NetKnow now in Netcraft's Top 11550 Part 2

MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services
which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).



Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKnow now in Netcraft's Top 11550 Part 1

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now at 11532 from 11284 at Netcraft
and pfs compliant



A significant decrease! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server


  3. and
  4. keep design current!




How do we compare with other providers in

Edmonton
, Alberta, Canada?



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 3382 from 3840 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business


is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Rogers





Rogers Business Solutions

which rank 5164 from 5176 and are hosted in Europe.



Netknow again





We at Netknow are at 11532 from 18857 since the start of 2026.



Government of Alberta



The Government of Alberta Website

ranks 14649 from 14653 by Netcraft and seems to hosted on Cloudfare.



City of Edmonton







The City of Edmonton
ranks 31898 from 32025 by Netcraft and hosted by Google.



University of Alberta







The University of Alberta
ranks 46268 from 44957 hosted by Amazon Techonologies.



Juno and NetZero





We have Juno Internet ranked on top

at 348008 from 331467 who are the owners of

US Based Netzero
at Netcraft Rank 80054 from 77049 .



NAIT / Northern Alberta Institute of Technology





NAIT ranks 106692 from 107826 hosted by Microsoft .



Grant MacEwen University





MacEwan ranks 111059 from 108851 .



TekSavvy



TekSavvy ranks 313700 from 315402 and are hosted by Microsoft



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 315428 from 317196 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Internet Centre / CCINet



Internet Centre

rank 419053 from 421693 . Their partner Rack Nine ranks > 2000000.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 456245 from 441685 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Distributel / 3Web / CIA



Cybersurf

is ranked 897162 from 1017278 and seems to be hosted in USA by DigitalOcean.



Primus



Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Northern lights Fiber







Northern lights Fiber
are ranked by Netcraft >2000000 and uses AWS.



OkayVPN





OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

Geek squad phish from Amazon

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 15:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7JiI-00000000E4A-1SG9

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 14:59:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 14:59:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e226-52.smtp-out.us-east-2.amazonses.com ([23.251.226.52]:60051)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f9494f3-2578c585-35cb-4a9d-94cb-280d37908e4b-000000@us-east-2.amazonses.com>)

id 1w7FVo-00000000HwU-2Aae

for doctor@mail.nl2k.ab.ca;

Mon, 30 Mar 2026 10:30:56 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774888195;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=XmROXhIfikgCvQYb/x4/NfrmYuoNbjN1pg4lKygQ/zY=;

b=I5eO1msW0yGl5jNK5H08tesSAsBB/GhvmMpe5hiLHAdIgtzUli+451AW3ipReKEK

LjPHEceWdAopv/y8EqGMOJVXYEn2uZfq5sFHxubqH5oczXZTTDZgJVLehwfQFYqVvZp

bVyH+jX9zu9HV/3oGyu5SNMkXSUvKbrOw3sJqv5dUnZLzBhRKCYJ/ViYmn5TzmXpZw7

oqUArD0KV2wA2QTZhiDsf7f6rXNbz6+YduCR2YmuSBWf5waTz54NLtLlzA8ZzXVY0Jt

kR2dotstcpGLm4tVsVJr22XSs3ohSKsvxzCU/I3QOjjOUWfbToo6GU9hm1mCX3FqBga

LFJ0cj2zFQ==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774888195;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=XmROXhIfikgCvQYb/x4/NfrmYuoNbjN1pg4lKygQ/zY=;

b=gnQggr5aCsO/XY39llGpG8ff3eYxCR9kj8x0Le/+oia/QLQpD4N4WjB+FbY1PBRU

FR+BDUUPK/g1Nd01Ebq7Z3KzUPQzYwVl5JZQ1F2GBXgJ90vyspBNIDFcZw9YFWfbDvJ

jZ3bwkVdjXptsMrgIj08QwCqPgq0TqCpYqtitwNg=

Date: Mon, 30 Mar 2026 16:29:55 +0000

From: Invoice #025902

To: doctor@mail.nl2k.ab.ca

Message-ID: <010f019d3f9494f3-2578c585-35cb-4a9d-94cb-280d37908e4b-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: e5233453-179c-498c-9127-4a09633cd70d

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.52

X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:639986414836:Geek-Squad-Total-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-safe-browsing-protecti

[...]



Content analysis details: (11.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.52 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[23.251.226.52 listed in wl.mailspike.net]

Subject: {SPAM?} AWS Notification - Subscription Confirmation







You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:639986414836:Geek-Squad-Total-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-safe-browsing-protection-performance-optimization-premium-VPN-Wi-Fi-hotspots-specialists-ready-at-for-management-call-support-8562099547



To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription



Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out







Geek squad phish from Amazon

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 15:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7JiI-00000000E4A-1SG9

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 14:59:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 14:59:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e226-52.smtp-out.us-east-2.amazonses.com ([23.251.226.52]:60051)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f9494f3-2578c585-35cb-4a9d-94cb-280d37908e4b-000000@us-east-2.amazonses.com>)

id 1w7FVo-00000000HwU-2Aae

for doctor@mail.nl2k.ab.ca;

Mon, 30 Mar 2026 10:30:56 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774888195;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=XmROXhIfikgCvQYb/x4/NfrmYuoNbjN1pg4lKygQ/zY=;

b=I5eO1msW0yGl5jNK5H08tesSAsBB/GhvmMpe5hiLHAdIgtzUli+451AW3ipReKEK

LjPHEceWdAopv/y8EqGMOJVXYEn2uZfq5sFHxubqH5oczXZTTDZgJVLehwfQFYqVvZp

bVyH+jX9zu9HV/3oGyu5SNMkXSUvKbrOw3sJqv5dUnZLzBhRKCYJ/ViYmn5TzmXpZw7

oqUArD0KV2wA2QTZhiDsf7f6rXNbz6+YduCR2YmuSBWf5waTz54NLtLlzA8ZzXVY0Jt

kR2dotstcpGLm4tVsVJr22XSs3ohSKsvxzCU/I3QOjjOUWfbToo6GU9hm1mCX3FqBga

LFJ0cj2zFQ==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774888195;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=XmROXhIfikgCvQYb/x4/NfrmYuoNbjN1pg4lKygQ/zY=;

b=gnQggr5aCsO/XY39llGpG8ff3eYxCR9kj8x0Le/+oia/QLQpD4N4WjB+FbY1PBRU

FR+BDUUPK/g1Nd01Ebq7Z3KzUPQzYwVl5JZQ1F2GBXgJ90vyspBNIDFcZw9YFWfbDvJ

jZ3bwkVdjXptsMrgIj08QwCqPgq0TqCpYqtitwNg=

Date: Mon, 30 Mar 2026 16:29:55 +0000

From: Invoice #025902

To: doctor@mail.nl2k.ab.ca

Message-ID: <010f019d3f9494f3-2578c585-35cb-4a9d-94cb-280d37908e4b-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: e5233453-179c-498c-9127-4a09633cd70d

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.52

X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:639986414836:Geek-Squad-Total-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-safe-browsing-protecti

[...]



