WEb/SEO/App spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 08 Jul 2026 01:22:00 -0600

Received: from buffalo.ash.relay.mailchannels.net ([23.83.222.24]:57593)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whMay-00000000DPr-0j26

for dave@doctor.nl2k.ab.ca;

Wed, 08 Jul 2026 01:21:34 -0600

X-Sender-Id: hostingeremail|x-authuser|info@digitalranker.ae

Received: from relay.mailchannels.net (localhost [127.0.0.1])

by relay.mailchannels.net (Postfix) with ESMTP id 8607440293D

for ; Wed, 08 Jul 2026 07:20:30 +0000 (UTC)

Received: from de-fra-smtpout1.hostinger.io (100-99-175-78.trex-nlb.outbound.svc.cluster.local [100.99.175.78])

(Authenticated sender: hostingeremail)

by relay.mailchannels.net (Postfix) with ESMTPA id AFD49401BBF

for ; Wed, 08 Jul 2026 07:20:29 +0000 (UTC)

X-Sender-Id: hostingeremail|x-authuser|info@digitalranker.ae

X-MC-Relay: Neutral

X-MailChannels-SenderId: hostingeremail|x-authuser|info@digitalranker.ae

X-MailChannels-Auth-Id: hostingeremail

X-Interest-Ski: 3a3439012d485592_1783495230504_3630678849

X-MC-Loop-Signature: 1783495230504:3490515462

X-MC-Ingress-Time: 1783495230504

Received: from de-fra-smtpout1.hostinger.io (de-fra-smtpout1.hostinger.io

[148.222.55.8])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384)

by 100.99.175.78 (trex/8.0.2);

Wed, 08 Jul 2026 07:20:30 +0000

Received: from Muhammad (unknown [66.102.121.110])

(Authenticated sender: info@digitalranker.ae)

by smtp.hostinger.com (smtp.hostinger.com) with ESMTPSA id 4gw8d72J3cz46gh

for ; Wed, 8 Jul 2026 07:20:27 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=digitalranker.ae;

s=hostingermail-a; t=1783495227;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

to:to:cc:mime-version:mime-version:content-type:content-type;

bh=dyXhHe/1HT8QsfWeTe6gWyhJkdUU/fVV49XwodYLR+A=;

b=agcnjjuQLZkZxPXDH0qsruodAuajGy5UEq6vgc5/jPh0Rb3v58mybZ2p6YEfJfv4lms2xe

A3mYK8DN3OWCaTY9D4Rr/CRtUpXxHN7RAds9PVzmyNIMl3lcCuhCLUGNtGQZk4h9+U2XeQ

kwZxfVgA706ofh5hBLoy2sMWZxnyjsXVa69EPXf3jkmxi+/glEC4aWSwzLKc0CFi+JCKXl

OCfyFyTV3lXKw6tSxd81vl942ng6zg5Zog0SqN/uAInqlf253ouZvLGGLF5l42opMoC1Yt

xq5Jzgl6RMgugqZeR63c7jAR+PrpEOSFRlTF2wmeFZ75+HVQO2tJSMXvxHl+nA==

Return-Receipt-To:

From:

To:

Subject: Guest Posting & Backlink Opportunities for Your SEO Campaigns

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_04AB_01DD0ED4.4BEE0A90"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Ad0OqKEtr0FjKcGETD6MJ9w04YsT+w==

Content-Language: en-us

Disposition-Notification-To:

Date: Wed, 8 Jul 2026 07:20:27 +0000 (UTC)

X-CM-Envelope: MS4xfLpddfE97Dy9MpHKanm9c/+ih92mtXUV77d8njOYw38d93WJ7K5r2KT0MWBaQQ85SxTr6rr31ik9BSA9ICI8auoMS+C5Km+fxXfQUc4exGvF5sSbWK7r LsFwb03GZs/4AQZFYPHdmXCsNjINQSIfOUfzrCjYbt2Ed5p060ONDXwaKfik6mMt0yws/K3QIMKHYQ==

