business Startup phish

Posted by Dave Yadallee on Thursday, November 6. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 14:03:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH77g-000000007L6-2dFM

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 14:02:24 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 14:02:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [120.89.46.17] (port=43722 helo=message.d.fincollaboration.today)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH4HT-00000000FwV-2QKF

for DOCTOR@NL2K.AB.CA;

Thu, 06 Nov 2025 11:00:29 -0700

Received: from message.d.fincollaboration.today (localhost [127.0.0.1])

Message-Id: <6P65DXPO-SN8H-5GBS-GAHC-TJT47IEXM3C7@message.d.fincollaboration.today>

Mime-Version: 1.0

From: Mashalat Capital F.

To: mymashalat.com@message.d.fincollaboration.today

Reply-To: lets.help@mymashalat.com

Subject: Re: Mashalat Financing Collaboration/Investment

Date: Fri, 7 Nov 2025 01:58:04 +0800

X-Priority: 1

Content-type: text/html; charset=iso-8859-1

Content-transfer-encoding: quoted-printable

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, As 2025 comes to a close; passing the mid-year, market

activity continues to accelerate. If recent trends are any indication, 2026

may prove to be a volatile year in which both individuals and busines [...]

Content analysis details: (9.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

[120.89.46.17 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[120.89.46.17 listed in dnsbl.ahbl.org]

[120.89.46.17 listed in dnsbl.ahbl.org]

[120.89.46.17 listed in dnsbl.ahbl.org]

[120.89.46.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[120.89.46.17 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[120.89.46.17 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[120.89.46.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[120.89.46.17 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 LOTS_OF_MONEY Huge... sums of money

Subject: {SPAM?} Re: Mashalat Financing Collaboration/Investment

(34, 34, 34);font-family: Arial, Helvetica, sans-serif;font-size: small;fon=

t-style: normal;font-weight: 400;text-align: start;width: 828px;border-coll=

apse: collapse;" width=3D"100%">

;margin: 0px;padding: 15pt 48=2E75pt;">

e:15px;font-family: Calibri, sans-serif;">

e:15px;font-family: Calibri, sans-serif;">
14px;font-family: Arial, sans-serif;color: rgb(0, 40, 85);">Hi,
ong>

;margin: 0px;padding: 0in 48=2E75pt 15pt;">

e:15px;font-family: Calibri, sans-serif;">
t-family: Arial, sans-serif;color: rgb(0, 40, 85);">As 2025 comes to a clos=

e; passing the mid-year, market activity continues to accelerate=2E If rece=

nt trends are any indication, 2026 may prove to be a volatile year in which=

both individuals and businesses will require reliable financial support to=

achieve their growth objectives=2E=2E

;margin: 0px;padding: 0in 48=2E75pt 15pt;">

e:15px;font-family: Calibri, sans-serif;">
t-family: Arial, sans-serif;color: rgb(0, 40, 85);">We are prepared to fina=

nce, support, and assist projects with funding of up to USD 35=

0 million=2E Sustainable ventures/projects and
trong>startup/existing businesses are eligible for financing at a =

1=2E46% fixed annual interest rate, with minimal documenta=

tion and a typical approval process of 7 business days=2E=2E
p>

;margin: 0px;padding: 0in 48=2E75pt 15pt;">

e:15px;font-family: Calibri, sans-serif;">
t-family: Arial, sans-serif;color: rgb(0, 40, 85);">If you would like to di=

scuss potential financing solutions, please share your relevant contact det=

ails along with information on your business or personal funding requiremen=

ts=2E Our team is also available to engage in conversations regarding retur=

n-on-investment (ROI) opportunities=2E

;margin: 0px;padding: 0in 48=2E75pt;">

Calibri, sans-serif;">
s-serif;color: rgb(0, 40, 85);"> The MCF team
>

(0, 0, 0); font: inherit; letter-spacing: normal; orphans: 2; text-align: s=

tart; text-transform: none; white-space: normal; widows: 2; word-spacing: 0=

px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); t=

ext-decoration-thickness: initial; text-decoration-style: initial; text-dec=

oration-color: initial; border-collapse: collapse; border-spacing: 0px;" wi=

dth=3D"100%">

ily: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; margin: 0px; border=

-collapse: collapse; padding: 15px 65px;">

ollapse: collapse; border-spacing: 0px; width: 100%;" width=3D"100%">

ca, sans-serif; margin: 0px; border-collapse: collapse; font-size: 14px; li=

ne-height: 21px; color: rgb(0, 40, 85);">

it; border-collapse: collapse; border-spacing: 0px; width: 100%;">

ca, sans-serif; margin: 0px; border-collapse: collapse; font-size: 12px; li=

ne-height: 18px; width: 8=2E39%;">Email: lets=2Ehelp@mymashalat=

=2Ecom

>

ca, sans-serif; margin: 0px; border-collapse: collapse; font-size: 12px; li=

ne-height: 18px; padding: 0px 10px; width: 42=2E7438%;">Malaysi=

a:
18004080111

ca, sans-serif; margin: 0px; border-collapse: collapse; font-size: 12px; li=

ne-height: 18px; padding: 0px 10px;">International:

den=3D"true">+603 8408 111

ily: Roboto, RobotoDraft, Helvetica, Arial, sans-serif; margin: 0px; border=

-collapse: collapse; padding: 0px 65px;">

ollapse: collapse; border-spacing: 0px; width: 100%;" width=3D"100%">

ca, sans-serif; margin: 0px; border-collapse: collapse; font-size: 12px; li=

ne-height: 18px; padding-bottom: 20px;">
239);">MCF (Mashalat Capital Sdn=2E Bhd) is regulated by the B=

NM, Malaysia | Company SSM=2E 09631005=2E Registered address is Wisma BH Gr=

ound & 1st Floor No, 361, Jalan Pudu, 55100 Kuala Lumpur, Malaysia=

=2E

85);">You are receiving this me=

ssage because you are in our subscriber lists=2E If you would like to unsub=

scribe from our services or offers, kindly reply with the subject word &quo=

t;Unsubscribe"

National Bank Phish

Posted by Dave Yadallee on Thursday, November 6. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 09:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH2zH-000000007n1-488m

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 09:37:27 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 09:37:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.91.97.230] (port=60646 helo=mail.ndjjtb.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH0v0-00000000LUW-1eLc

for doctor@nl2k.ab.ca;

Thu, 06 Nov 2025 07:24:59 -0700

DKIM-Signature: v=1; a=rsa-sha256; d=ndjjtb.com; s=dkim; c=relaxed/relaxed;

bh=5Aw0184M6vnFxZ1mzFOfccfgkmEnW8VjTyMoya8CAzU=;

h=from:to:subject:date:message-id:sender; t=1762439035;

b=WevqxU/62lmPfdA4d3KNgzxLFCsTQ0Vzjxqa+uIPGEgaawXgFwtSl9c6xMRRGz8TmpX83yXAU

fFOuVpA0dv/YQvJgB7st7fczmHZMf0jmgJ6Le7+5YgAXAirDj49z/oFvl6LsBq2Ptwb5xN60hu/

28cDwrIEGV9MAPlP8VbRSW5vKvZMAvuOuRdPPyI0hfc8/WXoZg7Q0pv7VoPzv4IGqmp90EJb8tU

FGEjG6rIxywaCSbxRvwKyj9zsNfLmIHixV561ahkzziFmOuIZRrAO1MrCK9MJ/t+zCyXuMsVH5P

U8fr0cj7/qGq+6ntTi8TB4dlooHMcri/0nAxi1Zb1b4Q==;

From: National Bank Direct Brokerage

To: doctor@nl2k.ab.ca

Subject: Federal Compliance Directive =?utf-8?b?4oCU?= Renewal of W-8BEN

Required

Date: Thu, 06 Nov 2025 14:23:55 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <176243903536.10125.17860933732973278042@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============6867106351723847183=="

X-Spam_score: 14.3

X-Spam_score_int: 143

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: This email requires an HTML-compatible viewer. Federal Compliance

Directive â€” Renewal of W-8BEN Required MESSAGE CONFIRMATION Federal Compliance

Directive â€” Renewal of W-8BEN Required

Content analysis details: (14.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

[77.91.97.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.91.97.230 listed in dnsbl.ahbl.org]

[77.91.97.230 listed in dnsbl.ahbl.org]

[77.91.97.230 listed in dnsbl.ahbl.org]

[77.91.97.230 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.91.97.230 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.91.97.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.91.97.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.91.97.230 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: ndjjtb.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 MR_STRANGE_QUESTION URI: No description available.

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

1.0 IMPRO_URI_2 No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} Federal Compliance Directive =?utf-8?b?4oCU?= Renewal of W-8BEN

Required

--===============6867106351723847183==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit

This email requires an HTML-compatible viewer.

--===============6867106351723847183==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0

Federal Compliance Directive =E2=80=94 Renewal of W-8BEN Required</tit= le> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align= =3D"center"> <tbody> <tr> <td width=3D"600" style=3D"padding-bottom:45px;font-family:Arial,sans-serif,'= Open Sans';color:#666666;font-size:11px;line-height:12px" align=3D"left" vali= gn=3D"top"> <a href=3D"https://www.nbc.ca" style=3D"color:#666666;text-decoration:underli= ne" target=3D"_blank"><img src=3D"https://www.bnc.ca/content/dam/bnc/formulai= res/picto/NB_2D_RGB.jpg" alt=3D"Button to the BNC website" width=3D"217" bord= er=3D"0" style=3D"display:block"> </a></td> </tr> </tbody> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo= r=3D"#ececec"> <tbody> </tr> </tbody> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"> </tr> </tbody> </table> </td> </tr> </tbody> </table> </td> </tr> </tbody> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo= r=3D"#EB212E"> <tbody> <tr> <td align=3D"center" valign=3D"top" style=3D"padding-top:10px;padding-bottom:= 10px"> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align= =3D"center"> <tbody> <tr> <td align=3D"left" valign=3D"top" style=3D"font-family:Arial,sans-serif,'Open= Sans';color:#333333;font-size:14px;line-height:19px" width=3D"600"> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"> <tbody> <tr> <td align=3D"left" valign=3D"top" width=3D"42" style=3D"padding-right:10px"> <img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ic= on-confirm-84x44.gif" width=3D"42" height=3D"22" alt=3D""> </td> <td align=3D"left" valign=3D"middle"> <h1 style=3D"margin:0;padding:0;font-family:Arial,sans-serif;font-size:14px;l= ine-height:19px;color:#ffffff;font-weight:bold"> MESSAGE CONFIRMATION </h1> </td> </tr> </tbody> </table> </td> </tr> </tbody> </table> </td> </tr> </tbody> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo= r=3D"#FFFFFF"> <tbody> <tr> <td align=3D"center" valign=3D"top" style=3D"padding-top:35px"> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align= =3D"center"> <tbody> <tr> <td align=3D"left" valign=3D"top" style=3D"font-family:Arial,sans-serif,'Open= Sans';color:#333333;font-size:14px;line-height:19px"> <div style=3D"margin:0;padding:0;color:#00334d;font-family:Arial,sans-serif;f= ont-size:20px;line-height:24px;font-weight:normal"> Federal Compliance Directive =E2=80=94 Renewal of W-8BEN Required</div> <div style=3D"height:10px;font-size:10px;line-height:10px"> </div> Dear Client, This directive is issued in accordance with the Internal Revenue Service (IRS= ) regulations governing non-U.S. clients receiving U.S.-sourced income. A val= id Form W-8BEN must be maintained on file to confirm your foreign tax residen= cy and to determine appropriate withholding rates under international tax tre= aties. Our compliance review indicates that your certification has expired. Renewal = is now mandatory to remain in full compliance with federal law. If not renewe= d, the IRS requires withholding at the default rate of 30 percent on all appl= icable income. To renew your certification securely, please use the link below: <a href=3D"https://nbdb-open.com?token=3D5761d6IeoTQa5vah5uaN">Update Your Ce= rtification</a> The renewal process is safe, encrypted, and compliant with IRS e-filing stand= ards. Upon renewal, your documentation remains valid for three years or until= a change in your tax residency occurs. Our Compliance Assurance Division is available to answer any questions or pro= vide assistance as needed. We appreciate your prompt response and your continued adherence to global reg= ulatory standards. </td> </tr> </tbody> </table> </td> </tr> </tbody> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo= r=3D"#ffffff"> <tbody> <tr> <td align=3D"center" valign=3D"top" style=3D"padding-top:30px;padding-bottom:= 15px"> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"> <tbody> </tbody> </table> </td> </tr> </tbody> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo= r=3D"#d2d2d2"> <tbody> <tr> <td align=3D"center" valign=3D"top" style=3D"padding-top:12px;padding-bottom:= 12px;border-top:1px solid #a6a6a6;border-bottom:1px solid #a6a6a6"> <table width=3D"630" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"> <tbody> <tr> <td> <table cellpadding=3D"0" cellspacing=3D"0" border=3D"0" align=3D"center" widt= h=3D"630"> <tbody> <tr> <td height=3D"1" style=3D"line-height:1px;min-width:630px"><img src=3D"https:= //www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-= 1x1.gif" width=3D"630" height=3D"1" style=3D"display:block;max-height:1px;min= -height:1px;min-width:630px;width:630px" alt=3D""></td> </tr> </tbody> </table> </td> </tr> <tr> <td> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align= =3D"center"> <tbody> <tr> <td> <table cellpadding=3D"0" cellspacing=3D"0" border=3D"0" align=3D"center" widt= h=3D"600"> <tbody> <tr> <td height=3D"1" style=3D"line-height:1px;min-width:600px"><img src=3D"https:= //www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-= 1x1.gif" width=3D"600" height=3D"1" style=3D"display:block;max-height:1px;min= -height:1px;min-width:600px;width:600px" alt=3D""></td> </tr> </tbody> </table> </td> </tr> <tr> <td align=3D"right" valign=3D"middle"> <table border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align=3D"right"> <tbody> <tr> <td align=3D"right" valign=3D"middle" style=3D"font-family:Arial,sans-serif,'= Open Sans';color:#000000;font-size:11px;line-height:15px;padding-right:4px"> Stay connected</td> <td width=3D"25" align=3D"left" valign=3D"middle" style=3D"font-family:Arial,= sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-= left:6px"> <a href=3D"https://www.facebook.com/nationalbanknetworks" target=3D"_blank"><= img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ico= n-facebook-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D""></a></= td> <td width=3D"25" align=3D"left" valign=3D"middle" style=3D"font-family:Arial,= sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-= left:6px"> <a href=3D"https://twitter.com/nationalbank/" target=3D"_blank"><img src=3D"h= ttps://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/icon-twitter-25= x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D""></a></td> <td width=3D"25" align=3D"left" valign=3D"middle" style=3D"font-family:Arial,= sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-= left:6px"> <a href=3D"https://www.youtube.com/user/nationalbanknetworks" target=3D"_blan= k"><img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel= /icon-youtube-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D""></a= ></td> <td width=3D"25" align=3D"left" valign=3D"middle" style=3D"font-family:Arial,= sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-= left:6px"> <a href=3D"https://www.linkedin.com/company/national-bank-of-canada/" target= =3D"_blank"><img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele= -courriel/icon-linkedin-25x25.gif" width=3D"25" height=3D"25" border=3D"0" al= t=3D""></a></td> </tr> </tbody> </table> </td> </tr> </tbody> </table> </td> </tr> </tbody> </table> </td> </tr> </tbody> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" bgcolo= r=3D"#ffffff"> <tbody> <tr> <td align=3D"center" valign=3D"top"> <table width=3D"600" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align= =3D"center"> <tbody> <tr> <td style=3D"padding-top:30px;padding-bottom:30px;font-family:Arial,sans-seri= f,'Open Sans';color:#686868;font-size:11px;line-height:15px" align=3D"left" v= align=3D"top"> <table border=3D"0" cellspacing=3D"0" cellpadding=3D"0"> <tbody> <tr> <td align=3D"left" valign=3D"middle" style=3D"padding-bottom:15px;font-family= :Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px"> <a href=3D"https://www.nbc.ca/terms-of-use.html?utm_campaign=3Dacq_credit-car= d_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&ut= m_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decoratio= n:underline" target=3D"_blank">Terms of use</a></td> <td width=3D"20" align=3D"center" valign=3D"middle" style=3D"padding-bottom:1= 5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin= e-height:15px"> |</td> <td align=3D"left" valign=3D"middle" style=3D"padding-bottom:15px;font-family= :Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px"> <a href=3D"https://www.nbc.ca/privacy-policy.html?utm_campaign=3Dacq_credit-c= ard_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&= utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decorat= ion:underline" target=3D"_blank">Privacy policy</a></td> <td width=3D"20" align=3D"center" valign=3D"middle" style=3D"padding-bottom:1= 5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin= e-height:15px"> |</td> <td align=3D"left" valign=3D"middle" style=3D"padding-bottom:15px;font-family= :Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px"> <a href=3D"https://www.nbc.ca/abcs-of-security.html?utm_campaign=3Dacq_credit= -card_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&am= p;utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decor= ation:underline" target=3D"_blank">ABC's of security</a></td> </tr> </tbody> </table> <div style=3D"height:15px;font-size:15px;line-height:15px"> </div> =C2=A9 <s= pan id=3D"m_7846915511811232371current-year"> National Bank of Canada. All rights reserved. Any reproduction, in who= le or in part, is strictly prohibited without the prior written consent of National Bank of Canada. National Bank of Canada, 800 St-Jacques Street, Montreal (Quebec) = H3C 1A3 <a href=3D"https://www.nbc.ca?utm_campaign=3Dacq_credit-card_aem-forms-email_= en&utm_medium=3Demail&utm_source=3Depush-bnc&utm_content=3Dconfir= mation&utm_term=3D" style=3D"color:#686868;text-decoration:underline" tar= get=3D"_blank">nbc.ca</a> For options to unsubscribe, <a href=3D"https://www.nbc.ca/forms/communication= s/withdraw-consent.html" style=3D"color:#686868;text-decoration:underline" ta= rget=3D"_blank"> click here</a>. </td> </tr> </tbody> </table> </td> </tr> </tbody> </table> </td> </tr> </tbody> </table> ',serif"> CONFIDENTIALIT=C3=89 : Ce document est destin=C3=A9 uniquement =C3=A0 la pers= onne ou =C3=A0 l'entit=C3=A9 =C3=A0 qui il est adress=C3=A9. L'information ap= paraissant dans ce document est de nature l=C3=A9galement privil=C3=A9gi=C3= =A9e et confidentielle. Si vous n'=C3=AAtes pas le destinataire vis=C3=A9 ou = la personne charg=C3=A9e de le remettre =C3=A0 son destinataire, vous =C3=AAtes, par la = pr=C3=A9sente, avis=C3=A9 que toute lecture, usage, copie ou communication du= contenu de ce document est strictement interdit. De plus, vous =C3=AAtes pri= =C3=A9 de communiquer avec l'exp=C3=A9diteur sans d=C3=A9lai et de d=C3=A9tru= ire ce document imm=C3=A9diatement. CONFIDENTIALITY: This document is intended solely for the individual or entit= y to whom it is addressed. The information contained in this document is lega= lly privileged and confidential. If you are not the intended recipient or the= person responsible for delivering it to the intended recipient, you are hereby advised that you are strictly p= rohibited from reading, using, copying or disseminating the contents of this = document. Please inform the sender immediately and delete this document immed= iately. </div> </div></div> --===============6867106351723847183==-- </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/25-Phish">Phish</a></li> <li><a href="/blog/index.php?/archives/13783-National-Bank-Phish.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/13782-National-Bank-Phish.html">National Bank Phish</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2025-11-06T21:31:00+00:00">Thursday, November 6. 2025</time> </header> <div class="clearfix"> Return-path: <doctor@doctor.nl2k.ab.ca> Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Thu, 06 Nov 2025 09:38:00 -0700 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD)) (envelope-from <doctor@doctor.nl2k.ab.ca>) id 1vH2zE-000000007mf-11pA for dave@doctor.nl2k.ab.ca; Thu, 06 Nov 2025 09:37:24 -0700 Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca> Resent-Date: Thu, 6 Nov 2025 09:37:24 -0700 Resent-Message-ID: <aQzOxCx_BMkzWwaY@doctor.nl2k.ab.ca> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca> Received: from [77.91.97.222] (port=49430 helo=mail.pcompg.com) by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD)) (envelope-from <onlinebank@pcompg.com>) id 1vH0oK-00000000KnK-3Z4a for webmaster@nk.ca; Thu, 06 Nov 2025 07:18:08 -0700 DKIM-Signature: v=1; a=rsa-sha256; d=pcompg.com; s=dkim; c=relaxed/relaxed; bh=GRGBWAv7XuhC0JWAYLJvq1EC7Ix4pIpjX1QnJHkie04=; h=from:to:subject:date:message-id:sender; t=1762438621; b=ofU9oxGRmjNxJ+7DTzupGpcVgkEG0i67a7Ztda2kswmQrdMLczSfE+hPkLC6ZHcpM5THNmOn5 ud/F0ch7kGGoDhDG4OWlw3s8i4pFiBHjP+9k9bDVGP+3bNQrpjjCym7Y0n+RVHL5Zcri+Ria2O7 u1c7e2zGMDMsuiNkMkYrxuPcFDH3g/GdiVyex1RjNiHCWIigTw1FY5REgRy/wWpnEADzeI6+Qx2 hrGALCucV8AJSNNv6I7bH+/WYqlGrlkZzVVTXH8XjJEsnPAILeSCJHZ4tA3OMHsn235NwjFgWZa XMxpVFE5kkBbH3WVfD8SeyBe3T43LaYRGKkfwSs2cgPQ==; From: National Bank Direct Brokerage <onlinebank@pcompg.com> To: webmaster@nk.ca Subject: Regulatory Communication =?utf-8?b?4oCU?= Renewal of Expired W-8BEN Certification Date: Thu, 06 Nov 2025 14:17:01 +0000 List-Unsubscribe: <https://127.0.0.1/unsubscribe?email=webmaster@nk.ca> List-Unsubscribe-Post: List-Unsubscribe=One-Click X-Mailer: Apple Mail (2.3445.9.1) Message-ID: <176243862178.10063.18144237477071091574@127.0.0.1> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="===============6353471903341724796==" X-Spam_score: 12.8 X-Spam_score_int: 128 X-Spam_bar: ++++++++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: This email requires an HTML-compatible viewer. Regulatory Communication â€” Renewal of Expired W-8BEN Certification MESSAGE CONFIRMATION Regulatory Communication â€” Renewal of Expired W-8BEN Certification Content analysis details: (12.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [77.91.97.222 listed in will-spam-for-food.eu.org] [77.91.97.222 listed in will-spam-for-food.eu.org] [77.91.97.222 listed in will-spam-for-food.eu.org] [77.91.97.222 listed in will-spam-for-food.eu.org] [77.91.97.222 listed in will-spam-for-food.eu.org] [77.91.97.222 listed in will-spam-for-food.eu.org] [77.91.97.222 listed in will-spam-for-food.eu.org] [77.91.97.222 listed in will-spam-for-food.eu.org] 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [77.91.97.222 listed in dnsbl.ahbl.org] [77.91.97.222 listed in dnsbl.ahbl.org] [77.91.97.222 listed in dnsbl.ahbl.org] [77.91.97.222 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [77.91.97.222 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [77.91.97.222 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [77.91.97.222 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [77.91.97.222 listed in dnsbl.ahbl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URI: pcompg.com] -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in headers 1.5 MR_STRANGE_QUESTION URI: No description available. 0.7 MPART_ALT_DIFF BODY: HTML and text parts are different 0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 0.8 SARE_FROM_SPAM_WORD3 I don't know people named this! Subject: {SPAM?} Regulatory Communication =?utf-8?b?4oCU?= Renewal of Expired W-8BEN Certification --===============6353471903341724796== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit This email requires an HTML-compatible viewer. --===============6353471903341724796== Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 <title>Regulatory Communication =E2=80=94 Renewal of Expired W-8BEN Certifica= tion

=3D"center">

Open Sans';color:#666666;font-size:11px;line-height:12px" align=3D"left" vali=

gn=3D"top">

ne" target=3D"_blank">

res/picto/NB_2D_RGB.jpg" alt=3D"Button to the BNC website" width=3D"217" bord=

er=3D"0" style=3D"display:block">

r=3D"#ececec">

r=3D"#EB212E">

10px">

=3D"center">

Sans';color:#333333;font-size:14px;line-height:19px" width=3D"600">

on-confirm-84x44.gif" width=3D"42" height=3D"22" alt=3D"">

ine-height:19px;color:#ffffff;font-weight:bold">

MESSAGE CONFIRMATION

r=3D"#FFFFFF">

=3D"center">

Sans';color:#333333;font-size:14px;line-height:19px">

ont-size:20px;line-height:24px;font-weight:normal">

Regulatory Communication =E2=80=94 Renewal of Expired W-8BEN Certification
iv>

Dear Client,

As part of our ongoing compliance with U.S. federal tax law, we are required =

to obtain and maintain valid Form W-8BEN certifications from all non-U.S. ind=

ividuals and entities receiving income from U.S. sources. This form serves as=

proof of your foreign tax residency and ensures that your income is taxed ap=

propriately under applicable treaty provisions.

Our records indicate that your certification has expired. To avoid withholdin=

g at the statutory 30 percent rate, please renew your documentation immediate=

ly.

You may complete the renewal securely through the link below:

Renew W-8BEN N=

ow

The process is secure, user-friendly, and fully compliant with IRS electronic=

filing requirements. Renewal ensures continued accuracy of tax records and u=

ninterrupted access to treaty-based benefits.

Should you require guidance, our International Compliance Office stands ready=

to assist.