Content analysis details: (11.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.52 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[23.251.226.52 listed in wl.mailspike.net]

Subject: {SPAM?} AWS Notification - Subscription Confirmation







You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:639986414836:Geek-Squad-Total-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-safe-browsing-protection-performance-optimization-premium-VPN-Wi-Fi-hotspots-specialists-ready-at-for-management-call-support-8562099547



To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription



Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out







Geek Squad phish from Amazon

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 15:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7JhS-00000000E3C-2pXV

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 14:59:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 14:59:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e226-50.smtp-out.us-east-2.amazonses.com ([23.251.226.50]:46551)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f7997ca-574767f5-37e2-4c83-b545-6cf9e99602e5-000000@us-east-2.amazonses.com>)

id 1w7F3G-00000000GaB-3mN8

for root@nl2k.ab.ca;

Mon, 30 Mar 2026 10:01:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774886426;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=4cNv4P0dqRl4JIEs1aTfzq/JO05U0iEmQo+hM9ZkfEA=;

b=B0MnTrbSncT/RkoOCe4kTpJuW1PrqPJ8IUVFLeVECKWmeyvAbG9RMcrb4D3agOKp

baHmgrcYBmFzi1lDUwoDUljOYXoy4qpbUTKqAgbNRxCm6ePe2sEGJiQ4frMBykkGJl6

eUfyHOLuf7MbMU2WmNcpDfmYoGHJHtwUVoNEbgXC6OPZc8k9gX532MbpyFVoRgk7LWY

VzFvqpqctGkPPZTHnRYCOx/YXa4m3XWlRda1IZCTLo8yGSaz14GO0HlzFeSEN2ZYrGy

44UsttxZQiABsTtwM5YTsyAGlhqEaop3Hy+zf4jscm8Gj5ABqAzUbmQoUncdWNieLMJ

sueuE4y0FQ==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774886426;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=4cNv4P0dqRl4JIEs1aTfzq/JO05U0iEmQo+hM9ZkfEA=;

b=Z5YbWgqhTX6QpELzgf1F41so93hASP+D0T1hcIwlvR1CasIBGl9eLNdia2Zg0mKm

avspdu8kJjWhJ3LxlI7S2IwUh8ev9EoyzxPt07b8QsBdUeUz8pbNqa7yMCUAOtz7S3l

jyBSKsO7RxDX/gMRBahy5aBJT4sp4pLsm+45sLC0=

Date: Mon, 30 Mar 2026 16:00:26 +0000

From: Invoice #025876

To: root@nl2k.ab.ca

Message-ID: <010f019d3f7997ca-574767f5-37e2-4c83-b545-6cf9e99602e5-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: 0c0bc2e1-e104-4326-a424-274d1823b2ad

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.50

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:834251004542:Geek-Squad-Gamer-Security-membership-auto-renewed-for-next-2-years-490-USD-securely-charged-full-access-now-active-Take-ad

[...]



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.50 listed in dnsbl.ahbl.org]

[23.251.226.50 listed in dnsbl.ahbl.org]

[23.251.226.50 listed in dnsbl.ahbl.org]

[23.251.226.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.50 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.50 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[23.251.226.50 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[23.251.226.50 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[23.251.226.50 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[23.251.226.50 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[23.251.226.50 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} AWS Notification - Subscription Confirmation







You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:834251004542:Geek-Squad-Gamer-Security-membership-auto-renewed-for-next-2-years-490-USD-securely-charged-full-access-now-active-Take-advantage-of-identity-monitoring-alerts-virus-spyware-protection-plus-password-manager-autofill-Need-anytime-call-help-8562099547



To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription



Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out







McAfee phish from Amazon

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 14:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7JhE-00000000E1Q-3u4f

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 14:58:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 14:58:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e226-54.smtp-out.us-east-2.amazonses.com ([23.251.226.54]:47057)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f6df0ca-c462a42e-6a25-4a33-bb40-9fb721206dcf-000000@us-east-2.amazonses.com>)

id 1w7Eqy-00000000AhG-1cxj

for doctor@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:48:44 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774885663;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=7cZ90zh4w4yHcdbd9Ev5eYvM/dgDg66ng2Otz1tie3o=;

b=AQY/+wSKEbGh6Xy7RnoO9JjXPjhn/MxXWsZjEN2jGhBCaWX3cab0v8Q6FdAaw4Yl

0y9h/Huy2xWZBnmwrzqAMSMMCGcd5hTmQZiW8x1ti9d8sF5u7kMC4Psd3YEfKqt2DrV

Ju26NoR74VhvKf8jHla9eDJ8TaAxwBNU7lDAvDoRcMJmxg2PHn/36/udfN5eZAOT84y

FVsN457hQ2Lk8efQiwJLkzUddVrbf8IZwpgT4Vshrxd9V19RTpEeh6XIEB1cuop/QVg

43dU+qnPnFMN+w//O4fvxFvjBsyBxO13DQoLh7ERNgl90e3zm/vtLaAUcZkJ2XGtD+f

nXct/ThEDw==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774885663;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=7cZ90zh4w4yHcdbd9Ev5eYvM/dgDg66ng2Otz1tie3o=;

b=1RSm85N+nGYKDE3Z5bglYVp+S8wUYHm/pl1gQh8R1QGQoaQVLASeszJ431vWgiiA

YV6Mz4JIKNcyaaaTdYv/pXIRK+xYATg5xzjYmKPNhlH/cySQI7ws9KDlbPp8CvsWcb4

xdjALgvFMyCuS8cM1kQW/UGLZrQXXCsoUafND9S8=

Date: Mon, 30 Mar 2026 15:47:42 +0000

From: Invocie #021600

To: doctor@doctor.nl2k.ab.ca

Message-ID: <010f019d3f6df0ca-c462a42e-6a25-4a33-bb40-9fb721206dcf-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: 0c4ca3f3-d4f5-4bf6-a2f7-b546d8ea5bf8

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.54

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:245650695826:Geek-Squad-Family-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-online-threat-defense

[...]



Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.54 listed in dnsbl.ahbl.org]

[23.251.226.54 listed in dnsbl.ahbl.org]

[23.251.226.54 listed in dnsbl.ahbl.org]

[23.251.226.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.54 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.54 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.54 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.54 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[23.251.226.54 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} AWS Notification - Subscription Confirmation







You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:245650695826:Geek-Squad-Family-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-online-threat-defense-identity-monitoring-alerts-premium-virus-spyware-protection-specialists-ready-at-for-management-call-support-8562099547



To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription



Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out







McAfee Phish from Amazon

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <010f019d3f5f6588-2ceca567-60c9-4233-b0bb-9a5be11fb347-000000@us-east-2.amazonses.com>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:33:00 -0600

Received: from e226-53.smtp-out.us-east-2.amazonses.com ([23.251.226.53]:60223)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f5f6588-2ceca567-60c9-4233-b0bb-9a5be11fb347-000000@us-east-2.amazonses.com>)

id 1w7Eba-000000009jf-2l4m

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:32:50 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774884709;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=I6ykKO5fH5+RnrhiMWkudZ1ZmkoR93VRD0dc8NAjXYo=;

b=RjUzYtViyz63OfEyXrK65ASRpC8ywFPcEHz+KgDxXzlB/AwHLwgD+/p/THT1VLrx

hmNj3TCWzGh9AZ5kjxGDWB7HlE4Aob2pWhmy4AGdNuHJLZ6UUOG6Ho1lpfP6SM5SzNe

wgKEIVBObcfFbyG1351Fek1U/nVXFcXLyP1yZOXZTZkJNa5hiF+3mc8g4M241ywp49i

zNvhXVnYgalU7IPUmuN5xbsafG4pLeq9G6URtUZA1/l2/9F6quUCXlW1MEsTOIK7Cf0

IRVZobfgEXCzoO4dExRWQn4G/10XigCOgdtgL8DqLVvGjQo6/PVXzK4PHGCDrdr2sR9

pBCbsGlKsw==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774884709;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=I6ykKO5fH5+RnrhiMWkudZ1ZmkoR93VRD0dc8NAjXYo=;

b=wC7VpvtIf5Y2LxQNajvNeCaOxC7qukuQp0J6cdD2m2tmEAQc9o3hgX4X23VZL+Tr

zLd6Kgovu4g/sTEAS3xU1o7HDU0SLeugW7rXhn569wqcg8FrE6IGpLwZ0Q/ec1svAdk

oW1pk/kkCLTWCtxVQTG+Y4XGTi0GT7LFfBnwS6Ss=

Date: Mon, 30 Mar 2026 15:31:49 +0000

From: Invocie #021619

To: dave@doctor.nl2k.ab.ca

Message-ID: <010f019d3f5f6588-2ceca567-60c9-4233-b0bb-9a5be11fb347-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: a9d22442-a34c-4659-a952-d44829e21832