X-CM-Analysis: v=2.4 cv=fr2OZ04f c=1 sm=1 tr=0 ts=6a4dfa3b a=zevg4RpxF0I+qp7Ij8qhdA==:117 a=zevg4RpxF0I+qp7Ij8qhdA==:17 a=DAwyPP_o2Byb1YXLmDAA:9 a=oXKEahFCAAAA:8 a=B6KMzFptAAAA:20 a=0-GVMVYVAAAA:20 a=TfcMdZ2tuSAy9ven4MIA:9 a=CjuIK1q_8ugA:10 a=-FEs8UIgK8oA:10 a=coFBbNDeAAAA:20 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8 a=UrhCsGuSFDsYfvbnq_4A:9 a=1vsyERDJIXn7Dhpw:21 a=gKO2Hq4RSVkA:10 a=UiCQ7L4-1S4A:10 a=hTZeC7Yk6K0A:10 a=frz4AuCg-hUA:10 a=k5yS741xaF-lL316-gfm:22 a=ZT_8zCgGubuJgGonBfBE:22

X-AuthUser: info@digitalranker.ae



This is a multipart message in MIME format.



------=_NextPart_000_04AB_01DD0ED4.4BEE0A90

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



We hope you are doing well.



We are Digital Ranker, a UAE-based guest posting and backlink service

provider. We work with SEO agencies, digital marketers, and businesses

looking for reliable guest post placements, link insertions, and custom

backlink packages.







We have guest posting websites available in UAE, Saudi Arabia, UK, USA, and

other international markets. We also accept both English and Arabic

articles, making our service suitable for regional and global SEO campaigns.



What We Offer



Guest post publishing on niche-relevant websites

Link insertion opportunities on existing articles

Custom backlink packages for agencies and resellers

Do-follow backlinks

Permanent placement

No sponsored tag

Up to 2 links per article

Fast publishing within 24-48 hours

* English and Arabic content accepted



You can view our guest posting service and full website inventory using the

links below:



1- Guest Posting Services





2-


rkNcMkfM/edit?gid=410538523#gid=410538523> Inventory Sheet



We offer flexible pricing depending on the website, niche, and order volume.

If you are working on guest posting, link building, or monthly SEO

campaigns, we would be happy to share suitable options based on your

requirements.







Please share your target country, niche, preferred DA/DR range, and budget,

and we will send you the best available sites from our inventory.







Looking forward to building a long-term business relationship with you.







Best regards,



Digital Ranker



Guest Posting & SEO Backlink Services



UAE-Based Guest Posting Company



Website,

Service Page,


rkNcMkfM/edit?pli=1&gid=410538523#gid=410538523> Inventory Sheet,

WhatsApp

WEb/SEO/App spam Part 2

------=_NextPart_000_04AB_01DD0ED4.4BEE0A90

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 23:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whL5f-000000008il-3TMm

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 23:44:59 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 23:44:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [8.221.36.169] (port=40356 helo=mail-m822136169.xmail.ntesmail.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whJHc-000000001dr-45G7

for sales@nk.ca;

Tue, 07 Jul 2026 21:49:24 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_512584_1711100758.1783482425979"

To: sales@nk.ca

Reply-To: annie@loffepet.cn

Subject: =?UTF-8?B?TkVXIERFU0lHTiBGUk9NIExPRkZFIFBFVCBGQUNUT1JZ?=

X-Priority: 3

MIME-Version: 1.0

Received: from lina@loffepet.cn( [10.139.5.212] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 8 Jul 2026 11:47:05 +0800 (GMT+08:00)

From: Annie

Date: Wed, 8 Jul 2026 11:47:05 +0800 (GMT+08:00)

X-WM-Tid: 0a9f3fd62273d095kusy046e291ea5bf2

Message-ID:





HI,



Hope this email finds you well.



Our factory's strength is cat/dog products-durable, safe, stylish felt designs.

All products hold BSCI, ISO, and FSC certifications.



Advantages:

1. Fast delivery via the factory location

2. Stable quality, competitive prices

3. OEM & ODM customization.



We aim for a trust-based partnership, not just sales. Contact me anytime for catalogs, quotations or discussion.

Looking forward to your reply.



Best Regards,

Annie































Docusign Phish from Google Gmail Part 2





=EF=BB=BF


name=3D"viewport" />

Docusign Phish from Google Gmail Part 3









3D"Logo"
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/email-logo.png" width=3D"116" />






3D""
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.76.=

0/email/iconFileWithCheckWhite.png" width=3D"75" />

A document has been sent for your review



target=3D"_blank">View Document








Please review the attached document at your convenience. Contact the =

sender if you have questions.





