Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 08:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwhbO-000000001eZ-3Yns

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 08:49:14 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 08:49:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f170.google.com ([209.85.214.170]:52297)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwh77-00000000N4h-0f3m

for sales@nk.ca;

Wed, 19 Aug 2026 08:18:06 -0600

Received: by mail-pl1-f170.google.com with SMTP id d9443c01a7336-2d0407aedd6so10356505ad.0

for ; Wed, 19 Aug 2026 07:17:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787149024; x=1787753824; darn=nk.ca;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=q0occxZ7ydvmJTzl0x98NXAkuzpk2PzICNOqN9aRtm4=;

b=q0lps6w6YNt8X/Jo+tVVChi8NyiotmRZCwJauK33KmDUrMgyRrSxlNBA/9MSQCbqz0

6ts4keempvv9m4HGnaqoYYt11yTg+SUdBnjESbBZh5N9zsV4pGpDZNXn1icFOV0ubbkn

5cueVvJivr0rTBiPIM14oxP74GvCS/OQvLit8UV/jopcMcVrNbkzQheg2+9ae70RgxnZ

hfAxflKlp0+pPaZw90u/UrJrWZZghlvsEmwWH/DicDi8c5en/egWTVxt++XcwsGKPJRz

v/Nha97dlagyTTD4+AvRW7UM5uJp28Ga3Tg+RsRi4Knsv1UYbmPvQFX3wyn4aBggdgvk

jLZg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787149024; x=1787753824;

h=content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=q0occxZ7ydvmJTzl0x98NXAkuzpk2PzICNOqN9aRtm4=;

b=dZo+DSCctonbg1OUMyhRS/N0ykRYB/UVCIc9Kegz5AFlUK77wzqJJqiNk4UziC31jd

hISSmzNSVJTmAGEyfkz9OpBMPcGXw/kQcQAjmloPS3aAPww8fS04C1LMKPnr8xiRUVpU

wLtSmF1BE1sbAiPLUm3sGpLU2OUbhpEiV+chW/7fTsbFGsFi44ROuXnAw8SVacEx109S

lSgpXMMuvsnhukgTFB7+cyvGKZf1in6twAPgMxSIFz1Q48qhyN7xynQ1KtdslAEI2i6Q

s1TeuOGtJCKs3W/AysVvBapvnCDbLGYdiGfRLTUgbnd7qGbuWQRc71/tVarSeRVQOyvW

Z8kg==

X-Gm-Message-State: AFuF++l3NhZvFiW5Ot8qonrBxPyg0pD28rL82RbnJTXvMON1cSwRaMC8

DEb/jB36LSX6PYRA0iP/nlafgBl9hosJvBOmKzkl+mnTZTlRIVxbP4AeP81B8A==

X-Gm-Gg: AR+sD12DSUbmXlnQjsKPSZXcfTEv8csBV6hg+MNmOFeICQXaq2HglQm5LAlnI6EHaG9

X5DakqAwxjIK6HtzxXOdoVYeQs1DtGdKpvQyBsVHH4iyhmyYXU2f7pFfLNV6dl79lqHU58YyLtA

zs3To9flNR44TrL73VFI+BIFxmBB43ZH/nHSaLv/BF10jg+SXAPM38l7HKbjaGfNiagpuDgYkLn

w/1WYZecbj2N+PIcl0904yxJsix6s0VI1/fDIShKUv/srMJrrW3yido4av5pyvIzB+VeX7nVdJn

gQc0+aOEM0zBub3U3xkupjVxRkjZ5cLhQ0LjebuNiFKUOuplM3gA0CUQef19eoqMgrNFeXVtnar

/53+7Y0YgBn26bKHzYE3W5BvtrMc2z0Dc5kdYPSuRB+AhM5aX6QeohQcYDrnfxdRDOJbnc9f2L5

13bFjulTu8Y6Ckxu+O+eoxfA4GQ3JZE1e7WYueZiSPH8lNRJxUG5fBAb7fkKwtDtYqcs078b+Fd

Po9bQ==

X-Received: by 2002:a17:902:ce8b:b0:2ca:e9dc:7357 with SMTP id d9443c01a7336-2d5fd69da0dmr85186775ad.9.1787149023556;

Wed, 19 Aug 2026 07:17:03 -0700 (PDT)

Received: from DESKTOPT8FIBG2 ([122.161.78.240])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-2d5c1f01787sm24642755ad.82.2026.08.19.07.17.01

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 19 Aug 2026 07:17:02 -0700 (PDT)

From: "Melissa"

To:

Subject: Re: Errors?

Date: Wed, 19 Aug 2026 19:46:59 +0530

Message-ID: <10ef01dd2fe5$67bfc420$373f4c60$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_10F0_01DD3013.81780020"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Ad0v46tJA11W9fDfT4escBr8uXd5Xg==

Content-Language: en-us



This is a multipart message in MIME format.



------=_NextPart_000_10F0_01DD3013.81780020

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Greetings, sales@nk.ca







Can I send the fix outline now?







(Just "SEND" works.)



--Melissa







Sent: Tuesday, Aug 11, 2026 4:05 PM



To:



Subject: Website Errors??







Hello,







Your site , as of 03 Aug-26, has great potential, but a

few issues are holding it back. You will need to make some changes to get

your website ranked.







Can I send you a screenshot? No obligation at all.







Best regards,



Melissa





------=_NextPart_000_10F0_01DD3013.81780020

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">




















Linotype","serif"'>Greetings, 

sales@nk.ca






Linotype","serif"'> 






Linotype","serif"'>Can

I send the fix outline now?






Linotype","serif"'> 






style=3D'font-size:12.0pt;font-family:"Century Gothic","sans-serif";

background:yellow;mso-highlight:yellow'>(Just “SEND” =

works.)
style=3D'font-size:12.0pt;font-family:"Century =

Gothic","sans-serif"'>






Linotype","serif"'>--Melissa






Linotype","serif"'> 






Linotype","serif"'>Sent:

Tuesday, Aug 11, 2026 4:05 PM






Linotype","serif"'>To:

<sales@nk.ca>






Linotype","serif"'>Subject:

Website Errors??






Linotype","serif"'> 






Linotype","serif"'>Hello,






Linotype","serif"'> 






Linotype","serif"'>Your

site <https://www.nk.ca>, as of 03 Aug-26, has great potential, =

but a few

issues are holding it back. You will need to make some changes to get =

your

website ranked.






Linotype","serif"'> 






Linotype","serif"'>Can

I send you a screenshot? No obligation at all.






Linotype","serif"'> 






Linotype","serif"'>Best

regards,






Linotype","serif"'>Melissa

















------=_NextPart_000_10F0_01DD3013.81780020--



Canadian Who's Who spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 08:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwh3x-00000000McK-2wTq

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 08:14:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 08:14:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f70.google.com ([209.85.219.70]:50684)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwgpi-00000000GfH-3WiQ

for sales@nk.ca;

Wed, 19 Aug 2026 08:00:01 -0600

Received: by mail-qv1-f70.google.com with SMTP id 6a1803df08f44-8ea75996387so20431076d6.1

for ; Wed, 19 Aug 2026 06:59:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wcbrb.com; s=google; t=1787147945; x=1787752745; darn=nk.ca;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=+IQRRRfnY79fXmLWjF+Dlt8nkZ/xWHf7HYT0cZvgCZA=;

b=NYuvrTd+fFOff5vCZFtx3pjqRItBwFFbmp9YJzOo+VJKLsIF4yPBiniS0qAJzhKjlb

r+0Y25OCr0HT7UCf1PLkYJnnZlIFO33NVYBW0fOLg05Gkref/aqpwDQ4oC7xrUJvk39U

PKdUQqyw8f0p606q7bZYqQKpgRFM7pIciLFEfdWZ/pEU6cUu04Ff1kMA+sSSmpMjoE1h

I49dk+9z7dXJd7c1rQsjoPjFqJa9lzC8WfG62bF6WYaZ8VOJ05Yl/eWpe1r95rQoyKYc

OVEE/QFcZU33u/t0HcboRp6YJQ/VKyjJFy6UoXe4iCNz+ThcGo9X1JCqlbhLAXfNjePc

QI4w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787147945; x=1787752745;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=+IQRRRfnY79fXmLWjF+Dlt8nkZ/xWHf7HYT0cZvgCZA=;

b=TN9b6B0XrCfmfo/CHWnUALhngSS+cP1u572v1snJ0VknJAZcS8z54cgYQ89Ag66Luc

G0Kg/1lGkZqoQdpVnCIj3AUS9W9roKgZBOaokygczdxQGEznNmOeUfi5Zkcfou8QYeip

RdRGGIbyrEkjPlKOJrRBfmltwBrrrJHKVIW58u96RjYDsQYR9BnxWmTUT45YspVv2B6s

htRJ0kCFXVJ4cgSDfN029MbHS/jx6MhZCskYPcuWulBThHwFC3E6CB/ZcbhV3lQbSv6A

IesQzcflgbV4EDC5Fmv0HULIx8I4IHnq7rSaAFVtwB+YkX1E6EJV3Rb5vC9AxCoTsLBV

c8NA==

X-Gm-Message-State: AFuF++lEICtEsWuas34xXt5FkOYgQgRfXNB2S/qzptYoovQ5qkhGdER/

cPIFEiNwiT9LgT2hdUIhc+EYR2pzwd4pMkzOJOgD7Ww1lKKAlcdwsf3ivtA1snSZnnETrGdk0io

UM19JVFT6oGGWNeU2ihOigQ==

MIME-Version: 1.0

X-Received: by 2002:a05:690e:5c3:b0:665:a0c:6595 with SMTP id

956f58d0204a3-66ccb6b7e8emr1279916d50.54.1787147559291; Wed, 19 Aug 2026

06:52:39 -0700 (PDT)

Message-ID:

Date: Wed, 19 Aug 2026 13:52:39 +0000

Subject: Netknow Internet Service selected for CBRB Best Businesses in Canada 2026

From: canadianreview@wcbrb.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Congratulations on being selected and approved for

the CBRB Best Businesses in Canada 2026. The CBRB Canadian Business Review

Board assesses and evaluates businesses across Canada and verifies only those

that meet the CBRB Canadian Business Review Standards.



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

[209.85.219.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.70 listed in dnsbl.ahbl.org]

[209.85.219.70 listed in dnsbl.ahbl.org]

[209.85.219.70 listed in dnsbl.ahbl.org]

[209.85.219.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.70 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: www.thecbrb.com]

[URI: wcbrb.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: thecbrb.com]

[URI: wcbrb.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Netknow Internet Service selected for CBRB Best Businesses in Canada 2026



Hello,



Congratulations on being selected and approved for the CBRB Best Businesses in Canada 2026.



The CBRB Canadian Business Review Board assesses and evaluates businesses across Canada and verifies only those that meet the CBRB Canadian Business Review Standards.



Representing the Best Businesses in Canada, the CBRB Canadian Business Review Board has determined that your business meets our review standards, and we look forward to recognizing your achievements and recommending your services.



Membership in the CBRB Best Businesses in Canada 2026 includes listing in our exclusive national directory, official recognition through the CBRB Best Businesses in Canada 2026 Verification Certificate and Custom Badge, as well as promotional content highlighting Netknow Internet Service commitment to upholding:



• Strong Vision

• Customer-Centric Approach

• Customer Satisfaction

• Business Leadership



CBRB verification is granted based on your business meeting our review standards. CBRB membership provides additional benefits, as outlined in the registration form.



The standard CBRB Best Businesses in Canada 2026 badge may be requested by emailing info@thecbrb.com; your custom verification badge, along with membership options are available through the registration form, with applicable administrative fees outlined within the form.



Following registration, you will receive:

• CBRB Best Businesses in Canada 2026 Verification Certificate

• CBRB Best Businesses in Canada 2026 Custom Verification Badge

• CBRB Best Businesses in Canada 2026 Directory Listing & Profile Page



CBRB Canadian Business Review Board may highlight verified businesses on official CBRB social media.



To accept your CBRB Best Businesses in Canada 2026 membership, please complete the following form:

https://forms.gle/JpvTnaRwSshttUum9



If you have any questions, feel free to contact us.



(For all future emails, please send your response to “Info@thecbrb.com”)



Nick Moore

CBRB Canadian Business Review Board

Membership Committee

Best Businesses in Canada

www.thecbrb.com

@thecbrb

@thecbrb_canada











If you would like to unsubscribe from future correspondence, please email your request to unsubscribe@thecbrb.com.

nk.ca credential phishing

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 19 Aug 2026 07:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwgQH-0000000041A-3Ozs

for dave@doctor.nl2k.ab.ca;

Wed, 19 Aug 2026 07:33:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 19 Aug 2026 07:33:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from maw2.vservers.es ([188.164.199.21]:53662)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwgJd-00000000Kv6-1Bo7

for sales@nk.ca;

Wed, 19 Aug 2026 07:26:57 -0600

Received: by maw2.vservers.es (Postfix, from userid 10133)

id E3768B7FE51; Wed, 19 Aug 2026 15:22:38 +0200 (CEST)

Date: Wed, 19 Aug 2026 13:22:38 +0000

To: sales@nk.ca

From: "=?utf-8?Q?nk.ca?="

Subject: =?utf-8?Q?=49ncoming=20=4dessages=20=46or=20Sales=40nk.ca=20=50laced=20=4fn=20=48old?=

Message-ID: <9e694400f719d319cfc744a2a2c151e7@benbogourmet.com>

X-Priority: 1

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Pending Messages Hi Sales,



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[188.164.199.21 listed in will-spam-for-food.eu.org]

[188.164.199.21 listed in will-spam-for-food.eu.org]

[188.164.199.21 listed in will-spam-for-food.eu.org]

[188.164.199.21 listed in will-spam-for-food.eu.org]

[188.164.199.21 listed in will-spam-for-food.eu.org]

[188.164.199.21 listed in will-spam-for-food.eu.org]

[188.164.199.21 listed in will-spam-for-food.eu.org]

[188.164.199.21 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[188.164.199.21 listed in dnsbl.ahbl.org]

[188.164.199.21 listed in dnsbl.ahbl.org]

[188.164.199.21 listed in dnsbl.ahbl.org]

[188.164.199.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[188.164.199.21 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[188.164.199.21 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[188.164.199.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[188.164.199.21 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[188.164.199.21 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

3.0 VOWEL_URI_7 RAW: URI hostname with 7+ consecutive vowels

2.5 FROM_IN_TO_AND_SUBJ From address is in To and Subject

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.6 TO_NO_BRKTS_HTML_ONLY To: misformatted and HTML only

0.1 TO_IN_SUBJ To address is in Subject

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?utf-8?Q?=49ncoming=20=4dessages=20=46or=20Sales=40nk.ca=20=50laced=20=4fn=20=48old?=







Pending Messages



























Hi Sales,



You have incoming messages pending on the nk.ca

 mail server.



Review your pending messages through your authorized mail portal.



Open Mail Portal



Regards,
nk.ca



WEb/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Aug 2026 16:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwSAX-00000000529-13HM

for dave@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 16:20:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Aug 2026 16:20:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f198.google.com ([209.85.214.198]:53386)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwPJj-00000000NsK-20wv

for root@nk.ca;

Tue, 18 Aug 2026 13:17:56 -0600

Received: by mail-pl1-f198.google.com with SMTP id d9443c01a7336-2d001671a54sf3464115ad.2

for ; Tue, 18 Aug 2026 12:17:00 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1787080614; cv=pass;

d=google.com; s=arc-20260327;

b=RrASBQuRfcJ3B8HxgJZJCEwWltNg0VYoN7oiYgng0pJYHS1uqFqfLGbv9e/J2o/Pot

GKY18S22u3u3onIzxI0t20J/9eNsKqzfSZjsOzDLfUfDOM3IaZObqDEilRod9O7sdI2W

ryPka+Ow92mPwhYQBKmTwNMyGM9ozQrC1359riHdHyK3iYAFr7d3XvVKrTxOJFe3g/5E

/Ek7tkeZhEc2KSlZd/pjoMX5wWnLOrXn+rVcnCTtWuXh7Hobuhi2gVCI+ai69OK8DdNp

rcLTjpk2aZU+H3wpMmKDwAPckOugwilRaG6yhwkhfgi171OcXPjBmRcM6MlvRwkQCgYy

305g==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:content-language:thread-index

:mime-version:message-id:date:subject:to:from:dkim-signature;

bh=iS0rh+Qkq8eS6Mr8PRcOsIFaxUwIMawumfIT7Om1izw=;

fh=dR9/2UP5vOA04K05OuynmaJlRkrbIcvrcJ6ZM/PT1G0=;

b=Z0RFLql0PI4r/1ujXu6t9nhBVXepIPX6gFhgGrAahvtEFZNj/6Yg0UzH490Lgf/zDu

CkVHNHo3L3w6VckX4xkJioqK6YjKzoSgTKuFQoyx1wyNVM6/GGAqMfjrp8lnWMSqgMul

Sxzq70+akOntWrW4ih/t0DydHJWK4oWlPnkql0+kXEYQ3JM0Ay+uSO/u8amOoffSjBmY

gn33gCEfCVEvUHvLq6AuFfjT+iQt8phJfUZJ6Q6EZezeKkKY3GCUCr7hatstRL8H9b0E

f+VXQXKhDb6cCdehFlxHirIwBKow2L9mvBQs2kJCi59UjW1lJEoTzyyARVp/vFhr3rse

ZuAw==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@velosia-xyz.20251104.gappssmtp.com header.s=20251104 header.b=eq2UILuy;

spf=pass (google.com: domain of emma.clark@velosia.xyz designates 209.85.220.41 as permitted sender) smtp.mailfrom=emma.clark@velosia.xyz;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=velosia.xyz;

dara=neutral header.i=@sylvexa.xyz

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sylvexa.xyz; s=google; t=1787080614; x=1787685414; darn=nk.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:x-original-authentication-results

