1zyehi8cSgwoUCBeVxou+r3GQqbiS8cUHNA6UC8aONg97gSKPkY12

Tkxk25PpruKkCz0E/XKf065pLQNVCjprRItfyxbOTw1aUZLR+k64pMw2aicUxJMAmgScn7ST087

U0U0QRU6me4LoozqqwSXiQbvxoco6l/qG4uHENr6pw7SMXqLOha/Qqpy8LQ==

X-Received: by 2002:a2e:a804:0:b0:3a1:4f33:f64b with SMTP id

38308e7fff4ca-3a1fd5d1319mr23808681fa.8.1787765236618; Wed, 26 Aug 2026

10:27:16 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Anaya Singh

Date: Wed, 26 Aug 2026 22:59:09 +0530

X-Gm-Features: AcwNN1Uzxzi6Ki9cyCfkO8rJvXl4pTh1ei3fivdi_9S-oZu_4ZufO7ksoWn3zpM

Message-ID:

Subject: Re: Few improvements for your website !!!

To: google_seo@rankbeacon.xyz

Content-Type: multipart/alternative; boundary="000000000000dedd330659f6879c"

X-Original-Sender: anaya.singh3226@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20251104 header.b=ap3KAlFA; arc=pass

(i=1); spf=pass (google.com: domain of anaya.singh3226@gmail.com

designates 209.85.220.65 as permitted sender) smtp.mailfrom=anaya.singh3226@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@rankbeacon.xyz

Precedence: list

Mailing-list: list google_seo@rankbeacon.xyz; contact google_seo+owners@rankbeacon.xyz

List-ID:

X-Spam-Checked-In-Group: google_seo@rankbeacon.xyz

X-Google-Group-Id: 1054195051699

List-Post: ,

List-Help: ,



List-Archive:

List-Subscribe: ,



List-Unsubscribe: ,



X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Just following up on my last email regarding a few website

improvements that could help increase your traffic, leads, and conversions.

I still have the quick snapshot ready for you. Reply *“OK – SEND”

and I’ll share it over.



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.65 listed in will-spam-for-food.eu.org]

[209.85.220.65 listed in will-spam-for-food.eu.org]

[209.85.220.65 listed in will-spam-for-food.eu.org]

[209.85.220.65 listed in will-spam-for-food.eu.org]

[209.85.220.65 listed in will-spam-for-food.eu.org]

[209.85.220.65 listed in will-spam-for-food.eu.org]

[209.85.220.65 listed in will-spam-for-food.eu.org]

[209.85.220.65 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

[209.85.208.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.220.65 listed in dnsbl.ahbl.org]

[209.85.220.65 listed in dnsbl.ahbl.org]

[209.85.220.65 listed in dnsbl.ahbl.org]

[209.85.220.65 listed in dnsbl.ahbl.org]

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.208.200 listed in dnsbl.ahbl.org]

[209.85.208.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.220.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.220.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.220.65 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.220.65 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.200 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: rankbeacon.xyz]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[anaya.singh3226(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: rankbeacon.xyz (xyz)]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: rankbeacon.xyz]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.200 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.200 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 BULK_RE_SUSP_NTLD Precedence bulk and RE: from a suspicious TLD

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} Re: Few improvements for your website !!!



--000000000000dedd330659f6879c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Just following up on my last email regarding a few website improvements

that could help increase your traffic, leads, and conversions.



I still have the quick snapshot ready for you.



Reply =E2=80=9COK =E2=80=93 SEND=E2=80=9D *and I=E2=80=99ll share it over.



Thanks,



On Sat, 25 Jul 2026 at 21:59, Anaya Singh wrote=

:



> Hi,

>

> Many local businesses are missing opportunities because they're not

> visible enough online.

>

> We help businesses generate more calls, inquiries, and customers through

> Google.

>

> Reply "Sure" and let's connect.

>

> Thanks,

>



To unsubscribe from this group and stop receiving emails from it, send an e=

mail to google_seo+unsubscribe@rankbeacon.xyz.



--000000000000dedd330659f6879c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Just following up on my last email regarding a=C2=A0=

few website improvements that could help increase your traffic, leads, and =

conversions.

I still have the=C2=A0quick snapshot ready for yo=

u.

Reply=C2=A0=E2=80=9COK =E2=80=93 SEND=E2=80=9D=C2=A0and=

I=E2=80=99ll share it over.

Thanks,



=3D"gmail_quote gmail_quote_container">

">On Sat, 25 Jul 2026 at 21:59, Anaya Singh <
gh3226@gmail.com">anaya.singh3226@gmail.com> wrote:

uote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1p=

x solid rgb(204,204,204);padding-left:1ex">
Hi,

Many=

local businesses are missing opportunities because they're not visible=

enough online.

We help businesses generate more calls, inquiries, a=

nd customers through Google.

Reply "Sure" and let's co=

nnect.

Thanks,










To unsubscribe from this group and stop receiving emails from it, send an e=

mail to google_seo=

+unsubscribe@rankbeacon.xyz.




--000000000000dedd330659f6879c--

Canadian Bread Court Information phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 26 Aug 2026 14:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzK7e-00000000Og3-0CpU

for dave@doctor.nl2k.ab.ca;

Wed, 26 Aug 2026 14:21:22 -0600

Resent-From: The Doctor

Resent-Date: Wed, 26 Aug 2026 14:21:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server57.dsbsv.net ([219.99.172.143]:36388)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzGmC-00000000Jge-0Zs7

for root@nl2k.ab.ca;

Wed, 26 Aug 2026 10:47:08 -0600

Received: from EC2AMAZ-OKAMBSG (ec2-16-174-119-216.ca-west-1.compute.amazonaws.com [16.174.119.216])

by server57.dsbsv.net (Postfix) with ESMTPA id 83575456A7A

for ; Thu, 27 Aug 2026 01:46:03 +0900 (JST)

MIME-Version: 1.0

From: "Canadian Bread Court Information"

To: root@nl2k.ab.ca

Date: 26 Aug 2026 16:46:03 +0000

Subject: =?utf-8?B?SW1wb3J0YW50IFNldHRsZW1lbnQgVGltZWxpbmUgSW5mb3Jt?=

=?utf-8?B?YXRpb24gOiBSZWYgTm/CuiA1MzMzMjMwNzMxIC8gOC8yNi8yMDI2IDQ6?=

=?utf-8?B?NDY6MDIgUE0=?=

Content-Type: multipart/alternative;

boundary=--boundary_4042_4519d45e-ffb5-43cd-be4d-6046e069123f







Settlement Information

Packaged Bread Class Actions



Information Notice

2026

Important Settlement Information

Loblaw/Weston

Packaged Bread Class Actions



Version française suit plus bas.