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.53

X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:002904790943:Update-McAfee-Identity-Protection-renewed-2-years-ahead-490-USD-charged-granting-password-manager-autofill-identity-monito

[...]



Content analysis details: (11.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.53 listed in dnsbl.ahbl.org]

[23.251.226.53 listed in dnsbl.ahbl.org]

[23.251.226.53 listed in dnsbl.ahbl.org]

[23.251.226.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.53 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.53 listed in list.dnswl.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[23.251.226.53 listed in wl.mailspike.net]

Subject: {SPAM?} AWS Notification - Subscription Confirmation







You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:002904790943:Update-McAfee-Identity-Protection-renewed-2-years-ahead-490-USD-charged-granting-password-manager-autofill-identity-monitoring-alerts-virus-spyware-protection-immediately-Update-settings-cancel-via-24-7-call-support-8562099547



To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription



Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out







McAfee Phish from Amazon

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7EpJ-00000000Aeg-2vQR

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:46:53 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:46:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e226-56.smtp-out.us-east-2.amazonses.com ([23.251.226.56]:37031)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f529e36-167663d8-43a9-48ca-92c7-574397af5d4c-000000@us-east-2.amazonses.com>)

id 1w7EO6-000000008hs-1UX4

for root@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:18:54 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774883872;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=sr8WD4Oj33tWgjXd8VgkszjCsa4x7/eYxV19vUSqs/M=;

b=qd3ZqF1JdFx3T3MZqmP1XwHXOFvgkBTlF1MHV4x8UduCnpcruQw3TG82SgCiZ3iV

xapey+TRUvC1CKVayOslZE8UIeGfViXnBQo7oHC5wmlvSnZmoUoZCv9TLlXcMYhBa/6

VdP6QXrpWxSKBx+1vhH50AW79yK5sUpwefs1eOR6VLUxRJHmhufMWlsTo752pWLYo5f

sjtSxdvbx81P6tpvfubDCCTD052PheFMSUX/jGppyly3lWIFQM/iOiAzme06thKXz6H

EC0lXykeAuZ2qaNJtElm7NP0l4P1+JBnqf7n/ktBnLg1XILOxe5efCTbHyaG1XNAi9J

vNp4aLp6Ew==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774883872;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=sr8WD4Oj33tWgjXd8VgkszjCsa4x7/eYxV19vUSqs/M=;

b=hgTTKXUi2WBj1x39wS8hgTwbf4DkgFyAfDpgpAd15cIiW8JBrxxc2CAy95/Mlrpo

DXViD3UJ2c8baXT70PrbsijTmwnYePx7Td8U516MDzEhBJ9IwZOLkOAdWJPS91whi5n

IWv8TZpJB7nNnDcCHmdS1TDWQ3bASprrn19k3Rwg=

Date: Mon, 30 Mar 2026 15:17:52 +0000

From: Invocie #021609

To: root@doctor.nl2k.ab.ca

Message-ID: <010f019d3f529e36-167663d8-43a9-48ca-92c7-574397af5d4c-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: 562b06ab-20a2-4404-9ee4-e8c406c53e26

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.56

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:409953609051:Your-McAfee-Identity-Protection-plan-extended-2-years-ahead-490-USD-charged-immediate-safe-browsing-protection-encrypted-s

[...]



Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.56 listed in dnsbl.ahbl.org]

[23.251.226.56 listed in dnsbl.ahbl.org]

[23.251.226.56 listed in dnsbl.ahbl.org]

[23.251.226.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.56 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.56 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[23.251.226.56 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} AWS Notification - Subscription Confirmation







You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:409953609051:Your-McAfee-Identity-Protection-plan-extended-2-years-ahead-490-USD-charged-immediate-safe-browsing-protection-encrypted-storage-files-virus-spyware-protection-access-restored-Contact-to-manage-subscription-call-8562099547



To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription



Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out







Arctic Wolf spam from Microsoft Outlook Part 2

Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

[52.101.85.103 listed in dnsbl.ahbl.org]

[52.101.85.103 listed in dnsbl.ahbl.org]

[52.101.85.103 listed in dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.101.85.103 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.101.85.103 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Arctic Wolf Dare 2 Compare $50 Offer





Hi Dave,



I have received your request to learn about Arctic Wolf solutions. We are looking forward to having a conversation with my local, experienced representatives to walk you through a 45-minute introduction demo of what we do and who are at Arctic Wolf.



Once the meeting takes place, the e-gift card will be sent to your email for taking the time to learn about us at Arctic Wolf and our solutions.



Wanted to see if you could provide some context for our meeting so the team can tailor the conversation a bit more towards your needs.





Company address & estimated # of employees?

Any cybersecurity initiatives top of mind?

Any tools in place currently?

Preferred technology/security partner?









Cheers,

Dante







Dante Selke / Sales Development Representative – Canada

dante.selke@arcticwolf.com / 507-272-8389



Arctic Wolf Networks Canada Inc.

619 Kumpf Dr

Waterloo, ON, N2V 1K8



Book a Meeting with Me! | Unsubscribe ☹





If you'd like me to stop sending you emails, please click here





------------------------------------------------------------------

This email and any attachments are for the expressed and sole use of the intended recipient(s) and contain information that may be confidential and/or legally privileged. Any disclosure, copying, distribution or use of this communication by someone other than the intended recipient is strictly prohibited. If you are not the intended recipient please delete this email immediately. Any information and services described herein are provided by Arctic Wolf Networks, Inc.