:x-original-sender:content-language:thread-index:content-type

:mime-version:message-id:date:subject:to:from:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=iS0rh+Qkq8eS6Mr8PRcOsIFaxUwIMawumfIT7Om1izw=;

b=iNtaubppY7bKVMzl6kZlEqmeJNla2OmSzhVsG4yGGbWm70zB1XRoT9AMXLYhXOxruR

HKdRFfCjROyo9wvz2CblHzaZtqZI1H8s5ADdwY59iS0Jp01AYRlTRISiG2zDB1/2q4QB

sIL4L3gZS6w7H09QoTZblhFn2mmBYjJxkSpxvdmsVtIlxbbryuRwSgwOuEn2E1wp+LhG

O5jy9gdLh55DhqNOidY69cBLgx72N1qM2lJMjh1iXQKOREqluY59V1iXrnp3PDM5ATQe

6vPpiTTfS3EuPfcsU9o5zA4kdX5WmR7j4tl2bnj8OW+e7p6Uf9fhi8u/QBoW/Nn9fv5k

Flrg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787080614; x=1787685414;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to

:x-original-authentication-results:x-original-sender

:content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-beenthere:x-gm-message-state:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=iS0rh+Qkq8eS6Mr8PRcOsIFaxUwIMawumfIT7Om1izw=;

b=hcgB/2LdcVcT6AzxMv2k318X4bhereXuDXrdYEHNQRKBeSs567uMMoRGEVSyO6r1YB

Vq1vW9HuPAv7Vdsm77hvfJS6pBGAAT9zySyz1PScX+KJWHTLuul4A4jgikLOgpWuiHo8

mkCz5QTzdVzD0SyG6ugzSpYgNLX1LgYTpSRJBuY6iSIi0iumWoS7zeziPk5ICJk7e9a7

C2m1N9JNxWbrWiIu9HsROTPg9+PBzpH4u623BXVdIc+nbL6asUp3TYwG242DncwR9yf1

9SqXeYBAfnYh20xRbb+BBr7pN9n6J3teCKWqH9WeEKQgjvtHiTNyX71L6kFPY5uf6dtq

RiCA==

X-Forwarded-Encrypted: i=2; AHgh+RoDfzuvmrz7Q4wAlia9XU5E9OnuD9wvFquG5hfOmgwHT8e5EXUSz7Npey2hjPcj0YsUfML8@nk.ca

X-Gm-Message-State: AOJu0YxD1qx5NwN2MluV4qTiPrWDCbeZK45bx3oV1/b9nB5uEui2icEt

bOSRwvelkaRI1je1GFJN6DnF38gNe3NwFs3Biy0NlDBGOUVlZMPEDFDdDZ3PlWDWZK0=

X-Received: by 2002:a17:902:cf08:b0:2d5:ccb7:12c3 with SMTP id d9443c01a7336-2d5f6c98a2fmr90925ad.2.1787080614414;

Tue, 18 Aug 2026 12:16:54 -0700 (PDT)

X-BeenThere: analytics_consulting@sylvexa.xyz; h="ATskLdcVPDgLSv+LiNNmQ+HUYrtKmkM0/bFO8/0WAEGVLgGhhQ=="

Received: by 2002:a17:903:3202:b0:2a7:51bc:3792 with SMTP id

d9443c01a7336-2d377167508ls102293915ad.1.-pod-prod-05-us; Tue, 18 Aug 2026

12:16:15 -0700 (PDT)

X-Received: by 2002:a17:903:46c3:b0:2ce:9c48:22d3 with SMTP id d9443c01a7336-2d3b0e4384amr463224955ad.11.1787080574686;

Tue, 18 Aug 2026 12:16:14 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787080574; cv=none;

d=google.com; s=arc-20260327;

b=CLBbwCWx3mIRcQK8uOpTH7putb08vrolo0GCc9WNf+2Aarq17MnQ1FArxjg5BWuh5q

X4xEID0iWS/XFQF4UCXg7OwLNPpPbzIBajU6GhRwCoc0Ig3sezI/5b+PoJSDxc0xaYKb

rXCMI/U8VLqiu51MSBU0VtXanWUIVfyCSlV+ad+QbIegiIMhQrYfrzogcOT0RnXod+L1

uE77rRBL4MrFsyISavySBoaVXOb9b5kmqbesWXhAJ512Gst8LLZC7xzjQMv74EA6TgwW

PRwyXvmxIQm2MLNSLjmITcDpNNQVbZh/hKHO9kYMbfIYRUWI9mfKl8TDP/adJkYA4JMh

qO7w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:dkim-signature;

bh=u1qugKaH0q1DK52VNI1QZcXNYpi+elzhGnNl6KgVDlo=;

fh=GbxfgX9o/v61WfHTepvf+Rg7S08PyPJ17R2daz0QCrI=;

b=mvu97bHiVBE/0lGVjn3O6fiWn9dkDeilyqek+IZ4M03B5DYrROHIEA4ytBtsEdhqvt

9PKSXaimpu6WMsVt8ElabwMMeTPytDRn/j0dw6+Lqz6Fd8tECqBAk5kQ5YFEEDhU9XWr

ftLxODNJTQrGMkTImKhj49UIbCmGdE+Dw2TKySaN4vuwTp+Htb/g19/7+RIbq9iwzdqS

zK1oxjS3DS5lbxVt9MAA/pcVmHVAcM5iqfw0irOVM1fA70NaCZclxisVtDl3xzf3JcwP

Ct5kGiuBl0aVCgxCfRZkc4iBaOGwEHXpbHDC8RAlhWaXS1MNNGjylDI2fhkjCYMs+ev7

k5hA==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@velosia-xyz.20251104.gappssmtp.com header.s=20251104 header.b=eq2UILuy;

spf=pass (google.com: domain of emma.clark@velosia.xyz designates 209.85.220.41 as permitted sender) smtp.mailfrom=emma.clark@velosia.xyz;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=velosia.xyz;

dara=neutral header.i=@sylvexa.xyz

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id d9443c01a7336-2d5c1ecb600sor34857785ad.13.2026.08.18.12.16.14

for

(Google Transport Security);

Tue, 18 Aug 2026 12:16:14 -0700 (PDT)

Received-SPF: pass (google.com: domain of emma.clark@velosia.xyz designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

X-Gm-Gg: AR+sD10sCK6t75QQPVkBNxyLBSwGKFoZLC2MQZNmcKl5dYPQqbDrEjaGQiV4vrw7Otw

eVMbWGoccD2QQQ6OxJBPyNR+Wmiivu296NFQ/Q1qDjmz2PzNMYJfKFXWG42T7Al8UPlU3WH5hPk

E132VTxJOrnHdZ44allg5NGO8bf5jleJFBMF4H6Nstruq4WCHL7Yp4ikfNoECEU3zB/N+2TtIi0

SJsV18U+SAAlUYCDBsQecmDnEf+Y7P+Ctdx1mAT+mbRR3JP/QV5HGEW8qepXt8KMFYDi1EEYb4J

sSKbqrGsegj1FKrbHur7Waf753bTKAjGTuR1DvDQ6GYuTqayxykj5M2YTMhN1kQntY/j86lKNuf

WkAiNgRf87r++OUJWFKa87EF5HHRSEiQ+VPtasbacUzc9TvwWMxJezovTFbbFxWp6u8kwRDIsL9

W0YOC34ZqOhBWV4ASatqsDMulDR38GDgdWASyFR17EfKZ0UOQUb3xIeCgj8yhaG4G9bP3PwQ==

X-Received: by 2002:a05:6a20:d4b:b0:3c3:68b0:e273 with SMTP id adf61e73a8af0-3cc71d11cdbmr45606588637.15.1787080574107;

Tue, 18 Aug 2026 12:16:14 -0700 (PDT)

Received: from ONNIFICO ([2409:40d0:1039:ad25:5889:6fbc:4973:b245])

by smtp.gmail.com with ESMTPSA id a92af1059eb24-141531717adsm17001802c88.13.2026.08.18.12.16.12

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 18 Aug 2026 12:16:13 -0700 (PDT)

From: "emma.clark via analytics_consulting"

To:

Subject: Quick observation

Date: Wed, 19 Aug 2026 00:46:10 +0530

Message-ID: <002301dd2f46$09067fe0$1b137fa0$@velosia.xyz>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0024_01DD2F74.22BEE2F0"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0vRaU2ycpL5uL5R26x+aUYc/xLNw==

Content-Language: en-in

X-Original-Sender: emma.clark@velosia.xyz

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@velosia-xyz.20251104.gappssmtp.com header.s=20251104

header.b=eq2UILuy; spf=pass (google.com: domain of emma.clark@velosia.xyz

designates 209.85.220.41 as permitted sender) smtp.mailfrom=emma.clark@velosia.xyz;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=velosia.xyz;

dara=neutral header.i=@sylvexa.xyz

X-Original-From:

Reply-To:

Precedence: list

Mailing-list: list analytics_consulting@sylvexa.xyz; contact analytics_consulting+owners@sylvexa.xyz

List-ID:

X-Spam-Checked-In-Group: analytics_consulting@sylvexa.xyz

X-Google-Group-Id: 626048044156

List-Post: ,



List-Help: ,



List-Archive:

List-Unsubscribe: ,



X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, We took a quick look at your website. We noticed some

areas that could improve organic search performance.



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

[209.85.214.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

[209.85.214.198 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: sylvexa.xyz]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.198 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.198 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: sylvexa.xyz (xyz)]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.198 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

Subject: {SPAM?} Quick observation



This is a multipart message in MIME format.



------=_NextPart_000_0024_01DD2F74.22BEE2F0

Content-Type: text/plain; charset="UTF-8"



Hi,



We took a quick look at your website.



We noticed some areas that could improve organic search performance.



Can I send the findings, portfolio, and pricing?



Best,



To unsubscribe from this group and stop receiving emails from it, send an email to analytics_consulting+unsubscribe@sylvexa.xyz.



------=_NextPart_000_0024_01DD2F74.22BEE2F0

Content-Type: text/html; charset="UTF-8"



Hi,



We took a quick look at your website.



We noticed some areas that could improve organic search performance.



Can I send the findings, portfolio, and pricing?



Best,









To unsubscribe from this group and stop receiving emails from it, send an email to analytics_consulting+unsubscribe@sylvexa.xyz.




------=_NextPart_000_0024_01DD2F74.22BEE2F0--



Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Aug 2026 16:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwSAQ-0000000050w-2OKQ

for dave@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 16:20:22 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Aug 2026 16:20:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f71.google.com ([209.85.216.71]:61595)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwPGG-00000000NGp-0wZt

for root@nk.ca;

Tue, 18 Aug 2026 13:14:21 -0600

Received: by mail-pj1-f71.google.com with SMTP id 98e67ed59e1d1-38e11baa66esf343657a91.2

for ; Tue, 18 Aug 2026 12:13:24 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1787080398; cv=pass;

d=google.com; s=arc-20260327;

b=AdqW05WUjlc/nW4J1ZxsofSrA4gHRnWcfjEfRRDgjPGLWUT19tM6C/M0sIsnZhhzCA

PemBYjxZ1SBCp9QE2+oWvl1FAjPn1diUC9UHG+uA7A/6EwEvwUYlNGiakmpWhr99RBzn

weIm7b8KF9bW0GmMlNBpxgMmxW2+0ZP56VAu/3VrB0/g7MAgmUTD1lERxNM655pzI8s4

G+0RZKS9xJXZJZa/MRJBUoDD7bfunTiD5koN0hd2t8as50oU2Tx/tmfS35mApvGfrLON

hPKA03iM5Q2o7+8vz/xD9QJtxUriKqdwpkpMyhUKVNfNU00/SBE8pYU9rZRJmy+/WvSm

oIYg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:content-language:thread-index

:mime-version:message-id:date:subject:to:from:dkim-signature;

bh=m4YwPXV2kc0LR8YhjT7XwqL3eKPjLqkbI3Mnvbnxsr4=;

fh=ny9416urgxYYYFEHCTnK+iGMPNca945MVwmYdRbbEes=;

b=ZPw3Eql7T5fegRhZ+e6rkFcg880Y6xmt6fQQOtjJ8uTA6axIOGnU1G0MLXxmC9Tegw

DbbfaHZE2PRTrm1ypYakb5UTIhwcDNWENOwUjL0zKtFZMC+C38Sin3HHgni/WH8PkmQ+

9JelcvF/TvkBnE2UFzJh7T2djkt0MiHTfZRrVeGdjk9UG/gy6di/eiXcan2Pk5bR4VOE

+jnn23gL3CX+TQ0Hj/tVSiFvYmvaNysyEpScvNI34SPWmAMWl0nxypumMQ6xeWbvGQjq

T0A72PuGIViKHoRrW/P2SITdOHQksFPbBzx8yH0DNWPcWl9jewtHNt9PHd8fx1qLHWlH

Hf+Q==;

darn=nk.ca

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@velosia-xyz.20251104.gappssmtp.com header.s=20251104 header.b=OSeIbtvI;

spf=pass (google.com: domain of emma.clark@velosia.xyz designates 209.85.220.41 as permitted sender) smtp.mailfrom=emma.clark@velosia.xyz;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=velosia.xyz;

dara=neutral header.i=@sylvexa.xyz

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sylvexa.xyz; s=google; t=1787080398; x=1787685198; darn=nk.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:reply-to:x-original-authentication-results

:x-original-sender:content-language:thread-index:content-type

:mime-version:message-id:date:subject:to:from:from:to:cc:subject

:date:message-id:reply-to:content-type;

bh=m4YwPXV2kc0LR8YhjT7XwqL3eKPjLqkbI3Mnvbnxsr4=;

b=lXYbbysgIs5cKo5SqHZz8cF+L1O1rJMQK9wlYsjt01F2AIXjzKZ5RX08tTHS4H3S1q

XIEtgW29D2ltBor4jotdqIcVqfWjN+XqO6NkwgL4wP8VBdORCH/ThLpYVLcCXMIDk3qp

HOIlkNCn/7+SngZOlYt2CoQ4FkO8+Yd+5fujgBlQKPaj/USh9WRIQjNryqI4oLwmNFb+

MN+S23k7meZ0r/ZNiWNbsXpr51A7ah0R8AyCR2ob+4Vvzq6nk03Fq8Jsh54dIfGkLf5V

bvSgrCiJPoAOormCh0xOKA14CnhfPWZAy09GioUNNIAuzFa20OdgIVJcQYoQJEOJ4gl6

nMwQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787080398; x=1787685198;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to

:x-original-authentication-results:x-original-sender

:content-language:thread-index:content-type:mime-version:message-id

:date:subject:to:from:x-gm-gg:x-beenthere:x-gm-message-state:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=m4YwPXV2kc0LR8YhjT7XwqL3eKPjLqkbI3Mnvbnxsr4=;

b=cD2EUhTu/nCkGFJAXulHS1E1A8bCP9rn62obBKzTeLEyn6CKJRCr+jfv5B9uJxdcyp

92oMMB03ARTmEQqGVoo4yTZeDF5TgH07dDobGFWdlVG/rtsBwpYMIJQ7ARTRXVEuEc/v

U9B7ACmBEvHleseYnzUbfyuZnOqwZkJnwF2oLO9lVwQ3OVNelWm6uGme3PuZ+V3sXCox

a+KOwq0voI6FM+JZdl3Yq69UZAuoxIXbmwDghcx+qV2XPCPj4nIs5LPiEV+UWC9bPhlC

Ijw1zye544JE+nhC1QJC6jnTGYKeA8AUXJLHbFf22/6qwScDuNWlxRToyu3icgNTHvtg

TRGQ==

X-Forwarded-Encrypted: i=2; AHgh+Rp1SJjiiG8zLo9hvC+4+cBTq+vejwwfXGoLJZ78GVlgQyph8DhAfYQBnIaceKux9evkg6Rl@nk.ca

X-Gm-Message-State: AOJu0YxrWR1PyyAJrfT8bHmoQgOxPVG8x7sZhHLW5/+jj/km9fqBR5B0

ikyJizrbm9HMzeZ0rCByckIjO6BtkjLQc3nuPBp7Bub5QQkBOCUoUYerffSLQS9t7iM=

X-Received: by 2002:a17:90b:5745:b0:381:28e0:6259 with SMTP id 98e67ed59e1d1-3933b7d1dfdmr43490925a91.9.1787080398417;

Tue, 18 Aug 2026 12:13:18 -0700 (PDT)

X-BeenThere: analytics_consulting@sylvexa.xyz; h="ATskLdcL+VOwd1XDhC4YmmX+lqGiUdNqHF7GI60ReMlER+GRaA=="

Received: by 2002:a17:90b:3884:b0:38e:6887:17dd with SMTP id

98e67ed59e1d1-3931918792fls9838262a91.1.-pod-prod-09-us; Tue, 18 Aug 2026

12:12:22 -0700 (PDT)

X-Received: by 2002:a17:90b:1f8a:b0:38e:6a44:671b with SMTP id 98e67ed59e1d1-3957afd26c5mr121666a91.0.1787080342225;

Tue, 18 Aug 2026 12:12:22 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787080342; cv=none;

d=google.com; s=arc-20260327;

b=d+vSvg/m4vHxOD4WQcs07bftEpk73hS5PjHdv0m0XYN4Ddt5TEAgmX+brZeKPcSshI

HjgWJSHbHmLd5YWByqhNzM6cGerfu0olq+jzj4uloEnpNUxJrHZyNphw95C5jPfkuQSK

q1fsEyD5XJRdVKP/Gl/nXw2gURjGhTlZOc1Ncgi/A5fT8mtcwOx0quICRFQW/H9au35N

U09PteIOWaA4YOZNKIp11bzkdlS0QkYlzZqc3b00PBLu8IBsf3/QWQvAmHX3cqeFCYek

DZ37o15XVsriHEbF4xZVnsDDORrnfT/s7cJ0zluPuSS1adnPbf9zaysyey9v8X/iBOlu

o7zg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:dkim-signature;

bh=H0+K5zN2RYhbV/81B02b4yzV15L1ybYqBjphClp/+dw=;

fh=GbxfgX9o/v61WfHTepvf+Rg7S08PyPJ17R2daz0QCrI=;

b=BdH8OxS25gF9e0m/m3KJNXUEVfLePjurLzE/gChwq4cSReVGDkexmkMxADcO8szIeF

mlwqhsLl1pwfgBlARzbBhqTPl5rd5AN0KIcff6QWTDk1mH0pEM0cratyIMtdFfJ5gJoY

sUoaT4LWvVCfkcIiDGSeVTwKfVJBnpLo9S1UtOpBrGkG8QecQdTSJVsuF712V2RNzMCm

2E/bm1v0/sycDPZxUCNsK40VSMzJrTNIelX2vXCvQ1RrFjDmwJu/MpWruhAmVSKtXLJL

dmr/sKdm+96weSudEq0/iwNylirqeks5gXlrsDK/wntL8hdfKmS8xgdhTAJI+UDukCkL

Rt9A==;

dara=google.com

ARC-Authentication-Results: i=1; mx.google.com;

dkim=pass header.i=@velosia-xyz.20251104.gappssmtp.com header.s=20251104 header.b=OSeIbtvI;

spf=pass (google.com: domain of emma.clark@velosia.xyz designates 209.85.220.41 as permitted sender) smtp.mailfrom=emma.clark@velosia.xyz;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=velosia.xyz;

dara=neutral header.i=@sylvexa.xyz

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id 98e67ed59e1d1-3954d4f507dsor3852094a91.8.2026.08.18.12.12.22

for

(Google Transport Security);