This invitation is intended only for the recipient and contains secure =

access information.











Confidential: Do not share this email or link with =

others.









About Docusign: Sign securely and legally in minutes, =

from anywhere.





Need help? Contact the sender or visit our support page=

.









Download the app:
.com/features-and-benefits/mobile" target=3D"_blank"> 3D""
height=3D"18" src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/icon-download-app.png" width=3D"18" />Get =

Docusign





Sent by Ashley Allen via Docusign. To unsubscribe, =

contact the sender.





This message contains =

confidential information. If you are not the intended recipient, please =

delete immediately.











Docusign Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 20:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whHob-00000000M1R-2f3o

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 20:15:09 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 20:15:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f103.google.com ([209.85.216.103]:58499)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whG5m-00000000GtM-0uzf

for games@nl2k.ab.ca;

Tue, 07 Jul 2026 18:24:55 -0600

Received: by mail-pj1-f103.google.com with SMTP id 98e67ed59e1d1-381b831d535so150441a91.0

for ; Tue, 07 Jul 2026 17:23:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sabeng.it; s=google; t=1783470232; x=1784075032; darn=nl2k.ab.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;

b=SCp5xMR1I83OvKRm+V6Wp3eYwUUExN5Q9VDYRizckZ4s/OYk9QddZUdBVQZPd5vomb

3HQmTjjEJj3PHBcUR1yrpDMujlnHMS5+wQgkp0l009veoNroGDcWz5KcIioQflHNkFaN

CRrSx5abWYCDZ9Fa86KAVuphxNAm1cURlXQAw=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783470232; x=1784075032;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;

b=TkMMZjYxZZwkL1hv/VGKg8MtVPlsJkKei7+aP5eUoraYs8ajmkkTO9bnsQmko/lp2k

0+LHx/BoWCDw3mEwRnNdk4xsiDoI+n5B82hH/K2ZdiN832s9K160s7UPufPWZ9mCiRHK

lyHdDgeu3EQKs2fEtdfFFnLiw1VHwD9OU4/Fdw79MxsYK0UxX15aB5Z5HUbV7O2EO5NY

E1I6pGOJUSeoyc+ZxBW40wU1+AIt5ShMTuMsnSLzoRVoVPnoEmoZTc2s847R4CYzmHer

o+EZpzNyeTn4tvSeILJ6+qdxJtmomxa7ZlC2xqHQV0QMZzIRRE7eIDUHCFUZ5+6A6wB2

Nlrw==

X-Gm-Message-State: AOJu0YyeEKcTI6lTKeK7Ra5xgIbiykv94CKDr2XWPggQhjRYYoEjKyvE

W0KYUzZtiWn4iHqRQZpJ0lWIH4hJvkVSkBQfT3NkifSx/1cp5hNNV1o74zgp6CO2822EhswFdhG

RJ0D5yDm01Ql4ggfMM5SF8qaf4nS95E5D1q5TXa+Uv3utUpw=

X-Gm-Gg: AfdE7cmxuk0MU1oaZALI3HZpl4JZOKzcPSGhG8ZgAnZ9EgBtraVy4zZAaJINMWla442

FV0nQlnePz23WP55ls+uzPYqbsHySolG33upmT0rRWWZe08HD8rMMGL1xIlVZOnuK3w2eXF+rm3

QE8/Mc78nUXURY3gJzK/vE1PHuQo6mhmGLGufhV1NWwU//a8ctBAPby7kB/l5aVlRnDviYKO58C

QtvQ0pdfadHP8wSnN17drv7mSDbgctXpCKG2PAIGmx/G5hPsgDuJ3iuKA9baU56EFvUrur6XeKg

jnBMMZh74zvMz4Jr8nSSQdqG28KOW1PmALv9sfoFfrQl9yWgN6VIN+XYHYStl05zCIjZgnb5m3q

MsAK62e4B+Ir99Tu0NQ==

X-Received: by 2002:a17:90b:4a11:b0:366:132:fda7 with SMTP id 98e67ed59e1d1-38940150894mr161299a91.10.1783470232524;

Tue, 07 Jul 2026 17:23:52 -0700 (PDT)

Received: from sabprogetti.com ([192.210.236.148])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-387d3c6bee2sm373673a91.8.2026.07.07.17.23.52