Recipient Information

You are receiving this email because you were identified as having claimed a $100 to $200 Loblaw Card from the Packaged Bread Loblaw Card Program and/or as having registered with the lawyers handling this class action.

Legal Notice

Authorized by the Superior Court of Justice for Ontario

01



Nature of the Proceedings

Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of individuals and businesses resident in Canada who purchased Packaged Bread alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges for Packaged Bread sold in Canada.

The Courts have not yet made any decision on the merits of the claims or the defences in either of the actions.

National Settlement

$500 Million

$96 million already paid

02



Settlement Terms

The Plaintiffs in the actions have entered into a national settlement with Loblaw/Weston for $500 million and their cooperation in pursuing claims against non-settling defendants in the continuing actions.

If the settlement is approved by the Courts in both actions, the net settlement funds, after approved fees and expenses, will be distributed to and for the benefit of Settlement Class Members in accordance with the applicable distribution protocol.

03



Settlement Class Eligibility

If you are resident anywhere in Canada except Quebec and purchased Packaged Bread between January 1, 2008 and December 31, 2025, inclusive, and wish to participate in the Loblaw/Weston Settlement, please review the official settlement information and eligibility requirements.

Review Official Information

Please review the official settlement materials, eligibility requirements and applicable deadlines.

Apply Now Appliquez

Before submitting any information

Verify the settlement administrator, court notice, claim deadline and official website before providing personal or financial information.

This communication contains settlement information. Please consult the official settlement materials for the authoritative terms, eligibility requirements and deadlines.



