Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 22:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK75u-00000000GzM-2rek

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 22:09:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 4 May 2026 22:09:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-125.dm.aliyun.com ([140.205.208.125]:52669)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK6z2-00000000GY9-2pVg

for root@nk.ca;

Mon, 04 May 2026 22:02:19 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip0.clamp.ltd:vip_edm_WebBatch:324942

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip0.clamp.ltd; s=aliyun-cn-hangzhou;

t=1777953670; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=M6WLmA6KXHP62d1nlQqnH1yIga89zm9bfv+fbT7Aue0=;

b=UKxV7FCMKz7FzMKVcgCLNMMtmRIExxD4mgFuNgMnYcNnnjQEFdQIQylj9oizn6BzAjH5s/jfbBrmPnTFbRXwjHZN1rXTOP7oArzZraM5dg5DWAY5sx5/nnTJZa3mL1/EsH6cin+dcJo7N5JamFt6F/EiEnI94MXjvQp032bfmqg=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1777953670; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=M6WLmA6KXHP62d1nlQqnH1yIga89zm9bfv+fbT7Aue0=;

b=VIJQdJEHJDREdUTxvnC2h7C24HGMmD0mXdxE4AnS8vKXPL1kGnJTcodar0QezLMxGg6M44PS3jSrnbrUBeH0w8/ixcUx6WL9brMs0OWOuMYaclm/MYVs6yJBwSxkbgMsm7nbcen5uNvVMA9gNWyI7ynq3dWkG3p1uYZekmI/ZfM=

Received: from chitu-hsf(mailfrom:vip@vip0.clamp.ltd fp:ma_600000296767093570 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Tue, 05 May 2026 12:00:31 +0800

Date: Tue, 05 May 2026 12:00:31 +0800

From: "Vivian"

To:

Reply-To:

Message-ID: <2f08f5e4-22b8-4723-92a8-0fbc10bcb98d@alibaba.com>

Subject: =?UTF-8?B?Um9ja2V0aXMgaG9zZSBjbGFtcCB3aWRlIHJhbmdl?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000296767093577

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, Happy New Year!



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.125 listed in will-spam-for-food.eu.org]

[140.205.208.125 listed in will-spam-for-food.eu.org]

[140.205.208.125 listed in will-spam-for-food.eu.org]

[140.205.208.125 listed in will-spam-for-food.eu.org]

[140.205.208.125 listed in will-spam-for-food.eu.org]

[140.205.208.125 listed in will-spam-for-food.eu.org]

[140.205.208.125 listed in will-spam-for-food.eu.org]

[140.205.208.125 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.125 listed in dnsbl.ahbl.org]

[140.205.208.125 listed in dnsbl.ahbl.org]

[140.205.208.125 listed in dnsbl.ahbl.org]

[140.205.208.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.125 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.125 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.125 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.125 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[140.205.208.125 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.125 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: chvsta.068000.xyz (xyz)]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?B?Um9ja2V0aXMgaG9zZSBjbGFtcCB3aWRlIHJhbmdl?=



Dear =

Sir/Madam,


mily: Calibri;">Happy New Year!

<=

span style=3D"font-family: Calibri;">I am writing to introduce our
an style=3D"color:#548dd4">Hose Clamp
products range if t
n>hey are in your need or fulfill your p=

roducts range, we would like to seek the opportunity to cooperate. Our product=

s covers:


ily: Calibri;">Worm drive cla=

mp, Bolt clamp, Constant tension clamp, Ear clamp, Wire clamp, Rubber clamp et=

c.
 


le=3D"text-wrap-mode: wrap;">With our fu=

ll export capabilites and experience shipping worldwide, we would be happy to =

be your new supplier.


=3D"font-family: Calibri;">For any interest, please feel free to reach out for=

more information.