Tue, 18 Aug 2026 12:12:22 -0700 (PDT)

Received-SPF: pass (google.com: domain of emma.clark@velosia.xyz designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

X-Gm-Gg: AR+sD13gIvi5AJQotJPNN1sRAYRxIhvB1ZoL5oIZZdz93tzIPJAmoELuIe1FI6Sa6ec

OSi3C3Z5hPjHq5A6XAFJMAPvr1pAEYqgQOx3JeM+kbCqSQ18qZd5zQCWqAUqsmeTX7pQsC1PUXr

o2Grmh5WBnAW1t++ktbwkE/yFquKH6Dp44DgL/iHMz8gCejCLM8Tr5OcWOuE3DUy4bMXWp6fg3H

mTQ/rbJV/SY7X16CKBOUelGOuXz9RiPP6Z6/krQiOSpzPMhFi5FRJ8s7UoP5SD2i+07TPY+skMR

u9LujTekxkT2UWzPukfqCZIsKwLVeBuaBvKrJGE4v3uugl7cW+0diuQ5yc0MhrHFQ2laU5e0qVT

7bvcgaBEDWSzuBDsSV0LGBE7Pg3rmq1uTL66bwTCVMqcvzMaKmpgjkblWuc4hEnVHxNbchWluT3

Xgo6iegXqgxrP5fR+1G6z//8M2refCviYdO279RRXbZ2FWqU9P5oeym4lXtJ56LEfTTpCqhtZhT

bPlmfvc

X-Received: by 2002:a17:90b:50:b0:38f:240d:b857 with SMTP id 98e67ed59e1d1-3957b1c1432mr20359a91.2.1787080341551;

Tue, 18 Aug 2026 12:12:21 -0700 (PDT)

Received: from ONNIFICO ([2409:40d0:1039:ad25:5889:6fbc:4973:b245])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-32678dcedf4sm19251623eec.5.2026.08.18.12.12.19

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 18 Aug 2026 12:12:21 -0700 (PDT)

From: "emma.clark via analytics_consulting"

To:

Subject: Quick observation

Date: Wed, 19 Aug 2026 00:42:17 +0530

Message-ID: <000001dd2f45$7e5f3300$7b1d9900$@velosia.xyz>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0001_01DD2F73.98180B40"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0vRWPN9GrNMHJCSl2Y6USgaXj5VA==

Content-Language: en-in

X-Original-Sender: emma.clark@velosia.xyz

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@velosia-xyz.20251104.gappssmtp.com header.s=20251104

header.b=OSeIbtvI; spf=pass (google.com: domain of emma.clark@velosia.xyz

designates 209.85.220.41 as permitted sender) smtp.mailfrom=emma.clark@velosia.xyz;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=velosia.xyz;

dara=neutral header.i=@sylvexa.xyz

X-Original-From:

Reply-To:

Precedence: list

Mailing-list: list analytics_consulting@sylvexa.xyz; contact analytics_consulting+owners@sylvexa.xyz

List-ID:

X-Spam-Checked-In-Group: analytics_consulting@sylvexa.xyz

X-Google-Group-Id: 626048044156

List-Post: ,



List-Help: ,



List-Archive:

List-Unsubscribe: ,



X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, We took a quick look at your website. We noticed some

areas that could improve organic search performance.



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.216.71 listed in dnsbl.ahbl.org]

[209.85.216.71 listed in dnsbl.ahbl.org]

[209.85.216.71 listed in dnsbl.ahbl.org]

[209.85.216.71 listed in dnsbl.ahbl.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:1039:ad25:5889:6fbc:4973:b245 listed]

[in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.216.71 listed in will-spam-for-food.eu.org]

[209.85.216.71 listed in will-spam-for-food.eu.org]

[209.85.216.71 listed in will-spam-for-food.eu.org]

[209.85.216.71 listed in will-spam-for-food.eu.org]

[209.85.216.71 listed in will-spam-for-food.eu.org]

[209.85.216.71 listed in will-spam-for-food.eu.org]

[209.85.216.71 listed in will-spam-for-food.eu.org]

[209.85.216.71 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.71 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: sylvexa.xyz]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: sylvexa.xyz (xyz)]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.71 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.71 listed in bl.score.senderscore.com]

Subject: {SPAM?} Quick observation



This is a multipart message in MIME format.



------=_NextPart_000_0001_01DD2F73.98180B40

Content-Type: text/plain; charset="UTF-8"



Hi,



We took a quick look at your website.



We noticed some areas that could improve organic search performance.



Can I send the findings, portfolio, and pricing?



Best,



To unsubscribe from this group and stop receiving emails from it, send an email to analytics_consulting+unsubscribe@sylvexa.xyz.



------=_NextPart_000_0001_01DD2F73.98180B40

Content-Type: text/html; charset="UTF-8"



Hi,



We took a quick look at your website.



We noticed some areas that could improve organic search performance.



Can I send the findings, portfolio, and pricing?



Best,









To unsubscribe from this group and stop receiving emails from it, send an email to analytics_consulting+unsubscribe@sylvexa.xyz.




------=_NextPart_000_0001_01DD2F73.98180B40--



Docusign phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Aug 2026 16:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwSAA-000000004xf-35Yz

for dave@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 16:20:06 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Aug 2026 16:20:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f102.google.com ([209.85.216.102]:49439)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwOy8-00000000K4W-43Mc

for doctor@netknow.ca;

Tue, 18 Aug 2026 12:55:38 -0600

Received: by mail-pj1-f102.google.com with SMTP id 98e67ed59e1d1-3811f512167so367943a91.3

for ; Tue, 18 Aug 2026 11:54:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nwhssasi-com.20251104.gappssmtp.com; s=20251104; t=1787079273; x=1787684073; darn=netknow.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=xA6Go6IIl5P4Z/Lst/naTR7FyToWJ8RnexXUMjllRh0=;

b=DvorZnysssZJO8bwpuGgKEpPq6etEReNh8dME7KRg4kTZE5Ye11EGv9Nbr1h1gXTfS

IkaL1BLn2V3meVFNrp8SLymdz1cJXOqn1DqtREQz2ZIR2m/fByw/cQKttuQjAgHH1Wei

WftfHjOWGFV7ga7IKZHsK8nV6PLVVliYOUi7zEp9CxEFuZ+BXh2qg338+RygO04CPd+y

MxEI49VJpBFWaGZQLMEZGMJ5HEx+51uWgMbfU6OybrcWei0h7v72qKVpt1TUUkkaLtj6

Cnn8E1AZO9qFD7z+9DxvPeLKUFguQA1mp1i+V1e9NfqU8dBoWY8/rpVl79x7Y90IocX2

n2kQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787079273; x=1787684073;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=xA6Go6IIl5P4Z/Lst/naTR7FyToWJ8RnexXUMjllRh0=;

b=Jl6YML1dG5fIJm182rAIasn2dq6N3A4JxNxHECiaBGnK6a0EwTroHv3l7AN+rQoBL+

vspFUU6DMjieA5SNwltcLl6lFBTCZxtuezfHbJlKjPVEO9GnbR9jIX7P8a3uHoIAjKgt

vXEBGieiCqikkr9UKQ5lWI6ZvZf/tXFnDZoCVbCZahZxh8b7eMle/BZqcT0Lkd5JePAy

YFtlB/vuM9DloT1clB/8QEw+ysQSknrZLFJXXSPugJktikKO57EDVYkj0q02juTlR/DF

sLzhpoiLsRRe5+pmqqYIBKT9DdFrQ22ADiKChTDJqvbZRwvEjRwpy4SPZ9wHx32wXg/q

8poA==

X-Gm-Message-State: AOJu0YxpgdoBgOwF9to+9mfo4ginfo5KymAIDAk7RA5HyzfAkBMH89Ki

kbCzd4vhn7XqmhU/HcSUOhtAZUQxi+lmR45MWbjy0XW5ZCWDBDS4nvIxz9xu1s9vQJwqjxoNdNU

O9J7iv5vF0v5uxpamPxje2pqyPuTio6xr1SaR/PZjSPvOcHU=

X-Gm-Gg: AR+sD12F6GOtvxNmW1sPnJEBuPAyjszQFsJ9gF5akpqJng+AtV2NB1ocmwQaxjzkMLo

MvuEZiNJbyg7FNOdsva1GO8oXzFhrriVnanS7XTlbMd44QwwXYvQ0EwRRpRZqpHJPqowgKlUtby

SIZntq+IW+79fSv3Ec8uMwXPlyzh9B+frBQM7zIAVbJWG9WOEckZnu9o+Lrf1QFOLdv5SfQN5DT

CwcbCsylwmrk3QeBTaCIRej8GLZ8/80ZZxkT0iTTD0uU8qv8o05l08RbdIXhyzMBq1XCVuiSene

peWyyEkyta3fE8z8Q6eGMClgiH8MolLGfbotEDapYywfPR3QUgIZCRY+WCnPAUjZvclqTMaDuhW

E57gtt/0QTGLPoA==

X-Received: by 2002:a17:90b:1801:b0:37f:e1af:df22 with SMTP id 98e67ed59e1d1-3955aa0826emr11919991a91.17.1787079273161;

Tue, 18 Aug 2026 11:54:33 -0700 (PDT)

Received: from sasinm.com ([173.225.110.213])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-3954d38a6b1sm2762854a91.8.2026.08.18.11.54.32

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 18 Aug 2026 11:54:33 -0700 (PDT)

X-Relaying-Domain: sasinm.com

From: "M:FILE SALES DOCUMENT"

To: doctor@netknow.ca

Subject: Service Agreement

Message-ID:

Date: Tue, 18 Aug 2026 18:54:32 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-533d890caecbb619-Part_1"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: D DocuSign A sales document has been sent to you to sign

MFILE has sent you the following agreement. Please review and sign it using

DocuSign.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

[209.85.216.102 listed in dnsbl.ahbl.org]

[209.85.216.102 listed in dnsbl.ahbl.org]

[209.85.216.102 listed in dnsbl.ahbl.org]

[173.225.110.213 listed in dnsbl.ahbl.org]

[173.225.110.213 listed in dnsbl.ahbl.org]

[173.225.110.213 listed in dnsbl.ahbl.org]

[173.225.110.213 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.102 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ai-matogen.biz]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.102 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.102 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Service Agreement



----_NmP-533d890caecbb619-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-533d890caecbb619-Part_2"



----_NmP-533d890caecbb619-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable


















248, 250); padding: 32px 0px; color: rgb(26, 26, 26); text-transform: none;=

letter-spacing: normal; font-family: -apple-system, BlinkMacSystemFont, =

"Segoe UI", Roboto, Arial, sans-serif; font-size: medium; font-style: =

normal; font-weight: 400; word-spacing: 0px; white-space: normal; orphans: =

2; widows: 2; font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness:=20

initial; text-decoration-style: initial; text-decoration-color: initial;' =

border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bis_size=3D'{"x":0,"y":0,=

"w":501,"h":546,"abs_x":755,"abs_y":353}'>
"w":501,"h":482,"abs_x":755,"abs_y":385}'>
"w":501,"h":482,"abs_x":755,"abs_y":385}'>

bis_size=3D'{"x":0,"y":32,"w":501,"h":482,"abs_x":755,"abs_y":385}'>


255, 255); border-radius: 6px; border: 1px solid rgb(221, 224, 230); =

border-image: none; width: 501px; max-width: 600px;" border=3D"0" =

cellspacing=3D"0" cellpadding=3D"0" bis_size=3D'{"x":0,"y":32,"w":501,=

"h":482,"abs_x":755,"abs_y":385}'>
"h":480,"abs_x":756,"abs_y":386}'>
"h":76,"abs_x":756,"abs_y":386}'>


"abs_y":462}'>
"abs_x":756,"abs_y":526}'>
"y":253,"w":499,"h":98,"abs_x":756,"abs_y":606}'>


"abs_x":756,"abs_y":704}'>


style=3D"background: rgb(247, 248, 250); padding: 18px 36px 24px; =

border-top-color: rgb(221, 224, 230); border-top-width: 1px; =

border-top-style: solid;" bis_size=3D'{"x":1,"y":417,"w":499,"h":95,=

"abs_x":756,"abs_y":770}'>


170); line-height: 1.6; font-size: 11px;" bis_size=3D'{"x":37,"y":436,=

"w":427,"h":52,"abs_x":792,"abs_y":789}'>

You received this because a DocuSign agreement was sent to you for =

signature.

"abs_y":790}'>DocuSign, Inc., 221 Main Street, Suite 1550, San Francisco, =

CA 94105

"abs_y":808}'>Ref:


bis_size=3D'{"x":1,"y":33,"w":499,"h":76,"abs_x":756,"abs_y":386}'>
role=3D"presentation" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" =

bis_size=3D'{"x":37,"y":53,"w":146,"h":36,"abs_x":792,"abs_y":406}'>
bis_size=3D'{"x":37,"y":53,"w":146,"h":36,"abs_x":792,"abs_y":406}'>
bis_size=3D'{"x":37,"y":53,"w":146,"h":36,"abs_x":792,"abs_y":406}'>




bis_size=3D'{"x":37,"y":53,"w":50,"h":36,"abs_x":792,"abs_y":406}'>
xmlns=3D"http://www.w3.org/2000/svg" style=3D"display: block;" viewBox=3D"0=

0 36 36" width=3D"36" height=3D"36" bis_size=3D"{"x":37,=

"y":53,"w":36,"h":36,"abs_x":792,=

"abs_y":406}">


bis_size=3D"{"x":37,"y":53,"w":36,=

"h":36,"abs_x":792,"abs_y":406}" />
font-family=3D"Helvetica,Arial" font-size=3D"18" font-weight=3D"900" =

fill=3D"#1a1a2e" text-anchor=3D"middle" x=3D"18" y=3D"25" =

bis_size=3D"{"x":47,"y":58,"w":14,=

"h":25,"abs_x":802,"abs_y":411}">D
g>
-0.3px; font-size: 22px; font-weight: 700;" bis_size=3D'{"x":87,"y":53,=

"w":96,"h":36,"abs_x":842,"abs_y":406}'>DocuSign
<=

/td>

"y":109,"w":499,"h":64,"abs_x":756,"abs_y":462}'>


font-size: 20px; font-weight: 600;" bis_size=3D'{"x":37,"y":137,"w":427,=

"h":28,"abs_x":792,"abs_y":490}'>A sales document has been sent to you to =

sign


bis_size=3D'{"x":1,"y":173,"w":499,"h":80,"abs_x":756,"abs_y":526}'>


font-size: 14px;" bis_size=3D'{"x":37,"y":187,"w":427,"h":44,"abs_x":792,=

"abs_y":540}'>
"abs_y":541}'>MFILE has sent you the following agreement. Please =

review and sign it using DocuSign.