https://www.canadianbreadsettlement.ca/ | Unsubscribe

```









GuardianForge Max from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 26 Aug 2026 08:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzEvl-00000000HQC-08yi

for dave@doctor.nl2k.ab.ca;

Wed, 26 Aug 2026 08:48:45 -0600

Resent-From: The Doctor

Resent-Date: Wed, 26 Aug 2026 08:48:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f176.google.com ([209.85.214.176]:48615)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzEl4-000000001uY-04dZ

for doctor@nl2k.ab.ca;

Wed, 26 Aug 2026 08:37:52 -0600

Received: by mail-pl1-f176.google.com with SMTP id d9443c01a7336-2d032846c95so14670175ad.1

for ; Wed, 26 Aug 2026 07:36:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787755009; x=1788359809; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=QmOdDLGnALDAcaWivtRD8q333qMSK0AKSEeZdjL8tkE=;

b=A4O1dD3/gUTr4LYWLL+3w0ViN9kIKuzI0Wu9g2uZ5Ui7iUOibEy4/+eYmcndHiQeUM

D9o0hB7XkDBMRJFzyd/t6Srz0yf5oXM+IfhFHxbcwjTy3vXNUpbTRrz/pdUqDD07wYak

vgqKp2fIl/m+5KcN0S2c8c7oALF2nrO21Y2CkDG9x1h7QVuG2IEIvJ/BdyJvGWkxZJvl

jwdZR2ikHkf05Kx9exBz7ZDLSudCBqG+ifxBqRztJ1YmXo9q7cTV47oEqbCCcqSNypU0

dOijtD9OVlwJ2HkXM1UrAkhGKuBEylTXCLhq11ySqK+tAJMG1FttH9wQclGY31NcO35j

2fwA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787755009; x=1788359809;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=QmOdDLGnALDAcaWivtRD8q333qMSK0AKSEeZdjL8tkE=;

b=jPvwAGKkwFDFBCVzGots1eZ2uhE2zYlAXfFIWXj9vVrN4Bt6gX0WyHLHV7ip9ef6yL

u0ULPob6cK7EFT2XvOVZVieRC+dYepljeTEcumMyBYcjyhnachKsF+Yw3zVTe0GjdPIp

0cU7CwCY3BNsxt7xelwdjlIWlLyeqHfcjigxfnMgbiUxcHShKIeivnGBhYPLiPmKdLbt

1uRfCLj30vSlfMIaGxS2Q+EeqhX9wOlHxWpVflEPm/Mo+N2UrVj2kpYh+ru4VfEtXoAa

V/aaEE6pP3qOEpTCI9OMxo6gippEfQxPGcfW794hzHgpY+J+HyurPTqU54euwCOqEUXU

3mGg==

X-Gm-Message-State: AFuF++lKQxKAzVQrEFbK6NTkIy6LGWACwCa0wnm4z6/XqcWOOX1kaJDn

+abWVMulXipQP+SJDKCaCNB4zPvf1WfGc6uy2t2sJD0gL0Ybivvfwfmsf/hPCV6Xq1A=

X-Gm-Gg: AR+sD12iHEQJXdRsBX7P94aSUiJljgyDkjBm5G+/03D/PGwY5VxioQrzfCyPd289lNr

93g+V9a9RU0JVjYRCn2yI9dNCDhONZgmB6ebv8LS0PNF9he/7iisl2Bj0CPw61iQKG8qkGPwNeD

5KxfBnG5Im9JZNnovblOTlnUwMYVF/gPq1dXUtHjLSd88GKrjyG4TQb5AWXfvUkzVX2MaFX6xLZ

146TyFvjXMsAYZEXxujuP0w/dgktVUzRzXTas/tgDc3HUIfRgiKTQO1kRMWem9R3/tVJU1mSHRT

CLqlFITyMx4jgzyABX1Mb/Jh2RpdVoXKWRkYrMhYdHvEx/7/Hs0s9EyxUv7ynWDWOmD6pB4Ttrl

1+Gdqqssm2w3cN/iE2JZgNOM0U4g7GC/FeYxoZk7982oPZWhs7MRVWNZFuTf9+jXKoZHRaxROb4

wg3lKnuJ+40T5TH9toArGMpiuRyP7oRO39MYKrT3zyGHeaFTUYHrJhMAZiVwVWGUnU3MZFO0fS/

+0SFgwk7CO7DbtwssjI1Sd/

X-Received: by 2002:a17:903:2f8f:b0:2d6:fb95:59f0 with SMTP id d9443c01a7336-2d707a032a0mr118933405ad.3.1787755009257;

Wed, 26 Aug 2026 07:36:49 -0700 (PDT)

Received: from [172.19.0.209] ([124.156.164.190])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2d704ba5c94sm8267495ad.51.2026.08.26.07.36.48

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 26 Aug 2026 07:36:49 -0700 (PDT)

Message-ID: <6a8efa01.c8f5739a.100a91.5572@mx.google.com>

Date: Wed, 26 Aug 2026 07:36:49 -0700 (PDT)

Content-Type: multipart/mixed; boundary="===============1041963238324326565=="

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: Payment #8267282 Details Are Listed in Your Records

Importance: normal

Priority: normal

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Date: Wednesday, August 26, 2026 Hello Doctor, This communication

summarizes the renewal information currently associated with your Subscription

under reference Receipt 8267282. The details below are provided for your

account records.



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[124.156.164.190 listed in will-spam-for-food.eu.org]

[124.156.164.190 listed in will-spam-for-food.eu.org]

[124.156.164.190 listed in will-spam-for-food.eu.org]

[124.156.164.190 listed in will-spam-for-food.eu.org]

[124.156.164.190 listed in will-spam-for-food.eu.org]

[124.156.164.190 listed in will-spam-for-food.eu.org]

[124.156.164.190 listed in will-spam-for-food.eu.org]

[124.156.164.190 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

[209.85.214.176 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.176 listed in dnsbl.ahbl.org]

[209.85.214.176 listed in dnsbl.ahbl.org]

[209.85.214.176 listed in dnsbl.ahbl.org]