"text-wrap-mode: wrap;">
5de179a243ea88d31afcbffa7fd4613.jpg"/>

<=

img src=3D"https://s1.imagehub.cc/images/2025/12/15/735709f847694006b14bbd1288=

e5713c.jpg"/>


: Calibri;">Best regards,


tyle=3D"font-family: Calibri;">Vivian Zhang


de: wrap;">TIANJIN ROCKETIS TECHNOLOGY C=

O.,LTD


: Calibri;">D1-403, XEDA Testing and Certification Park, Xiqing District, Tian=

jin, China



Metamask phish from nxcli

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 05 May 2026 06:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wKEZA-00000000Gyb-1muf

for dave@doctor.nl2k.ab.ca;

Tue, 05 May 2026 06:07:56 -0600

Resent-From: The Doctor

Resent-Date: Tue, 5 May 2026 06:07:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-5807391.uk-south-2.nxcli.net ([165.84.218.145]:27518)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK7Ns-00000000HSX-1kE0

for sales@nk.ca;

Mon, 04 May 2026 22:27:57 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=default; d=9d02a74209.nxcli.io;

b=sYhgKi5j6wRLUOIG24Mdi+uB9ZnudT+3vdavVu9F0oyqbr/9kdIwjJLvfGK/SBPo5TO3rQYwcL/NKd/9VVbKcmcfqXlq0QSkFXmD1fI1BkIQjPTcy9tZWg50jSIIK0QXz+YOM3Q/vq0831bgpk/Pwd3VrfzAehMUz+/c08Ec3ddAK1RXshD10AUm3skuCd6KRQBYUAPyVRHS/jiZ8UEgiIdwXybqFJjnbnx/oU1iDgUWtSj3RHRQyrA68BU8Er6NJpYAVlZUE8mzD9nL1AdQkU0gZQqlqDG1AnhDy6He5R9DJFjfBkUppbKM/KvDY0KhVpbBbLEiot4/0UKzloST2A==;

h=Received:To:Subject:X-PHP-Originating-Script:Date:From:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=9d02a74209.nxcli.io; h=

to:subject:date:from:message-id:mime-version:content-type

:content-transfer-encoding; s=default; bh=d6zCWCTXiqooVmN+o+Oa7M

vV7yUBP01UXabubmpmcU8=; b=e0aLbtNdSJdLt5XPZSnSmRDJt5oBJl0PRaeSXw

R1FsYhuOSSq8Q79TV6a5FpRqzpKE0/OWIeWm0K7tf3V7l87sEECBmciBUlywwAtk

2mJRSQeQ15HAmdvbA4wBvUieqDiUgDWmmmFn7wg37vkIzEhices7iQpocK2XMDSZ

SKKIZle6SeG+/QscLeIPpO0Ifwzpvb+Co+4iwmveRBfU8us18zYlI0cJRX9yQ8GX

uNmfeW1yMn762iube2T9FAcTReNLMhJY730boVDi8CiSAu77T3nvIO8dtpeBvMYv

wrqIMYnR/4rAzcaIo9LO7Zxl90iVR9qVc67Rc06LQG8wkVAQ==

Received: (qmail 28950 invoked by uid 10173); 5 May 2026 04:34:52 +0100

To: sales@nk.ca

Subject: New Device/IP Login

X-PHP-Originating-Script: 10173:yo.php

Date: Tue, 5 May 2026 03:34:52 +0000

From: SUPPORT

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_c6787c928b70e59f5cf8a1682d7c99f3"

Content-Transfer-Encoding: 8bit





This is a multi-part message in MIME format.



--b1_c6787c928b70e59f5cf8a1682d7c99f3

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit











MetaMаsk - Review Required













Review Required



Your account was accessed from an unfamiliar IP address.





Check this alert and make sure it was you. If not, please take action immediately to protect your wallet.







Acknowledge Login







Action is recommended if this was not expected.— MetaMаsk Security Team















--b1_c6787c928b70e59f5cf8a1682d7c99f3

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit











MetaMаsk - Review Required















MetaMаsk

Review Required





Your account was accessed from an unfamiliar IP address.





Check this alert and make sure it was you. If not, please take action immediately to protect your wallet.







Acknowledge Login







Action is recommended if this was not expected.