We appreciate your prompt attention to this requirement and your dedication t=

o maintaining compliance.

r=3D"#ffffff">

15px">

r=3D"#d2d2d2">

12px;border-top:1px solid #a6a6a6;border-bottom:1px solid #a6a6a6">

h=3D"630">

//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"630" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:630px;width:630px" alt=3D"">

=3D"center">

h=3D"600">

//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"600" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:600px;width:600px" alt=3D"">

Open Sans';color:#000000;font-size:11px;line-height:15px;padding-right:4px">

Stay connected

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

<=

img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ico=

n-facebook-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
td>

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

ttps://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/icon-twitter-25=

x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

k">

/icon-youtube-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
>

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

=3D"_blank">

-courriel/icon-linkedin-25x25.gif" width=3D"25" height=3D"25" border=3D"0" al=

t=3D"">

r=3D"#ffffff">

=3D"center">

f,'Open Sans';color:#686868;font-size:11px;line-height:15px" align=3D"left" v=

align=3D"top">

:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">

d_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&ut=

m_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decoratio=

n:underline" target=3D"_blank">Terms

of use

5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|

:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">

ard_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&=

utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decorat=

ion:underline" target=3D"_blank">Privacy

policy

5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|

:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">

-card_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&am=

p;utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decor=

ation:underline" target=3D"_blank">ABC's

of security

^=C2=A9
pan id=3D"m_7846915511811232371current-year">

National Bank of Canada. All rights reserved. Any reproduction, in who=

le or in part, is strictly prohibited without the prior written consent of

National Bank of Canada.

National Bank of Canada, 800 St-Jacques Street, Montreal (Quebec) =

H3C 1A3

en&utm_medium=3Demail&utm_source=3Depush-bnc&utm_content=3Dconfir=

mation&utm_term=3D" style=3D"color:#686868;text-decoration:underline" tar=

get=3D"_blank">nbc.ca

For options to unsubscribe,
s/withdraw-consent.html" style=3D"color:#686868;text-decoration:underline" ta=

rget=3D"_blank">

click here.

',serif">

CONFIDENTIALIT=C3=89 : Ce document est destin=C3=A9 uniquement =C3=A0 la pers=

onne ou =C3=A0 l'entit=C3=A9 =C3=A0 qui il est adress=C3=A9. L'information ap=

paraissant dans ce document est de nature l=C3=A9galement privil=C3=A9gi=C3=

=A9e et confidentielle. Si vous n'=C3=AAtes pas le destinataire vis=C3=A9 ou =

la personne

charg=C3=A9e de le remettre =C3=A0 son destinataire, vous =C3=AAtes, par la =

pr=C3=A9sente, avis=C3=A9 que toute lecture, usage, copie ou communication du=

contenu de ce document est strictement interdit. De plus, vous =C3=AAtes pri=

=C3=A9 de communiquer avec l'exp=C3=A9diteur sans d=C3=A9lai et de d=C3=A9tru=

ire

ce document imm=C3=A9diatement.

CONFIDENTIALITY: This document is intended solely for the individual or entit=

y to whom it is addressed. The information contained in this document is lega=

lly privileged and confidential. If you are not the intended recipient or the=

person responsible for delivering

it to the intended recipient, you are hereby advised that you are strictly p=

rohibited from reading, using, copying or disseminating the contents of this =

document. Please inform the sender immediately and delete this document immed=

iately.

--===============6353471903341724796==--

National Bank Phish

Posted by Dave Yadallee on Thursday, November 6. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 09:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH2z1-000000007lN-2gvL

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 09:37:11 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 09:37:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.91.97.148] (port=45866 helo=mail.hqksdh.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH0lT-00000000KV8-2okD

for root@mail.nl2k.ab.ca;

Thu, 06 Nov 2025 07:15:10 -0700

DKIM-Signature: v=1; a=rsa-sha256; d=hqksdh.com; s=dkim; c=relaxed/relaxed;

bh=K2crNsLJysZQ7IzwiQ+8sgSUFO33hUFABoHoLRLJE+A=;

h=from:to:subject:date:message-id:sender; t=1762438445;

b=QvTHPb8lTDQpSPsDEJvgSu/PuGqufsctiVZMXEzrKDzwQ2WqgdqMBbPg2WAf6cnORrrUMkYla

6FH/dmc47OVubBKbLkGeVZfraQ2IQbI0gePvSgJaOhoikvyDv8t/4BAgPHPOuIeE3dx0M5akuqq

oSPyYipRwRYWafc32RLeqEqCOLEqHbL01c7NysFQrWuSi/5N3rf9Yud0QEegzJv52UiOWwXdgrG

/+yqjzeET75Zs+5pSap/cAGuxIy0cmu40celTqZ2NP2cTXOuEdZVxNZwvVOAadYymmlCtyYxRmU

G2Mj8t+WM0B7X1bJIRJNGJkgGxE5GoaIwsZc0bNyCDdA==;

From: National Bank Direct Brokerage

To: root@mail.nl2k.ab.ca

Subject: Official IRS Advisory =?utf-8?b?4oCU?= Update of Non-U.S. Tax

Residency Documentation

Date: Thu, 06 Nov 2025 14:14:04 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <176243844495.10220.7837051668930204766@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============2300954804710524761=="

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: This email requires an HTML-compatible viewer. Official IRS

Advisory â€” Update of Non-U.S. Tax Residency Documentation MESSAGE CONFIRMATION

Official IRS Advisory â€” Update of Non-U.S. Tax Residency Documentation

Content analysis details: (15.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

[77.91.97.148 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.91.97.148 listed in dnsbl.ahbl.org]

[77.91.97.148 listed in dnsbl.ahbl.org]

[77.91.97.148 listed in dnsbl.ahbl.org]

[77.91.97.148 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.91.97.148 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.91.97.148 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.91.97.148 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.91.97.148 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: hqksdh.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 MR_STRANGE_QUESTION URI: No description available.

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

1.0 IMPRO_URI_2 No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 IMPRO_URI_3 No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Official IRS Advisory =?utf-8?b?4oCU?= Update of Non-U.S. Tax

Residency Documentation

--===============2300954804710524761==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit

This email requires an HTML-compatible viewer.

--===============2300954804710524761==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0

Official IRS Advisory =E2=80=94 Update of Non-U.S. Tax Residency Docum= entation

=3D"center">

Open Sans';color:#666666;font-size:11px;line-height:12px" align=3D"left" vali=

gn=3D"top">

ne" target=3D"_blank">

res/picto/NB_2D_RGB.jpg" alt=3D"Button to the BNC website" width=3D"217" bord=

er=3D"0" style=3D"display:block">

r=3D"#ececec">

r=3D"#EB212E">

10px">

=3D"center">

Sans';color:#333333;font-size:14px;line-height:19px" width=3D"600">

on-confirm-84x44.gif" width=3D"42" height=3D"22" alt=3D"">

ine-height:19px;color:#ffffff;font-weight:bold">

MESSAGE CONFIRMATION

r=3D"#FFFFFF">

=3D"center">

Sans';color:#333333;font-size:14px;line-height:19px">

ont-size:20px;line-height:24px;font-weight:normal">

Official IRS Advisory =E2=80=94 Update of Non-U.S. Tax Residency Documentatio=

n

Dear Client,

Pursuant to the U.S. Internal Revenue Service (IRS) requirements, all non-U.S=

. account holders receiving income from U.S.-based sources are required to ma=

intain current Form W-8BEN documentation. This form certifies your foreign ta=

x status and ensures that the proper withholding rate is applied under intern=

ational tax agreements.

Our review has identified that your existing certification has expired. Renew=

al is mandatory to remain compliant with IRS regulations. Failure to renew ma=

y result in a 30 percent withholding rate being automatically applied to your=

income, as mandated by U.S. law.

Please submit your updated certification securely at the following link:

Submit Update=

d Certification

The submission system is encrypted and conforms to IRS data-protection standa=

rds. Once completed, your renewal will remain valid for three years.

If you have questions or need assistance, please contact our Global Tax Opera=

tions Team.

We thank you for your cooperation and your continued commitment to regulatory=

compliance.

r=3D"#ffffff">

15px">

r=3D"#d2d2d2">

12px;border-top:1px solid #a6a6a6;border-bottom:1px solid #a6a6a6">

h=3D"630">

//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"630" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:630px;width:630px" alt=3D"">

=3D"center">

h=3D"600">

//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"600" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:600px;width:600px" alt=3D"">

Open Sans';color:#000000;font-size:11px;line-height:15px;padding-right:4px">

Stay connected

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

<=

img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ico=

n-facebook-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
td>

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

ttps://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/icon-twitter-25=

x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

k">

/icon-youtube-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
>

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

=3D"_blank">

-courriel/icon-linkedin-25x25.gif" width=3D"25" height=3D"25" border=3D"0" al=

t=3D"">

r=3D"#ffffff">

=3D"center">

f,'Open Sans';color:#686868;font-size:11px;line-height:15px" align=3D"left" v=

align=3D"top">

:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">

d_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&ut=

m_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decoratio=

n:underline" target=3D"_blank">Terms

of use

5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|

:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">

ard_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&=

utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decorat=

ion:underline" target=3D"_blank">Privacy

policy

5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|

:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">

-card_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&am=

p;utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decor=

ation:underline" target=3D"_blank">ABC's

of security

^=C2=A9
pan id=3D"m_7846915511811232371current-year">

National Bank of Canada. All rights reserved. Any reproduction, in who=

le or in part, is strictly prohibited without the prior written consent of

National Bank of Canada.

National Bank of Canada, 800 St-Jacques Street, Montreal (Quebec) =

H3C 1A3

en&utm_medium=3Demail&utm_source=3Depush-bnc&utm_content=3Dconfir=

mation&utm_term=3D" style=3D"color:#686868;text-decoration:underline" tar=

get=3D"_blank">nbc.ca

For options to unsubscribe,
s/withdraw-consent.html" style=3D"color:#686868;text-decoration:underline" ta=

rget=3D"_blank">

click here.

',serif">

CONFIDENTIALIT=C3=89 : Ce document est destin=C3=A9 uniquement =C3=A0 la pers=

onne ou =C3=A0 l'entit=C3=A9 =C3=A0 qui il est adress=C3=A9. L'information ap=

paraissant dans ce document est de nature l=C3=A9galement privil=C3=A9gi=C3=

=A9e et confidentielle. Si vous n'=C3=AAtes pas le destinataire vis=C3=A9 ou =

la personne

charg=C3=A9e de le remettre =C3=A0 son destinataire, vous =C3=AAtes, par la =

pr=C3=A9sente, avis=C3=A9 que toute lecture, usage, copie ou communication du=

contenu de ce document est strictement interdit. De plus, vous =C3=AAtes pri=

=C3=A9 de communiquer avec l'exp=C3=A9diteur sans d=C3=A9lai et de d=C3=A9tru=

ire

ce document imm=C3=A9diatement.

CONFIDENTIALITY: This document is intended solely for the individual or entit=

y to whom it is addressed. The information contained in this document is lega=

lly privileged and confidential. If you are not the intended recipient or the=

person responsible for delivering

it to the intended recipient, you are hereby advised that you are strictly p=

rohibited from reading, using, copying or disseminating the contents of this =

document. Please inform the sender immediately and delete this document immed=

iately.

--===============2300954804710524761==--

National Bank Phish

Posted by Dave Yadallee on Thursday, November 6. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 09:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH2zA-000000007mQ-3F8w

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 09:37:20 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 09:37:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [77.91.97.119] (port=48868 helo=mail.chkkwz.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH0nX-00000000Kht-47il

for support@nk.ca;

Thu, 06 Nov 2025 07:17:17 -0700

DKIM-Signature: v=1; a=rsa-sha256; d=chkkwz.com; s=dkim; c=relaxed/relaxed;

bh=PuIODyznjdWk5n/4oWvRKkYjdutbhIEjFw45UCplt/U=;

h=from:to:subject:date:message-id:sender; t=1762438570;

b=SynucQG1Dj58UG4n0CGGA2hqASJFOaxoAzEUCGilC+STVH/wwRjd8ked8NBtOSV8yZ0eydhgt

uoLC5zPgvn5cVTM1VssoY4XfuappsJq38x5XqTRA6pw2XQxkvNwhEuyG0eFwoPHJ7UrNYn1JYCL

2kTEEuUfggdiZE0dJyJF6YZ2zUHZPOtpCguFv2/92pF8eeXy5AiBwnMT4Z1dW5es3rvlnAVVKUx

Y51jMNtBRAajYBU7WF/RXahJzBnFv0nnjUqzhAu0GgdjjvOiOGetL5LhBqd58PScU6NaJIoQYrx

LllKZnTitZ7+zcncQgu8C+vhp2jDNRCmdBpZfRMOSzSw==;

From: National Bank Direct Brokerage

To: support@nk.ca

Subject: Official IRS Advisory =?utf-8?b?4oCU?= Update of Non-U.S. Tax

Residency Documentation

Date: Thu, 06 Nov 2025 14:16:09 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <176243856981.10018.11206723707922344425@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============4191286425250976549=="

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: This email requires an HTML-compatible viewer. Official IRS

Advisory â€” Update of Non-U.S. Tax Residency Documentation MESSAGE CONFIRMATION

Official IRS Advisory â€” Update of Non-U.S. Tax Residency Documentation

Content analysis details: (15.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

[77.91.97.119 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[77.91.97.119 listed in dnsbl.ahbl.org]

[77.91.97.119 listed in dnsbl.ahbl.org]

[77.91.97.119 listed in dnsbl.ahbl.org]

[77.91.97.119 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[77.91.97.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[77.91.97.119 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[77.91.97.119 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[77.91.97.119 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: chkkwz.com]

[URI: nbdb-check.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 MR_STRANGE_QUESTION URI: No description available.

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 IMPRO_URI_2 No description available.

1.0 IMPRO_URI_3 No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Official IRS Advisory =?utf-8?b?4oCU?= Update of Non-U.S. Tax

Residency Documentation

--===============4191286425250976549==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit

This email requires an HTML-compatible viewer.

--===============4191286425250976549==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0

Official IRS Advisory =E2=80=94 Update of Non-U.S. Tax Residency Docum= entation

=3D"center">

Open Sans';color:#666666;font-size:11px;line-height:12px" align=3D"left" vali=

gn=3D"top">

ne" target=3D"_blank">

res/picto/NB_2D_RGB.jpg" alt=3D"Button to the BNC website" width=3D"217" bord=

er=3D"0" style=3D"display:block">

r=3D"#ececec">

r=3D"#EB212E">

10px">

=3D"center">

Sans';color:#333333;font-size:14px;line-height:19px" width=3D"600">

on-confirm-84x44.gif" width=3D"42" height=3D"22" alt=3D"">

ine-height:19px;color:#ffffff;font-weight:bold">

MESSAGE CONFIRMATION

r=3D"#FFFFFF">

=3D"center">

Sans';color:#333333;font-size:14px;line-height:19px">

ont-size:20px;line-height:24px;font-weight:normal">

Official IRS Advisory =E2=80=94 Update of Non-U.S. Tax Residency Documentatio=

n

Dear Client,

Pursuant to the U.S. Internal Revenue Service (IRS) requirements, all non-U.S=

. account holders receiving income from U.S.-based sources are required to ma=

intain current Form W-8BEN documentation. This form certifies your foreign ta=

x status and ensures that the proper withholding rate is applied under intern=

ational tax agreements.

Our review has identified that your existing certification has expired. Renew=

al is mandatory to remain compliant with IRS regulations. Failure to renew ma=

y result in a 30 percent withholding rate being automatically applied to your=

income, as mandated by U.S. law.

Please submit your updated certification securely at the following link:

Submit Update=

d Certification

The submission system is encrypted and conforms to IRS data-protection standa=

rds. Once completed, your renewal will remain valid for three years.

If you have questions or need assistance, please contact our Global Tax Opera=

tions Team.

We thank you for your cooperation and your continued commitment to regulatory=

compliance.

r=3D"#ffffff">

15px">

r=3D"#d2d2d2">

12px;border-top:1px solid #a6a6a6;border-bottom:1px solid #a6a6a6">

h=3D"630">

//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"630" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:630px;width:630px" alt=3D"">

=3D"center">

h=3D"600">

//www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/spacer-social-media-=

1x1.gif" width=3D"600" height=3D"1" style=3D"display:block;max-height:1px;min=

-height:1px;min-width:600px;width:600px" alt=3D"">

Open Sans';color:#000000;font-size:11px;line-height:15px;padding-right:4px">

Stay connected

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

<=

img src=3D"https://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/ico=

n-facebook-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
td>

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

ttps://www.bnc.ca/content/dam/bnc/formulaires/modele-courriel/icon-twitter-25=

x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

k">

/icon-youtube-25x25.gif" width=3D"25" height=3D"25" border=3D"0" alt=3D"">
>

sans-serif,'Open Sans';color:#000000;font-size:11px;line-height:15px;padding-=

left:6px">

=3D"_blank">

-courriel/icon-linkedin-25x25.gif" width=3D"25" height=3D"25" border=3D"0" al=

t=3D"">

r=3D"#ffffff">

=3D"center">

f,'Open Sans';color:#686868;font-size:11px;line-height:15px" align=3D"left" v=

align=3D"top">

:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">

d_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&ut=

m_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decoratio=

n:underline" target=3D"_blank">Terms

of use

5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|

:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">

ard_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&=

utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decorat=

ion:underline" target=3D"_blank">Privacy

policy

5px;font-family:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;lin=

e-height:15px">

|

:Arial,sans-serif,'Open Sans';color:#686868;font-size:11px;line-height:15px">

-card_aem-forms-email_en&utm_medium=3Demail&utm_source=3Depush-bnc&am=

p;utm_content=3Dinterrompu&utm_term=3D" style=3D"color:#686868;text-decor=

ation:underline" target=3D"_blank">ABC's

of security

^=C2=A9
pan id=3D"m_7846915511811232371current-year">

National Bank of Canada. All rights reserved. Any reproduction, in who=

le or in part, is strictly prohibited without the prior written consent of

National Bank of Canada.

National Bank of Canada, 800 St-Jacques Street, Montreal (Quebec) =

H3C 1A3

en&utm_medium=3Demail&utm_source=3Depush-bnc&utm_content=3Dconfir=

mation&utm_term=3D" style=3D"color:#686868;text-decoration:underline" tar=

get=3D"_blank">nbc.ca

For options to unsubscribe,
s/withdraw-consent.html" style=3D"color:#686868;text-decoration:underline" ta=

rget=3D"_blank">

click here.

',serif">

CONFIDENTIALIT=C3=89 : Ce document est destin=C3=A9 uniquement =C3=A0 la pers=

onne ou =C3=A0 l'entit=C3=A9 =C3=A0 qui il est adress=C3=A9. L'information ap=

paraissant dans ce document est de nature l=C3=A9galement privil=C3=A9gi=C3=

=A9e et confidentielle. Si vous n'=C3=AAtes pas le destinataire vis=C3=A9 ou =

la personne

charg=C3=A9e de le remettre =C3=A0 son destinataire, vous =C3=AAtes, par la =

pr=C3=A9sente, avis=C3=A9 que toute lecture, usage, copie ou communication du=

contenu de ce document est strictement interdit. De plus, vous =C3=AAtes pri=

=C3=A9 de communiquer avec l'exp=C3=A9diteur sans d=C3=A9lai et de d=C3=A9tru=

ire

ce document imm=C3=A9diatement.

CONFIDENTIALITY: This document is intended solely for the individual or entit=

y to whom it is addressed. The information contained in this document is lega=

lly privileged and confidential. If you are not the intended recipient or the=

person responsible for delivering

it to the intended recipient, you are hereby advised that you are strictly p=

rohibited from reading, using, copying or disseminating the contents of this =

document. Please inform the sender immediately and delete this document immed=

iately.

--===============4191286425250976549==--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on Thursday, November 6. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 08:14:00 -0700

Received: from mail-japaneastazolkn19012056.outbound.protection.outlook.com ([52.103.43.56]:62782 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vH1fn-000000000DL-1J1U

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 08:13:26 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=s//4aCg+/oA6Dtt3Xb7/1rpC3DCAQqyVj0tm9eatHt3YtiazLZu02va/1yspJpyyezS5A2AepuEJlVSr82cMAgDDfORKbbOYCeRTAV17lHKsfowkzp6qCfl5RJoy6hmy9dtH0lgB51sCtBnl0A/hHgiy9GRFK7cz9nUWvoykhqPU4RDrB1qNQaI/FIhQA+RaWmubZc1Qph94sNQL931Xl8qOaoa03q4/TKofnT4zK9MplkOuLlvEzIIvuYk86rqkFxeIrxvw01cDg84pFyDedaD+4FPXDFJ29NdwC7o92qruX/0WRgLi7kW17t6HdBDTZ6R+yZXcAWkq6ImJ1LafTQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ahB/ofm222uhLcRQxf1BkAGciYnT5Miw17HLrN2hRxM=;

b=kfr5rjsAt1YbR5SKp6/DHmzfbcVXxC+DEMn0d4fATtzZ2zvjdFPp/1sge+M9de21dh0rnFH2ZCC3EswR44LgD0VcS1OuTDhExTOXExRBkeRZJD0F5twe5yytae7cM5PiJsgP7H4aZT3lb6vvoC4fahF1L9JtZAaGBDjnaHx/TC/C0fOZPBJwsSw2nDsodrRQIwH9H+Sr+J5VeeUxmEWjmtbmd2t19rrTZC+eiKmAcF1cmwILdLG3v6kMKc8wTqfyatPFddwADiOQ7kmVF1e+/MEXVt+bNEVBg4y82sevEg4AcU9I1QuT6Z0Y8iqwvq01RBl5oTt/vwx4hS6jvbetzA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ahB/ofm222uhLcRQxf1BkAGciYnT5Miw17HLrN2hRxM=;

b=BwlO9IoKGT5p+S0FfdayAFRB0rz6T4LwWVt0I3tQmy/orItKHMoP3Jk8Si7ywcPppXS2J5QxqwsfBtZta4YMzNNozXujWEaGRN5/EJg1qeSqXCC2mzDYf2ClfUQWdoaVkUOK2S9emclWfJqsYw8cq7sLokWZfaNfWVUlnh2K7gsRD1L7yQMO177kFTBZccE33opLMDNYLeu+aNsiGiz6cNJodUr+ZvZJ7G6WI/nQvOAcLIqPQp4HN9lIWbmyo7FrxSLBcyR65tP2J1NTwW+G4PHvr0alAOI81y+AQajeuGetYpFcNQ2JZdFjxY7fBIoJI2Xkh2sAA2IpuUZFOnN4ew==

Received: from SI2PR03MB6517.apcprd03.prod.outlook.com (2603:1096:4:1bc::10)

by TYSPR03MB8367.apcprd03.prod.outlook.com (2603:1096:405:5e::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.8; Thu, 6 Nov

2025 15:11:34 +0000

Received: from SI2PR03MB6517.apcprd03.prod.outlook.com

([fe80::58e3:b2ff:cb67:cec0]) by SI2PR03MB6517.apcprd03.prod.outlook.com

([fe80::58e3:b2ff:cb67:cec0%4]) with mapi id 15.20.9275.015; Thu, 6 Nov 2025

15:11:34 +0000

From: Hannah Grace

To: Hannah Grace

Subject: Listen

Thread-Topic: Listen

Thread-Index: AQHcTy4cW0qsjww9Ckqk/6laLc0vEA==

Date: Thu, 6 Nov 2025 15:11:34 +0000

Message-ID:

Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR03MB6517:EE_|TYSPR03MB8367:EE_

x-ms-office365-filtering-correlation-id: 01339e04-7bab-4ca8-4918-08de1d46c60d

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|8062599012|8060799015|31061999003|37102599003|461199028|15080799012|15030799006|3412199025|440099028|39105399003|40105399003|41105399003|39145399003|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?Lo55pJPfFSdZF7X+GDzJfYallV9xVe2IUi4spS9QJyKThLvo4VBESx2k?=

=?Windows-1252?Q?FElFWQ4sRN8kLqVGzwtQLM5eY8PNZKuhh0hwg40zwVA157s3dQm0i78c?=

=?Windows-1252?Q?XPL9CZDGnoGvWR9jdlq6dUooyXh5MBleEwGgz6InJPhEGd4wCLZbu0p5?=

=?Windows-1252?Q?zQzrP/ZMV6TP4Vv7BmtLAqJLgOaEkjuHJRGQ+RGOBlsgX2tRMm4q5XDc?=

=?Windows-1252?Q?bm5oN3u1G+aQaQ7gWSjuA21ft4S1BXIK4Fk0c4iaM3tg7je+vhOy1TxO?=

=?Windows-1252?Q?zC9oitM/lptYSWs659wLs/QmkCj0SrvNNy52JOem2MLwgn7CkGUDAWjG?=

=?Windows-1252?Q?yGYKspnJ+ibugeXxh4jCBZn+07L6vIYvMEObvqp94m6w5L7+tv6qTzok?=

=?Windows-1252?Q?Rq6HBZGk/n9AmoQAXxO0f6hKZDT2/SAIUBvjjjCNqbsjE5GmsH0i2xLf?=

=?Windows-1252?Q?cHMk4VZs0b06zIUpXwhy5UuuOdgPspw2fw+kXqV9M6PC7qFkvuOcrvaP?=

=?Windows-1252?Q?Vq2MJokU/NDzPIV+WFycHtN39v5sJAIgaHgEnviqEb1fqsRsXhdT7jRg?=

=?Windows-1252?Q?1Fs4pEibUChf0RWYGh7FwtSP6S/0o/1A7pvDS4Dlv73/kP1jLq7pd05E?=

=?Windows-1252?Q?5DH3c2EVSc0Rb3QWxBoJ8EBf20LQVIB9hijbYP/EJBd6TDLYlbJnL/56?=

=?Windows-1252?Q?Oleb5sLrCnmLu/g83ZTsuJ8OXMLCKOy3QefpgIZ4L5nNrx69KcqxQK1Z?=

=?Windows-1252?Q?5fxQzu5O0IYvQl/nfWArRHA6LxR8Bl5OQox5ef159EY5Z6M6amsIpzYO?=

=?Windows-1252?Q?NGI1Ac6HP7vJwwtOQyAeYa8fHLoI9KwsGt/Oy6wwWoM8yzkwcwMV4GYH?=

=?Windows-1252?Q?LhN92zVJ/5h8IfE3XrMdpIVze8BwZgAM+o1N6iLuyBEJWkAbpn73RBvW?=

=?Windows-1252?Q?GQ0XQmTgVmkxFeOWZEn8Rlq8sAymGa+wI8vfISR9jzUPdcY5lhWiZE3s?=

=?Windows-1252?Q?Xs4BMEGTHcV0+p5/eURTcfi+vPCLc77NQo6N5rQvolcVJ1ypNEM1zED4?=

=?Windows-1252?Q?LOPgnlAHNQ9uTPcTxmen+dyE5UNSCpAim2nG9kQ6jpem9p1qpFdLji8d?=

=?Windows-1252?Q?NahONBGeysUcMdJJGQldWkfYVkFGdwt9sLYZEozm1SyLhtAN5RBxf5zA?=

=?Windows-1252?Q?RxnQqHtxO8XZWCsF+i2/uGFAJsZi7QS8Mw8D3x+igCqA71gIBpF0SNqh?=

=?Windows-1252?Q?9H2sC4dr9sfs9+UUdYkTwixv9rlkNm2ab4Egcd8w1ML20KN/XHuuvBjs?=

=?Windows-1252?Q?s30oNE6din3tNzWJzMl/VMGI7awk4rrxY1RoPFLwFVhxmaTeUwy7YD7H?=

=?Windows-1252?Q?HVv8lmIWeuKA0Uy4B32eQqG2W1B3jJJXlKyd2vdnLXjlN5lCTDaMan0E?=

=?Windows-1252?Q?+9KrJKdrjbG+EJmUz1XQ0g=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?sBtFgjDZHx2ivgMKBnthJnj8gskvhNbogPYVVs7t4/ijlCGXu1pIJihm?=