[209.85.214.176 listed in dnsbl.ahbl.org]

[124.156.164.190 listed in dnsbl.ahbl.org]

[124.156.164.190 listed in dnsbl.ahbl.org]

[124.156.164.190 listed in dnsbl.ahbl.org]

[124.156.164.190 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.176 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.176 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.176 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[nathkaushik933(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[nathkaushik933(at)gmail.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.0 TVD_PH_REC BODY: Message includes a phrase commonly used in phishing

mails

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.176 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.176 listed in wl.mailspike.net]

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_MXG_LOWER_HDR_SPAM Lower case header spam

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Payment #8267282 Details Are Listed in Your Records



--===============1041963238324326565==

Content-Type: text/plain; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit



Date: Wednesday, August 26, 2026



Hello Doctor,



This communication summarizes the renewal information currently associated with your Subscription under reference Receipt 8267282. The details below are provided for your account records.



Invoice Information Center

Renewal Record

Subscription Reference: GuardianForge Max-607447

Account Reference: RVM16800EK8596

Renewal Period: 3 Years

Renewal Amount: $240.15



Account Information



Your Subscription profile is associated with the registered email address doctor@nl2k.ab.ca. The information above corresponds to the upcoming Subscription renewal period currently recorded for the account.



For questions about your Subscription renewal, account records, or available services, please contact our customer support team at (840) 260-6526.



Communication Details



This message was generated automatically for account documentation and recordkeeping purposes. Replies to this mailbox are not monitored. For Subscription or account assistance, please contact our customer support team at (840) 260-6526.



Faithfully,

Subscription Account Services

Webroot, Powered By Intel

Nancy Ramirez

--===============1041963238324326565==--

Amazon Prime Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 26 Aug 2026 07:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzDUP-0000000006z-0osm

for dave@doctor.nl2k.ab.ca;

Wed, 26 Aug 2026 07:16:25 -0600

Resent-From: The Doctor

Resent-Date: Wed, 26 Aug 2026 07:16:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f180.google.com ([209.85.222.180]:49179)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wzCnc-0000000071J-1Enx

for root@nk.ca;

Wed, 26 Aug 2026 06:32:22 -0600

Received: by mail-qk1-f180.google.com with SMTP id af79cd13be357-92e99ef0902so44203685a.2

for ; Wed, 26 Aug 2026 05:31:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=abx38-hamburg1-biz-id.20251104.gappssmtp.com; s=20251104; t=1787747479; x=1788352279; darn=nk.ca;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=siv5zOwqacF9NCL9VXzoCQVZAa52HdC/oz/nyCNGO/Q=;

b=DhFgjWcQ+NUtz51rvAum2Zm0FCb+BSblf/l866DhjoFRl8BluUT153fyeJ+1VBwxvz

p6e7hK6BROXU9LEuDQ+we6gUjAGa/wKmNqIR16WQFbApBcY4ptKctbLLIySX2q7mfm5T

lsv0ns3lreFmGMBO7H4DJChFRnymL6rof1rH29o6dUG44aTfhMjipddrIu3Qw/2L5bOU

rStygyp3FOy6IHWdL2noT8p/Hvf0GeWpodWmywlkNR8r5Gwa02Gjvz5lTTupXcFki1aQ

97rucwYHV+ByUDf0w714HFWj34e19mRYznbw7M1JbAEGpUAvg/CvrJHHKea0ZHx37DEP

qKcg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787747479; x=1788352279;

h=content-transfer-encoding:content-type:mime-version:message-id

:subject:to:date:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=siv5zOwqacF9NCL9VXzoCQVZAa52HdC/oz/nyCNGO/Q=;

b=fC8u7Fg7Sk3vfo3oNIkVyyScSoPjuiHBHHW1xoP1cyjc6jpM+FiKVO6Pj3MV2ei47x

W/dvX2piYDP20AlsEfk4su2jb1neKGry6pElj/pPkzqZiN2UvKVlINW0Cc3tI4rb9uIC

8khIeHbDgelg8BPqp9JTz9ia0bKSGDESnXgV0AOX9FLgYxd4L7Md+PmxEH+XrHwlodHs

QqFK9k07tlKbClOtxKyNMOpifv76Pg+8XMDUbIJSf1NLONYm6yjxGHjQ9w0REyDUUJdk

8xShsFX7daEIk5c3lHwbvOSCfOIO9Z/4Z72sFCStUCDxNU2cnsOc60KAfzUJtaViEKcU

qtpQ==

X-Gm-Message-State: AFuF++ncqoc30CsbycdXB9bn+EC9Frpd3ocN9HUXHblX73P1c5HlWvTv