Arctic Wolf spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Mon, 30 Mar 2026 09:02:00 -0600

Received: from mail-westusazon11020103.outbound.protection.outlook.com ([52.101.85.103]:10879 helo=BYAPR05CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7E74-000000001rw-3OXg

for dave@nk.ca;

Mon, 30 Mar 2026 09:01:19 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=BD16Z31gt4a25BYBJKhFlduHMwnCxzHRXrzzsziIP3KTS/HKq8sJIv/ha/HDYzA2IfpGFIBi/55jIXaoL76TcD87yBf60Yhl1BrBWclp4yJKPCXW5gnvQwu7aeAj04poRVaIJLXhqL1xj2bu8JyGKqEZpR5++7+vsyUa+NAzhxck+9fLgZeBLzL6CR9fWs/yQsNZbdyEzWFHKMshyohbFLW4jvpBS60Kd/HnmnJDZ72fuF41kzjG1BbOIDQxvnfIH65PBfB9rUJ5h01cvF1ExhHy7FlR5H2cLSVZZKfQf4w3ns9ME1z915t+eTQpAStay6S86Vd4r5AoqewLi38L5g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=MUeNh7U9oL3cQceTQE4st/yNIROFFN6v4ooxrf3jBDY=;

b=wr2ZRdPqDMNBI3vRVdXSTTB6DZhTDlvevv3M93JH8rxxFeyDmN9JnQ5YX0sfW4hEvSVYA8U9yh+GxLAfOKqSeUAaMGCxMOIopMXIHkWdLYlMdy9D7O08zdshWIQCDuwVoKoSxMin3SsfwqxbiymlHg3lAr29ErNkFgYbEkShszRlAo92UogAq1s7rngIADpfF1FsFC4OMyowlJ02E0pBg/yyB+4pWijkRra58PXPlVkvMaVmWdqdrH1N9DKCyCo133qbtbFUK9M1RiCgcsrKIkOqVf3KRZePqOK4x/W3qY6grSb3QBbwo8BuhaMipBy2Lt40I9o7k2UTfb5M7mebWg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=arcticwolf.com; dmarc=pass action=none

header.from=arcticwolf.com; dkim=pass header.d=arcticwolf.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arcticwolf.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=MUeNh7U9oL3cQceTQE4st/yNIROFFN6v4ooxrf3jBDY=;

b=nHe64bhZLnrRlAvguW+bWWnI0WKeOh2h5bjhLXrNPEttO0AszSeMONEDZq/wihc9+GDrAeU1OJXj5rXnqywjyWwPgE9hSn3XcljqVq67A4TcAU+AthXaXosLwMORVsXpS4+BY4w7qZwzmBmaZvjGzlACnyefOuTyRWNfC+A4Zx8N8A5QoZUHPjhVXcgBF7gVMNB4Aq0nf/PGVGONeJcSYt3T62S4QU7NtmdiMJ22oUx9r9klgeJhy/F2WD632Ve1XgyL2ZGCtcc+RnHYQr2J5RmgzgzViovQwhjOd8XogoUoIt+ORdI7cPmNoh2TWEaZ9BLvh1uGqrDbvSJQCxN66w==

Received: from SN7PR02MB10180.namprd02.prod.outlook.com

(2603:10b6:806:2aa::17) by PH7PR02MB9337.namprd02.prod.outlook.com

(2603:10b6:510:273::7) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.28; Mon, 30 Mar

2026 15:00:14 +0000

Received: from SN7PR02MB10180.namprd02.prod.outlook.com

([fe80::9380:61a6:ee81:37be]) by SN7PR02MB10180.namprd02.prod.outlook.com

([fe80::9380:61a6:ee81:37be%5]) with mapi id 15.20.9745.027; Mon, 30 Mar 2026

15:00:14 +0000

From: Dante Selke

To: "dave@nk.ca"

Subject: Arctic Wolf Dare 2 Compare $50 Offer

Thread-Topic: Arctic Wolf Dare 2 Compare $50 Offer

Thread-Index: AQHcv8ZEtb2D7RCDBUqDENElP82UyA==

Date: Mon, 30 Mar 2026 15:00:00 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=arcticwolf.com;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SN7PR02MB10180:EE_|PH7PR02MB9337:EE_

x-ms-office365-filtering-correlation-id: e6bd65b2-5fdf-4040-293a-08de8e6d0ca6

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|376014|3109299003|69100299015|4022899009|366016|1800799024|7049299003|3122999024|38070700021|8096899003|13003099007|18002099003|56012099003;

x-microsoft-antispam-message-info:

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

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SN7PR02MB10180.namprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(3109299003)(69100299015)(4022899009)(366016)(1800799024)(7049299003)(3122999024)(38070700021)(8096899003)(13003099007)(18002099003)(56012099003);DIR:OUT;SFP:1102;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?K0VpUzhTQlRCNUtsK04xM28ycnE3OG5VUHpaRDBockNSMm9BSHdNNnlkV2Qr?=