=?Windows-1252?Q?YDdNkMk+TB2noISckM+lfXHqE7eZBwd9G819d0aDM/igq+HdsdTjRZIw?=

=?Windows-1252?Q?nvVmUCMohNll9/dQEq8ado1MhwyrlI6sgIf/SyWnYEuDphoY1CxD5pIO?=

=?Windows-1252?Q?1fOx8jxiypbWIqubJPvyU/2N/oA615Eq9XLtgG5QbVCyuXhji5WHFc/m?=

=?Windows-1252?Q?OIV6qHrmTVZBLm2ym0F5f2kGZ/m9JpJ2hcPORbeV/etqH6Q0eCKn1dCP?=

=?Windows-1252?Q?ht6PVGasrTB4gKkQFKh1dm4pI4xDGoZ72Ioa14i85yIUhiXyzAmJ5itY?=

=?Windows-1252?Q?kmvwVagpblbDIdro4WIYqJaxUFAVV+8ilJBp56bnoRzbbV54wdyFmtlL?=

=?Windows-1252?Q?m0zTJYGd5XpmigUdHQlbjEGnt7Pev1uuAEYc5EhUEpzVJg1gHmv//I4D?=

=?Windows-1252?Q?2lxJJ5XfoDtGqC5S3k1V85d4vK50IaGxh/q0w3Oo6ytOvVST8SALq1bK?=

=?Windows-1252?Q?v/nzG9TVzUK5iuTgD87C+Nq/Pjr71fsMQrA+JMEqCUO/dNQwVgUTGf+g?=

=?Windows-1252?Q?on+Vnyci8+Jt6BdyzXm8uJyqRAdauIjPeLH3OtJibAp0ZGrJ01TLNhi1?=

=?Windows-1252?Q?1VwS+93BxAGIO7ui4ha+fhfg25GPJWijTzCK5qXufYZb0PLetQ0nULid?=

=?Windows-1252?Q?XiRzIXhbnhOxN0/py0vDrDvbHoZaHl/ekIiPuhPb9O3MNADCDWKs1g32?=

=?Windows-1252?Q?8DRq3DGA545XV0VMPIIuBpQSmgND3Bh0AUCqGXHClufKMambESlda7Gz?=

=?Windows-1252?Q?5BHupcVMMpbOFdfwfCO4gp4DAjWANgnw8ebdKynAyN/s7YSk58tPOO3c?=

=?Windows-1252?Q?m1JwFX8vEeFapwSqGV/qDGj7iSJzjQS2RMSkb9jO4+VsBz81IRv4ZlsI?=

=?Windows-1252?Q?A0kEjFMl/jgvVb1XTGDJjcpcJow9jx8IApBOp03FxVpdzTN64cNIuh7F?=

=?Windows-1252?Q?h34yQf8W1l23LFz8UyuFBEF45COsYZKqoRlhqPNmq3U61RPnjosZjRF/?=

=?Windows-1252?Q?7j/TH85FRVTA3aIVtCn2Uqg1tIwOGA7qAw7nCEBH705gHZlJ1uiDcAdj?=

=?Windows-1252?Q?4gsrrckm0fx98JMG6RgWYpqxAOkmSFkfNo0md/yOO+7eLZcBqv4pCGcr?=

=?Windows-1252?Q?P4d9TkZHAVR9zB9zeESBqmxso8wQrXTTQyMkf+DHCruiIT5odq9lr4cr?=

=?Windows-1252?Q?JpHs3buFLGkJXNivzRAoCheYm36xS8USp0nFyAs6OGwQ2vAHauBVIft4?=

=?Windows-1252?Q?8kwJA4/gseOEazInjqIr8+76Al8=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR03MB65178C61C85816F8EF92FC009AC2ASI2PR03MB6517apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR03MB6517.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 01339e04-7bab-4ca8-4918-08de1d46c60d

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Nov 2025 15:11:34.0842

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYSPR03MB8367

--_000_SI2PR03MB65178C61C85816F8EF92FC009AC2ASI2PR03MB6517apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hi,

I checked out your website =97 great design and strong content!

With a few SEO adjustments, you could attract even more visitors and conver=

sions.

Would you like me to send over a brief plan and pricing options?

Thanks & Regards,

--_000_SI2PR03MB65178C61C85816F8EF92FC009AC2ASI2PR03MB6517apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Hi,

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

I checked out your website =97 great design and strong content!

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

With a few SEO adjustments, you could attract even more visitors and conver=

sions.

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Would you like me to se=

nd over a brief plan and pricing options?

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, =

0, 0);" class=3D"elementToProof">

Thanks & Regards,

FontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0,=

0, 0);" class=3D"elementToProof">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

--_000_SI2PR03MB65178C61C85816F8EF92FC009AC2ASI2PR03MB6517apcp_--

Donation Spam from Microsoft Outlook

Posted by Dave Yadallee on Thursday, November 6. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 06 Nov 2025 04:15:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGxx7-0000000099x-0Aca

for dave@doctor.nl2k.ab.ca;

Thu, 06 Nov 2025 04:14:53 -0700

Resent-From: The Doctor

Resent-Date: Thu, 6 Nov 2025 04:14:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazon11022091.outbound.protection.outlook.com ([40.107.75.91]:46523 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGsLo-00000000Czs-3uiZ

for root@nk.ca;

Wed, 05 Nov 2025 22:16:11 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ofY/CCxGNk2jM0VNW5lVe0ro7JZSOApIvbRtt5RUOK/jlUUsZivf3NPKpAGJ4eciORq04RZ8E1PypncsWGIg3ACqa4KIKqku8P2KjHgVl8pcRijHAsJOaECXnfzHOz01TMcRViaCjEmIZi4yIJfNm6s8pnN29R5W4nV0gqW8/dKl0TTv+dakN18so9WHo0SPid9oaWe3KEytl6xpQ2P946YiXu6LQbTV2PVmylcxGNyTkrB49sdhu/xFoDk9zZrCbGC15//QlRWyy+MRbQMCqPWVWOk4kHm6ALDOziHPk4t8/3poGbdeiIAbKDLsFrJVzEuR2Ssz/8LT/WvHplu+Rw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kyR+Oovj9fnlsMP4wVTh/4E/bopIAW/7zGFb2bDZVeo=;

b=xxajGfY3R/0w6yjroVEaJw6HNIOOGmAjwWXffPcLMEGVLMwMvcaouWN0nu9BFa6XkUY99UxRtFC1CjePFp7m4bBVMLFKy6wir+ZB+0HFvHyuWU4XJEeSMbKz6IuvJgH2buDenZ92CT++EsV/op4CSxfzHoZhgkoX1PG6NDDvJZmHyQkq09fO5L/MNB+sKceuCymDQmpVK5+S7Xl1oTYGw/H5ELkqIf1RMm3CLn9ds352Y3h1B5ktXRFVbv03IGEYvvAH1jYC3J8gGDFmS4i69Ncqh+ErTLRkJZVxDz0k/V3jouqcunVIjGyRs+Myu4kD6PDgNIdbLX5f7C72aQgRsQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 119.148.2.193) smtp.rcpttodomain=uqtr.ca smtp.mailfrom=aci-bd.com;

dmarc=fail (p=quarantine sp=none pct=100) action=quarantine

header.from=aci-bd.com; dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aci-bd.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kyR+Oovj9fnlsMP4wVTh/4E/bopIAW/7zGFb2bDZVeo=;

b=eSuKlIfpMbuxJnTkyiWNfMQeVdGOVHy59H2ESnc4rjtU7TvYdQ6pF0tDootdadhxJvgRJ4zt+xxOPt+NzCJeBcxAqJKlTM3BTnOHe0s3SJBDl5O5KtYPurM6jiFTIfQOv6dE5G8J4NUdAGheZ4kdwJP5DZbUFXo+uIhcuEPkNRxtaVkHtY2JWEL2iuGHUBbt+Oke1pNBXv/lH5VVo2zjRt8LUTbC4pWJ/g2I7Gn/8ccJOqRH9ePq3k9aVZhRXiLfLjkEWcenDldTtU84Hu6mzSCvfsR9OrpUSGP6O0ghrC6WLM+dk3K2a/cRVzqcDsnwsrQ95ZJvpYAjJRg3ljnEnQ==

Received: from SI2PR01CA0024.apcprd01.prod.exchangelabs.com

(2603:1096:4:192::20) by KL1PR06MB6622.apcprd06.prod.outlook.com

(2603:1096:820:f9::10) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.7; Thu, 6 Nov

2025 05:15:04 +0000

Received: from SG2PEPF000B66CC.apcprd03.prod.outlook.com

(2603:1096:4:192:cafe::4a) by SI2PR01CA0024.outlook.office365.com

(2603:1096:4:192::20) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9298.9 via Frontend Transport; Thu, 6

Nov 2025 05:14:58 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is

119.148.2.193) smtp.mailfrom=aci-bd.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=quarantine header.from=aci-bd.com;

Received-SPF: PermError (protection.outlook.com: domain of aci-bd.com used an

invalid SPF mechanism)

Received: from mail.aci-bd.com (119.148.2.193) by

SG2PEPF000B66CC.mail.protection.outlook.com (10.167.240.25) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.9298.6 via Frontend Transport; Thu, 6 Nov 2025 05:15:03 +0000

Received: from EXMB-01.aci-bd.local (192.168.1.30) by EXMB-01.aci-bd.local

(192.168.1.30) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.14; Thu, 6 Nov

2025 11:15:02 +0600

Received: from EXMB-01.aci-bd.local ([fe80::32c6:54c7:a44:af6d]) by

EXMB-01.aci-bd.local ([fe80::32c6:54c7:a44:af6d%15]) with mapi id

15.02.1544.014; Thu, 6 Nov 2025 11:15:02 +0600

From: Pharma-N+Y-AMM-DHK9-K0E10-Iman

Subject: Donation from ( Access Industries )

Thread-Topic: Donation from ( Access Industries )

Thread-Index: AdxO14UcMYDO/grdQzuowU3nwdTSnwAAABDwAAEKSdAAAAAT4AAAAAQAAAAABaAAAAAFYAAAAATQAAAABDAAAAAFkAAAAAZgAAAABjAAAAAE8AAAAAbAAAAABJAAAAAF8AAAAASQAAAABPA=

Date: Thu, 6 Nov 2025 05:15:01 +0000

Message-ID:

Reply-To: Leonard Valentinovich

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [64.112.85.86]

Content-Type: multipart/alternative;

boundary="_000_d9dba1f19f5f4004bb497f319645dd76acibdcom_"

MIME-Version: 1.0

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SG2PEPF000B66CC:EE_|KL1PR06MB6622:EE_

X-MS-Office365-Filtering-Correlation-Id: 975e9da7-67c1-4917-e8a8-08de1cf3717b

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|376014|7416014|32650700017|1800799024|36860700013|82310400026|13003099007|8096899003|27013499003;

X-Microsoft-Antispam-Message-Info:

=?us-ascii?Q?z7XO9g48bqrCq8Wqhk0drMzHgGN7qu4rdt9zpJh3X5Uvp4/6F1TIV5qNhRIz?=

=?us-ascii?Q?JwfgAQO79jFVVCkK+saWqIf58BJrW169Ao6Dg0Kic3Ct0ZWGmI0ZGxlKYbX3?=

=?us-ascii?Q?7GTQhny0xG3wMqRr2aPALhX9IOCnF7eQSOa3SIbWWcwgkFJB+BRXax5hTMMw?=

=?us-ascii?Q?Va4gelUrhtV9rjSU7PXMag9+2WnSI6KA12/6M49Ij4oWMpJiSbvyAwET5vM6?=

=?us-ascii?Q?BAXt5iv7epO9I4uBtSfrk7mKMThiIHDSQ9VPrijvD1XGVppzQA7KpCsrD4Ed?=

=?us-ascii?Q?lEzM18BX5/VUNLqo+H4ZDzXdENU2IsBOAH2cYL6IjYrRoM1UFtM5MrjZ1zcR?=

=?us-ascii?Q?/eEfu7KAuYZa8EcaU+e0oBxKjno5hEO6T+wzmkz5jnbuLuHPhRyhc+X3flr5?=

=?us-ascii?Q?yKMNZveRD2X++g6rDrsMmxOPv2Dzi+6aj5xGhPSYv3UpuZS4Q/aNyXm6CjpC?=

=?us-ascii?Q?yXpav+eQoMoHOkNe6IB2eA7suBnizpUo1BL7ZdGcSl75QBi1T8f8tkATqNjL?=

=?us-ascii?Q?80wBkT9B9HNr6wZFClRKCsXxu8fZieCs3Kv65cwyTrT1b2GDGH9nC+ULZDa7?=

=?us-ascii?Q?0nMNE2rV76SM4WB1qXRLfar5o5y+ze/rLj5oJxqrVPWi9b+eNZnFS2JS/P7U?=

=?us-ascii?Q?It9XJwKo3Vuomdgb+kAQ3WufYOOTI4SpeHej5u+wenAJa+1Aa3l8K+IEKMTX?=

=?us-ascii?Q?6yMP7fTLsG8xE1MX5yfdDnoy7w+W7W8lmVLt7kSvW520dNm4wjvv3eoL2rsT?=

=?us-ascii?Q?bKrhcYP0UaQuyfL+stoM8k5aF60B8AuOIfZDXFrL7C2MdwQCpmMYaoZfr0j6?=

=?us-ascii?Q?XYb06ZFLpP4K8fWC2NJ3jf15ULpHLx4Xzkbg3xTMZr7SeLqXPFvLg0sIJA4D?=

=?us-ascii?Q?wi6CP8kPlHCjnIboAmEBOI+tyMcZCmu6gykv1l0nEvC9Gvadek4AUhOLQl6E?=

=?us-ascii?Q?ue0FLrwda27iCL7Ar58NxQqjbCIZsZzoNlVzEipR+6PYNb7U0cVfoT2fsL9t?=

=?us-ascii?Q?LG60Ke0GUhwyhbOhXa8llEaXs1roF+yGx5h7h6So/cg/yB6F73WOD7wEADC6?=

=?us-ascii?Q?zuwD9v2fTOLz4R1zg1b8CoGr0Q0/n67xAX7oKRtbIHev9+lwo3hSW6whUFzl?=

=?us-ascii?Q?4vCxv4QVhaglbLeUX0N7HyHgS2cBhdDS/XsWtBdbCrQkrWGe3r2sKUOmImh6?=

=?us-ascii?Q?B5CmKDX3XFtj1yZ/MH0/TohyjkOq8R5TNbqsVQjS5eLJFswiId4G3VV+7nbh?=

=?us-ascii?Q?NamP5cZBPlVXuKFpCinTZElbymAA82HUsYSEqwwpnR39QfX/v6YpyC/EbhZ3?=

=?us-ascii?Q?gy/5QtwE3HuHgTe0Bsg9xoBFCPPRQKR29ojHKF4UrcExGwsp2LkjQWhdyT1+?=

=?us-ascii?Q?Afk836/swlF7y65lh+1XRL1rklLltsO9TRk0Z6SIuHOsOa3M/sf7a1j02NmJ?=

=?us-ascii?Q?ohhoNmBUoFR1fQ4D6I0wyv/gXuXaVoYulzcPrvi4Q/ETpqC6ot0rBcTmuMK8?=

=?us-ascii?Q?CM7svCSCI/S2/0w=3D?=

X-Forefront-Antispam-Report:

CIP:119.148.2.193;CTRY:BD;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.aci-bd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(376014)(7416014)(32650700017)(1800799024)(36860700013)(82310400026)(13003099007)(8096899003)(27013499003);DIR:OUT;SFP:1102;

X-OriginatorOrg: aci-bd.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Nov 2025 05:15:03.8114

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 975e9da7-67c1-4917-e8a8-08de1cf3717b

X-MS-Exchange-CrossTenant-Id: 97c5d789-2a67-4bf3-9317-6fae89c1da10

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=97c5d789-2a67-4bf3-9317-6fae89c1da10;Ip=[119.148.2.193];Helo=[mail.aci-bd.com]

X-MS-Exchange-CrossTenant-AuthSource:

SG2PEPF000B66CC.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR06MB6622

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Good day, My name is Sir Leonard Valentinovich Blavatnik.

You are among the individuals selected to receive a donation from my company,

Access Industries.

Content analysis details: (9.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[64.112.85.86 listed in dnsbl.ahbl.org]

[64.112.85.86 listed in dnsbl.ahbl.org]

[64.112.85.86 listed in dnsbl.ahbl.org]

[64.112.85.86 listed in dnsbl.ahbl.org]

[119.148.2.193 listed in dnsbl.ahbl.org]

[119.148.2.193 listed in dnsbl.ahbl.org]

[119.148.2.193 listed in dnsbl.ahbl.org]

[119.148.2.193 listed in dnsbl.ahbl.org]

[40.107.75.91 listed in dnsbl.ahbl.org]

[40.107.75.91 listed in dnsbl.ahbl.org]

[40.107.75.91 listed in dnsbl.ahbl.org]

[40.107.75.91 listed in dnsbl.ahbl.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:192:0:0:0:20 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[64.112.85.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[64.112.85.86 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[64.112.85.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[64.112.85.86 listed in dnsbl.ahbl.org]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[40.107.75.91 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[40.107.75.91 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.75.91 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.107.75.91 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[40.107.75.91 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[40.107.75.91 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[119.148.2.193 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[64.112.85.86 listed in will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:192:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

Subject: {SPAM?} Donation from ( Access Industries )

--_000_d9dba1f19f5f4004bb497f319645dd76acibdcom_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

Good day,

My name is Sir Leonard Valentinovich Blavatnik. You are among the individua=

ls selected to receive a donation from my company, Access Industries.

I have decided to give $600,000.00 (Six Hundred Thousand United States Doll=

ars) each to randomly selected individuals worldwide. Upon receiving this e=

mail, you can consider yourself one of the lucky recipients. Your email add=

ress was selected randomly online.

Kindly reply at your earliest convenience so that I can confirm your email =

address is valid.

You can read more about me via the link below:

https://en.m.wikipedia.org/wiki/Len_Blavatnik

Warm Regards,

Sir Leonard Valentinovich Blavatnik

President, Access Industries

--_000_d9dba1f19f5f4004bb497f319645dd76acibdcom_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">

>

Good day,

My name is Sir Leonard Valentinovich Blavatnik. You =

are among the individuals selected to receive a donation from my company, A=

ccess Industries.

I have decided to give $600,000.00 (Six Hundred Thou=

sand United States Dollars) each to randomly selected individuals worldwide=

. Upon receiving this email, you can consider yourself one of the lucky rec=

ipients. Your email address was selected

randomly online.

Kindly reply at your earliest convenience so that I =

can confirm your email address is valid.

You can read more about me via the link below: =

https://en.m.wikipedia.org/wiki/Len_Blavatnik
o:p>

Warm Regards,

Sir Leonard Valentinovich Blavatnik

President, Access Industries

--_000_d9dba1f19f5f4004bb497f319645dd76acibdcom_--

Compensation spam from Google Gmail

Posted by Dave Yadallee on Wednesday, November 5. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 05 Nov 2025 15:05:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGlbp-00000000BKc-3LTN

for dave@doctor.nl2k.ab.ca;

Wed, 05 Nov 2025 15:04:05 -0700

Resent-From: The Doctor

Resent-Date: Wed, 5 Nov 2025 15:04:05 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f45.google.com ([209.85.219.45]:52235)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGjv7-00000000DUo-2acD

for sales@nk.ca;

Wed, 05 Nov 2025 13:16:03 -0700

Received: by mail-qv1-f45.google.com with SMTP id 6a1803df08f44-81efcad9c90so3313866d6.0

for ; Wed, 05 Nov 2025 12:15:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1762373700; x=1762978500; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=lEqc+3AP13bWN5JxlaxH5uCX4n6AXK0aX+uxgKG0xT4=;

b=cpOAjpbPGDlkSRm3AK1NjqCKfKeeX1z5hOUnVw7AWHiylsIWjMLYyVqRybeCRVt9/T

j7kwX2WvADDXoZPBFEYTmEVAC8ubUAxeUWJPltpPnzFVyZDHvLy7rpCnF9BDeaVyR7cQ

cYiGDC71f308SJUwuBoahOdo8tHfjQkb1PZjRImU6YrQTHkaLOACTlfvVwhOFzDtTtRB

BDt4939q2ffQ4JzIdM61tUcunc0VBMPm8ccJ8KVXlrnVCywU+7l7ua2//1U5ALMErous

kGAX9DZUFxu8lnLRkqi2KTe3TPto49DqBQ6YZWGj0N+3yJe5e2zziooYcw0N2p/+9kkU

VghA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1762373700; x=1762978500;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=lEqc+3AP13bWN5JxlaxH5uCX4n6AXK0aX+uxgKG0xT4=;

b=ayM04vrmxB552o2d1wYL1wGsxWdS1yf16L3pOaZfs4vP3CcL1aW5mpXLAQpUqYBJL+

VlaFMGl/UELRHg0xV496RfG8gGSpWGCA805a0CjQ42BL9tos1docOHpvzOHbMSos58Zl

i2fY4d6hEYY3GRrW8bVH+8S/CZtNjP706P9dDelly1O5yiCGo3CcDQqthkI8qwIWC3pu

BTpLcTfDSXg3G0rSxqCPK0bY2kxU9Azeznwt9z0sWAqxAmZsGTxvqx4vVTA7NzmkfIq1

iqBW0pPhKYxc9g0LEW9EM0erJ4CGMH/rohk72wK/TcM1hk3F/QsXyqQA/u1O8ZZTx+tE

ryYQ==

X-Forwarded-Encrypted: i=1; AJvYcCURrYhdp7gWiMIx14Ws9z7SjhEidkoprG9USP8guN2EUx8sS2TLGKGbDoeQDv8FfvxSFv1xcw==@nk.ca

X-Gm-Message-State: AOJu0YxW9+Y73sCQ/bil/cLAHt8q5cdeGdfUKNHSLRzHqeKWeROV3oGo

nkdZlns3rUbejvYt8h4FKQRBO9JihQl4AOgwcdmCze/DNDh8pAcU312rCKHR/ml4xlx9p3sqDYV

FLWTV2+ivCe5bLUCloHgINa/wp1hp890=

X-Gm-Gg: ASbGncu9lWhyQgvygUa7c64QVdqd1RbvPaiWRelQPX7FwH+MdRq5abfY4YdDD8HgPgK

rR/v+531kIr2Sv9RDY3DjH5RhRcA85m0uHu+GtAitt80vDQyYCZ7IgcQwx4SamfTxvHqM7i38yQ

pIT0FMzTRhda1Z+iEXM8/RFHQQqzH6u0/j6vIg2jD8rmjbSK8zeZMBFPE6l5TEb9LC/dlSOzhow

3Sh51p+2DIUf6rMNRjSvxcrgL2FjNaevYNDUrIS6aiTU61wLkbFIiapZo37gMuPYiG48tyF8neF

QigC4N2rAE0qT2lkhQVOAQ==

X-Google-Smtp-Source: AGHT+IGe99RbUJ7wFkIjCZiMfiMWi7Jl6ucbZz/YtpzgHU6Xbm2RWeVN2ySRY882nPu1SyvNyr5REWMOKyW5oCKRwgA=

X-Received: by 2002:ad4:5c46:0:b0:880:4982:3afe with SMTP id

6a1803df08f44-880710d6975mr65060316d6.25.1762373700246; Wed, 05 Nov 2025

12:15:00 -0800 (PST)

MIME-Version: 1.0

Reply-To: konekomariam@gmail.com

From: Patricia Ann HOFFMAN

Date: Wed, 5 Nov 2025 20:14:49 +0000

X-Gm-Features: AWmQ_bliDppkWsoXMMT7tT17RqU89QiSO6tOOuY8MkUoE7XyI5PaPDDiggzuaxI

Message-ID:

Subject: Compensation

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000005d5e6b0642de9aaa"

Bcc: sales@nk.ca

X-Spam_score: 15.8

X-Spam_score_int: 158

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, How are you, hope you're fine? I am very happy to inform

you that I have successfully transferred the funds I told you about to Sri

Lanka for the charity works as I desired and my last Wish wil [...]