hsQ4yHOOy2JZdr/4NeMWGJDH2Dh9FX5nGQTNpNGrrWO6KUXZd6adf87mfd9QYv/Oq4RS/BaM9KS

UN/mUP+05tbY=

X-Gm-Gg: AR+sD10+9IHYyMp6BfPsxkA8a+O8KXZ4u2rCSSGmnl1L6WG/nytCKyvdVV27/S00XWS

GqDJg3FDr832bVRBwpyBrEKnx3EHyoMSOBmS7HOZFT6K+sPU+1/X72zsz77u2B4SCx7OdMTiQvc

OubfU1Y60KlMDXp6/QdYsMAyaHmSWN7m9Zm5tDh3/80Fn19OWMlfYs6DiBWlfi1hnV/BR6eAp2X

wAIWIr/pa8ACPYHDfb0SSzqD4RHjxS4la8wfo1XH0EHU+QwQ/S2DHWd8c/6Vu93rN3QQ44oHoEh

emTJdK5f1vn3FTxs7udu3BEygSV/7GhVUzGHZwB7kAhmS/YVoN9rqAXenu8Yt/p4+mtNaTfOzf0

pj1aOa8vMETOGT4Y+VgBNWdwySWekh5TR6NmLl6Q4zNTihWZIfoUmUGdDcBVniFFpL+muPc7/IZ

vhYytnsskVN/6GTWdVKg+XdiY5qdCInw1Gw+KWVFrYSFKvXg66J2x1M+XLPqsAmt4kK4Kj1PWuE

Xee5Op7BgqGUAuwMikoRJfhnT56YkUGf8ebJNC6aA5SnWHhbYlNZUl6QHCBVL79HD5r

X-Received: by 2002:a05:620a:3bd0:b0:936:a407:98bb with SMTP id af79cd13be357-937800f72b0mr431932585a.9.1787747478412;

Wed, 26 Aug 2026 05:31:18 -0700 (PDT)

Received: from mail-qv1-6443.google.com (ec2-50-16-9-101.compute-1.amazonaws.com. [50.16.9.101])

by smtp.gmail.com with ESMTPSA id af79cd13be357-9377e36955bsm200092685a.19.2026.08.26.05.31.17

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 26 Aug 2026 05:31:18 -0700 (PDT)

From: "=?UTF-8?Q?Prime Membership Notification?="

X-Google-Original-From: =?UTF-8?Q?Prime Membership Notification?=

Date: Wed, 26 Aug 2026 12:31:17 +0000

To: root@nk.ca

Subject: =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Wed, August 26, 2026 12:31 PM?=

Message-ID:

X-Priority: 1

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your Prime benefits are on hold due to a billing issue Hello,

We're unable to charge your payment method for $14.99 and any applicable

taxes for your next 1 month of Prime. Your Prime benefits are cu [...]



Content analysis details: (6.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[50.16.9.101 listed in will-spam-for-food.eu.org]

[50.16.9.101 listed in will-spam-for-food.eu.org]

[50.16.9.101 listed in will-spam-for-food.eu.org]

[50.16.9.101 listed in will-spam-for-food.eu.org]

[50.16.9.101 listed in will-spam-for-food.eu.org]

[50.16.9.101 listed in will-spam-for-food.eu.org]

[50.16.9.101 listed in will-spam-for-food.eu.org]

[50.16.9.101 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

[209.85.222.180 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.180 listed in dnsbl.ahbl.org]

[209.85.222.180 listed in dnsbl.ahbl.org]

[209.85.222.180 listed in dnsbl.ahbl.org]

[209.85.222.180 listed in dnsbl.ahbl.org]

[50.16.9.101 listed in dnsbl.ahbl.org]

[50.16.9.101 listed in dnsbl.ahbl.org]

[50.16.9.101 listed in dnsbl.ahbl.org]

[50.16.9.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.180 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.180 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.180 listed in list.dnswl.org]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.222.180 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.180 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

3.0 URI_GOOGDRAWPREVIEW_MINFP Link to image at Google Docs, probable

phishing

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} =?UTF-8?Q?Your Prime benefits are on hold due to a billing issue on Wed, August 26, 2026 12:31 PM?=



=0A =0A =0A =0A =0A=

=0A
=0A
=0A
enter class=3D"x_wrapper" style=3D"">=0A
" border=3D"0" cellspacing=3D"0" width=3D"100%" class=3D"x_main-container" =

style=3D"width:100%; max-width:578px; min-width:343px">=0A =

=0A =0A =0A

578">=0A
n=3D"center" width=3D"100%" style=3D"margin:0 auto; width:100%; border-spac=

ing:0; font-family:sans-serif; color:#4a4a4a">=0A =

=0A =0A =0A =0A
>=0A
=0A =


=3D"border-radius:16px; font-family:CircularStd,Arial">=0A =

=0A =0A =

=0A =

=0A =0A =

=0A
tr>=0A =0A =

=0A =

=0A =0A =

=0A =0A =

=0A
=0A
" width=3D"100%" class=3D"x_logo-table" bgcolor=3D"#ffffff" style=3D"border=

-top-left-radius:16px; border-top-right-radius:16px; background-color:#fff"=

>=0A =0A =

=0A =

=0A =

=0A =0A =


tom:24px">
ORw0KGgoAAAANSUhEUgAAAGEAAAA2CAYAAADXjffsAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjw=

v8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAABYOSURBVHhe7VsJjF3Vef7u9tZ582azZ7yAMXhsZ=

mzAGEMgLGmpWVKWxEQgVYXSkKihaRWUqmojkSpRqrZq0lQKShBJUSXShYQGFShlc0gAE0MMBIgh=