— MetaMаsk Security Team















--b1_c6787c928b70e59f5cf8a1682d7c99f3--



Metamask phish from nxcli

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 22:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK75c-00000000GxU-07bg

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 22:08:56 -0600

Resent-From: The Doctor

Resent-Date: Mon, 4 May 2026 22:08:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-5807391.uk-south-2.nxcli.net ([165.84.218.145]:43552)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK72V-00000000Gcd-3Qxc

for sales@nk.ca;

Mon, 04 May 2026 22:05:52 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=default; d=9d02a74209.nxcli.io;

b=mMHZqOEQJR0i8VKIw8ylyfUoCRqi3y+zpB+w0s13BjrFphZzdq6xBgGHs5nvy53XwRs94OoH3WoAfLtCy+3uvVl+m0Ot+SnzBf0EHQfG1kqOC8SqQd75DrnLqgWeUNDhuHHBLhm0Or3aa1NwbI5YAWBkzAR8K9br6rwRKcAc0virXVVcRWR+n9BclrvA7eUDTauguLKhpMD9tVezgWSVrhaw3dL8EDgW5sCpwWDbJbDixZM9Qbng0Jf7gqFZBToJ9AuzrrNq47K/UEMn4SY24KjN0mboWA5/CwgHVaL9aCnQ300Fv+bnxCdtmmAy1ouHUbrPZOu/YZ/WMqpWBuF0eQ==;

h=Received:To:Subject:X-PHP-Originating-Script:Date:From:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=9d02a74209.nxcli.io; h=

to:subject:date:from:message-id:mime-version:content-type

:content-transfer-encoding; s=default; bh=/hpRvfb/FgKf6RRTa0T9cG

60TegHDapQ2PpWvEIfplE=; b=fyJfcUCMyRfgdI+8luzf9recGKvBVu7uyznjpy

MAGWc5z9rOIyiJNe8XUOvcS5YOQhwG4Kq6vXvNq1khHvCzBIe+IS0Jmnhk+E2pDP

O6UWcVhrnYMimoGu31nVOzEycG8lc2krMcuYWOfiLwkWQFxXSFjQhiWa94wh/UYN

v02HuAzO3K36RfmkSCce7wSUSLz4TamJIPCF1NJfMI22mX+5EpOjsQTTj7IPwd1e

4fUj4Z67JPQrBtBTIKjdfLQ5n6o/EULlF4vWuzzooHHvFv0hPZ2l104BbS+7NTOV

6gxYUPiE0HwP5p96eAtT+YJkLQUbyAp9yi9co8qgdC/a2q2A==

Received: (qmail 21307 invoked by uid 10173); 5 May 2026 04:24:54 +0100

To: sales@nk.ca

Subject: New Device/IP Login

X-PHP-Originating-Script: 10173:yo.php

Date: Tue, 5 May 2026 03:24:54 +0000

From: SUPPORT

Message-ID: <12a799b1285b79561c26c83dcdfe189b@9d02a74209.nxcli.io>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_12a799b1285b79561c26c83dcdfe189b"

Content-Transfer-Encoding: 8bit





This is a multi-part message in MIME format.



--b1_12a799b1285b79561c26c83dcdfe189b

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit











MetaMаsk - Review Required













Review Required



Your account was accessed from an unfamiliar IP address.





Check this alert and make sure it was you. If not, please take action immediately to protect your wallet.







Acknowledge Login







Action is recommended if this was not expected.— MetaMаsk Security Team















--b1_12a799b1285b79561c26c83dcdfe189b

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit











MetaMаsk - Review Required















MetaMаsk

Review Required





Your account was accessed from an unfamiliar IP address.





Check this alert and make sure it was you. If not, please take action immediately to protect your wallet.







Acknowledge Login







Action is recommended if this was not expected.

— MetaMаsk Security Team















--b1_12a799b1285b79561c26c83dcdfe189b--



German language phish from Zendesk

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 21:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK6CS-00000000EE6-1Bd3

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 21:11:56 -0600

Resent-From: The Doctor

Resent-Date: Mon, 4 May 2026 21:11:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-out6.pod28.euc1.zdsys.com ([188.172.138.36]:46394)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK0xQ-00000000KLy-1oyw

for doctor@doctor.nl2k.ab.ca;

Mon, 04 May 2026 15:36:13 -0600

Received: from zendesk.com (unknown [127.0.0.6])

by mta-out15.pod28.euc1.zdsys.com (Zendesk) with ESMTP

id 33610ce1-2de2-47e5-9d01-168e4472f67c

for ;

Mon, 04 May 2026 21:35:10 +0000 (UTC)