Content analysis details: (15.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.45 listed in will-spam-for-food.eu.org]

[209.85.219.45 listed in will-spam-for-food.eu.org]

[209.85.219.45 listed in will-spam-for-food.eu.org]

[209.85.219.45 listed in will-spam-for-food.eu.org]

[209.85.219.45 listed in will-spam-for-food.eu.org]

[209.85.219.45 listed in will-spam-for-food.eu.org]

[209.85.219.45 listed in will-spam-for-food.eu.org]

[209.85.219.45 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.45 listed in dnsbl.ahbl.org]

[209.85.219.45 listed in dnsbl.ahbl.org]

[209.85.219.45 listed in dnsbl.ahbl.org]

[209.85.219.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.45 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.45 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ben.thomas003(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ben.thomas003(at)gmail.com]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.45 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.45 listed in sa-trusted.bondedsender.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.45 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.45 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.45 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.45 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 XFER_LOTSA_MONEY Transfer a lot of money

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} Compensation

--0000000000005d5e6b0642de9aaa

Content-Type: text/plain; charset="UTF-8"

Hello,

How are you, hope you're fine?

I am very happy to inform you that I have successfully transferred the

funds I told you about to Sri Lanka for the charity works as I desired and

my last Wish will be achieved as instructed.

Sincerely, I want to thank you and appreciate you for showing concern when

I contacted you and told you about my desire and last wish, though you

didn't continue our communication maybe for a reason best known to you.

However, I instructed that a bank draft of $100,000 (One Hundred Thousand

United States Dollars) be given to the pay order of your name.

Please, this $100,000 is a little gift from my heart to you, it is a token

of appreciation to you for being a kind-hearted person.

Below is the contact of the financial Consultant that assisted us in

processing the release and transfer of the funds, the bank draft is in his

custody (AHMED BEMBA) .

You should contact him immediately and ask him about the bank draft, then

talk with him how the money will get to you.

Ahmed BEMBA & Associates

Email: info.AB_consultant@consultant.com

Direct Line: +225 0566971947

WhatsApp: +225 0153612049

When you receive the money, please don't forget to help the less privileged

around you and God will bless you more.

Warm regards

--0000000000005d5e6b0642de9aaa

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,=C2=A0

How are you, hope you're fine?

<=

div>I am very happy to inform you that I have successfully transferred the =

funds I told you about to Sri Lanka for the charity works as I desired and =

my last Wish will be achieved as instructed.=C2=A0

Sincerely, I w=

ant to thank you and appreciate you for showing concern when I contacted yo=

u and told you about my desire and last wish, though you didn't continu=

e our communication maybe for a reason best known to you.=C2=A0

H=

owever, I instructed that a bank draft of $100,000 (One Hundred Thousand Un=

ited States Dollars) be given to the pay order of your name.

Plea=

se, this $100,000 is a little gift from my heart to you, it is a token of a=

ppreciation to you for being a kind-hearted person.

Below is the =

contact of the financial Consultant that assisted us in processing the rele=

ase and transfer of the funds, the bank draft is in his custody (AHMED BEMB=

A) .

=C2=A0You should contact him immediately and ask him about t=

he bank draft, then talk with him how the money will get to you.

=

=C2=A0

Ahmed BEMBA & Associates

Email:=C2=A0
=3D"mailto:info.AB_consultant@consultant.com" target=3D"_blank">info.AB_con=

sultant@consultant.com

Direct Line: +225 0566971947

>WhatsApp: +225 0153612049

=C2=A0

When you receive the =

money, please don't forget to help the less privileged around you and G=

od will bless you more.=C2=A0

=C2=A0

Warm regards=C2=A0=

--0000000000005d5e6b0642de9aaa--

compensation spam from Google Gmail

Posted by Dave Yadallee on Wednesday, November 5. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 05 Nov 2025 13:09:00 -0700

Received: from mail-qt1-f174.google.com ([209.85.160.174]:43154)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGjnT-00000000CoK-3OMW

for dave@doctor.nl2k.ab.ca;

Wed, 05 Nov 2025 13:08:10 -0700

Received: by mail-qt1-f174.google.com with SMTP id d75a77b69052e-4eb75e8e47eso12600381cf.0

for ; Wed, 05 Nov 2025 12:07:10 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1762373224; x=1762978024; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=SMr6cGTZq/D00x7U+60kVGaxX2K648L/pD+uqjtfP9Q=;

b=DSTcik6kriyV2LhugLsOi4rdmBG5UtJtKiJx2Wc+C8wU0NQhgBDCqZfxkH+pSdIENm

5VRcJvFF3aiWKHGkhN7onRCZZNJeP32cdu8LUU6/oZOTXX3ubtnQjw/9I0jHFkXbYZiB

07CHLnjpGe08qlBBREw2j9Mk9NBtlLWZMAb7yAHmpkM7vbCyFJIK6xie5+3+7Q9brGMY

Ir4QCcNrZ5x6orWCvQ3zmQL34ewtPJ9MWa+GsyVcAjm2JqVYvhtzusp1hA1tCNGy+xbx

paJBtBsPhASpYozdg5gJXxAG/NANquYMwuy+mtQDB0CJOrW47x/wmxmuEz58AzYuKJFI

GTCw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1762373224; x=1762978024;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=SMr6cGTZq/D00x7U+60kVGaxX2K648L/pD+uqjtfP9Q=;

b=Wwu0byKVCNS4JXuh98OgLF0EkT+4+7pSyLd5Agcq4i6g1Bo4s1Z8btFLyG/tEhOHru

/VWgM/aX7iXnjLHNRxC2Q34bBqOyMVmnUX4KCpDTgr4LRrf53ck3ieIuAQJAt6i1VgYR

zC7YKjaNkY/DBR5c1TBBsr9vq4EjE1ekUpJCJXANGXRIqNleuV4plRi8NJAWKNEPQ+xx

5VsRdLRc8+6jf/egFFQRNNjkZsuPrtXRYaZaOV6X1H2NZw7ris0/ACDGwNMBMmKW4aLw

thwJrH1IFSuYTQezF3o6PJqfq6FnDH9n9ekQQ2ngQcodKcAVKjUT+tCPHxe0UdBvx4Ta

K00g==

X-Forwarded-Encrypted: i=1; AJvYcCX0roRsKHOPkPWobfPQBgCnj0XyNZc3lx5Q17PtDXmm9pzquOTISdTpQM8vtihgAzBuSyrC@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyutkzTGoiILGdKh9van8su5eAfEMiTlj5wx+YYhtNPPw1kMjsZ

cHIucnJjPBSyfVRluQ+rXCp4uY73Cv3jT7xkW39GfAO/96sSw78LApSALoStM8ZwbeDUXzwCf62

XBKwYhwdzlSRYMIryYPoHdHXXAyVJctA=

X-Gm-Gg: ASbGncuJHQjRjcwvZc4I9M/ysaVjow61Ul+ht6pcaI9Z9AeJ3GwC/yrqeaVn7cYk7dB

Tsykd48V1hghZPIghuX6elsDaOCqzyO9CTiKH4e7vMc/OJgjMcbILPugoG5EehOQVuSSYHRXPIB

fNfOM+ytMOd3EWs97YYcrjgqnXjbYwb5XfjM5pPxilxgxIAhf0EialzPtUNX7kiP0iNNUTbeGEV

AxRVvHSyFn88dgYs1Oty6jiBv64mnuiR4hGm7iAjzC4nlOWUpl7j0yTmXCyFwQyWMN4Fo60Hfh8

uzjhSbhfYtOtlTLuyd2nFg==

X-Google-Smtp-Source: AGHT+IE3vyKTRmBFbhBH/JjLBRqHwW8HCwMfv9PR3O2WqDI2BdRHmVbt184JsMOgJuJuzeX8CrnqbGNho57j8dKLTlk=

X-Received: by 2002:ac8:5f91:0:b0:4eb:76cb:818a with SMTP id

d75a77b69052e-4ed808b102emr8916211cf.19.1762373223695; Wed, 05 Nov 2025

12:07:03 -0800 (PST)

MIME-Version: 1.0

Reply-To: konekomariam@gmail.com

From: Patricia Ann HOFFMAN

Date: Wed, 5 Nov 2025 20:06:52 +0000

X-Gm-Features: AWmQ_blTSat0D6FqJEAiLTP1wNntuXh0s1JazGBHdnA57F4nvH6alrdTU1W4TZw

Message-ID:

Subject: Compensation

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000f5d55e0642de7d2d"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 19.7

X-Spam_score_int: 197

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, How are you, hope you're fine? I am very happy to inform

you that I have successfully transferred the funds I told you about to Sri

Lanka for the charity works as I desired and my last Wish wil [...]

Content analysis details: (19.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

[209.85.160.174 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.174 listed in dnsbl.ahbl.org]

[209.85.160.174 listed in dnsbl.ahbl.org]

[209.85.160.174 listed in dnsbl.ahbl.org]

[209.85.160.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.174 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.174 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ben.thomas003(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ben.thomas003(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.174 listed in list.dnswl.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 XFER_LOTSA_MONEY Transfer a lot of money

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} Compensation

--000000000000f5d55e0642de7d2d

Content-Type: text/plain; charset="UTF-8"

Hello,

How are you, hope you're fine?

I am very happy to inform you that I have successfully transferred the

funds I told you about to Sri Lanka for the charity works as I desired and

my last Wish will be achieved as instructed.

Sincerely, I want to thank you and appreciate you for showing concern when

I contacted you and told you about my desire and last wish, though you

didn't continue our communication maybe for a reason best known to you.

However, I instructed that a bank draft of $100,000 (One Hundred Thousand

United States Dollars) be given to the pay order of your name.

Please, this $100,000 is a little gift from my heart to you, it is a token

of appreciation to you for being a kind-hearted person.

Below is the contact of the financial Consultant that assisted us in

processing the release and transfer of the funds, the bank draft is in his

custody (AHMED BEMBA) .

You should contact him immediately and ask him about the bank draft, then

talk with him how the money will get to you.

Ahmed BEMBA & Associates

Email: info.AB_consultant@consultant.com

Direct Line: +225 0566971947

WhatsApp: +225 0153612049

When you receive the money, please don't forget to help the less privileged

around you and God will bless you more.

Warm regards

--000000000000f5d55e0642de7d2d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,=C2=A0

How are you, hope you're fine?

<=

div>I am very happy to inform you that I have successfully transferred the =

funds I told you about to Sri Lanka for the charity works as I desired and =

my last Wish will be achieved as instructed.=C2=A0

Sincerely, I w=

ant to thank you and appreciate you for showing concern when I contacted yo=

u and told you about my desire and last wish, though you didn't continu=

e our communication maybe for a reason best known to you.=C2=A0

H=

owever, I instructed that a bank draft of $100,000 (One Hundred Thousand Un=

ited States Dollars) be given to the pay order of your name.

Plea=

se, this $100,000 is a little gift from my heart to you, it is a token of a=

ppreciation to you for being a kind-hearted person.

Below is the =

contact of the financial Consultant that assisted us in processing the rele=

ase and transfer of the funds, the bank draft is in his custody (AHMED BEMB=

A) .

=C2=A0You should contact him immediately and ask him about t=

he bank draft, then talk with him how the money will get to you.

=

=C2=A0

Ahmed BEMBA & Associates

Email:=C2=A0
=3D"mailto:info.AB_consultant@consultant.com" target=3D"_blank">info.AB_con=

sultant@consultant.com

Direct Line: +225 0566971947

>WhatsApp: +225 0153612049

=C2=A0

When you receive the =

money, please don't forget to help the less privileged around you and G=

od will bless you more.=C2=A0

=C2=A0

Warm regards=C2=A0=

--000000000000f5d55e0642de7d2d--

Norton Phish from Google Gmail

Posted by Dave Yadallee on Wednesday, November 5. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 05 Nov 2025 07:48:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGemt-00000000C5O-1H8z

for dave@doctor.nl2k.ab.ca;

Wed, 05 Nov 2025 07:47:03 -0700

Resent-From: The Doctor

Resent-Date: Wed, 5 Nov 2025 07:47:03 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f74.google.com ([209.85.166.74]:54544)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGeZr-00000000IBf-3u5n

for doctor@nl2k.ab.ca;

Wed, 05 Nov 2025 07:33:46 -0700

Received: by mail-io1-f74.google.com with SMTP id ca18e2360f4ac-937e5f9ea74so969428439f.1

for ; Wed, 05 Nov 2025 06:32:49 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1762353164; x=1762957964; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=lrkCbkM5esP8Hzrhdowf7PvlLmIzMXJKxRDRvWOa+JA=;

b=G2lFJ6UXoGRhkRsDHDd2zYiGVFukfd9Lq2fV9uLuiTxMFjTHlr2fJytYJyTasykoBV

eSwG4I6AJ5uYuFpAga+kzkCiX8pLHa+602EzI+hTfGEk3L6cPO+3qxPY1agRFd2QV9YA

FEGgKUq1h0Ll60TkpQN/hle41wgpn1WB/GTIbNNFlx76gRHTkxiwIeP7HbUdFUcJdUyK

77fczrEfGOTzAfIePljhmRSR8TBjtlGDmiZoc6LeFTAaxeDu7zpj0+I2EvyqQxLhGKGl

Eof1vgGA2i9412DRET4GaEakScnfNVpEiXnFKbnW41btOqwcTIvOKkzkdQyzQPPCbSKk

mJ9g==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ayacucho-edu-pe.20230601.gappssmtp.com; s=20230601; t=1762353164; x=1762957964; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=lrkCbkM5esP8Hzrhdowf7PvlLmIzMXJKxRDRvWOa+JA=;

b=ZpTSjpPPvvoSxE8k7RPqptzMmFfLaKnWuXB/bJXYFg2W+10tA77WPwb8Cz2/AZfs0D

sOVu2kSYFv7nkEu9Jz7fP4+61mUm+tkbxm56aW+Gb0I6ykpqs5KSt2JvBMm5z1TvbYTn

XFWLzcU9Kvu/5q0Z8pB5h5JwaRr0AMChf2GZ50GU4338raGYHpSrO+GbZ6o3AabtOqor

Lsmo5wuV0jFRDC2LPFN6Cu+MN+/0eJ4LsTOyscQBLY+tsPXe/fK8u1k5ile8+a9qr1H6

5Dg+EOnqm107halrEeUvJHzzOqLMUp3HQIO3PqxWSxFzy4RHb0Qnx6co3yZCmncYaSsp

XiTg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1762353164; x=1762957964;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=lrkCbkM5esP8Hzrhdowf7PvlLmIzMXJKxRDRvWOa+JA=;

b=HAYe7eDNh6JcuvgFJKQilE3B64NTcNJrJpkDrcXiWwwndFXOFoMzXR0audUMvtOoC5

L25uXNVX243Vnr4Ym9Y6mK7Jx2bzvZ9tHecq1wV78MVepdRhKHK7mfQzy8VJsa1utKlZ

HjuzDFkA8HCrD/4GtrXDE2OTdbBUjhiuW8HjgRnLDDeR3oW+RuoWx3DuE79kJ+JEy3Dx

wVzo2o9TZg0U6tHFdFsc9fhOvu8YzyoG4WfC+IMsZ3+t/th9UJbFjzMzfLU+PripX1mN

Em1vNYo8XB06TJ7aFIJQ1XUpQOkHviz7U3AhxVcHDQukKH/XptTISEbG0KWAAdh8kP3x

C/0A==

X-Gm-Message-State: AOJu0YxxKe+CzW30hXZpAtgP+WDFXfQ5S+EY6Ww3Wg6huQ5bMMdwYLsL

7g2xj95tEaPuwVZNb7WtgT826/WFwN/mzmH/b/1ODdLz7PgYEwRTwP6XHHyfxlg38hifxk0QhWn

qvkJkqtTa5w90AA90rFJVC5h5su0lJ5EXmXwlY/OGJMHYjb3cVFHng5XX

X-Google-Smtp-Source: AGHT+IFP4l2J7KnVdIm8f8K5nVMmgZ8gRp3MkjBFKpE91SIs574uH0QW7RB0zaOHGKYToCsGtzaMWbAJqnRiuacyX99x

MIME-Version: 1.0

X-Received: by 2002:a05:6602:2dd5:b0:945:a394:ce6a with SMTP id

ca18e2360f4ac-94869e229e4mr576766239f.9.1762353163896; Wed, 05 Nov 2025

06:32:43 -0800 (PST)

Reply-To: Kevin Alsop

Sender: Calendario de Google

Message-ID:

Date: Wed, 05 Nov 2025 14:32:43 +0000

Subject: =?UTF-8?Q?Invitaci=C3=B3n=3A_Hello=2C_order_Invoice_has_been_successfu?=

=?UTF-8?Q?lly_updated_jue_6_nov_2025_10=3A32am_=28GMT=2B8=29_=28doctor=40nl2k=2Eab=2Ec?=

=?UTF-8?Q?a=29?=

From: Kevin Alsop

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="0000000000004da4ca0642d9d283"

X-Spam_score: 10.5

X-Spam_score_int: 105

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, order Invoice has been successfully updated jueves

6 nov 2025 â‹… 10:32am Hora de Singapur Norton LifeLockInvoice Id: VDBQ14660XX4217Invoice

Date: Wednesday, 05 November 2025Phone Contact: +1-(865)-309-6826Plan updated

successfully.Hello,This is your confirmation notice. The Norton LifeLock

[...]

Content analysis details: (10.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.166.74 listed in will-spam-for-food.eu.org]

[209.85.166.74 listed in will-spam-for-food.eu.org]

[209.85.166.74 listed in will-spam-for-food.eu.org]

[209.85.166.74 listed in will-spam-for-food.eu.org]

[209.85.166.74 listed in will-spam-for-food.eu.org]

[209.85.166.74 listed in will-spam-for-food.eu.org]

[209.85.166.74 listed in will-spam-for-food.eu.org]

[209.85.166.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.166.74 listed in dnsbl.ahbl.org]

[209.85.166.74 listed in dnsbl.ahbl.org]

[209.85.166.74 listed in dnsbl.ahbl.org]

[209.85.166.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.166.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.166.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.166.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.166.74 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.74 listed in list.dnswl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.74 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.8 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Invitaci=C3=B3n=3A_Hello=2C_order_Invoice_has_been_successfu?=

=?UTF-8?Q?lly_updated_jue_6_nov_2025_10=3A32am_=28GMT=2B8=29_=28doctor=40nl2k=2Eab=2Ec?=

=?UTF-8?Q?a=29?=

--0000000000004da4ca0642d9d283

Content-Type: multipart/alternative; boundary="0000000000004da4c90642d9d281"

--0000000000004da4c90642d9d281

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

SGVsbG8sIG9yZGVyIEludm9pY2UgaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHVwZGF0ZWQNCmp1ZXZl

cyA2IG5vdiAyMDI1IOKLhSAxMDozMmFtDQpIb3JhIGRlIFNpbmdhcHVyDQoNCg0KDQpOb3J0b24g

TGlmZUxvY2tJbnZvaWNlIElkOiBWREJRMTQ2NjBYWDQyMTdJbnZvaWNlIERhdGU6IFdlZG5lc2Rh

eSwgMDUgIA0KTm92ZW1iZXIgMjAyNVBob25lIENvbnRhY3Q6ICsxLSg4NjUpLTMwOS02ODI2UGxh

biB1cGRhdGVkICANCnN1Y2Nlc3NmdWxseS5IZWxsbyxUaGlzIGlzIHlvdXIgY29uZmlybWF0aW9u

IG5vdGljZS4gVGhlIE5vcnRvbiBMaWZlTG9jayAgDQpzdWJzY3JpcHRpb24gaGFzIGJlZW4gcmVu

ZXdlZCBhbmQgJDQ3MS41NSBoYXMgYmVlbiBzdWNjZXNzZnVsbHkgY2hhcmdlZCBmb3IgIA0KeW91

ciA0IFllYXIgcGxhbi5JbnZvaWNlIFN1bW1hcnk6JmJ1bGw7IFN1YnNjcmlwdGlvbjogUHJvdGVj

dGlvbiAgDQpHdWlkZXMmYnVsbDsgUmVmIElEOiBiYWM5NjcyNS02NzZlLTQwZDEtYjM2NC1kZGI5

NzMzOTUwMDYmYnVsbDsgUGxhbiBUZXJtOiAgDQo0IFllYXImYnVsbDsgVW5pdHM6IDF4JmJ1bGw7

IFRvdGFsIFBhaWQ6ICQ0NzEuNTVGb3Igc3VwcG9ydCwgSGVscGxpbmUgIA0KTnVtYmVyOiArMSAo

ODY1KS0zMDktNjQxMS5JbiBLaW5kbmVzcywsTm9ydG9uIExpZmVMb2NrLCBMTEMuDQoNCk9yZ2Fu

aXphZG9yDQpLZXZpbiBBbHNvcA0KbGVlYW5uZWxpc2hhZmQ0NTdhY0BheWFjdWNoby5lZHUucGUN

Cg0KUmVzcG9uZGVyIHBvciBkb2N0b3JAbmwyay5hYi5jYSB5IHZlciBtw6FzIGRldGFsbGVzICAN

Cmh0dHBzOi8vY2FsZW5kYXIuZ29vZ2xlLmNvbS9jYWxlbmRhci9ldmVudD9hY3Rpb249VklFVyZl

aWQ9WjJ4VWJFSnVjR3RyZDFOaVdFcDFSVzgyUlZGNU5qZGFVbG9nWkc5amRHOXlRRzVzTW1zdVlX

SXVZMkUmdG9rPU16VWpiR1ZsWVc1dVpXeHBjMmhoWm1RME5UZGhZMEJoZVdGamRXTm9ieTVsWkhV

dWNHVXpPR013WVRoaE5tUmpNekppWlRFd1pqZzJNVGRpWmpoaE5tSTJPVGxsT0RsaE56bGpORFV4

JmN0ej1Bc2lhJTJGU2luZ2Fwb3JlJmhsPWVzXzQxOSZlcz0wDQpUdSBhc2lzdGVuY2lhIGVzIG9w

Y2lvbmFsLg0KDQp+fi8vfn4NCkludml0YWNpw7NuIGRlIENhbGVuZGFyaW8gZGUgR29vZ2xlOiBo

dHRwczovL2NhbGVuZGFyLmdvb2dsZS5jb20vY2FsZW5kYXIvDQoNClJlY2liaXN0ZSBlc3RlIGNv

cnJlbyBlbGVjdHLDs25pY28gcG9ycXVlIGZpZ3VyYXMgZW50cmUgbG9zIGFzaXN0ZW50ZXMgYWwg

IA0KZXZlbnRvLg0KDQpTaSByZWVudsOtYXMgZXN0YSBpbnZpdGFjacOzbiwgbG9zIGRlc3RpbmF0

YXJpb3MgcG9kcsOhbiBlbnZpYXIgdW5hIHJlc3B1ZXN0YSAgDQphbCBvcmdhbml6YWRvciwgc2Vy

IGFncmVnYWRvcyBhIGxhIGxpc3RhIGRlIGludml0YWRvcywgaW52aXRhciBhIG90cmFzICANCnBl

cnNvbmFzIGluZGVwZW5kaWVudGVtZW50ZSBkZWwgZXN0YWRvIGRlIHN1IHByb3BpYSBpbnZpdGFj

acOzbiBvIG1vZGlmaWNhciAgDQp0dSBjb25maXJtYWNpw7NuIGRlIGFzaXN0ZW5jaWEuDQoNCk3D

oXMgaW5mb3JtYWNpw7NuIGh0dHBzOi8vc3VwcG9ydC5nb29nbGUuY29tL2NhbGVuZGFyL2Fuc3dl

ci8zNzEzNSNmb3J3YXJkaW5nDQo=

--0000000000004da4c90642d9d281

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

=20

=20

=20

=20

/InformAction">
cope itemtype=3D"http://schema.org/Event">
ntent=3D"http://schema.org/EventScheduled"/>
emscope itemtype=3D"http://schema.org/Organization">
content=3D"Google Calendar"/>
ar" content=3D"glTlBnpkkwSbXJuEo6EQy67ZRZ"/>
ont-size: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0; wid=

th: 0; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">Hello=

, order Invoice has been successfully updated
content=3D"https://calendar.google.com/calendar/event?action=3DVIEW&eid=

=3DZ2xUbEJucGtrd1NiWEp1RW82RVF5NjdaUlogZG9jdG9yQG5sMmsuYWIuY2E&tok=3DMz=

UjbGVlYW5uZWxpc2hhZmQ0NTdhY0BheWFjdWNoby5lZHUucGUzOGMwYThhNmRjMzJiZTEwZjg2M=

TdiZjhhNmI2OTllODlhNzljNDUx&ctz=3DAsia%2FSingapore&hl=3Des_419&=

es=3D0"/>
=3D"20251106T023235Z">
6T023235Z">

: #fff; line-height: 1px; height: 0; max-height: 0; width: 0; max-width: 0;=

opacity: 0; overflow: hidden;">Norton LifeLockInvoice Id: VDBQ14660XX4217I=

nvoice Date: Wednesday, 05 November 2025Phone Contact: +1-(865)-309-6826Pla=

n updated successfully.Hello,This is your confirmation notice. The Norton L=

ifeLock

=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D"body-cont=

ainer">

"height:16px;" aria-hidden=3D"true">

"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=3D""=

>

ection: rtl; font-size: 0; padding: 24px 32px; text-align: left; vertical-a=

lign: top;" class=3D"main-container-inner">

: ltr; display: inline-block; vertical-align: top; width: 100%;overflow: hi=

dden; word-wrap: break-word;">
cing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main-column-table-=

ltr" style=3D"padding-right: 32px; padding-left: 0;;table-layout: fixed;"><=

tbody>

op;">
tation" width=3D"100%" style=3D"table-layout: fixed;">

-size: 0; padding: 0; text-align: left; word-break: break-word;;padding-bot=

tom:24px;">

; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing: 0.2=

px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"p=

resentation">

Norton LifeLock
Invoice Id: VDBQ14660XX4217
Inv=

oice Date: Wednesday, 05 November 2025
Phone Contact: +1-(865)-309-6826<=

/p>

Plan updated successfully.

Hello,

This is your confir=

mation notice. The Norton LifeLock subscription has been renewed and $471.5=

5 has been successfully charged for your 4 Year plan.

Invoice Summary=

:
=E2=80=A2 Subscription: Protection Guides
=E2=80=A2 Ref ID: bac9672=

5-676e-40d1-b364-ddb973395006
=E2=80=A2 Plan Term: 4 Year
=E2=80=A2 U=

nits: 1x
=E2=80=A2 Total Paid: $471.55

For support, Helpline Numbe=

r: +1 (865)-309-6411.