xMb74HXGs89b7rtLv+/c9wwxMPYMDgyuf/u+e+9Z//Pv/zl3rJiA4/CBgl2/H4cPEI4zYQbAjDd=

HQq6BoW4WL1s/xxDMeCaUA+C+jSG++4qDiRBY3Q18/nSgmE4YcizAjDZHEo9d48C/vFTBthGgf7=

iGe14u4dl9b2rHsQAzmwm8qmGMgSiPUYp92fPQb+cQBJGpO1ZgRjPBIuHnFCxc3DGEruoBFINxn=

NVcwfL22jEVUcx4n0A3gGH6hV8PAKUa0NsBzM1EZNCxw4bpM4HUqTiAiwBuTCoFISIPmEAKI76H=

0AdaU0CTq2iGL3ENoZ03ZkTks6MAEZ9slsSWAyui8Wd9ieKvetIbhbDCX4KV5iycknUu0XXCUcA=

rcswqAtZVWZcjPjE7RtQeiyM7UY2OPI0DnJpoopAF0qxPo8IZM5zP51zClUNVKsimiHzWQd5QYw=

y+VUAq4px1XidzVIhXBqNEzidCmq+F68u5LLDY2AiGZtMgvPMWG3wmhykzQY3V44FtATbsdZENf=

CxdkMLCTuCn24B1jGQ2DwUkDtDZHGPlwgz+YAmwJEuiW67pL6TWvAGs5UV64bTZwFWnACPjEdbu=

rOG5PTUMoAm3fATozgE/2Aj0DUckgI32PHBdD80UGSx4Zi/wxDYSnVw/q8PHmYuajdY8RFye3wW=

MjlWQs0tY1Bpi9RmzcO4JwAE6+cdYt35rCRuHHURBgFxTHr+zwMcfnpZCd7aEqpVDmv4oJC2dKM=

TQRIBHdmXwk60+Ng3HKPk2xa2KWU0eVnancR3xX5iP4FkSF63TJnETHA/Hhakzga0DXjc9XsOj2=

zzkKSJz24FM2seWwRCVKEuJpXRRMrN0oFmnip7OKv720hYsLkgLIkQc5NYnQ9z5eooaAZzeNIYv=

XFzA954FNuzn+FyHlwHuuAL4SLGE6x8I8PJIMzgc5mer+N7qNE5rDlGLHfzzerZ7KTFbXbkAvbN=

cbN05jDfCFkphTGmewKDXBFownOyO4IyFRby6J0QfPX3NtqkXnIv4umEIxylh1bwM/n6VhxaGwF=

5ACaek/2rYw1eeqOGJAx7StRC+45j5ikGZq7HIqAxWtFfx1UvTODPPMptqRzBKFLMlNX0yqCvb1=

ECMdWueUbVqpoxNJWDbfhuFlIP5LSFOyAfIOD4mPBv7vCzWHSjiu08PYVA2hlIlPQ5IQKGWplnY=

VCrg1h+TAfsChCRWioi7bOaR2S7NmGfHxjxJ/S2apCKlXohnIjYmSOssyt4bFRePUbt22S0okg7=

NdOrVdBNylBqZqS1+EfdvBjaVHaSyNjrSMea6gREEi4QatQt4creHzdQUh/OCmtvHdf7DE2NYv9=

/hOAE8Ir20GOOj1N7O9iwZSWmJI7w84ODfn2OfmKaYOIlGBjuZqcPAtJgg1aESI0u7nqM5SnPGT=

/W6uPPSFO6+3MH3r3BxyzlE0hug1NN+knCP7yvgV4NJ54Ao+nZDOmJQuzFSpmQ5NcydBZw010Fv=

F9BGQlZRhI+8sc1aWI12PKAhCIiBZQiVLCIbsqU/gctm13D7KuBHV9bww48Df3mGD5fSbJEyDu8=

dto8vrQhx15U0c1fHuO1yF735CUOwbBhghO32EhebY9eI9yM0a2v7m+jrEv/1uTMdPHTJAP7n4j=

dw1+XAeR0lKktIC2Fh7XafmlU3ueyfkH9yLRBMnQmiBKHsRZzaJaOLIO1wySLgrDkhuosVLCtWc=

W1vCud3taNA0+ISq32Bi1f2qD+R5BgeTZIk3eG9me/XLKzg3tUpPPoJ4CdXl/CjKwIsL/hmQVQE=

cDqk4wqn5wPfzQLpCGX6pAmGMW4eF3V7+PiCEEs6ApzaBnxsYYoBQkBBoZax36y8hdU9DpYzylr=

SWsZ582imOjLGzGaCktkSocXhHJYxVY9uGDRBBOUd53RU8NnlnLZ1FsqF+ehqph9g35rloUyh6g=

9yfE6EVAYyubPgMDB1JiQjIxXQumvxdg2uExon5MheUB0VzXS5Ec4+kWaEgsBHc706EKFC6ZJsB=

LwzLqI6p43GLu2kc2930MLucHNUezLLoffVoji4iB7FaRKdhOcAKc4XUwjEYF1qF3H6DM2dFhUj=

y/IQtDpIkYtBPShwadjEfBpTvmXNOIUMO3PMstNkSJYnRwIra7TzxZE2jNtJ6+7OgoJAWR/Y5Qr=

W9QFP7wyN+dH6OjOhGc8AzZshbt1kTgam3dGCmIRtcF4OeHaLbRYtkkhiB8d9cxf5ZyTU0TLOlv=

eh8RBlou+wXBL+b6/FuOzuAOf9J3D+f3n484cDbK1QakjoglPB6tNcapyfaCkHk7DFB83uu8PRZ=

YJ+DA/0xLCR8yfynpQYHs1AkLM3d/ObgPCtSuxZ6FL0UyS0RbM0UqpibMJnEOAwEmSITm2bnynh=

prMyuH6petLRmwH0G/Ht8HBUmdCA2CzHBkN0E0Za/CcTUKRhlemQpM1EkK8SJNjTtFGIPAkTk1F=

p9vn0N5/5aB7X9KRw05IAt6wEvnVhDfetzuKvT69gnqeUjpGXGYRRAOFICHxUmNCQ9MaT1LFKSd=

i2awgB1UGlaUYLC2dnaJ4abY8cptp++pBwQdorI9KSTyHDJKJM3ySf0uWP4YtnAF+/EPjax1z8B=

ZnwiZ4M2otcI3OFmJGbiC+NSXCW/zu8LkybCdpyUMQSalLG7cMTwITPRVCF7WACPx+08dB2hnVs=

oygjl3awkmGnEzPGl7Ois5WTdqMklKsycXonkPOv0TEKHKq+IiUtSzba4lg1dmPyynb0Oyy3qHl=

MuxIicGxJt4ioAvOszIzPtl5M4kFTE5dNCKyQ1DGoWSjxvTPHLLy9ZpytEuG1fTU8vFXrDA3O0g=

6TjLFugIscF1JiJHFJzLDeE42YDDjV9MAlAkl4aGHUzeIbT5fx6cd8/NnTKfzpmjz+5qEQr5eLJ=

C7Vmu1XtIxhMUNG4RUzwnHFDL5GjCLk+HLROO9a2m+CQthsxGyQ/Xxb0VCIPON5mTeBMnPt8TTG=

S0cVOGHZPMdMpESMQjievHMMh4mLnoW7oRELNa+iu2xYM0zORFXkKc0ek4trzkihhVl3jXx83Wr=

DV58McPNjIb7xTIh/fM7GrT9zcPOjMW58MMJPN5fM1ooJw83Mgjqik4DwmRZI8iSlIpJEcF+Qxb=

N9KTzwGvDgjgo2+VRJSnwrCbQoN4LPnFfEHE8ZZb0/pVULrh2MHhTyvh0dI00kvNgjhmqXJdSGn=

+J+hsIaTnUlmgNtKPosq8uowU9EJjlRZZ3KUgdNBYFrkBAxyDZMqTkeShTcCsNmwyoSc9Vc4PdP=

oT/jIvPU8nKlijW7U/jOLx1850XgrleANTstvELNH6xyLo4jn6e5jhSmzQSpvNboUQJbwxJWn0p=

iN48xRBsl8krl08hygT0dIb50eRErO8mw+k6jJi1kXbTGE1zcCHIowSvkzALeBiReJmWjyDla6C=

BzdhXjKS3SZY4CNNNSdUQjaAsG0VEZRobpe81NGyIow9U2g0u/lLPKKFJLmolvlX2M8HA8tSt6P=

maFYyjGw+iMRsHci4xgbz60OFX81UV5fH6lg3lpagTnNbJCXGX+lDRo7JOKIU7oyJq1SaveaSnv=

BtPewPuTRyUBSVmO6nrbVXl0MwvdvpdXf4X2NcKSLgu9XRl0ULqYYpEkkn6dijkYYiCxY4wIsJ3=

v2OgpKNYW9g3NSCBi+y000BO0SFqZth6WFaokhCQ+xB5mgzvojzJyFKTAKUUmW2Y+AoOBgMnjVs=

4zYpImG20c4+Rmn/MqhpFmetjH2zYmZtq3aua1kGNkDaOSnV+xXN13EI8X9gMb98YYLvlIc57OJ=

gdL57jopqklDxiyUne1tU8/lsx4eJj+LuoaMmGHNCFCE8q4/YocLpqX8N/YW4LsNicgJpIZOUsF=

q5qODdhP5kfvzLeNjzHl5norKNpiP3XTG6ttLZLEkeJrTNUbyTZ9OY4RVb3r4jPrZD7N9rIpUb9=

