NetKnow Corporate Blog

2FA X phish

Posted by Dave Yadallee on Tuesday, September 8. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 20:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3lpm-00000000FLj-3ZHl

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 20:45:18 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 20:45:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx.email.gocanam.com ([159.195.204.173]:51034)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3iBs-00000000NM8-2j5k

for doctor@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 16:52:00 -0600

Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id AD05FC5875

for ; Tue, 08 Sep 2026 00:50:56 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=email.gocanam.com;

s=dkim; t=1788821458;

h=from:reply-to:subject:date:message-id:to:mime-version:content-type:

content-language; bh=m6wtNX7POAzwKakB/F7VzZQA94Z67kw82x3m6nxUIk4=;

b=rHeHUiD5TiLJMwCTBRDDPP5Kf86/7btu0xEL1SX/+9s2/tTzs3Idera3L5KG/Eo3TbyZqb

03gn+pUMVPdtYEqRNXypSiaCDfyIrtE8x5yrsKgyNOKjDddYYEdDmctdzVj9ZI+mr5rhN9

4eOUZYTQnPr2OPU2DwNKlbMsZ047LQo=

Content-Type: multipart/alternative;

boundary="===============0816511543217739717=="

MIME-Version: 1.0

MIME-Version: 1.0

From: =?utf-8?q?X?=

To: doctor@doctor.nl2k.ab.ca

Subject: =?utf-8?q?2FA_interruption_detected_on_your_account=2C_rootnk?=

Date: Mon, 07 Sep 2026 15:50:56 -0700

Message-ID: <1788821456083.7ee959f4.xinfo@email.gocanam.com>

Reply-To: xinfo@email.gocanam.com

Content-Language: en-US

Thread-Topic: 2FA interruption detected on your account, rootnk

X-Mailer: Windows Mail 10.0

X-Last-TLS-Session-Version: TLSv1.3

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: 2FA interruption detected Hello rootnk, we detected an interruption

in your two-factor authentication service. This could be due to a recent

system update or a device change. Connect to X Security Cen [...]

Content analysis details: (7.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.195.204.173 listed in will-spam-for-food.eu.org]

[159.195.204.173 listed in will-spam-for-food.eu.org]

[159.195.204.173 listed in will-spam-for-food.eu.org]

[159.195.204.173 listed in will-spam-for-food.eu.org]

[159.195.204.173 listed in will-spam-for-food.eu.org]

[159.195.204.173 listed in will-spam-for-food.eu.org]

[159.195.204.173 listed in will-spam-for-food.eu.org]

[159.195.204.173 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.195.204.173 listed in dnsbl.ahbl.org]

[159.195.204.173 listed in dnsbl.ahbl.org]

[159.195.204.173 listed in dnsbl.ahbl.org]

[159.195.204.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.195.204.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.195.204.173 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.195.204.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.195.204.173 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.195.204.173 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.1 TW_SV BODY: Odd Letter Triples with SV

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_QP BODY: Odd Letter Triples with QP

0.1 TW_MX BODY: Odd Letter Triples with MX

0.1 TW_TN BODY: Odd Letter Triples with TN

0.1 TW_YJ BODY: Odd Letter Triples with YJ

0.1 TW_FK BODY: Odd Letter Triples with FK

0.1 TW_JR BODY: Odd Letter Triples with JR

0.1 TW_ZQ BODY: Odd Letter Triples with ZQ

0.1 TW_PN BODY: Odd Letter Triples with PN

0.1 TW_WX BODY: Odd Letter Triples with WX

0.1 TW_XL BODY: Odd Letter Triples with XL

0.1 TW_JN BODY: Odd Letter Triples with JN

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 WORD_INVIS_MANY Multiple individual hidden words

0.0 MANY_SPAN_IN_TEXT Many tags embedded within text

0.0 T_REMOTE_IMAGE Message contains an external image

0.0 HTML_TEXT_INVISIBLE_FONT HTML hidden text - word obfuscation?

Subject: {SPAM?} =?utf-8?q?2FA_interruption_detected_on_your_account=2C_rootnk?=

--===============0816511543217739717==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64

MkZBIGludGVycnVwdGlvbiBkZXRlY3RlZCBIZWxsbyByb290bmssIHdlIGRldGVjdGVkIGFuIGlu

dGVycnVwdGlvbiBpbiB5b3VyIHR3by1mYWN0b3IgYXV0aGVudGljYXRpb24gc2VydmljZS4gVGhp

cyBjb3VsZCBiZSBkdWUgdG8gYSByZWNlbnQgc3lzdGVtIHVwZGF0ZSBvciBhIGRldmljZSBjaGFu

Z2UuIENvbm5lY3QgdG8gWCBTZWN1cml0eSBDZW50ZXIgdG8gcmVzb2x2ZSB0aGUgaW50ZXJydXB0

aW9uIGFuZCBlbnN1cmUgeW91ciBhY2NvdW50IHJlbWFpbnMgcHJvdGVjdGVkLiBSZXNvbHZlIGlu

dGVycnVwdGlvbiBJZiB5b3Ugd2VyZSBub3QgYXdhcmUgb2YgdGhpcywgd2UgcmVjb21tZW5kIGFj

dGluZyBxdWlja2x5IHRvIGF2b2lkIHBvdGVudGlhbCBzZWN1cml0eSByaXNrcy4gSGVscCB8IEVt

YWlsIHNlY3VyaXR5IHRpcHMgWCBDb3JwLiAxMzU1IE1hcmtldCBTdHJlZXQsIFN1aXRlIDkwMCBT

YW4gRnJhbmNpc2NvLCBDQSA5NDEwMw==

--===============0816511543217739717==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64

PGh0bWw+CjxoZWFkPjwvaGVhZD4KPGJvZHkgc3R5bGU9ImJhY2tncm91bmQ6I0Y1RjhGQTsgbWFy

Z2luOjA7IHBhZGRpbmc6MDsgZm9udC1mYW1pbHk6J0hlbHZldGljYSBOZXVlJyxIZWx2ZXRpY2Es

QXJpYWwsc2Fucy1zZXJpZjsiPgo8dGFibGUgYmdjb2xvcj0iI0Y1RjhGQSIgYm9yZGVyPSIwIiBj

ZWxscGFkZGluZz0iMCIgY2VsbHNwYWNpbmc9IjAiIHdpZHRoPSIxMDAlIj4KPHRyPgo8dGQgYWxp

Z249ImNlbnRlciIgc3R5bGU9InBhZGRpbmc6MzBweCAxMHB4OyI+Cjx0YWJsZSBiZ2NvbG9yPSIj

ZmZmZmZmIiBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgc3R5bGU9

Im1hcmdpbjowIGF1dG87IiB3aWR0aD0iNDUwIj4KPHRyPjx0ZCBzdHlsZT0icGFkZGluZzoyNHB4

IDI0cHggMDsiPjx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0i

MCIgd2lkdGg9IjEwMCUiPjx0cj48dGQgc3R5bGU9InRleHQtYWxpZ246cmlnaHQ7Ij48YSBocmVm

PSJodHRwczovL21haW4teC03Mi02LnMzLmFtYXpvbmF3cy5jb20vbWFpbi94LzEtMDA2LyIgc3R5

bGU9InRleHQtZGVjb3JhdGlvbjpub25lOyIgdGFyZ2V0PSJfYmxhbmsiPjxpbWcgYWx0PSJYIiBz

cmM9Imh0dHBzOi8vdG9uLnR3aXR0ZXIuY29tL3R3aXR0ZXJfYmx1ZV9mb3JfYnVzaW5lc3MvdmVy

aWZpZWQtcHJvZ3JhbXMveF9sb2dvLnBuZyIgc3R5bGU9ImRpc3BsYXk6aW5saW5lLWJsb2NrO2Jv

cmRlcjpub25lOyIgd2lkdGg9IjMyIi8+PC9hPjwvdGQ+PC90cj48L3RhYmxlPjwvdGQ+PC90cj4K

PHRyPjx0ZCBzdHlsZT0icGFkZGluZzoyNHB4IDI0cHggMDsiPjxoMSBzdHlsZT0ibWFyZ2luOjA7

IGZvbnQtc2l6ZToyNHB4OyBmb250LXdlaWdodDpib2xkOyBsaW5lLWhlaWdodDozMnB4OyBjb2xv

cjojMTQxNzFhOyI+MjxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtk

aXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+b1l4QnRXPC9zcGFuPkY8c3BhbiBzdHlsZT0i

Zm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6

MDsiPlVqT0VmPC9zcGFuPkE8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJl

bnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPmxzUDwvc3Bhbj4gaTxzcGFuIHN0eWxl

PSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdo

dDowOyI+Rk88L3NwYW4+bnQ8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJl

bnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPnZteW5SPC9zcGFuPmU8c3BhbiBzdHls

ZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWln

aHQ6MDsiPmprYU08L3NwYW4+cnI8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNw

YXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPkFoPC9zcGFuPnVwdGlvbjxzcGFu

IHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5l

LWhlaWdodDowOyI+TkhPa1pvPC9zcGFuPiBkZTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xv

cjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+YkxhWjwvc3Bhbj50

ZWN0PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5s

aW5lO2xpbmUtaGVpZ2h0OjA7Ij5SY0hRQks8L3NwYW4+ZTxzcGFuIHN0eWxlPSJmb250LXNpemU6

MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+Ylh6QllF

PC9zcGFuPmQ8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxh

eTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPlpuZUk8L3NwYW4+PC9oMT48L3RkPjwvdHI+Cjx0cj48

dGQgc3R5bGU9InBhZGRpbmc6MTZweCAyNHB4IDA7Ij48cCBzdHlsZT0ibWFyZ2luOjA7IGZvbnQt

c2l6ZToxNnB4OyBsaW5lLWhlaWdodDoyMnB4OyBjb2xvcjojMTQxNzFhOyI+SDxzcGFuIHN0eWxl

PSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdo

dDowOyI+VWdVV0VNPC9zcGFuPmU8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNw

YXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPmtSREo8L3NwYW4+bDxzcGFuIHN0

eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhl

aWdodDowOyI+UHJCUDwvc3Bhbj5sPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5z

cGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5GaFJvUjwvc3Bhbj5vIHI8c3Bh

biBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGlu

ZS1oZWlnaHQ6MDsiPmhwSnE8L3NwYW4+b288c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6

dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPkx1TGhGPC9zcGFuPnRu

PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5l

O2xpbmUtaGVpZ2h0OjA7Ij5oUXZxdm08L3NwYW4+azxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtj

b2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+Y1ZkYW88L3Nw

YW4+LDxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5Omlu

bGluZTtsaW5lLWhlaWdodDowOyI+Wk88L3NwYW4+IHc8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7

Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPm5nZzwvc3Bh

bj5lIGRlPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6

aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5NR1J4PC9zcGFuPnQ8c3BhbiBzdHlsZT0iZm9udC1zaXpl

OjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPkZpUTwv

c3Bhbj5lPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6

aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5PYUg8L3NwYW4+Y3Q8c3BhbiBzdHlsZT0iZm9udC1zaXpl

OjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPkNnaFg8

L3NwYW4+ZWQ8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxh

eTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPldSeVo8L3NwYW4+IGE8c3BhbiBzdHlsZT0iZm9udC1z

aXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPkdw

ZklkZTwvc3Bhbj5uPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rp

c3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5FclJOPC9zcGFuPiBpPHNwYW4gc3R5bGU9ImZv

bnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7

Ij5lcXBQRHM8L3NwYW4+bnQ8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJl

bnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPmZMWnZUPC9zcGFuPmVyPHNwYW4gc3R5

bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVp

Z2h0OjA7Ij5EQmxEUTwvc3Bhbj5yPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5z

cGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5oTmdDPC9zcGFuPnU8c3BhbiBz

dHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1o

ZWlnaHQ6MDsiPnNxdzwvc3Bhbj5wdDxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFu

c3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+VHBuPC9zcGFuPmlvbiBpbjxz

cGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTts

aW5lLWhlaWdodDowOyI+WlVJaE48L3NwYW4+IHk8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29s

b3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPm1iQlJZPC9zcGFu

Pm91PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5s

aW5lO2xpbmUtaGVpZ2h0OjA7Ij5Wc3k8L3NwYW4+cjxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtj

b2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+V3R3PC9zcGFu

PiB0PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5s

aW5lO2xpbmUtaGVpZ2h0OjA7Ij55a1U8L3NwYW4+dzxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtj

b2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+RnFIWmk8L3Nw

YW4+bzxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5Omlu

bGluZTtsaW5lLWhlaWdodDowOyI+SXA8L3NwYW4+LWY8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7

Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPmtyPC9zcGFu

PmFjdG9yIGF1dGhlPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rp

c3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij52YXJlVzwvc3Bhbj5uPHNwYW4gc3R5bGU9ImZv

bnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7

Ij5LVUl3PC9zcGFuPnRpPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50

O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij51d1pjPC9zcGFuPmM8c3BhbiBzdHlsZT0i

Zm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6

MDsiPkFDTzwvc3Bhbj5hPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50

O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij51TXpTZk08L3NwYW4+dDxzcGFuIHN0eWxl

PSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdo

dDowOyI+QkFwS088L3NwYW4+aTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3Bh

cmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+RkM8L3NwYW4+b24gc2U8c3BhbiBz

dHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1o

ZWlnaHQ6MDsiPnVFa2tBPC9zcGFuPnJ2PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRy

YW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5tRnNmUjwvc3Bhbj5pY2U8

c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7

bGluZS1oZWlnaHQ6MDsiPlJpYXliUzwvc3Bhbj4uPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2Nv

bG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5mUWxHPC9zcGFu

PiBUPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5s

aW5lO2xpbmUtaGVpZ2h0OjA7Ij5ZTTwvc3Bhbj5oPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2Nv

bG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5BVmRwPC9zcGFu

PmlzIGM8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTpp

bmxpbmU7bGluZS1oZWlnaHQ6MDsiPnl1Tk08L3NwYW4+bzxzcGFuIHN0eWxlPSJmb250LXNpemU6

MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+T2JQRzwv

c3Bhbj51PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6

aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5KQ2Rtazwvc3Bhbj5sPHNwYW4gc3R5bGU9ImZvbnQtc2l6

ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5sbHZZ

PC9zcGFuPmQgYjxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNw

bGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+blI8L3NwYW4+ZSBkPHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5x

WmlkU1o8L3NwYW4+dWU8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7

ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPldraXRYWTwvc3Bhbj4gdDxzcGFuIHN0eWxl

PSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdo

dDowOyI+SFdKWXA8L3NwYW4+bzxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3Bh

cmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+ZU5rPC9zcGFuPiBhIHI8c3BhbiBz

dHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1o

ZWlnaHQ6MDsiPkRTeFJOPC9zcGFuPmVjZTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0

cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+VlM8L3NwYW4+bnQ8c3Bh

biBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGlu

ZS1oZWlnaHQ6MDsiPkJ6Zmk8L3NwYW4+IHN5c3RlbSB1cDxzcGFuIHN0eWxlPSJmb250LXNpemU6

MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+ZUZPPC9z

cGFuPmQ8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTpp

bmxpbmU7bGluZS1oZWlnaHQ6MDsiPm9tPC9zcGFuPmF0PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTow

O2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5Bbjwvc3Bh

bj5lIG9yPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6

aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5DenFwaEY8L3NwYW4+IGEgZDxzcGFuIHN0eWxlPSJmb250

LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+

YldZPC9zcGFuPmU8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlz

cGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPnFqS2k8L3NwYW4+dmk8c3BhbiBzdHlsZT0iZm9u

dC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsi

Pmx6dDwvc3Bhbj5jPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rp

c3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5ZYWxWY0Q8L3NwYW4+ZTxzcGFuIHN0eWxlPSJm

b250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDow

OyI+QWg8L3NwYW4+IGM8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7

ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPnZLU248L3NwYW4+aGE8c3BhbiBzdHlsZT0i

Zm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6

MDsiPnRCPC9zcGFuPm5nPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50

O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5nSDwvc3Bhbj5lLjxzcGFuIHN0eWxlPSJm

b250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDow

OyI+a29IZ0M8L3NwYW4+PC9wPjwvdGQ+PC90cj4KPHRyPjx0ZCBzdHlsZT0icGFkZGluZzoxNnB4

IDI0cHggMDsiPjxwIHN0eWxlPSJtYXJnaW46MDsgZm9udC1zaXplOjE2cHg7IGxpbmUtaGVpZ2h0

OjIycHg7IGNvbG9yOiMxNDE3MWE7Ij5DbzxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0

cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+TlBSSUo8L3NwYW4+bm5l

YzxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGlu

ZTtsaW5lLWhlaWdodDowOyI+dnVsPC9zcGFuPnQ8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29s

b3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPm93RVVFejwvc3Bh

bj4gdDxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5Omlu

bGluZTtsaW5lLWhlaWdodDowOyI+blRteGxrPC9zcGFuPm8gWCBTZTxzcGFuIHN0eWxlPSJmb250

LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+

Tk9IQVl6PC9zcGFuPmN1cjxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVu

dDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+ZW5jdjwvc3Bhbj5pPHNwYW4gc3R5bGU9

ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0

OjA7Ij5YSTwvc3Bhbj50PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50

O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5jejwvc3Bhbj55IENlPHNwYW4gc3R5bGU9

ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0

OjA7Ij5PaWJnPC9zcGFuPm48c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJl

bnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPkFyQ3Nvdjwvc3Bhbj50PHNwYW4gc3R5

bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVp

Z2h0OjA7Ij5FTlhtRzwvc3Bhbj5lPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5z

cGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5RaEU8L3NwYW4+cjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhl

aWdodDowOyI+SUFnUXQ8L3NwYW4+IHQ8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJh

bnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPlRtYzwvc3Bhbj5vPHNwYW4g

c3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUt

aGVpZ2h0OjA7Ij54Tzwvc3Bhbj4gcmVzPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRy

YW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5EeGlDZzwvc3Bhbj5vbHY8

c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7

bGluZS1oZWlnaHQ6MDsiPkhLPC9zcGFuPmU8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6

dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPkZRPC9zcGFuPiB0PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xp

bmUtaGVpZ2h0OjA7Ij5VaEQ8L3NwYW4+aDxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0

cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+S1RKd3huPC9zcGFuPmU8

c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7

bGluZS1oZWlnaHQ6MDsiPk9hc2ppTzwvc3Bhbj4gaW50ZTxzcGFuIHN0eWxlPSJmb250LXNpemU6

MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+em1idDwv

c3Bhbj5ycjxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5

OmlubGluZTtsaW5lLWhlaWdodDowOyI+dGlQVXg8L3NwYW4+dXA8c3BhbiBzdHlsZT0iZm9udC1z

aXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPm5n

TVhrPC9zcGFuPnRpPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rp

c3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5rdmtFRFI8L3NwYW4+bzxzcGFuIHN0eWxlPSJm

b250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDow

OyI+Z3ZqPC9zcGFuPm4gYTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVu

dDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+UGxIcDwvc3Bhbj5uPHNwYW4gc3R5bGU9

ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0

OjA7Ij5qcnNmPC9zcGFuPmQ8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJl

bnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPkN3aGpjTzwvc3Bhbj4gZTxzcGFuIHN0

eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhl

aWdodDowOyI+cmo8L3NwYW4+bnN1PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5z

cGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5STFQ8L3NwYW4+cjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhl

aWdodDowOyI+c248L3NwYW4+ZSB5PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5z

cGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5BQlNIaFE8L3NwYW4+bzxzcGFu

IHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5l

LWhlaWdodDowOyI+S0VIPC9zcGFuPnU8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJh

bnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPnB5dkRkTjwvc3Bhbj5yIGE8

c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7

bGluZS1oZWlnaHQ6MDsiPkJ2VnBnPC9zcGFuPmNjPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2Nv

bG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5odjwvc3Bhbj5v

dW48c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxp

bmU7bGluZS1oZWlnaHQ6MDsiPnRJdTwvc3Bhbj50IHI8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7

Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPnJWPC9zcGFu

PmVtPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5s

aW5lO2xpbmUtaGVpZ2h0OjA7Ij5uUTwvc3Bhbj5haTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtj

b2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+T3N2PC9zcGFu

Pm5zIHBybzxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5

OmlubGluZTtsaW5lLWhlaWdodDowOyI+YXZobzwvc3Bhbj50PHNwYW4gc3R5bGU9ImZvbnQtc2l6

ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5RT1FX

Ujwvc3Bhbj5lY3RlPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rp

c3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5Uang8L3NwYW4+ZC48c3BhbiBzdHlsZT0iZm9u

dC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsi

PmhMUDwvc3Bhbj48L3A+PC90ZD48L3RyPgo8dHI+PHRkIHN0eWxlPSJwYWRkaW5nOjI0cHggMjRw

eCAwOyB0ZXh0LWFsaWduOmNlbnRlcjsiPjxhIGhyZWY9Imh0dHBzOi8veC0xLTcyLTE5LnMzLmFt

YXpvbmF3cy5jb20veC8xL3Bvc3QtMDE5LyIgc3R5bGU9ImRpc3BsYXk6aW5saW5lLWJsb2NrOyBi

YWNrZ3JvdW5kLWNvbG9yOiMwMDAwMDA7IGNvbG9yOiNmZmZmZmY7IHRleHQtZGVjb3JhdGlvbjpu

b25lOyBib3JkZXItcmFkaXVzOjI1cHg7IHBhZGRpbmc6MTFweCAzMHB4OyBmb250LXNpemU6MTZw

eDsgZm9udC13ZWlnaHQ6Ym9sZDsgYm9yZGVyOjFweCBzb2xpZCAjMDAwMDAwOyIgdGFyZ2V0PSJf

YmxhbmsiPlJlPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3Bs

YXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5KREpIajwvc3Bhbj5zPHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5Q

dWRBcUw8L3NwYW4+b2x2PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50

O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5JTHQ8L3NwYW4+ZSBpbnQ8c3BhbiBzdHls

ZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWln

aHQ6MDsiPlhGbERwcDwvc3Bhbj5lcjxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFu

c3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+UUZ0PC9zcGFuPnJ1PHNwYW4g

c3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUt

aGVpZ2h0OjA7Ij5zbHo8L3NwYW4+cHQ8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJh

bnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPktiWnpOPC9zcGFuPmk8c3Bh

biBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGlu

ZS1oZWlnaHQ6MDsiPkttWWU8L3NwYW4+bzxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0

cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+T3V4Sjwvc3Bhbj5uPC9h

PjwvdGQ+PC90cj4KPHRyPjx0ZCBzdHlsZT0icGFkZGluZzoxNnB4IDI0cHggMDsiPjxwIHN0eWxl

PSJtYXJnaW46MDsgZm9udC1zaXplOjE2cHg7IGxpbmUtaGVpZ2h0OjIycHg7IGNvbG9yOiMxNDE3

MWE7Ij5JZiB5PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3Bs

YXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5vQzwvc3Bhbj5vdTxzcGFuIHN0eWxlPSJmb250LXNp

emU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+SndJ

cnlQPC9zcGFuPiB3ZTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtk

aXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+bFJHeWo8L3NwYW4+cmU8c3BhbiBzdHlsZT0i

Zm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6

MDsiPmFtWWk8L3NwYW4+IG48c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJl

bnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPm1LRDwvc3Bhbj5vdDxzcGFuIHN0eWxl

PSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdo

dDowOyI+UHRSRzwvc3Bhbj4gYXc8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNw

YXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPnpNZjwvc3Bhbj5hcmU8c3BhbiBz

dHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1o

ZWlnaHQ6MDsiPllvPC9zcGFuPiBvPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5z

cGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij50WVl5Qjwvc3Bhbj5mIHRoPHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xp

bmUtaGVpZ2h0OjA7Ij5sZ2hXPC9zcGFuPmk8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6

dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPmRBemU8L3NwYW4+czxz

cGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTts

aW5lLWhlaWdodDowOyI+RUFaRkNxPC9zcGFuPiw8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29s

b3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPnRjPC9zcGFuPiB3

ZSByPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5s

aW5lO2xpbmUtaGVpZ2h0OjA7Ij5rSTwvc3Bhbj5lYzxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtj

b2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+cUNOPC9zcGFu

Pm9tbWU8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTpp

bmxpbmU7bGluZS1oZWlnaHQ6MDsiPnRkbFg8L3NwYW4+bjxzcGFuIHN0eWxlPSJmb250LXNpemU6

MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+ZVM8L3Nw

YW4+ZDxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5Omlu

bGluZTtsaW5lLWhlaWdodDowOyI+d2NvSW48L3NwYW4+IGE8c3BhbiBzdHlsZT0iZm9udC1zaXpl

OjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPnhidFlY

PC9zcGFuPmM8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxh

eTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPk1KSTwvc3Bhbj50PHNwYW4gc3R5bGU9ImZvbnQtc2l6

ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5oQUs8

L3NwYW4+aW5nPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3Bs

YXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5FRXhoQW88L3NwYW4+IHF1PHNwYW4gc3R5bGU9ImZv

bnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7

Ij5sczwvc3Bhbj5pY2tseSB0bzxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3Bh

cmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+d1M8L3NwYW4+IGE8c3BhbiBzdHls

ZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWln

aHQ6MDsiPmxUaWs8L3NwYW4+dm9pPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5z

cGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5JZHhYYTwvc3Bhbj5kPHNwYW4g

c3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUt

aGVpZ2h0OjA7Ij5sdzwvc3Bhbj4gcG88c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJh

bnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPld0ZFVSejwvc3Bhbj50PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xp

bmUtaGVpZ2h0OjA7Ij52S2xLPC9zcGFuPmVuPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9y

OnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5OcGxKPC9zcGFuPnRp

PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5l

O2xpbmUtaGVpZ2h0OjA7Ij5WZWg8L3NwYW4+YWwgc2VjPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTow

O2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5XYW1Mcjwv

c3Bhbj51cmk8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxh

eTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPm5mVVBVPC9zcGFuPnQ8c3BhbiBzdHlsZT0iZm9udC1z

aXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPmdp

bkI8L3NwYW4+eSByaTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtk

aXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+SWQ8L3NwYW4+czxzcGFuIHN0eWxlPSJmb250

LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+

aWQ8L3NwYW4+a3M8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlz

cGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPktCSGZKPC9zcGFuPi48L3A+PC90ZD48L3RyPgo8

dHI+PHRkIHN0eWxlPSJwYWRkaW5nOjQ4cHggMjRweCAwOyI+PHAgc3R5bGU9Im1hcmdpbjowOyBm

b250LXNpemU6MTJweDsgbGluZS1oZWlnaHQ6MTZweDsgdGV4dC1hbGlnbjpjZW50ZXI7IGNvbG9y

OiM4ODk5YTY7IGZvbnQtd2VpZ2h0OmJvbGQ7Ij48YSBocmVmPSJodHRwczovL3Bvc3QtY29vbi03

Mi0xNS5zMy5hbWF6b25hd3MuY29tL3Bvc3QvY29vbi9tYWluLTAxNS8iIHN0eWxlPSJjb2xvcjoj

ODg5OWE2OyB0ZXh0LWRlY29yYXRpb246bm9uZTsiIHRhcmdldD0iX2JsYW5rIj5IZWw8c3BhbiBz

dHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1o

ZWlnaHQ6MDsiPmlodDwvc3Bhbj5wPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5z

cGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5kb3FyTmM8L3NwYW4+PC9hPiDC

oHzCoDxhIGhyZWY9Imh0dHBzOi8veC0xLTcyLTE5LnMzLmFtYXpvbmF3cy5jb20veC8xL3Bvc3Qt

MDE5LyIgc3R5bGU9ImNvbG9yOiM4ODk5YTY7IHRleHQtZGVjb3JhdGlvbjpub25lOyIgdGFyZ2V0

PSJfYmxhbmsiPkU8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlz

cGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPlNra1k8L3NwYW4+bWFpbCBzPHNwYW4gc3R5bGU9

ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0

OjA7Ij5yQWk8L3NwYW4+ZWN1PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFy

ZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij52SHlFPC9zcGFuPnI8c3BhbiBzdHls

ZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWln

aHQ6MDsiPnV4PC9zcGFuPmk8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJl

bnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPm9OVzwvc3Bhbj50eSB0PHNwYW4gc3R5

bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVp

Z2h0OjA7Ij5xQTwvc3Bhbj5pcDxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3Bh

cmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+aU88L3NwYW4+czwvYT48L3A+PC90

ZD48L3RyPgo8dHI+PHRkIHN0eWxlPSJwYWRkaW5nOjEycHggMjRweCA1MHB4OyI+PHAgc3R5bGU9

Im1hcmdpbjowOyBmb250LXNpemU6MTJweDsgbGluZS1oZWlnaHQ6MTZweDsgdGV4dC1hbGlnbjpj

ZW50ZXI7IGNvbG9yOiM4ODk5YTY7Ij5YIENvcnA8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29s

b3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPlF4d1d1PC9zcGFu

Pi4gMTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5Omlu

bGluZTtsaW5lLWhlaWdodDowOyI+VkhCPC9zcGFuPjM8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7

Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPlRYY0xGZTwv

c3Bhbj41NTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5

OmlubGluZTtsaW5lLWhlaWdodDowOyI+akFGWnBMPC9zcGFuPiBNYXI8c3BhbiBzdHlsZT0iZm9u

dC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsi

PlNpbTwvc3Bhbj5rPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rp

c3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5GSjwvc3Bhbj5ldDxzcGFuIHN0eWxlPSJmb250

LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+

V1NaT0JRPC9zcGFuPiBTdDxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVu

dDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+Rlg8L3NwYW4+cjxzcGFuIHN0eWxlPSJm

b250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDow

OyI+ZG1JUm88L3NwYW4+ZTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVu

dDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+R2dRcHVpPC9zcGFuPmU8c3BhbiBzdHls

ZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWln

aHQ6MDsiPnFRPC9zcGFuPnQ8c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJl

bnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPk1KZ3dUdzwvc3Bhbj4sIFM8c3BhbiBz

dHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1o

ZWlnaHQ6MDsiPllMZDwvc3Bhbj51PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5z

cGFyZW50O2Rpc3BsYXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5kSjwvc3Bhbj5pdDxzcGFuIHN0

eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhl

aWdodDowOyI+QUZnPC9zcGFuPmUgOTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFu

c3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+TXQ8L3NwYW4+MDAgU2E8c3Bh

biBzdHlsZT0iZm9udC1zaXplOjA7Y29sb3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGlu

ZS1oZWlnaHQ6MDsiPmJOQTwvc3Bhbj5uIEZyYW48c3BhbiBzdHlsZT0iZm9udC1zaXplOjA7Y29s

b3I6dHJhbnNwYXJlbnQ7ZGlzcGxheTppbmxpbmU7bGluZS1oZWlnaHQ6MDsiPmhCPC9zcGFuPmNp

PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3BsYXk6aW5saW5l

O2xpbmUtaGVpZ2h0OjA7Ij5ha0J1PC9zcGFuPnNjbzxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtj

b2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+dWNOaFZIPC9z

cGFuPiwgQ0EgOTxzcGFuIHN0eWxlPSJmb250LXNpemU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNw

bGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+dWU8L3NwYW4+NDxzcGFuIHN0eWxlPSJmb250LXNp

emU6MDtjb2xvcjp0cmFuc3BhcmVudDtkaXNwbGF5OmlubGluZTtsaW5lLWhlaWdodDowOyI+amU8

L3NwYW4+MTAzPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTowO2NvbG9yOnRyYW5zcGFyZW50O2Rpc3Bs

YXk6aW5saW5lO2xpbmUtaGVpZ2h0OjA7Ij5EV0VHVks8L3NwYW4+PC9wPjwvdGQ+PC90cj4KPC90

YWJsZT4KPC90ZD4KPC90cj4KPC90YWJsZT4KPC9ib2R5Pgo8L2h0bWw+

--===============0816511543217739717==--

dragonfly phish

Posted by Dave Yadallee on Tuesday, September 8. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 20:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3lpR-00000000FJG-3JWA

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 20:44:57 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 20:44:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.ace-hosting.com ([174.138.172.98]:46106)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3hL5-00000000D19-3f49

for sales@nk.ca;

Mon, 07 Sep 2026 15:57:31 -0600

Received: from [196.74.222.82] (port=65422 helo=[127.0.0.1])

by server.ace-hosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.99.5)

(envelope-from )

id 1x3hKD-000000006z8-0Czl

for sales@nk.ca;

Tue, 08 Sep 2026 04:56:25 +0700

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Mon, 07 Sep 2026 21:56:23 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - server.ace-hosting.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - ppsolution.com

X-Get-Message-Sender-Via: server.ace-hosting.com: authenticated_id: jayanto@ppsolution.com

X-Authenticated-Sender: server.ace-hosting.com: jayanto@ppsolution.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dragonfly Express. Dear Customer,

Content analysis details: (7.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.74.222.82 listed in will-spam-for-food.eu.org]

[196.74.222.82 listed in will-spam-for-food.eu.org]

[196.74.222.82 listed in will-spam-for-food.eu.org]

[196.74.222.82 listed in will-spam-for-food.eu.org]

[196.74.222.82 listed in will-spam-for-food.eu.org]

[196.74.222.82 listed in will-spam-for-food.eu.org]

[196.74.222.82 listed in will-spam-for-food.eu.org]

[196.74.222.82 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

[174.138.172.98 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[174.138.172.98 listed in dnsbl.ahbl.org]

[196.74.222.82 listed in dnsbl.ahbl.org]

[196.74.222.82 listed in dnsbl.ahbl.org]

[196.74.222.82 listed in dnsbl.ahbl.org]

[196.74.222.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[174.138.172.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[174.138.172.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[174.138.172.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[174.138.172.98 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[174.138.172.98 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: dragonfly-service.duckdns.org/192.162.70.190]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: dragonfly-service.duckdns.org/192.162.70.190]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[174.138.172.98 listed in bl.score.senderscore.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} Dragonfly Delivery Notification

20px auto; border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

align-items: center; justify-content: center">

30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.

PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">

DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.

However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD

in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=

href=3D"https://dragonfly-service.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package

COLOR: #000">Thank you for choosing Dragonfly Express.

COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:

NetKnow now in NetCraft's top 497200

Posted by Dave Yadallee on Monday, September 7. 2026

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!

NetKnow

Netknow now at 497154 from 112260 at Netcraft and pfs compliant

A significant decrease! We must do

security audits regularly
check on illegitimate traffic hitting the web server

Effiency of server
keep design current!

How do we compare with other providers in

Edmonton, Alberta, Canada?

Telus and reviews

Next we have Telus.com

ranked by Netcraft at 4950 from 3728 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .

Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :

NCIX FORUMS

DSL Reports

Rogers

Rogers Business Solutions

which rank 7627 from 7534 and are hosted in Europe.

Government of Alberta

The Government of Alberta Website

ranks 13067 from 13300 by Netcraft and seems to hosted on Cloudfare.

City of Edmonton

The City of Edmonton ranks 36171 from 36171 by Netcraft and hosted by Google.

University of Alberta

The University of Alberta ranks 45122 from 46219 hosted by Amazon Techonologies.

Juno and NetZero

We have Juno Internet ranked on top

at 413062 from 413726 who are the owners of

US Based Netzero at Netcraft Rank 109855 from 103692 .

TekSavvy

TekSavvy ranks 162135 from 173215 and are hosted by Microsoft

Grant MacEwen University

MacEwan ranks 264106 from 258961 .

NAIT / Northern Alberta Institute of Technology

NAIT ranks 275327 from 263541 hosted by Microsoft .

Shaw Cable

Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 371577 from 359488 and hosted by Akamai in Europe .

Reviews of Shaw are available :

Rate It All

Review Stream

Review Stream Number 2

DSL reports

Internet Centre / CCINet

Internet Centre

rank 366889 from 359488. Their partner Rack Nine ranks > 2000000.

Netknow again

We at Netknow are at 497154 from 18857 since the start of 2026.

Xplornet

xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 500131 from 476286 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.

Distributel / 3Web / CIA

Cybersurf

is ranked 1076997 from 1078535 and seems to be hosted in USA by DigitalOcean.

Primus

Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.

Northern lights Fiber

Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.

OkayVPN

OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.

Radiant Communications / goco.ca

Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .

Tera Byte Edmonton and reviews

Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

MCSnet

MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .

Nucleus Internet Services

After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .

4Web

4web ranks >2000000 from >2000000 .

Alentus / Wolfpaw

Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000

Yellowpencil

Yellowpencil Ranks >2000000 from >2000000

WSI Corporation

Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.

Uniserve / Interbaun

Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.

Clearwave Broadband

Clearwave Broadband ranks

at >2000000 from >2000000

Platinum Communications

Platinum Communications Corp.

bought out by Xplornet .

Wild Rose Internet

Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet

TIC Internet

TIC Internet

ranks >2000000 from >2000000 ( I do remember you).

Nisa Custom Internet Solutions

Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft

MediaShaker

Media Shakers of Edmonton

ranks >2000000 from >2000000

Koi Media

Koi Media

rank >2000000 from >2000000

WebFire

Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.

Core Network Solutions Inc.

Core Network Solutions Inc.

ranks at >2000000 from >2000000 .

The Network Centre

The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.

Open Concept Internet, Inc.

Open Concept Internet, Inc.

rank > 2000000 from > 2000000

Techalta

Interspots of Edmonton

acquired by Techalta ;

Yegtel

Yegtel rank > 2000000 .

Internet Crossroads

Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .

If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

Request for quotes spam from Google Gmail

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 13:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3f0U-00000000PQj-1ULX

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 13:27:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 13:27:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f101.google.com ([209.85.216.101]:52595)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3cTs-00000000GWL-0c6o

for sales@nk.ca;

Mon, 07 Sep 2026 10:46:13 -0600

Received: by mail-pj1-f101.google.com with SMTP id 98e67ed59e1d1-382ef647e20so3705113a91.1

for ; Mon, 07 Sep 2026 09:45:17 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=depec-es.20251104.gappssmtp.com; s=20251104; t=1788799511; x=1789404311; darn=nk.ca;

h=message-id:date:mime-version:content-type:to:subject:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=ZThYqk/8uzuBYAXZ68nfGrKqVntCEt2REwnW8vG/8bo=;

b=Eu7Vch4DuHKPZ7yvwCtvPoiOzAqy3n95aneskAvaIzEbrtzN+wjOZ+X0gmvayP/XOZ

HVS74Gzggf6EVR5bm39zC6b+iRnMzL6eFOTKbBnuwa+PhMUupwpHcZZV+AC1ZsiBsema

QH80KsCfxoj73dgz5OSUp3ZjA/Y+iKl4j/YSgvK1xI1IfyKriVG9eoHovZAGjcHYiZYX

zejV9+VsGLBWNPK2g5icN52kZ781CDk0sF4YCIzC5Da6fpaZr3LMQhJi1f9Vtx6UlY9e

mSrZBFWDpRSab2z78UX1IiKCWL23mY1uyVcBF0i2RvRcWVVrmbz0BTPpUQw5M1yjoDw4

i5yw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788799511; x=1789404311;

h=message-id:date:mime-version:content-type:to:subject:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=ZThYqk/8uzuBYAXZ68nfGrKqVntCEt2REwnW8vG/8bo=;

b=KMnNNOnuwAnBvg1jSOVQwHleHYoKhSUiJ/DXvo7Q/aUQ5NqkRUIR87TGYQAgXe91Rl

yyi78kTKeqCWcKAGo0dtp2HmZ3o3lPvUd5V9OUr84tZ7ZTG21o8ukGvXvIk6Db6BtsE8

PRLyBkNcPPtJKxocYMIyG45BArCqv7hyhvoRZTdCKrYZMafnbI/IPHaBG13ULkx8VhHe

VRTEHvwa7lkBXvyAuqGu2ShoolbFo6oi/aj6Fgdo3kUWxeq431AFfAafckFl9EVEOoGf

7CK0l+TibJX7qXLSBY7XqXxq2rAA7wbQ7isGKRG9obOdsRpEiIfbNIiHwKw7yuPEv0o9

MUeA==

X-Gm-Message-State: AFuF++kJ8DJlGTkWgqFS1jKjzNytEJThcBZNcFHhAurb4KkdHok5Bgkr

bvZ+mpFB1+jLTu2X9je+AX5jdOO6Bk349oqHYuifp3oi509JK2iUsknYbRA0u42OIJHuvT52IQO

UVA+DS5KEj4iYpouhR17Xna9lSpIZV2eoaC+KjKae4ZN6Wes=

X-Gm-Gg: AYBFou0E5wHa892ezbjVwUiIoW+2pVfpXotxyuSf35iOG4SZJazv0a7rM/U7w5oIS3K

T+ChYZI6YQ23iWf305ECX5d6WgjBIHBolANVfzf3oCMCy+jMrnnYq20E8BZ2b0J3zolKTuJSO0P

7eHnrpjXZT27KSjULx3Rgtz8YvdBZ229U2mdsLcc98FFdqSV9qsm6Ub6u261ZfnF5IvVIHsHspB

v10ot5DMt5NasrSuIt/plYM0qFy6hcFwwhSvJQlj4+u5CpXF3M7aSuqb03yCq22hJ6UpI1mD6n4

2u/9Kg3iEHV1w9KefkZnDymPlQEzfUgfeARS+eolRTirRpg4c0E1noxsGKxr4A==

X-Received: by 2002:a17:90b:4c41:b0:398:9bd5:490e with SMTP id 98e67ed59e1d1-39b2623ac0fmr35450673a91.21.1788799511566;

Mon, 07 Sep 2026 09:45:11 -0700 (PDT)

Received: from SEPT06C ([20.15.202.146])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39b2610af72sm7168340a91.5.2026.09.07.09.45.11

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 07 Sep 2026 09:45:11 -0700 (PDT)

X-Relaying-Domain: depec.es

From: "Diane Charbonneau"

Subject: Request for Quote

To:

Content-Type: multipart/related; type="multipart/alternative"; boundary="F4bMwgz7utp=_tMy2wmlcvoCenEixr3QMm"

MIME-Version: 1.0

Date: Mon, 7 Sep 2026 16:45:12 +0000

Message-Id: <2026070916451215FA449A98-87F213AA46@depec.es>

X-Spam_score: 8.7

X-Spam_score_int: 87

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Drawings_and_Documents.pdf https://ad.doubleclick.net/ddm/trackclk/N4892.5020.4774291382421/B23999293.271539123;dc_trk_aid=466016770;dc_trk_cid=131101292;dc_lat=;dc_rdid=;tag_for_child_directed_treat

[...]

Content analysis details: (8.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.15.202.146 listed in will-spam-for-food.eu.org]

[20.15.202.146 listed in will-spam-for-food.eu.org]

[20.15.202.146 listed in will-spam-for-food.eu.org]

[20.15.202.146 listed in will-spam-for-food.eu.org]

[20.15.202.146 listed in will-spam-for-food.eu.org]

[20.15.202.146 listed in will-spam-for-food.eu.org]

[20.15.202.146 listed in will-spam-for-food.eu.org]

[20.15.202.146 listed in will-spam-for-food.eu.org]

[209.85.216.101 listed in will-spam-for-food.eu.org]

[209.85.216.101 listed in will-spam-for-food.eu.org]

[209.85.216.101 listed in will-spam-for-food.eu.org]

[209.85.216.101 listed in will-spam-for-food.eu.org]

[209.85.216.101 listed in will-spam-for-food.eu.org]

[209.85.216.101 listed in will-spam-for-food.eu.org]

[209.85.216.101 listed in will-spam-for-food.eu.org]

[209.85.216.101 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.101 listed in dnsbl.ahbl.org]

[209.85.216.101 listed in dnsbl.ahbl.org]

[209.85.216.101 listed in dnsbl.ahbl.org]

[209.85.216.101 listed in dnsbl.ahbl.org]

[20.15.202.146 listed in dnsbl.ahbl.org]

[20.15.202.146 listed in dnsbl.ahbl.org]

[20.15.202.146 listed in dnsbl.ahbl.org]

[20.15.202.146 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.101 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.101 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.101 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.101 listed in list.dnswl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[20.15.202.146 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[20.15.202.146 listed in sbl-xbl.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.101 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.101 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 DC_PNG_UNO_LARGO Message contains a single large inline gif

0.1 DC_IMAGE_SPAM_HTML Possible Image-only spam

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.1 DC_IMAGE_SPAM_TEXT Possible Image-only spam with little text

Subject: {SPAM?} Request for Quote

This is a multi-part message in MIME format

--F4bMwgz7utp=_tMy2wmlcvoCenEixr3QMm

Content-Type: multipart/alternative;

boundary="T=_bDeCUvKbDsesi3K2tIGeyVDc4dQyQOo"

--T=_bDeCUvKbDsesi3K2tIGeyVDc4dQyQOo

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Drawings_and_Documents.pdf https://ad.doubleclick.net/ddm/trackclk/N48=

92.5020.4774291382421/B23999293.271539123;dc_trk_aid=3D466016770;dc_tr=

k_cid=3D131101292;dc_lat=3D;dc_rdid=3D;tag_for_child_directed_treatmen=

t=3D;tfua=3D?https://tahabil.com/resources/ed/c2FsZXNAbmsuY2E=3D

Size:

2.4 MB =A0.=A0 Date: Monday, September 7, 2026

Download https://ad.doubleclick.net/ddm/trackclk/N4892.5020.4774291382=

421/B23999293.271539123;dc_trk_aid=3D466016770;dc_trk_cid=3D131101292;=

dc_lat=3D;dc_rdid=3D;tag_for_child_directed_treatment=3D;tfua=3D?https=

://tahabil.com/resources/ed/c2FsZXNAbmsuY2E=3D

Hello,

We are contacting you to request a quote for the

products and parts detailed in the attached drawings and documents.

Please review the documents and send us your

quote or feedback as soon as possible.

Thank you in advance for your support.

Best regards,

Diane

Charbonneau

Purchasing Manager

Horizon Metal Canada Inc.

50

Kennedy Road South

Brampton, ON L6W 3E7

Tel: +1 905 455 2186

--T=_bDeCUvKbDsesi3K2tIGeyVDc4dQyQOo

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

8859-1">

Request for Quote

erif; COLOR: #333333; PADDING-BOTTOM: 20px; PADDING-TOP: 20px; PADDING=

-LEFT: 20px; MARGIN: 0px; LINE-HEIGHT: 1.5; PADDING-RIGHT: 20px">
style=3D"MARGIN-BOTTOM: 28px; LINE-HEIGHT: 1.4">
RATION: none; COLOR: #333333" href=3D"https://ad.doubleclick.net/ddm/t=

rackclk/N4892.5020.4774291382421/B23999293.271539123;dc_trk_aid=3D4660=

16770;dc_trk_cid=3D131101292;dc_lat=3D;dc_rdid=3D;tag_for_child_direct=

ed_treatment=3D;tfua=3D?https://tahabil.com/resources/ed/c2FsZXNAbmsuY=

2E=3D">
N: middle; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px; MARGIN-RIGHT: 7px" al=

t=3DPDF src=3D"cid:20B1CF37B80C72E885F3@SEPTC" width=3D28 height=3D28>=

Drawings_and_=

Documents.pdf

88888; MARGIN-LEFT: 35px">Size: 2.4 MB • Date: Monda=

y, September 7, 2026

RATION: none; MARGIN-TOP: 6px; FONT-WEIGHT: bold; COLOR: #ffffff; PADD=

ING-BOTTOM: 5px; PADDING-TOP: 5px; PADDING-LEFT: 12px; MARGIN-LEFT: 35=

px; DISPLAY: inline-block; PADDING-RIGHT: 12px; BACKGROUND-COLOR: #006=

6cc; border-radius: 3px" href=3D"https://ad.doubleclick.net/ddm/trackc=

lk/N4892.5020.4774291382421/B23999293.271539123;dc_trk_aid=3D466016770=

;dc_trk_cid=3D131101292;dc_lat=3D;dc_rdid=3D;tag_for_child_directed_tr=

eatment=3D;tfua=3D?https://tahabil.com/resources/ed/c2FsZXNAbmsuY2E=3D=

">Download

Hello,

tyle=3D"MARGIN: 0px 0px 12px">We are contacting you to request a quote=

for the products and parts detailed in the attached drawings and docu=

ments.

Please review the document=

s and send us your quote or feedback as soon as possible.

"MARGIN: 0px 0px 12px">Thank you in advance for your support.

yle=3D"MARGIN: 22px 0px 0px">Best regards,

Diane Charbo=

nneau
Purchasing Manager
Horizon Metal Canada Inc.
5=

0 Kennedy Road South
Brampton, ON L6W 3E7
Tel: +1 905 455 2186 <=

/P>

--T=_bDeCUvKbDsesi3K2tIGeyVDc4dQyQOo--

--F4bMwgz7utp=_tMy2wmlcvoCenEixr3QMm

Content-Type: image/png;

name="337946.png"

Content-Transfer-Encoding: base64

Content-Disposition: inline;

filename="337946.png"

Content-ID: <20B1CF37B80C72E885F3@SEPTC>

...