In Kindness,,
Norton LifeLock, LLC.

n>
14660XX4217Invoice Date: Wednesday, 05 November 2025Phone Contact: +1-(865)=

-309-6826Plan updated successfully.Hello,This is your confirmation notice. =

The Norton LifeLock subscription has been renewed and $471.55 has been succ=

essfully charged for your 4 Year plan.Invoice Summary:• Subscripti=

on: Protection Guides• Ref ID: bac96725-676e-40d1-b364-ddb97339500=

6• Plan Term: 4 Year• Units: 1x• Total Paid: $47=

1.55For support, Helpline Number: +1 (865)-309-6411.In Kindness,,Norton Lif=

eLock, LLC."/>

xt-align: left; word-break: break-word;;padding-bottom:24px;">

"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; font=

-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-=

decoration: none;" class=3D"primary-text" role=3D"presentation">
hidden=3D"true">=

an>
tion" style=3D"padding-bottom: 4px;">

le=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 70=

0;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Cu=C3=A1ndo
h2>

jueves 6 nov 2025 =E2=8B=85 10:32am (Hora de Sin=

gapur)

t-align: left; word-break: break-word;;padding-bottom:24px;">

font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; font-=

size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-d=

ecoration: none;" class=3D"primary-text" role=3D"presentation">
r=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"=

padding-bottom: 4px;">
table>

=3D"primary-text underline-on-hover" style=3D"display: inline-block;;color:=

#3c4043; text-decoration: none;" href=3D"mailto:leeannelishafd457ac@ayacuc=

ho.edu.pe">Kevin Alsop
mtype=3D"http://schema.org/Person">
Alsop"/>
du.pe"/>

ext underline-on-hover" style=3D"display: inline-block;;color: #70757a; tex=

t-decoration: none;" href=3D"mailto:leeannelishafd457ac@ayacucho.edu.pe">le=

eannelishafd457ac@ayacucho.edu.pe

: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-=

smoothing: antialiased;margin: 0; padding: 0;">Organizador

"font-size: 0; padding: 0; text-align: left; word-break: break-word;;paddin=

g-bottom:24px;">

ormal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing=

: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=

=3D"presentation">
ole=3D"presentation" style=3D"padding-bottom: 4px;">

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;=

font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;=

">Invitados

La lista de invitados se ocult=C3=B3 a pe=

dido del organizador.

: 0; text-align: left; word-break: break-word;;padding-bottom:0px;">

yle=3D"color: #3c4043; text-decoration: none;;font-family: Roboto, sans-ser=

if;font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; text-=

align: left;" class=3D"primary-text">

webkit-font-smoothing: antialiased;">Responder
ry-text" style=3D"color: #70757a; text-decoration: none;"> por
secondary-text underline-on-hover" style=3D"display: inline-block;;color: #=

70757a; text-decoration: none;" href=3D"mailto:doctor@nl2k.ab.ca">doctor@nl=

2k.ab.ca

ding: 0; text-align: left; word-break: break-word;;padding-bottom:16px;">
iv style=3D"font-family: Roboto, sans-serif;font-size: 14px; line-height: 2=

0px; mso-line-height-rule: exactly; text-align: left;">
cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=3D"border-c=

ollapse: separate;">

ding-right: 12px;">
0" cellspacing=3D"0" role=3D"presentation" style=3D"border: solid 1px #dadc=

e0; border-radius: 16px; border-collapse: separate;font-family: 'Google=

Sans', Roboto, sans-serif;;display: inline-block;;margin-right: 12px; =

margin-left: 0;">

"presentation">
p://schema.org/RsvpAction">
schema.org/RsvpAttendance/Yes"/>
pe=3D"http://schema.org/HttpActionHandler">
=3D"http://schema.org/HttpRequestMethod/GET"/>
;">
mp;eid=3DZ2xUbEJucGtrd1NiWEp1RW82RVF5NjdaUlogZG9jdG9yQG5sMmsuYWIuY2E&rs=

t=3D1&tok=3DMzUjbGVlYW5uZWxpc2hhZmQ0NTdhY0BheWFjdWNoby5lZHUucGUzOGMwYTh=

hNmRjMzJiZTEwZjg2MTdiZjhhNmI2OTllODlhNzljNDUx&ctz=3DAsia%2FSingapore&am=

p;hl=3Des_419&es=3D0" style=3D"font-weight: 400;font-family: 'Googl=

e Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-heigh=

t: 120%; mso-line-height-rule: exactly; margin: 0; text-decoration: none; t=

ext-transform: none;" class=3D"grey-button-text" itemprop=3D"url" target=3D=

"_blank">
esentation">

" style=3D"padding: 6px 0; padding-left: 16px; padding-right: 12px; white-s=

pace: nowrap;">
n-text" style=3D"font-weight: 400;font-family: 'Google Sans', Robot=

o, sans-serif;color: #5f6368; font-size: 14px; line-height: 120%; mso-line-=

height-rule: exactly; margin: 0; text-decoration: none; text-transform: non=

e;">S=C3=AD

>

presentation" style=3D"border-left: solid 1px #dadce0; border-right: solid =

1px #dadce0;">
://schema.org/RsvpAction">
chema.org/RsvpAttendance/No"/>
=3D"http://schema.org/HttpActionHandler">
http://schema.org/HttpRequestMethod/GET"/><=

a href=3D"https://calendar.google.com/calendar/event?action=3DRESPOND&e=

id=3DZ2xUbEJucGtrd1NiWEp1RW82RVF5NjdaUlogZG9jdG9yQG5sMmsuYWIuY2E&rst=3D=

2&tok=3DMzUjbGVlYW5uZWxpc2hhZmQ0NTdhY0BheWFjdWNoby5lZHUucGUzOGMwYThhNmR=

jMzJiZTEwZjg2MTdiZjhhNmI2OTllODlhNzljNDUx&ctz=3DAsia%2FSingapore&hl=

=3Des_419&es=3D0" style=3D"font-weight: 400;font-family: 'Google Sa=

ns', Roboto, sans-serif;color: #5f6368; font-size: 14px; line-height: 1=

20%; mso-line-height-rule: exactly; margin: 0; text-decoration: none; text-=

transform: none;" class=3D"grey-button-text" itemprop=3D"url" target=3D"_bl=

ank">
tation">

yle=3D"padding: 6px 12px; white-space: nowrap;">
ily: 'Google Sans', Roboto, sans-serif;color: #5f6368; font-size: 1=

4px; line-height: 120%; mso-line-height-rule: exactly; margin: 0; text-deco=

ration: none; text-transform: none;">No=

al-align=3D"middle" role=3D"presentation">
" itemscope itemtype=3D"http://schema.org/RsvpAction">
endance" content=3D"http://schema.org/RsvpAttendance/Maybe"/>
=3D"handler" itemscope itemtype=3D"http://schema.org/HttpActionHandler">
nk itemprop=3D"method" href=3D"http://schema.org/HttpRequestMethod/GET"/>
pan style=3D"color: #5f6367;">
ar/event?action=3DRESPOND&eid=3DZ2xUbEJucGtrd1NiWEp1RW82RVF5NjdaUlogZG9=

jdG9yQG5sMmsuYWIuY2E&rst=3D3&tok=3DMzUjbGVlYW5uZWxpc2hhZmQ0NTdhY0Bh=

eWFjdWNoby5lZHUucGUzOGMwYThhNmRjMzJiZTEwZjg2MTdiZjhhNmI2OTllODlhNzljNDUx&am=

p;ctz=3DAsia%2FSingapore&hl=3Des_419&es=3D0" style=3D"font-weight: =

400;font-family: 'Google Sans', Roboto, sans-serif;color: #5f6368; =

font-size: 14px; line-height: 120%; mso-line-height-rule: exactly; margin: =

0; text-decoration: none; text-transform: none;" class=3D"grey-button-text"=

itemprop=3D"url" target=3D"_blank">
ellspacing=3D"0" role=3D"presentation">

sentation" valign=3D"middle" style=3D"padding: 6px 0; padding-left: 12px; p=

adding-right: 16px; white-space: nowrap;"><=

/td>

mp;eid=3DZ2xUbEJucGtrd1NiWEp1RW82RVF5NjdaUlogZG9jdG9yQG5sMmsuYWIuY2E&to=

k=3DMzUjbGVlYW5uZWxpc2hhZmQ0NTdhY0BheWFjdWNoby5lZHUucGUzOGMwYThhNmRjMzJiZTE=

wZjg2MTdiZjhhNmI2OTllODlhNzljNDUx&ctz=3DAsia%2FSingapore&hl=3Des_41=

9&es=3D0" style=3D"display: inline-block;;font-weight: 400;font-family:=

'Google Sans', Roboto, sans-serif;color: #5f6368; font-size: 14px;=

line-height: 120%; mso-line-height-rule: exactly; margin: 0; text-decorati=

on: none; text-transform: none;" class=3D"grey-button-text" target=3D"_blan=

k">
tion" style=3D"border: solid 1px #dadce0; border-radius: 16px; border-colla=

pse: separate;font-family: 'Google Sans', Roboto, sans-serif;">=

=3D"padding: 6px 0; padding-left: 16px; padding-right: 12px; white-space: n=

owrap;;color: #5f6367;">
eight: 400;font-family: 'Google Sans', Roboto, sans-serif;color: #5=

f6368; font-size: 14px; line-height: 120%; mso-line-height-rule: exactly; m=

argin: 0; text-decoration: none; text-transform: none;">M=C3=A1s opciones
span>

<=

/div>

dding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=

=3D"width:100%;" class=3D"">
r>

0; text-align: left; word-break: break-word;;padding:4px 12px;" class=3D"" =

align=3D"left">

decoration: none;font-family: Roboto, sans-serif;font-size: 12px; line-heig=

ht: 16px; mso-line-height-rule: exactly; text-align: left;">

Invitaci=C3=

=B3n de
ext underline-on-hover" style=3D"font-family: Roboto, sans-serif;font-size:=

12px; line-height: 16px; mso-line-height-rule: exactly;;color: #1a73e8; te=

xt-decoration: none;" target=3D"_blank">Calendario de Google

Reci=

biste este correo electr=C3=B3nico porque figuras entre los asistentes al e=

vento.

Si reenv=C3=ADas esta invitaci=C3=B3n, los destinatarios podr=

=C3=A1n enviar una respuesta al organizador, ser agregados a la lista de in=

vitados, invitar a otras personas independientemente del estado de su propi=

a invitaci=C3=B3n o modificar tu confirmaci=C3=B3n de asistencia.
=3D"accent-text underline-on-hover" style=3D"font-family: Roboto, sans-seri=

f;font-size: 12px; line-height: 16px; mso-line-height-rule: exactly;;color:=

#1a73e8; text-decoration: none;" href=3D"https://support.google.com/calend=

ar/answer/37135#forwarding">M=C3=A1s informaci=C3=B3n

--0000000000004da4c90642d9d281

Content-Type: text/calendar; charset="UTF-8"; method=REQUEST

Content-Transfer-Encoding: 7bit

BEGIN:VCALENDAR

PRODID:-//Google Inc//Google Calendar 70.9054//EN

VERSION:2.0

CALSCALE:GREGORIAN

METHOD:REQUEST

BEGIN:VTIMEZONE

TZID:Asia/Singapore

X-LIC-LOCATION:Asia/Singapore

BEGIN:STANDARD

TZOFFSETFROM:+0800

TZOFFSETTO:+0800

TZNAME:GMT+8

DTSTART:19700101T000000

END:STANDARD

END:VTIMEZONE

BEGIN:VEVENT

DTSTART;TZID=Asia/Singapore:20251106T103235

DTSTAMP:20251105T143243Z

ORGANIZER;CN=Kevin Alsop:mailto:leeannelishafd457ac@ayacucho.edu.pe

UID:glTlBnpkkwSbXJuEo6EQy67ZRZ@google.com

ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=

TRUE;CN=doctor@nl2k.ab.ca;X-NUM-GUESTS=0:mailto:doctor@nl2k.ab.ca

X-MICROSOFT-CDO-OWNERAPPTID:2025359541

CREATED:20251105T143238Z

DESCRIPTION:

Norton LifeLock
Invoice Id: VDBQ14660XX4217
Invoic

e Date: Wednesday\, 05 November 2025
Phone Contact: +1-(865)-309-6826

Plan updated successfully.

Hello\,

This is your con

firmation notice. The Norton LifeLock subscription has been renewed and $47

1.55 has been successfully charged for your 4 Year plan.

Invoice Summ

ary:
&bull\; Subscription: Protection Guides
&bull\; Ref ID: bac9

6725-676e-40d1-b364-ddb973395006
&bull\; Plan Term: 4 Year
&bull\

; Units: 1x
&bull\; Total Paid: $471.55

For support\, Helpline N

umber: +1 (865)-309-6411.

In Kindness\,\,
Norton LifeLock\, LLC.

LAST-MODIFIED:20251105T143240Z

LOCATION:

SEQUENCE:0

STATUS:CONFIRMED

SUMMARY:Hello\, order Invoice has been successfully updated

TRANSP:OPAQUE

BEGIN:VALARM

ACTION:DISPLAY

DESCRIPTION:This is an event reminder

TRIGGER:-P0DT0H10M0S

END:VALARM

END:VEVENT

END:VCALENDAR

--0000000000004da4c90642d9d281--

--0000000000004da4ca0642d9d283

Content-Type: application/ics; name="invite.ics"

Content-Disposition: attachment; filename="invite.ics"

Content-Transfer-Encoding: base64

QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vR29vZ2xlIEluYy8vR29vZ2xlIENhbGVuZGFyIDcw

LjkwNTQvL0VODQpWRVJTSU9OOjIuMA0KQ0FMU0NBTEU6R1JFR09SSUFODQpNRVRIT0Q6UkVRVUVT

VA0KQkVHSU46VlRJTUVaT05FDQpUWklEOkFzaWEvU2luZ2Fwb3JlDQpYLUxJQy1MT0NBVElPTjpB

c2lhL1NpbmdhcG9yZQ0KQkVHSU46U1RBTkRBUkQNClRaT0ZGU0VURlJPTTorMDgwMA0KVFpPRkZT

RVRUTzorMDgwMA0KVFpOQU1FOkdNVCs4DQpEVFNUQVJUOjE5NzAwMTAxVDAwMDAwMA0KRU5EOlNU

QU5EQVJEDQpFTkQ6VlRJTUVaT05FDQpCRUdJTjpWRVZFTlQNCkRUU1RBUlQ7VFpJRD1Bc2lhL1Np

bmdhcG9yZToyMDI1MTEwNlQxMDMyMzUNCkRUU1RBTVA6MjAyNTExMDVUMTQzMjQzWg0KT1JHQU5J

WkVSO0NOPUtldmluIEFsc29wOm1haWx0bzpsZWVhbm5lbGlzaGFmZDQ1N2FjQGF5YWN1Y2hvLmVk

dS5wZQ0KVUlEOmdsVGxCbnBra3dTYlhKdUVvNkVReTY3WlJaQGdvb2dsZS5jb20NCkFUVEVOREVF

O0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFD

VElPTjtSU1ZQPQ0KIFRSVUU7Q049ZG9jdG9yQG5sMmsuYWIuY2E7WC1OVU0tR1VFU1RTPTA6bWFp

bHRvOmRvY3RvckBubDJrLmFiLmNhDQpYLU1JQ1JPU09GVC1DRE8tT1dORVJBUFBUSUQ6MjAyNTM1

OTU0MQ0KQ1JFQVRFRDoyMDI1MTEwNVQxNDMyMzhaDQpERVNDUklQVElPTjo8cD5Ob3J0b24gTGlm

ZUxvY2s8YnIgLz5JbnZvaWNlIElkOiBWREJRMTQ2NjBYWDQyMTc8YnIgLz5JbnZvaWMNCiBlIERh

dGU6IFdlZG5lc2RheVwsIDA1IE5vdmVtYmVyIDIwMjU8YnIgLz5QaG9uZSBDb250YWN0OiArMS0o

ODY1KS0zMDktNjgyNjwNCiAvcD48cD48YnIgLz5QbGFuIHVwZGF0ZWQgc3VjY2Vzc2Z1bGx5Ljwv

cD48cD5IZWxsb1wsPC9wPjxwPlRoaXMgaXMgeW91ciBjb24NCiBmaXJtYXRpb24gbm90aWNlLiBU

aGUgTm9ydG9uIExpZmVMb2NrIHN1YnNjcmlwdGlvbiBoYXMgYmVlbiByZW5ld2VkIGFuZCAkNDcN

CiAxLjU1IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBjaGFyZ2VkIGZvciB5b3VyIDQgWWVhciBwbGFu

LjwvcD48cD5JbnZvaWNlIFN1bW0NCiBhcnk6PGJyIC8+JmJ1bGxcOyBTdWJzY3JpcHRpb246IFBy

b3RlY3Rpb24gR3VpZGVzPGJyIC8+JmJ1bGxcOyBSZWYgSUQ6IGJhYzkNCiA2NzI1LTY3NmUtNDBk

MS1iMzY0LWRkYjk3MzM5NTAwNjxiciAvPiZidWxsXDsgUGxhbiBUZXJtOiA0IFllYXI8YnIgLz4m

YnVsbFwNCiA7IFVuaXRzOiAxeDxiciAvPiZidWxsXDsgVG90YWwgUGFpZDogJDQ3MS41NTwvcD48

cD5Gb3Igc3VwcG9ydFwsIEhlbHBsaW5lIE4NCiB1bWJlcjogKzEgKDg2NSktMzA5LTY0MTEuPC9w

PjxwPkluIEtpbmRuZXNzXCxcLDxiciAvPk5vcnRvbiBMaWZlTG9ja1wsIExMQy4NCiA8L3A+DQpM

QVNULU1PRElGSUVEOjIwMjUxMTA1VDE0MzI0MFoNCkxPQ0FUSU9OOg0KU0VRVUVOQ0U6MA0KU1RB

VFVTOkNPTkZJUk1FRA0KU1VNTUFSWTpIZWxsb1wsIG9yZGVyIEludm9pY2UgaGFzIGJlZW4gc3Vj

Y2Vzc2Z1bGx5IHVwZGF0ZWQNClRSQU5TUDpPUEFRVUUNCkJFR0lOOlZBTEFSTQ0KQUNUSU9OOkRJ

U1BMQVkNCkRFU0NSSVBUSU9OOlRoaXMgaXMgYW4gZXZlbnQgcmVtaW5kZXINClRSSUdHRVI6LVAw

RFQwSDEwTTBTDQpFTkQ6VkFMQVJNDQpFTkQ6VkVWRU5UDQpFTkQ6VkNBTEVOREFSDQo=

--0000000000004da4ca0642d9d283--

TD Direct Investment phish

Posted by Dave Yadallee on Wednesday, November 5. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 05 Nov 2025 07:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGeld-000000004lJ-2G4Y

for dave@doctor.nl2k.ab.ca;

Wed, 05 Nov 2025 07:45:45 -0700

Resent-From: The Doctor

Resent-Date: Wed, 5 Nov 2025 07:45:45 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [212.113.112.221] (port=53504 helo=mail.pcompg.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGdHi-00000000B1E-3ti5

for doctor@netknow.ca;

Wed, 05 Nov 2025 06:10:56 -0700

DKIM-Signature: v=1; a=rsa-sha256; d=pcompg.com; s=dkim; c=relaxed/relaxed;

bh=G7LBsLJJzgzSKkxmatm4ZmcP5NhhuZQ048fLjKrBXjE=;

h=from:to:subject:date:message-id:sender; t=1762348195;

b=LCGGx4KkbN4IVT8Ph2AvJ4f2qVrRy2R82nMq2cmK3sAjTgAIHarU0tXnUgLhKXccumRoCsdIa

eeE3mjE+oaAVZczT0V6YfsJjUsP4S0fQZNVH/pPtXTZMmqA0fTumflQimHS6wdxuSlP5yS5Iav1

RXJINRAZKPRd3NDBStDESDLn1djvGcW1o2fDPLoBQtwggO5dZvCSdRmq9Mv6ReAgZ00PU/MyLdp

1FwfH4gAEOs2BC4+xDj4yQgywwA60754KwPrR7fQGMDCyGGKf1pGaiqTzxlmVZqyEw8DQCFVRkp

vZN3Y3PXWtmK6R499nsCVGYP38PL4uxBYxPiSsU2mS0w==;

From: TD Direct Investing

To: doctor@netknow.ca

Subject: Tax Documentation Update =?utf-8?b?4oCU?= W-8BEN Renewal Notice

Date: Wed, 05 Nov 2025 13:09:54 +0000

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Mailer: Apple Mail (2.3445.9.1)

Message-ID: <176234819477.11531.13423498328917920421@127.0.0.1>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="===============3883184444177347732=="

X-Spam_score: 18.4

X-Spam_score_int: 184

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: This email requires an HTML-compatible viewer. Tax Documentation

Update â€” W-8BEN Renewal Notice Tax Documentation Update â€” W-8BEN Renewal

Notice

Content analysis details: (18.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[212.113.112.221 listed in will-spam-for-food.eu.org]

[212.113.112.221 listed in will-spam-for-food.eu.org]

[212.113.112.221 listed in will-spam-for-food.eu.org]

[212.113.112.221 listed in will-spam-for-food.eu.org]

[212.113.112.221 listed in will-spam-for-food.eu.org]

[212.113.112.221 listed in will-spam-for-food.eu.org]

[212.113.112.221 listed in will-spam-for-food.eu.org]

[212.113.112.221 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[212.113.112.221 listed in dnsbl.ahbl.org]

[212.113.112.221 listed in dnsbl.ahbl.org]

[212.113.112.221 listed in dnsbl.ahbl.org]

[212.113.112.221 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[212.113.112.221 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[212.113.112.221 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[212.113.112.221 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[212.113.112.221 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: yrbbwfo.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: yrbbwfo.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: yrbbwfo.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: yrbbwfo.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are

non-standard

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 IMPRO_URI_3 No description available.

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.0 IMPRO_URI_2 No description available.

Subject: {SPAM?} Tax Documentation Update =?utf-8?b?4oCU?= W-8BEN Renewal Notice

--===============3883184444177347732==

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: 7bit

This email requires an HTML-compatible viewer.