Date: Mon, 04 May 2026 21:35:10 +0000

From: Les Petites =?UTF-8?B?RnJhbsOnYWlzZXM=?=

Reply-To: Les Petites =?UTF-8?B?RnJhbsOnYWlzZXM=?=

To: Client

Message-ID:

In-Reply-To:

Subject: Anfrage eingegangen

Mime-Version: 1.0

Content-Type: multipart/alternative;

boundary="--==_mimepart_69f9110ed2e1f_5319c01503677";

charset=utf-8

Content-Transfer-Encoding: 7bit

X-Delivery-Context: automatic-answer-27231069861276

X-Zendesk-From-Account-Id: db24c4a

Auto-Submitted: auto-generated

X-Auto-Response-Suppress: All

X-Mailer: Zendesk Mailer

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zendesk.com;

q=dns/txt; s=zendesk2; t=1777930510;

bh=qZxHEC7M39Be8cyj4L4dQIIah+i6TXYEECwvhw+q1TI=;

h=date:from:reply-to:to:message-id:in-reply-to:subject:mime-version:content-type:content-transfer-encoding;

b=VgXecZHmjCxSQjbxD57O/a9acH1CiWwf0nCPvBSUPz/n9BOjh+belcY60C4npMUSveU2EkjArMxc2kEtminmfKxwEZuvbJIgVJWWNtzQq1ZjKdM6jVp3phZfOLWrABKwrcVBW01LL9UtoKKH0FtefYl2TOwbJh9XqXpi3xG1b8W1cQVXWKmVKGpr6LHmj9CPPFt/FrBa9yR1KWTjkog8Kxr2jcVjKkblTpmrYLIi6iatXAthe/at8qKmCVbkPw2qFrEW4RG9PUipNWL09124XOZjnWoYPtegECCgkZjuZ3Ol07aGKJ5zzPObyhwo3iWcrr9jhbYiTuWpL+g/uvKPtQ==





----==_mimepart_69f9110ed2e1f_5319c01503677

Content-Type: text/plain;

charset=utf-8

Content-Transfer-Encoding: quoted-printable



Ihre Anfrage (21276) ist eingegangen und wird von unserem Supportteam =C3=

=BCberpr=C3=BCft.

Um zus=C3=A4tzliche Kommentare hinzuzuf=C3=BCgen, antworten Sie auf dies=

e E-Mail.





Diese E-Mail ist ein Service von Les Petites Fran=C3=A7aises.





----==_mimepart_69f9110ed2e1f_5319c01503677

Content-Type: text/html;

charset=utf-8

Content-Transfer-Encoding: quoted-printable










" />












ont','Segoe UI','Roboto','Oxygen-Sans','Ubuntu','Cantarell','Helvetica Ne=

ue','Arial','sans-serif'; font-size: 14px; line-height: 1.5; color:#44444=

4;">

Ihre Anfrage (21276) ist eingegangen und wird von unserem Supportt=

eam =C3=BCberpr=C3=BCft.
Um zus=C3=A4tzliche Kommentare hinzuzuf=C3=

=BCgen, antworten Sie auf diese E-Mail.







ont','Segoe UI','Roboto','Oxygen-Sans','Ubuntu','Cantarell','Helvetica Ne=

ue','Arial','sans-serif'; font-size: 12px; line-height: 1.5; color: #4954=

5c; margin: 10px 0 14px 0; padding-top: 10px;">

Diese E-Mail ist ein Service von Les Petites Fran=C3=A7aises. Bereitg=

estellt von
t&utm_content=3DLes+Petites+Fran%C3%A7aises&utm_medium=3Dpoweredb=

yzendesk&utm_source=3Demail-notification" style=3D"color:black;" targ=

et=3D"_blank">Zendesk





=









----==_mimepart_69f9110ed2e1f_5319c01503677--

Nexcess phish from nxcli

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 21:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK6D5-00000000EGq-3oUJ

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 21:12:35 -0600

Resent-From: The Doctor

Resent-Date: Mon, 4 May 2026 21:12:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-2883480.uk-south-2.nxcli.net ([165.84.218.233]:37826)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK3rO-00000000Fnm-49Jr

for sales@nk.ca;