=?utf-8?B?c0lFQjhmV3B4dVZiN2pGY3FadE5wUGwxaEdiaGRrS2tERWprUWswTXZ1b1lF?=

=?utf-8?B?NEFBVS9yYWVidjR0UEhNZUNScnUxU0lhVmNrOUpGeEVYSGs4MGZQSlF4RmQ2?=

=?utf-8?B?eThKWkp1MHpwZ1I1SXVyL2F5RWIwUnN1dE9JSlZkbGM5UlgrRHJ5YUdtMTZZ?=

=?utf-8?B?NGRyUmd0blZpcDh6TG9iNlV4SlpjRkU3VTVLYUVvWWhqUG5WTmNTb2N2REdV?=

=?utf-8?B?d2VqOWxRc1NtUDd5cnYzbm9jUlJaUEc1elZQM3hsVHZTYXlFb0d2MkFxZVNN?=

=?utf-8?B?aGFHNnhHRzRzbzVoRlUvalZFNlRMZHRsT0FyRWtGUXV1L0pGRXlpd3N4a2ZB?=

=?utf-8?B?ZTlZaVU4b3ZoK1lHenVxekFTS3NOWlJKZTU3a0tJamtyRlZaek5QcWlIY2gy?=

=?utf-8?B?V3BBMnl6TFR4NDNDVjV1S0pGbVN1U3Nvang5MEJPYWRJeGpDRXZNSWZKYS9u?=

=?utf-8?B?UllGT3V2aXcyL3dnVkFpUmxhVGJGR3lRU2xYMFI1Q1k3cktFMTJFNFRWTTZ2?=

=?utf-8?B?Y214cHVMcy9laTh1QW9QTk1IRzdlSFE1MUgzclJzcEhQTTkwTWxnUjdqNEpJ?=

=?utf-8?B?WStSeW9UamNBb0VYYmlVYXd3dlh2T096VnpibDdmUDdHMVl6eHlZK0JvaFR6?=

=?utf-8?B?R01sRjRQbXQzUlJ6MStmbXhlMDhjeG12c3lkRjBWU2RxSGhEaDFEK0RKMVF5?=

=?utf-8?B?UmhnNVlINjNYMWNRZ0oyUkk0OGFDSVpUYmtkZUh1bWo0YU9mQ3lGemxiMmU2?=

=?utf-8?B?dXRaQ3JBK3JDZmZubDZvc2NSWjVhZkczWW1kNlpSZktJaDJlUWMxSjE2K051?=

=?utf-8?B?SGlUYVduNDBvSkwwTkVZVlhOL2NUSUNLM25ORVN1NlpJbEFNejV5RUY5OWhv?=

=?utf-8?B?UkV4blMxZHEzTzhPODMvUGNBOUF2RVlvVUcwSVF0bHFHQzJkQjRCcmNtYnNj?=

=?utf-8?B?bVRTK3BsOCtuMHBleTFrYWhRVU9DeHVMRlJPS2kwNFVDVlV4eEVsUmZjT3ZP?=

=?utf-8?B?QkZhRlVjazVreGliTENOWXdDeDZvMXBwQUo5UUVXKzhwWlJ6L3dkSHE4eUNk?=

=?utf-8?B?TDY5OXpPUVZCeEIxNjNlSkxzYlljQzBCdmFCZnoyOTJXQ0tlem92eERDek91?=

=?utf-8?B?dklHUHloeDFlRDI3eDBJdVUvcEVBdlNHM3RvZzVVZXBOcnI3WUVSM2RVdkl6?=

=?utf-8?B?dFl0TDRHQmJGS3l1R2tLdFUwV0Z3TU0rL0ltSmlSODFoZ0hQMDZscVAyUjRa?=

=?utf-8?B?cEFrUVF1OTMrSk9PT29namdIYjBWUERQVnAybGhyRklFR0htMWQ4eGJHcXRj?=

=?utf-8?B?QjlCSzB4K1dXVm1zcFFHZDUvaXc0OS81cFR4dmJ3cytuenRFZEFEZklRYWcy?=

=?utf-8?B?MzNaVG5RUUhwZ0NHS3dnVWEvOXJ5S3dRdEpubjNjL3FZK1czc0ZZSXlScXlR?=

=?utf-8?B?bFVUblhRZDQ1M1BqTWp2UkNZclJvb2xaYkJSRkUyZzNnYnN6SDc3TVlHQk0v?=

=?utf-8?B?SFlWVTlSN0xzZXpXeXVPdVdMZXBXYk5qSlNFZXZJaW01bHkwd1FHY25WbTZl?=

=?utf-8?B?Sm9COGkwSW5NTmJOY0oyNkk2UGdzNmJQRFJrR2graFhTWU9lOEFLL25JRmRk?=

=?utf-8?B?OWg0ak1wZzAyeE5tMGpqWVhNWG1GQ3U4RXBPblU5R01SQUI5aVFyZG0rNEti?=

=?utf-8?B?REJhcE5haWxJK2s4N1JFSk1VS3JYSWxvbi92ejhmVGVYeFJieXVWdC9hamhY?=

=?utf-8?B?L2g2dWpSbjU0S2JvdFNpd3VXOEc3NCtWZ08wTmtNUTUyUExNUDdNT244MjF6?=

=?utf-8?B?dVp2blEyM3UyS2t3bjB6MTBzakYzOHFkd05RMjBzOG5NK2Y5RXVQeXhtWThE?=

=?utf-8?B?THIrcFNtTE9SMm0zQ0NMcTRiRDkvN2Z3RnhxTkkwQVJaT0tRV01oMFFYSFNq?=

=?utf-8?B?SnpKVXViOEVSeWtUVWZ2dTVuNUF2RTdYakh3Vkt6aFJGaDliVW9teXdBMFdJ?=

=?utf-8?B?KyswV3FDMnBWQXI1RjI2TjExYmY1ak9GdUpZTzBvMWdwUWg0SkZZSFNxSFdJ?=

=?utf-8?B?OVBTVFNNdXg3UHozZ3QzN2JyYkJ1eWRRUFRGVjJxcktEdXYxNUVTbHI4eGlF?=

=?utf-8?B?aFNCMXJyc0h5YWhMT3BqaDdMT1pVclRZdlhKTzVaTzJuSG1jKzBQWWFHelRB?=

=?utf-8?B?MFlKZ3RpN1QyZmk3eEF3RDdKOG5Zd1VzWVVIZVNscXYxUzlQcGp5bzN5akJn?=

=?utf-8?B?SCtoQ242cjZ3cC9IdC92K2pqTmg4YTF0VWlkWStTZ0twUUdaQXdkZz09?=

Content-Type: multipart/alternative;

boundary="_000_SN7PR02MB10180994B68D75ADFA1C7F8438955ASN7PR02MB10180na_"

MIME-Version: 1.0

X-OriginatorOrg: arcticwolf.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SN7PR02MB10180.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: e6bd65b2-5fdf-4040-293a-08de8e6d0ca6

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2026 15:00:14.7522

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 066bffcc-c53d-4584-a5b7-9b9b750f7b29

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: j0bW9Y8uTId/VrdVpyVuF/V3N7MHmAtGS6PZ7TG89Ab/ml1mLgKKrGbq64hIN65qwg1vF1YrKdmTLwfmIsr9aosDu43NkHehPxITBixtOjo=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR02MB9337

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Dave, I have received your request to learn about Arctic

Wolf solutions. We are looking forward to having a conversation with my local,

experienced representatives to walk you through a 45-minute introducti [...]



Rabobank Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7Eny-00000000AbA-1oqg

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:45:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:45:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [82.223.245.29] (port=64527)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7DD6-00000000C30-26TH

for doctor@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 08:03:32 -0600

From: Rabobank

To: doctor@doctor.nl2k.ab.ca

Subject: Wij hebben opnieuw een ongeautoriseerde toestelregistratie waargenomen

Date: 30 Mar 2026 16:02:30 +0200

Message-ID: <20260330160230.D4EDDD8F24CA0FFE@rabobank.nl>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ongeautoriseerde toestelregistratie Ongeautoriseerde toestelregistratie





Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

[82.223.245.29 listed in dnsbl.ahbl.org]

[82.223.245.29 listed in dnsbl.ahbl.org]

[82.223.245.29 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

3.0 HTML_ENTITY_ASCII Obfuscated ASCII

Subject: {SPAM?} Wij hebben opnieuw een ongeautoriseerde toestelregistratie waargenomen



ING Logo

Ongeautoriseerde toestelregistratie



Op 30 maart 2026 hebben wij een nieuwe toestelregistratie waargenomen op uw rekening. Indien u dit zelf heeft gedaan, kunt u deze melding negeren.

Mutatierapport — CRM

Rabo

Dossier: CRM Mutatierapport

Beheerder: F. Clerqs

Datum: 30.03.2026

Status: In behandeling

Details:

Device: Samsung Galaxy S25, Android 14

Reg.: 30.03.2026 10:42

ISP: Orange Telekom

IP: 91.76.42.180

Locatie: Frankrijk, Paris, FR

IMEI: 3400-8730-7750-09



CRM v4.2 | Export: onbekend



Details van het toestel:



Datum en tijd: 30‑03‑2026 15:42

Device: Samsung Galaxy S25

Ip Adres: 91.76.42.180 (Frankrijk, Parijs, FR)

Browser: Safari

Imei: 3400-8730-7750-09



Uit veiligheidsoverwegingen hebben wij uw rekening per direct onder een verhoogde controle gesteld. Er is ter bescherming van uw gegevens en diensten een monitoring van 24 uur ingeschakeld.



Indien de recent geregistreerde telefoon niet door u is aangemeld of indien u deze activiteit niet herkent, verzoeken wij gelijk contact met ons op te nemen.







Bel ons op +31 20 - 369 299 2 (24/7 bereikbaar)

Nu bellen



Met vriendelijke groet,

Fraude Preventie Specialist – Rabo Nederland

Medewerker: Martijn de Ruiter

ING Symbool





© 2026 Rabo Bank N.V. – Croeselaan 18, 3521 CB Utrecht, Nederland

CAm inspector spam from OVH PArt 2









CamInspector - Field Inspections and Quotations Made Easy!




font-family:Arial, sans-serif;">


cellspacing=3D"0">








20px;">


border-radius:8px; overflow:hidden;">






























color:#003366; text-align:center; padding:20px;">


style=3D"margin:0;">CamInspector




style=3D"font-size:18px; margin:0;">The ultimate tool for field technicians=

and installers.




30px; color: #003366;">

Hi!



Tired of spending extra hours on quotations and inspection=

reports?



CamInspector helps you =

capture job details on-site and deliver a

=

professional PDF with photos, notes, quotation, and =

signatures =E2=80=94 right from your phone.