"h":98,"abs_x":756,"abs_y":606}'>
style=3D"background: rgb(247, 248, 250); border-radius: 4px; border: 1px =

solid rgb(221, 224, 230); border-image: none; width: 427px;" border=3D"0" =

cellspacing=3D"0" cellpadding=3D"0" bis_size=3D'{"x":37,"y":253,"w":427,=

"h":74,"abs_x":792,"abs_y":606}'>
,"h":72,"abs_x":793,"abs_y":607}'>


"abs_y":607}'>


ody>

line-height: 0;" bis_size=3D'{"x":38,"y":254,"w":84,"h":72,"abs_x":793,=

"abs_y":607}'>
block;" viewBox=3D"0 0 40 40" width=3D"40" height=3D"40" =

bis_size=3D"{"x":54,"y":270,"w":40,=

"h":40,"abs_x":809,"abs_y":623}">


bis_size=3D"{"x":54,"y":270,"w":40,=

"h":40,"abs_x":809,"abs_y":623}" />
fill=3D"#1a1a2e" d=3D"M 10 8 h 14 l 8 8 v 16 H 10 V 8 Z m 14 0 v 8 h 8" =

bis_size=3D"{"x":64,"y":278,"w":22,=

"h":24,"abs_x":819,"abs_y":631}" />


bis_size=3D"{"x":68,"y":292,"w":14,=

"h":2,"abs_x":823,"abs_y":645}" />
fill=3D"#1a1a2e" x=3D"14" y=3D"27" width=3D"10" height=3D"2" rx=3D"1" =

bis_size=3D"{"x":68,"y":297,"w":10,=

"h":2,"abs_x":823,"abs_y":650}" =

/>
bis_size=3D'{"x":122,"y":254,"w":341,"h":72,"abs_x":877,=

"abs_y":607}'>netknow — Service Agreement


bis_size=3D'{"x":122,"y":294,"w":325,"h":16,"abs_x":877,=

"abs_y":647}'>DocuSign · Awaiting your signature

bis_size=3D'{"x":1,"y":351,"w":499,"h":66,"abs_x":756,"abs_y":704}'>


cellpadding=3D"0" bis_size=3D'{"x":37,"y":351,"w":174,"h":34,"abs_x":792,=

"abs_y":704}'>
,"abs_y":704}'>
"abs_y":704}'>

bis_size=3D'{"x":37,"y":351,"w":174,"h":34,"abs_x":792,"abs_y":704}'>


border-radius: 4px; color: rgb(26, 26, 46); line-height: 1; font-size: =

14px; font-weight: 700; text-decoration: none; display: inline-block;"=20

href=3D"https://adclick.g.doubleclick.net/pcs/click?=

sf_rand_string_mixed(3)=3DAKAOjstFA55hCSrFSTBDNko3225YAz6GkouTQlHjExWXRbT5O=

PMnSlE8Wh4LAVp-D7jWRr-LcKW0w-HH1g8lCVAK_eU-5azfUXfjqfTiHFOFWV9I8m2ZaGczGlov=

1iY8kMSnelCX-AHG6VYBmpcZJapT1XbdlOM3B9u9whYqpkxEpFLbkzwDao00-DL8JyS7UIxIApb=

_JHANRmtKLSuRcM8IWqFaP0cOc8n8jTedmwHc8oAw2MV2tRUaAnN3eaxaESpc8fovDeWslJ0A3d=

uo5g46YzCYxQ8A56RI5MGcQw4TZj6TeWuj6jRjAe7g0X18--IBmztC1sUi6XuHkB1Ew-z_h9bv1=

XK-s_9L6zeDfQPtMsI3hOqp8T8545VdgCoElxs&sig=3DCg0ArKJSzEpZ_YMvCKWCEAE&am=

p;ur

lfix=3D1&adurl=3Dhttp%3A%2F%2Fai-matogen.biz%2Foauth%2F#doctor@netknow.=

ca&target=3D_blank" target=3D"_blank" rel=3D"noopener" =

bis_size=3D'{"x":37,"y":351,"w":174,"h":34,"abs_x":792,"abs_y":704}'>Review=

Document
<=

/span>








----_NmP-533d890caecbb619-Part_2

Content-Type: image/png; name=netknow.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=netknow.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-533d890caecbb619-Part_2

Content-Type: image/png; name=logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=logo.png



77u/SW1hZ2UgZGF0YSBwbGFjZWhvbGRlcg0K

----_NmP-533d890caecbb619-Part_2--



----_NmP-533d890caecbb619-Part_1

Content-Type: application/octet-stream;

name=netknow_Bonus_Approval_Form_202_720495

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

filename=netknow_Bonus_Approval_Form_202_720495





----_NmP-533d890caecbb619-Part_1--

Docusign phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Aug 2026 16:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwSAA-000000004xf-35Yz

for dave@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 16:20:06 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Aug 2026 16:20:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f102.google.com ([209.85.216.102]:49439)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwOy8-00000000K4W-43Mc

for doctor@netknow.ca;

Tue, 18 Aug 2026 12:55:38 -0600

Received: by mail-pj1-f102.google.com with SMTP id 98e67ed59e1d1-3811f512167so367943a91.3

for ; Tue, 18 Aug 2026 11:54:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nwhssasi-com.20251104.gappssmtp.com; s=20251104; t=1787079273; x=1787684073; darn=netknow.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=xA6Go6IIl5P4Z/Lst/naTR7FyToWJ8RnexXUMjllRh0=;

b=DvorZnysssZJO8bwpuGgKEpPq6etEReNh8dME7KRg4kTZE5Ye11EGv9Nbr1h1gXTfS

IkaL1BLn2V3meVFNrp8SLymdz1cJXOqn1DqtREQz2ZIR2m/fByw/cQKttuQjAgHH1Wei

WftfHjOWGFV7ga7IKZHsK8nV6PLVVliYOUi7zEp9CxEFuZ+BXh2qg338+RygO04CPd+y

MxEI49VJpBFWaGZQLMEZGMJ5HEx+51uWgMbfU6OybrcWei0h7v72qKVpt1TUUkkaLtj6

Cnn8E1AZO9qFD7z+9DxvPeLKUFguQA1mp1i+V1e9NfqU8dBoWY8/rpVl79x7Y90IocX2

n2kQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787079273; x=1787684073;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=xA6Go6IIl5P4Z/Lst/naTR7FyToWJ8RnexXUMjllRh0=;

b=Jl6YML1dG5fIJm182rAIasn2dq6N3A4JxNxHECiaBGnK6a0EwTroHv3l7AN+rQoBL+

vspFUU6DMjieA5SNwltcLl6lFBTCZxtuezfHbJlKjPVEO9GnbR9jIX7P8a3uHoIAjKgt

vXEBGieiCqikkr9UKQ5lWI6ZvZf/tXFnDZoCVbCZahZxh8b7eMle/BZqcT0Lkd5JePAy

YFtlB/vuM9DloT1clB/8QEw+ysQSknrZLFJXXSPugJktikKO57EDVYkj0q02juTlR/DF

sLzhpoiLsRRe5+pmqqYIBKT9DdFrQ22ADiKChTDJqvbZRwvEjRwpy4SPZ9wHx32wXg/q

8poA==

X-Gm-Message-State: AOJu0YxpgdoBgOwF9to+9mfo4ginfo5KymAIDAk7RA5HyzfAkBMH89Ki

kbCzd4vhn7XqmhU/HcSUOhtAZUQxi+lmR45MWbjy0XW5ZCWDBDS4nvIxz9xu1s9vQJwqjxoNdNU

O9J7iv5vF0v5uxpamPxje2pqyPuTio6xr1SaR/PZjSPvOcHU=

X-Gm-Gg: AR+sD12F6GOtvxNmW1sPnJEBuPAyjszQFsJ9gF5akpqJng+AtV2NB1ocmwQaxjzkMLo

MvuEZiNJbyg7FNOdsva1GO8oXzFhrriVnanS7XTlbMd44QwwXYvQ0EwRRpRZqpHJPqowgKlUtby

SIZntq+IW+79fSv3Ec8uMwXPlyzh9B+frBQM7zIAVbJWG9WOEckZnu9o+Lrf1QFOLdv5SfQN5DT

CwcbCsylwmrk3QeBTaCIRej8GLZ8/80ZZxkT0iTTD0uU8qv8o05l08RbdIXhyzMBq1XCVuiSene

peWyyEkyta3fE8z8Q6eGMClgiH8MolLGfbotEDapYywfPR3QUgIZCRY+WCnPAUjZvclqTMaDuhW

E57gtt/0QTGLPoA==

X-Received: by 2002:a17:90b:1801:b0:37f:e1af:df22 with SMTP id 98e67ed59e1d1-3955aa0826emr11919991a91.17.1787079273161;

Tue, 18 Aug 2026 11:54:33 -0700 (PDT)

Received: from sasinm.com ([173.225.110.213])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-3954d38a6b1sm2762854a91.8.2026.08.18.11.54.32

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 18 Aug 2026 11:54:33 -0700 (PDT)

X-Relaying-Domain: sasinm.com

From: "M:FILE SALES DOCUMENT"

To: doctor@netknow.ca

Subject: Service Agreement

Message-ID:

Date: Tue, 18 Aug 2026 18:54:32 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-533d890caecbb619-Part_1"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: D DocuSign A sales document has been sent to you to sign

MFILE has sent you the following agreement. Please review and sign it using

DocuSign.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

[209.85.216.102 listed in dnsbl.ahbl.org]

[209.85.216.102 listed in dnsbl.ahbl.org]

[209.85.216.102 listed in dnsbl.ahbl.org]

[173.225.110.213 listed in dnsbl.ahbl.org]

[173.225.110.213 listed in dnsbl.ahbl.org]

[173.225.110.213 listed in dnsbl.ahbl.org]

[173.225.110.213 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[173.225.110.213 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

[209.85.216.102 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.102 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ai-matogen.biz]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.102 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.102 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Service Agreement



----_NmP-533d890caecbb619-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-533d890caecbb619-Part_2"



----_NmP-533d890caecbb619-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable


















248, 250); padding: 32px 0px; color: rgb(26, 26, 26); text-transform: none;=

letter-spacing: normal; font-family: -apple-system, BlinkMacSystemFont, =

"Segoe UI", Roboto, Arial, sans-serif; font-size: medium; font-style: =

normal; font-weight: 400; word-spacing: 0px; white-space: normal; orphans: =

2; widows: 2; font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness:=20

initial; text-decoration-style: initial; text-decoration-color: initial;' =

border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bis_size=3D'{"x":0,"y":0,=

"w":501,"h":546,"abs_x":755,"abs_y":353}'>
"w":501,"h":482,"abs_x":755,"abs_y":385}'>
"w":501,"h":482,"abs_x":755,"abs_y":385}'>

bis_size=3D'{"x":0,"y":32,"w":501,"h":482,"abs_x":755,"abs_y":385}'>


255, 255); border-radius: 6px; border: 1px solid rgb(221, 224, 230); =

border-image: none; width: 501px; max-width: 600px;" border=3D"0" =

cellspacing=3D"0" cellpadding=3D"0" bis_size=3D'{"x":0,"y":32,"w":501,=

"h":482,"abs_x":755,"abs_y":385}'>
"h":480,"abs_x":756,"abs_y":386}'>
"h":76,"abs_x":756,"abs_y":386}'>


"abs_y":462}'>
"abs_x":756,"abs_y":526}'>
"y":253,"w":499,"h":98,"abs_x":756,"abs_y":606}'>


"abs_x":756,"abs_y":704}'>


style=3D"background: rgb(247, 248, 250); padding: 18px 36px 24px; =

border-top-color: rgb(221, 224, 230); border-top-width: 1px; =

border-top-style: solid;" bis_size=3D'{"x":1,"y":417,"w":499,"h":95,=

"abs_x":756,"abs_y":770}'>


170); line-height: 1.6; font-size: 11px;" bis_size=3D'{"x":37,"y":436,=

"w":427,"h":52,"abs_x":792,"abs_y":789}'>

You received this because a DocuSign agreement was sent to you for =

signature.

"abs_y":790}'>DocuSign, Inc., 221 Main Street, Suite 1550, San Francisco, =

CA 94105

"abs_y":808}'>Ref:


bis_size=3D'{"x":1,"y":33,"w":499,"h":76,"abs_x":756,"abs_y":386}'>
role=3D"presentation" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" =

bis_size=3D'{"x":37,"y":53,"w":146,"h":36,"abs_x":792,"abs_y":406}'>
bis_size=3D'{"x":37,"y":53,"w":146,"h":36,"abs_x":792,"abs_y":406}'>
bis_size=3D'{"x":37,"y":53,"w":146,"h":36,"abs_x":792,"abs_y":406}'>




bis_size=3D'{"x":37,"y":53,"w":50,"h":36,"abs_x":792,"abs_y":406}'>
xmlns=3D"http://www.w3.org/2000/svg" style=3D"display: block;" viewBox=3D"0=

0 36 36" width=3D"36" height=3D"36" bis_size=3D"{"x":37,=

"y":53,"w":36,"h":36,"abs_x":792,=

"abs_y":406}">


bis_size=3D"{"x":37,"y":53,"w":36,=

"h":36,"abs_x":792,"abs_y":406}" />
font-family=3D"Helvetica,Arial" font-size=3D"18" font-weight=3D"900" =

fill=3D"#1a1a2e" text-anchor=3D"middle" x=3D"18" y=3D"25" =

bis_size=3D"{"x":47,"y":58,"w":14,=

"h":25,"abs_x":802,"abs_y":411}">D
g>
-0.3px; font-size: 22px; font-weight: 700;" bis_size=3D'{"x":87,"y":53,=

"w":96,"h":36,"abs_x":842,"abs_y":406}'>DocuSign
<=

/td>

"y":109,"w":499,"h":64,"abs_x":756,"abs_y":462}'>


font-size: 20px; font-weight: 600;" bis_size=3D'{"x":37,"y":137,"w":427,=

"h":28,"abs_x":792,"abs_y":490}'>A sales document has been sent to you to =

sign


bis_size=3D'{"x":1,"y":173,"w":499,"h":80,"abs_x":756,"abs_y":526}'>


font-size: 14px;" bis_size=3D'{"x":37,"y":187,"w":427,"h":44,"abs_x":792,=

"abs_y":540}'>
"abs_y":541}'>MFILE has sent you the following agreement. Please =

review and sign it using DocuSign.


"h":98,"abs_x":756,"abs_y":606}'>
style=3D"background: rgb(247, 248, 250); border-radius: 4px; border: 1px =

solid rgb(221, 224, 230); border-image: none; width: 427px;" border=3D"0" =

cellspacing=3D"0" cellpadding=3D"0" bis_size=3D'{"x":37,"y":253,"w":427,=

"h":74,"abs_x":792,"abs_y":606}'>
,"h":72,"abs_x":793,"abs_y":607}'>


"abs_y":607}'>


ody>

line-height: 0;" bis_size=3D'{"x":38,"y":254,"w":84,"h":72,"abs_x":793,=

"abs_y":607}'>
block;" viewBox=3D"0 0 40 40" width=3D"40" height=3D"40" =

bis_size=3D"{"x":54,"y":270,"w":40,=

"h":40,"abs_x":809,"abs_y":623}">


bis_size=3D"{"x":54,"y":270,"w":40,=

"h":40,"abs_x":809,"abs_y":623}" />
fill=3D"#1a1a2e" d=3D"M 10 8 h 14 l 8 8 v 16 H 10 V 8 Z m 14 0 v 8 h 8" =

bis_size=3D"{"x":64,"y":278,"w":22,=

"h":24,"abs_x":819,"abs_y":631}" />


bis_size=3D"{"x":68,"y":292,"w":14,=

"h":2,"abs_x":823,"abs_y":645}" />
fill=3D"#1a1a2e" x=3D"14" y=3D"27" width=3D"10" height=3D"2" rx=3D"1" =

bis_size=3D"{"x":68,"y":297,"w":10,=

"h":2,"abs_x":823,"abs_y":650}" =

/>
bis_size=3D'{"x":122,"y":254,"w":341,"h":72,"abs_x":877,=

"abs_y":607}'>netknow — Service Agreement


bis_size=3D'{"x":122,"y":294,"w":325,"h":16,"abs_x":877,=

"abs_y":647}'>DocuSign · Awaiting your signature

bis_size=3D'{"x":1,"y":351,"w":499,"h":66,"abs_x":756,"abs_y":704}'>


cellpadding=3D"0" bis_size=3D'{"x":37,"y":351,"w":174,"h":34,"abs_x":792,=

"abs_y":704}'>
,"abs_y":704}'>
"abs_y":704}'>

bis_size=3D'{"x":37,"y":351,"w":174,"h":34,"abs_x":792,"abs_y":704}'>


border-radius: 4px; color: rgb(26, 26, 46); line-height: 1; font-size: =

14px; font-weight: 700; text-decoration: none; display: inline-block;"=20

href=3D"https://adclick.g.doubleclick.net/pcs/click?=

sf_rand_string_mixed(3)=3DAKAOjstFA55hCSrFSTBDNko3225YAz6GkouTQlHjExWXRbT5O=

PMnSlE8Wh4LAVp-D7jWRr-LcKW0w-HH1g8lCVAK_eU-5azfUXfjqfTiHFOFWV9I8m2ZaGczGlov=

1iY8kMSnelCX-AHG6VYBmpcZJapT1XbdlOM3B9u9whYqpkxEpFLbkzwDao00-DL8JyS7UIxIApb=

_JHANRmtKLSuRcM8IWqFaP0cOc8n8jTedmwHc8oAw2MV2tRUaAnN3eaxaESpc8fovDeWslJ0A3d=

uo5g46YzCYxQ8A56RI5MGcQw4TZj6TeWuj6jRjAe7g0X18--IBmztC1sUi6XuHkB1Ew-z_h9bv1=

XK-s_9L6zeDfQPtMsI3hOqp8T8545VdgCoElxs&sig=3DCg0ArKJSzEpZ_YMvCKWCEAE&am=

p;ur

lfix=3D1&adurl=3Dhttp%3A%2F%2Fai-matogen.biz%2Foauth%2F#doctor@netknow.=

ca&target=3D_blank" target=3D"_blank" rel=3D"noopener" =

bis_size=3D'{"x":37,"y":351,"w":174,"h":34,"abs_x":792,"abs_y":704}'>Review=

Document
<=

/span>








----_NmP-533d890caecbb619-Part_2

Content-Type: image/png; name=netknow.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=netknow.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-533d890caecbb619-Part_2

Content-Type: image/png; name=logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=logo.png



77u/SW1hZ2UgZGF0YSBwbGFjZWhvbGRlcg0K

----_NmP-533d890caecbb619-Part_2--



----_NmP-533d890caecbb619-Part_1

Content-Type: application/octet-stream;

name=netknow_Bonus_Approval_Form_202_720495

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

filename=netknow_Bonus_Approval_Form_202_720495





----_NmP-533d890caecbb619-Part_1--

Domain for sale spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Aug 2026 12:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwOoZ-00000000IWU-2nwL

for dave@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 12:45:35 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Aug 2026 12:45:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f169.google.com ([209.85.210.169]:46393)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwMBz-00000000DWn-2RpO

for root@nk.ca;