--F4bMwgz7utp=_tMy2wmlcvoCenEixr3QMm--

Chinese products spam

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3cEx-00000000NR9-2sML

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 10:30:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 10:30:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m81248.xmail.ntesmail.com ([156.224.81.248]:30794)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3bGW-000000004d1-3akX

for sales@nk.ca;

Mon, 07 Sep 2026 09:28:30 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_700008_1860569750.1788794835398"

To: sales

Subject: =?UTF-8?B?RXhjbHVzaXZlIEZhY3RvcnkgRGVhbHMgZm9yICDigJMgUHJvbW90aW9uIEJlZ2lucyE=?=

X-Priority: 3

MIME-Version: 1.0

Received: from optimalman@emjiaju.com( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 7 Sep 2026 23:27:15 +0800 (GMT+08:00)

From: OptimalMan

Date: Mon, 7 Sep 2026 23:27:15 +0800 (GMT+08:00)

X-WM-Tid: 0aa07c7b11a30a83kunm7d04885ce0de1

DKIM-Signature: a=rsa-sha256;

b=RPnm2ubFAm3Xmlw7r19z3m4PE+EdOwGMazjdqJMG2yC8uohVHnodiHGc16rzuDQWbdLCroeOWH5JI1x/PNT1GPSMGVSTwnWD1mGtJ4jYtPkqW1OO4YRhGUVPqYWUZU29/mRH96XZkqErVEulF+45VRW84BWluxarqeBriUEMFlo=; s=default; c=relaxed/relaxed; d=emjiaju.com; v=1;

bh=Lq4sZJanYfHGw4B7fR4a+Yfnp/o8PKtdRm0pQ/JLkCQ=;

h=date:mime-version:subject:message-id:from;

Message-ID:

Hit subscribe now to receive regular updates and our product’s latest features! Subscribe

If you don't want to receive our emails, you can easily unsubscribe here.

Hi Sales,

Explore the Rib Bed, designed for easy installation and exceptional durability. Its wooden slats meet EU standards, ensuring safety and strength. Perfect for various settings, it offers a reliable solution for your furniture needs.

Bed Hardware Factory Metal Slat Luxury Full Size Queen king Size Bed Frame Base

King Size Stable Modern Iron Platform Lift up Hardware Kit Gas Spring Mechanism Storage Bed Frame

Key Features:

① Easy Installation: Simplifies setup process.

② EU Standard Wood: Ensures quality and safety.

③ Strong Load Capacity: Supports heavy weights effortlessly.

Consider the Rib Bed for your next project. Its robust design and compliance with international standards make it an ideal choice for diverse environments.

Warm regards,

Yuchen

Sales Manager

OptimalMan

Email: optimalman@emjiaju.com

Maintain your entry to exclusive updates by selecting . Continue Getting Alerts

To discontinue these messages, visit Refine Delivery Settings.

Jianqun

optimalman@emjiaju.com

在2026-09-03，OptimalMan 写道:

-----原始邮件-----

发件人： OptimalMan

发件时间: 2026年09月03日周四

收件人： [sales ]

主题： Exclusive Factory Deals for – Promotion Begins!

Hit subscribe now to receive regular updates and our product’s latest features! Subscribe

If you don't want to receive our emails, you can easily unsubscribe here.

Hello Sales,

OptimalMan has been a leader in the home furnishings industry for over 20 years. Our state-of-the-art production facilities ensure top-notch quality. Our storage racks are designed to be simple, durable, and stylish, making them a perfect fit for any space.

3 Layer Rotating Practical Shelf Furniture Detachable Tray Trolley Kitchen Cart with Wheel

Three Tier Rolling Cart Kitchen Storage Trolley High Quality Black Organizer Cart With Wheel

We invite you to explore our range of products that meet European standards and offer exceptional load-bearing capacity. We are confident that our products will meet your needs.

King Size Stable Modern Iron Platform Lift up Hardware Kit Gas Spring Mechanism Storage Bed Frame

Foldable Metal Solid Wood Tatami Bed Frame Pallet Bed Slat with Plastic Flower

New dining chair, Nordic style, stylish design。

Factory Direct Outdoor Modern Living Room Chairs for Hotel Restaurant Living Room Garden Wedding Events Plastic Leisure Chairs

Wholesale Kitchen Furniture Hot Sale Cheap Modern Design Restaurant Cafe Chair Living Room Comfortable Plastic Dining Chair

Thanks!

Yuchen

Sales Manager

OptimalMan

Email: optimalman@emjiaju.com

Secure your updates and feature insights at . Continue Product News

Wish to step back? Quickly hit Control Contact Settings.

Jianqun

optimalman@emjiaju.com

Nigerian phish

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3cEm-00000000N9c-3rf7

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 10:30:28 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 10:30:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.ableteknika.com ([45.117.83.41]:44722)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3b8T-000000003rQ-0TaP

for sales@nk.ca;

Mon, 07 Sep 2026 09:20:02 -0600

X-Footer: a2Jpei5jb20udm4=

Received: from [154.120.93.243] ([154.120.93.243])

(authenticated user hang.huynh@kbiz.com.vn)

by mail.ableteknika.com (Kerio Connect 9.2.1) with ESMTPSA

for emccurdy@gov.nl.ca;

Mon, 7 Sep 2026 22:09:12 +0700

Date: Mon, 7 Sep 2026 22:09:12 +0700

Subject: respond

X-Mailer: Kerio Connect 9.2.1/Kerio Connect Client

X-User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:156.0)

Gecko/20100101 Firefox/156.0

Message-ID: <2087357501-21158@mail.ableteknika.com>

From: hang.huynh@kbiz.com.vn

Reply-To: info@krabiteerapongtour.com

X-Priority: 3

Importance: Normal

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="=-2SS1Uf/zzjIQRAbFk19E"

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: This mail is been writing to you because we have come to

understand that you have lost a lot of money all because you want to receive

your fund well note that all that have been put to a stop as the f [...]

Content analysis details: (10.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.120.93.243 listed in dnsbl.ahbl.org]

[154.120.93.243 listed in dnsbl.ahbl.org]

[154.120.93.243 listed in dnsbl.ahbl.org]

[154.120.93.243 listed in dnsbl.ahbl.org]

[45.117.83.41 listed in dnsbl.ahbl.org]

[45.117.83.41 listed in dnsbl.ahbl.org]

[45.117.83.41 listed in dnsbl.ahbl.org]

[45.117.83.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.120.93.243 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.120.93.243 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.120.93.243 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.120.93.243 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[45.117.83.41 listed in bb.barracudacentral.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.117.83.41 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 ONE_WORD_SUBJECT Subject with only one lower-case word

1.2 MISSING_HEADERS Missing To: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[154.120.93.243 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

[45.117.83.41 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.2 XFER_LOTSA_MONEY Transfer a lot of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

Subject: {SPAM?} respond

--=-2SS1Uf/zzjIQRAbFk19E

Content-Type: text/plain; charset="utf-8"

This mail is been writing to you because we have come to understand that

you have lost a lot of money all because you want to receive your fund

well note that all that have been put to a stop as the federal government of

Nigeria has promised to assist you with the sum of $5million in other to

compensate you and all you have to do is fill the below information s.

1 full name

2 home phone and cell phone number

3 occupation

4 amount that was lost by you

Send this and get back at once.

Warm regards

Femi

--=-2SS1Uf/zzjIQRAbFk19E

Content-Type: text/html; charset="utf-8"

This mail is been writing to you because we have come to understand that
you have lost a lot of money all because you want to receive your fund
well note that all that have been put to a stop as the federal government of
Nigeria has promised to assist you with the sum of $5million in other to
compensate you and all you have to do is fill the below information s.

1 full name

2 home phone and cell phone number

3 occupation

4 amount that was lost by you

Send this and get back at once.

Warm regards

Femi

--=-2SS1Uf/zzjIQRAbFk19E--

Dragonfly phish from GoDaddy

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3cEQ-00000000MSe-1dW6

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 10:30:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 10:30:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cynergynetworks.org ([70.32.96.105]:48340)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3al1-000000001UF-0yyP

for sales@nk.ca;

Mon, 07 Sep 2026 08:55:45 -0600

Received: by cynergynetworks.org (Postfix, from userid 10008)

id 5F7188AB0E; Mon, 7 Sep 2026 09:18:13 -0500 (EST)

To: sales@nk.ca

Subject: =?UTF-8?Q?Your_shipment_is_currently_being_held_as_part_of_the_customs_cl?= =?UTF-8?Q?earance_process._/_Votre_envoi_est_actuellement_retenu_dans_le_?= =?UTF-8?Q?cadre_des_proc=C3=A9dures_de_d=C3=A9douanement.?=

Date: Mon, 7 Sep 2026 14:18:13 +0000

From: Dragonfly Shipping

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_b1d868148bee179f7c28f94657c2e1ec"

Content-Transfer-Encoding: 8bit

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: French version follows Intelcom is now Dragonfly!

Content analysis details: (7.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

[70.32.96.105 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

[70.32.96.105 listed in dnsbl.ahbl.org]

[70.32.96.105 listed in dnsbl.ahbl.org]

[70.32.96.105 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[70.32.96.105 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: scanned.page]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?} =?UTF-8?Q?Your_shipment_is_currently_being_held_as_part_of_the_customs_cl?= =?UTF-8?Q?earance_process._/_Votre_envoi_est_actuellement_retenu_dans_le_?= =?UTF-8?Q?cadre_des_proc=C3=A9dures_de_d=C3=A9douanement.?=

This is a multi-part message in MIME format.

--b1_b1d868148bee179f7c28f94657c2e1ec

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

French version follows

Intelcom is now Dragonfly!

Valued customer,

Your shipment is currently being held pending payment of the applicable customs duties, in accordance with the requirements of the Canada Border Services Agency (CBSA). To avoid any delay in your delivery, please complete your customs duty payment using our secure payment portal below:

Access secure form

Thank you for your prompt attention to this matter.Â

Important: Failure to comply with this notice will result in your package being returned to the sender.

This is an automated email. Please do not reply.

Â

Intelcom est maintenant Dragonfly!

Cher(e) client(e),

Votre envoi est actuellement retenu en attente du paiement des droits et taxes de douane applicables, conformÃ©ment aux exigences de lâ€™Agence des Services Frontaliers du Canada (ASFC). Afin dâ€™Ã©viter tout retard dans la livraison, nous vous invitons Ã effectuer le paiement de ces droits et taxes au moyen de notre portail de paiement sÃ©curisÃ© ci-dessous:

AccÃ©der au formulaire sÃ©curisÃ©

Nous vous remercions de votre collaboration et de votre diligence.

Important: Le non-respect de cet avis entrainera la rÃ©expÃ©dition de votre colis Ã son expÃ©diteur.

Ceci est un message automatisÃ©. Veuillez ne pas rÃ©pondre Ã ce courriel.

--b1_b1d868148bee179f7c28f94657c2e1ec

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

=09

sans-serif; font-size: small; background-color: rgb(255, 255, 255); margin=

: 0px 0px 0px 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-lef=

t: 1ex;" type=3D"cite">

se; font-size: 14px; width: 420px; max-width: 100%; margin: 0px auto;" widt=

h=3D"100%">

=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09

padding: 0px 16px 10px; font-size: 12px; color: rgb(51, 51, 51);">
yle=3D"font-size: 11px;">
-serif;">French version follows

0, 166, 143); border-radius: 0px; padding: 18px 24px; color: rgb(255, 255, =

255); font-weight: bold;">
s-serif;">Intelcom is now Dragonfly!

: none; background-position: 0% 0%; background-size: auto; background-repea=

t: repeat; background-origin: padding-box; background-clip: border-box; pad=

ding: 20px 16px !important;">

=09=09=09

ight: 1.5; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Valued customer,

=09=09=09

ght: 1.55; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Your shipment is currently being held pending payment of the applicab=

le customs duties, in accordance with the requirements of the Canada Border=

Services Agency (CBSA). To avoid any delay in your delivery, please comple=

te your customs duty payment using our secure payment portal below:<=

/span>

=09=09=09

ght: 1.55; text-align: center; font-size: 15px !important;">
tyle=3D"font-size: 14px;">
s-serif;">
: border-box; border-style: solid; border-color: rgb(44, 181, 67); backgrou=

nd: rgb(0, 166, 143); border-width: 0px; display: inline-block; border-radi=

us: 30px; width: auto;">
rl?q=3Dhttps://scanned.page/oLm3iE&source=3Dgmail&ust=3D1788871812186000&us=

g=3DAOvVaw0Dn4qZd1G-3rOm3OczcX3C" href=3D"https://www.shorturl.asia/jeyqth"=

rel=3D"noreferrer" style=3D"color: rgb(17, 85, 204); box-sizing: border-bo=

x; background-image: initial; background-position: initial; background-size=

: initial; background-repeat: initial; background-attachment: initial; back=

ground-origin: initial; background-clip: initial; padding: 16px 20px; displ=

ay: inline-block; border-radius: 30px;" target=3D"_blank">
lor: rgb(255, 255, 255);">Access secure form
>

=09=09=09

g: 16px; background: rgb(247, 247, 247); border-radius: 12px; font-size: 15=

px; line-height: 1.5; text-align: center;">
>
#000000">Thank you for your prompt attention to this matter.=C2=A0
span>

=09=09=09

g: 14px 16px; background: rgb(244, 251, 250); border-left: 4px solid rgb(0,=

166, 143); font-size: 15px; line-height: 1.5; text-align: center;">
tyle=3D"font-size: 12px;">
s-serif;">
-box;">Important: Failure to comply with this notice will r=

esult in your package being returned to the sender.
iv>

=09=09=09

0, 0, 0); border-radius: 0px; color: rgb(255, 255, 255); padding: 24px; fon=

t-size: 12px; line-height: 1.5;">
ta-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NaXLdBJQ=

7S5hp3JAJs6w5qs95CLfIXWFz1zfOKpsOhCbGi8VtJWlHHfe_zRplYoslCag6hoZAAq9ZfSzJBk=

KRJH74HSG4WPA3N8Hvdm7HrEvwB8iSu1FJ8=3Ds0-d-e1-ft#https://dragonflyshipping.=

ca/uploads/Mail/dragonfly_email_logo.png" style=3D"box-sizing: border-box; =

vertical-align: middle; border: 0px; display: block; height: auto; max-widt=

h: 175px; outline: medium; width: 150px !important;" width=3D"175" />

=09=09=09

yle=3D"font-size: 10px;">
-serif;">This is an automated email. Please do not reply.

=09=09=09

ne-height: 18px; font-size: 18px;">=C2=A0

0, 166, 143); border-radius: 0px; padding: 18px 24px; color: rgb(255, 255, =

255); font-weight: bold;">
ica, sans-serif;">Intelcom est maintenant Dragonfly!

: none; background-position: 0% 0%; background-size: auto; background-repea=

t: repeat; background-origin: padding-box; background-clip: border-box; pad=

ding: 20px 16px !important;">

=09=09=09

ight: 1.5; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Cher(e) client(e),

=09=09=09

ght: 1.55; font-size: 15px !important;">
pan style=3D"font-family: arial, helvetica, sans-serif;">
0000">Votre envoi est actuellement retenu en attente du paiement des droits=

et taxes de douane applicables, conform=C3=A9ment aux exigences de l=

=E2=80=99Agence des Services Frontaliers du Canada (ASFC). Afin d=E2=80=

=99=C3=A9viter tout retard dans la livraison, nous vous invitons =C3=A0 eff=

ectuer le paiement de ces droits et taxes au moyen de notre portail de paie=

ment s=C3=A9curis=C3=A9 ci-dessous:

=09=09=09

ght: 1.55; text-align: center; font-size: 15px !important;">
font-size: 14px;">
">
: border-box; border-style: solid; border-color: rgb(44, 181, 67); backgrou=

nd: rgb(0, 166, 143); border-width: 0px; display: inline-block; border-radi=

us: 30px; width: auto;">
rl?q=3Dhttps://scanned.page/oLm3iE&source=3Dgmail&ust=3D1788871812186000&us=

g=3DAOvVaw0Dn4qZd1G-3rOm3OczcX3C" href=3D"https://www.shorturl.asia/jeyqth"=

rel=3D"noreferrer" style=3D"color: rgb(17, 85, 204); box-sizing: border-bo=

x; background-image: initial; background-position: initial; background-size=

: initial; background-repeat: initial; background-attachment: initial; back=

ground-origin: initial; background-clip: initial; padding: 16px 20px; displ=

ay: inline-block; border-radius: 30px;" target=3D"_blank">
lor: rgb(255, 255, 255);">Acc=C3=A9der au formulaire s=C3=A9curis=C3=A9
an>

=09=09=09

g: 16px; background: rgb(247, 247, 247); border-radius: 12px; font-size: 15=

px; line-height: 1.5; text-align: center;">
>
#000000">Nous vous remercions de votre collaboration et de votre diligence.=

=09=09=09

18px 0px 0px; padding: 14px 16px; background: rgb(244, 251, 250); border-le=

ft: 4px solid rgb(0, 166, 143); font-size: 15px; line-height: 1.5;">
tyle=3D"font-size: 12px;">
s-serif;"><=

strong>Important: Le non-respect de cet avis entrain=

era la r=C3=A9exp=C3=A9dition de votre colis =C3=A0 son exp=C3=A9diteur.
pan>

=09=09=09

0, 0, 0); border-radius: 0px; color: rgb(255, 255, 255); padding: 24px; fon=

t-size: 12px; line-height: 1.5;">
ta-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NaXLdBJQ=

7S5hp3JAJs6w5qs95CLfIXWFz1zfOKpsOhCbGi8VtJWlHHfe_zRplYoslCag6hoZAAq9ZfSzJBk=

KRJH74HSG4WPA3N8Hvdm7HrEvwB8iSu1FJ8=3Ds0-d-e1-ft#https://dragonflyshipping.=

ca/uploads/Mail/dragonfly_email_logo.png" style=3D"box-sizing: border-box; =

vertical-align: middle; border: 0px; display: block; height: auto; max-widt=

h: 175px; outline: medium; width: 150px !important;" width=3D"175" />

=09=09=09

yle=3D"font-size: 10px;">
-serif;">Ceci est un message automatis=C3=A9. Veuillez ne pas r=C3=A9pondre=

=C3=A0 ce courriel.