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 07 Jul 2026 17:23:52 -0700 (PDT)

X-Relaying-Domain: sabeng.it

From: "Incoming_Remittance| Scheduled | Online/OU=EXCHANGE ADMINISTRATIVE

GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-51036"



To: games@nl2k.ab.ca

Subject: =?UTF-8?Q?Request_for_Review=3A_Sortcode=2C_Invoic?=

=?UTF-8?Q?e_=26_Payment_Report_=EF=BF=BD_07/07/202?=

=?UTF-8?Q?6_=EF=BF=BD_games=40nl2k=2Eab=2Eca?=

Message-ID: <5e816cae-6587-96bc-848c-39711f4f75a1@sabeng.it>

Content-Transfer-Encoding: quoted-printable

Date: Wed, 08 Jul 2026 00:23:50 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  A document has been sent for your review View Document

Please review the attached document at your convenience. Contact the sender

if you have questions.



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.103 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

[209.85.216.103 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

[209.85.216.103 listed in will-spam-for-food.eu.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.103 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.103 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.103 listed in bl.score.senderscore.com]

Subject: {SPAM?} =?UTF-8?Q?Request_for_Review=3A_Sortcode=2C_Invoic?=

=?UTF-8?Q?e_=26_Payment_Report_=EF=BF=BD_07/07/202?=

=?UTF-8?Q?6_=EF=BF=BD_games=40nl2k=2Eab=2Eca?=

Docusign Phish from Google Gmail Part 3









3D"Logo"
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/email-logo.png" width=3D"116" />






3D""
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.76.=

0/email/iconFileWithCheckWhite.png" width=3D"75" />

A document has been sent for your review



target=3D"_blank">View Document








Please review the attached document at your convenience. Contact the =

sender if you have questions.





This invitation is intended only for the recipient and contains secure =

access information.











Confidential: Do not share this email or link with =

others.









About Docusign: Sign securely and legally in minutes, =

from anywhere.





Need help? Contact the sender or visit our support page=

.









Download the app:
.com/features-and-benefits/mobile" target=3D"_blank"> 3D""
height=3D"18" src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/icon-download-app.png" width=3D"18" />Get =

Docusign





Sent by Ashley Allen via Docusign. To unsubscribe, =

contact the sender.





This message contains =

confidential information. If you are not the intended recipient, please =

delete immediately.











Docusign Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jul 2026 17:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whFRa-00000000EGz-1SII

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jul 2026 17:43:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 Jul 2026 17:43:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f229.google.com ([209.85.214.229]:56404)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1whEfM-00000000I6M-1hvA

for doctor@nk.ca;

Tue, 07 Jul 2026 16:53:36 -0600

Received: by mail-pl1-f229.google.com with SMTP id d9443c01a7336-2cca0c5799eso747575ad.0

for ; Tue, 07 Jul 2026 15:52:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sabeng.it; s=google; t=1783464750; x=1784069550; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;

b=e90ZA+Gol0yXRXQCRjT+RRivkK6H7zgqbGa20p41vBjRC6eKLzvnlOG6kXO9PtDHJ9

pWxiCXrB3TSXkHA29l35b2XN4sGmR/SID4nBhWaBoF47qfsvD59nIUqryitR5tL6Dho9

uaURnz7rKnNe8UXfhb70l1ck/1s/pshiIt5wc=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783464750; x=1784069550;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=EWV8XmCUvffytCAcw2TyXcQCDCinzlDmbMB2SDY4DX4=;