Mon, 04 May 2026 18:42:12 -0600

Comment: DomainKeys? See http://domainkeys.sourceforge.net/

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;

s=default; d=88ea5ffd91.nxcli.io;

b=tFRafEn5MrPWEjLcJR6D7tZU3LcQTdMQu3X4q4MN8Wm8XE0vGeodn0JTcjQgLd4WoBLgnr0Cj8vvJw/pt3J3iRlJL/StNm1znq61VcCWvPbV3IZwVpRPU6+7fXLNQs8eM2Zx8ZeQ8dgSYspV2W2eIWtrg9ipQVBclE6ICHCJ1pallYBUWgdvLIDz0mmy8FV3x9YAtMLMWkrs5XdIRA8xrKbzs6rN46ldgWVWEsIZqHeJQZYVFKY4awyeM2Q7+zIvQbrVRveVJR0eXXMr6sI8M/gVN+6ltQbXIE7bjlG+CtzEWwzCETMwP20jUh08kKiLyNXH5Hyvlff9VpsvhWEkDg==;

h=Received:To:Subject:X-PHP-Originating-Script:Date:From:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding;

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=88ea5ffd91.nxcli.io; h=

to:subject:date:from:message-id:mime-version:content-type

:content-transfer-encoding; s=default; bh=gYljACccz8Wtt1ca0dZkg3

twSrHeotrQAASDsQvsmpo=; b=Me3CJrpDmhmtYQg1/s2WC6m6EmjEUkANjC3pwz

EX4eaOVZJETrJ7LDfebPE4z3Y10blQ/1ByVx+ImZXuMJChx2AhhlpZqkNJkbC4WB

x3u4beQMiWDHeaBgnXBju6Skwob3skhbuST7Xn0DnZKOBgvi7+NDUwbHRTjItzCB

KZDrdc+Pt6JJw/8BLG46ysxHk6RyJgp4CncvMXujdK8KBO00Gl/6j/W/yIsj88Wp

MokxZ211DFIGfuOWvvXxrK3+YPIxjWLz6vMOQ1pia5LvRJHPi7EayMzXcUnFepns

hBVqPMaOckwAy7mMFSU3ETe+xcMWi+RnFf02qenAEwCSvMkg==

Received: (qmail 2044 invoked by uid 10200); 5 May 2026 01:36:30 +0100

To: sales@nk.ca

Subject: To ensure uninterrupted service

X-PHP-Originating-Script: 10200:yo.php

Date: Tue, 5 May 2026 00:36:30 +0000

From: Nexcess

Message-ID: <76f32cd82a2884e96127c686644044b0@88ea5ffd91.nxcli.io>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_76f32cd82a2884e96127c686644044b0"

Content-Transfer-Encoding: 8bit

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Account Billing Notification body, table, td, p, a { background-color:

#ffffff !important; color: #000000 !important; font-family: Arial, sans-serif

!important; } a { color: #1a73e8 !important; text-decoration: underline !import

[...]



Content analysis details: (11.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[165.84.218.233 listed in dnsbl.ahbl.org]

[165.84.218.233 listed in dnsbl.ahbl.org]

[165.84.218.233 listed in dnsbl.ahbl.org]

[165.84.218.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[165.84.218.233 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[165.84.218.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[165.84.218.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[165.84.218.233 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[165.84.218.233 listed in will-spam-for-food.eu.org]

[165.84.218.233 listed in will-spam-for-food.eu.org]

[165.84.218.233 listed in will-spam-for-food.eu.org]

[165.84.218.233 listed in will-spam-for-food.eu.org]

[165.84.218.233 listed in will-spam-for-food.eu.org]

[165.84.218.233 listed in will-spam-for-food.eu.org]

[165.84.218.233 listed in will-spam-for-food.eu.org]

[165.84.218.233 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: nexcess.click]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: nexcess.click]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: www.nexcess.click (click)]

0.6 J_CHICKENPOX_37 BODY: 3alpha-pock-7alpha

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[165.84.218.233 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

1.0 ACCT_PHISHING Possible phishing for account information

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} To ensure uninterrupted service





This is a multi-part message in MIME format.



--b1_76f32cd82a2884e96127c686644044b0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit





Account Billing Notification





body, table, td, p, a {

background-color: #ffffff !important;

color: #000000 !important;

font-family: Arial, sans-serif !important;

}

a {

color: #1a73e8 !important;

text-decoration: underline !important;

}





















Hello,

This is a notification from Nexcess Services regarding

your account billing information.