kbtOEhcJBIOdvCqjFqkzaqUx6xR7qwkvYGmAziU0iZGybDEM4+HBYOBJGvSNISkSQGhdcpQPUJp=

1BiJdkTJdByHyfIoKJAYLkt2GWVKraBJV63W9AcshjhudlEDYMEIhAyTZI0kD3xpL0Un9mnWZLi=

CVImGHaGCSTMZJx+GvGSPon7VST4K/lUHHhNS6+myUaP2Ue6teRQ4LTFEFTpBmxyMnpWdvNqagh=

S8dhqjB1JpDS0uAxt5lRByVSLzrLZJSjx+MwdZi6T9DFnzs3ARt2VhlghPBcB587N43uQl2lj8O=

UYMpMEKiDxYRGe/hyihXqU3PE8MKk7R9eNph1NZ4YOJgn2Xrz1ACWG5LVyWb8R8Og1J266tkvGS=

/5nQymxQSBIkKzQ69IhQyJnSYTMXz4NUE7n9qCJ3BtNROiyu/pnXUkunYntFVnDqX4rMjaiyukp=

phBCkSMeRmsKEpM9o4agcQ7w7SZAEq+DrQ1RcpIDXnO6GByns9wqIe+9HDMsfmo7RI+9ZcdbB+p=

4eV9ETYMprFtzMYYmyowyTkhZucd9HS5WHkicHYrgxYJJ2khqti/DSaosZKaO14FzpsDrGhl9Gw=

xXNXpk+Zmi8b+/IcNRHyRyzbEd7E1SOG+DcDDzId2MuEbooDL4qR52ebTFotZe2J2sqzoyQ7g7h=

s6keXylfe8mWNMbh+mzgS21lntNfdWMTg6gauXtmD1EhsLC8yDOZcYoCE/jIxIUjIRxUefn8JXH=

q/imf4UsnaEPCvS2hK2SV6XeYdfNbvGe+kQK9QeN4pRtMt45rM585FZitl4TC0igUUUM/67wbTM=

kb6g+PUQ8LW1Adb2u1RH4LqTQtzYG6GzkNhQ22QwHzLQFxKWZxgxRqnfsNeHk0qhhQUe7VOKaiI=

fIG0PIgt9bHP3ixEe3lzGBPJmG+PVT7Md27uxApVsYjoOQ4rp+wSm931VB7etq+D+rQ7GIg9zsg=

FWL3PxyROAnuYKXE9fVkjBpZpK5ur5sYxlAzleyrzf8vr+QGPVZj9ECEkPeJkzBm1RJNsUaqi9L=

rXw6AOMs3YyLGEtGbF+N3D9/wYIqD2L2hzcf23abN3bZlwyi+OIApPBtJlgUOfPAeJ1H3OG29eX=

MVh1Tc7QkrZw9uwIV53qYOU8oI2hhUtKG7y4xpDW14m1sVEH7a6aESWD7xMb9BFaAyFzt5CcQiR=

OWUQWE1TjhCFGAwcPvQGs21TCinlZ3NDLcjZ/ZKeFm38M1Gijr+ux8M0LKHB2Y0um4Rcmh+lrgk=

GPF8OxCuOBx/eREc8Cm/b5GKdFjOkfilTvZS0BrlycxvIFNhY01dBKx2Hp2xTWSwMEDRbIfb1fm=

qDTPhFKUtqY00RDipCISWDl0U9zs3tcn7XQOW+hqRlmeyK7Yi5wz6Vsys7fejHAP73oIsMFfH0V=

cO2JJQROrr4WFipyPEzu9B7Mkb5Qo+Pho8s8QXu9W6pZ3MNo4gcbxjEYNxnCUogQEtn5FK/e5ir=

OPiHGysUZrKQfke1MAjmuVp/ImQOZyRE+ekBiK57X/MYEuSS8hzEivXEQeGpLhBd2V7Bl2Ea/n0=

E6GkHVSWNZq4UvX5jGubOAcXa74b/L+PlQFt3uOO74ZBN6CyXU7JzZXdYJoqVd2d8WE0Q6xcA6X=

NFS9P2osuiIZuap3Ta+vX4C64eazKfu+lI5ICeU1GSIUzauore9htNOasJymqtTCsAcGlJ9hMvA=

430Cn6G2g0HfwW6dbVDi19PcvLyzgs2DASasJpOU6RzBtgPMcwJct8jCjeek0ZHxYcceXhu0cM1=

9wDDX9EeLKvjyRRk0O4lwelEFIRO2Rt48Gbwnn5BIsSLhZBLzES0hpmTt4+Ke6gN++PwAnh9uoz=

Ojo+OKzFEH7ZDv2WRcgDz9QZFhRUvOwYk0V6d2eehu1ykdMJfBRYacqzHSktkwttrMwVWbzfJDg=

VjJxhnHmgiKMLPDMqU8jRHipe9Md4+S2JT2DXt1UAOMTLDbxAhKzAv0ratPydVRqlxFm1XFZQtC=

fOqsHE5nIlZkuY5lQzrib6+38HcbPHR5If7jygjL2pPtbPmSI/UHgvfgE94OGkgX8TRPE0RhP6X=

s4VcCPPi6j00TOZNpGuIQO/M5YsQUiYzQgX9M6RKxlYfnUUV73sWsgo2TW2toK2TJKAtNpL1OvV=

rZkDGANm8PLlSBQo08qnKOkh+hVKkxwXKwqeRigOK6e2gCB6oWRnwJBEnEjurjU2Ir+ohAg/BdF=

GlP+ebb08uXNuPCU4AOVkmAkqgJ2E+n8oUHK1g3ksGtK2r44+UeUhxvOsb0qDJB8qlLRPHMCZWc=

HJEmcbdTAtftAu7dUMYLg1mka4FZuDb/xBSprTRDRAmZfeu8WYhJGpUjJZqgP8KgAaR2iGnipEN=

KNnIh+R/TX8+6s5/Mianmu+46/Ne45AXDCfmzJLHUPo+UaBZGcckCi8QvmD9e6SDTE+3TQMmGpd=

jwxB4Lt6wBzm4p45u/R7zy+SQ05TVVOKpMAFVUp+QNRJPlJk+WogRONcyw6Rd9If51i4MdeyYwM=

GGZP2sSURU0iYBqr83BFH2HVLtCUyIC6pIpMM9y5IeCwmDd+GsuvticM2W+bdIBpGyJhEJj6G8e=

iCfbtFAlT2y2cMHcGi7p8bCUZif5sykRnoalzmXNKCI71N7vv2bhma1VfHFVExZndKaeoZCoxdR=

14egyoY6EBmzsmTQQl07IpiNMwsBxNGH/eIRf9gM/2+Pi6b4Y+2mrRRh90CWJ1nLkzKkv6klICC=

vtKDNSORRUnpArAeEhOPgVBwu0pSDp11cbS9pcXLDANXtgi4sxWplsKvbXVxbCO9k5DamZyRfWK=

tNQOofewbyhyIIMxV9ip5WabQrWTxWOKhNEaA0m02G+OKCDlAQKkq/V9EVcmr4CaOKrMG5sC4/T=

hr90wMYvdvjYSIO7u+zRdlsY82NUGXEFVBMFAMZssL3+oONQ0NeAqtOMNgnlkisOr4wXoZkGu82=

rYUELHf/8FH63i46fzr9ZTGEb7QCb7WlejralJdfyU3zS8a2ZleaowQhbWm/EhKkny03AwZk/cC=

a8dwipARbGqQqMEulE6QCpONrB7KeW7B8JMFyOMEqHu72WNzY/QZ9mhcScbZfRqlA366Ajn8LsI=

h0sw98TeJ9N2z6b0tGWEmNISvqjmQIziglSaIV2idawQLbHAN8plQEvSaJkLjEYCSRskCYm9lia=

IDNmDlTM8niZMw+NY+SY/99uzj4omFFMkII3CGpMSv1ZuzgJyJ0moLpDQXVvbZmwMMlmBI063Y1=

/miEws8yRtn9FIjpG41mEmaIT1R0CipLeBqR6o7hxTxhRH8pc0g5qkdkimRkwo5ggRETwBkIyLo=

p4GpRslOsuN30oaMu5QXTTynSQCVKS9eaftipoToLZmQEzzDH//4R3Mq3H4X0F4P8ABwZVfDU9S=

DoAAAAASUVORK5CYII=3D" height=3D"65" alt=3D"=0A Information regarding your=

payment from Amazon Prime=0A">
=0A

ffffff; text-align:center; padding-bottom:52px">=0A =


=3D"padding-top:32px; width:100%; border-top:1px solid #e5e5e5">
=0A=


>=0A =0A =

=0A =0A =

=0A =0A=

=0A =

=0A =

=0A
=0A =

=0A =

=0A =

=0A
id=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"fo=

nt-family:CircularStd,Arial; font-size:16px; line-height:1.5; letter-spacin=

g:0.2px; color:#171731; text-align:left">=0A =


ng-bottom:32px; font-size:18px; color:#00405D">=0A =

=0A =

=0A
d>=0A =0A =

=0A =

=0A =
=0A =


align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,Arial=