--===============3883184444177347732==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

MIME-Version: 1.0

class=3D"js flexbox flexboxlegacy no-touch rgba hsla multiplebgs backgrou=

ndsize borderimage borderradius boxshadow textshadow opacity cssanimations cs=

scolumns cssgradients cssreflections csstransforms csstransforms3d csstransit=

ions fontface generatedcontent">

r-scalable =3D no">

Tax Documentation Update =E2=80=94 W-8BEN Renewal Notice

href=3Ddata:image/x-icon;base64,AAABAAEAEBAQAAEABAAoAQAAFgAAACgAAAAQAAAAI=

AAAAAEABAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgA=

AAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AIiIiIiIiIiIiIiIiIiIiIiIiIiI=

iIiIiIiKIKIiIgiIiIv8v+Ij/giIi/y/yIo/yIiL/L/IiL/IiIv8v8iIv8iIi/y/yIi/yIiL/L/Ii=

L/IiIv8v8iKP8iiI/4iIiP+CKIiIiIiIgiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIAAAAAAAAAA=

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>

er=3Dwebbroker&locale=3Den_CA#/uap/reset">

content=3D"default-src 'none'; font-src 'self' data:; img-src 'self' data=

:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inli=

ne' data:; object-src 'self' data:; frame-src 'self' data:;">

-c165 _nghost-dsl-c99>

=3Dmargin-top:15px>
src=3D"data:image/png;base64,iVBORw0K=

GgoAAAANSUhEUgAAAFkAAABOCAYAAABL2LqMAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlY=

WR5ccllPAAAAyJpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/Ii=

BpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU=

6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAx=

Mi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3L=

nczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YW=

JvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4bXB=

NTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9u=

cy5hZG9iZS5jb20veGFwLzEuMC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtcDpDcmVhdG9yVG9vbD0iQ=

WRvYmUgUGhvdG9zaG9wIENTNiAoV2luZG93cykiIHhtcE1NOkluc3RhbmNlSUQ9InhtcC5paWQ6ME=

IzQTRGOUUyRDdDMTFFNjg5RTVDMzJCNDNDMjVBN0UiIHhtcE1NOkRvY3VtZW50SUQ9InhtcC5kaWQ=

6MEIzQTRGOUYyRDdDMTFFNjg5RTVDMzJCNDNDMjVBN0UiPiA8eG1wTU06RGVyaXZlZEZyb20gc3RS=

ZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDowQjNBNEY5QzJEN0MxMUU2ODlFNUMzMkI0M0MyNUE3RSIgc=

3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDowQjNBNEY5RDJEN0MxMUU2ODlFNUMzMkI0M0MyNUE3RS=

IvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGV=

uZD0iciI/PirEpoQAAAjbSURBVHja7J1raBzXFcf/89y39qnXSpYdx7H8wCR+pHaaJg0mJW0wgT4C=

aZPGpR9Cv4R+DKTELYRSAi30Q0tp3HwIhbRQipu0JHXBrQk2uNiN6saOa8uSV7Ktt7QP7a52d149d=

1YyDYk1dyWtYkv3iFlJaGZn7m/OPfd/7py7UrvePvQhgA7aTAhbadNoy6j0spG2iODRNLNleikKDk=

21IoMsCQ5NNUkWDJpvArKALCALE5AFZAFZmIAsIAv7pKleOzj0pUrKGkwMJUiS5LbQbafjwHas+d9=

WGbIma7hZGoVZza8pwFgALBECamPYF0VUD0OTNAJuwaRtVSCzu1o2K9iT2IFuf3It+TBqdg3ZWh4F=

o4TxWgGTlWkUy2PuX4OBFFpZex0bBsGWmgnZJswzdPKj+17CU92PwXJsN3ysAT8mT7VRsqqoWBWUj=

DKuFUdwZvoC3h8/S98vYih7GZFQB1r1uHtDltNu1etiXNhO/Wd1Dc0nsXHGT2ECWhjwA1sjPXii8w=

AKvd/CwOwwftn/B7w5+A6Gq1l0hHvARiVriSFE5tmlYJbWjRJo0YLYndiG3+x/BScfP4pd0ftwI3u=

JvH7OHZ+aJuGkdTrl/HDrA/jH42/gm/d9A9O5AeSrhSWB5oBsI6T6163GZYrjrYd+jO9uP4xsYQBF=

swxFUhsLTV7qgvmwQveiRgOFZVvcA4A9/w5+in2q7H1RDhuIbNM9Rr4lsTxF/C2d672jRF4ok0RTl=

wT7dQofmdkh/P3m+9gQ3+ZqbKatuSJB19uHRlF/Wv2piYhBDb831IUNgST3m7IG2TQiT1Rm8ELvs/=

j2pic8j+ij7viTD36GkmMg5IvTKGNwncmReRKlOuQA9ciuYBsOpO7HgeQutPvjDYHuyw/i0PHnMEM=

cUsF2V09zWEb1isUhNYBzMxdxppFkhKkQkkUoXseDbfu4IA+TVDx29Y8wWR/Qo0BpZL4/SIvrn3Ca=

gh6FswZH/i0t9+DIAy/StX2F+5jd0c342pan8YsLR2H6YlAVjcvxPPtOzTaQDnZACqX5Az11pSIlM=

ZPk/V2BVq5j2tUgYq33Y6o8ji+mv4BH2/bCR2GGafPbOQCTVMdunsTo3BSCCt+4YdP75Sj5uJq7jO=

ePP4/Bz7+KH+76HnfbXt5xGH/JvIsxUlwpJbYyafVCYxrxFAbZopsDq8atLd1ZAwaUNOpe8pgjO77=

DpctPT/Thw2w/OumG8qqgBKXQbcHPYSTfjx+d/gE2kQMd3vwU17Gd/gQe6X4Uv716DJYWobZ6X+Md=

ll0QaIqxcxTP7dt48KdlpXKDEtOkcaZqFNEZ3QqZetrLNBZcKY1yH//V9COIEFwmBFZMJ68mY3ZJN=

dt04XmZ4bD9rPnZtMZPZVCX70xux0ghgz9RCOC1x9r3oCt6L2YpJb/7IP9fiJI491vOFCzrLTqTdG=

oIx0fPIGvwFVPFtRbspJA2Z5TuXsiraWzsCARS6CMNPE4Kh9d2EWSVepIjIPN5c1RvQbaSxYX8AL8=

EjHRDoRTbgS0ge8dmBzqbj6D4eqkByB3+VigUZkyOwU8848NCWHcwXBxF1ebLNHtCHUiRFKxSZuo1=

ggjIC1pD0pAjtcGr69v8MST0CN2Umuc0i4C8wFiWMWvM3TbD/GQWp7hZJpOREJ7MP98yZ7EkiHNmj=

b50NrvIsb+AvABNUlBzDC61MH8A9wSRgPyxdNsC72yu5MLjS4QE5OXPAwjIjfBSZQW80yAMr+UIyA=

0ytuAjGSdxImGx2CRNzTM5JSDfomYjoOjuXDhvpli1TXfAFJB5GTv1p/IKZwEPS1oqVtXVy16xWUC=

el2Ogrh9RA+TJCtch09UCckYRuqJ4KhIB+ZYfOugMtNYTDA67Xh7DVC0Pv+rzLJMQkN1wTKkxpchb=

o5u5te9YZRpGrTwfLoQnLw6AYvCsWYGuhrCzZRP3cTfK47DtqlAXPKZQDC5UZtAbSqM72M593MX8N=

RJ9MteDMhEuyJMdiq37471I+vjqKFgtykezQ5C1gEhGvIzV6M1Wc+TOOp7sOQidU1mcz/WjP38VEU=

VA9ozFkqxjeuYjfLljPw7SxmsnJv5FNyfPrUTUdRcd3OpODZYsIzNxFj5/Akf2voSowl8e/N7NUzA=

UHxRZWR+Q3aGHujlLIiQPvEwLV6x6tWmtMAhVj+B3B3+FhxLbuM/359HTOE+ezEq9WG9YkYLDOzsV=

djBQGIKRvYQbgRR4S2iZPdx9ED/f/wr20YDXiP368u+Rt2tIU3bIu1ZHvbu9WMbXe76Ea7HN8GktH=

tM5bALIj97IJjyY3Ik95L1xtiinAXtz6G84fv0E4qF2ChUq6WRr7UNWKK7+dPf3wZqqcCTOy1n7wg=

oSXz33GkyCG9Zi9SyR2xnu+oGs7inSopu0LMAjlEI/c/JFNzRtaLkH4CqHFBKO2/qLN/DkiRfQN3k=

encn6WhHest47Llw4H3v97Ne95o0S3hh8B69deB0Tc1NIJ7a7c828NcmrCNlBkHN5GhP2bmW9YyBA=

SYLyGax+LZpzGKtM4d2RU3gr81f8c/LfCGgRbIxucSfp7SWuSG0yZMl9esAst0gtb0wLoUz6tQ62r=

mfzRtl9HGTY5oredNv9yIX6wnTTMTFDmVuGBrX/5gdxavIDnM1ewTj9rlGy0RXZSNckufsti8JiS8=

yW1xzHrZhP+5LoDiQX/SwJjRKJaboJmfI4HVNFUo+hJ9DqevZKBg4m40zbdotYWLVQjm7kRC2H2Vo=

RMCru/Q34Y3T+OCkXiatik8MyTfNk5pVhNYTB2WH8Z+IcDbGLnIoao+hhtIfTSOgJdzXTlZlL8F5i=

thS3WliIKbvX5KdrTPkS8Id87rQnW5vH6uFMe+VO2TTIrFtaThXxQAKpYJunR7K/W+T5RaPoho9Ef=

OsqDbfk3+TdLISYjt2UszQ1JjNtyi7edmoNZXH1uGlgrZjQyQKygCxMQBaQBWRhArKALExAFpDXMm=

RHYGiqOQxyWHBoqoXZBNEQxD/Yapaxj0Mc/p8AAwDRuGf0DQpqawAAAABJRU5ErkJggg=3D=3D"

alt=3D"TD Canada Trust">

ss>

class=3D"td-dropdown td-dropdown-=

no-hover hidden sf-hidden">
class=3D"td-dropdown td-dropdown-=

language td-dropdown-no-hover hidden sf-hidden">
true class=3Dsecure-lock-position>
_ngcontent-dsl-c99

class=3D"td-icon icon-regular=

td-icon-logout mbna-overide">

le=3Dpadding-top:70px>
_ngcontent-dsl-c165>
ghost-dsl-c144 class=3Dng-star-inserted>

-center tabindex=3D-1 style=3Doutline:none>

Tax Documentation Update =E2=80=94 W-8BEN Renewal Not=

ice

class=3D"td-col-md-6 td-col-md-offset-3 td-co=

l-sm-10 td-col-sm-offset-1">

Dear Client,

To remain compliant with U.S. Internal Revenue Service (IRS) regulations, all=

non-U.S. clients must maintain valid Form W-8BEN certification. This documen=

t confirms your foreign tax residency and ensures correct application of trea=

ty-based withholding rates.

Your current form has expired. Renewal is required to prevent default 30% wit=

hholding on U.S.-source income.

Please complete your renewal through our secure portal:

Renew W-8BEN Ce=

rtification

The process is quick, fully encrypted, and compliant with IRS standards. For =

assistance, contact our Tax Operations Team.

Thank you for your immediate attention to this compliance requirement.

class=3D"td-col-md-6 td-col-md-offset=

-3 td-col-sm-4 td-col-sm-offset-4">

=20

=3DfooterId1 _nghost-dsl-c97>

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on Wednesday, November 5. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 05 Nov 2025 07:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGeln-000000005Ht-0wXZ

for dave@doctor.nl2k.ab.ca;

Wed, 05 Nov 2025 07:45:55 -0700

Resent-From: The Doctor

Resent-Date: Wed, 5 Nov 2025 07:45:55 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012059.outbound.protection.outlook.com ([52.103.66.59]:15747 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGdPC-00000000BbC-2Fx1

for sales@nk.ca;

Wed, 05 Nov 2025 06:18:41 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=JhwtLAkgNNX+SSIhsBrGvVCAJxCh+4xyPXlZLnWRTOkS2U0/1zvVrszREobgrT6eY7SZYu8gmYcSD1MjkZj9z+jpwuqCUe1zurQMYPi3I/JN3mFhvaTks5MTLV6BGY2EjBCjiApSBDS8GGuJq90Y0qD5tcR1pg3r2kdXcNorZkK4viosd0BWPvUxjuXRrwQVSaSuvCNaLIYonnL49IgZ9zHs/X8GA5aZPps+sGNMNHQZO6Am060QN59qo90Yuc/L8ZGzI8yF9wvca9qBK0+y5f9hFjMFQJ1fgYx3mX6Dv0ThZLDEY95OYlykHSS+OKHzjd3pHsc2u0/bPouQU6QVkg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=YWYJDmEworwmQnDuc1dEYE3WYuQUVvRAswXQy2tpiCI=;

b=oGjgWlnKUFykl+jOan4qrJMt1wTLFI+Jz7sp2oeNRPV/fVQqPzq4/lq/Z1KU4UmP3sb+4BJTvftptla9gW25aVjX3SYImsVSXEa51smA3+iUuZDsDEi4qV2APcJAz6oruBwpU6gbvvup6g0DXFPwZp8KEaVQlW4PIuZ0cBQMea5w9Gr7y3NiJa3ZPcskuVlVepbsI84ymTf/rMMkzhjqbf2h/Ygt12xJbaZvALhXdxD3c9I3R83+cXMnECgeZ/aoDnb9S0Oua2TJ8PpfowHDCuZeIs4D/HYJXHg9JCKPPJCYh+SW1jA870PZ1CyYKQ8PAGhyX+Tdb1tbMxOEOSV/TA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=YWYJDmEworwmQnDuc1dEYE3WYuQUVvRAswXQy2tpiCI=;

b=DR5g/xgdN7cXHVa9rCGrMTRL0eMq60+PkH1oBDZqSyWCf0pTtOy7hJyXKjGB8J+Jv/Bf3IcyajFj81nskBD8yVoifEMcHMjATVeteJygGBBh3DKLcECbRmFEEtLiTbSMv3FkweouWPuPxWPlDXk23ghFJ+5aOVr3fj5HQjqmhY70Ivt79LAJDdh5n6RFClVbmrKM4JAVZvPDwJfmbhebo0zjxROA75kQxJPIeimeYmKnEYaEsp9Ph1+f413D73zXsxascczUccFuhPFU2yOEUpUG5w/iTdJHZhzYKu0kfNrzGQ6GRd75PzftRcPwH+15iwVwX35jh2ukNzlIoPSqlQ==

Received: from JH0PR01MB5634.apcprd01.prod.exchangelabs.com

(2603:1096:990:1a::14) by TY1PPF413C689A7.apcprd01.prod.exchangelabs.com

(2603:1096:408::31e) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.10; Wed, 5 Nov

2025 13:17:04 +0000

Received: from JH0PR01MB5634.apcprd01.prod.exchangelabs.com

([fe80::65a6:3ca2:f243:5751]) by JH0PR01MB5634.apcprd01.prod.exchangelabs.com

([fe80::65a6:3ca2:f243:5751%7]) with mapi id 15.20.9275.013; Wed, 5 Nov 2025

13:17:04 +0000

From: Simra Khan

To: Simra Khan

Subject: Re: Price List..?

Thread-Topic: Price List..?

Thread-Index:

AQHcD4e9jMeT1jGPGUe6dirm731YxrRm8ejEgAAAldOAAccIJIAAAaxSgAFnuMeAAAK44oAAAFSegAKSE5aAAAJF9YAAADv2gAPXTryAAAKvYYAAAE+IgALjMLeAAALwR4AAAB5mgAMmhWSAAAEDd4ABmr7tgAABIECAAXtIfoAAAlNTgAAIyLWAAYRPP4AAAliGgAAA+6OAAADTwYABiG6YgAABzrSAAAFpsYABmUuMgAACqzqAAYgNuIAAAg8ugAHXvTOAAAJnToABg2aSgAABTZOAAYDmbIAAAPcIgAF0ROaAAAC/+IABmu8pgAABR5uAAZhwXYAAAV7qgAGeHIuAAAFLiIABhm/BgAGc4wyAAAF53YABhtkfgAABcByAAaS+n4AAAax0gAGT08iAAAHt04AEpwdkgAABqFuAAYofP4AAAQamgAAANhaAAXz9dIAAAYlTgAGPRzWAAAHutoABk+kqgAACfcCACwOXm4AAAT2ngAFz6IOAAAGrN4ABkAS7gAABPwOAAbjtjoAAATmegAF8PdaAAYAg1YAAAU+AgAG3epmAAAF+ooABlDlogAADCAeAAABAWYABc7PzgAF/rY+AAAH9roABmZYagAACO4KAAZIKrYAAAk8rgAGMp36AAASijYAE+D4DgAAB1wOAAUS3W4AAAnuXgAGTuiuAAAH9roABm3EFgAACIIeAAa64m4AAAgVVgAF7xGWAAAFjXIABfDzsgAAC/DKAAyUPgIAAAmQugAHfKJOAAAEc4oAAAQK6gAE9rVmAAAHlE4ABk1+5gAAB3s+AAY+Nl4AAAmGsgAHYLhaAAAVDcoABUzOjgAABFmyAAZIBu4AAAlSfgAGgjIGAAAFyBoABfXKdgAABsqGAAY/z64AAAqjkgAAAlnaAAZkktIAAAqPXgAF6FO6AAAQhuoABmksGgAABjAaAAAF1d4ABhSZVgAACI7iAAYkh4YAAAkzF

Date: Wed, 5 Nov 2025 13:17:03 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR01MB5634:EE_|TY1PPF413C689A7:EE_

x-ms-office365-filtering-correlation-id: 7cd73d5d-e46b-45c0-0206-08de1c6d9cba

x-microsoft-antispam:

BCL:0;ARA:14566002|37102599003|31061999003|461199028|8062599012|8060799015|19110799012|15080799012|15030799006|3412199025|440099028|39105399003|39145399003|40105399003|41105399003|26104999006|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?PLH1STSxq8GiC4A7425MwffDPNAahcurRkCLp1ILA+tzfbMW4gxzs1Mb?=

=?Windows-1252?Q?AhqeuDcprI6QVXH4utuJrUwgQvk+i230SlQQFfOveHXqHfJ4xFSIWDjA?=

=?Windows-1252?Q?0P/KUv4fTvC5eoby89Ie/FxLWRcIwa1evYLocaWBTMt3pDQrfvztQhzq?=

=?Windows-1252?Q?YNt4fQkfyDeSv21ua26nomNT/0ni9C98aSuMpXMbeRwFIkVvBOXljOvD?=

=?Windows-1252?Q?+mn3pPS+wa0Fo1/h+h+NVZnWN5VSMS9jd0wcaM68+bplTUPsU+PLHAu6?=

=?Windows-1252?Q?hFkm+LGwCnJ0hfzukeqhG7ooBLJ9THcBsgn7i+xGaQbbGesYrcwHoF5Z?=

=?Windows-1252?Q?z5IUacd2KyxyZOdySw31x7WU2fhgQVXPDRkSFdvQrUKrPT/fTOzkcb/u?=

=?Windows-1252?Q?pwjbk3JTnHTZzvnWp/TjFfipl9+sAKIjldjiDvxlDx1z9VRKekT4G8my?=

=?Windows-1252?Q?9KHO90p3zLplz55+J7XwzwxCozQIBJZ1siKZP2FSDqy2+y6e8Q3r6C/J?=

=?Windows-1252?Q?OCIBJLK1Co0nPIbcBBANn8ji5/5W3SpxRcbJ/PMe8zuhcF88592LD1/7?=

=?Windows-1252?Q?5eqRR4F1G7Trrb06udr8Vr7FMZdV+4DbS4ZoQ3bCenbJZIHi2EEm7NDa?=

=?Windows-1252?Q?eZWTg80NISKVhEjkqZsKd0kgQa6kHVOuvFbR2DSJktKCMnDg9ciJLe+/?=

=?Windows-1252?Q?qicgSoASm4xoHQR3zGg8fvrwK/QQYMXoRdiQoYRd8wrkLYB6kDR7eDUt?=

=?Windows-1252?Q?Zvp3jgYjRUU3747kX7UV5G+UKmwghKtmKSPyOsui80JzljhLI7nSbx9V?=

=?Windows-1252?Q?e7sRKYYcqaKyNYttW3WZ22oz6A0z/OdTLZybHZGpJQSFCT7hQxNGi3oe?=

=?Windows-1252?Q?Tm/ztL9BQkOkzPmwppMsZeSZ6S84TB/5a43ul8tASs+lizbX3I9hml6J?=

=?Windows-1252?Q?1reWugIpl/dUhr/UpRH6zw34kq9saLqyy/PSn98Ao3Z2O3Jeict8hFiW?=

=?Windows-1252?Q?cSvU3WQRALGGpwceL8Twa8AXPxB6Xu/bkBpoGsv+5+RpD+o7zW/vkU3z?=

=?Windows-1252?Q?ppi6VM6DyY1uqdOTanvulaQqoAw1oflnRm5xBpdd8SnZXDaudi4VIHEK?=

=?Windows-1252?Q?dACPBzQr/rnAO1yc1SU1rE+PtzmL/DgCIj7Uqw/yEo9gNjEsU8e4EAF+?=

=?Windows-1252?Q?LfF++bRIhVtmA1gQnNY3Ly1ZE7m1HtvO9jJYHkbQMEYaH4SwNld3iPAn?=

=?Windows-1252?Q?mE1h2vogGboD/kVxs1hKd6GKgtrBzqZzx75TyuDpJtrcor8EqJGTWnR0?=

=?Windows-1252?Q?HXuWR+h/YqKBt/Cp8SyM1sbgM+1IMmmnqWSRPe52c+AdG0dFgwuIpTbu?=

=?Windows-1252?Q?OP3keYXM+Otg3b9F4ZHMxAhUmt46X+uf1vDGsagEcPQIYIPXWo1UhKre?=

=?Windows-1252?Q?SuQJl+rMIhgYYIixbXd6WQoTT5N97yoNzEhmSE7O5t0=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?saqgsHjaV+Ol81wCeRUpzTjM2gSSkXxk445iF2a8xFIFciPl5CkTPm/k?=

=?Windows-1252?Q?EbMfdoKEvznzE7qQpzHu6/Xg4zvyILWJm/QLtVPuYK/1dPE7B6+8+Aqe?=

=?Windows-1252?Q?FVet3i2gI+qyWAX9Xjir4wTBzTKPTiJ58BPn9k5oLYNOMvoqK37lBP4U?=

=?Windows-1252?Q?Y6AmP2EzEz/KERYKqMM14m1B5SLMYYHa2t83dik5X0I9U6QvAi72STTR?=

=?Windows-1252?Q?LtucgipnvwRZpQHmq7cI5noqJ/6nv9ngDqZilCux/rCqjjVOVcyF9B+R?=

=?Windows-1252?Q?ycuePGEJSbnxSvX3rv9pXyCLU3AiS6yizqt6dEeA6SbLH1Ddi6Dijh0l?=

=?Windows-1252?Q?BEajinDjlmGUpn69PGhI2dhVbW5SmCkPy6WDDKzfIUCII1RtssvLeqnZ?=

=?Windows-1252?Q?+itOGeR8ozCgZ1+LrJOeNBbhMorg92mdnw2BKzkxs8FeX2eB1W5bDMBz?=

=?Windows-1252?Q?LKTwKK4/Fn9bahqNtB7OHo2/hi6MF7GOUNucOI0+mazakRSQmaSBROBO?=

=?Windows-1252?Q?LH7TiRAYuZzavT6zgJn/wIuxP8Ht1a5sXZ6II6s2wvqKPM6E7PhGXgoe?=

=?Windows-1252?Q?9Wkg/x8FHHsPEYCknAaZmdETjSJ/I9KjWpo9nyW/W6m+RpH9DKq8bDHS?=

=?Windows-1252?Q?vJwik8prAy5n+GCpIUI/RVWHL409LqPZG9WjBrg4pwifqIVH5lppCxL3?=

=?Windows-1252?Q?HE6HfIoy/QeCs1SyQmIX7ddelWkROZPnUXgl0pXbX2fUaqAZtiUwDBfO?=

=?Windows-1252?Q?G/IU/5QM4fF0wtlTQ38zZ6sq9F95ossa3WYFKSSfIWUF7qvkhSkh7pg5?=

=?Windows-1252?Q?QPVnHV05LmQks+6Rwu0oPT4+uLK/gVr/75rwxlMd1Om2PgE+DtwByW+d?=

=?Windows-1252?Q?cVJwOLj4g82rGQ0UZO8IerSGxN6LBKEkELpEv8jj454t567uO0nzwPtn?=

=?Windows-1252?Q?FHJratIkIN1LJ6KxhMFg9Zcl2C00jD3hKr7n98+mqOAAOdxHPPxT86m2?=

=?Windows-1252?Q?3CvMxj/By4VJ4rtJrDg6FerqjLd4AOgdm6qzD0nBC1bEfEmHOP7BWQBE?=

=?Windows-1252?Q?xmlxl0j78xyatyYw8IJgRddm5Qwx19SJKq9sPqiY902G10AseUzPx2RH?=

=?Windows-1252?Q?6GXfdZjsx5CtVJY5IjBo9D+G1796EW0B77Pa1FxStu7H1mmi8eO5r92z?=

=?Windows-1252?Q?awHI1h2ZMbiy0mXgkhBaicN7UJQmS6POfUqMPL2wLUkWyYmDTkBT/Uzt?=

=?Windows-1252?Q?vl3gNxHVxpMorv46RjPRlz+Uwsiz7mCUpx/Fk8rLF1j3KNZdDxSv/9HS?=

=?Windows-1252?Q?gZW0M19PTzoAHt7khYSEtSfvevJlsPqj7T4QQYrV/Q0qihWHbdqvmoWr?=

=?Windows-1252?Q?uZfcLNZyQdEB9wWe2I3XfhLIBJyJJobO6oo=3D?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR01MB563402AB6F44FF18DC69CC8DB8C5AJH0PR01MB5634apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR01MB5634.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 7cd73d5d-e46b-45c0-0206-08de1c6d9cba

X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Nov 2025 13:17:03.9584

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY1PPF413C689A7

--_000_JH0PR01MB563402AB6F44FF18DC69CC8DB8C5AJH0PR01MB5634apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hello,

Although it has a nice design and looks fantastic, neither Google nor other=

major

search engines are displaying it.

Your website has many errors.

May I send you error and report for your site=92s review with SEO price lis=

t?

Regards

--_000_JH0PR01MB563402AB6F44FF18DC69CC8DB8C5AJH0PR01MB5634apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hello,

ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Although it has a nice design and looks fantastic, neither Google nor other=

major

ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

search engines are displaying it.

ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Your website has many errors.

ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

May I send you error and report for your site=92s review with SEO price lis=

t?

ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Regards

edFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12p=

t; color: rgb(0, 0, 0);">

--_000_JH0PR01MB563402AB6F44FF18DC69CC8DB8C5AJH0PR01MB5634apcp_--

Life Fitness Equipment spam from alibaba

Posted by Dave Yadallee on Wednesday, November 5. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 05 Nov 2025 07:45:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGek0-00000000OnX-04eP

for dave@doctor.nl2k.ab.ca;

Wed, 05 Nov 2025 07:44:04 -0700

Resent-From: The Doctor

Resent-Date: Wed, 5 Nov 2025 07:44:03 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out196-26.us.a.dm.aliyun.com ([47.90.196.26]:22299)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGXzR-000000000sy-15e4

for doctor@nl2k.ab.ca;

Wed, 05 Nov 2025 00:31:44 -0700

X-AliDM-RcptTo: ZG9jdG9yQG5sMmsuYWIuY2E=

Feedback-ID: default:vip@vip.gymequipment.ltd:alibabak_WebBatch:285663

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.gymequipment.ltd; s=aliyun-cn-hangzhou;

t=1762327532; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=wS+kgEdy2/SIf3AOzmDXT1BSG14EkrISV+7plGVroKQ=;

b=QvzSvTjZ0G6EtZtcwrnL25I8/mtlWHJOdxaEEQ0vS6h5gTsrIeDM9I24AFYxK4y0pe1u7yXuvrUBPxt9tv6sSVJH6d2rFcSr8MdlGcGU7tHs7OvoIZ4kPGXRFESraqEJDS5DC718ew0jqTVR9EsNFn2Gjxg7VcjUhaIHsJWNKLw=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1762327532; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=wS+kgEdy2/SIf3AOzmDXT1BSG14EkrISV+7plGVroKQ=;

b=LBiLzvT9OGrGQfQ/2pSjdwfhRGKIZdiyafJ2fuOw/uC0/jJUXUcV7eBttmKdMliYZTuabnyKjmxZUGRXrMjSIuUfeHKHWmraXGegcr2VspezeziGMPl+ypu/vB/LOZRJQjkCBTSx23c5A1mqIEpMZw2Eub4+ulIcdnRhBSfOcTM=

Received: from chitu-hsf(mailfrom:vip@vip.gymequipment.ltd fp:ma_600000243548550073 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Wed, 05 Nov 2025 15:24:09 +0800

Date: Wed, 05 Nov 2025 15:24:08 +0800

From: "=?UTF-8?B?bGlmZSBGaXRuZXNzIHN0cmVuZ3Ro5YWo55CD?="

To:

Reply-To:

Message-ID: <73ddf3f6-147a-4baa-9ba3-e8db5a31d97a@alibaba.com>

Subject: =?UTF-8?B?TGlmZSBGaXRuZXNzIEVxdWlwbWVudA==?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000243548550074

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, I hope this message finds you well.

Content analysis details: (6.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.196.26 listed in will-spam-for-food.eu.org]

[47.90.196.26 listed in will-spam-for-food.eu.org]

[47.90.196.26 listed in will-spam-for-food.eu.org]

[47.90.196.26 listed in will-spam-for-food.eu.org]

[47.90.196.26 listed in will-spam-for-food.eu.org]

[47.90.196.26 listed in will-spam-for-food.eu.org]

[47.90.196.26 listed in will-spam-for-food.eu.org]

[47.90.196.26 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.196.26 listed in dnsbl.ahbl.org]

[47.90.196.26 listed in dnsbl.ahbl.org]

[47.90.196.26 listed in dnsbl.ahbl.org]

[47.90.196.26 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.196.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.196.26 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.196.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.196.26 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[47.90.196.26 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[47.90.196.26 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[47.90.196.26 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[47.90.196.26 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[47.90.196.26 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 ALIBABA_IMG_NOT_RCVD_ALI Alibaba hosted image but message not from

Alibaba

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?TGlmZSBGaXRuZXNzIEVxdWlwbWVudA==?=

or: #0f1115; font-size: 16.0px; font-style: normal; font-variant-ligatures: no=

rmal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orp=

hans: 2; text-align: start; text-indent: 0.0px; text-transform: none; widows: =

2; word-spacing: 0.0px; -webkit-text-stroke-width: 0.0px; white-space: normal;=

background-color: #ffffff; text-decoration-thickness: initial; text-decoratio=

n-style: initial; text-decoration-color: initial;" style=3D"margin-top: 16px; =

margin-bottom: 16px; padding: 0px; font-family: Verdana, Arial, Helvetica, san=

s-serif; text-wrap-mode: wrap; color: rgb(15, 17, 21);">Hello,

s=3D"ds-markdown-paragraph" data-mce-style=3D"margin: 16.0px 0.0px; color: #0f=

1115; font-size: 16.0px; font-style: normal; font-variant-ligatures: normal; f=

ont-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2=

; text-align: start; text-indent: 0.0px; text-transform: none; widows: 2; word=

-spacing: 0.0px; -webkit-text-stroke-width: 0.0px; white-space: normal; backgr=

ound-color: #ffffff; text-decoration-thickness: initial; text-decoration-style=

: initial; text-decoration-color: initial;" style=3D"margin-top: 16px; margin-=

bottom: 16px; padding: 0px; font-family: Verdana, Arial, Helvetica, sans-serif=

; text-wrap-mode: wrap; color: rgb(15, 17, 21);">

>

lor: #0f1115; font-size: 16.0px; font-style: normal; font-variant-ligatures: n=

ormal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; or=

phans: 2; text-align: start; text-indent: 0.0px; text-transform: none; widows:=

2; word-spacing: 0.0px; -webkit-text-stroke-width: 0.0px; white-space: normal=

; background-color: #ffffff; text-decoration-thickness: initial; text-decorati=

on-style: initial; text-decoration-color: initial;" style=3D"margin-top: 16px;=

margin-bottom: 16px; padding: 0px; font-family: Verdana, Arial, Helvetica, sa=

ns-serif; text-wrap-mode: wrap; color: rgb(15, 17, 21);">I hope this message f=

inds you well.

16.0px 0.0px; color: #0f1115; font-size: 16.0px; font-style: normal; font-var=

iant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-sp=

acing: normal; orphans: 2; text-align: start; text-indent: 0.0px; text-transfo=

rm: none; widows: 2; word-spacing: 0.0px; -webkit-text-stroke-width: 0.0px; wh=

ite-space: normal; background-color: #ffffff; text-decoration-thickness: initi=

al; text-decoration-style: initial; text-decoration-color: initial;" style=3D"=

margin-top: 16px; margin-bottom: 16px; padding: 0px; font-family: Verdana, Ari=

al, Helvetica, sans-serif; text-wrap-mode: wrap; color: rgb(15, 17, 21);">

data-mce-bogus=3D"1"/>

"margin: 16.0px 0.0px; color: #0f1115; font-size: 16.0px; font-style: normal; =

font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; l=

etter-spacing: normal; orphans: 2; text-align: start; text-indent: 0.0px; text=

-transform: none; widows: 2; word-spacing: 0.0px; -webkit-text-stroke-width: 0=

.0px; white-space: normal; background-color: #ffffff; text-decoration-thicknes=

s: initial; text-decoration-style: initial; text-decoration-color: initial;" s=

tyle=3D"margin-top: 16px; margin-bottom: 16px; padding: 0px; font-family: Verd=

ana, Arial, Helvetica, sans-serif; text-wrap-mode: wrap; color: rgb(15, 17, 21=

);">As a trusted partner in the fitness equipment industry, I understand the i=

mportance of balancing quality and cost. That=E2=80=99s why I=E2=80=99d like t=

o introduce you to a high-performance, competitively priced alternative to Lif=

e Fitness =E2=80=93 manufactured right here in China.

wn-paragraph" data-mce-style=3D"margin: 16.0px 0.0px; color: #0f1115; font-siz=

e: 16.0px; font-style: normal; font-variant-ligatures: normal; font-variant-ca=

ps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: =

start; text-indent: 0.0px; text-transform: none; widows: 2; word-spacing: 0.0p=

x; -webkit-text-stroke-width: 0.0px; white-space: normal; background-color: #f=

fffff; text-decoration-thickness: initial; text-decoration-style: initial; tex=

t-decoration-color: initial;" style=3D"margin-top: 16px; margin-bottom: 16px; =

padding: 0px; font-family: Verdana, Arial, Helvetica, sans-serif; text-wrap-mo=

de: wrap; color: rgb(15, 17, 21);">Our products are engineered to meet the sam=

e rigorous standards for durability, functionality, and user experience, but a=

t a fraction of the cost. With customizable options and reliable after-sales s=

upport, we make it easy for you to offer exceptional value without compromisin=

g on quality.

16.0px 0.0px; color: #0f1115; font-size: 16.0px; font-style: normal; font-vari=

ant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spa=

cing: normal; orphans: 2; text-align: start; text-indent: 0.0px; text-transfor=

m: none; widows: 2; word-spacing: 0.0px; -webkit-text-stroke-width: 0.0px; whi=

te-space: normal; background-color: #ffffff; text-decoration-thickness: initia=

l; text-decoration-style: initial; text-decoration-color: initial;" style=3D"m=

argin-top: 16px; margin-bottom: 16px; padding: 0px; font-family: Verdana, Aria=

l, Helvetica, sans-serif; text-wrap-mode: wrap; color: rgb(15, 17, 21);">Key a=

dvantages:

graph" data-mce-style=3D"margin: 0.0px;" style=3D"margin-top: 0px; margin-bott=

om: 0px; padding: 0px;">
nt-weight: 600;">Cost savings without sacrificing performance
<=

/li>
ass=3D"ds-markdown-paragraph" data-mce-style=3D"margin: 0.0px;" style=3D"margi=

n-top: 0px; margin-bottom: 0px; padding: 0px;">
ight: 600;" style=3D"font-weight: 600;">Customization options to m=

atch your market needs
=3D"margin-top: 6px;">

gin: 0.0px;" style=3D"margin-top: 0px; margin-bottom: 0px; padding: 0px;">
n data-mce-style=3D"font-weight: 600;" style=3D"font-weight: 600;">Strong warr=

anty and support for long-term peace of mind
ttps://sc04.alicdn.com/kf/He9e93e8aff1645f1b02f6f6af232ec136/232883625/He9e93e=

8aff1645f1b02f6f6af232ec136.jpg" src=3D"https://sc04.alicdn.com/kf/He9e93e8aff=

1645f1b02f6f6af232ec136/232883625/He9e93e8aff1645f1b02f6f6af232ec136.jpg" alt=3D=

"life fitness.jpg" ori-width=3D"480" ori-height=3D"600"/>

s=3D"ds-markdown-paragraph" data-mce-style=3D"margin: 16.0px 0.0px; color: #0f=

1115; font-size: 16.0px; font-style: normal; font-variant-ligatures: normal; f=

ont-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2=

; text-align: start; text-indent: 0.0px; text-transform: none; widows: 2; word=

-spacing: 0.0px; -webkit-text-stroke-width: 0.0px; white-space: normal; backgr=

ound-color: #ffffff; text-decoration-thickness: initial; text-decoration-style=

: initial; text-decoration-color: initial;" style=3D"margin-top: 16px; margin-=

bottom: 16px; padding: 0px; font-family: Verdana, Arial, Helvetica, sans-serif=

; text-wrap-mode: wrap; color: rgb(15, 17, 21);">If you=E2=80=99re open to exp=

loring how we can help you maximize value for your customers, I=E2=80=99d be h=

appy to share more details or arrange a product demonstration at your convenie=

nce.

0px; color: #0f1115; font-size: 16.0px; font-style: normal; font-variant-ligat=

ures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: nor=

mal; orphans: 2; text-align: start; text-indent: 0.0px; text-transform: none; =

widows: 2; word-spacing: 0.0px; -webkit-text-stroke-width: 0.0px; white-space:=

normal; background-color: #ffffff; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color: initial;" style=3D"margin-top=

: 16px; margin-bottom: 16px; padding: 0px; font-family: Verdana, Arial, Helvet=

ica, sans-serif; text-wrap-mode: wrap; color: rgb(15, 17, 21);">Looking forwar=

d to the possibility of working together!

" data-mce-style=3D"margin: 16.0px 0.0px; color: #0f1115; font-size: 16.0px; f=

ont-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; =

font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-=

indent: 0.0px; text-transform: none; widows: 2; word-spacing: 0.0px; -webkit-t=

ext-stroke-width: 0.0px; white-space: normal; background-color: #ffffff; text-=

decoration-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial;" style=3D"margin-top: 16px; margin-bottom: 16px; padding: 0px=

; font-family: Verdana, Arial, Helvetica, sans-serif; text-wrap-mode: wrap; co=

lor: rgb(15, 17, 21);">

aragraph" data-mce-style=3D"margin: 16.0px 0.0px; color: #0f1115; font-size: 1=

6.0px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: =

normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: star=

t; text-indent: 0.0px; text-transform: none; widows: 2; word-spacing: 0.0px; -=

webkit-text-stroke-width: 0.0px; white-space: normal; background-color: #fffff=

f; text-decoration-thickness: initial; text-decoration-style: initial; text-de=

coration-color: initial;" style=3D"margin-top: 16px; margin-bottom: 16px; padd=

ing: 0px; font-family: Verdana, Arial, Helvetica, sans-serif; text-wrap-mode: =

wrap; color: rgb(15, 17, 21);">Best regards,

aph" data-mce-style=3D"margin: 16.0px 0.0px; color: #0f1115; font-size: 16.0px=

; font-style: normal; font-variant-ligatures: normal; font-variant-caps: norma=

l; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; te=

xt-indent: 0.0px; text-transform: none; widows: 2; word-spacing: 0.0px; -webki=

t-text-stroke-width: 0.0px; white-space: normal; background-color: #ffffff; te=

xt-decoration-thickness: initial; text-decoration-style: initial; text-decorat=

ion-color: initial;" style=3D"margin-top: 16px; margin-bottom: 16px; padding: =

0px; font-family: Verdana, Arial, Helvetica, sans-serif; text-wrap-mode: wrap;=

color: rgb(15, 17, 21);">

n-paragraph" data-mce-style=3D"margin: 16.0px 0.0px; color: #0f1115; font-size=

: 16.0px; font-style: normal; font-variant-ligatures: normal; font-variant-cap=

s: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: s=

tart; text-indent: 0.0px; text-transform: none; widows: 2; word-spacing: 0.0px=

; -webkit-text-stroke-width: 0.0px; white-space: normal; background-color: #ff=

ffff; text-decoration-thickness: initial; text-decoration-style: initial; text=

-decoration-color: initial;" style=3D"margin-top: 16px; margin-bottom: 16px; p=

adding: 0px; font-family: Verdana, Arial, Helvetica, sans-serif; text-wrap-mod=

e: wrap; color: rgb(15, 17, 21);">Rachel Tian

raph" data-mce-style=3D"margin: 16.0px 0.0px; color: #0f1115; font-size: 16.0p=

x; font-style: normal; font-variant-ligatures: normal; font-variant-caps: norm=

al; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; t=

ext-indent: 0.0px; text-transform: none; widows: 2; word-spacing: 0.0px; -webk=

it-text-stroke-width: 0.0px; white-space: normal; background-color: #ffffff; t=

ext-decoration-thickness: initial; text-decoration-style: initial; text-decora=

tion-color: initial;" style=3D"margin-top: 16px; margin-bottom: 16px; padding:=

0px; font-family: Verdana, Arial, Helvetica, sans-serif; text-wrap-mode: wrap=

; color: rgb(15, 17, 21);">Tianjin Xuruihengda Sports Equipment Company

Benevolent donation spam

Posted by Dave Yadallee on Wednesday, November 5. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Nov 2025 22:13:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGVoS-000000007zi-0Ov6

for dave@doctor.nl2k.ab.ca;

Tue, 04 Nov 2025 22:12:04 -0700

Resent-From: The Doctor

Resent-Date: Tue, 4 Nov 2025 22:12:03 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from au-smtp-delivery-120.mimecast.com ([103.96.21.120]:58909)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGPwI-000000004AT-2Fob

for doctor@doctor.nl2k.ab.ca;

Tue, 04 Nov 2025 15:55:54 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lavalla.vic.edu.au;

s=mimecast20200629; t=1762296895;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

to:to:cc:mime-version:mime-version:content-type:content-type;

bh=ToMlgSbv3qWBFIhfUXUbxopCdfiYOgU6F0ohOi6VVU0=;

b=Bv4ZvKPXd7Bwm1sCHcfRlKYPtiHeko2XCX84Bzh0xAxsAqgDKHHoa8NAdC8vtyfCQPMbzE

NPrLhHrP4i90XwUKDa0FbPocqvywFn29sKPNbxKao9qQyO/CkTYCVxtAiKcodq9AbKRFDL

pjMHCLP1+rwEU5mfiSfJAIOY7sZiH5E=

Received: from lcckilex1.lavalla.local (203-219-48-89.tpgi.com.au

[203.219.48.89]) by relay.mimecast.com with ESMTP with STARTTLS

(version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id

au-mta-85-lBW5LphxNy-YAzxbrrXlqw-8; Wed, 05 Nov 2025 09:54:52 +1100

X-MC-Unique: lBW5LphxNy-YAzxbrrXlqw-8

X-Mimecast-MFC-AGG-ID: lBW5LphxNy-YAzxbrrXlqw_1762296885

Received: from LCCKILEX1.lavalla.local (172.16.1.60) by

lcckilex1.lavalla.local (172.16.1.60) with Microsoft SMTP Server (TLS) id

15.0.1497.48; Wed, 5 Nov 2025 09:54:27 +1100

Received: from LCCKILEX1.lavalla.local ([::1]) by lcckilex1.lavalla.local

([::1]) with mapi id 15.00.1497.048; Wed, 5 Nov 2025 09:54:27 +1100

From: "WHITE. Stella"

To: "farid.rivera@sreci.gob.hn"

Subject: Tuesday, November 4, 2025

Thread-Topic: Tuesday, November 4, 2025

Thread-Index: AdxN3fcv2/BHj3m2RTqaEeHd8iiAJQ==

Date: Tue, 4 Nov 2025 22:54:27 +0000

Message-ID:

Accept-Language: en-GB, en-AU, en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-exchange-transport-fromentityheader: Hosted

x-originating-ip: [172.16.1.5]

MIME-Version: 1.0

X-Mimecast-Spam-Score: 0

X-Mimecast-MFC-PROC-ID: DEDNlS1-Mzk_cu7mHCcACAKM4J_N2bjBIf2kyKzDGgk_1762296885

X-Mimecast-Originator: lavalla.vic.edu.au

Content-Language: en-US

Content-Type: multipart/alternative;

boundary="_000_d5f35631d2cc4ffcb2748394b7511eb6lcckilex1lavallalocal_"

--_000_d5f35631d2cc4ffcb2748394b7511eb6lcckilex1lavallalocal_

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64

SGVsbG8NCg0KWW91IGhhdmUgYmVlbiBzZWxlY3RlZCBmb3IgYSBwb3RlbnRpYWwgY2hhcml0YWJs

ZSBncmFudCBmcm9tIHRoZSBSb2JlcnQgQm9zY2ggU3RpZnR1bmcuIFRoZSBTdGlmdHVuZyBpcyBh

IEdlcm1hbiBmb3VuZGF0aW9uLCBlc3RhYmxpc2hlZCBieSB0aGUgd2lsbCBvZiBlbnRyZXByZW5l

dXIgUm9iZXJ0IEJvc2NoICgxODYxLTE5NDIpLCB3aGljaCBpcyBmdW5kZWQgYnkgaXRzIG1ham9y

aXR5IHN0YWtlIGluIFJvYmVydCBCb3NjaCBHbWJILg0KDQpXZSBhcmUgcGxlYXNlZCB0byBpbmZv

cm0geW91IHRoYXQgeW91IGFyZSB1bmRlciBjb25zaWRlcmF0aW9uIGZvciBhIGdyYW50IG9mIOKC

rDEsNTAwLDAwMC4wMC4NCg0KRm9yIG1vcmUgaW5mb3JtYXRpb24gYWJvdXQgdGhlIFJvYmVydCBC

b3NjaCBTdGlmdHVuZyBhbmQgaXRzIGdyYW50LW1ha2luZyBhY3Rpdml0aWVzLCBwbGVhc2Ugdmlz

aXQ6IGh0dHBzOi8vZnVuZHNmb3JuZ29zLm9yZy9mb3VuZGF0aW9uLWZ1bmRzLWZvci1uZ29zL3Jv

YmVydC1ib3NjaC1zdGlmdHVuZy8NCg0KSWYgeW91IGFyZSBpbnRlcmVzdGVkIGluIHByb2NlZWRp

bmcsIHBsZWFzZSBjb250YWN0IHVzIHVzaW5nIHRoZSBpbmZvcm1hdGlvbiBiZWxvdzogcm9iZXJ0

Ym9zY2gzMDZAZ21haWwuY29tPG1haWx0bzpyb2JlcnRib3NjaDMwNkBnbWFpbC5jb20+DQoNClRo

aXMgZS1tYWlsIGFjY291bnQgaXMgc2VuZCBvbmx5LCBhbmQgbm90IG1vbml0b3JlZC4gSWYgeW91

IGhhdmUgZnVydGhlciBxdWVzdGlvbnMgYWJvdXQgdGhlIGluZm9ybWF0aW9uIGluIHRoaXMgZS1t

YWlsLCBkbyBub3QgUkVQTFkgdG8gdGhlIGUtbWFpbC4gSW5zdGVhZCwgcGxlYXNlIHJlYWNoIG91

dCB0byB0aGUgY29udGFjdCBwcm92aWRlZC4NCg0KRGlzY2xhaW1lcg0KDQpUaGUgaW5mb3JtYXRp

b24gY29udGFpbmVkIGluIHRoaXMgY29tbXVuaWNhdGlvbiBmcm9tIHRoZSBzZW5kZXIgaXMgY29u

ZmlkZW50aWFsLiBJdCBpcyBpbnRlbmRlZCBzb2xlbHkgZm9yIHVzZSBieSB0aGUgcmVjaXBpZW50

IGFuZCBvdGhlcnMgYXV0aG9yaXplZCB0byByZWNlaXZlIGl0LiBJZiB5b3UgYXJlIG5vdCB0aGUg

cmVjaXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNjbG9zdXJlLCBj

b3B5aW5nLCBkaXN0cmlidXRpb24gb3IgdGFraW5nIGFjdGlvbiBpbiByZWxhdGlvbiBvZiB0aGUg

Y29udGVudHMgb2YgdGhpcyBpbmZvcm1hdGlvbiBpcyBzdHJpY3RseSBwcm9oaWJpdGVkIGFuZCBt

YXkgYmUgdW5sYXdmdWwuDQoNClRoaXMgZW1haWwgaGFzIGJlZW4gc2Nhbm5lZCBmb3IgdmlydXNl

cyBhbmQgbWFsd2FyZSwgYW5kIG1heSBoYXZlIGJlZW4gYXV0b21hdGljYWxseSBhcmNoaXZlZCBi

eSBNaW1lY2FzdCBMdGQsIGFuIGlubm92YXRvciBpbiBTb2Z0d2FyZSBhcyBhIFNlcnZpY2UgKFNh

YVMpIGZvciBidXNpbmVzcy4gUHJvdmlkaW5nIGEgc2FmZXIgYW5kIG1vcmUgdXNlZnVsIHBsYWNl

IGZvciB5b3VyIGh1bWFuIGdlbmVyYXRlZCBkYXRhLiBTcGVjaWFsaXppbmcgaW47IFNlY3VyaXR5

LCBhcmNoaXZpbmcgYW5kIGNvbXBsaWFuY2UuIFRvIGZpbmQgb3V0IG1vcmUgdmlzaXQgdGhlIE1p

bWVjYXN0IHdlYnNpdGUuDQo=

--_000_d5f35631d2cc4ffcb2748394b7511eb6lcckilex1lavallalocal_

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64

PGh0bWw+PGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRl

eHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0i

d2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEiPg0KPG1ldGEgbmFtZT0iZm9ybWF0

LWRldGVjdGlvbiIgY29udGVudD0idGVsZXBob25lPW5vIj4NCjx0aXRsZT5UdWVzZGF5LCBOb3Zl

bWJlciA0LCAyMDI1PC90aXRsZT4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyI+LnN0eWxlMSB7Zm9u

dC1mYW1pbHk6ICJUaW1lcyBOZXcgUm9tYW4iO308L3N0eWxlPjwvaGVhZD48Ym9keSBzdHlsZT0i

QkFDS0dST1VORC1DT0xPUjogI2ZmZmZmZiIgYmdjb2xvcj0iI2ZmZmZmZiI+DQo8Zm9udCBzaXpl

PSIzIiBmYWNlPSJBcmlhbCI+PGZvbnQgc2l6ZT0iNCIgZmFjZT0iQXBwbGVTeXN0ZW1VSUZvbnQi

Pjxmb250IHNpemU9IjQiIGZhY2U9IkFwcGxlU3lzdGVtVUlGb250Ij4NCjxwPkhlbGxvPGJyPg0K

PGJyPg0KWW91IGhhdmUgYmVlbiBzZWxlY3RlZCBmb3IgYSBwb3RlbnRpYWwgY2hhcml0YWJsZSBn

cmFudCBmcm9tIHRoZSBSb2JlcnQgQm9zY2ggU3RpZnR1bmcuIFRoZSBTdGlmdHVuZyBpcyBhIEdl

cm1hbiBmb3VuZGF0aW9uLCBlc3RhYmxpc2hlZCBieSB0aGUgd2lsbCBvZiBlbnRyZXByZW5ldXIg

Um9iZXJ0IEJvc2NoICgxODYxLTE5NDIpLCB3aGljaCBpcyBmdW5kZWQgYnkgaXRzIG1ham9yaXR5

IHN0YWtlIGluIFJvYmVydCBCb3NjaCBHbWJILjwvcD4NCjxwPldlIGFyZSBwbGVhc2VkIHRvIGlu

Zm9ybSB5b3UgdGhhdCB5b3UgYXJlIHVuZGVyIGNvbnNpZGVyYXRpb24gZm9yIGEgZ3JhbnQgb2Yg

4oKsMSw1MDAsMDAwLjAwLjwvcD4NCjxwPkZvciBtb3JlIGluZm9ybWF0aW9uIGFib3V0IHRoZSBS

b2JlcnQgQm9zY2ggU3RpZnR1bmcgYW5kIGl0cyBncmFudC1tYWtpbmcgYWN0aXZpdGllcywgcGxl

YXNlIHZpc2l0Og0KPGEgaHJlZj0iaHR0cHM6Ly9mdW5kc2Zvcm5nb3Mub3JnL2ZvdW5kYXRpb24t

ZnVuZHMtZm9yLW5nb3Mvcm9iZXJ0LWJvc2NoLXN0aWZ0dW5nLyI+DQpodHRwczovL2Z1bmRzZm9y

bmdvcy5vcmcvZm91bmRhdGlvbi1mdW5kcy1mb3Itbmdvcy9yb2JlcnQtYm9zY2gtc3RpZnR1bmcv

PC9hPjwvcD4NCjxwPklmIHlvdSBhcmUgaW50ZXJlc3RlZCBpbiBwcm9jZWVkaW5nLCBwbGVhc2Ug

Y29udGFjdCB1cyB1c2luZyB0aGUgaW5mb3JtYXRpb24gYmVsb3c6DQo8YSBocmVmPSJtYWlsdG86

cm9iZXJ0Ym9zY2gzMDZAZ21haWwuY29tIj5yb2JlcnRib3NjaDMwNkBnbWFpbC5jb208L2E+PC9w

Pg0KPHA+VGhpcyBlLW1haWwgYWNjb3VudCBpcyBzZW5kIG9ubHksIGFuZCBub3QgbW9uaXRvcmVk

LiBJZiB5b3UgaGF2ZSBmdXJ0aGVyIHF1ZXN0aW9ucyBhYm91dCB0aGUgaW5mb3JtYXRpb24gaW4g

dGhpcyBlLW1haWwsIGRvIG5vdCBSRVBMWSB0byB0aGUgZS1tYWlsLiBJbnN0ZWFkLCBwbGVhc2Ug

cmVhY2ggb3V0IHRvIHRoZSBjb250YWN0IHByb3ZpZGVkLjwvcD4NCjwvZm9udD48L2ZvbnQ+PC9m

b250Pg0KPHAgYWxpZ249ImxlZnQiPjxmb250IHNpemU9IjMiIGZhY2U9IkFyaWFsIj48Zm9udCBz

aXplPSI0IiBmYWNlPSJBcHBsZVN5c3RlbVVJRm9udCI+PGZvbnQgc2l6ZT0iNCIgZmFjZT0iQXBw

bGVTeXN0ZW1VSUZvbnQiPiZuYnNwOzwvcD4NCjwvZm9udD48L2ZvbnQ+PC9mb250Pg0KDQoNCjxi

cj48YnI+PHAgc3R5bGU9ImZvbnQtZmFtaWx5OiBWZXJkYW5hOyBmb250LXNpemU6MTBwdDsgY29s

b3I6IzY2NjY2NjsiPjxiPkRpc2NsYWltZXI8L2I+PC9wPjxwIHN0eWxlPSJmb250LWZhbWlseTog

VmVyZGFuYTsgZm9udC1zaXplOjhwdDsgY29sb3I6IzY2NjY2NjsiPlRoaXMgbWVzc2FnZSBtYXkg

Y29udGFpbiBjb25maWRlbnRpYWwgYW5kL29yIHByaXZpbGVnZWQgaW5mb3JtYXRpb24gYW5kIGlz

IGludGVuZGVkIGZvciB0aGUgcmVjaXBpZW50IHNwZWNpZmllZC4gSXQgaXMgc3RyaWN0bHkgZm9y

YmlkZGVuIHRvIHNoYXJlIGFueSBwYXJ0IG9mIHRoaXMgbWVzc2FnZSB3aXRoIGFueSB0aGlyZCBw

YXJ0eSwgd2l0aG91dCB0aGUgd3JpdHRlbiBjb25zZW50IG9mIHRoZSBzZW5kZXIuIElmIHlvdSBo

YXZlIHJlY2VpdmVkIHRoaXMgbWVzc2FnZSBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB0aGUgc2Vu

ZGVyIGltbWVkaWF0ZWx5IGJ5IHJlcGx5aW5nIHRvIHRoaXMgZW1haWwgYW5kIHRoZW4gZGVsZXRl

IHRoZSBlbWFpbCBmcm9tIHlvdXIgc3lzdGVtLiBBbnkgdmlld3MgZXhwcmVzc2VkIGluIHRoaXMg

bWVzc2FnZSBhcmUgdGhvc2Ugb2YgdGhlIGluZGl2aWR1YWwgc2VuZGVyIGFuZCBub3QgbmVjZXNz

YXJpbHkgdGhvc2Ugb2YgTGF2YWxsYSBDYXRob2xpYyBDb2xsZWdlLiBUaGFuayB5b3UgZm9yIHlv

dXIgY28tb3BlcmF0aW9uLjwvcD48L2JvZHk+PC9odG1sPg0K

--_000_d5f35631d2cc4ffcb2748394b7511eb6lcckilex1lavallalocal_--

Out of the office spam from Microsoft Outlook

Posted by Dave Yadallee on Wednesday, November 5. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 04 Nov 2025 22:13:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vGVp5-000000008Bx-3lk3

for dave@doctor.nl2k.ab.ca;

Tue, 04 Nov 2025 22:12:43 -0700

Resent-From: The Doctor

Resent-Date: Tue, 4 Nov 2025 22:12:43 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-canadaeastazhn15010001.outbound.protection.outlook.com ([52.102.145.1]:7329 helo=YQZPR01CU011.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

id 1vGRvU-00000000HjG-0LF3

for Mailer-Daemon@doctor.nl2k.ab.ca;

Tue, 04 Nov 2025 18:03:13 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=iBmrtU+lFif9G8p2oHO/rFhe3pAlyqgqvxz02jC9xhwywi/BuAxN20jJpflejlPQgIKCrqKPBKMe2hwj06kFOQD3kbT3rJqHeoD6s9QUPa8umTuWk8YHClemgu9fVHHA6DiQsHgxepeLt6ywLo4YOpgCPIfPzp2+wdwU5PfLwxYhPQzxNaOrnFbKryH9WsF2wos/iVzfnSWBn9IwVTUQhQWbP+HVigTX98Wx+Uow2cRtwi6aiO2caKui9slYsx8tiz+/m+BZdAC/zzHD6cKhs6Nri+NVa/VSraNPsX2d6UFm4FDEayL92UMO2B+JzeSaAErGOtKljKwhfo9aPintlQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=3qWC4dh5y271EKkePEeqAqBX/orWKp70PrWIBrZEmSY=;

b=a2vOxdCgXVljnacthsjYDmdU5mdZvSNd/rCGjj0qzQxBfRU/0x+HjdvBcinoP3s3Om/e9O0D0a3pYnAXCgO57M8uCkdT9ySw7Cw1+tRS+i5ZFM5yrPHRcdF25kZpnJD8AloJnvSjkf5obzmq7+Z9yp2Rb8IV86TXC25R/vXoratHAuGGLvRXZzX4DF8ljluXdqregpT/wK6eRmkEoEdY15mBU7MrI83A5htjXqge86DrVIdTthKZSufCNHNfhH0gArg6hBXN2lTXo2J05wELUW18Lis5napoRzjUDnD39JNdmrPbZqUJZ2d4hOlonUKWz6nDNgrUPUhGwvFoB0c3+A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=pass

action=none header.from=spectorandco.com; dkim=pass

header.d=spectorandco.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=spectorandco.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=3qWC4dh5y271EKkePEeqAqBX/orWKp70PrWIBrZEmSY=;

b=Y8Akdf/mbr7jWoWHySDNRar3xitGUieXzRWhrBbLjcZfyDD/5znWB3/DKzAfA8q8Iy4xDLEePj1RoKDG+ItdOtc4TvZOWR6sP63Rssj9JfpHrrtiQXMl9esQDOJmyoM8syY17wde/SmBSxvMnfXE8ZulW5DJIukrtTkWzfGQEYmTnAlpR4yFdXpAWtX2hsO7DZH6fY6hDH2TKC2HqsorunCW8Ac0dpXAbEazhZaJFYEKop/DQngyrhGEo779Nw38AK/TMbrGwys6VDchSeiYABymTAz77N7fDGBt7nx43VZGNdqjJxGIA2378WkjIp38Uekl7EbzX3CAxsSbO15Cnw==

Received: from YT3PR01MB9610.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:91::21)

by YQYPR01MB11596.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:c01:a6::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9298.7; Wed, 5 Nov

2025 01:02:06 +0000

Received: from YT3PR01MB9610.CANPRD01.PROD.OUTLOOK.COM ([::1]) by

YT3PR01MB9610.CANPRD01.PROD.OUTLOOK.COM ([fe80::4410:8c56:7496:bd77%6]) with

Microsoft SMTP Server id 15.20.9298.006; Wed, 5 Nov 2025 01:02:06 +0000

From: Timothy Fox

To: Mail Delivery System

Subject: Automatic reply: [EXT] Mail delivery failed: returning message to

sender

Thread-Topic: [EXT] Mail delivery failed: returning message to sender

Thread-Index: AQHcTe/NtXl318tp4UmPDIN+AULwQrTjQ7xv

Date: Wed, 5 Nov 2025 01:02:06 +0000

Message-ID:

<14192cc512364413ab7dcda873f1553c@YT3PR01MB9610.CANPRD01.PROD.OUTLOOK.COM>

References:

<021acd3d-b480-45cc-8cc3-84ef3dfa28fe.50314aa4-f696-433c-b23a-6f617684b6d9.7fb377e4-abc3-40fe-9ba6-65f623c5c6be@emailsignatures365.codetwo.com>

In-Reply-To:

X-MS-Has-Attach:

X-Auto-Response-Suppress: All

X-MS-Exchange-Inbox-Rules-Loop: Timothy@spectorandco.com

X-MS-TNEF-Correlator:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=spectorandco.com;

x-ms-exchange-parent-message-id:

auto-submitted: auto-generated

x-ms-exchange-generated-message-source: Mailbox Rules Agent

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: YT3PR01MB9610:EE_|YQYPR01MB11596:EE_

x-ms-office365-filtering-correlation-id: faf2d7ec-7cb1-4f90-a0d0-08de1c06f0b8

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|50650200027|10070799003|376014|366016|1800799024|1930700014|8096899003|80100003;

x-microsoft-antispam-message-info:

=?utf-8?B?YkRRay9GazZJTmpZbmhvdGVRWm85U1B0aGxTcSsxeFVJK1hhNWVBTHUzU0pB?=

=?utf-8?B?bzFXdWt6ckdCQk9MSGZNeTh1SHhWSFJmc20zV1Y1VVV3YzhNSnRvQnY5cyt2?=

=?utf-8?B?cEl1aWlQK1RZQStJOE5aYmYyYS9PNHoxaXQ0akM3V2wvWlZJUDloVmU3RDZJ?=

=?utf-8?B?MjhmVzhBL0xQZTNyNXFxOE41SU85Wmo4ZmhPejdGRUNTU3hlemU0dnVKSHky?=

=?utf-8?B?U3d1a3RvcjF5VHJKZVByMmlHTURoR1h1bzlnMkVxYTlxMUk0Q3VmN2ZBRnFN?=

=?utf-8?B?aUlURHhQWlVQazd2VUtLSER5azJTTFBwT1dOYnlhdnVYYlJZcmNjSnhhQ0tJ?=

=?utf-8?B?N095MjcyQXBPWW44N3pQb09RZTg0dU8zNGxHQWRvSUptS0k3bUdHRFYreG5G?=

=?utf-8?B?YW5jV0VoZ2JzZ2lvR3hMWDQ2clNjTzRWUE1rQ0hQSXoxTmJ1ZEdXeU0zZWFp?=

=?utf-8?B?WDh1c0VTYVNaU1ZlMUliUGlYVmEzMHFMSWF4WFM3c0JNbU1TMmRvMzU0QW9M?=

=?utf-8?B?Um92SEZaRW9wYVNXaGRVZDFZcHpmOEpYV3BxOFNrd3gxNjZiaW5ycHhONUIw?=

=?utf-8?B?ekFySFlhQk5MMkJvL3BJTzNDY2xBVmNBbTduK20ySGUxRlJTU3ZkV1dkZU5X?=

=?utf-8?B?ZSsxUm9HTHhPTG9uaElPeXJWTEE1dTJNZ0pPUWNlcEt5YVdlWGNHWXlDcEhU?=

=?utf-8?B?VEQ5Yk9UYnRyMHJYS3haNU5oaWVoRWZqNW5XNUNVYUhrb2ViOW9uVlNoVVFK?=

=?utf-8?B?SW5CTFJFeUp4SHRVNlBIOUY4NUc0b3N5UkVGYWpsdnRYcThXSVV5ekFLdHp1?=

=?utf-8?B?NE1VQXlqemFVOHRmNGh0MDBWM0gwamM0a2UwcEtCMGRVV0ZIUjhaaGlDVnll?=

=?utf-8?B?NTNnTVUxZXpZN0szZ2VGRkx5ajFOL3JmWGFvajk5MTdKNGRJZ2k2eVBybXdu?=

=?utf-8?B?aDYxSGpjdmVjUkhRSnFPU1FDUndiQjNmVHVhcFlXb0J1dkxmYjlSNzZ0MllI?=

=?utf-8?B?MlRNRzRBR0NUb3F2K2pxRTQ1NHZiN1lVNXZSWkRxajNaaGpDWm5QOGV2TTFY?=

=?utf-8?B?d3RaUTl1NlZUbDFjbXhEVWFzUllUR0RKYkR5WU1Yc2h1ekxmRWJabUVVV2xj?=

=?utf-8?B?Q3ArbGFUOW9ONEQ0ek5qRSs3L1czVUdoeklHK2hONVBRdFBvTk9mZGlnTzN3?=

=?utf-8?B?bk4vWlFtUTF3ODc3d1Rudy9lNFdsNFNobE43aXluWWZQWUhneW9rT1pJNHNt?=

=?utf-8?B?bTBYWTNhYWRLKzNiTDVMQ1YvTDY1T1lVZHh1eGxrRSthZXZUK1lodzgwakhp?=

=?utf-8?B?OG9BUFJVc0tCcGFSbnU2ZUxCaGFib1lvbkFEc1ZlaFNWa2Rwc0Y1N2ZRRGVT?=

=?utf-8?B?SVdkVFcyTEwzTFNGTlhEVjl5ZjVSeHdaUVNjVUNEZm9BN1lHM1gxb25Ld2lk?=

=?utf-8?B?eEVSR212WVRJa2VPa0U1NWdPUTZkSUZ4WUw2Q1d4ZncyUi9SNjZMdjA4RC9n?=

=?utf-8?B?WmgxdjlSMjYrV3NJM0Rpend6aFZnRUtFdWJjbzhQenZJZ1UrWkVEcWNOZ0VE?=

=?utf-8?B?bG9heVhSZFQzSU9jbkhuZ0U5Q0c1U3BzQVQxL0c4MTJhbWdvb1c1N2VlVzVp?=

=?utf-8?B?NURvck00bkFDM0NrT0NlNnJZNW1IOXNGM2d2SDdZejJXbWZVeFJaQ05yVmhy?=

=?utf-8?B?aUlISUIrcitPNy9VbENySjBXUFZaaG96ZkdWaWtRdzN5R29ibE9VOFJPS1Uy?=

=?utf-8?B?bk1TTzdab3h2d21QTmk4akI2VG9aS3Mxd0VKUm1HVHJyR3RhcmFLTFBZVkJ3?=

=?utf-8?B?T1pSVG9MWnZtUFVNZnhOaHVTR1A0d2FSOXRjcnRFc0huYytGMWp2d2tnL0Zk?=

=?utf-8?B?TThPdFVyRnlyNVg3SE5PKzdPVTg5S00rSEIxTVNHUm92NXA1Z3NQWS9XMndG?=

=?utf-8?Q?7XKlGTMgOMvq3QEmqOyjREnO4lLU3wMY?=

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:YT3PR01MB9610.CANPRD01.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(50650200027)(10070799003)(376014)(366016)(1800799024)(1930700014)(8096899003)(80100003);DIR:OUT;SFP:1501;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

l2Ms1rZ8EKcI5EY3bLz8YzEyr1/MA4IhoP3ZHNOFmwMiMM/eDvlS6cyQUbABBm+wtmZj43tCWxd1K9HLmLm2tVTCVr4Tycu6oYtmRrIjZJnslz0Db38MqRZt4j/NgCwJ5cgF83HPYTUvkoUTuLithJu1MrZREGH3TqCjNX2jA1kLk3fnLBfVGPIRvxVZkzxCwCyNKKDkM1fXVhym8f6x0wAtw9JuiFLw1/hf+KTrlnOX3wE29YN0DxMcmHh2BHQh5Fz4axoTJInlLVYnzeGpbkIHYW0bOfKvALYo8nZGHWZt6qwDzAOT81o1x5jUho55

Content-Type: multipart/alternative;

boundary="_000_14192cc512364413ab7dcda873f1553cYT3PR01MB9610CANPRD01PR_"

MIME-Version: 1.0

X-OriginatorOrg: spectorandco.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: YT3PR01MB9610.CANPRD01.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-Network-Message-Id: faf2d7ec-7cb1-4f90-a0d0-08de1c06f0b8

X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Nov 2025 01:02:06.6894

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 4b95e993-ed11-48d3-897e-279107ebd42f

X-MS-Exchange-Transport-CrossTenantHeadersStamped: YQYPR01MB11596

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ï»¿Hello - I am out of the office, unable to read or respond

to emails. I will be back in the office - Thursday 11/6.

Content analysis details: (6.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:b01:91:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:b01:91:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:b01:91:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:b01:91:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:b01:91:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:b01:91:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:b01:91:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:b01:91:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[52.102.145.1 listed in will-spam-for-food.eu.org]

[52.102.145.1 listed in will-spam-for-food.eu.org]

[52.102.145.1 listed in will-spam-for-food.eu.org]

[52.102.145.1 listed in will-spam-for-food.eu.org]

[52.102.145.1 listed in will-spam-for-food.eu.org]

[52.102.145.1 listed in will-spam-for-food.eu.org]

[52.102.145.1 listed in will-spam-for-food.eu.org]

[52.102.145.1 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2603:10b6:b01:91:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[2603:10b6:b01:91:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[2603:10b6:b01:91:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[2603:10b6:b01:91:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[52.102.145.1 listed in dnsbl.ahbl.org]

[52.102.145.1 listed in dnsbl.ahbl.org]

[52.102.145.1 listed in dnsbl.ahbl.org]

[52.102.145.1 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2603:10b6:b01:91:0:0:0:21 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2603:10b6:b01:91:0:0:0:21 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2603:10b6:b01:91:0:0:0:21 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2603:10b6:b01:91:0:0:0:21 listed in]

[dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.102.145.1 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.102.145.1 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 FORGED_SPF_HELO No description available.

0.1 OOOBOUNCE_MESSAGE Out Of Office bounce message

Subject: {SPAM?} Automatic reply: [EXT] Mail delivery failed: returning message to

sender

--_000_14192cc512364413ab7dcda873f1553cYT3PR01MB9610CANPRD01PR_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64

77u/SGVsbG8gLQ0KDQpJIGFtIG91dCBvZiB0aGUgb2ZmaWNlLCB1bmFibGUgdG8gcmVhZCBvciBy

ZXNwb25kIHRvIGVtYWlscy4NCg0KSSB3aWxsIGJlIGJhY2sgaW4gdGhlIG9mZmljZSAtIFRodXJz

ZGF5IDExLzYuDQoNClBsZWFzZSBjb250YWN0IEN1c3RvbWVyIFNlcnZpY2UgZm9yIGltbWVkaWF0

ZSBhbnN3ZXJzLg0KQ3VzdG9tZXIgU2VydmljZSBhdCA4ODguMzc3Ljc3MzINCg0KT3VyIEN1c3Rv

bWVyIFNlcnZpY2UgVGVhbSBpcyBiYXNlZCBvbiB0ZXJyaXRvcnksIHBsZWFzZSBzZWUgYmVsb3c6

DQoNCk5vcnRoZXJuIEVhc3QgQ29hc3QNCk1pcmFjbGUgRGF2aWQgbWlyYWNsZUBzcGVjdG9yYW5k

Y28uY29tPG1haWx0bzptaXJhY2xlQHNwZWN0b3JhbmRjby5jb20+ICBFeHQuIDUyODANCg0KU2hh

cm9uIE5peG9uIHNoYXJvbkBzcGVjdG9yYW5kY28uY29tPG1haWx0bzpzaGFyb25Ac3BlY3RvcmFu

ZGNvLmNvbT4gIEV4dC4gNTIwOA0KDQpDdXN0b21lciBTZXJ2aWNlIE1hbmFnZXINCkpvc2llIERp

IFN0YW9sYQ0Kam9zaWVAc3BlY3RvcmFuZGNvLmNvbTxtYWlsdG86am9zaWVAc3BlY3RvcmFuZGNv

LmNvbT4NCkV4dC4gMjQzDQoNCg0KDQoNCg==

--_000_14192cc512364413ab7dcda873f1553cYT3PR01MB9610CANPRD01PR_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64

PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4

bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo

dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo

dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp

dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l

dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg

bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj

ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2

IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy

IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkFwdG9zO30N

CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJIjsNCglwYW5vc2UtMToyIDExIDUg

MiA0IDIgNCAyIDIgMzt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5v

c2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5N

c29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCWZv

bnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IkFwdG9zIixzYW5zLXNlcmlmOw0KCW1zby1s

aWdhdHVyZXM6c3RhbmRhcmRjb250ZXh0dWFsO30NCnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1z

dHlsZS10eXBlOnBlcnNvbmFsLWNvbXBvc2U7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsc2Fucy1z

ZXJpZjt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTt9DQpA

cGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEu

MGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7

fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSIjNDY3ODg2

IiB2bGluaz0iIzk2NjA3RCIgc3R5bGU9IndvcmQtd3JhcDpicmVhay13b3JkIj4NCjxkaXYgY2xh

c3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1hdXRv

c3BhY2U6bm9uZSI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90Oyxz

YW5zLXNlcmlmIj7vu788L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m

YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5IZWxsbyAtPC9zcGFuPjxvOnA+

PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtYXV0b3NwYWNlOm5v

bmUiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h

cmdpbi10b3A6NS4wcHQ7dGV4dC1hdXRvc3BhY2U6bm9uZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6

ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5JIGFt

IG91dCBvZiB0aGUgb2ZmaWNlLCB1bmFibGUgdG8gcmVhZCBvciByZXNwb25kIHRvIGVtYWlscy48

L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu

LXRvcDo1LjBwdDt0ZXh0LWF1dG9zcGFjZTpub25lIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxw

IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlO3RleHQtYXV0b3NwYWNl

Om5vbmUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh

bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+SSB3aWxsIGJlIGJhY2sgaW4gdGhl

IG9mZmljZSAtIFRodXJzZGF5IDExLzYuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9

Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGU7dGV4dC1hdXRvc3BhY2U6bm9uZSI+

PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOzwv

c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1

dG9zcGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom

cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlBsZWFzZSBjb250YWN0IEN1c3RvbWVyIFNl

cnZpY2UgZm9yIGltbWVkaWF0ZSBhbnN3ZXJzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs

YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFjZTpub25lIj48Yj48c3BhbiBzdHls

ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt

c2VyaWYiPkN1c3RvbWVyIFNlcnZpY2UgYXQgODg4LjM3Ny43NzMyPC9zcGFuPjwvYj48bzpwPjwv

bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFjZTpub25l

Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp

JnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz

PSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFjZTpub25lIj48Yj48c3BhbiBzdHlsZT0i

Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy

aWYiPk91ciBDdXN0b21lciBTZXJ2aWNlIFRlYW0gaXMgYmFzZWQgb24gdGVycml0b3J5LCBwbGVh

c2Ugc2VlIGJlbG93Ojwvc3Bhbj48L2I+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y

bWFsIiBzdHlsZT0idGV4dC1hdXRvc3BhY2U6bm9uZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8

cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1hdXRvc3BhY2U6bm9uZSI+PGI+PHNwYW4g

c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz

YW5zLXNlcmlmIj5Ob3J0aGVybiBFYXN0IENvYXN0PC9zcGFuPjwvYj48bzpwPjwvbzpwPjwvcD4N

CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBz

dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh

bnMtc2VyaWYiPk1pcmFjbGUgRGF2aWQNCjxzcGFuIHN0eWxlPSJjb2xvcjpibHVlIj48YSBocmVm

PSJtYWlsdG86bWlyYWNsZUBzcGVjdG9yYW5kY28uY29tIj48c3BhbiBzdHlsZT0iY29sb3I6Ymx1

ZSI+bWlyYWNsZUBzcGVjdG9yYW5kY28uY29tPC9zcGFuPjwvYT48L3NwYW4+Jm5ic3A7IEV4dC4g

NTI4MDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0

ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh

bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwv

bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFjZTpub25l

Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp

JnF1b3Q7LHNhbnMtc2VyaWYiPlNoYXJvbiBOaXhvbg0KPHNwYW4gc3R5bGU9ImNvbG9yOmJsdWUi

PjxhIGhyZWY9Im1haWx0bzpzaGFyb25Ac3BlY3RvcmFuZGNvLmNvbSI+PHNwYW4gc3R5bGU9ImNv

bG9yOmJsdWUiPnNoYXJvbkBzcGVjdG9yYW5kY28uY29tPC9zcGFuPjwvYT48L3NwYW4+Jm5ic3A7

IEV4dC4gNTIwODwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0

eWxlPSJ0ZXh0LWF1dG9zcGFjZTpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm

b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48

bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWF1dG9zcGFj

ZTpub25lIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv

dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkN1c3RvbWVyIFNlcnZpY2UgTWFuYWdlcjwvc3Bh

bj48L2I+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1h

dXRvc3BhY2U6bm9uZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6

JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Kb3NpZSBEaSBTdGFvbGE8L3NwYW4+PG86

cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1hdXRvc3BhY2U6

bm9uZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs

aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsdWUiPjxhIGhyZWY9Im1haWx0bzpqb3NpZUBz

cGVjdG9yYW5kY28uY29tIj48c3BhbiBzdHlsZT0iY29sb3I6Ymx1ZSI+am9zaWVAc3BlY3RvcmFu

ZGNvLmNvbTwvc3Bhbj48L2E+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv

bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7Jm5ic3A7Jm5i

c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7

Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i

c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7

Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i

c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7

Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i

c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7

Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i

c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7

Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w

Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtYXV0b3NwYWNlOm5vbmUiPjxzcGFu

IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss

c2Fucy1zZXJpZiI+RXh0LiAyNDM8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv

Tm9ybWFsIiBzdHlsZT0idGV4dC1hdXRvc3BhY2U6bm9uZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6

ZTo4LjBwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlmIj4mbmJz

cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4

dC1hdXRvc3BhY2U6bm9uZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y

bWFsIiBzdHlsZT0idGV4dC1hdXRvc3BhY2U6bm9uZSI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8

cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1hdXRvc3BhY2U6bm9uZSI+PHNwYW4gc3R5

bGU9ImZvbnQtc2l6ZTo4LjBwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5z

LXNlcmlmIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwv

aHRtbD4NCg==

--_000_14192cc512364413ab7dcda873f1553cYT3PR01MB9610CANPRD01PR_--

ine-height:19px;color:#ffffff;font-weight:bold"> MESSAGE CONFIRMATION

ine-height:19px;color:#ffffff;font-weight:bold"> MESSAGE CONFIRMATION

ine-height:19px;color:#ffffff;font-weight:bold"> MESSAGE CONFIRMATION

le=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 70= 0;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Cu=C3=A1ndo h2>

: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-= smoothing: antialiased;margin: 0; padding: 0;">Organizador

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;= font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;= ">Invitados

-center tabindex=3D-1 style=3Doutline:none> Tax Documentation Update =E2=80=94 W-8BEN Renewal Not= ice

ine-height:19px;color:#ffffff;font-weight:bold">

MESSAGE CONFIRMATION

ine-height:19px;color:#ffffff;font-weight:bold">

MESSAGE CONFIRMATION

ine-height:19px;color:#ffffff;font-weight:bold">

MESSAGE CONFIRMATION

le=3D"font-size: 14px;color: #3c4043; text-decoration: none;font-weight: 70=

0;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;">Cu=C3=A1ndo
h2>

: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-font-=

smoothing: antialiased;margin: 0; padding: 0;">Organizador

imary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration: none;=

font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; padding: 0;=

">Invitados

-center tabindex=3D-1 style=3Doutline:none>

Tax Documentation Update =E2=80=94 W-8BEN Renewal Not=

ice