  • =F0=9F=93=B8 Photos and notes per =

    project stage


  • =F0=9F=93=84 =

    Quotations with units, margins, and taxes =E2=80=94 and =

    soon you will be able to geo-locate your suppliers


  • =F0=9F=96=8B=EF=B8=8F Signatures for =

    client and provider (optional)


  • =F0=9F=93=8C =

    Custom cover with client information


  • =F0=9F=93=A4 Export and share the PDF =

    from your device


  • =F0=9F=93=8A CRM =

    capabilities:
    classify projects (Editable / Sent / Won / Lost) and=

    soon you will be able to track performance








=

=F0=9F=9A=80Are you a materials supplier? Book a demo or =

reply to this email and we=E2=80=99ll show you how Cam Inspector can help

boost your sales and all the integration =

options we have.






30px 0;">Download the app today and create up to 10 projects for =

free!






margin-top:30px;">










id=3Dcom.australnetworks.caminspector" target=3D"_blank">


ges/generic/en_badge_web_generic.png"

=

style=3D"width:140px; margin-right:10px; vertical-align: middle;" =

alt=3D"Get it on Google Play" />




46515194?l=3Den-GB" target=3D"_blank">


src=3D"https://developer.apple.com/assets/elements/badges/download-on-the-a=

pp-store.svg"

style=3D"width:140px; vertical-align: =

middle;" alt=3D"Download on the App Store" />










cellspacing=3D"0" style=3D"margin-top:25px;">










role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" style=3D"margin:0=

auto;">




















align=3D"center" style=3D"padding:6px 0;">


href=3D"https://australnetworks.com/caminspector" target=3D"_blank"

style=3D"background-color:#003366; =

color:#ffffff; text-decoration:none; padding:12px 20px; border-radius:6px; =

display:inline-block; font-weight:bold;">

=

=F0=9F=8C=90 Website




style=3D"padding:6px 0;">


href=3D"https://australnetworks.com/caminspector/docs/index.html" =

target=3D"_blank"

style=3D"background-color:#0=

0b0ff; color:#ffffff; text-decoration:none; padding:12px 20px; =

border-radius:6px; display:inline-block; font-weight:bold;">

=F0=9F=93=9A Documentation






com/caminspector/#contacto" target=3D"_blank"

=

style=3D"background-color:#28a745; color:#ffffff; text-decoration:none; =

padding:12px 20px; border-radius:6px; display:inline-block; =

font-weight:bold;">

=F0=9F=93=85 Book a Demo












Professionalize your deliverables=

and close faster with Cam Inspector.






font-size:12px; color:#666;">

If you don=E2=80=99t want to =

receive more emails, you can


australnetworks.com/track/unsub?email=3Dsales%40nk.ca&lang=3Den"

target=3D"_blank" style=3D"color:#666; =

text-decoration:underline;">

unsubscribe

.




style=3D"background-color:#f0f0f0; padding:20px; text-align:center; =

font-size:12px; color:#666;">

=C2=A9 2026 Austral Networks =

SpA. All rights reserved.










email=3Dsales%40nk.ca&lang=3Den"

alt=3D"" width=3D"1" height=3D"1" =

style=3D"display:none;" />





CAm inspector spam from OVH PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7Enn-00000000Aam-0zS1

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:45:19 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:45:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-9ce2769b.vps.ovh.ca ([51.222.110.77]:56340 helo=mail.australnetworks.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7D95-00000000BhM-05eV

for sales@nk.ca;

Mon, 30 Mar 2026 07:59:14 -0600

Received: from mail.australnetworks.com (mail.australnetworks.com [127.0.0.1])

by mail.australnetworks.com (Postfix) with ESMTP id 4fktBJ6vQPz69Hs

for ; Mon, 30 Mar 2026 13:58:16 +0000 (UTC)

Authentication-Results: mail.australnetworks.com (amavisd-new);

dkim=pass (1024-bit key) reason="pass (just generated, assumed good)"

header.d=australnetworks.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=

australnetworks.com; h=content-type:mime-version:date

:content-transfer-encoding:message-id:subject:to:from; s=dkim;

t=1774879096; x=1777471097; bh=NPuxarvEwynG+C18FxFWNgtw79j7HCL0

KEx5HJHjwqw=; b=bymau3jXHh1I1ZkpDfo2R0V3onKXwjRtmXBUgnx+GVE2zg67

9F84A0O6pIbIWM97h4dx+tSwlqeX7leVcCIKJei9ON50iF05fY6BhnzQLGVSgb5e

ilDw++MhWxfkeUSbQSPmPTiuwmonSRfLRrRWE7yvLKhOwxZGR5ZxR7D8zXo=

X-Virus-Scanned: Debian amavisd-new at mail.australnetworks.com

Received: from mail.australnetworks.com ([127.0.0.1])

by mail.australnetworks.com (mail.australnetworks.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id k6XiSVq7ejmo for ;

Mon, 30 Mar 2026 13:58:16 +0000 (UTC)

Received: from [127.0.0.1] (vps-291fd459.vps.ovh.ca [51.161.34.69])

by mail.australnetworks.com (Postfix) with ESMTPSA id 4fktBJ59zTz69HG

for ; Mon, 30 Mar 2026 13:58:16 +0000 (UTC)

From: sales@australnetworks.com

To: sales@nk.ca

Subject: =?UTF-8?Q?Cam_Inspector_=E2=80=94_Field_inspection?=

=?UTF-8?Q?s=2C_quotations_=26_professional_PDF_del?= =?UTF-8?Q?ivery?=

Message-ID: <1912c7fb-991e-6cab-0917-c71e0ec4d9c9@australnetworks.com>

Content-Transfer-Encoding: quoted-printable

Date: Mon, 30 Mar 2026 13:58:16 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CamInspector - Field Inspections and Quotations Made Easy!

CamInspector



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.161.34.69 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

[51.222.110.77 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.161.34.69 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

[51.222.110.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.161.34.69 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Cam_Inspector_=E2=80=94_Field_inspection?=

=?UTF-8?Q?s=2C_quotations_=26_professional_PDF_del?= =?UTF-8?Q?ivery?=

Web/SEO/App spam from Microsoft Outlook Part 2

In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYSPR03MB7620:EE_|TYSPR03MB7619:EE_

x-ms-office365-filtering-correlation-id: 057cd4e5-2b17-470b-90d2-08de8e5f29da

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|10112599003|31061999003|39105399006|37011999003|461199028|15030799006|15080799012|19110799012|8060799015|8062599012|40105399003|51015399003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?YXJTM294NERzeGZZOVl1VlZsVHJIN0cwWHE4NG1qY3ZScUN1aUxLWTBGUXFH?=