Tue, 18 Aug 2026 09:57:43 -0600

Received: by mail-pf1-f169.google.com with SMTP id d2e1a72fcca58-8485ef63b68so87263b3a.1

for ; Tue, 18 Aug 2026 08:56:48 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787068602; cv=none;

d=google.com; s=arc-20260327;

b=k3ffOyI1fXysWmknAoimjvLm25rWk7mSQGZ3+p9KUiYibRH3L6z2pYlN2VaCUsiH5p

Z8j7uHIGwGrhyHKk6ATCoFjjdtoJ2PuFqwKmYF08HbaVJ7s5IIpDBpx39nbPTCFXRTJ8

DbeKvAmYxrpLybobR7jdp158RDbvg/lMUQv3wAhbWfvzbWSTZZLSzIjVEGGRX+8CAViy

Cw3+zNu1DSf8CeECaRZXvuFBraMs55DLUYBYSOFmzOw9IRTvxtmuOWndLNZ/AXWdOIzj

m9eqiDrav2m+G6QQReOZKAyJdAeWa4nbDs+ho9JLxX8Ody+I5GF7AWn9YSielDVzwwk1

xm3g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=KCc7YHot9F4WOiSG5M0OkPovWBflnfWfFE+txKxHh2Q=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=JlZJIHEQ/o7oylZMNBPr+k4D5mnvqqr+6Ec2uyje3vRWXQkzHg7Bnkct+Hg8yrNflQ

yn8dRP0yQ4E3EIm4uNnGYSJmh3rnsmL5kTxz7FqjSHniP7Q1wf2pEdmwXnWmW6ypgpBz

jdcUN36rGgicmrKjCDXqHcVYG8K4ph3sRu84gJL0p8YjjLm+EW0BECS0CEl2EZl+L6Wh

vQRw/Kcpya6Skk3QjrGvE+uNIaVf3ecGiu7WiDnn9867YbPn9iDjfNHCO0C4wTsglZOD

wKb3ZWNuW2t7XTAQRtAMD6Lh726qSU/NAsdqqTvrZ2N5Apk/EdHV8vnDjTG7KvB/MXKL

QliQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787068602; x=1787673402; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=KCc7YHot9F4WOiSG5M0OkPovWBflnfWfFE+txKxHh2Q=;

b=GUiwQlo+86D6l8TwO5QFha6HQjGxKgNcMx5c++jZaDm1qpeeiWo1SsbnIVhjFUZe1H

w0k/GJHWxdj3BTqw/FBv6AtF74nlY0T49Cf4XjW8HbPN4bitzRHSBYblo2S7yTAjXV3i

s96Wz/bvGSXjvQ9xLKiCbpHc+v/U0oMV8UqPgvnjOquqSUBjGwISDrDa9Gh84lxMaUCB

325ND9mb2CMDZt9aY+9ctvn9W+mI/MPba4tql/cr4C9byRWVqWHmDaXeqvzeX6UHBCx7

FUO9IdDho460L/BcrMmL2muC+d25gdJOZNJRqYyemhrlgakZZSiJ4iyQcJ3vKmE2P/Qm

DKkg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787068602; x=1787673402;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=KCc7YHot9F4WOiSG5M0OkPovWBflnfWfFE+txKxHh2Q=;

b=a5Ou2f4mCXqVLXZ62bBizNX96ixrKo/2AsVwpsNfMEn4s66bppJEyO27BI7E83vzDp

Q7OP7myuBJa9UGyLfoL4dcnoKrTXGMiYwF1LBNXnPDWwYtHpJSrqUQ+1mgWLIDZuCjnT

j9dMV9j3rhU9rVqneKdIboE/tab70O8Apv7SNVt0yRIbShIqkWwd7lIpsGbdR6NbQwmx

JHsJzvJfFFDJRxJPw9yaHBDIR+XSddYM6dM3TZ1klwDQGR0mPL8/qCx1kHRGAbsG4Od9

V7qSdzs1OK/9n03F5n1LWZ88JAMiUVqi4BOwFW3XdT2T2+2hsrUe4MJH8zIEyw5veMKO

XJXw==

X-Gm-Message-State: AOJu0Yxa6/Pal4rKsLqhrUeul+E7Ja4vZ9HjTNzjZC5ZgQTZKxR82Y4H

ZEWIIL6mi4DreaB6ypqyU+HQeIAGNMoTRkaWlkNcCqKOYDtAvohvHdqMo58cGsjB2QHWS/KfZcu

uVpcV8R/R0Q5I4Kj8Mk29cNRlmd9j27dHISpjrf0=

X-Gm-Gg: AR+sD10fT7GhddW44CoChbIpiPpubd9Akfm54lzF4yVV7igesh3b4JZ+CRVP3MT4TQz

WlFvc2jMnQON67PWY6WDSrfr9oDH+Yv+wwVw3fI03abgJgivU7hW5hC7utx09ZzIQtAa7d5tIJX

GieO5zOmhEA9sU2hgeK73fz6Uzi24x/UWt3A8OIAT9rRnQlyJN2/yKEa5+NR7D0ZYMwsVmeMdli

iEF3MjBo0WBwOaj3u8XzchJrz0flfzAOiOAxoi+Zy/oXl1BfFqwh3W7sEhcrQFrmlr9tepN7+R+

8WOzfTxbrcvENAHCtvmo5iU/zPdJQdU+y+kADVjZpFs=

X-Received: by 2002:a05:6a00:180c:b0:848:2ab3:ddeb with SMTP id

d2e1a72fcca58-851b87edcdfmr10353795b3a.14.1787068602359; Tue, 18 Aug 2026

08:56:42 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Peter John

Date: Tue, 18 Aug 2026 16:56:30 +0100

X-Gm-Features: AcwNN1U17P9jJ295f8bRS3ugtvKL3V3-VDGLIPkSlP3sxKDbWqMTu2XdBjAarZI

Message-ID:

Subject: Re: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="0000000000003ba5220659545598"



--0000000000003ba5220659545598

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,





This is our final follow up regarding the availability of the domain name

VoipEdmonton.com we have reduced the price one last time to

$150.





This is an excellent opportunity to secure a valuable domain that perfectly

matches your business niche.





To acquire the domain, simply visit www.VoipEdmonton.com and claim

immediate ownership.





Don=E2=80=99t miss the chance to enhance your online presence and stay ahea=

d of

your competitors.





Kindly Regards.



On Tue, 7 Jul 2026, 19:46 Peter John, wrote:



> Hello,

>

>

> The premium domain

> VoipEdmonton.com is currently available for purchase on GoDaddy

> Marketplace.

>

>

> This domain is a strong match for businesses offering VOIP IN EDMONTON an=

d

> could help increase your online reach and brand visibility.

>

>

> The domain is available for $499 at www.VoipEdmonton.com.

>

>

> Please let me know if you are interested or would like to discuss further=

.

>

>

> Best regards,

>

>

> John.

>



--0000000000003ba5220659545598

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

This is our final follow up =

regarding the availability of the domain name VoipEdmonton.com we have redu=

ced the price one last time to=C2=A0
$150.

dir=3D"auto">

This =

is an excellent opportunity to secure a valuable domain that perfectly matc=

hes your business niche.


>
To acquire the domain, simply visit
"http://www.VoipEdmonton.com">www.VoipEdmonton.com and claim immediate =

ownership.



v dir=3D"auto">Don=E2=80=99t miss the chance to enhance your online presenc=

e and stay ahead of your competitors.


dir=3D"auto">
Kindly Regards.


iv class=3D"gmail_quote gmail_quote_container">

ail_attr">On Tue, 7 Jul 2026, 19:46 Peter John, <
johndomain@gmail.com">peterjohndomain@gmail.com> wrote:

ockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #=

ccc solid;padding-left:1ex">
Hello,
>


=

The premium domain=C2=A0
VoipEdmonton.com is current=

ly available for purchase on GoDaddy Marketplace.

r>

This domain is a stro=

ng match for businesses offering VOIP IN EDMONTON and could help increase y=

our online reach and brand visibility.


v dir=3D"auto">
The domain is available for $499=

at
rrer">www.VoipEdmonton.com.


=3D"auto">
Please let me know if you are interes=

ted or would like to discuss further.


dir=3D"auto">
Best regards,

to">

John.

v>





--0000000000003ba5220659545598--

Domain for sale spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Aug 2026 12:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwOoR-00000000IV3-24xE

for dave@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 12:45:27 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Aug 2026 12:45:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f172.google.com ([209.85.214.172]:58854)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwMBj-00000000DTr-0bZM

for sales@nk.ca;

Tue, 18 Aug 2026 09:57:27 -0600

Received: by mail-pl1-f172.google.com with SMTP id d9443c01a7336-2ced3386430so46280505ad.1

for ; Tue, 18 Aug 2026 08:56:32 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1787068586; cv=none;

d=google.com; s=arc-20260327;

b=TL3EiD1ZximHlTq4IScQWkxPlFFfk9mxa4+IEvGbj8UNwpkbvRqlv38otigDaKVg//

vrIohgYtx/Fu8h7d0MB+yqB1/YvIqTxOcvwPB0Aiu0vsEtuHPOiqlukuBkAIAffqZmmb

hHiR5yVStb/u55DLrvgL/Sbm1kdZVZlXTA2KsD/CJXtwWkNgH4vZVgD6TOgiBD1q+lfP

Ygxj2Uc8861sYwimpQyxOvqKObHk2WxA+tklosidFI5Rw+9JUgm5QZofN0kIR8zGWy4V

0TMziAEtldkPa/XuFB2YKUb5R9gCYpIoVqEDLahDDmdIL6nFZx98XVTdrYoeJnfFzWXk

/gYA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=FIvvV0xNTlP4yBdaa9ewWbEB6cdUGvM2pcGFGQ3gE08=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=YX6Mh+bhn3HzQUd898qUUdMUtSbFDItrT3Av4XB3gPpqKgivmuVYjNQIRl/AHMymdU

IXPfYu35LuGWpZE6/7PDZMLmZliF49lh2BwlyS1xxWvUUxNq1E5aHXeCtcmukOH2ZOCf

7Mziq1SfA+E4F8ZbwpQ83YS7fbJaVCuPnN8xziBq0xjOaTw0ZltHDsQ87WTG6h3kGQZF

8QJPSxFwNcn3DgatmLCOoBQY0/2RrIAJv5V0GJMAg9eAv8u7FH72fZ57Z4gHjmY4M5cp

VzYw+tB6ZPq6qbsjE/aiZNiQo6RmcjMJjQooN04xtxcFUZob5RF9aDi+NG/g7gbRk9vX

m1mQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787068586; x=1787673386; darn=nk.ca;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=FIvvV0xNTlP4yBdaa9ewWbEB6cdUGvM2pcGFGQ3gE08=;

b=m+eldNd1YODltbK+BUggTo/e4Xj3sbOW4TNNFG+EtBpOSTA7ZE2sXO2rKrlL4s2VrJ

I0rpSdDUyMAYzz1XKbAcZC9Iqv7imIxrf1dHHv339YrzwCuH/S7CufPRTSNJoLkk7ntz

zcLDoNya+M1M6M/fDesemJJKXYrKie+uPc98xtzbBd1UVtbHvQ73rYAW33k1VZYl3/Ni

Sppnjm8ftkl3w/6mx/fpMsT4nFbMFiYDyNjvgwXbPf7Gur8oel1NO0s9LLOU8p3FAKJ3

hG9klEi2zPTyIvD0ROIYtu1ZM3tPZ/klLXjYIR6KwcfcwoiGzrbVKXcCI+I3oyc74T0h

0nXA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787068586; x=1787673386;

h=content-type:to:subject:message-id:date:from:in-reply-to:references

:mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=FIvvV0xNTlP4yBdaa9ewWbEB6cdUGvM2pcGFGQ3gE08=;

b=TC0UjeEAPl+PCzNDEEeEN7pp9srz09XZ5acu8SQeYVT1p5Xg1WQE5vOdJaMA8qglMm

DHRLY78QP5EfKlrWshbunFRbBAC0nmzrCFpzhSll5bWvhl4ILM7ov7GUj+BMWceOXh7V

qZQvEkyiZ8IHZx4XWaaqCg55SyW7RifxXleaqCQRutWphXhULSfd/zzOlX5XO+HjtlLb

sVGlhgSjTkwLt8NQdpUakvVRyFNKqCHuJ4knB9I8h2R+KU3Ds13HAKl2EkJeA/q9dwIb

sJt8TA41XRNlSOWMyf6DXHyLD/4AZmJYcHSoatjjqfblIM18W+sDCzqfGX3fpc3HINqp

y+oA==

X-Gm-Message-State: AOJu0YznCokLCZVMaH9jmX6SN3HK9ULCKevJP09KlfZIehjwFzPv0Y7Y

uPVFm3IV8/ISJj4qFM19r8BTI3BzYltHNEeMIzVM5NSmx9V5+XqpYQv4cp7i3sLWcCB+gBxmNXr

rrTnh1TuIStaUM9D5+XXsU5EcEkDfBVaGj3OKrNg=

X-Gm-Gg: AR+sD11g1nS5SRlT7RkzOqPHOmtzfcjqgkFJD+VVoOV81ous50sEpho9wKiSTU2yyZm

F1ihdRyG0mzSjLCCMwwS5XciSI4g6ooEk/X9UyECkGZhwU3IB6DKylFOAcfy2mJ8sf2aa4n0fLD

Gn8KVggUK+lhElhTKzmjm6FEMIXTvBphTJzDQvMmq3CoNVJt9zVlsz+hLDvcKt7KM+EXr3Bv7IQ

kEKNSxLxdec1NvUncDyVi5p4kdizg6j6WPks+3eSzXhv4ng2lQSNh72t7z2mqCPTx6se79AUThl

Ydi9I/kVVMRmOSIZz5F36Vye5RcxNCyknAcIonP0S4E=

X-Received: by 2002:a17:903:1aa6:b0:2ca:a03a:29b2 with SMTP id

d9443c01a7336-2d3b0875746mr418514055ad.8.1787068586030; Tue, 18 Aug 2026

08:56:26 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Peter John

Date: Tue, 18 Aug 2026 16:56:13 +0100

X-Gm-Features: AcwNN1VGJI8C6EeLMG0EiMjk0el6dCP3iDOQyd6-eWd_BuwadOsZK3z9WxgNv9g

Message-ID:

Subject: Re: EDMONTON VOIP

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000042781006595454f1"



--00000000000042781006595454f1

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,





This is our final follow up regarding the availability of the domain name

VoipEdmonton.com we have reduced the price one last time to

$150.





This is an excellent opportunity to secure a valuable domain that perfectly

matches your business niche.





To acquire the domain, simply visit www.VoipEdmonton.com and claim

immediate ownership.





Don=E2=80=99t miss the chance to enhance your online presence and stay ahea=

d of

your competitors.





Kindly Regards.



On Tue, 7 Jul 2026, 19:45 Peter John, wrote:



> Hello,

>

>

> The premium domain

> VoipEdmonton.com is currently available for purchase on GoDaddy

> Marketplace.

>

>

> This domain is a strong match for businesses offering VOIP IN EDMONTON an=

d

> could help increase your online reach and brand visibility.

>

>

> The domain is available for $499 at www.VoipEdmonton.com.

>

>

> Please let me know if you are interested or would like to discuss further=

.

>

>

> Best regards,

>

>

> John.

>



--00000000000042781006595454f1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>

This is our final follow up =

regarding the availability of the domain name VoipEdmonton.com we have redu=

ced the price one last time to=C2=A0
$150.

dir=3D"auto">

This =

is an excellent opportunity to secure a valuable domain that perfectly matc=

hes your business niche.


>
To acquire the domain, simply visit
"http://www.VoipEdmonton.com">www.VoipEdmonton.com and claim immediate =

ownership.



v dir=3D"auto">Don=E2=80=99t miss the chance to enhance your online presenc=

e and stay ahead of your competitors.


dir=3D"auto">
Kindly Regards.


iv class=3D"gmail_quote gmail_quote_container">

ail_attr">On Tue, 7 Jul 2026, 19:45 Peter John, <
johndomain@gmail.com">peterjohndomain@gmail.com> wrote:

ockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #=

ccc solid;padding-left:1ex">
Hello,
>


=

The premium domain=C2=A0
VoipEdmonton.com is current=

ly available for purchase on GoDaddy Marketplace.

r>

This domain is a stro=

ng match for businesses offering VOIP IN EDMONTON and could help increase y=

our online reach and brand visibility.


v dir=3D"auto">
The domain is available for $499=

at
rrer">www.VoipEdmonton.com.


=3D"auto">
Please let me know if you are interes=

ted or would like to discuss further.


dir=3D"auto">
Best regards,

to">

John.

v>





--00000000000042781006595454f1--

WEb/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Aug 2026 09:55:51 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwM9n-00000000DGr-1fnr

for dave@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 09:55:19 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Aug 2026 09:55:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012056.outbound.protection.outlook.com ([52.103.43.56]:57423 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwKbl-00000000Du0-0vsD

for root@nk.ca;

Tue, 18 Aug 2026 08:16:15 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=xILgz848Q1Vh5ILeGxC/QNePr3zgNqTZW4S/8UWb5B6QQZE3VMs3AF9grLW0lHQAWR+5phBDmuDrOnTTcCQJtOjCzCWeKJZrhgdD2XNLyVo/OXTG/8cDdojzkcP5pAnWW5eoX0PpiclPK/SP4gZf0xHRYy7I59Qc7uYo1BbNOw0NWd6VOvgULu9SZTP2Gt5SQFviGNv5VWabhutpyKLgzTJmaTZND5hc8ckrUI7muNgek4go+R+YHnXGxze1gqWc3nF1ytFJpgCfPMScM6v87qklDd+Hl6Dc/kjOHvn1g0Nw65wFwMxRXHJE+xT6n5jKO2WXyZMEI7KjkJ0+qNt/bQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=7G9dq2wcsc+C/Ped53wY3AjrjWXvvEudb6+5X8bzkmA=;

b=xfsK37S7IDI9sbnVTpv1q8EbwvEBHd6LhqygHjXiU1Rx7fbtUBTJejKhAp3AP8PXk39K44A9IKNaGIBdigiBn3rTK4DhQSrod0LVuD4wR/245JSScc1YPsT1XL8fiCX5bFWZg5oWDr7jXeP2ALnAo7jHnKkb/eEWUuLIQxNbs1mY/lCMCQzSRHGSvln2x1YNDGqFwwHyhxsAPgIxR5/ILOzrHlHuOfqz+8WOxUWu0pBugxYCjZNZ4kPWWOdy+0YYnx3wjdW8MUUEE8qDZMwy0W4ao3vogkV08J9vSQBK4fIQLlHwU5RWfge9swQqILXObophl7UtZXanURU05pEO2g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=7G9dq2wcsc+C/Ped53wY3AjrjWXvvEudb6+5X8bzkmA=;

b=lDrkYirgH4QXjNQMMbia3eyOy6CG3q54EGo45lBfGbs7ZKWL/GoBuYLOe9JLtL/85qPtV4e6JZBiPSL6Z1bAjM1fJ7pZ62OOusKlztPIVeEJklBqpoolTzR0KU40D8CQXpzd3Xh+fs+ef89dA7tr8kw5bNQH8NVk1jBLQCcjlDxnynJa6BEjx2eXkNYY5gD+zdB74n2oaN2S/a2tveGh62Y9xcw3bYzQhksIwFL1basQCGtmkBYq0VzwrFkoFUujr7gSTxwxCgAdYZWL2wE6TuB+uSVt1SrEdcnH2WZ/Sv4tttMqCSdHH6jDuY1b2dMmEPq8Rxty0sloPcqNW4+MSg==

Received: from OSNPR01MB7222.apcprd01.prod.exchangelabs.com

(2603:1096:604:318::5) by SEZPR01MB6041.apcprd01.prod.exchangelabs.com

(2603:1096:101:223::11) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.17; Tue, 18 Aug

2026 14:13:39 +0000

Received: from OSNPR01MB7222.apcprd01.prod.exchangelabs.com

([fe80::4488:6be6:2ad8:9069]) by OSNPR01MB7222.apcprd01.prod.exchangelabs.com

([fe80::4488:6be6:2ad8:9069%4]) with mapi id 15.21.0315.016; Tue, 18 Aug 2026

14:13:39 +0000

From: Sophia Saifi

Subject: Fw: Audit Report?