Our system indicates that some of your billing details are incomplete

or outdated. To ensure uninterrupted service, please review and update

your information.

You can access your account using the link below:

Open Billing Panel



If you need assistance, you may contact our support team at support@Nexcess.net.

Thank you,Nexcess Services – Billing

Department





--b1_76f32cd82a2884e96127c686644044b0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit





Account Billing Notification























Hello,



This is a notification from Nexcess Services regarding

your account billing information.



Our system indicates that some of your billing details are incomplete

or outdated. To ensure uninterrupted service, please review and update

your information.



You can access your account using the link below:



Open Billing Panel



If you need assistance, you may contact our support team at support@Nexcess.net.



Thank you,
Nexcess Services – Billing

Department









--b1_76f32cd82a2884e96127c686644044b0--



German Language phish from Zendek

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 21:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK6CH-00000000EDd-43ky

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 21:11:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 4 May 2026 21:11:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-out8.pod28.euc1.zdsys.com ([188.172.138.38]:49896)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK0xP-00000000KLr-31A2

for doctor@doctor.nl2k.ab.ca;

Mon, 04 May 2026 15:36:12 -0600

Received: from zendesk.com (unknown [127.0.0.6])

by mta-out15.pod28.euc1.zdsys.com (Zendesk) with ESMTP

id 8bbe1a1d-edea-4854-b19f-5b9a43bec737

for ;

Mon, 04 May 2026 21:35:09 +0000 (UTC)

Date: Mon, 04 May 2026 21:35:09 +0000

From: Les Petites =?UTF-8?B?RnJhbsOnYWlzZXM=?=

To: doctor@doctor.nl2k.ab.ca

Message-ID: <69f9110d7ee8a_ad19c01528718_sprut@zendesk.com>

Subject: =?UTF-8?Q?Konto_f=C3=BCr_Les_Petites_Fran=C3=A7aises_aktivieren?=

Mime-Version: 1.0

Content-Type: multipart/alternative;

boundary="--==_mimepart_69f9110d87a51_ad19c015288c7";

charset=utf-8

Content-Transfer-Encoding: 7bit

X-Delivery-Context: verify-email-27231033675164

X-Zendesk-Priority-Mail: Verification Email

X-Zendesk-From-Account-Id: db24c4a

Auto-Submitted: auto-generated

X-Auto-Response-Suppress: All

X-Mailer: Zendesk Mailer

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zendesk.com;

q=dns/txt; s=zendesk2; t=1777930509;

bh=8weK1cRoyr3708D0JJ5J68/0s2ooh5ZzK36CtGENGbY=;

h=date:from:to:message-id:subject:mime-version:content-type:content-transfer-encoding;

b=bZ3RXZ717YSSA+MfYlzsadPEKQF/3Di86m7Pp79MWIT2cHRP2JTcG8waZ9NhaAFvqf+YqE4JUfwtUQpVw9Q1vxoUfWQERp+YztEWZiM9T40ytlgxuNDXJUo1Ee5NLDfcWDXcoY8thaZaF6IX8KjoPhw6dKPpoPFCf1hOQroFY3+jLX+baXAGBDNUbApKzlHw6zbombmK1hhLMx/h6FgaZHRPZFFRrY+9YJnI5CNuD33DDOHt9L+qqEsj1CTzEZNp5G40daet2ZQqaWR8A8QgqNU5iZUwcu8VMYiu3JpqfUj3ljxAKo7ILaJw4wSj0qAVGv84Ilgp9iwc5BceDCZLIw==





----==_mimepart_69f9110d87a51_ad19c015288c7

Content-Type: text/plain;

charset=utf-8

Content-Transfer-Encoding: quoted-printable



Willkommen bei Les Petites Fran=C3=A7aises. Schlie=C3=9Fen Sie Ihre Regis=

trierung ab, um Ihr Konto zu aktivieren und darauf zuzugreifen.



https://lespetitesfrancaises.zendesk.com/verification/email/VOqcky2Z2hboe=

VNee2ntvw6FJOKQYJMo





Wenn Sie sich mit dieser E-Mail-Adresse noch nicht f=C3=BCr Les Petites F=

ran=C3=A7aises registriert haben, k=C3=B6nnen Sie diese E-Mail ignorieren=

.