=?utf-8?B?d083MFFybGFsODhzaDdXY2QvTFdPT2NBUHhKdHRFRzhDNkRGQ1V1Y3VpRUNT?=

=?utf-8?B?V1huUmJpSER4UXFndEF6czN3OENsakhqLytyd24rQzRXVVlSbjBod2luWnJX?=

=?utf-8?B?bU5tLzlXQURLSzRhdEpzbWJCeS9IQW5TM21mM2dHUFZaSEFXRTBXdzV0aklo?=

=?utf-8?B?RVMxcEhjckNpcmhkbUxEd2dtZmxRUUxlZjdDU3J5NGt1TnpJdElLUzhPd1Ro?=

=?utf-8?B?Q00xVWg3Y1J2aWRqd2U0WEZlVU5qTFZRc1ZlUFhuSU9ad0FhNEdWUDFRMFFm?=

=?utf-8?B?WVpKcmJjVnE2cnRXZkV1SE9sT3pid2FldmhVSTZmOFE4dWJIQXc3T0Z2Rzg0?=

=?utf-8?B?U3RPZmdmcy95RXJwKzRkUGZWUHd6d0F5dEMvNFhFcGZ6SkJud3NUY1ljMFBz?=

=?utf-8?B?emhtZWtPU0YwLzlncGV4RUJCK1hkV3RqNUtqYTdNL3ZNUjdBeDJ4dkZNenhP?=

=?utf-8?B?Tk5EWUJJZldNRWtCVnBNV21BVExVNDdlZnp2MVBEcWgvdzc5MzhFblRFNjZF?=

=?utf-8?B?c2VNZGdST1dpcFNpK2h6dHhDQWhMbXBoY085eW43VXlQRGRLb3FHVUtpKzF4?=

=?utf-8?B?SkhLMGJ5RE93ZmFDTlJFNzBMVWdNWWhZUEcycFFlWUtrWnMvZDdMTStlWTYv?=

=?utf-8?B?WkloNFVFUzBwNFk3MWs1RHBPTWNKT0hWQ2QzdU9EV3B3MTZmSDRwM0ZJbXRM?=

=?utf-8?B?OGc4S0VMcEVpVDQzNUU3cmt6UVJOd001NzlQYWRDTHM1T2R4VmlJUTNCQ0c0?=

=?utf-8?B?VHNmekJFM0lnQWt4Mk1RWGkyTkFZcjRydGRQQWZLQmFGcnZkcmNiYmJiaWow?=

=?utf-8?B?R3FmLzZQNXJLaVg1dDdBaFdaSlZvdm5ERkFORG1HL1pxa2d3LzdrNlp3RDIv?=

=?utf-8?B?dzRObm1JK2F3b1YvdkFIWGRrOFpsMVNTVDh3ZklodjgwNHhjNmZHRzBCQmMv?=

=?utf-8?B?TFpXdGsvMUJHUk9Fd0ZIci9zdElXODRVZGhtamhnVEp2ejVmTHdmbGtIcWUv?=

=?utf-8?B?bUdkS3l5MXpPRVNxb1d0akNrYTVVem9ISW45NEQ0ZFNQekZPWFVCVlFTd0Rk?=

=?utf-8?B?VHpLZDU3MlQxMHBOTzJZTjdFVXpJN0s0U25meWoxWEVzTlZyQ1lHN053clFy?=

=?utf-8?B?NTNacFczbGlaQzliTlNiZ0VQZzVtWVZDYnhPWkFWZ2Z2VGg1YjVJTVV1dW5S?=

=?utf-8?B?Vnh1YlNSR1AvcEsvSURPRStOcE9sSktqZUUrZXJRaWpxRFVpa09OMjVROXdn?=

=?utf-8?B?WHVPRHlVdVpreWphNWpPUXBKYVNzajFFSHozNWhUQ2dIVWhoaHdnM0RPY0Vq?=

=?utf-8?B?cGJOMGNtMERDSkc0Q3RKRG9uOHRWdDgrcFo3aUpTeWhmQnAxb2Joa2s5MS84?=

=?utf-8?Q?OMSLFM2g?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?TSs0aDBLR0JUME5qM0RXWjJLWkFDVVZjZHQrbmdmblZFaHl5RlNaMGlzQmls?=