Thread-Topic: Audit Report?

Thread-Index:

AQHdJnHSQ8k/AyRT8k2wxaZ3CFN0WraXA8tggAOTc2KAAAIU6IAB2ZF5gAFSJ/KABiWMnw==

Importance: high

X-Priority: 1

Date: Tue, 18 Aug 2026 14:13:38 +0000

Message-ID:



References:













In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OSNPR01MB7222:EE_|SEZPR01MB6041:EE_

x-ms-office365-filtering-correlation-id: eec2d63c-cadc-40c7-1454-08defd32e617

x-microsoft-antispam:

BCL:0;ARA:14566002|24071999003|37011999003|4140399003|25010399006|31061999003|15030799006|15080799012|39105399006|55001999006|19101099003|20031999006|19110799012|8060799015|8062599012|440099028|3412199025|102099032|43065399003|31055399003|40105399003|2607281247196008;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?dZ6YlZvJYIK8Wkf//xnGYGK3nQhppKkViHn9vMEwW5/+TlP5GqTUZo0PqR?=

=?iso-8859-1?Q?Tk4z0CNeA9F6JU3ZgIanGJuo76UGijtykana8JZ3F1ivOzIvN/tFBx2ENt?=

=?iso-8859-1?Q?fetX7yEj0lvrq1J741P9rX1QubtFoKAspp1wS99IQcaQ7DNYvXUUvuwejD?=

=?iso-8859-1?Q?TBx6SNRMHKrWTjhDZg6k1sqzcy37vhnoaVgxfx2fWmD7gC1QFP6MLLgitv?=

=?iso-8859-1?Q?qhnLJmCCkGMcyMqHc5dgWBQ6ps/CWgjR64qLaRt4z0HrLGXIkQrY7KIzLj?=

=?iso-8859-1?Q?f0579xlvoeeLSzLHMymFs6L9OnGo+Y3K8ZF6UOUyg95NBre3VtAKzSs4Kb?=

=?iso-8859-1?Q?mIit4EB0+V00U2WeuKE+7rBXpFPgCAft6b2I3KuFQYLFz06tfT29erQWmW?=

=?iso-8859-1?Q?uMeb6hrNHwFtCUCSyhriW0QyvudT+ygSh/tU56grcTyQOiV8B8kde54/+N?=

=?iso-8859-1?Q?nBCRVWiap8rIwwvICf1UjWOL3lK/4u3YJWpeeUz4Cxy0IgorjSwfUTlq+J?=

=?iso-8859-1?Q?yvQPhaIhAXmG1NxtdXtQQazJIANCoxn/6Lvh3Fqsx3ggf4FNDUgNYRvhZy?=

=?iso-8859-1?Q?O0L8eCkzatIqihu1f8rxJnEIgsE1KTpqWB5PtSjtz63w2foI+C+zr5e4jN?=

=?iso-8859-1?Q?uvpOqiPpjgJdtE5XO4n3ztkGhkX2gIbgsgc219aykvhJ0xtDycqkpvRtGs?=

=?iso-8859-1?Q?tnIHrmWAxwvFZNmbthL3sD9Je2oRZt/j4T+jih6ZiQV1fvGkxc88ptiBxi?=

=?iso-8859-1?Q?S4udDwuuSb2Fce7qevEf/pY7x5xyJ1njkRHa5Xi0bK2KmKnBbVNWXEbGrS?=

=?iso-8859-1?Q?aLvNtmN2uRxsKt7He7XE+miwHefIuLsa92hgfzLYI83VPKCFXZIyK8sgAV?=

=?iso-8859-1?Q?dTe4Y+PU1cFG++RJUfuNOw06gnDlEBdi9VpSb34f5zAO/Sz/TTDy3IbRhG?=

=?iso-8859-1?Q?JgYr78Zfni/pIlMzJ4aOPLx4ewuP6BNB18xvIUqac+jsIr0vDkZZMw2rRH?=

=?iso-8859-1?Q?r1jFslyaCyTpW/oGqpbYyXRyGCCTuhLksMORG//qgTam2RjxEJAY3UTPHF?=

=?iso-8859-1?Q?hRBf+7K8oA0lkCS+DxYZXk5G9Nlbm+cJ7qrPMKRKXt8TrFzpUzxysUM1wK?=

=?iso-8859-1?Q?yysoUy7VFNvh+hLAQ2ei84eVRQs4LHXENVYgFqO0AHepZuO4eGNwzuTXKL?=

=?iso-8859-1?Q?aOu2w5p8KUphVg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?5LIq0ZJgJ1yA0qMGZuqbLE8Kjq4i0wJFe6uvsnQ5OdlRuTmkOn/IIeBVhy?=

=?iso-8859-1?Q?lUhu66SL8fDA8eJMJJ/XpaEI3g6BzPszMV/Th3yfPTSaX0887bVIm19koc?=

=?iso-8859-1?Q?RDMLCVm+RQNOT9jRq37L9kEqiFZR8MA59yTtPmaS5qczLBswFJd6Xm56Cx?=

=?iso-8859-1?Q?pxoC7rdGJcUHIuvscHf53FXORSCGYfRkizKsngfRpSfjxPRatDlDm0Gcq8?=

=?iso-8859-1?Q?Q1g2MISGycqrzDNCxXNB6vsxhZvyf4wNv1y/ThXulj+89Zg18bYRYcUx2Z?=

=?iso-8859-1?Q?nd3CMwupAEhsK2uIMWrMN6jUkOmJpjaw4mSfAQdIVLVjySjC5kcJ1oqFN5?=

=?iso-8859-1?Q?un1wD9FaoVjqQbpFCQRcyPtREx+cqqUHWN+9frq8xNfT81mYllKHKnQV3Z?=

=?iso-8859-1?Q?/O4hJR72gBKC0mqn1l7GgfY+NdDCFUJmS/R9iBaNLJ5zbn1eXU94cbIAr3?=

=?iso-8859-1?Q?mjGl/IxHh23/Gt2QcxMFgG2Iv9HuLrB18TQzHUK2Szdy/1WpJgL7t7Ysjy?=

=?iso-8859-1?Q?CueaynamL0kKz+EAD/gPFsjmwMc+SebfVInmNCH6i17gKudO6JcV9u/vce?=

=?iso-8859-1?Q?Yf4d+OzVwNoR5shDffuyoDmoC/1TSgkorn5TkUeQD/21chCpXDVUVxAdbz?=

=?iso-8859-1?Q?TS8NLbGo7ffZCpvxMmkOkkxQsfHchm3ptPKdZLiqtFcCw1chUqlMo+lR02?=

=?iso-8859-1?Q?kBGHhNNsj3g5W+lTJ1ibfqmB5RUlnzoHGV7Sq/yOcQJkrnu1dPdCoRgAFl?=

=?iso-8859-1?Q?x5arGxUvMo3gQOWHMaJQUbe5bZVZ/Fcz4hFnt5CFVotjBnrmo553uXOV18?=

=?iso-8859-1?Q?G+FdSeH4L86qm/JtoCxl47VT1AqyTp/Bl+0cNxT2ouieGivVb/h2tvymnF?=

=?iso-8859-1?Q?Bhb5IVlTb51CoWqA2/qAfyH/iiLTdICViTFAXdsVubH2JCo6p6p9tv7cQv?=

=?iso-8859-1?Q?lFIBxhSKp7BboIBLmyTudDzt3ba1KyakvjevXuvChNbjn4+37i5JI1sXr9?=

=?iso-8859-1?Q?CcHeozLTiSDRPPHS/pzu9oSS9nz2geCvIkQVSOYhc/aHj6jTzh//MgL9wc?=

=?iso-8859-1?Q?5sIkVYfvegR7912qcG1c4Oa9KbnY2BsEbDsWfKgEjZtWEUqcRo4bpJxWbt?=

=?iso-8859-1?Q?DjiCcISGcjOC5+MVLfUkyPPpfy4Hkg01ElFHUFTnvw8XNinmukkL5Etop4?=

=?iso-8859-1?Q?xHRVVW5vCUhm0IZH4zWbSK6aIw47amM84RK4vRmbNaBoxqlJG47L7WnHyC?=

=?iso-8859-1?Q?q6zO369MLtBGmJ0OyB6xJuPIYqeaCKvM1pvmmShqeOUvHCMr0NjlWDlg3n?=

=?iso-8859-1?Q?B9mVzVzz71Shaj/JRpOGjTqIyMUw0T0d/y4exhsY0Pkj736JVeZPl4QRgI?=

=?iso-8859-1?Q?To3lX3Aj6563GLHWKneon9Sh3ELcu+vLyzlaw0EqaZS6MuHCmGQocygH6H?=

=?iso-8859-1?Q?vQErxGUgwIFS2s76ca5j0OHi93GjZjbc2h2MIp+gxKMI6ElUzGCnqtHtm/?=

=?iso-8859-1?Q?oFGSTYH/ErPi8w/8ExaVdEGDpywNMnf7is0PrcBOSn4fhIqhQq0isxpTLA?=

=?iso-8859-1?Q?C1O+txk=3D?=

Content-Type: multipart/alternative;

boundary="_000_OSNPR01MB72220C00D03EF5C2A4F46CCDA6A62OSNPR01MB7222apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OSNPR01MB7222.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: eec2d63c-cadc-40c7-1454-08defd32e617

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Aug 2026 14:13:38.2937

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB6041



--_000_OSNPR01MB72220C00D03EF5C2A4F46CCDA6A62OSNPR01MB7222apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



I noticed a minor issue on your website ranking. May I send a short screens=

hot for reference?



Best,



________________________________

From: Sophia Saifi

Sent: Friday, August 7, 2026 1:43 PM

Subject: Audit Report?



Dear,



I found a few issues on your website.



May I send you those errors and Audit Report?



I look forward to your reply.



Best regards,

Sophia

Marketing Team





--_000_OSNPR01MB72220C00D03EF5C2A4F46CCDA6A62OSNPR01MB7222apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








in; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I noticed a minor issue on your website ranking. May I send a short scre=

enshot for reference?



in; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



in; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Best,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">











11pt; color: rgb(0, 0, 0);">

From: Sophia Saifi


Sent: Friday, August 7, 2026 1:43 PM


Subject: Audit Report?


 





t-size: 10.5pt; color: rgb(0, 0, 0);">

Dear,



t-size: 10.5pt; color: rgb(0, 0, 0);">







t-size: 10.5pt; color: rgb(0, 0, 0);">

I found a few issues on your website.



t-size: 10.5pt; color: rgb(0, 0, 0);">







t-size: 10.5pt; color: rgb(0, 0, 0);">


255, 0);">May I send you those errors and Audit Report?
n>



t-size: 10.5pt; color: rgb(0, 0, 0);">







t-size: 10.5pt; color: rgb(0, 0, 0);">

I look forward to your reply.



t-size: 10.5pt; color: rgb(0, 0, 0);">







t-size: 10.5pt; color: rgb(0, 0, 0);">

Best regards,



t-size: 10.5pt; color: rgb(0, 0, 0);">

Sophia



t-size: 10.5pt; color: rgb(0, 0, 0);">

Marketing Team



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_OSNPR01MB72220C00D03EF5C2A4F46CCDA6A62OSNPR01MB7222apcp_--

Packaged Bread Class Actions spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Aug 2026 07:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwK1z-00000000F9S-0z6p

for dave@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 07:39:07 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Aug 2026 07:39:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from h-c-l.co.jp ([210.145.232.43]:40824)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwJqs-000000004kI-166c

for doctor@nl2k.ab.ca;

Tue, 18 Aug 2026 07:27:46 -0600

Received: from EC2AMAZ-9OPMR3K (ec2-15-152-80-185.ap-northeast-3.compute.amazonaws.com [15.152.80.185])

by h-c-l.co.jp (Postfix) with ESMTPA id BC4F04A797B

for ; Tue, 18 Aug 2026 22:26:34 +0900 (JST)

Authentication-Results: h-c-l.co.jp; arc=none smtp.remote-ip=15.152.80.185

ARC-Seal: i=1; a=rsa-sha256; d=bizmw.com; s=default; t=1787059595; cv=none;

b=ywPiMWkFZ/ySznJdbQedeE1v804tl6K5copSxDrQs9au5sukEqXY9e9e1UnZJCEFXecD9TV47VqkGD9MdyBe1VtgS5TRnuJyiUyRjcRuPvhAJXzA5L5RvOlVVomzaKRPcmhEuc0xqAl/Ku7nnuVnSUuXKX/a3gWOLgb+RpJxtuY=

ARC-Message-Signature: i=1; a=rsa-sha256; d=bizmw.com; s=default;

t=1787059595; c=relaxed/relaxed;

bh=c/jgElCt8vXPd004PyD1RXb9BUDggZoTxopsrmXEUE8=;

h=DKIM-Signature:MIME-Version:From:To:Date:Subject; b=+mPaThHOoPwZg6bfPPO6/CBuvLrCZFJusrj1HKaNb72ziQIasHueUsYPep3k/3Y/8l57aapAv84FX0m5ryb17wL5fQnq+hDOklJp6+TnNSTIJVxax/4XLYIeWIUdGV2gX7k0k+KcQhw8VcWskTzG7s7Kp7HpKLMfRj6x9x/e09Q=

ARC-Authentication-Results: i=1; h-c-l.co.jp

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=h-c-l.co.jp;

s=bizmw; t=1787059595;

bh=c/jgElCt8vXPd004PyD1RXb9BUDggZoTxopsrmXEUE8=;

h=From:To:Date:Subject:From;

b=hWtAW64qO2azwjDEyGTFJcf1HuwMSZeIAK690G44CY/z3BQkXlhXkgUpmhmDvJtDx

CM4DpyelfwDFBx75VUQjYJUTcZ89bvqz5B/Bw0I3CxS51n7g3lsHk2au+3vVy7/mIO

urXMZGOzEPRt9VgWZ9NDQv4EFxCtdxb1R+3F7/S0=

MIME-Version: 1.0

From: "Canada Packaged Bread Compensation"

To: doctor@nl2k.ab.ca

Date: 18 Aug 2026 13:26:33 +0000

Subject: =?utf-8?B?UGFja2FnZWQgQnJlYWQg4oCUIFNhbXBsZSBOb3RpY2UgUmVm?=

=?utf-8?B?IE5vwrogMDUzMDc4NzMgLyA4LzE4LzIwMjYgMToyNjozMyBQTQ==?=

Content-Type: multipart/alternative;

boundary=--boundary_10677_9842d458-8c4d-48b3-a8f0-ecab807d3be3

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">




Content analysis details: (10.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[15.152.80.185 listed in dnsbl.ahbl.org]

[15.152.80.185 listed in dnsbl.ahbl.org]

[15.152.80.185 listed in dnsbl.ahbl.org]

[15.152.80.185 listed in dnsbl.ahbl.org]

[210.145.232.43 listed in dnsbl.ahbl.org]

[210.145.232.43 listed in dnsbl.ahbl.org]

[210.145.232.43 listed in dnsbl.ahbl.org]

[210.145.232.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[15.152.80.185 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[15.152.80.185 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[15.152.80.185 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[15.152.80.185 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[15.152.80.185 listed in will-spam-for-food.eu.org]

[15.152.80.185 listed in will-spam-for-food.eu.org]

[15.152.80.185 listed in will-spam-for-food.eu.org]

[15.152.80.185 listed in will-spam-for-food.eu.org]

[15.152.80.185 listed in will-spam-for-food.eu.org]

[15.152.80.185 listed in will-spam-for-food.eu.org]

[15.152.80.185 listed in will-spam-for-food.eu.org]

[15.152.80.185 listed in will-spam-for-food.eu.org]

[210.145.232.43 listed in will-spam-for-food.eu.org]

[210.145.232.43 listed in will-spam-for-food.eu.org]

[210.145.232.43 listed in will-spam-for-food.eu.org]

[210.145.232.43 listed in will-spam-for-food.eu.org]

[210.145.232.43 listed in will-spam-for-food.eu.org]

[210.145.232.43 listed in will-spam-for-food.eu.org]

[210.145.232.43 listed in will-spam-for-food.eu.org]

[210.145.232.43 listed in will-spam-for-food.eu.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: squarespace.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[210.145.232.43 listed in bl.score.senderscore.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.8 FONT_ZERO BODY: Nobody likes invisible fonts in emails

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

4.0 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} =?utf-8?B?UGFja2FnZWQgQnJlYWQg4oCUIFNhbXBsZSBOb3RpY2UgUmVm?=

=?utf-8?B?IE5vwrogMDUzMDc4NzMgLyA4LzE4LzIwMjYgMToyNjozMyBQTQ==?=

Verita Global, LLC



Class Action Claims Administrator





P.O. Box 3355

London, Ontario N6A 4K3



Notice of Class Action Settlement



Re: Loblaw/Weston Packaged Bread Class Actions



You are receiving this notice because you were identified as having claimed a $100–$200 Loblaw Card from the Packaged Bread Loblaw Card Program (2008–2026) and/or registered with the lawyers handling this class action.





Authorized by the Superior Court of Justice for Ontario



Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of all individuals and businesses resident in Canada who purchased Packaged Bread, alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges. The Courts have not yet made any decision on the merits of the claims or defences in either action.



The Plaintiffs have entered into a national settlement with Loblaw Companies Limited, Loblaws Inc., George Weston Limited, Weston Foods (Canada) Inc., Weston Bakeries Limited, and Weston Food Distribution Inc. (collectively “Loblaw/Weston”) for $500 million ($96 million already paid), plus their cooperation pursuing claims against non-settling defendants. In exchange, Settlement Class Members release Loblaw/Weston from claims relating to Packaged Bread.



If approved by both Courts, net settlement funds will be distributed to Settlement Class Members per the approved distribution protocol. Funds for personal-consumption purchasers will be distributed through a claims process; funds for resale purchasers will be held in trust pending a future Court determination.



Canadian Settlement Class Members’ Options



If you reside anywhere in Canada, except Quebec, and purchased Packaged Bread between January 1, 2008 and December 31, 2025, and wish to participate, you do not need to do anything to be included in the Ontario Settlement Class.

Apply Now



For more information and to exercise your rights, read the full Notice at

www.canadianbreadsettlement.ca



A further Notice will be published with details on how eligible Settlement Class Members may claim compensation once the Loblaw/Weston Agreement is approved.





Class Counsel

Strosberg Wingfield Sasso LLP – www.swslitigation.com

Orr Taylor LLP – www.orrtaylor.com



Sincerely,



Verita Global, LLC



Claims Administrator



P.O. Box 3355 | London, Ontario | N6A 4K3 | Canada

DoNotReply@m.veritacanada.com



If you no longer wish to receive these notices, you can unsubscribe here.



Accounting support spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Aug 2026 07:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwK12-00000000CU6-45Mb

for dave@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 07:38:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Aug 2026 07:38:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f199.google.com ([209.85.167.199]:58384)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwHT2-000000004CW-2XWM

for sales@nk.ca;

Tue, 18 Aug 2026 04:55:01 -0600

Received: by mail-oi1-f199.google.com with SMTP id 5614622812f47-4ab7bb257bbso3962888b6e.0

for ; Tue, 18 Aug 2026 03:54:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787050439; x=1787655239; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=c152yc3mq3Bu1hUh2zh3tDJ9JVvT6wpCJtjZzyQ661A=;

b=WU9rCnupvNT2ocxJPzeNcGic6/+xQBzUizC2FLgNPtBjhk+Ebf9H1DDj1qR0172/Rk

lqmHls2E07CuHDqDRWV2oEyJJRVkEH58iKhbgdC83cpa71QRXMNFc1v3txHextbDJWZ4

umuY9XE47rPWuiNsCBTmvjvzGs3j9Owd/BP11nXte7R0aSifjYXsOEl3VYdygK90Zp6E

uL5IgjRGehECR/43ATa7a0eaowLC4hR3N8JFIX4z6z1NdU5R9CfPCfTdUlkL0dHU7io0

V/iXN0R4hLPJl9IDQ/lC4mTmN2HvdJnEZvimyv5oeOrtLOmAmyBuzfIhLTG2Pl48ceFm

oQWw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787050439; x=1787655239;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=c152yc3mq3Bu1hUh2zh3tDJ9JVvT6wpCJtjZzyQ661A=;

b=X2XsUgduQ3lcOv3meWkIu5M/ceJz1rXmxxfE6EB/O/cC7qE3gkZ6HMqAs1FYJgk5Sr

tQA/D1baOeBaKO5qbIVZkZifA0UihO41p0Sxv1DEPtXppS9Wd4dYzwNNzUgXg/tqe15r

scWYU58yXi0/rELUuuNP3tIohgzZbGc0CfXv6hIGeh/YGia7MFyATzA0AlwgGjJdc6vJ

nr3biijeGEzd2Clipon6cdqgPPnOYGhbRAWw/5LI4HnSRbK3DN1e+sHZeh2nv1WjwLOy

Y3vQUI+py0jxDepNA3Tsg9HpbGAHiv1hlBIKA9nrnPiGd/7qthIAgxGUCi8QAW+wgsL6

raeg==

X-Gm-Message-State: AOJu0YxX3nVSzD8DkGWZdroEbu8m54oivk0Ti6TFlj4NtxJsh1/pa5T2

0RqHHXPnwue2lKRBiAZAAqXmDT+3wZ2oBpgSOz2w327s3GZpkVzUT6+45otnPKLUfTjK4dKS6SN

d0BSp

MIME-Version: 1.0

X-Received: by 2002:a05:6808:3189:b0:4b2:8ee8:8a38 with SMTP id

5614622812f47-4b28ee89db1mr8522192b6e.0.1787050438940; Tue, 18 Aug 2026

03:53:58 -0700 (PDT)

Message-ID:

Date: Tue, 18 Aug 2026 10:53:58 +0000

Subject: Can I Ask One Question?

From: james923458@gmail.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000009bdc150659501a4a"



--0000000000009bdc150659501a4a

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SGksDQoNCkhlcmUncyBzb21ldGhpbmcgd29ydGgga25vd2luZyDigJQgeW91ciBjb21wZXRpdG9y

cyBhcmUgcnVubmluZyBsZWFuZXIgIA0KYWNjb3VudGluZyBzZXR1cHMgYW5kIGtlZXBpbmcgbW9y

ZSBwcm9maXQuIE1lYW53aGlsZSwgb25lIHNpbGVudCAgDQpib29ra2VlcGluZyBlcnJvciBjYW4g

cXVpZXRseSBkcmFpbiB0aG91c2FuZHMgd2l0aG91dCBhIHdhcm5pbmcgc2lnbi4NCg0KSSBjYW4g

aGVscCB5b3UgY2F0Y2ggYm90aCBnYXBzIGJlZm9yZSB0aGV5IGdyb3cuIFRha2VzIG9uZSBxdWlj

ayBsb29rLg0KDQpXb3VsZCBhIGJyaWVmIGNoYXQgd29yayB0aGlzIHdlZWs/DQoNClJlZ2FyZHMs

DQoNCkV0aGFuDQo=

--0000000000009bdc150659501a4a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

Here's something worth knowing =E2=80=94 your competitors are ru=

nning leaner accounting setups and keeping more profit. Meanwhile, one sile=

nt bookkeeping error can quietly drain thousands without a warning sign.
>
I can help you catch both gaps before they grow. Takes one quick look.=



Would a brief chat work this week?

Regards,

Ethan


--0000000000009bdc150659501a4a--

CEO MANSOUR GROUP from Microsoft outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Aug 2026 07:33:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwJvw-000000005xm-1Qse

for dave@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 07:32:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Aug 2026 07:32:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ukwestazolkn19012060.outbound.protection.outlook.com ([52.103.38.60]:53408 helo=CWXP265CU010.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwDUK-00000000A3w-1Uyu

for doctor@doctor.nl2k.ab.ca;

Tue, 18 Aug 2026 00:40:05 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ZJ4WnBlB83CgI3FvauexIV+c7vMgeQgowDVGFfYRqP/HEMS/1fgpsQaGPEFi3fEflzF3wjYUL1skPstCN/8jaCyxcjRY1BkIPx/9twC1rnUUuq38gzNMKEaNA8hYjZdzWSw5zaf3Am4hJKEp0ewOdwerVtA3JFxn3MwST5owyLGY3rBVdKCdAdShdoRScU6nfHnJ+kNPBfpSKnVnKR/pNNc2UhuoCj3ptNbkAypA9Duhdzq5f6I73UGhUtXq6Tw/icmqCcuiZiWB5ZtyPuLSGGcQ2u+9+LfY2lm1AJyj8Mkn4KBC5BsuzKt6a4zaCB9amd9c2nkrW6XmE1brz2KOSQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=FfgAh+mTXJITJ0YRS3YV+MYRcMHilwPfuknix6dLLWE=;

b=py0vbYr1dsqvEpS403M911N4xxT6fI6psdMw7Q33N7hILcXHo2iICzT+VzSV9/DYgVl9j76sxojv1kKXTtGjUrR+zzACZNDbyFNyEb+MrywXEahN6ivmzhUoZhqJlq3Z4dzBFUGM1xNq3cbPlQpXqXOOfMlueGNuJb38JE2ZeNgl4z+WYRy9rsw58EsHWkwOk6ogeg7TD0DrZ4TXHxF2oLSUHjxfvw2XWqw/384SLixWJRcFIVY42o0gj2rWLUBmqgMNDUBP4nXjgqd2ZYOUIF2pIXiaTGwUvCd+rgYnZ+amvOXW/fVaf8XrllGxIL/zkipFJ4dyeyWgszA55At7TQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=FfgAh+mTXJITJ0YRS3YV+MYRcMHilwPfuknix6dLLWE=;

b=DR30Y4CHcLe4RJzNLLxqm1M8aI0UXtEUfrGGSGF8Scq4DE7Z61hYfA28arE+GWOrh1c+JHgLW6PKv/ceY+1QfqtTByuqerPJD21hiv9LXwe9PzErLK2JU6DjIk/ULKv2Ao9oyupfE4PMI+3sg93ujAF5OJCT2/YuIUvmg6prieVM8FAXZ5tHeybaodWXFAY5ympAx5djpn725GhFC5j0DsEySiZMJvp1/MnoHEoLKnwdX4/rsmzEzO5qnS3Z9ntwb1h6gi0TEavYjRYzVMYaCo3lu4qGPxul79lcwuHglakc9ayXhYFK8+4NMmsgPN1IT4zYGUlTv4i6G9P5Gyhevg==

Received: from LO6P302MB0047.GBRP302.PROD.OUTLOOK.COM (2603:10a6:600:382::8)

by LOBP302MB2152.GBRP302.PROD.OUTLOOK.COM (2603:10a6:600:443::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.315.17; Tue, 18 Aug

2026 06:38:05 +0000

Received: from LO6P302MB0047.GBRP302.PROD.OUTLOOK.COM

([fe80::e5c4:9f4c:de90:749e]) by LO6P302MB0047.GBRP302.PROD.OUTLOOK.COM

([fe80::e5c4:9f4c:de90:749e%6]) with mapi id 15.21.0315.016; Tue, 18 Aug 2026

06:38:05 +0000

From: Mohamed Mansour

Subject: CEO MANSOUR GROUP

Thread-Topic: CEO MANSOUR GROUP

Thread-Index: AQHdLtvZGx2oMEMJTUqk1IqLVubXGQ==

Date: Tue, 18 Aug 2026 06:38:04 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: LO6P302MB0047:EE_|LOBP302MB2152:EE_

x-ms-office365-filtering-correlation-id: eb8e9448-8a1d-4ed5-34bd-08defcf34210

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|16051099003|15080799012|31061999003|19101099003|2604032031799003|16041099003|704163111799003|19110799012|8060799015|8062599012|55001999006|18010799003|37011999003|41001999006|24121999003|22091999003|25010399006|4140399003|39145399003|40105399003|53005399003|41105399003|10035399007|260806224601699006|2607281247196008|56899033|102099032|3412199025|440099028|34005399003|2406899039;

x-microsoft-antispam-message-info:

=?utf-8?B?aGZsSnllVm9EUVA1N3ZUdGgxK3Jza0VEZTRrWXdNK1NVVXJabG0rNGgxZUJ3?=

=?utf-8?B?UlM5M2ZqLzBNU1c2eEhMeU1ZWjRJeUc0MzhJVVJ3VGRCMm1TWUMwa3pCK0wr?=

=?utf-8?B?UjVYK2J4T2dKQy9IK0R2Vm1BMVJ5MmpNQmpNMmlvMnlWTkRDUExhd2J5MTNL?=

=?utf-8?B?VHFYRlhleTU4UTZYYm51aStlODNQQ2k1b25URHVRVFdQYmluL05yTk1KR0d0?=

=?utf-8?B?MkZoTThtZE9YM0JtaThINU1oV05WVGtzSTVmaUVoUm93aFRzc2kyYWpod1R5?=

=?utf-8?B?UEx5YjhlQ056MHIzWWlqM1hsL1E2MXFKSVVnbDBJeGJGK0N3dGVSR3ZVUGZH?=

=?utf-8?B?V2sxYlhqNmh5WnpObXpadkVyU2l4UG85bTFRenpmWGNXOVdDU0dlSnJTVXZw?=

=?utf-8?B?VW5Lc1d2aHpMbVlzajUwcmVlUUNlSXpXL0xYZHM5MUR4MEtaYU91MkFkUUla?=

=?utf-8?B?aVUvakUxWVEzUFR3YXpUMHdKNW02OVhndGtlL3RXSk1UalQ2Sm1KZlAwUXdk?=

=?utf-8?B?VVN0WWw0Z0JFVnRHc1JCaExNWkxGamMxSFJZQktPRTNaeUNaeHh4TEIrU0la?=

=?utf-8?B?K0YzQ045bEdhakNMK2VlcXQzV2Q4N3RNeGt2cmNLa053WVhPRm1JUEpBZ2N4?=

=?utf-8?B?QjNUZ3ZmQ0tRVERwUnlsZEU0Q29TRDZNYzh5am10STJYZVRNTEQzVytmYjV6?=

=?utf-8?B?L0JUbUlvNjZjd1Z2Qjc0emxrWGo5bEpibE5Wb1ZWb3FNRkRraWVzQjVVK05h?=

=?utf-8?B?T2RrbFRtYm1NVEk2WUVScGV6ZDJjMDNIMHhBWGY3U1RxR1MyYmtDSzl2Ly84?=

=?utf-8?B?ZHowZFZRV01nRnVrQWJsSFhMQ0RWTERsVU1lSHBGYTczUVlxUlFsVjBJTzR2?=

=?utf-8?B?Nm9oU1JPK1FLbnlBcm5LWDNZckt3bXhvekJWUlpTeDBQTG0walZTK2Z1RDZn?=

=?utf-8?B?ZFhiQTFFT3lOYW9YaGV6QmgrOGlvZS96dWtsRGpORmNGTFh0YUhYZ3k3OEI4?=

=?utf-8?B?MEp1U0U0Tktrbi84RnN4VGpEaW90TjlYYm9CVVVEODJENmNPMEVuNWJyVnBW?=

=?utf-8?B?R25mVlN3TFJFWkpaVkR1Ym80ZlByQW0xc0RTT1VENHczZFZObzdkai94OHEw?=

=?utf-8?B?MkY5dUhmbXBtYjUrWE5IY1dvandFS0liUHlTOHY3TWVRMDB6eXptdWFWYVRP?=

=?utf-8?B?cVg0MVJ6elJ1UVN5c1ZmZUVHU2pOYXBvY2pubU1mc2xlenBwNER6SEY3SHNX?=

=?utf-8?B?a0ZxSDd6N0pFVVViM2YyMkZYNHJPZWFoa0NJUDJYeFI1alF4V1I2MFlLWnln?=

=?utf-8?B?SDBuWDFPcWpoZzhqdTcxY2RFWFlnNUpFK241b0liR2xCMUdrVW9XelZiWGdM?=

=?utf-8?B?WlFPYTBiT1NoOTBEYjZBMVZZbU1FTklQc25ZenFFblBUbzZ4c0Nsb2lSR21r?=

=?utf-8?B?SExaNFRzMUVxUDRyeVNkY1ZuaTV3R2lSaytoMHRkZWUzWCtOcXlNNXVQNE00?=

=?utf-8?B?dkQxTXhLeUtZa2xtSk1pY0pMSGl2OW45NHdMYU13b1NraVBIakFXS0QrWnA1?=

=?utf-8?B?M3VvNU5zSE5sT05zVVZDUWNjRDI4VUJCeU5ZSkZrdk1zc3pYaFExMkoyY1Ft?=

=?utf-8?B?eGl1MXNHcnZRa0hMYnl2VTdKYWpnTXRnZDRlTE9FQ25MdXl5ajFaeTBIbHBh?=

=?utf-8?B?Y0Y3VVcwZVFCaWg2dW4vbEdDVnl3QU1HeUJlb0hpbGNySytoSEQ4UHVEMVpP?=

=?utf-8?B?N2cxZGJaeXo0RlQ3RitldExTTkl5ZndoU1RZNkRpQnZsaUl4all0a3N5RlQx?=

=?utf-8?B?bnBtRWJZdGR3S243MTVpcGhHNHQrUFM5WHVaNmxaY3NzRUdOc0FaSkNHN2py?=

=?utf-8?B?ZkJua3VKb1dhbUpxTWJCYjhvSkMxbGw1NTlPYjZEa216WFJJV1djM1FCQ3pi?=

=?utf-8?Q?Zo7kfIg79jw=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?ZVBCVm02cUFha3kydnhKNHpFb2Zxd04rZWNkazByZDR6ZVlIVXhTdHo2d29Z?=