; font-size:17px; font-weight:bold; line-height:1.67; letter-spacing:0.38px=

; color:#13126c; text-align:left; margin:0">Your Prime benefits are on hold=

due to a billing issue

=0A =


:12px; font-family:CircularStd,Arial; font-size:15px; font-weight:bold; lin=

e-height:1.67; letter-spacing:0.38px; color:#13126c; text-align:left; margi=

n:0">Hello,

=0A

ass=3D"x_email-paragraph" style=3D"margin-bottom:24px">We're unable to char=

ge your payment method for $14.99 and any applicable taxes for your next 1 =

month of Prime. Your Prime benefits are currently on hold.
=0A =

ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">=0A

s=3D"x_email-paragraph" style=3D"margin-bottom:24px">If you don't update yo=

ur payment method in the next 6 days, your membership may be canceled. To r=

estore access to your benefits, please update your payment information.
iv>=0A
=0A =

=0A
resentation" align=3D"left" style=3D"width:100%; max-width:303px">=0A
>=0A =0A =0A=

=0A=0A =0A =


ogle.com/drawings/d/1Fkgnyp6b0pIF1z0QNUNO6VdXZ0kPuDSIok2Ii8Z2ce4/preview?Zt=

IPs" target=3D"_blank" rel=3D"noopener noreferrer" data-auth=3D"NotApplicab=

le" id=3D"x_bill_view_link" data-linkindex=3D"0">=0A

tn x_btn-primary" bgcolor=3D"#3667e9" style=3D"padding-top:10px; padding-bo=

ttom:10px; padding-left:30px; padding-right:30px; letter-spacing:0.8px; lin=

e-height:1; border-radius:12px; border-width:1px; border-color:transparent;=

font-family:CircularStd,Arial; font-size:14px; font-weight:bold; backgroun=

d-color:#FFD916; color:#000000">Update Information
=0A

=3D"x_message_body" class=3D"x_email-content" align=3D"left" style=3D"font-=

family:CircularStd,Arial; font-size:16px; line-height:2; letter-spacing:0.2=

px; color:#171731; text-align:left">=0A =



">Sincerly,
Amazon Prime Team=0A =

=0A =

yle=3D"font-family:CircularStd,Arial; font-size:16px; line-height:0.5; lett=

er-spacing:0.2px; color:#171731; text-align:left">=0A =


bottom:24px">
=0A =

=0A
=0A
tion" width=3D"100%" class=3D"x_responsive-padding-x" style=3D"background-c=

olor:#fafafa; padding-top:31px; padding-bottom:31px">=0A =

=0A =0A =

=0A =0A =

=0A

eft">=0A =0A =


om:16px; font-family:CircularStd,Arial; font-size:12px; line-height:24px; l=

etter-spacing:0.18px; color:#171731">=C2=A9 Amazon.com, Inc. or its affilia=

tes. All rights reserved. Amazon, Amazon.com, Prime, the Amazon.com logo an=

d 1-Click are registered trademarks of Amazon.com, Inc. or its affiliates. =

=0A

-help-link" style=3D"font-family:CircularStd,Arial; font-size:16px; font-we=

ight:500; line-height:19px; letter-spacing:0.6px; color:#171731">=0A =


rgin-top:16px; margin-bottom:8px; font-family:CircularStd,Arial; font-size:=

12px; font-weight:500; line-height:19px; letter-spacing:0.6px; color:#17173=

1"> Amazon.com, 410 Terry Avenue N., Seattle, WA 98109-5210.

=0A=0A =

=0A =

=0A =

=0A =

=0A =


=3D"table1footer2" style=3D"border-spacing:0">=0A =

=0A =0A

Mon Tue Wed Thu Fri Sat Sun
← Back August '26 Forward →
          1 2
3 4 5 6 7 8 9
10 11 12 13 14 15 16
17 18 19 20 21 22 23
24 25 26 27 28 29 30
31            

Archives

Categories

Syndicate This Blog

  • XML

Blog Administration

Open login screen

Powered by

NetKnow Navigation

Home


VPNs


Dialup Service


Web Design


Web Hosting


E-Commerce


Server Colocation


Domain Registration


Web Mail


Support


Testimonials




Client List


FAQs


Interested in NetKnow Services?


Links


Disclaimer


Acceptable Use


Security





Technorati Profile







AddThis Feed Button

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Error

serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

addthis





AddThis Social Bookmark Button









Blog Grade for www.nk.ca/blog

Empire Avenue





Error

serendipity error: could not include serendipity_plugin_freetag:6c39baf097de002d8b1c2e33b9661474 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:f520e0fa688ba61bd1ed85c0fd80d550 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:b18e142d4998b6b0092d068ad858683d - exiting.

Syndicate This Blog

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

Error

serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.