--------------------------------

Diese E-Mail ist ein Service von Les Petites Fran=C3=A7aises.





----==_mimepart_69f9110d87a51_ad19c015288c7

Content-Type: text/html;

charset=utf-8

Content-Transfer-Encoding: quoted-printable










" />












ont','Segoe UI','Roboto','Oxygen-Sans','Ubuntu','Cantarell','Helvetica Ne=

ue','Arial','sans-serif'; font-size: 14px; line-height: 1.5; color:#44444=

4;">

Willkommen bei Les Petites Fran=C3=A7aises. Schlie=C3=9Fen Sie Ihre R=

egistrierung ab, um Ihr Konto zu aktivieren und darauf zuzugreifen.


/VOqcky2Z2hboeVNee2ntvw6FJOKQYJMo">Konto aktivieren



Wenn Sie sich mit dieser E-Mail-Adresse noch nicht f=C3=BCr Les Petites F=

ran=C3=A7aises registriert haben, k=C3=B6nnen Sie diese E-Mail ignorieren=

.





ont','Segoe UI','Roboto','Oxygen-Sans','Ubuntu','Cantarell','Helvetica Ne=

ue','Arial','sans-serif'; font-size: 12px; line-height: 1.5; color: #4954=

5c; margin: 10px 0 14px 0; padding-top: 10px;">

Diese E-Mail ist ein Service von Les =

Petites Fran=C3=A7aises.
Bereitges=

tellt von
amp;utm_content=3DLes+Petites+Fran%C3%A7aises&utm_medium=3Dpoweredbyz=

endesk&utm_source=3Demail-notification" style=3D"color:black;" target=

=3D"_blank">Zendesk





=









----==_mimepart_69f9110d87a51_ad19c015288c7--

Business Proposal spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 21:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK6Bq-00000000ECU-0qgU

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 21:11:18 -0600

Resent-From: The Doctor

Resent-Date: Mon, 4 May 2026 21:11:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.yncoris.com ([213.168.101.72]:58202)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK3FT-00000000OIa-0DmL

for sales@nk.ca;

Mon, 04 May 2026 18:03:00 -0600

Reply-To:

From: Muhammed Al-Sabah

To:

Subject: Re: Request

Date: Mon, 4 May 2026 13:37:36 -0700

Message-ID: <20260504133736.11F7F73A22577CB0@yncoris.com>

MIME-Version: 1.0

Disposition-Notification-To:

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

x-agari-authentication-results: srv90389;

x-msw-jemd-newsletter: false

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yncoris.com;

s=segonprem; t=1777927062;

bh=vUk1F5YsCwXE4Gg4pNmYnW6UJHn/4OSwnHHqUhCw5z4=;

h=Reply-To:From:To:Subject:Date:Message-ID:MIME-Version:

Disposition-Notification-To:Content-Type:

Content-Transfer-Encoding;

b=S9lzMPNfYRuK8707CYioL7YeXsrdBvq7zGPdgHUZMRr0Kb9L6jp8ZvInziiaCGK5C

8lnCwYxPPYD+wYeJFh6vfRzrBw70UBZyWx9Gn45hvETQiQmH/qq9o2reKVm1m1XIg3

fKakGZmLRocQgXPGUV0MZEMm8HPEdvVnhZ36vTCg=

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear sales@nk.ca, I hope this message finds you well.



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[213.168.101.72 listed in dnsbl.ahbl.org]

[213.168.101.72 listed in dnsbl.ahbl.org]

[213.168.101.72 listed in dnsbl.ahbl.org]

[213.168.101.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[213.168.101.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[213.168.101.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[213.168.101.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[213.168.101.72 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[213.168.101.72 listed in bl.score.senderscore.com]

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 DEAR_EMAIL BODY: Message contains Dear email address

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.5 GB_FREEMAIL_DISPTO_NOTFREEM Disposition-Notification-To/From contain

different freemails but mailfrom is not a

freemail

Subject: {SPAM?} Re: Request











Dear sales@nk.ca,


End">I hope this message finds you well.


ctedEnd">I am reaching out to explore a potential partnership opportu=

nity regarding a fixed income portfolio currently under our management. We =

are in the process of evaluating a strategic reallocation of these assets i=

nto investments with stronger long-term intrinsic value, including real est=

ate and select operating businesses.