=09=09=09

--b1_b1d868148bee179f7c28f94657c2e1ec--

Chinese products spam from Microsoft Outlook

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 07:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3ZbM-00000000Bv7-35As

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 07:41:36 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 07:41:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westcentralusazolkn19013078.outbound.protection.outlook.com ([52.103.7.78]:52694 helo=CY3PR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Xz7-00000000C3H-2g8y

for root@nl2k.ab.ca;

Mon, 07 Sep 2026 05:58:11 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Wj1R3brm23h8e5JfYUIWQmFlpc+5nUiJSt10xVX2D8tu9qb3TkezkpqBRrCjDYH+hwa5bYhazfWbd/k9VBafODLFRVUo1N6NYOOxztnjEi1W5P7XM7V2q1uywJoQrXLYEXGqXpUovLKADinjrPYbCdkltUmW/wNI8/f2btMMYCFEmxoB6RDjDvIAUk65ZQzBftjpbwSAHEXeOHXxUkb4t2wqWvi8SDtGXPDw0/tU8hLquBjdfRew8TurdiUnmOCaidakGLbOqm2yfugZMRY4yQFG/jidASaZ7M8mFXU+9RPfeePTrLkj0rg5quiPm7mcexX2J3nmFtxQVmO4L34hbw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=/iahzGUWacNUkpwbAbGb3YXlRXMy2bV/4lI2EZVHsAk=;

b=Kpa18W3ie/y8MdIZ11nJb6omeegSoQ8OzIyfhae2txsTZM35G95MvN0WK9YSEqBLDqKKpJpPi47v//iXUNdnzrAjJpSW+sUyef+LUl1ZMYzE5jbAt1fHp2o5aafuiohJVV4LkkYzCSuugv0EFF/S7pq1ypjBSxovd1CvOZzUR3mEO7N8EuKUxevj08CW4+kkSsm23BTxcMG4iQiDeVHYiTMz8ZbEIYs7XY5bc0+ezq1QAP9CZlFROdjxkitP5m5Azuz5Pu4XHFOsMm0yxg1pl7xMkxROZd00WM7U6AY6iQcu3AujDjZRENZz0pO+ntnIfetCuvM+OoRUz8eaXxdyoQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=/iahzGUWacNUkpwbAbGb3YXlRXMy2bV/4lI2EZVHsAk=;

b=FIBCsGLrlUGZjf4UT2eQWLH/uEDRZ20Wl0L06K70F3TLemmygU/k2O076vVNbSk8ACyKbR3TrIyraopD5nyOwmH+561+5161s+WU9nTN641cXKofeWmRenxbdFIeAwKMLu3uOnKbUfBAwii1lyF/pxaca0IwKZxCbw/L++joikwQdE10Hr+m8YeCqX4UGSE3AjwxgozLIqCmvLTJecy6XXRHhfVrjgKWdmJGhFZ0ul4pae3j/XGAYJ02tCDrfhC1zt46+XhBJPWGG4u6ACOANMgxh8gNT26MJ8vy5iij8n8c2avrwm2kaf/xhxC1/xvGSj0t3QyecnswyOVeTVew9Q==

Received: from LV3PR10MB7867.namprd10.prod.outlook.com (2603:10b6:408:1b0::21)

by IA1PR10MB7515.namprd10.prod.outlook.com (2603:10b6:208:450::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.6; Mon, 7 Sep 2026

11:57:00 +0000

Received: from LV3PR10MB7867.namprd10.prod.outlook.com

([fe80::18e0:234a:d5:c9c7]) by LV3PR10MB7867.namprd10.prod.outlook.com

([fe80::18e0:234a:d5:c9c7%7]) with mapi id 15.21.0406.005; Mon, 7 Sep 2026

11:56:59 +0000

From: Halfmann Flo

To: "root@nl2k.ab.ca"

Subject: Sample shipment lookup for your reference

Thread-Topic: Sample shipment lookup for your reference

Thread-Index: AQHdPr/9N1Q9Z+n9qUywTZiG9F0DNA==

Date: Mon, 7 Sep 2026 11:56:59 +0000

Message-ID:

Accept-Language: zh-CN, en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: LV3PR10MB7867:EE_|IA1PR10MB7515:EE_

x-ms-office365-filtering-correlation-id: f52efb28-84b5-4cf8-79b4-08df0cd71f8b

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|6092099016|5040399003|4140399003|39105399006|15080799012|20031999006|41001999006|19110799012|8060799015|8062599012|9112599006|24071999003|55001999006|38102599003|2604031031799003|5062599005|40105399003|3430499035|11120399003|2607281247196008|56899033|3420499032|102099032|20055399003|3412199025|440099028;

x-microsoft-antispam-message-info:

=?us-ascii?Q?p6aQMGFEol7UUZcRPd/i1kAesU2NGm3uddHfRNWr/Dn1CqHFShlmWxkA1b9L?=

=?us-ascii?Q?vd2M6ItC2yAhT3QIxUDPpx1cCPn2IBJnXO+BIOdH8sBC49wQtLj0ZIqspwkC?=

=?us-ascii?Q?87eFeiQq3KhkyvbwcHsdYsHYZxz9vaBr8VAfIAU/sO7PfB4t0T1if7aEFLI/?=

=?us-ascii?Q?eC9+evJOc5Cb9ZP9b3LDjcHqxcq1GgnRlVCp8kdGM77RBp0mozu2wjwtTZBw?=

=?us-ascii?Q?HeeubcArH8RdiY0H1QwZEUwk2g95EUJNbDQq4fRXdqY2EUPruQSe7jGfceI1?=

=?us-ascii?Q?aVqEE99Qyf7k9M6ra/1aQWYpYNqL5LP3l7/88D6av08HL3ozG0heCKTnBVjc?=

=?us-ascii?Q?rGEE6daBclqyeIMjqylhUGl1q5F3vC95/6mIVkmwGgMVFdnr2NV2imFXUeVm?=

=?us-ascii?Q?iVDeEr+Ml3DEYbwgFGA9leyni1iRxanl8oZmmdvijYyoX3hLvFpRNLLGEp9W?=

=?us-ascii?Q?ZuwOPrnOQvZqor7JAkUgDtKPZd9hoKNspdPf+vO3/YDHNACVqGTeb6akE4yq?=

=?us-ascii?Q?pkMIFTux8jnESOH0hsq9maRf2wq+64kBQVIaBhVLfh+TlfJCmK8+Hs95MbLD?=

=?us-ascii?Q?8ENDm52muPzjoxClTtqJLu7BRDYWlOG551NhAKv/OYbN6E8g5pE5CRuCvK32?=

=?us-ascii?Q?+7uD9DpZB9pxOGg3aCaPe9YmF1rnnaW4VTmYJnlZB26++1QipC02Lu4SaFHK?=

=?us-ascii?Q?QCoJQpKyM9YVFGzwNjwqBoWHT/wrhxvlLSu92QvpLK4h86Vdu9vlj2+LFLpv?=

=?us-ascii?Q?GBFdGX7iOSKI/EO9pGK3qRKHyW7igbZcUnC3vhX6+0hrp/8DBAG/H6Sc8cT5?=

=?us-ascii?Q?pFS0IlMBew/4/5/NGtW1hsiiLeJYZqjkTE2T8an4NEXOQ42PxTx2KirImA9M?=

=?us-ascii?Q?ZLZBqUjCmlCqz2ujqfIKlMeoF7jpbo57UJAXT8xqgHTKxsXHMexiWgYEXkwh?=

=?us-ascii?Q?kHXQL9V24d69zQCMjz9mPfjOTNHe5t2U+70AFmyxPSQAiJ6Sb+HrLjxfuEZ+?=

=?us-ascii?Q?iNehPwIb0YPVn5wFu1q6h+2Bv+eaTpByVFqX39VSnCbtBmVRmQyO1ktjE+ZO?=

=?us-ascii?Q?3Oi2PHbvQuDMU4mp/lYkvejj8W82s/i64CMVXi/V1ACjwm8GqjO6JH0YveZm?=

=?us-ascii?Q?jHk2T4O+prv1uOS8A8IR6lFC+iTFFIE+lMiN0HSz3+pxVwoEX2MwksI=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?LgUPtj41/E3ev2Y6Xm0g8fZWsPsqIrAWqFCGLWPasBGLZOAJj/4AmSwALfzy?=

=?us-ascii?Q?Qae8EFoyJZuBE1pmOfl0JFN/0e79ol92i7duvjPqitnAwjzOctzkZUjHYobX?=

=?us-ascii?Q?w6qf772ic4R2OgjM5kqSvdzcx1JDIOS1c205srGeCFzp8b5EgBi60VbFNJfc?=

=?us-ascii?Q?XFHC5iGlHRI73ykq4ShX7Nj/a9E/ch9sFhumS+F3bH4hXYx/ZF5ZxVQjdYU0?=

=?us-ascii?Q?8pM78qPXqIisDJLBDsueX9cJy817IR6pXOvXYMTojhOb+hpwaL9lvsSdZZYh?=

=?us-ascii?Q?bl6G728gxLOpiK1bh3+NqnRS3aQESWaxc30Gzt8beB9k0Rksbe6DQJS4zMTV?=

=?us-ascii?Q?qagpSpdkb2qRgqPolvttgbZ88O3tM9/pMAjnfjPViNeJnUUqrf3NA04PZBr7?=

=?us-ascii?Q?0JzfaaUDNSp0Qa+fs1KnjMstfJiTRcNNEOXflT5mBdPTJArBFot/Jlewiz+C?=

=?us-ascii?Q?7y8wx959wOVikENnd8grl6Yc0+kFKD9hkqOUqIna34nNzOl0yRVYyBpFD5gx?=

=?us-ascii?Q?E/NeXb5w1cIAsZiwpEv/HTP0vwwLFPy17Uefeg1pvRv3/8+zCoPIAu3Afz28?=

=?us-ascii?Q?avyUnJ9aFZUkrudJ3+3vmmH8dB4VfgScqXI0ymYI+4FkKSm8b/VjWu1jvhRE?=

=?us-ascii?Q?IXBm25nDT0DTw3csojTjricudzTkjwTF10CxVA+4Ab40fACQTqzjYTxQRr6y?=

=?us-ascii?Q?Q8sKmRtk6TNbUqXObfk3CISCYMS6hyKRUirKw9d9Rk3feNZ7+saqS2jcd3kW?=

=?us-ascii?Q?ZU3SMJq2cu2DZWXn/C4IZssxRz5XTm/Lx9ppn9CDsXGZ5hzHeb64TGKWcDIC?=

=?us-ascii?Q?ujrD4WguE9PnQrXN5GZ+eaZBn3fjsLw1iZkBRELxvZCgu2rMD34kNsw0i3wn?=

=?us-ascii?Q?Z2F1tRkFWYrycI2nRvaT78g7dpe43uNiYfuiuxZgYX+c/AwEkohIUvFrnXl/?=

=?us-ascii?Q?oIan2KbHAP14NZrHz7kWwhkis1QpmiEGzAovf8H0fY1xlYPqD89vEvoQ2HCz?=

=?us-ascii?Q?WxvKMz4aYLSnJ8pzSKNUA0QfvxLuRFHgch4ILaz6mkc/f19JKMwvEis/PvUU?=

=?us-ascii?Q?GV1BUIlO/wYo7FWt8NgoxHUvgGoPuIZwwzbn3SDHPO/j1o+59drslXrxrbHt?=

=?us-ascii?Q?IRnSR23lhZeB/TOZPk5bvnPBgOFIKskJZ/FFvPeCOW/k9FxTiMSM6jAWlgCe?=

=?us-ascii?Q?FFc83CRrRpPjZJSjPk09c/ppiyoMFo2PvvJQTioaVMjX7kRcCGMhdP3ChYqM?=

=?us-ascii?Q?N643/bhPiYlrCWqWCMF5eZ55xtVcRHbXz33EJUZHkL41L5Niev2oo5Q58tAX?=

=?us-ascii?Q?AlYAfYafQ09bJBer0bwhTlr2lRYOO6M+IVfr2Ow25H7Gj/XzB21Gbi34r9Qi?=

=?us-ascii?Q?b9b3ww3a6EOloAUchkl3p/TdGQk6fL7GJbtqVsoD5njpregyVw=3D=3D?=

Content-Type: multipart/related;

boundary="_004_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_";

type="multipart/alternative"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: LV3PR10MB7867.namprd10.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: f52efb28-84b5-4cf8-79b4-08df0cd71f8b

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Sep 2026 11:56:59.6313

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR10MB7515

--_004_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_

Content-Type: multipart/alternative;

boundary="_000_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_"

--_000_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

Hello,

Hope I'm not interrupting. Lucy from Tendata Shanghai here.

Our platform lets teams look up shipment-related company information across=

more than 90 markets. It is often used for market checks and for finding c=

ompanies already active in a trade lane.

Sample result:

[cid:image1]

Just reply if you would like me to arrange a short demo.

Best regards,

Lucy

Senior Sales Manager

15921777864

Email: fei.qin@tendata.cn

Whatsapp: +86 159 2177 7864

Tendata Shanghai China

www.tendata.com

--_000_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

>

Hello,

Hope I'm not interrupting. Lucy from Tendata Shanghai here.

Our platform lets teams look up shipment-related company information acr=

oss more than 90 markets. It is often used for market checks and for findin=

g companies already active in a trade lane.

Sample result:

ccc;" data-outlook-trace=3D"F:0|T:1" src=3D"cid:image1">

Just reply if you would li=

ke me to arrange a short demo.

Best regards,

Lucy

Senior Sales Manager

15921777864

Email: fei.qin@tendata.cn

Whatsapp: +86 159 2177 7864

Tendata Shanghai China

www.tendata.com

--_000_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_--

--_004_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_

Content-Type: image/png; name="image1.png"

Content-Description: image1.png

Content-Disposition: inline; filename="image1.png"; size=315857;

creation-date="Mon, 07 Sep 2026 11:56:58 GMT";

modification-date="Mon, 07 Sep 2026 11:56:59 GMT"

Content-ID:

Content-Transfer-Encoding: base64

...

--_004_LV3PR10MB786744FEBA37D7C1417BB12BB7B22LV3PR10MB7867namp_--

Virtual assistant spam from Microsoft Outlook

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 07:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Zb0-00000000Aj4-3tyz

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 07:41:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 07:41:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013084.outbound.protection.outlook.com ([52.103.74.84]:3321 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3X48-000000006uw-0OtY

for sales@nk.ca;

Mon, 07 Sep 2026 04:59:19 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=HUTOyHpPHpGioNqGrewMAlM+BOFjeKTRLfbKqf0nZTFozasdmstr1q4AH/A0JG19cIr+uGnLSkfX9AVn3nFHsRBAkyJtBh1LeZauaPxegXX1kcIUa+WMpBkVgwXjj3YIHmhuhr/vOuidnuByyIJ3liCqSRBXXhd6e1RVWvXsvLllycT9fAgzOxpD61wxq2vrFZC0RnjCWxvbmSbEzGBhNhHL3MxdjFkKTJkGLABHHe0r+70qz9bB9mH6LB1Z+2iMPxpzdjMXocrzEZisSDSSdv7GYYo3frcn+qsxFlg0owkfJDIqP3k192QIpOSEJW4YIiLPuNyETlWCeQKcZLTxNg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=LuZasGRP1ioeLpVLSdm2OkSyvjnVl93z2gKGdsBL+lI=;

b=vBjGUD8g93Y+fUiinMW2/oGTEXn6kWNsHBdRhyqx3SoFDl6JDwmQ88WIP6S7csyn47rG8ajSlws2EYsWRRcFKvIXF/S746XTyzw/tuOGDe1ZqnitwY+ammyVl5ncaE+XXX5COOl3a4sGf9McSQAHL0hAQ9f8z05LoNOW5v5Sjk/SJV1+xowGJpDD8J5HlPhBN52xWg2FhVRmCaDboaEmFJqi0IwOlljGaR6eIyZRR6c+GjB/GFPhQAuI3CgqgGhAJ9qBvxYIZWHGpBiLaR3dEWbFrs59QygmWpoLiZzPpAKykGrbOCAoZu8/jDcRRxFrtjOHn9kDK248AbpVxaBGeg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=LuZasGRP1ioeLpVLSdm2OkSyvjnVl93z2gKGdsBL+lI=;

b=Pp6xUx5aJZ6hi5ugAH7GQAebFrjKN2RxA2/rJ0AU74s9QzNL/maP5a6g9kWeZ5mYOewo3kuGHzAEW9AYkDeZloBfOeYSJoxQQiYC+4BXwSgei/fV8EGxKRDSi9lw+61zvp89VX8zTx7mdCnDwOZATA/3dl4xu/VS9tYqv/A9DhCsRgvJEQ80WdveAxKzOn9ZEbhFpZ6Hntx53j9Rr1dq0E3vTH0oTiuGyHF9HUbhaU8FLyH8XUkUq6gWob42dBRtKjOXSscK+I7e/nlYnSqzyS9gtcQ6s6toThBCWsL3jbQ59KVCxnpYYaOvCJO9PLyt+jtFx0MPfGR88bRMWUC67Q==

Received: from SEZPR01MB5173.apcprd01.prod.exchangelabs.com

(2603:1096:101:e5::8) by SEZPR01MB7392.apcprd01.prod.exchangelabs.com

(2603:1096:101:29e::5) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.382.15; Mon, 7 Sep

2026 10:57:06 +0000

Received: from SEZPR01MB5173.apcprd01.prod.exchangelabs.com

([fe80::1e6e:4d96:fc85:2731]) by SEZPR01MB5173.apcprd01.prod.exchangelabs.com

([fe80::1e6e:4d96:fc85:2731%4]) with mapi id 15.21.0382.014; Mon, 7 Sep 2026

10:57:06 +0000

From: Naaz Joshi

To: "billie@townofcastor.ca"

Subject: Re: Hire dedicated virtual assistants?

Thread-Topic: Hire dedicated virtual assistants?

Thread-Index: AQHdPYKBzwp/chJo8E+SyHXkIGPITbbC8+hK

Date: Mon, 7 Sep 2026 10:57:00 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR01MB5173:EE_|SEZPR01MB7392:EE_

x-ms-office365-filtering-correlation-id: e9d11eb7-9e61-4dd7-861a-08df0ccec10b

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|8060799015|19110799012|2604032031799003|15030799006|51005399006|15080799012|22091999003|37011999003|704163111799003|24121999003|16051099003|55001999006|24021099003|8062599012|25010399006|4140399003|40105399003|26121999007|11120399003|2607281247196008|12091999003|102099032|19061999003|440099028|3412199025;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?T54dLkt9+S+H/48fwUmBezHppjC70ROC6227UoLntSFiZ6VL81lGyn98?=

=?Windows-1252?Q?45Fi2nzxbn+Q4SP/6cZSbZiB2bkf2XOQnzDaO1Kkkz74cRJuqrQqnd6q?=

=?Windows-1252?Q?aFIL13PVono76ib80v5H3i+SWXsEgmQ/EKiLga/s+pVLWPpUKOIc7iiA?=

=?Windows-1252?Q?umD7FSOEmWkw7yOP80IbcYvDh8qGNJxLk/xwu0RsLNhWPZ7Kz0GNIUb8?=

=?Windows-1252?Q?UoFvvUTOpOShqPHWqpXGFu8Y4Rgjm8to4SbaQmdYnDFYKjPG7OpMqpBL?=

=?Windows-1252?Q?zKnTo2vG2MdVTJfJdbwf2YfHJeTFtWB2YNF++Z8CQ+LWS+SlVaXFskYg?=

=?Windows-1252?Q?NuSeHSLITAUTMFKyJj0bMXpZHBETi/0oMkOo0tTYubn/VGL2f9VKwYfZ?=

=?Windows-1252?Q?bVioQaOLlDWM2JNxhbBlIFAFSyyYQtf5JMUkp/S+k5mrBxfE83hgoi+0?=

=?Windows-1252?Q?BXCp7KrZhaSsyBsWL5hNOM5d9/5Tl55NzmCy/dEMQcEBcYZkXCuHmjuZ?=

=?Windows-1252?Q?YwUJp0KTSIYlnDtqMFGKJ4Q/J+IM7sDtATz4OkrPTSPA9aSUWd5TBopF?=

=?Windows-1252?Q?NPSsy862QNZEYEXd4zmRQ9ktoAdvH6NKbtx/h6Q9TT5h7l/KdiJoxz4U?=

=?Windows-1252?Q?z6XXzIGdsxm+jPnt18hrGpLek932gbTwJQrxPfli0sPfJKxoGCT5C5tU?=

=?Windows-1252?Q?lis6D4U3hV2AwdZfjNihLj3X3h840nJ72jaCLd2PRfTm2dg0P6234yLz?=

=?Windows-1252?Q?2dxUzbBnAHP5I1/o8k8o75Bnmu8MBkgYmT/dZv39i3J1GbQrhtRnGJw/?=

=?Windows-1252?Q?KrUXJH99q3MrXefhioRF70K4IR9FVKuRyXlcQIjZEvdX6ygAodJKXmAt?=

=?Windows-1252?Q?T5boxY+xXGi9F4vPFNfkG3K3lAPIg75EwRsGlCL93rygnayASuklEa9V?=

=?Windows-1252?Q?RgzbPHw181SrTVrt+/UvxXF18aLCTm2UMZMy91cEdPPb2/OoRPjaUiP9?=

=?Windows-1252?Q?pRR8MLGjdS/pYmwQwqRrilzm0TN1SJL5HTdsszAH0falXlwFHJI4/1tg?=

=?Windows-1252?Q?u6WyWkekb3tQS40GxcVZCzcY4iv4VRQBH9rvBugAtlKZrZD/NRjpJO4F?=

=?Windows-1252?Q?YALBvSrlJhuuT41N3KrcBcW97cIkR6/NIWJYkGw0RMZZo/ZbNCfcmq2W?=

=?Windows-1252?Q?MLaYOyrFngtReHU7WKrdDCeoHDZNctSY35GcDuS9Wz/AwFGAVQu8IygJ?=

=?Windows-1252?Q?RmxakNnNg3oGAVqIbGL3dCndtIIZuSCUianUFMfehmhHnJOTkP+Y0/dN?=

=?Windows-1252?Q?4gSnj2jmTZVzboUo38mbQQh+up9stq20RwBI5hX9+QfUCogLlMy75qQy?=

=?Windows-1252?Q?UpL6822wqrSzBUnnUU3yT/7cFuPmI+iHQXluJF7FKLtgV7TRX6ReesTt?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?r7afaYzGVjJQxj4VjE/Gc+kcSc1AktRGAQBMbFs2tKJzoc2MoAmTJ+yt?=

=?Windows-1252?Q?EE0WPqjpz2JheuPBIge/Ur/HY1b6eVgOQjQRtGaOcgrWZs3NZG2Ppo5a?=

=?Windows-1252?Q?9yv0mtcl9FFVNXmIAStkxa9jueo+lNVDQzzbU6qmwG5WXY3eVzCQgIXH?=

=?Windows-1252?Q?UKeSKtUO+TdCp188oz3WHz5cCOMP6TZauKVbf2UsrI4WLd2K9Ug7g6mM?=

=?Windows-1252?Q?9eV9DztQ77O5mgAjU32BTl6Lefr4eKIydASCeMeNdCa8+SN13xEH9hJt?=

=?Windows-1252?Q?5rsUSd+wqZPCskCqV5M8/UtFY9Ywc/m5yVcdg7Y6myixWlbRK50R/NaD?=

=?Windows-1252?Q?dFUuQ0nwOcs5RrzShCq+d6D+uZH3F9/a9s3GH5BJLY25zkOOR6TMTEmn?=

=?Windows-1252?Q?eJzsp1PdW1k16PPEMfXLYCuznN2NqUpB5B3nUXu1K5rkJ+3wwTj7RR2i?=

=?Windows-1252?Q?WxspX1uNYRxpAPABkxsz4qYLFKNTW0O8zqS3m0ahxaXP+TZl5UNuaLYQ?=

=?Windows-1252?Q?SXUg96E9eO1Qd5uMrbzK8iQ5llUs7mtrUJGR7z1iGBJsESxcoT1EA6TC?=

=?Windows-1252?Q?k1Cl16FcwNR6AGvO/1KtYFkJBYgpsWSYPORzoCFyyUfLP2sPK+x2UW/8?=

=?Windows-1252?Q?IEI92zfTCRExdhtLBjrBsvYczhX+9Qwpp8Gx+q427TsXyTVriqeKpHm0?=

=?Windows-1252?Q?Y5gjsu15DHpv3OagOssgAOVzZCqPTweDutuAvLGng2Qd+M/efID6cyVN?=

=?Windows-1252?Q?N6cvIs8/kb7C4nBz23xYBWs2zCN5NsRFMhLjnyJcfWJfSIjBoh7Tc7RI?=

=?Windows-1252?Q?wkNGuZOlgRNmqOHxcftvpYWuZ8izAr+2ZG+MfhzKGTHvRVUTHbiwFs7Q?=

=?Windows-1252?Q?ekdvcFYtHku53eLFi8p57LZcSTiV7fZ6ZN/iB/V8J5y8zVFBru0Ge+wI?=

=?Windows-1252?Q?DW0qGrMVzooidXVOT7SSCXoDDo+VEyGxtbP6vSn7za4Fr4vmcffnS/HL?=

=?Windows-1252?Q?gNJTf3hXVi7WeIbYrYUp0ydNT1raLi2bLsSSbHCbihTeOuywl+ozJJ3i?=

=?Windows-1252?Q?GwCbdMHYoq3Y1dCrQ6s6UkVW97cYxnJTmrzYQ4zBxlOTFzjG8i9ofYmn?=

=?Windows-1252?Q?gt6VpUPdE0DHnH0VszDGhAHPOcZVqiJwgV4KwbRRRbolD3P6y0YEkv9E?=

=?Windows-1252?Q?2qcdjhJDCmQxi7CE/qaIlbw6aWl8X2khPkvMspHujiagz7PELZcjOQ4U?=

=?Windows-1252?Q?Ubwu1SiJLS/u2eu8oyfnhprMY4ubv7bDdmMJwhb8mrwBSalIMNUT1aQ9?=

=?Windows-1252?Q?20wn6iWBvZjXuhOXQBOu9lgQRnQoy+anFwKV1w/t+Aa3t8dbJcqjuiWO?=

=?Windows-1252?Q?LrpVgHF5nPf//L+ekAd7b+oVvBHyGhm0UHs45iFSRKHP037imgZkT2BS?=

=?Windows-1252?Q?9vqvpAEfFMFzzZ+QC5ZBNvjqGIa39NjBDP+o/RIH63+1qOXCHjxCbBm0?=

=?Windows-1252?Q?g2Dtls14SgxVdhmoF42hHZfSGU7AAVMXWk+5ZK6He8kIswMG4+MHORBZ?=

=?Windows-1252?Q?LP6yeUb2lx1UnAryk9ltQJpuM4SifO27Ga5tJA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR01MB51737F36F9F6B714A0BC22FFB0B22SEZPR01MB5173apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3e488.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB5173.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e9d11eb7-9e61-4dd7-861a-08df0ccec10b

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Sep 2026 10:57:00.0886

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB7392

--_000_SEZPR01MB51737F36F9F6B714A0BC22FFB0B22SEZPR01MB5173apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hi,

just following up =97 would you be interested in exploring our Virtual Assi=

stant services to help reduce your workload and costs?

________________________________

From: Naaz Joshi

Sent: Sunday, September 6, 2026 3:34 AM

To: billie@townofcastor.ca

Subject: Hire dedicated virtual assistants?

Hi,

I would be glad to connect and discuss about our Virtual Assistant service.

I would love to know if you are interested (like Cold Callers, Appointment =

setters, Marketing associates, social media managers, administrative execut=

ives, digital marketing, lead generation, data

entry, etc...) work at a reasonable cost?

Let=92s set up a time to chat or call if you are interested in services to =

save your time & cost.

Thanks.

Naaz Joshi

--_000_SEZPR01MB51737F36F9F6B714A0BC22FFB0B22SEZPR01MB5173apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,

just following up =97 would you be interested in exploring our Virtual Assi=

stant services to help reduce your workload and costs?

s-serif; font-size: 12pt; color: rgb(0, 0, 0);">

yle=3D"font-size:11pt" color=3D"#000000">From: Naaz Joshi <nicola=

woodwebtech@hotmail.com>

Sent: Sunday, September 6, 2026 3:34 AM

To: billie@townofcastor.ca <billie@townofcastor.ca>

Subject: Hire dedicated virtual assistants?

ly:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">
775343434558600_m_101448778601246" style=3D"margin-top:0px; margin-bottom:0=

px"> Hi,

tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">&nb=

sp;

tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">I w=

ould be glad to connect and discuss about our Virtual Assistant service.
pan>

tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">&nb=

sp;

tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">I w=

ould love to know if you are interested (like Cold Callers, Appointment set=

ters, Marketing associates, social media

managers, administrative executives, digital marketing, lead generation, d=

ata

tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">ent=

ry, etc...) work at a reasonable cost?

tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">&nb=

sp;

lass=3D"x_spanWithBackgroundColor" style=3D"font-family:Aptos,sans-serif; f=

ont-size:11pt; color:black; background-color:lime">Let=92s set up a time=

to chat or call if you are interested in

services to save your time & cost.

tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">&nb=

sp;

tyle=3D"font-family:Aptos,sans-serif; font-size:11pt; color:rgb(0,0,0)">Tha=

nks.

">
0,0); line-height:115%">Naaz Joshi

-serif; font-size:12pt; color:rgb(0,0,0)">

--_000_SEZPR01MB51737F36F9F6B714A0BC22FFB0B22SEZPR01MB5173apcp_--

Nk.CA Credential phishing from Google GMail

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Zaf-0000000094I-0LSy

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 07:40:53 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 07:40:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f232.google.com ([209.85.214.232]:44113)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3VZK-00000000N5a-3s0g

for sales@nk.ca;

Mon, 07 Sep 2026 03:23:23 -0600

Received: by mail-pl1-f232.google.com with SMTP id d9443c01a7336-2d7195706f1so35511645ad.0

for ; Mon, 07 Sep 2026 02:22:27 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788772942; x=1789377742;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=ZGocbgse6Nxmw9LV3/HpumO0JBiynd0HjugjlBdwQlg=;

b=ZowIlHxI9NY2AI/vsxzKnP+cvlbOp6aHeyS6S7y4Cpnoc7ltQvVk8bjEpG7E0C9dbD

AYdo15+TEx4+wi7M2OKHPnoBrv4drhVw7PgQ+/aFcSrhZEBa3hgvOAtnPxqjTLVyzjSo

K0/h+eEqWIIwt4qm212jAqobb/pEWZBee9+IWFqXzI5N+6n3ySJirmZR4NeD7Muh+KAT

DCfseM8bg8xLU019r0kQYsqqSQBSZNIxYZX3tFch5P8C/23SJuR8y+fwGwmATfb7RjJU

qIbbjDHLlYsr4HfJ6trKVMn9gvh7/5eHZLDHalzM4i9oAXP86IYiqMQKavYXnnlRFWTO

pd0A==

X-Gm-Message-State: AFuF++mE5xOBZr3qTlu4KZZCiGg9AsEHWqjyyEaGU2l8y8pNgrryiRNG

NwkFt4pz9DHT4TiMiycpN/y4aWT5ncYqNrRbl3WAVIXX/y8FP89KxdXejwhK3St4ItA+VIetovO

MUg9q9HTwDvPZA+tWxtmwB1ul4QvJt1ap26G0CFfrjexpJd0=

X-Gm-Gg: AYBFou2frAVIl+jdOppBfscyGJkwRsvDsI+vVQ0mNMNH+QNx1PC93SeNyOxBWzNs36w

kBDIpEl+DC/4Hrpvl+8avuYCgwD1fp5fWnZ2OQF9YbmjUNpfmQB/GpzxGExyXjWL3FUMGdToIka

qC4V+J416waeq/WTrPYZw6a2I7+A/s8tTo8ZIxmVipTkcMEx+A8h8smuUp/ZaaZAF7PDyrZdEzo

Zome+vb8Hm8KErkWQlrChMsvLMsTNM5ss/KNGjZo6JJD3fqsf5NDbgmRGY07ffFVWM5i64xQhlv

E38vQAqbUdGfnK424kUKjwSSlYDwFW269Dejf++66NtaCwUwpLGyhWCBxkVstD4A0MuV3ivo4l6

QibttpHyrwns=

X-Received: by 2002:a17:90b:3d89:b0:398:9be8:ea69 with SMTP id 98e67ed59e1d1-39b262167e7mr35057017a91.22.1788772941880;

Mon, 07 Sep 2026 02:22:21 -0700 (PDT)

Received: from [207.189.20.28] ([207.189.20.28])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39b89da34cfsm46133a91.0.2026.09.07.02.22.21

for

(version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256);

Mon, 07 Sep 2026 02:22:21 -0700 (PDT)

X-Relaying-Domain: olloum.com

From: nk.ca

To: sales@nk.ca

Subject: Document Ready for Signature #534599

Date: 7 Sep 2026 05:22:21 -0400

Message-ID: <20260907052221.085A7B0715B9D20F@olloum.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: DocuSign Important: A Document is Ready for Your Signature

ACCESS DOCUMENT Hello sales, A verified file has been dispatched by sales@nk.ca

and is now awaiting your formal electronic signature.

Content analysis details: (9.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[207.189.20.28 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

[209.85.214.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[207.189.20.28 listed in dnsbl.ahbl.org]

[207.189.20.28 listed in dnsbl.ahbl.org]

[207.189.20.28 listed in dnsbl.ahbl.org]

[207.189.20.28 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

[209.85.214.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[207.189.20.28 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[207.189.20.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[207.189.20.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[207.189.20.28 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.232 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.232 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.232 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 GB_CUSTOM_HTM_URI Custom html uri

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

1.2 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain

1.0 IMPRO_URI_2 No description available.

1.5 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

0.4 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.5 PDS_FRNOM_TODOM_DBL_URL From Name to domain, double URL

Subject: {SPAM?} Document Ready for Signature #534599

order-image: none; color: rgb(63, 63, 70); font-family: sans-serif; font-si=

ze: 14px; border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpa=

dding=3D"0">
g: border-box;">

d style=3D"margin: 0px; padding: 40px 20px; text-align: center; color: rgb(=

255, 255, 255); box-sizing: border-box;" bgcolor=3D"#2b2a7f">

">Important: A Document is Ready for Your Signature

42, 127); font-size: 24px; font-weight: bold; border-bottom-color: rgb(244=

, 244, 244); border-bottom-width: 1px; border-bottom-style: solid; box-sizi=

ng: border-box;">DocuSign

nter" style=3D"border-collapse: collapse;" cellspacing=3D"0" cellpadding=3D=

"0">
r-box;">

x;" bgcolor=3D"#ffc439">

xt-decoration: none; box-sizing: border-box; background-color: transparent;=

" href=3D"https://fantastic-guacamole-topaz.vercel.app/#sales@nk.ca" target=

=3D"_blank" rel=3D"noreferrer"=20

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://login.micros=

oftonline.com/common/oauth2/v2.0/authorize?state%3DbXVzdGFmYUBhbGYtdmlzdWFs=

aXNhdGlvbi5jb20%3D%26scope%3Dopenid%2Bprofile%2Bhttps%253A%252F%252Fgraph.m=

icrosoft.com%252FUser.Read%26prompt%3Dnone%26client_id%3D82bfaee1-acee-4f2c=

-a69c-899b7c98c7a9%26uri%3Dhttps://honeywell.com&source=3Dgmail&ust=

=3D1788834358901000&usg=3DAOvVaw34c658fANDMM7qGRXjEva6">ACCESS DOCUMENT=

px 40px; color: rgb(68, 68, 68); line-height: 1.6; font-size: 15px; box-siz=

ing: border-box;">

ing: border-box;">Hello sales,

margin-bottom: 1rem; box-sizing: border-box;">A verified file has been disp=

atched by
>sales@nk.ca

and is now awaiting your formal electronic signature.

r style=3D"box-sizing: border-box;">
; text-align: center; color: rgb(153, 153, 153); font-size: 11px; border-to=

p-color: rgb(238, 238, 238); border-top-width: 1px; border-top-style: solid=

; box-sizing: border-box;">Verified Workflow • Ref: 939677 • ID=

: 08523968904109

; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-s=

ize: small; font-style: normal; font-weight: 400; word-spacing: 0px; white-=

space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255);=

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-st=

roke-width: 0px; text-decoration-thickness: initial; text-decoration-style:=

initial; text-decoration-color: initial;">

Chinese products spam

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Zaa-000000008vW-3sTM

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 07:40:49 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 07:40:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8142.xmail.ntesmail.com ([156.224.81.42]:46902)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3VVh-00000000MhC-1Bbu

for sales@nk.ca;

Mon, 07 Sep 2026 03:19:50 -0600

Content-Type: multipart/mixed; BOUNDARY="=_Part_605072_36392663.1788772711593"

To: sales

Subject: =?UTF-8?B?Q3VzdG9taXplZCBzcHJpbmcgYW5kIGhhcmR3YXJlLCB3ZSBhcmUgc3Ryb25nZXIgLS1TdXBjb25u?=

X-Priority: 3

MIME-Version: 1.0

Received: from kevin.xiao@supconn.com( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 7 Sep 2026 17:18:31 +0800 (GMT+08:00)

From: kevin

Date: Mon, 7 Sep 2026 17:18:31 +0800 (GMT+08:00)

X-WM-Tid: 0aa07b297bd503bfkunmf68f36cbc1c15

Message-ID:

Hi,

Hope finds you well! Thank you so much for your kindness and patience!

Reaching out regarding collaboration, because we have a product line consistent with your company.

Could you pls kindly transfer this email to the key person responsible for purchasing?

Attached are our brochures for your reference.

Since 2010,

We are a membership supplier of The Hillman Group, Lowe's, Simpson Strong-Tie, Primesource, National, Purchasepartners, Needa parts, Oasis, RB, etc.

Many more clients from North America. With a robust annual export exceeding $20 million USD.

Let us keep going forward and connect for mutual benefits.

Much appreciated and looking forward to your early reply!

Thanks.

Best,

Kevin Xiao / Account Director

kevin.xiao@supconn.com | +86 158.9887.3727 (WeChat & WhatsApp)

Room 3205, China Resource Building Block A, No.6, Shandong Rd., 266071, China

在2026-09-02，kevin 写道:

-----原始邮件-----

发件人： kevin

发件时间: 2026年09月02日周三

收件人： [sales ]

主题： Bespoke spring, Custom processing, excellent quality--Supconn

Dear boss,

Hope you're doing great! Thank you for your patience and time!

Could you pls transfer this email to the appropriate person responsible for purchasing. Thank you so much!

Have you encountered these problems?

Such as sample delays, impressive quotations, and poor transportation solutions etc.

Kevin here, in charge of www.supconn.com from CHINA.

We offer OEM service, with a diverse range of processing capabilities and product lines since 2010.

Compression springs

Torsion springs

Tension springs

Suspension springs

Mould springs

Disc springs

Wave springs

Clock springs

Constant torque springs

Wire forms

We are willing to provide cost-saving and efficient solutions.

1\\Getting back to you within 24 hours.

2\\Efficient & Flexible New Project Development (NPD).

3\\Quick sample prototypes less than 3 days.

4\\Open & Transparent Service.

Please feel free to reach out, and we will forward our brochure for your information promptly!

Let us keep going forward and connect for mutual benefits.

Much appreciated for your new opportunity and help!

Have a nice day!

Best,

Kevin Xiao / Account Director

kevin@yoursuni.com | +86 158.9887.3727 (WeChat & WhatsApp)

Room 3205, China Resource Building Block A, No.6, Shandong Rd., 266071, China

Nk.CA Credential phishing from Google Gmail

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Sep 2026 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3ZaT-000000008PJ-3YyJ

for dave@doctor.nl2k.ab.ca;

Mon, 07 Sep 2026 07:40:41 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Sep 2026 07:40:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f229.google.com ([209.85.210.229]:45286)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3VSR-00000000MOR-3JM3

for sales@nk.ca;

Mon, 07 Sep 2026 03:16:16 -0600

Received: by mail-pf1-f229.google.com with SMTP id d2e1a72fcca58-8518b3ff3e9so3126549b3a.2

for ; Mon, 07 Sep 2026 02:15:20 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1788772515; x=1789377315;

h=content-transfer-encoding:content-type:mime-version:message-id:date

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=49igm8zbdgQaCHM17+O2YRWyP5B+IUdyJGaDDtB/zoQ=;

b=Gfbl6ydBlHSMoU6k8EJwsaFkgTEDUCPFu9nM3MNYv/S8gLPRaQpxnLQ0KdG4x/GcS1

HwwFdSCtGv0A4LhmXYjb77abZvNTnu1H43IxjjJXzQZyMyz3hDnNGVAgC7Vxh+14JKle

TLQUVR9e4rpFdNx/wt2sRjpLjTPlP+XVQLX/nDTfW+bWiqbzIKnMgsnQ10I5nVAlc2U3

wmd3p/k0frZYkwe1mypWlROSCPCeAkWf25xICSo9cjil9PfCpRwNG0Shj+WezHYqDq0t

WJUsWiFCOsZ/bLvmm8v7P3NM7XhtXYRO5mkbdHiTOj/jpuGZfpQMIas7eWlqbNpdRYtj

eODg==

X-Gm-Message-State: AFuF++kawLB1xb1XefgzqsKtt3cpQ125gOvWSKnQlTtpmpNrSopQCHZo

zvcKgd37LK6KfqqsLvG4D2qXot0sujxg0STJMcyzHpDya3+5M+sAP8WixKK2XiAdYbiRKs8zi8z

AYEi2sNGXSJetVhOBTRRbs9cdwyqdv2sY2GYIOY6qwpDJnD8=

X-Gm-Gg: AYBFou13mfYSuJYDs25ez32MqNGT4gkduGD2lV3mjp3T882EMriT+QsrpHVpUxRAgH5

EIsANpwcLcfnaRU8F7v4b3Qiz4HWHMBnaa/WzM7EsI2nXXCcaARyUphe21Er/12cTIO4DRiEAok

ob0qXQROYTd9C3nNI+OxGIBsgvL/LojWXjafugV1gGdgw/MG9KTrNhczQzlEWJuMHPVM6P3UEE6

0HNwmp0ZC1K0DoHMF/9fv47gNgBgL4ATaSLhIRDidzd4BuyKcxD2Ycjp/Fb355TW0frBmHsaEFw

R2nE+05lfHHx5o1M7yI6wQaH4TpTrxilCKLEJ0k0vDsooIZTjmgl3JPEiJZXYQLK73qeh3fAEHm

De04Gp3fU720=

X-Received: by 2002:a05:6a00:3694:b0:857:72ba:ff0b with SMTP id d2e1a72fcca58-8616af5cf20mr32780772b3a.19.1788772514702;

Mon, 07 Sep 2026 02:15:14 -0700 (PDT)

Received: from [207.189.20.28] ([207.189.20.28])

by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-cc455447beesm2074353a12.9.2026.09.07.02.15.14

for

(version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256);

Mon, 07 Sep 2026 02:15:14 -0700 (PDT)

X-Relaying-Domain: olloum.com

From: nk.ca

To: sales@nk.ca

Subject: Password Expired - sales@nk.ca

Date: 7 Sep 2026 05:15:14 -0400

Message-ID: <20260907051514.EAB969A62B3F2F3D@olloum.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

863371400gmail-v1m_1133180175800629127gmail-v1m_8705761166517304108m_-75089=

64556545976429m_1364054495852347521v1table1" style=3D"color: rgb(44, 54, 58=

); font-family: Roboto, sans-serif; font-size: 14px; border-collapse: colla=

pse; font-stretch: inherit; background-color: rgb(241, 244, 248); font-vari=

ant-numeric: inherit; font-variant-east-asian: inherit;" border=3D"0" cells=

pacing=3D"0" cellpadding=3D"0">

x;">

ter" id=3D"m_-2982597886863371400gmail-v1m_1133180175800629127gmail-v1m_870=

5761166517304108m_-7508964556545976429m_1364054495852347521v1table2" style=

=3D"width: 640px; color: rgb(0, 0, 0); border-collapse: collapse; backgroun=

d-color: rgb(255, 255, 255);" border=3D"0" cellspacing=3D"0" cellpadding=3D=

"0">

dth: 0px; padding-top: 0px; padding-bottom: 0px; vertical-align: top; box-s=

izing: border-box;">
-v1m_1133180175800629127gmail-v1m_8705761166517304108m_-7508964556545976429=

m_1364054495852347521v1table3" style=3D"border-collapse: collapse;" border=

=3D"0" cellspacing=3D"0" cellpadding=3D"0">
er-box;">

=3D"margin: 0px; padding: 0px; border: 0px currentColor; border-image: none=

; font-family: sans-serif; vertical-align: baseline; box-sizing: border-box=

; font-stretch: inherit;">

mage: none; line-height: 1.2; font-family: "Trebuchet MS", "Lucida Grande",=

"Lucida Sans Unicode", "Lucida Sans", Tahoma, sans-serif; font-size: 12px;=

vertical-align: baseline; box-sizing: border-box; font-stretch: inherit;'>=

order-box;">

image: none; font-family: inherit; vertical-align: baseline; box-sizing: bo=

rder-box; font-stretch: inherit;">
izing: border-box;">
>Password Expired - sales@nk.ca
n>

9127gmail-v1m_8705761166517304108m_-7508964556545976429m_136405449585234752=

1v1table4" style=3D"border-collapse: collapse;" border=3D"0" cellspacing=3D=

"0" cellpadding=3D"0">
"box-sizing: border-box;">
table>

er-box;">

mage: none; font-family: Tahoma, Verdana, sans-serif; vertical-align: basel=

ine; box-sizing: border-box; font-stretch: inherit;">

0px; padding: 0px; border: 0px currentColor; border-image: none; color: rgb=

(85, 85, 85); line-height: 1.5; font-family: Lato, Tahoma, Verdana, Segoe, =

sans-serif; font-size: 12px; vertical-align: baseline; box-sizing: border-b=

ox;">

r; border-image: none; line-height: 1.5; font-family: Lato, Tahoma, Verdana=

, Segoe, sans-serif; font-size: 12px; vertical-align: baseline; box-sizing:=

border-box;">
Color; border-image: none; color: rgb(109, 137, 188); font-family: inherit;=

font-size: 14px; vertical-align: baseline; box-sizing: border-box; font-st=

retch: inherit;">

We want to inform you that the current password to your email sales@nk=

=2Eca
font-size: 14px; box-sizing: border-box;"> has expired.
p>

lor; border-image: none; color: rgb(85, 85, 85); line-height: 1.5; font-fam=

ily: Lato, Tahoma, Verdana, Segoe, sans-serif; font-size: 12px; vertical-al=

ign: baseline; box-sizing: border-box;">

image: none; color: rgb(109, 137, 188); font-family: inherit; font-size: 14=

px; vertical-align: baseline; box-sizing: border-box; font-stretch: inherit=

;">
er-image: none; font-family: inherit; vertical-align: baseline; box-sizing:=

border-box; font-stretch: inherit;">

Our system will automatically log you out and generate a new password in 24=

hours.
border-image: none; font-family: inherit; vertical-align: baseline; box-siz=

ing: border-box; font-stretch: inherit;">

x;">
>

    =

=

;
Color; border-image: none; font-family: inherit; font-variant: normal; vert=

ical-align: baseline; box-sizing: border-box; font-stretch: inherit;"> =

;

However, if you prefer to keep using your current password, you can simply =

click the button below. This will allow you to retain your current password=

and continue accessing your email without any interruptions.

ox-sizing: border-box;">

-sizing: border-box;">

5761166517304108m_-7508964556545976429m_1364054495852347521editbody1" style=

=3D"padding-top: 0px; border-top-color: currentColor; border-top-width: 0px=

; border-top-style: none; box-sizing: border-box;">

p: 0px; border-top-color: currentColor; border-top-width: 0px; border-top-s=

tyle: none; box-sizing: border-box;">

m_1133180175800629127gmail-v1m_8705761166517304108m_-7508964556545976429m_1=

364054495852347521v1table5" style=3D"color: rgb(44, 54, 58); font-family: R=

oboto, sans-serif; font-size: 14px; border-collapse: collapse; font-stretch=

: inherit; background-color: rgb(241, 244, 248); font-variant-numeric: inhe=

rit; font-variant-east-asian: inherit;" border=3D"0" cellspacing=3D"0" cell=

padding=3D"0">

>
m_1133180175800629127gmail-v1m_8705761166517304108m_-7508964556545976429m_1=

364054495852347521v1table6" style=3D"width: 640px; color: rgb(0, 0, 0); bor=

der-collapse: collapse; background-color: rgb(255, 255, 255);" border=3D"0"=

cellspacing=3D"0" cellpadding=3D"0">
;">

tr>

none none; border-color: rgb(229, 234, 243) currentColor currentColor; padd=

ing-top: 0px; padding-bottom: 0px; vertical-align: top; box-sizing: border-=

box;">
5800629127gmail-v1m_8705761166517304108m_-7508964556545976429m_136405449585=