=?utf-8?B?MnFKUTZtdTdNT2w0Uk0wRkxZcit1UUhMRXVXb3VmcFNUcFhDeXl3ZkFzL0ty?=

=?utf-8?B?L1IwQXpISlVkSFJSdVhLbWcrcGdTYzJZdDNZSnBqbnhMc1VMUU5tcGhtTjhk?=

=?utf-8?B?RmNKT0dyUzYrbCs3ekZkc1RYM2NkSFFwaDg4YnNMMHVzMk5LRkdMYUxBS3M5?=

=?utf-8?B?TnZIa1U3eHNqQjNiNlF2VWZqNEFmNzBaZXUxTEYvSTkrV01tYUNTRjJvUWlm?=

=?utf-8?B?VXA1ZEFEMDlNYTZhbEU1QWU2NkRodE9lTzFrUTNwK0JTMHJJRXJnQitteUdH?=

=?utf-8?B?RTkvZ2FqV0lBTnkxTFlnVnRyaThaYXNpZHEyYVE4Z3ZEb1JQMTN6enlYZ0o3?=

=?utf-8?B?QjBydXZndDlwb2VmZlRkeG1hajR2cHhkRFR5SU5ESW1nbTlLVEZTQ2ZLcGp6?=

=?utf-8?B?L0trOFQ1OWh0RVo4K3QrdGZVQUl1YzErakt4dXpLQ1lpRXg5dUJaSE5jQ0dX?=

=?utf-8?B?V1FodzF5VmM1QUJsZm5YbTRwMTl0OXI2ZXcrYTJsRUN6YW4zYWlEenN0U2NI?=

=?utf-8?B?aXNwWEp5Y3JzYXdJZmt2Q2hRUU1EWmZLcFQ4U3F3V2JoVmFDelUrMWhlbFNU?=

=?utf-8?B?M1JwWWc1aWFRQlJTTGZlcVF1K2ZuQlNMaWFzL2JTNmc1WVhvSzNmNVF2MFZt?=

=?utf-8?B?eFEvS3RHemIzTmY2ejR2eEVOUjdIOWx2THczS1J4ZkRJTTg1QkYzSkVyRUZG?=

=?utf-8?B?VGdTaTI0T2tOK2ZoVDlkYWJ6V29IREpRVEx3RHlpM2o1M3haN0tOYVp5UGdn?=

=?utf-8?B?N2JRMS9IdUZEdFp3SXFKT0FkMGRKTm5HOTJWSXRFTGp3QTVGNzM1VGFWZGlP?=

=?utf-8?B?TERyNjlsV0ZwbkJVaysrSTRlaDMxaktWVmZNamFobGN2WnBycWY0cmNBd09L?=

=?utf-8?B?QmRFcDU4eEVjWGc1MkxvUXlON210VjFZMS83VzVRZDV3YzhpNzJQeEd0bVNt?=

=?utf-8?B?eFI0NzVDOUlRWE5rY284Z1lTTmtPUEVmalpBTVVHRzBsdkxlNThPSW9IeHdI?=

=?utf-8?B?Z3V0WHVxWmZScFdEem1PTzVpMlJFaHRxT0ljTEk4K3BZa2M2cURxT293ZjNn?=

=?utf-8?B?cnVUUFFTNmg0cEFRWWVtY0w3cE5hVXovMEo2UUQwUFo3Nkl0R3hwNk5tNFBQ?=

=?utf-8?B?YzNFbFJqZ1BPa1dURm5vdU81VFdvTTZIaWh3VWxCbE5FS1BUTGJhdVNEL2ow?=

=?utf-8?B?bU5BTXJ3ODY5Q0NOV2M3eVN3NlIxRXNqS2RsNmFENnRpdVFLam5heU9aTklo?=

=?utf-8?B?TWp0c1lmOTdZSkNkL0RuODU0YzBvRS90Vld4cVdtMHl5MVVVbTlsSnllbHlh?=

=?utf-8?B?anI2bUhBUXB3Z1A1OU1Dem9oSC9ZWGR6RGgzYStCeHpKUHJIcS84bzJNR2lk?=

=?utf-8?B?eEVPTWs2dHFFd08zSWlzeUtJeVgyWjRuT0ZaYmlBV2hjci9laTVZQVMwa2NO?=

=?utf-8?B?WGx3NmhSeDE5TkRLdi9UNEFkeW9odUIwL0ZCM3k3MTExd0NBUmNhblQ2UG5G?=

=?utf-8?B?WGR6M1lsbjhGUmVYaWI4N0pMeTVUUXRKYkdGSTRHVC9HWDRueDlRV01nd25o?=

=?utf-8?B?dkEzQmxSenRJRFg2aU9WTVQzK3NDRDdBdVplVS8xY1FiZkhWcmw5QXltbnM1?=

=?utf-8?B?V0tDS053TEhERmhueFFUQU1mK2ZDVE0rRFZSbXZHQjJQVEdmbUI0djE2SnEx?=

=?utf-8?B?Q1BHV2QralA3bjVrNjVyeTFERHZQL21DL3V4K2tEQ20reDU3aElQMGZ4dnpL?=

=?utf-8?B?a1Ywd1kzTFhNNVY4Um1rM0g1MU4yRjZjc0tDMW5yaVNJRFhwQyt4Vy90ZFNa?=

=?utf-8?B?Nk5IMVZHTjRTQmhBSkIyWFpBNkdQK3RpT1NMOGVzdFRnVnBrTkl6N2tmTnhk?=

=?utf-8?Q?VFSrz9qCHd2Ow3qozoAAbvNbbAMhTs5u?=

Content-Type: multipart/alternative;

boundary="_000_TYSPR03MB76200E29CC673E4FDEDB35E69252ATYSPR03MB7620apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYSPR03MB7620.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 057cd4e5-2b17-470b-90d2-08de8e5f29da

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2026 13:20:50.7830

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYSPR03MB7619



--_000_TYSPR03MB76200E29CC673E4FDEDB35E69252ATYSPR03MB7620apcp_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



SGVsbG8sDQoNCkkgY2hlY2tlZCB5b3VyIHdlYnNpdGUgeW91IGhhdmUgYW4gaW1wcmVzc2l2ZSBz

aXRlIGJ1dCByYW5raW5nIGlzIG5vdCBnb29kIG9uIEdvb2dsZSwgWWFob28gYW5kIEJpbmcuDQoN

CldvdWxkIHlvdSBsaWtlIHRvIG9wdGltaXplIHlvdXIgc2l0ZT8gSSB3aWxsIGJlIGhhcHB5IHRv

IHNoYXJlIHdpdGggeW91IG91ciBwcmljaW5nIGFuZCBwcm9wb3NhbHMuDQoNCkxldCBtZSBrbm93

IElmIHlvdSBhcmUgaW50ZXJlc3RlZCwgSSB3aWxsIHNlbmQgeW91IG91ciBTRU8gUGFja2FnZXMg

YW5kIHByaWNlIGxpc3QuDQoNClRoYW5rcyzigILigILigILigIINCg==



--_000_TYSPR03MB76200E29CC673E4FDEDB35E69252ATYSPR03MB7620apcp_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



Hello,



I checked your website you have an impressive site but ranking is not good on Google, Yahoo and Bing.



Would you like to optimize your site? I will be happy to share with you our pricing and proposals.



Let me know If you are interested, I will send you our SEO Packages and price list.



Thanks,   

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7Ena-00000000AaU-16b3

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:45:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:45:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013083.outbound.protection.outlook.com ([52.103.74.83]:55162 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7CZ8-000000008zO-49eD

for sales@nk.ca;

Mon, 30 Mar 2026 07:22:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=AI01f4+cjDCuH4Rza5TzMNOxt0HCf9tffEKakL8fXSfedCOsxFE+8cBMRTCsHqtKOMg6aLisSuc6Pjkiwn1/K9CSPU4L1gdxcmaRQpDrdikbSVU/eqR840R3gnYW+sCKzzr8PLpn3Whtf8eEXChOcMsa0nx60jp8xTAjsbO3l2TM8UY5u+ppLBdQAOaSmKRwK/mVQLGthJ/KfAV8F0FMyBW/6OQRM3KXaOIxU3ImmSZm7vvXNFmXCuz9sWyuXGjA2K7y9wAXlj9DRPK7FEF9exSMFeLp/cEw8RIPSwzY33o2ye7WmaSCGvJC5XSQmwcRUFSzyTownnFVq+mOyA7ulg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=9Z7wokOPS61XvEr2hEksSb8wWvJ+fbzQV9KD4tI78kg=;

b=W0ZkH0U43qKIlrenymGg3ZQOteTmlfXyJBQLDQgUN5Q/aatFBuX/11tmxKRqGgDmG/jN0qHvDfRRHmcKrHSgDNoyP+3F4O1UaVjI0SwjA0SgqKsrz9Q84LpMwu6aGrHlaJJlnkUsMZ5E+qWeOELGaOSmr+Rh7xGRDzw8DFOTvJKuD2MqpZZ+RJgu69yRu+NtgzKFpE9+jEssDYKgxWSx3/lGMry9nl6J7a0wW2GW3I4kkzYw+aHONKrfGA0eDHOdT3grrmke3zv2iiSf5Q8dtfYAlVa8HUQ8t0d9VfdKyacT8LgwzaTIUPo2kYE7y0o6mwDLQyc97aFLi0P+HMepAw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=9Z7wokOPS61XvEr2hEksSb8wWvJ+fbzQV9KD4tI78kg=;

b=oyb9uEYji/fi5NcHtmeOYUSI6RMU57iZm6C0dwIsebQoXbJ2fH1ZMf3j8UMIjMUSSfdu76atAGiYuCMHbEOVtKhaVDbxS2phTLS6ol2XjSGn9TIJ0/z2d/mluurtmhxSzAHEdA8kg41CV3veeOYemaL2Dym5vDwvrHG7aYThtRNyaZyJUVVwf1haEJPuNJ17QPpp7QUVZw70gYxqXa7WR6SU+e//WVx0If2KC7rWrVnJilh4YGSmfaoEwvG4lthbJAOkkDNSGg3xPGJsVoiwc+9I/A0EmTD6mrtTSWoLvHMVQNS6F/O5uRTzXmZ6qoGhLfFx9I1i+JVTdyYKJ/StWQ==

Received: from TYSPR03MB7620.apcprd03.prod.outlook.com (2603:1096:400:431::13)

by TYSPR03MB7619.apcprd03.prod.outlook.com (2603:1096:400:412::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.28; Mon, 30 Mar

2026 13:20:50 +0000

Received: from TYSPR03MB7620.apcprd03.prod.outlook.com

([fe80::446b:6474:15d0:64d6]) by TYSPR03MB7620.apcprd03.prod.outlook.com

([fe80::446b:6474:15d0:64d6%4]) with mapi id 15.20.9745.027; Mon, 30 Mar 2026

13:20:50 +0000

From: Mariya Joseph

To: Mariya Joseph

Subject: Re:

Thread-Index: AQHctvPXigXIqI9EkkqZj5kaSDzNurW1h0ZcgAAB7B6AAACUZIARl1ZygAABA7k=

Date: Mon, 30 Mar 2026 13:20:50 +0000

Message-ID:



References: