X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 21:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7Ppm-00000000KyD-0hsP

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 21:32:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 21:32:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f104.google.com ([209.85.208.104]:44086)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7OvX-00000000IgL-294q

for sales@nk.ca;

Mon, 30 Mar 2026 20:34:07 -0600

Received: by mail-ed1-f104.google.com with SMTP id 4fb4d7f45d1cf-66a33f61d80so8649029a12.0

for ; Mon, 30 Mar 2026 19:33:12 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=smartdevelopersworld.com; s=google; t=1774924385; x=1775529185; darn=nk.ca;

h=mime-version:organization:date:subject:to:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=5pextSW+ipokXTghAOHH2hi3kS4YtYZxaaxn9TUrE4I=;

b=OsDxkC71h/GeVzLnxrjITDRotLC5V1moZ5E3iZvEZNl2KKsWBIf0D9o8OjPfbvZAVE

RVUhVAyWpv1KkN1QmK61HuGkzzwSn3jOwzGGAXIT22r4WXH7eqy8tjU0lQ/xl/UaOLNp

YJHPGnkXjU/b78Jyn9Nq2jAqMb9O+jQspZ45N3Nbe/gim99yCDvgHcleh7LhmmTjEs7N

6nC0V7NYLWvMKx8TXEbue5TQ4gYjUDm7IyxfwF6DrBd9bnM0G2MmvsITvWpEvFJICOhL

o2FbBLQSpZiuPph5wWjAeuJYr85E1xiu3Lu2h2LnNSqUu9r0hGOZNlm837gZ6XVv/L2D

sjUw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1774924385; x=1775529185;

h=mime-version:organization:date:subject:to:from:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=5pextSW+ipokXTghAOHH2hi3kS4YtYZxaaxn9TUrE4I=;

b=dcEEb5BDNX1u9d/4x8WPBa6pidSc3OjklMsl9qFdr3UaDMMOLJuqaImvP/Oy61h4sQ

C6o3YCzQPdB/g+5QXh4MGpy7mTIQqzvdXHgvOhLgQafphhwxlgJEz7B6KSXeaXRshA/P

hUpQwos+yy8mZYgPB8/AZqzxC2d6LT9zRCyQAf1BhVtAOWrrKpiRig250ed01uYo7MH5

3HEbToGdK0lQHQ4yIuTdjM0VX9gr9j5MK71rmRXQNVYv6GWx00rS6CjDJWY1H114qg+R

5g8wqrK6FWHS2KXpIpzi0CuHH5K5q5Y0l9PpeZzfypAogOZku6eVZyLr++XrmGVJwGPS

mVcA==

X-Gm-Message-State: AOJu0YzFhTKrNsDoPzAofNnnkauC9q/oZmW1MBOkUcMfRyxw0nt8Amzf

9IIeCqIrsfxO55ZCrmqVZuwiOkV339iB+FntctgoqSbxcwFFGgLhz8+NijpFMQmKPTWSQWiQKA1

pMPsyUymlq3SDqqG8JUoL3lejECChhSxGYJCnbA18ylSQK6qbV9wXT60YrJRgv134WvvLiKB95w

5xD7wocyz7L843JT63mYX+eOmCe6lfxQ8a2xw7xoIoa7+2O9KMP3x4WHxX248aTcjiTjjVnXGmK

hJ6+hee0Lxmh8uF0EWo+p0=

X-Gm-Gg: ATEYQzzU9vi+fA/JEdiM3ePBnkm6hDz1XHASKP+R2F061JbKDcBZzH/hSsjAmF/9/fV

Ig6jJ8bxP0tIc3ZOPtc4UgZ0aMhGR8ySYlr4btnmLK9bLHjpK93Crb8LNCb6hW1DPWHe1erH/w8

8gww0Qwqn/S91yHja7dWGJt4d8YftnC+/kZHBO7r9DqevvDGLtKnuWSO/gVvfgs4CQrJ2Db3mZ2

gIv8Lj87naet5GvOEaK3EHwwWjUnpqUg9jOiCqVaSZXQX5xPJ46O6Ak8VPtr1pMmegwoD3fPbYH

Y9KiUNYkmXQ6kWoZq9jkmjjf7KfcAoyzQXn6gENsHq5Gub9ZBSWKfCuQJ1ig4XLFDLOcVYmyS+3

mRrCXYf2j9wHo6KWo61f/X7h4r2lUHpwXRGb82PV9

X-Received: by 2002:a05:6402:21da:b0:668:2375:e36a with SMTP id 4fb4d7f45d1cf-66b28c6e533mr7594291a12.22.1774924385234;

Mon, 30 Mar 2026 19:33:05 -0700 (PDT)

Received: from 127.0.0.1 ([185.105.111.185])

by smtp-relay.gmail.com with ESMTPS id 4fb4d7f45d1cf-66baa6830a5sm394725a12.13.2026.03.30.19.33.04

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 30 Mar 2026 19:33:05 -0700 (PDT)

X-Relaying-Domain: smartdevelopersworld.com

Message-ID:

From: Kate Smith

To: sales@nk.ca

Subject: AI/ML engineers - 10-day start, no placement fee

Date: Tue, 31 Mar 2026 05:33:02 +0300

Organization: Smart Brain Corp.

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="a0f9b01bf268426a59f3ba7e3afc13298821"

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Dave, Reaching out because we have 3 senior Python/ML engineers

available right now - Canadian timezone overlap, vetted, ready to join your

team in 10 business days. No commitment at signing. Monthly contra [...]



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.104 listed in dnsbl.ahbl.org]

[209.85.208.104 listed in dnsbl.ahbl.org]

[209.85.208.104 listed in dnsbl.ahbl.org]

[209.85.208.104 listed in dnsbl.ahbl.org]

[185.105.111.185 listed in dnsbl.ahbl.org]

[185.105.111.185 listed in dnsbl.ahbl.org]

[185.105.111.185 listed in dnsbl.ahbl.org]

[185.105.111.185 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.104 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.104 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.104 listed in will-spam-for-food.eu.org]

[209.85.208.104 listed in will-spam-for-food.eu.org]

[209.85.208.104 listed in will-spam-for-food.eu.org]

[209.85.208.104 listed in will-spam-for-food.eu.org]

[209.85.208.104 listed in will-spam-for-food.eu.org]

[209.85.208.104 listed in will-spam-for-food.eu.org]

[209.85.208.104 listed in will-spam-for-food.eu.org]

[209.85.208.104 listed in will-spam-for-food.eu.org]

[185.105.111.185 listed in will-spam-for-food.eu.org]

[185.105.111.185 listed in will-spam-for-food.eu.org]

[185.105.111.185 listed in will-spam-for-food.eu.org]

[185.105.111.185 listed in will-spam-for-food.eu.org]

[185.105.111.185 listed in will-spam-for-food.eu.org]

[185.105.111.185 listed in will-spam-for-food.eu.org]

[185.105.111.185 listed in will-spam-for-food.eu.org]

[185.105.111.185 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.7 SARE_RECV_SUSP_3 Dotquad hostname doesn't match HELO dotquad.

0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.104 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} AI/ML engineers - 10-day start, no placement fee



--a0f9b01bf268426a59f3ba7e3afc13298821

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable



Hi Dave,



Reaching out because we have 3 senior Python/ML engineers available right=

now=C2=A0- Canadian timezone overlap, vetted, ready to join your team in=

10 business days. No commitment at signing. Monthly contract, cancel any=

time.



Worth a 20-min call this week?



Best,

Kate Smith



P.S. Forbes recently featured our CEO=E2=80=99s insights on Hybrid Team E=

fficiency:

https://www.forbes.com/councils/forbestechcouncil/2022/02/01/a-step-into-=

hybrid-teams-how-to-make-your-business-more-efficient/?40450934-622334



--a0f9b01bf268426a59f3ba7e3afc13298821

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable










0">




MARGIN: 0px; PADDING-RIGHT: 0px; BACKGROUND-COLOR: #ffffff">

ial, sans-serif; COLOR: #000000; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; P=

ADDING-LEFT: 0px; LINE-HEIGHT: 1.5; PADDING-RIGHT: 0px">

Hi Dave,

Reaching out because we have 3 senior P=

ython/ML engineers available right now - Canadian timezone overlap, =

vetted, ready to join your team in 10 business days. No commitment at sig=

ning. Monthly contract, cancel anytime.

Worth a 20-min call this week?

Best,
Kate Smith

P.S. Forbes recently featured our CEO=E2=

=80=99s insights on Hybrid Team Efficiency:

" href=3D"https://www.forbes.com/councils/forbestechcouncil/2022/02/01/a-=

step-into-hybrid-teams-how-to-make-your-business-more-efficient/?40450934=

-622334">https://www.forbes.com/councils/forbestechcouncil/2022/02/01/a-s=

tep-into-hybrid-teams-how-to-make-your-business-more-efficient/?40450934-=

622334

--a0f9b01bf268426a59f3ba7e3afc13298821--

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 31 Mar 2026 06:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7YMf-00000000KzY-1eUc

for dave@doctor.nl2k.ab.ca;

Tue, 31 Mar 2026 06:38:37 -0600

Resent-From: The Doctor

Resent-Date: Tue, 31 Mar 2026 06:38:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.csmekhm.hu ([84.206.66.86]:43430)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7S34-000000000ri-0hoN

for sales@nk.ca;

Mon, 30 Mar 2026 23:54:06 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=csmekhm.hu;

s=default; t=1774924705;

bh=xOmJOUtzmXWGK2cxq5dsXxSREWBqn4RFu4O/X+XmjCM=;

h=Date:From:To:Reply-To:From;

b=0ll+NzNdLrMP0At8886adIGdzDeA7OCHr9QSrwdMkE1DMvqMWUMuD2yntApYXY0i3

iCKKzDoEotybY6B0NvCtgg/E8ioaj5Q3SsajTnVFarCUdtsHeaRGsvTdIx+jUDd7Or

UyCGDuc1uMyDkJ0vkP+HfANUrBHwudHF0wXqhJ4w=

Received: from localhost (localhost [127.0.0.1])

by mail.csmekhm.hu (Postfix) with ESMTP id CB89842722D;

Tue, 31 Mar 2026 04:38:24 +0200 (CEST)

Received: from mail.csmekhm.hu ([127.0.0.1])

by localhost (mail.csmekhm.hu [127.0.0.1]) (amavisd-new, port 10026)

with LMTP id okVOpnw_e5G7; Tue, 31 Mar 2026 04:38:24 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=csmekhm.hu;

s=default; t=1774924230;

bh=xOmJOUtzmXWGK2cxq5dsXxSREWBqn4RFu4O/X+XmjCM=;

h=Date:From:To:Reply-To:From;

b=yojRU7/Ftqizp51mS2+faVDIXEuQL6Oz67ptjsoGShCXL4zjjbftrTk6xq8nCOkG/

bbeDTaiBepkNKBh5f4ggcnmyDBI6otRAM3onq86FxcOATRhVwW7+2llftnkppjwUUq

5CdO/qNTdf8BFIPPLq0mwsSVpy1LhlM1Mz5de394=

Received: from webmail.csmekhm.hu (localhost [127.0.0.1])

(Authenticated sender: foldinszki.monika@csmekhm.hu)

by mail.csmekhm.hu (Postfix) with ESMTPA id 4E209426FA1;

Tue, 31 Mar 2026 04:29:34 +0200 (CEST)

MIME-Version: 1.0

Date: Tue, 31 Mar 2026 05:29:34 +0300

From: Rowell

To: undisclosed-recipients:;

Reply-To: hambrickrowell60@gmail.com

Mail-Reply-To: hambrickrowell60@gmail.com

Message-ID: <62b3bc3c0821c9a0feeaec28aefec072@csmekhm.hu>

X-Sender: foldinszki.monika@csmekhm.hu

Content-Type: text/plain; charset=US-ASCII;

format=flowed

Content-Transfer-Encoding: 7bit

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Do you get my mail



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 MISSING_SUBJECT Missing Subject: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[84.206.66.86 listed in dnsbl.ahbl.org]

[84.206.66.86 listed in dnsbl.ahbl.org]

[84.206.66.86 listed in dnsbl.ahbl.org]

[84.206.66.86 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[84.206.66.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[84.206.66.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[84.206.66.86 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[84.206.66.86 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[84.206.66.86 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[84.206.66.86 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[84.206.66.86 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[84.206.66.86 listed in bl.score.senderscore.com]

2.1 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)

[84.206.66.86 listed in bl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[hambrickrowell60(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 ODD_FREEM_REPTO Has unusual reply-to header

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

Subject: {SPAM?}







--

Do you get my mail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 31 Mar 2026 06:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7YMf-00000000KzY-1eUc

for dave@doctor.nl2k.ab.ca;

Tue, 31 Mar 2026 06:38:37 -0600

Resent-From: The Doctor

Resent-Date: Tue, 31 Mar 2026 06:38:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.csmekhm.hu ([84.206.66.86]:43430)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7S34-000000000ri-0hoN

for sales@nk.ca;

Mon, 30 Mar 2026 23:54:06 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=csmekhm.hu;

s=default; t=1774924705;

bh=xOmJOUtzmXWGK2cxq5dsXxSREWBqn4RFu4O/X+XmjCM=;

h=Date:From:To:Reply-To:From;

b=0ll+NzNdLrMP0At8886adIGdzDeA7OCHr9QSrwdMkE1DMvqMWUMuD2yntApYXY0i3

iCKKzDoEotybY6B0NvCtgg/E8ioaj5Q3SsajTnVFarCUdtsHeaRGsvTdIx+jUDd7Or

UyCGDuc1uMyDkJ0vkP+HfANUrBHwudHF0wXqhJ4w=

Received: from localhost (localhost [127.0.0.1])

by mail.csmekhm.hu (Postfix) with ESMTP id CB89842722D;

Tue, 31 Mar 2026 04:38:24 +0200 (CEST)

Received: from mail.csmekhm.hu ([127.0.0.1])

by localhost (mail.csmekhm.hu [127.0.0.1]) (amavisd-new, port 10026)

with LMTP id okVOpnw_e5G7; Tue, 31 Mar 2026 04:38:24 +0200 (CEST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=csmekhm.hu;

s=default; t=1774924230;

bh=xOmJOUtzmXWGK2cxq5dsXxSREWBqn4RFu4O/X+XmjCM=;

h=Date:From:To:Reply-To:From;

b=yojRU7/Ftqizp51mS2+faVDIXEuQL6Oz67ptjsoGShCXL4zjjbftrTk6xq8nCOkG/

bbeDTaiBepkNKBh5f4ggcnmyDBI6otRAM3onq86FxcOATRhVwW7+2llftnkppjwUUq

5CdO/qNTdf8BFIPPLq0mwsSVpy1LhlM1Mz5de394=

Received: from webmail.csmekhm.hu (localhost [127.0.0.1])

(Authenticated sender: foldinszki.monika@csmekhm.hu)

by mail.csmekhm.hu (Postfix) with ESMTPA id 4E209426FA1;

Tue, 31 Mar 2026 04:29:34 +0200 (CEST)

MIME-Version: 1.0

Date: Tue, 31 Mar 2026 05:29:34 +0300

From: Rowell

To: undisclosed-recipients:;

Reply-To: hambrickrowell60@gmail.com

Mail-Reply-To: hambrickrowell60@gmail.com

Message-ID: <62b3bc3c0821c9a0feeaec28aefec072@csmekhm.hu>

X-Sender: foldinszki.monika@csmekhm.hu

Content-Type: text/plain; charset=US-ASCII;

format=flowed

Content-Transfer-Encoding: 7bit

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Do you get my mail



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 MISSING_SUBJECT Missing Subject: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[84.206.66.86 listed in dnsbl.ahbl.org]

[84.206.66.86 listed in dnsbl.ahbl.org]

[84.206.66.86 listed in dnsbl.ahbl.org]

[84.206.66.86 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[84.206.66.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[84.206.66.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[84.206.66.86 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[84.206.66.86 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[84.206.66.86 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[84.206.66.86 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[84.206.66.86 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[84.206.66.86 listed in bl.score.senderscore.com]

2.1 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)

[84.206.66.86 listed in bl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[hambrickrowell60(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 ODD_FREEM_REPTO Has unusual reply-to header

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

[84.206.66.86 listed in will-spam-for-food.eu.org]

Subject: {SPAM?}







--

Do you get my mail

MCSnet

MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .

Nucleus Internet Services

After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .

4Web

4web ranks >2000000 from >2000000 .

Alentus / Wolfpaw

Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000

Yellowpencil

Yellowpencil Ranks >2000000 from >2000000

WSI Corporation

Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.

Uniserve / Interbaun

Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.

Clearwave Broadband

Clearwave Broadband ranks

at >2000000 from >2000000

Platinum Communications

Platinum Communications Corp.

bought out by Xplornet .

Wild Rose Internet

Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet

TIC Internet

TIC Internet

ranks >2000000 from >2000000 ( I do remember you).

Nisa Custom Internet Solutions

Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft

MediaShaker

Media Shakers of Edmonton

ranks >2000000 from >2000000

Koi Media

Koi Media

rank >2000000 from >2000000

WebFire

Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.

Core Network Solutions Inc.

Core Network Solutions Inc.

ranks at >2000000 from >2000000 .

The Network Centre

The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.

Open Concept Internet, Inc.

Open Concept Internet, Inc.

rank > 2000000 from > 2000000

Techalta

Interspots of Edmonton

acquired by Techalta ;

Yegtel

Yegtel rank > 2000000 .

Internet Crossroads

Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!

NetKnow

Netknow now at 11532 from 11284 at Netcraft and pfs compliant



A significant decrease! We must do

1. security audits regularly
2. check on illegitimate traffic hitting the web server


and
3. keep design current!

How do we compare with other providers in

Edmonton, Alberta, Canada?

Telus and reviews

Next we have Telus.com

ranked by Netcraft at 3382 from 3840 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :

• NCIX FORUMS



• DSL Reports

Rogers

Rogers Business Solutions

which rank 5164 from 5176 and are hosted in Europe.

Netknow again

We at Netknow are at 11532 from 18857 since the start of 2026.

Government of Alberta

The Government of Alberta Website

ranks 14649 from 14653 by Netcraft and seems to hosted on Cloudfare.

City of Edmonton

The City of Edmonton ranks 31898 from 32025 by Netcraft and hosted by Google.

University of Alberta

The University of Alberta ranks 46268 from 44957 hosted by Amazon Techonologies.

Juno and NetZero

We have Juno Internet ranked on top

at 348008 from 331467 who are the owners of

US Based Netzero at Netcraft Rank 80054 from 77049 .

NAIT / Northern Alberta Institute of Technology

NAIT ranks 106692 from 107826 hosted by Microsoft .

Grant MacEwen University

MacEwan ranks 111059 from 108851 .

TekSavvy

TekSavvy ranks 313700 from 315402 and are hosted by Microsoft

Shaw Cable

Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 315428 from 317196 and hosted by Akamai in Europe .



Reviews of Shaw are available :

• Rate It All



• Review Stream



• Review Stream Number 2





• DSL reports

Internet Centre / CCINet

Internet Centre

rank 419053 from 421693 . Their partner Rack Nine ranks > 2000000.

Xplornet

xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 456245 from 441685 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.

Distributel / 3Web / CIA

Cybersurf

is ranked 897162 from 1017278 and seems to be hosted in USA by DigitalOcean.

Primus

Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.

Northern lights Fiber

Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.

OkayVPN

OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.

Radiant Communications / goco.ca

Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .

Tera Byte Edmonton and reviews

Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 15:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7JiI-00000000E4A-1SG9

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 14:59:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 14:59:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e226-52.smtp-out.us-east-2.amazonses.com ([23.251.226.52]:60051)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f9494f3-2578c585-35cb-4a9d-94cb-280d37908e4b-000000@us-east-2.amazonses.com>)

id 1w7FVo-00000000HwU-2Aae

for doctor@mail.nl2k.ab.ca;

Mon, 30 Mar 2026 10:30:56 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774888195;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=XmROXhIfikgCvQYb/x4/NfrmYuoNbjN1pg4lKygQ/zY=;

b=I5eO1msW0yGl5jNK5H08tesSAsBB/GhvmMpe5hiLHAdIgtzUli+451AW3ipReKEK

LjPHEceWdAopv/y8EqGMOJVXYEn2uZfq5sFHxubqH5oczXZTTDZgJVLehwfQFYqVvZp

bVyH+jX9zu9HV/3oGyu5SNMkXSUvKbrOw3sJqv5dUnZLzBhRKCYJ/ViYmn5TzmXpZw7

oqUArD0KV2wA2QTZhiDsf7f6rXNbz6+YduCR2YmuSBWf5waTz54NLtLlzA8ZzXVY0Jt

kR2dotstcpGLm4tVsVJr22XSs3ohSKsvxzCU/I3QOjjOUWfbToo6GU9hm1mCX3FqBga

LFJ0cj2zFQ==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774888195;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=XmROXhIfikgCvQYb/x4/NfrmYuoNbjN1pg4lKygQ/zY=;

b=gnQggr5aCsO/XY39llGpG8ff3eYxCR9kj8x0Le/+oia/QLQpD4N4WjB+FbY1PBRU

FR+BDUUPK/g1Nd01Ebq7Z3KzUPQzYwVl5JZQ1F2GBXgJ90vyspBNIDFcZw9YFWfbDvJ

jZ3bwkVdjXptsMrgIj08QwCqPgq0TqCpYqtitwNg=

Date: Mon, 30 Mar 2026 16:29:55 +0000

From: Invoice #025902

To: doctor@mail.nl2k.ab.ca

Message-ID: <010f019d3f9494f3-2578c585-35cb-4a9d-94cb-280d37908e4b-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: e5233453-179c-498c-9127-4a09633cd70d

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.52

X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:639986414836:Geek-Squad-Total-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-safe-browsing-protecti

[...]



Content analysis details: (11.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.52 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[23.251.226.52 listed in wl.mailspike.net]

Subject: {SPAM?} AWS Notification - Subscription Confirmation

You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:639986414836:Geek-Squad-Total-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-safe-browsing-protection-performance-optimization-premium-VPN-Wi-Fi-hotspots-specialists-ready-at-for-management-call-support-8562099547

To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription

Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 15:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7JiI-00000000E4A-1SG9

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 14:59:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 14:59:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e226-52.smtp-out.us-east-2.amazonses.com ([23.251.226.52]:60051)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f9494f3-2578c585-35cb-4a9d-94cb-280d37908e4b-000000@us-east-2.amazonses.com>)

id 1w7FVo-00000000HwU-2Aae

for doctor@mail.nl2k.ab.ca;

Mon, 30 Mar 2026 10:30:56 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774888195;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=XmROXhIfikgCvQYb/x4/NfrmYuoNbjN1pg4lKygQ/zY=;

b=I5eO1msW0yGl5jNK5H08tesSAsBB/GhvmMpe5hiLHAdIgtzUli+451AW3ipReKEK

LjPHEceWdAopv/y8EqGMOJVXYEn2uZfq5sFHxubqH5oczXZTTDZgJVLehwfQFYqVvZp

bVyH+jX9zu9HV/3oGyu5SNMkXSUvKbrOw3sJqv5dUnZLzBhRKCYJ/ViYmn5TzmXpZw7

oqUArD0KV2wA2QTZhiDsf7f6rXNbz6+YduCR2YmuSBWf5waTz54NLtLlzA8ZzXVY0Jt

kR2dotstcpGLm4tVsVJr22XSs3ohSKsvxzCU/I3QOjjOUWfbToo6GU9hm1mCX3FqBga

LFJ0cj2zFQ==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774888195;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=XmROXhIfikgCvQYb/x4/NfrmYuoNbjN1pg4lKygQ/zY=;

b=gnQggr5aCsO/XY39llGpG8ff3eYxCR9kj8x0Le/+oia/QLQpD4N4WjB+FbY1PBRU

FR+BDUUPK/g1Nd01Ebq7Z3KzUPQzYwVl5JZQ1F2GBXgJ90vyspBNIDFcZw9YFWfbDvJ

jZ3bwkVdjXptsMrgIj08QwCqPgq0TqCpYqtitwNg=

Date: Mon, 30 Mar 2026 16:29:55 +0000

From: Invoice #025902

To: doctor@mail.nl2k.ab.ca

Message-ID: <010f019d3f9494f3-2578c585-35cb-4a9d-94cb-280d37908e4b-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: e5233453-179c-498c-9127-4a09633cd70d

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.52

X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:639986414836:Geek-Squad-Total-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-safe-browsing-protecti

[...]



Content analysis details: (11.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.52 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

[23.251.226.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.52 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

[23.251.226.52 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[23.251.226.52 listed in wl.mailspike.net]

Subject: {SPAM?} AWS Notification - Subscription Confirmation

You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:639986414836:Geek-Squad-Total-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-safe-browsing-protection-performance-optimization-premium-VPN-Wi-Fi-hotspots-specialists-ready-at-for-management-call-support-8562099547

To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription

Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 15:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7JhS-00000000E3C-2pXV

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 14:59:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 14:59:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e226-50.smtp-out.us-east-2.amazonses.com ([23.251.226.50]:46551)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f7997ca-574767f5-37e2-4c83-b545-6cf9e99602e5-000000@us-east-2.amazonses.com>)

id 1w7F3G-00000000GaB-3mN8

for root@nl2k.ab.ca;

Mon, 30 Mar 2026 10:01:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774886426;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=4cNv4P0dqRl4JIEs1aTfzq/JO05U0iEmQo+hM9ZkfEA=;

b=B0MnTrbSncT/RkoOCe4kTpJuW1PrqPJ8IUVFLeVECKWmeyvAbG9RMcrb4D3agOKp

baHmgrcYBmFzi1lDUwoDUljOYXoy4qpbUTKqAgbNRxCm6ePe2sEGJiQ4frMBykkGJl6

eUfyHOLuf7MbMU2WmNcpDfmYoGHJHtwUVoNEbgXC6OPZc8k9gX532MbpyFVoRgk7LWY

VzFvqpqctGkPPZTHnRYCOx/YXa4m3XWlRda1IZCTLo8yGSaz14GO0HlzFeSEN2ZYrGy

44UsttxZQiABsTtwM5YTsyAGlhqEaop3Hy+zf4jscm8Gj5ABqAzUbmQoUncdWNieLMJ

sueuE4y0FQ==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774886426;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=4cNv4P0dqRl4JIEs1aTfzq/JO05U0iEmQo+hM9ZkfEA=;

b=Z5YbWgqhTX6QpELzgf1F41so93hASP+D0T1hcIwlvR1CasIBGl9eLNdia2Zg0mKm

avspdu8kJjWhJ3LxlI7S2IwUh8ev9EoyzxPt07b8QsBdUeUz8pbNqa7yMCUAOtz7S3l

jyBSKsO7RxDX/gMRBahy5aBJT4sp4pLsm+45sLC0=

Date: Mon, 30 Mar 2026 16:00:26 +0000

From: Invoice #025876

To: root@nl2k.ab.ca

Message-ID: <010f019d3f7997ca-574767f5-37e2-4c83-b545-6cf9e99602e5-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: 0c0bc2e1-e104-4326-a424-274d1823b2ad

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.50

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:834251004542:Geek-Squad-Gamer-Security-membership-auto-renewed-for-next-2-years-490-USD-securely-charged-full-access-now-active-Take-ad

[...]



Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.50 listed in dnsbl.ahbl.org]

[23.251.226.50 listed in dnsbl.ahbl.org]

[23.251.226.50 listed in dnsbl.ahbl.org]

[23.251.226.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.50 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

[23.251.226.50 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.50 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[23.251.226.50 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[23.251.226.50 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[23.251.226.50 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[23.251.226.50 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[23.251.226.50 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} AWS Notification - Subscription Confirmation

You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:834251004542:Geek-Squad-Gamer-Security-membership-auto-renewed-for-next-2-years-490-USD-securely-charged-full-access-now-active-Take-advantage-of-identity-monitoring-alerts-virus-spyware-protection-plus-password-manager-autofill-Need-anytime-call-help-8562099547

To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription

Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 14:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7JhE-00000000E1Q-3u4f

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 14:58:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 14:58:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e226-54.smtp-out.us-east-2.amazonses.com ([23.251.226.54]:47057)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f6df0ca-c462a42e-6a25-4a33-bb40-9fb721206dcf-000000@us-east-2.amazonses.com>)

id 1w7Eqy-00000000AhG-1cxj

for doctor@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:48:44 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774885663;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=7cZ90zh4w4yHcdbd9Ev5eYvM/dgDg66ng2Otz1tie3o=;

b=AQY/+wSKEbGh6Xy7RnoO9JjXPjhn/MxXWsZjEN2jGhBCaWX3cab0v8Q6FdAaw4Yl

0y9h/Huy2xWZBnmwrzqAMSMMCGcd5hTmQZiW8x1ti9d8sF5u7kMC4Psd3YEfKqt2DrV

Ju26NoR74VhvKf8jHla9eDJ8TaAxwBNU7lDAvDoRcMJmxg2PHn/36/udfN5eZAOT84y

FVsN457hQ2Lk8efQiwJLkzUddVrbf8IZwpgT4Vshrxd9V19RTpEeh6XIEB1cuop/QVg

43dU+qnPnFMN+w//O4fvxFvjBsyBxO13DQoLh7ERNgl90e3zm/vtLaAUcZkJ2XGtD+f

nXct/ThEDw==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774885663;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=7cZ90zh4w4yHcdbd9Ev5eYvM/dgDg66ng2Otz1tie3o=;

b=1RSm85N+nGYKDE3Z5bglYVp+S8wUYHm/pl1gQh8R1QGQoaQVLASeszJ431vWgiiA

YV6Mz4JIKNcyaaaTdYv/pXIRK+xYATg5xzjYmKPNhlH/cySQI7ws9KDlbPp8CvsWcb4

xdjALgvFMyCuS8cM1kQW/UGLZrQXXCsoUafND9S8=

Date: Mon, 30 Mar 2026 15:47:42 +0000

From: Invocie #021600

To: doctor@doctor.nl2k.ab.ca

Message-ID: <010f019d3f6df0ca-c462a42e-6a25-4a33-bb40-9fb721206dcf-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: 0c4ca3f3-d4f5-4bf6-a2f7-b546d8ea5bf8

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.54

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:245650695826:Geek-Squad-Family-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-online-threat-defense

[...]



Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.54 listed in dnsbl.ahbl.org]

[23.251.226.54 listed in dnsbl.ahbl.org]

[23.251.226.54 listed in dnsbl.ahbl.org]

[23.251.226.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.54 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.54 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.54 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

[23.251.226.54 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.54 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[23.251.226.54 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} AWS Notification - Subscription Confirmation

You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:245650695826:Geek-Squad-Family-Protection-auto-renewal-complete-for-2-years-490-USD-charged-service-restored-with-online-threat-defense-identity-monitoring-alerts-premium-virus-spyware-protection-specialists-ready-at-for-management-call-support-8562099547

To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription

Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <010f019d3f5f6588-2ceca567-60c9-4233-b0bb-9a5be11fb347-000000@us-east-2.amazonses.com>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:33:00 -0600

Received: from e226-53.smtp-out.us-east-2.amazonses.com ([23.251.226.53]:60223)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f5f6588-2ceca567-60c9-4233-b0bb-9a5be11fb347-000000@us-east-2.amazonses.com>)

id 1w7Eba-000000009jf-2l4m

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:32:50 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774884709;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=I6ykKO5fH5+RnrhiMWkudZ1ZmkoR93VRD0dc8NAjXYo=;

b=RjUzYtViyz63OfEyXrK65ASRpC8ywFPcEHz+KgDxXzlB/AwHLwgD+/p/THT1VLrx

hmNj3TCWzGh9AZ5kjxGDWB7HlE4Aob2pWhmy4AGdNuHJLZ6UUOG6Ho1lpfP6SM5SzNe

wgKEIVBObcfFbyG1351Fek1U/nVXFcXLyP1yZOXZTZkJNa5hiF+3mc8g4M241ywp49i

zNvhXVnYgalU7IPUmuN5xbsafG4pLeq9G6URtUZA1/l2/9F6quUCXlW1MEsTOIK7Cf0

IRVZobfgEXCzoO4dExRWQn4G/10XigCOgdtgL8DqLVvGjQo6/PVXzK4PHGCDrdr2sR9

pBCbsGlKsw==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774884709;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=I6ykKO5fH5+RnrhiMWkudZ1ZmkoR93VRD0dc8NAjXYo=;

b=wC7VpvtIf5Y2LxQNajvNeCaOxC7qukuQp0J6cdD2m2tmEAQc9o3hgX4X23VZL+Tr

zLd6Kgovu4g/sTEAS3xU1o7HDU0SLeugW7rXhn569wqcg8FrE6IGpLwZ0Q/ec1svAdk

oW1pk/kkCLTWCtxVQTG+Y4XGTi0GT7LFfBnwS6Ss=

Date: Mon, 30 Mar 2026 15:31:49 +0000

From: Invocie #021619

To: dave@doctor.nl2k.ab.ca

Message-ID: <010f019d3f5f6588-2ceca567-60c9-4233-b0bb-9a5be11fb347-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: a9d22442-a34c-4659-a952-d44829e21832

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.53

X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:002904790943:Update-McAfee-Identity-Protection-renewed-2-years-ahead-490-USD-charged-granting-password-manager-autofill-identity-monito

[...]



Content analysis details: (11.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.53 listed in dnsbl.ahbl.org]

[23.251.226.53 listed in dnsbl.ahbl.org]

[23.251.226.53 listed in dnsbl.ahbl.org]

[23.251.226.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.53 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

[23.251.226.53 listed in will-spam-for-food.eu.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.53 listed in list.dnswl.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[23.251.226.53 listed in wl.mailspike.net]

Subject: {SPAM?} AWS Notification - Subscription Confirmation

You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:002904790943:Update-McAfee-Identity-Protection-renewed-2-years-ahead-490-USD-charged-granting-password-manager-autofill-identity-monitoring-alerts-virus-spyware-protection-immediately-Update-settings-cancel-via-24-7-call-support-8562099547

To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription

Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7EpJ-00000000Aeg-2vQR

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:46:53 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:46:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from e226-56.smtp-out.us-east-2.amazonses.com ([23.251.226.56]:37031)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010f019d3f529e36-167663d8-43a9-48ca-92c7-574397af5d4c-000000@us-east-2.amazonses.com>)

id 1w7EO6-000000008hs-1UX4

for root@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:18:54 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=e3mivvcabueua6g7tfebwo26caqq5ypa; d=sns.amazonaws.com;

t=1774883872;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=sr8WD4Oj33tWgjXd8VgkszjCsa4x7/eYxV19vUSqs/M=;

b=qd3ZqF1JdFx3T3MZqmP1XwHXOFvgkBTlF1MHV4x8UduCnpcruQw3TG82SgCiZ3iV

xapey+TRUvC1CKVayOslZE8UIeGfViXnBQo7oHC5wmlvSnZmoUoZCv9TLlXcMYhBa/6

VdP6QXrpWxSKBx+1vhH50AW79yK5sUpwefs1eOR6VLUxRJHmhufMWlsTo752pWLYo5f

sjtSxdvbx81P6tpvfubDCCTD052PheFMSUX/jGppyly3lWIFQM/iOiAzme06thKXz6H

EC0lXykeAuZ2qaNJtElm7NP0l4P1+JBnqf7n/ktBnLg1XILOxe5efCTbHyaG1XNAi9J

vNp4aLp6Ew==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ndjes4mrtuzus6qxu3frw3ubo3gpjndv; d=amazonses.com; t=1774883872;

h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID;

bh=sr8WD4Oj33tWgjXd8VgkszjCsa4x7/eYxV19vUSqs/M=;

b=hgTTKXUi2WBj1x39wS8hgTwbf4DkgFyAfDpgpAd15cIiW8JBrxxc2CAy95/Mlrpo

DXViD3UJ2c8baXT70PrbsijTmwnYePx7Td8U516MDzEhBJ9IwZOLkOAdWJPS91whi5n

IWv8TZpJB7nNnDcCHmdS1TDWQ3bASprrn19k3Rwg=

Date: Mon, 30 Mar 2026 15:17:52 +0000

From: Invocie #021609

To: root@doctor.nl2k.ab.ca

Message-ID: <010f019d3f529e36-167663d8-43a9-48ca-92c7-574397af5d4c-000000@us-east-2.amazonses.com>

Subject: AWS Notification - Subscription Confirmation

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit

x-amz-sns-message-id: 562b06ab-20a2-4404-9ee4-e8c406c53e26

Feedback-ID: ::1.us-east-2.au9SDFHNnZUTWC9L0/qzeelAPnlWjuAjGTIjEyD+UeE=:AmazonSES

X-SES-Outgoing: 2026.03.30-23.251.226.56

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have chosen to subscribe to the topic: arn:aws:sns:us-east-2:409953609051:Your-McAfee-Identity-Protection-plan-extended-2-years-ahead-490-USD-charged-immediate-safe-browsing-protection-encrypted-s

[...]



Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.251.226.56 listed in dnsbl.ahbl.org]

[23.251.226.56 listed in dnsbl.ahbl.org]

[23.251.226.56 listed in dnsbl.ahbl.org]

[23.251.226.56 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.251.226.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.251.226.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.251.226.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.251.226.56 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

[23.251.226.56 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[23.251.226.56 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.0 OPT_OUT BODY: No description available.

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[23.251.226.56 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} AWS Notification - Subscription Confirmation

You have chosen to subscribe to the topic:


arn:aws:sns:us-east-2:409953609051:Your-McAfee-Identity-Protection-plan-extended-2-years-ahead-490-USD-charged-immediate-safe-browsing-protection-encrypted-storage-files-virus-spyware-protection-access-restored-Contact-to-manage-subscription-call-8562099547

To confirm this subscription, click or visit the link below (If this was in error no action is necessary):


Confirm subscription

Please do not reply directly to this email. If you wish to remove yourself from receiving all future SNS subscription confirmation requests please send an email to sns-opt-out

Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

[52.101.85.103 listed in dnsbl.ahbl.org]

[52.101.85.103 listed in dnsbl.ahbl.org]

[52.101.85.103 listed in dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.101.85.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:2aa:0:0:0:17 listed in]

[will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

[52.101.85.103 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.101.85.103 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.101.85.103 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Arctic Wolf Dare 2 Compare $50 Offer





Hi Dave,



I have received your request to learn about Arctic Wolf solutions. We are looking forward to having a conversation with my local, experienced representatives to walk you through a 45-minute introduction demo of what we do and who are at Arctic Wolf.



Once the meeting takes place, the e-gift card will be sent to your email for taking the time to learn about us at Arctic Wolf and our solutions.



Wanted to see if you could provide some context for our meeting so the team can tailor the conversation a bit more towards your needs.





Company address & estimated # of employees?

Any cybersecurity initiatives top of mind?

Any tools in place currently?

Preferred technology/security partner?









Cheers,

Dante







Dante Selke / Sales Development Representative – Canada

dante.selke@arcticwolf.com / 507-272-8389



Arctic Wolf Networks Canada Inc.

619 Kumpf Dr

Waterloo, ON, N2V 1K8



Book a Meeting with Me! | Unsubscribe ☹





If you'd like me to stop sending you emails, please click here





------------------------------------------------------------------

This email and any attachments are for the expressed and sole use of the intended recipient(s) and contain information that may be confidential and/or legally privileged. Any disclosure, copying, distribution or use of this communication by someone other than the intended recipient is strictly prohibited. If you are not the intended recipient please delete this email immediately. Any information and services described herein are provided by Arctic Wolf Networks, Inc.

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Mon, 30 Mar 2026 09:02:00 -0600

Received: from mail-westusazon11020103.outbound.protection.outlook.com ([52.101.85.103]:10879 helo=BYAPR05CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7E74-000000001rw-3OXg

for dave@nk.ca;

Mon, 30 Mar 2026 09:01:19 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=BD16Z31gt4a25BYBJKhFlduHMwnCxzHRXrzzsziIP3KTS/HKq8sJIv/ha/HDYzA2IfpGFIBi/55jIXaoL76TcD87yBf60Yhl1BrBWclp4yJKPCXW5gnvQwu7aeAj04poRVaIJLXhqL1xj2bu8JyGKqEZpR5++7+vsyUa+NAzhxck+9fLgZeBLzL6CR9fWs/yQsNZbdyEzWFHKMshyohbFLW4jvpBS60Kd/HnmnJDZ72fuF41kzjG1BbOIDQxvnfIH65PBfB9rUJ5h01cvF1ExhHy7FlR5H2cLSVZZKfQf4w3ns9ME1z915t+eTQpAStay6S86Vd4r5AoqewLi38L5g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=MUeNh7U9oL3cQceTQE4st/yNIROFFN6v4ooxrf3jBDY=;

b=wr2ZRdPqDMNBI3vRVdXSTTB6DZhTDlvevv3M93JH8rxxFeyDmN9JnQ5YX0sfW4hEvSVYA8U9yh+GxLAfOKqSeUAaMGCxMOIopMXIHkWdLYlMdy9D7O08zdshWIQCDuwVoKoSxMin3SsfwqxbiymlHg3lAr29ErNkFgYbEkShszRlAo92UogAq1s7rngIADpfF1FsFC4OMyowlJ02E0pBg/yyB+4pWijkRra58PXPlVkvMaVmWdqdrH1N9DKCyCo133qbtbFUK9M1RiCgcsrKIkOqVf3KRZePqOK4x/W3qY6grSb3QBbwo8BuhaMipBy2Lt40I9o7k2UTfb5M7mebWg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=arcticwolf.com; dmarc=pass action=none

header.from=arcticwolf.com; dkim=pass header.d=arcticwolf.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arcticwolf.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=MUeNh7U9oL3cQceTQE4st/yNIROFFN6v4ooxrf3jBDY=;

b=nHe64bhZLnrRlAvguW+bWWnI0WKeOh2h5bjhLXrNPEttO0AszSeMONEDZq/wihc9+GDrAeU1OJXj5rXnqywjyWwPgE9hSn3XcljqVq67A4TcAU+AthXaXosLwMORVsXpS4+BY4w7qZwzmBmaZvjGzlACnyefOuTyRWNfC+A4Zx8N8A5QoZUHPjhVXcgBF7gVMNB4Aq0nf/PGVGONeJcSYt3T62S4QU7NtmdiMJ22oUx9r9klgeJhy/F2WD632Ve1XgyL2ZGCtcc+RnHYQr2J5RmgzgzViovQwhjOd8XogoUoIt+ORdI7cPmNoh2TWEaZ9BLvh1uGqrDbvSJQCxN66w==

Received: from SN7PR02MB10180.namprd02.prod.outlook.com

(2603:10b6:806:2aa::17) by PH7PR02MB9337.namprd02.prod.outlook.com

(2603:10b6:510:273::7) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9745.28; Mon, 30 Mar

2026 15:00:14 +0000

Received: from SN7PR02MB10180.namprd02.prod.outlook.com

([fe80::9380:61a6:ee81:37be]) by SN7PR02MB10180.namprd02.prod.outlook.com

([fe80::9380:61a6:ee81:37be%5]) with mapi id 15.20.9745.027; Mon, 30 Mar 2026

15:00:14 +0000

From: Dante Selke

To: "dave@nk.ca"

Subject: Arctic Wolf Dare 2 Compare $50 Offer

Thread-Topic: Arctic Wolf Dare 2 Compare $50 Offer

Thread-Index: AQHcv8ZEtb2D7RCDBUqDENElP82UyA==

Date: Mon, 30 Mar 2026 15:00:00 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=arcticwolf.com;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SN7PR02MB10180:EE_|PH7PR02MB9337:EE_

x-ms-office365-filtering-correlation-id: e6bd65b2-5fdf-4040-293a-08de8e6d0ca6

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|376014|3109299003|69100299015|4022899009|366016|1800799024|7049299003|3122999024|38070700021|8096899003|13003099007|18002099003|56012099003;

x-microsoft-antispam-message-info:

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

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SN7PR02MB10180.namprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(3109299003)(69100299015)(4022899009)(366016)(1800799024)(7049299003)(3122999024)(38070700021)(8096899003)(13003099007)(18002099003)(56012099003);DIR:OUT;SFP:1102;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?K0VpUzhTQlRCNUtsK04xM28ycnE3OG5VUHpaRDBockNSMm9BSHdNNnlkV2Qr?=

=?utf-8?B?c0lFQjhmV3B4dVZiN2pGY3FadE5wUGwxaEdiaGRrS2tERWprUWswTXZ1b1lF?=

=?utf-8?B?NEFBVS9yYWVidjR0UEhNZUNScnUxU0lhVmNrOUpGeEVYSGs4MGZQSlF4RmQ2?=

=?utf-8?B?eThKWkp1MHpwZ1I1SXVyL2F5RWIwUnN1dE9JSlZkbGM5UlgrRHJ5YUdtMTZZ?=

=?utf-8?B?NGRyUmd0blZpcDh6TG9iNlV4SlpjRkU3VTVLYUVvWWhqUG5WTmNTb2N2REdV?=

=?utf-8?B?d2VqOWxRc1NtUDd5cnYzbm9jUlJaUEc1elZQM3hsVHZTYXlFb0d2MkFxZVNN?=

=?utf-8?B?aGFHNnhHRzRzbzVoRlUvalZFNlRMZHRsT0FyRWtGUXV1L0pGRXlpd3N4a2ZB?=

=?utf-8?B?ZTlZaVU4b3ZoK1lHenVxekFTS3NOWlJKZTU3a0tJamtyRlZaek5QcWlIY2gy?=

=?utf-8?B?V3BBMnl6TFR4NDNDVjV1S0pGbVN1U3Nvang5MEJPYWRJeGpDRXZNSWZKYS9u?=

=?utf-8?B?UllGT3V2aXcyL3dnVkFpUmxhVGJGR3lRU2xYMFI1Q1k3cktFMTJFNFRWTTZ2?=

=?utf-8?B?Y214cHVMcy9laTh1QW9QTk1IRzdlSFE1MUgzclJzcEhQTTkwTWxnUjdqNEpJ?=

=?utf-8?B?WStSeW9UamNBb0VYYmlVYXd3dlh2T096VnpibDdmUDdHMVl6eHlZK0JvaFR6?=

=?utf-8?B?R01sRjRQbXQzUlJ6MStmbXhlMDhjeG12c3lkRjBWU2RxSGhEaDFEK0RKMVF5?=

=?utf-8?B?UmhnNVlINjNYMWNRZ0oyUkk0OGFDSVpUYmtkZUh1bWo0YU9mQ3lGemxiMmU2?=

=?utf-8?B?dXRaQ3JBK3JDZmZubDZvc2NSWjVhZkczWW1kNlpSZktJaDJlUWMxSjE2K051?=

=?utf-8?B?SGlUYVduNDBvSkwwTkVZVlhOL2NUSUNLM25ORVN1NlpJbEFNejV5RUY5OWhv?=

=?utf-8?B?UkV4blMxZHEzTzhPODMvUGNBOUF2RVlvVUcwSVF0bHFHQzJkQjRCcmNtYnNj?=

=?utf-8?B?bVRTK3BsOCtuMHBleTFrYWhRVU9DeHVMRlJPS2kwNFVDVlV4eEVsUmZjT3ZP?=

=?utf-8?B?QkZhRlVjazVreGliTENOWXdDeDZvMXBwQUo5UUVXKzhwWlJ6L3dkSHE4eUNk?=

=?utf-8?B?TDY5OXpPUVZCeEIxNjNlSkxzYlljQzBCdmFCZnoyOTJXQ0tlem92eERDek91?=

=?utf-8?B?dklHUHloeDFlRDI3eDBJdVUvcEVBdlNHM3RvZzVVZXBOcnI3WUVSM2RVdkl6?=

=?utf-8?B?dFl0TDRHQmJGS3l1R2tLdFUwV0Z3TU0rL0ltSmlSODFoZ0hQMDZscVAyUjRa?=

=?utf-8?B?cEFrUVF1OTMrSk9PT29namdIYjBWUERQVnAybGhyRklFR0htMWQ4eGJHcXRj?=

=?utf-8?B?QjlCSzB4K1dXVm1zcFFHZDUvaXc0OS81cFR4dmJ3cytuenRFZEFEZklRYWcy?=

=?utf-8?B?MzNaVG5RUUhwZ0NHS3dnVWEvOXJ5S3dRdEpubjNjL3FZK1czc0ZZSXlScXlR?=

=?utf-8?B?bFVUblhRZDQ1M1BqTWp2UkNZclJvb2xaYkJSRkUyZzNnYnN6SDc3TVlHQk0v?=

=?utf-8?B?SFlWVTlSN0xzZXpXeXVPdVdMZXBXYk5qSlNFZXZJaW01bHkwd1FHY25WbTZl?=

=?utf-8?B?Sm9COGkwSW5NTmJOY0oyNkk2UGdzNmJQRFJrR2graFhTWU9lOEFLL25JRmRk?=

=?utf-8?B?OWg0ak1wZzAyeE5tMGpqWVhNWG1GQ3U4RXBPblU5R01SQUI5aVFyZG0rNEti?=

=?utf-8?B?REJhcE5haWxJK2s4N1JFSk1VS3JYSWxvbi92ejhmVGVYeFJieXVWdC9hamhY?=

=?utf-8?B?L2g2dWpSbjU0S2JvdFNpd3VXOEc3NCtWZ08wTmtNUTUyUExNUDdNT244MjF6?=

=?utf-8?B?dVp2blEyM3UyS2t3bjB6MTBzakYzOHFkd05RMjBzOG5NK2Y5RXVQeXhtWThE?=

=?utf-8?B?THIrcFNtTE9SMm0zQ0NMcTRiRDkvN2Z3RnhxTkkwQVJaT0tRV01oMFFYSFNq?=

=?utf-8?B?SnpKVXViOEVSeWtUVWZ2dTVuNUF2RTdYakh3Vkt6aFJGaDliVW9teXdBMFdJ?=

=?utf-8?B?KyswV3FDMnBWQXI1RjI2TjExYmY1ak9GdUpZTzBvMWdwUWg0SkZZSFNxSFdJ?=

=?utf-8?B?OVBTVFNNdXg3UHozZ3QzN2JyYkJ1eWRRUFRGVjJxcktEdXYxNUVTbHI4eGlF?=

=?utf-8?B?aFNCMXJyc0h5YWhMT3BqaDdMT1pVclRZdlhKTzVaTzJuSG1jKzBQWWFHelRB?=

=?utf-8?B?MFlKZ3RpN1QyZmk3eEF3RDdKOG5Zd1VzWVVIZVNscXYxUzlQcGp5bzN5akJn?=

=?utf-8?B?SCtoQ242cjZ3cC9IdC92K2pqTmg4YTF0VWlkWStTZ0twUUdaQXdkZz09?=

Content-Type: multipart/alternative;

boundary="_000_SN7PR02MB10180994B68D75ADFA1C7F8438955ASN7PR02MB10180na_"

MIME-Version: 1.0

X-OriginatorOrg: arcticwolf.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SN7PR02MB10180.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: e6bd65b2-5fdf-4040-293a-08de8e6d0ca6

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Mar 2026 15:00:14.7522

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 066bffcc-c53d-4584-a5b7-9b9b750f7b29

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: j0bW9Y8uTId/VrdVpyVuF/V3N7MHmAtGS6PZ7TG89Ab/ml1mLgKKrGbq64hIN65qwg1vF1YrKdmTLwfmIsr9aosDu43NkHehPxITBixtOjo=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR02MB9337

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Dave, I have received your request to learn about Arctic

Wolf solutions. We are looking forward to having a conversation with my local,

experienced representatives to walk you through a 45-minute introducti [...]

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Mar 2026 09:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7Eny-00000000AbA-1oqg

for dave@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 09:45:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 Mar 2026 09:45:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [82.223.245.29] (port=64527)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w7DD6-00000000C30-26TH

for doctor@doctor.nl2k.ab.ca;

Mon, 30 Mar 2026 08:03:32 -0600

From: Rabobank

To: doctor@doctor.nl2k.ab.ca

Subject: Wij hebben opnieuw een ongeautoriseerde toestelregistratie waargenomen

Date: 30 Mar 2026 16:02:30 +0200

Message-ID: <20260330160230.D4EDDD8F24CA0FFE@rabobank.nl>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ongeautoriseerde toestelregistratie Ongeautoriseerde toestelregistratie





Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

[82.223.245.29 listed in dnsbl.ahbl.org]

[82.223.245.29 listed in dnsbl.ahbl.org]

[82.223.245.29 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[82.223.245.29 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

[82.223.245.29 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

3.0 HTML_ENTITY_ASCII Obfuscated ASCII

Subject: {SPAM?} Wij hebben opnieuw een ongeautoriseerde toestelregistratie waargenomen



ING Logo

Ongeautoriseerde toestelregistratie



Op 30 maart 2026 hebben wij een nieuwe toestelregistratie waargenomen op uw rekening. Indien u dit zelf heeft gedaan, kunt u deze melding negeren.

Mutatierapport — CRM

Rabo

Dossier: CRM Mutatierapport

Beheerder: F. Clerqs

Datum: 30.03.2026

Status: In behandeling

Details:

Device: Samsung Galaxy S25, Android 14

Reg.: 30.03.2026 10:42

ISP: Orange Telekom

IP: 91.76.42.180

Locatie: Frankrijk, Paris, FR

IMEI: 3400-8730-7750-09



CRM v4.2 | Export: onbekend



Details van het toestel:



Datum en tijd: 30‑03‑2026 15:42

Device: Samsung Galaxy S25

Ip Adres: 91.76.42.180 (Frankrijk, Parijs, FR)

Browser: Safari

Imei: 3400-8730-7750-09



Uit veiligheidsoverwegingen hebben wij uw rekening per direct onder een verhoogde controle gesteld. Er is ter bescherming van uw gegevens en diensten een monitoring van 24 uur ingeschakeld.



Indien de recent geregistreerde telefoon niet door u is aangemeld of indien u deze activiteit niet herkent, verzoeken wij gelijk contact met ons op te nemen.







Bel ons op +31 20 - 369 299 2 (24/7 bereikbaar)

Nu bellen



Met vriendelijke groet,

Fraude Preventie Specialist – Rabo Nederland

Medewerker: Martijn de Ruiter

ING Symbool





© 2026 Rabo Bank N.V. – Croeselaan 18, 3521 CB Utrecht, Nederland

font-family:Arial, sans-serif;">


cellspacing=3D"0">

20px;"> border-radius:8px; overflow:hidden;"> color:#003366; text-align:center; padding:20px;"> style=3D"margin:0;">CamInspector style=3D"font-size:18px; margin:0;">The ultimate tool for field technicians= and installers. 30px; color: #003366;"> Hi! Tired of spending extra hours on quotations and inspection= reports? CamInspector helps you = capture job details on-site and deliver a = professional PDF with photos, notes, quotation, and = signatures =E2=80=94 right from your phone. =F0=9F=93=B8 Photos and notes per = project stage =F0=9F=93=84 = Quotations with units, margins, and taxes =E2=80=94 and = soon you will be able to geo-locate your suppliers =F0=9F=96=8B=EF=B8=8F Signatures for = client and provider (optional) =F0=9F=93=8C = Custom cover with client information =F0=9F=93=A4 Export and share the PDF = from your device =F0=9F=93=8A CRM = capabilities: classify projects (Editable / Sent / Won / Lost) and= soon you will be able to track performance = =F0=9F=9A=80Are you a materials supplier? Book a demo or = reply to this email and we=E2=80=99ll show you how Cam Inspector can help boost your sales and all the integration = options we have. 30px 0;">Download the app today and create up to 10 projects for = free! margin-top:30px;"> id=3Dcom.australnetworks.caminspector" target=3D"_blank"> ges/generic/en_badge_web_generic.png" = style=3D"width:140px; margin-right:10px; vertical-align: middle;" = alt=3D"Get it on Google Play" /> 46515194?l=3Den-GB" target=3D"_blank"> src=3D"https://developer.apple.com/assets/elements/badges/download-on-the-a= pp-store.svg" style=3D"width:140px; vertical-align: = middle;" alt=3D"Download on the App Store" /> cellspacing=3D"0" style=3D"margin-top:25px;"> role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" style=3D"margin:0= auto;"> align=3D"center" style=3D"padding:6px 0;"> href=3D"https://australnetworks.com/caminspector" target=3D"_blank" style=3D"background-color:#003366; = color:#ffffff; text-decoration:none; padding:12px 20px; border-radius:6px; = display:inline-block; font-weight:bold;"> = =F0=9F=8C=90 Website style=3D"padding:6px 0;"> href=3D"https://australnetworks.com/caminspector/docs/index.html" = target=3D"_blank" style=3D"background-color:#0= 0b0ff; color:#ffffff; text-decoration:none; padding:12px 20px; = border-radius:6px; display:inline-block; font-weight:bold;"> =F0=9F=93=9A Documentation com/caminspector/#contacto" target=3D"_blank" = style=3D"background-color:#28a745; color:#ffffff; text-decoration:none; = padding:12px 20px; border-radius:6px; display:inline-block; = font-weight:bold;"> =F0=9F=93=85 Book a Demo Professionalize your deliverables= and close faster with Cam Inspector. font-size:12px; color:#666;"> If you don=E2=80=99t want to = receive more emails, you can australnetworks.com/track/unsub?email=3Dsales%40nk.ca&lang=3Den" target=3D"_blank" style=3D"color:#666; = text-decoration:underline;"> unsubscribe . style=3D"background-color:#f0f0f0; padding:20px; text-align:center; = font-size:12px; color:#666;"> =C2=A9 2026 Austral Networks = SpA. All rights reserved.

email=3Dsales%40nk.ca&lang=3Den"

alt=3D"" width=3D"1" height=3D"1" =

style=3D"display:none;" />