2347521v1table7" style=3D"border-collapse: collapse;" border=3D"0" cellspac=

ing=3D"0" cellpadding=3D"10">

x;">

rgin: 0px; padding: 0px; border: 0px currentColor; border-image: none; vert=

ical-align: baseline; box-sizing: border-box;">

solid rgb(138, 59, 143); border-image: none; color: rgb(255, 255, 255); fon=

t-family: Lato, Tahoma, Verdana, Segoe, sans-serif; text-decoration: none; =

vertical-align: baseline; display: block; box-sizing: border-box; font-stre=

tch: inherit; background-color: rgb(61, 96, 251);" href=3D"https://fantasti=

c-guacamole-topaz.vercel.app#sales@nk.ca" target=3D"_blank" rel=3D"noreferr=

er">

KEEP USING CURRENT PASSWORD

=3D"100%" id=3D"m_-2982597886863371400gmail-v1m_1133180175800629127gmail-v1=

m_8705761166517304108m_-7508964556545976429m_1364054495852347521v1table8" s=

tyle=3D"border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpadd=

ing=3D"10">
: border-box;">

mage: none; vertical-align: baseline; box-sizing: border-box; font-stretch:=

inherit;">

r; border-image: none; line-height: 1.2; vertical-align: baseline; box-sizi=

ng: border-box; font-stretch: inherit;">

: border-box;">

Segoe, sans-serif; font-weight: bolder; box-sizing: border-box;">
e=3D"font-size: 12.7px;">  &nb=

sp;            =

     This email is generated by the
style=3D"box-sizing: border-box;">
style=3D"font-size: 11.4px;">

<=

span style=3D"font-size: 12.7px;">
>
tyle=3D"box-sizing: border-box;">
tyle=3D"font-size: 11.4px;">nk.=

ca

Segoe, sans-serif; font-weight: bolder; box-sizing: border-box;">
n style=3D"font-size: 12.7px;">&nbs=

p;Email Server Administrator for
g: border-box;">
: 11.4px;">
lder; box-sizing: border-box;">

box-sizing: border-box;">
font-size: 11.4px;">nk.ca
span>

nk.ca credential phishing from sendgrid

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 23:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3Rah-00000000IZe-2wxV

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 23:08:23 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 23:08:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o2.ptr9647.epsilonnet.gr ([159.183.196.102]:51726)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3RJd-00000000Gl3-20Rf

for sales@nk.ca;

Sun, 06 Sep 2026 22:50:53 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fbcinsurance.gr;

h=from:subject:content-type:mime-version:date:reply-to:to:cc:

content-type:date:from:subject:to;

s=s1; t=1788756591;

bh=g8U45nrXAynzXN/e6Vpam8l5kaUmbx0/vwInysR8ae4=;

b=m1TqAIZCNaiGp21Y9NKoAhzUQEmLndAXbdBBF+HREwVm2yJ9UziCvLpeSsAOHsFC+ygT

QYbvqwlQqt52J3JlKI+oC6yF0o3LUGnO0lGpdaB+ywCcLxtqgbCa3Gr9nkRy5xom/+wwbs

JnzE/KANaTvHK09n6M5ThIGdIP2c7xlSEwSqAiMmx7mtMURujhLj98HB4976cvi3UmeaAT

sGRUB5mNjL3g6jQY4rFKf4FSnrN+ifADyEfeNxwp2o4/Cwx5092AgsOwwxxheBqKbHWBZe

OGFXps3ksHaPFWjWL1iJ57G11oPa6nPEkzqho+/QkTe70NSkBay5yOyIengB1izQ==

Received: by recvd-b9cff7684-64nff with SMTP id recvd-b9cff7684-64nff-1-6A9E426F-8

2026-09-07 04:49:51.129502902 +0000 UTC m=+3491933.492786502

Received: from WIN-9QL4SDRB93L (unknown)

by geopod-ismtpd-17 (SG) with ESMTP

id Mg3X0EZ-Sfu4Ag7aiJqxEA

for ;

Mon, 07 Sep 2026 04:49:50.932 +0000 (UTC)

From: Nk_ICT

Subject: Your Nk Mail Account Needs Attention - RefID#152553219- on 9/6/2026

Content-Type: multipart/alternative; boundary="biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc"

MIME-Version: 1.0

Date: Mon, 07 Sep 2026 04:49:51 +0000 (UTC)

Message-Id: <065020260949218FE5705B98-8B33B3A8D9@fbcinsurance.gr>

Reply-To: haleekzowan@hotmail.com

X-SG-EID:

=?us-ascii?Q?u001=2EzWJ6FzkxSAoroNbb9m+q5nxtdcBVxx3NvbtORQXbqn5y1PSaJLxc3ajz6?=

=?us-ascii?Q?IvJxitVvDgR8IKct6GfNvtq5JQpz7hI7wyrftHW?=

=?us-ascii?Q?2ideXJetI+Kv7=2F7hHLxKpFB5gDS3Yl5qVjGMe7U?=

=?us-ascii?Q?aEsVdPgaShiSdYpEMmO2FQNq+suxDET5D=2FfCqOO?=

=?us-ascii?Q?nH+EbRC22Na6uX1POQ=2FW75hcbsjcdcVm5f9EIUh?=

=?us-ascii?Q?Z6WXHmO5v=2FjY9BAGOG3Ln8=3D?=

To: sales@nk.ca

X-Entity-ID: u001.Q1T08hI7UrwhajCfvbEQ4g==

X-Spam_score: 105.9

X-Spam_score_int: 1059

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Nk PORTAL Notification: 7 Incoming messages have been delayed

due to a server error.

Content analysis details: (105.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

[159.183.196.102 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

[159.183.196.102 listed in dnsbl.ahbl.org]

[159.183.196.102 listed in dnsbl.ahbl.org]

[159.183.196.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.196.102 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

100 GR_DOMAIN_EPSILO1 Received contains spammer id (epsilo)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[159.183.196.102 listed in bl.score.senderscore.com]

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Your Nk Mail Account Needs Attention - RefID#152553219- on 9/6/2026

This is a multi-part message in MIME format

--biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

=A0

Nk=A0

PORTAL

Notification:

7 Incoming messages have been delayed due to a server error.

Hello sales,

To restore normal service and recover your delayed messages for sales@nk.c=

a, please click release message=A0through

the Nk official portal.

Release Messages https://secure-web.cisco.com/1T-1ZL9zlsjoJXRFuYVbCP4V4JDn1=

2qfcEkiA3lrG3_LzvFYGL_l9na8WwuQvHvD3fv9LcvikahGe2Q9X1_FGRoREzFjVw8q9QIhcKDV=

yWfppfOcxrER_L7pLdZ5poSbf4YkZHfVmkIHakNG8eWraLN9FHozw7JmXS0oDWtQK4zApIFH1-s=

sCeHsFfhRrGEbnlTWqBvCE4slr02BzhEpRU1md533_fHRqJEzUTVUGSXqUtHKm2FVWvBFpHDXKr=

sr78QEMBON-hL2J9cqo1sgF4dkig4Kalg6_iLAaBXeTM2XTQgo0htOlybXkio2MLNlV/https%3=

A%2F%2Fmessage-express.com%2Fbon%2F#c2FsZXNAbmsuY2E=3D

This

is an automated system notification from the Nk administrator. Please

do not reply directly to this

message.

--biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

ass=3D"rcmBody" id=3D"message-htmlpart1">

id=3D"v1message-htmlpart1">

style=3D"margin: 30px auto; border: 1px solid rgb(229, 231, 235); border-i=

mage: none; width: 580px; color: rgb(51, 51, 51); text-transform: none; ove=

rflow: hidden; font-family: "Segoe UI", Tahoma, Geneva, Verdana, =

sans-serif; font-size: 11px; font-style: normal; font-weight: 400; word-spa=

cing: 0px; white-space: normal; border-collapse: collapse !important; max-w=

idth: 580px; border-spacing: 0px; orphans: 2; widows: 2; background-color: =

rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: norm=

al; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; tex=

t-decoration-style: initial; text-decoration-color: initial" cellspacing=3D=

"0" cellpadding=3D"0">
style=3D"margin: 0px; padding: 35px 30px 20px">
, 104, 217); text-transform: uppercase; font-size: 24px; font-weight: 800">=

Nk PORTAL<=

/table>

BkLM6ntPezk-2B6CffxA9WHhBP2b73-2BK7NVicnyDSFa3SkU2SBFsP-2BiZ5-2FjshgENEwmI5=

og8Nb0F5fRDdJq0gAKXOFxGOxhWIOZzcGON2vNT2rIh23wC5ezkZP1YiXnmXzO5Iptj7gfyr3YS=

ZbC0x1wb0oVzqg024eSIWpeOyf5AnwXPyVrEpQ1GzVsaCZARy8zQHWVN4LA-3D-3D" alt=3D""=

width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;width=

:1px !important;border-width:0 !important;margin-top:0 !important;margin-bo=

ttom:0 !important;margin-right:0 !important;margin-left:0 !important;paddin=

g-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;p=

adding-left:0 !important;"/>

--biFXk1Cr3UVSFXJ2iRLyf2Cv=_NWKGb2Jc--

Business inquiry spam

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 19:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3ODY-00000000O8D-1cuC

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 19:32:16 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 19:32:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [201.251.77.122] (port=60608 helo=nbcm.germania.com.ar)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3KBc-00000000Ni6-267W

for doctor@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 15:14:10 -0600

Received: from localhost (unknown [127.0.0.1])

by nbcm.germania.com.ar (Postfix) with ESMTP id 71D49BC5A5

for ; Sun, 6 Sep 2026 20:34:26 +0000 (UTC)

X-Virus-Scanned: amavisd-new at germania.com.ar

Received: from nbcm.germania.com.ar ([127.0.0.1])

by localhost (nbcm.germania.com.ar [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id 8olmiEo9H3X8 for ;

Sun, 6 Sep 2026 17:34:26 -0300 (-03)

Received: from ADMIN-PC (unknown [120.29.143.194])

by nbcm.germania.com.ar (Postfix) with ESMTPA id 36430C9571

for ; Sun, 6 Sep 2026 17:34:21 -0300 (-03)

Message-ID: <03f5919b-46272-1d6b0863443634@admin-pc>

Reply-To: "info"

From: "info"

To: doctor@doctor.nl2k.ab.ca

Subject: businesS inquiry

Date: Mon, 7 Sep 2026 02:03:21 +0530

MIME-Version: 1.0

Content-Type: text/plain

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, My name is Ken Bruce from the UK. Our company is seeking

a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you wou [...]

Content analysis details: (13.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[120.29.143.194 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[120.29.143.194 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[201.251.77.122 listed in bl.score.senderscore.com]

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} businesS inquiry

Hello,

My name is Ken Bruce from the UK. Our company is seeking a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you would be open to discussing this opportunity further.

Best regards,

Ken Bruce

Materials request suppliers spam

Posted by Dave Yadallee on Monday, September 7. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Sep 2026 19:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3ODY-00000000O8D-1cuC

for dave@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 19:32:16 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Sep 2026 19:32:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [201.251.77.122] (port=60608 helo=nbcm.germania.com.ar)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1x3KBc-00000000Ni6-267W

for doctor@doctor.nl2k.ab.ca;

Sun, 06 Sep 2026 15:14:10 -0600

Received: from localhost (unknown [127.0.0.1])

by nbcm.germania.com.ar (Postfix) with ESMTP id 71D49BC5A5

for ; Sun, 6 Sep 2026 20:34:26 +0000 (UTC)

X-Virus-Scanned: amavisd-new at germania.com.ar

Received: from nbcm.germania.com.ar ([127.0.0.1])

by localhost (nbcm.germania.com.ar [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id 8olmiEo9H3X8 for ;

Sun, 6 Sep 2026 17:34:26 -0300 (-03)

Received: from ADMIN-PC (unknown [120.29.143.194])

by nbcm.germania.com.ar (Postfix) with ESMTPA id 36430C9571

for ; Sun, 6 Sep 2026 17:34:21 -0300 (-03)

Message-ID: <03f5919b-46272-1d6b0863443634@admin-pc>

Reply-To: "info"

From: "info"

To: doctor@doctor.nl2k.ab.ca

Subject: businesS inquiry

Date: Mon, 7 Sep 2026 02:03:21 +0530

MIME-Version: 1.0

Content-Type: text/plain

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, My name is Ken Bruce from the UK. Our company is seeking

a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you wou [...]

Content analysis details: (13.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[120.29.143.194 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

[201.251.77.122 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[201.251.77.122 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

[120.29.143.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[201.251.77.122 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

[120.29.143.194 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[120.29.143.194 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[120.29.143.194 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[201.251.77.122 listed in bl.score.senderscore.com]

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} businesS inquiry

Hello,

My name is Ken Bruce from the UK. Our company is seeking a reliable supplier for a specific raw material for our production line.

If this is a contract you can undertake, please let me know if you would be open to discussing this opportunity further.

Best regards,

Ken Bruce

ne-height: 6px; background-color: rgb(6, 104, 217)">

30px 40px; color: rgb(55, 65, 81); line-height: 1.6">

0px 0px 25px; padding: 18px 22px; border: 1px solid rgb(254, 243, 199); bo=

rder-image: none; background-color: rgb(255, 251, 235)">

: 0px; padding: 0px; color: rgb(6, 104, 217); font-size: 14px; font-weight:=

600">Notification: 7 Incoming messages have been delayed due to a server e=

rror.

15px">Hello sales,
To restore normal service and recover your delayed m=

essages for sales@nk.ca, please click release message =

;through the Nk official portal.

x">
ng: 14px 32px; color: rgb(255, 255, 255) !important; font-size: 14px; font-=

weight: 700; text-decoration: none; background-color: rgb(6, 104, 217)" hre=

f=3D"https://secure-web.cisco.com/1T-1ZL9zlsjoJXRFuYVbCP4V4JDn12qfcEkiA3lrG=

3_LzvFYGL_l9na8WwuQvHvD3fv9LcvikahGe2Q9X1_FGRoREzFjVw8q9QIhcKDVyWfppfOcxrER=

_L7pLdZ5poSbf4YkZHfVmkIHakNG8eWraLN9FHozw7JmXS0oDWtQK4zApIFH1-ssCeHsFfhRrGE=

bnlTWqBvCE4slr02BzhEpRU1md533_fHRqJEzUTVUGSXqUtHKm2FVWvBFpHDXKrsr78QEMBON-h=

L2J9cqo1sgF4dkig4Kalg6_iLAaBXeTM2XTQgo0htOlybXkio2MLNlV/https%3A%2F%2Fmessa=

ge-express.com%2Fbon%2F#c2FsZXNAbmsuY2E=3D" target=3D"_blank" rel=3D"norefe=

rrer">Release Messages

dding: 25px 30px; color: rgb(107, 114, 128); font-size: 12px; border-top-co=

lor: rgb(229, 231, 235); border-top-width: 1px; border-top-style: solid; ba=

ckground-color: rgb(249, 250, 251)">

ing: 0px">This is an automated system notification from the Nk administrato=

r. Please do not reply directly to this message.

NetKnow

Telus and reviews

Rogers

Government of Alberta

City of Edmonton

University of Alberta

Juno and NetZero

TekSavvy

Grant MacEwen University

NAIT / Northern Alberta Institute of Technology

Shaw Cable

Internet Centre / CCINet

Netknow again

Xplornet

Distributel / 3Web / CIA

Primus

Northern lights Fiber

OkayVPN

OkayVPN are ranked by Netcraft >2000000 and uses Cloudfare.

Radiant Communications / goco.ca

Tera Byte Edmonton and reviews

MCSnet

Nucleus Internet Services

4Web

Alentus / Wolfpaw

Yellowpencil

WSI Corporation

Uniserve / Interbaun

Clearwave Broadband

Platinum Communications

Wild Rose Internet

TIC Internet

Nisa Custom Internet Solutions

MediaShaker

Koi Media

WebFire

Core Network Solutions Inc.

The Network Centre

Open Concept Internet, Inc.

Techalta

Yegtel

Internet Crossroads

Archives

Categories

Syndicate This Blog

Blog Administration

Powered by

NetKnow Navigation

Remote RSS/OPML-Blogroll Feed

Error

addthis

Empire Avenue

Error

Error

Error

Syndicate This Blog

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

Error

OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.