=?utf-8?B?bEY5UlpYWURKVTdoZDE0RnpWVTdPNHBRZnBNcmt5bVFhSkN6WHAyUUJIaG8v?=

=?utf-8?B?RUxBRUZXeUcrTURoS1duQjhFRWZYdUJUa0hXamxLK09kZWQyNWdXRE9SWkpD?=

=?utf-8?B?c2QwaEF0L1FENW9vaWlTcEdsSHFmcStsWXcvVCsvWE5tZThjbW8wc2puS1I0?=

=?utf-8?B?UWhlWWdmN3E0U3NXMkZmYnFSOWVGZVZVWlhtY1NpNmwxc1ZMdTZialZSRDZD?=

=?utf-8?B?REN4bGozVGh1ZVZXL0RkdHR3SmFoRU5xbDBaa0VhQWxWd1BrMWRxMjNHbXps?=

=?utf-8?B?ak0xYjJwd2Rrckx4b0hXSHZwRG5IdzY5amlrOG1IWWpNQTUyczFzNjZ4dVZa?=

=?utf-8?B?czk3SzNwbmpkb0hlRFA2SjhUWnd5M0tYbFRBZ3RzQk5rek40Rzh3bCsvakFK?=

=?utf-8?B?OWYxdVNpMFFpclBxNTBTSlA1Wkh4R2F5Z0I3ek5JM1NWVllKd2JMVVhtOGJq?=

=?utf-8?B?NnV5cDZmclFPVlUvR213MVJ3R0V3ZHFDL2xXa3U1S3NMU0M5QmszVWMxcU1C?=

=?utf-8?B?K1hDNGYrZkNOaGFpS2lwTEFYTUxORTEwMDhhRFlQNGQrMEZybGVDeVVlLzFq?=

=?utf-8?B?bCtHUHlMK1ZOakordVdXY1hDWDdUeDU4aW42c2QzM3V0K0VmSm1YdlI2VXU0?=

=?utf-8?B?OE85Wk9IOHhBSk4xSS9iYk5LeEVtM0VDYlJ5RUprV3kyTU5yT04weVltQXB4?=

=?utf-8?B?VUV5N256MHRPbjgvcU9QYUt3MUpvdUVqeUcxZ1J4SWc0Q2NIMjZRb0M2UlhF?=

=?utf-8?B?RjVGTlUwdDYzUU96YlZzRjRzTHpUempYd0dvVGJCbk1HWHBxWWloNUd6SUQ2?=

=?utf-8?B?TUo2QzRjQVBkb2hkblNnSDRDWG5OWVpJNHFBWHcvN1E5Z2liTFpoRTNIQTFt?=

=?utf-8?B?bk1pNDdNMDdGSjdNQytCa0FKaXZlclRWOVA5aFk4MklPemdqMnJpalpDYlJO?=

=?utf-8?B?UlhzNjN1Qko2S1JiQ3VyV25LT3ZGQ1FEOHZJMWhoQy9yMHI5QWtQNGZLb2dP?=

=?utf-8?B?WlVRakNQeDVlK2xKdHVaeE9NRVd3WTBUanNHcWFNRXlkd1d6SFRhZHZTK2pJ?=

=?utf-8?B?b0ZRZkxXUmsraUhqdUN1NnhCVmRsWm04MFZmZDNlcGlxam1sL0N2ZTg1ZkN6?=

=?utf-8?B?QTJTLy9BVjNyQll6dExvSlExTnZNVko2aU12RWdyYWpPMlNEa3p5Z1NhZmRV?=

=?utf-8?B?YTNwUk5rSGNNVmJNRzJuaVNDYVlycXdMZ0tQa1VwM3ZWKzc1dndwYjJQWU5O?=

=?utf-8?B?cTZhZUdjWlYzWUJTbFh6NElreVJNekZ5bVdLUlhJL1pVdzRWMFNOQ2VoNFM0?=

=?utf-8?B?dnZXOHo1SWw5Z0ZLM1Qwd0tSa0RVQkJLTFdsNklYb0JRcTYzUU5TVzR0NjlR?=

=?utf-8?B?ZUNTcm1FT1hkYmd4RzVpVGlZbXJGN3BhWFBjd2hVMlRRNXJkQmdMb2tOQy9j?=

=?utf-8?B?cUlXQlo2MVpCbkFOem5pSzZjSGVHNS95bm4rTkUvN1lucFBRMkRsVzV3djM4?=

=?utf-8?B?NHJYSFVaLzRvNTBRTVBzSkR1Q0tQSTlic0xmVG1LWWZJZTMyMng4M0x0ZExX?=

=?utf-8?B?MEREY2dhRDRLaUFON1VPRkJ5Uy82VE16TFh3eWthSkNPQXlpSUk1bm00WEQv?=

=?utf-8?B?ZmlQUXN2dzl5TFRPd2tsbTkzQjJBSWw1UmJhTzlFVTNvQWxXd29sWmF2a3dv?=

=?utf-8?B?Rm1VbzYveDdFL1kzcHhjdUVFQ1J1MjlKOVE5SWY3M1BDSzlZejFnVUlIUklq?=

=?utf-8?B?ZE0wSHIyYm9sdUpKOENkZnBaTWFweHJpcVRhb3NORktlaG9OQjBnamlTaU9x?=

=?utf-8?B?VC9QZG1TdzdyWDdVS2dROXZxbjZpdzY1U3VyaStzRDNtMzBVZ1dkb29sVnZu?=

=?utf-8?B?Mkl0WEtwS0dyZ1ArdGx0ZEN6dUZWMWVaVitsWnVJRHV3a1BRcGo1N2g1RnVy?=

=?utf-8?B?eUczVkNjM3JBPT0=?=

Content-Type: multipart/alternative;

boundary="_000_LO6P302MB004710082F5653B576A3C74DD1A62LO6P302MB0047GBRP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: LO6P302MB0047.GBRP302.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: eb8e9448-8a1d-4ed5-34bd-08defcf34210

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Aug 2026 06:38:04.8010

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LOBP302MB2152

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings! My name is Mohamed Mansour (CEO Mansour Group),

I got your contact from my LinkedIn contact. I have a business project worth

the sum of Usd$15,600,000 which I wish to discuss with you and I [...]



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.38.60 listed in dnsbl.ahbl.org]

[52.103.38.60 listed in dnsbl.ahbl.org]

[52.103.38.60 listed in dnsbl.ahbl.org]

[52.103.38.60 listed in dnsbl.ahbl.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.38.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.38.60 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.38.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.38.60 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:600:382:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:600:382:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[52.103.38.60 listed in will-spam-for-food.eu.org]

[52.103.38.60 listed in will-spam-for-food.eu.org]

[52.103.38.60 listed in will-spam-for-food.eu.org]

[52.103.38.60 listed in will-spam-for-food.eu.org]

[52.103.38.60 listed in will-spam-for-food.eu.org]

[52.103.38.60 listed in will-spam-for-food.eu.org]

[52.103.38.60 listed in will-spam-for-food.eu.org]

[52.103.38.60 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[chairmanmansourmohamed(at)outlook.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.38.60 listed in list.dnswl.org]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.38.60 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.38.60 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} CEO MANSOUR GROUP







Greetings!

My name is Mohamed Mansour (CEO Mansour Group), I got your contact from my LinkedIn contact. I have a business project worth the sum of Usd$15,600,000 which I wish to discuss with you and I need your kind response to discuss further.



Kindly reach out at your earliest convenience.



While I wait your response, please accept the assurances of my highest regards.





Best,



Mohamed Mansour



Founder & CEO: Mansour Group





      



Address: No.17, Ummam Center Salah Eddeen Road, Malaz Riyadh, Kingdom of Saudi Arabia

      

Website: www.mansourgroup.com



The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future. Unsubscribe from email or ignore



HTML Spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 17 Aug 2026 22:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1wwAzM-000000008GY-2qGE

for dave@doctor.nl2k.ab.ca;

Mon, 17 Aug 2026 21:59:48 -0600

Resent-From: The Doctor

Resent-Date: Mon, 17 Aug 2026 21:59:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from proxmoxmail.redynet.com.ar ([200.107.202.105]:34338 helo=promoxmail.redynet.com.ar)

by doctor.nl2k.ab.ca with esmtp (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1ww8Rw-00000000O53-1uWS

for support@netknow.ca;

Mon, 17 Aug 2026 19:17:16 -0600

Received: from promoxmail.redynet.com.ar (localhost.localdomain [127.0.0.1])

by promoxmail.redynet.com.ar (Proxmox) with ESMTP id 64F1422108;

Mon, 17 Aug 2026 21:52:49 -0300 (-03)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=escobar.gob.ar;

h=cc:content-transfer-encoding:content-type:content-type:date

:from:from:message-id:mime-version:reply-to:reply-to:subject

:subject:to; s=proxmoxmail; bh=5a0Jx2JIDjqxp2fRHuTytsmyuFzvAYxrM

heoeENTRo0=; b=bDXiCMAkOm+YX0TQkmdKw0ggx08LmoUVKpvynsNndN/+g/G9C

5QQQgLLvmkrT2M0pgSG5Aq32MIhFKMoKvssQAuIW5nIqNiHTI3i3Gmx/kEWac3my

BRPDd2fPvVWUaAlJv8JBtiWcV4dYHeyMzEul4Tl7DH+SZs+L4tDg6sOV6C/R76UO

qDJ3b7cfRCQQP8STM6D0OPhZt8AC1coxd/5/2Fre0Mp2qrbZdRIXJz2bZmPT17Sj

TS4B2nOa7KQpvfD5qmuZMtDBiJibC0vLDocO3ZTS54UxavyzhwZ1zSqpI1mAfKp/

ojL0GhZa7/4Zum+L30J/LG1IhZEfXoeKSLETA==

Received: from correo.escobar.gob.ar (correo.escobar.gob.ar [200.107.202.78])

by promoxmail.redynet.com.ar (Proxmox) with ESMTP id 92AE22210E;

Mon, 17 Aug 2026 21:52:19 -0300 (-03)

Received: from localhost (unknown [127.0.0.1])

by correo.escobar.gob.ar (Postfix) with ESMTP id 2EABC190007A;

Tue, 18 Aug 2026 00:52:19 +0000 (UTC)

Received: from correo.escobar.gob.ar ([127.0.0.1])

by localhost (correo.escobar.gob.ar [127.0.0.1]) (amavis, port 10032)

with ESMTP id Tp_W9lnB9R7T; Tue, 18 Aug 2026 00:52:19 +0000 (UTC)

Received: from localhost (unknown [127.0.0.1])

by correo.escobar.gob.ar (Postfix) with ESMTP id D2B801900083;

Tue, 18 Aug 2026 00:52:16 +0000 (UTC)

X-Virus-Scanned: amavis at correo.escobar.gob.ar

Received: from correo.escobar.gob.ar ([127.0.0.1])

by localhost (correo.escobar.gob.ar [127.0.0.1]) (amavis, port 10026)

with ESMTP id NVhxzNzFqDY4; Tue, 18 Aug 2026 00:52:16 +0000 (UTC)

Received: from correo.escobar.gob.ar (correo.escobar.gob.ar [200.107.202.78])

by correo.escobar.gob.ar (Postfix) with ESMTP id 9296F1900031;

Tue, 18 Aug 2026 00:52:13 +0000 (UTC)

Date: Tue, 18 Aug 2026 00:52:13 +0000 (UTC)

From: Rosario Johnson

Reply-To: sales@ubertaswines.com.au

Message-ID: <632041156.46245.1787014333496.JavaMail.zimbra@escobar.gob.ar>

Subject: Hi

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [200.107.202.78]

X-Mailer: Zimbra 8.8.15_GA_4717 (zclient/8.8.15_GA_4717)

Thread-Index: Jullvi1gcqtn00YciWwNQ3IamGQn2A==

Thread-Topic: Hi

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:







Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[200.107.202.78 listed in dnsbl.ahbl.org]

[200.107.202.78 listed in dnsbl.ahbl.org]

[200.107.202.78 listed in dnsbl.ahbl.org]

[200.107.202.78 listed in dnsbl.ahbl.org]

[200.107.202.105 listed in dnsbl.ahbl.org]

[200.107.202.105 listed in dnsbl.ahbl.org]

[200.107.202.105 listed in dnsbl.ahbl.org]

[200.107.202.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[200.107.202.78 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[200.107.202.78 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[200.107.202.78 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[200.107.202.78 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[200.107.202.78 listed in will-spam-for-food.eu.org]

[200.107.202.78 listed in will-spam-for-food.eu.org]

[200.107.202.78 listed in will-spam-for-food.eu.org]

[200.107.202.78 listed in will-spam-for-food.eu.org]

[200.107.202.78 listed in will-spam-for-food.eu.org]

[200.107.202.78 listed in will-spam-for-food.eu.org]

[200.107.202.78 listed in will-spam-for-food.eu.org]

[200.107.202.78 listed in will-spam-for-food.eu.org]

[200.107.202.105 listed in will-spam-for-food.eu.org]

[200.107.202.105 listed in will-spam-for-food.eu.org]

[200.107.202.105 listed in will-spam-for-food.eu.org]

[200.107.202.105 listed in will-spam-for-food.eu.org]

[200.107.202.105 listed in will-spam-for-food.eu.org]

[200.107.202.105 listed in will-spam-for-food.eu.org]

[200.107.202.105 listed in will-spam-for-food.eu.org]

[200.107.202.105 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.2 MISSING_HEADERS Missing To: header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[200.107.202.105 listed in bl.score.senderscore.com]

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 TVD_SPACE_RATIO No description available.

1.9 REPLYTO_WITHOUT_TO_CC No description available.

Subject: {SPAM?} Hi








an smtp configuration expert spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 17 Aug 2026 17:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1ww6iL-000000009F2-37kA

for dave@doctor.nl2k.ab.ca;

Mon, 17 Aug 2026 17:25:57 -0600

Resent-From: The Doctor

Resent-Date: Mon, 17 Aug 2026 17:25:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from gw.d.sender-sib.com ([77.32.148.23]:27420)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.5 (FreeBSD))

(envelope-from )

id 1ww5jm-00000000Fck-00xv

for doctor@doctor.nl2k.ab.ca;

Mon, 17 Aug 2026 16:23:30 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aristomeet.com;

q=dns/txt; s=brevo2; bh=TsHE00iwUpx3y4N9sjT8lpewTzC/Ogm4diq+yl5lkFI=;

h=from:reply-to:subject:date:to:mime-version:content-type:content-transfer-encoding:list-unsubscribe:x-csa-complaints:list-unsubscribe-post:message-id:x-sib-id:feedback-id;

b=NI4WolpSYllIMH4BQ6LVQaI85ULYpeu0lP0Cnx2+FHtv6zFQpmuo+TW/4o21J+kOjQPk3XrHdVIX

GzQU+4bKyVO2kIxQoKOoQXFiIs0QMsyiWOkBLJxII4sKT8d6gr+dqKSs9nt6aJf82Jt40U0OUiAj

UlFb3JwG2cZE+NHVnuMEXwRhojhtuU/0TRVNNjUtv/lkp6G0a9udy+DVNy8yUCJj7tFSKKhsrJUh

M62SKafXrZnoj9yqReTGgn+jGtGY3TcmDn/CVS5VXcdFmvMA+ozDyrp48OyNeCH0B0W5HtUNlkbX

K/rJKNSHzH2/Z1aVNXhyNvp2XjOoSgMQORtkig==

Feedback-ID: 77.32.148.23:11668091_-1:11668091:Sendinblue

X-Mailin-EID: NDg1Mzg5NjA2fmRvY3RvckBkb2N0b3Iubmwyay5hYi5jYX48QmNXTk5pUW5IUjZEY3ExSWd3b3RLSzNlR0pQa2hBdUhlMWlKT0VAYXJpc3RvbWVldC5jb20%2Bfmd3LmQuc2VuZGVyLXNpYi5jb20%3D

Message-Id: <79d7c576-d289-4c11-88d0-392c79a8e639@smtp-relay.sendinblue.com>

Origin-messageId:

To:

From: "Roshan kumar"

X-CSA-Complaints: csa-complaints@eco.de

Subject: Regarding your requirement: we need an smtp configuration expert

Reply-To: "Roshan kumar"

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Date: Mon, 17 Aug 2026 22:22:06 +0000

X-sib-id: S0HeNlSJ211p0yzD6GVLvQAwpVK8zaSB9mg0OnZwwTujIwEWgVdcB78KgQhZdR4KcMV3v5rmdOitRHyzo0ZEmQJXQHsVyiXQhqm__ivJw0fZOPCESogt6qS7Xx48g3qv7_HEaVlnLxjaQzVtx59Zm3rPjGe-gpI9DMRU7Tre9N2EWxxgItNk

Content-Transfer-Encoding: 8bit

Mime-Version: 1.0

X-Mailer: PHPMailer 6.10.0 (https://github.com/PHPMailer/PHPMailer)

Content-Type: multipart/alternative; boundary="b1=_BcWNNiQnHR6Dcq1IgwotKK3eGJPkhAuHe1iJOE"

X-Spam_score: 19.5

X-Spam_score_int: 195

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I came across your recent footprint online where you

mentioned: "we need an smtp configuration expert"



Content analysis details: (19.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

[77.32.148.23 listed in dnsbl.ahbl.org]

[77.32.148.23 listed in dnsbl.ahbl.org]

[77.32.148.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.32.148.23 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

[77.32.148.23 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[77.32.148.23 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[77.32.148.23 listed in bl.score.senderscore.com]

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Regarding your requirement: we need an smtp configuration expert



--b1=_BcWNNiQnHR6Dcq1IgwotKK3eGJPkhAuHe1iJOE

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=utf-8







Hi,



I came across your recent footprint online where you mentioned: "we need an=

smtp configuration expert"



My name is Roshan and my team at Arisen Technologies specializes in exactly=

this kind of digital architecture. We engineer high-converting web infrast=

ructure, Mobile APP Devlopment , custom AI applications, and SEO scaling fo=

r growing businesses.



I'd love to put together a brief, complimentary proposal or mockup outlinin=

g how we would tackle this project. Are you open to receiving a quick break=

down?



Best regards,=20



Roshan kumar=20



Arisen Technologies



arisen.in





--b1=_BcWNNiQnHR6Dcq1IgwotKK3eGJPkhAuHe1iJOE

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=utf-8



Prop=<br /><br /> osal
.com/tr/op/Ep0RHKlsg--BKO_OvRWgOm4Q_PiJKe3uqN17pL9THPaV0IADIDqNf2RaBq_Feg4A=

WAp9wJdlhb8ao0-KzX8QozKC_A9q96BPt7o_lfhVTG6RtuMplN5K5m1UEGs86Efi55djH9XziYS=

_MMj3raezvzlYMKZFlfRQlIEVwHBcBzeynuaojyfakLua04ec4CjXETa3InzQSLuNNWZRIGfCcH=

NSxPEv-l9XtmY" />

Hi,

I came across your recent fo=

otprint online where you mentioned: "we need an smtp configurat=

ion expert"

My name is Roshan and my team at Arisen Tech=

nologies specializes in exactly this kind of digital architecture. We engin=

eer high-converting web infrastructure, Mobile APP Devlopment , custom AI a=

pplications, and SEO scaling for growing businesses.

I'd love to =

put together a brief, complimentary proposal or mockup outlining how we wou=

ld tackle this project. Are you open to receiving a quick breakdown?

=

Best regards,

Roshan kumar

Arisen Technologies

arisen.=

in









--b1=_BcWNNiQnHR6Dcq1IgwotKK3eGJPkhAuHe1iJOE--