b=tBP39U9kuba+lya+6grO9u2/76PUlYu1l3cGFQTvUacIv5Y/We82xtolkSXF9Ri/8V

HOs+K0CEyp7XZ6N91NhbQ8RGGW+nlVrvFMKse/XhNTAWoOBg3VeEcPKQyWAxCerQ/oem

h8YaEI2f6T4i9XgQLP73i25SsLqVLO3DLM8Av4ePc6dBmOIXBF2DFVV4yr3wzp+LMMbP

6SsYyjGE+7XYK4ANx87pvY+gijTwTdBJDYVQib6loFhLW/sG+xkGIgxDyJbBVZ8fNG+z

l4hBVI9t8/YP5q1fYzY18liRgGS83BcqXXrwVqe01Khq44BFL6z5VPttBUvvsh+m+5Qa

YRgw==

X-Gm-Message-State: AOJu0YxULub1rLrejIy4sJdMc9TRGvlJ0sbRNgL/hn0cK8LjxWu0wcLR

AsfNIMAGcD46AIpPsoJB3RcLSU5vuaT4sz0FRKUMEiAywI0NKcnXa8ViBdunvKatzTYWI1ix0FD

pDv4l5Fl5CpemhZH/lvoJ+t6fTYuRAzHQVkNe73yKyi8Vn8Q=

X-Gm-Gg: AfdE7ckgEKENE6zSoMkgdNudRIeuj62P5YBcRtHJk9o9+QueKd3wpOfdew0fmFhZ4iw

nVplVhod8nWQrqhYr1bwJXoFuyMQZ2nPdogbWbfrufC4R6t2MERU/6biaq4l1JCMKygvLE63X8V

m6m1x26H/ZHJBeYjuvtm5fmSHhEGEFuRhxTJJTrfI7Bvblx3f8kNgZqME5VM/6WSu6Pn5iYyt2c

bi+ta7+b8ZYYh5KKG7QxXxKR3soskmulEhUaEwjEeSZ0mkcPW35Bgjny9hgOhWzfKXv9EGgrTVo

c1lFJT//fRJxtjbOyM2jdBjQ1fBq/nSdZ4r5N8DhFrqVh9UzS92cg3LxELuG9+mlHrZOeAyohsq

9gHkXqQJwu17xhRpgpg==

X-Received: by 2002:a17:902:ebd1:b0:2c9:ed16:8d8d with SMTP id d9443c01a7336-2ccbf1890d3mr68975175ad.38.1783464750587;

Tue, 07 Jul 2026 15:52:30 -0700 (PDT)

Received: from sabprogetti.com ([192.210.236.148])

by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-2ccc9bdd019sm3313665ad.13.2026.07.07.15.52.30

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 07 Jul 2026 15:52:30 -0700 (PDT)

X-Relaying-Domain: sabeng.it

From: "Incoming_Payment | EFT Portal/OU=EXCHANGE ADMINISTRATIVE GROUP

(FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-27559"

To: doctor@nk.ca

Subject: =?UTF-8?Q?Attached_Payment_Report_for_Your_Review_?=

=?UTF-8?Q?=EF=BF=BD_07/07/2026_=EF=BF=BD_doctor=40?= =?UTF-8?Q?nk=2Eca?=

Message-ID: <31213b49-f665-fd68-977f-edfe928d705a@sabeng.it>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 07 Jul 2026 22:52:29 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  A document has been sent for your review View Document

Please review the attached document at your convenience. Contact the sender

if you have questions.



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[209.85.214.229 listed in dnsbl.ahbl.org]

[209.85.214.229 listed in dnsbl.ahbl.org]

[209.85.214.229 listed in dnsbl.ahbl.org]

[209.85.214.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

[209.85.214.229 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.229 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.229 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.229 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Attached_Payment_Report_for_Your_Review_?=

=?UTF-8?Q?=EF=BF=BD_07/07/2026_=EF=BF=BD_doctor=40?= =?UTF-8?Q?nk=2Eca?=

Docusign Phish from Google Gmail Part 2



=EF=BB=BF


name=3D"viewport" />

Docusign Phish from Google Gmail Part 3











3D"Logo"
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/email-logo.png" width=3D"116" />






3D""
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.76.=

0/email/iconFileWithCheckWhite.png" width=3D"75" />

A document has been sent for your review



target=3D"_blank">View Document








Please review the attached document at your convenience. Contact the =

sender if you have questions.





This invitation is intended only for the recipient and contains secure =

access information.











Confidential: Do not share this email or link with =

others.









About Docusign: Sign securely and legally in minutes, =

from anywhere.





Need help? Contact the sender or visit our support page=

.









Download the app:
.com/features-and-benefits/mobile" target=3D"_blank"> 3D""
height=3D"18" src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/icon-download-app.png" width=3D"18" />Get =

Docusign





Sent by Ashley Allen via Docusign. To unsubscribe, =

contact the sender.





This message contains =

confidential information. If you are not the intended recipient, please =

delete immediately.











Docusign Phish from Google Gmail Part 2





=EF=BB=BF


name=3D"viewport" />