Given your experience in this space, I wou=

ld welcome the opportunity to discuss whether there may be alignment betwee=

n your interests and our investment objectives. I would be pleased to share=

further details and explore potential collaboration at your convenience.
span>

Thank you for your time and consi=

deration. I look forward to your response.

Kind regards,=

Muhammed Al-Sabah



<=

td class=3D"header from">
<=

/table>





>

German language phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 21:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK6CH-00000000EDd-43ky

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 21:11:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 4 May 2026 21:11:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mta-out8.pod28.euc1.zdsys.com ([188.172.138.38]:49896)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK0xP-00000000KLr-31A2

for doctor@doctor.nl2k.ab.ca;

Mon, 04 May 2026 15:36:12 -0600

Received: from zendesk.com (unknown [127.0.0.6])

by mta-out15.pod28.euc1.zdsys.com (Zendesk) with ESMTP

id 8bbe1a1d-edea-4854-b19f-5b9a43bec737

for ;

Mon, 04 May 2026 21:35:09 +0000 (UTC)

Date: Mon, 04 May 2026 21:35:09 +0000

From: Les Petites =?UTF-8?B?RnJhbsOnYWlzZXM=?=

To: doctor@doctor.nl2k.ab.ca

Message-ID: <69f9110d7ee8a_ad19c01528718_sprut@zendesk.com>

Subject: =?UTF-8?Q?Konto_f=C3=BCr_Les_Petites_Fran=C3=A7aises_aktivieren?=

Mime-Version: 1.0

Content-Type: multipart/alternative;

boundary="--==_mimepart_69f9110d87a51_ad19c015288c7";

charset=utf-8

Content-Transfer-Encoding: 7bit

X-Delivery-Context: verify-email-27231033675164

X-Zendesk-Priority-Mail: Verification Email

X-Zendesk-From-Account-Id: db24c4a

Auto-Submitted: auto-generated

X-Auto-Response-Suppress: All

X-Mailer: Zendesk Mailer

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zendesk.com;

q=dns/txt; s=zendesk2; t=1777930509;

bh=8weK1cRoyr3708D0JJ5J68/0s2ooh5ZzK36CtGENGbY=;

h=date:from:to:message-id:subject:mime-version:content-type:content-transfer-encoding;

b=bZ3RXZ717YSSA+MfYlzsadPEKQF/3Di86m7Pp79MWIT2cHRP2JTcG8waZ9NhaAFvqf+YqE4JUfwtUQpVw9Q1vxoUfWQERp+YztEWZiM9T40ytlgxuNDXJUo1Ee5NLDfcWDXcoY8thaZaF6IX8KjoPhw6dKPpoPFCf1hOQroFY3+jLX+baXAGBDNUbApKzlHw6zbombmK1hhLMx/h6FgaZHRPZFFRrY+9YJnI5CNuD33DDOHt9L+qqEsj1CTzEZNp5G40daet2ZQqaWR8A8QgqNU5iZUwcu8VMYiu3JpqfUj3ljxAKo7ILaJw4wSj0qAVGv84Ilgp9iwc5BceDCZLIw==





----==_mimepart_69f9110d87a51_ad19c015288c7

Content-Type: text/plain;

charset=utf-8

Content-Transfer-Encoding: quoted-printable



Willkommen bei Les Petites Fran=C3=A7aises. Schlie=C3=9Fen Sie Ihre Regis=

trierung ab, um Ihr Konto zu aktivieren und darauf zuzugreifen.



https://lespetitesfrancaises.zendesk.com/verification/email/VOqcky2Z2hboe=

VNee2ntvw6FJOKQYJMo





Wenn Sie sich mit dieser E-Mail-Adresse noch nicht f=C3=BCr Les Petites F=

ran=C3=A7aises registriert haben, k=C3=B6nnen Sie diese E-Mail ignorieren=

.



--------------------------------

Diese E-Mail ist ein Service von Les Petites Fran=C3=A7aises.





----==_mimepart_69f9110d87a51_ad19c015288c7

Content-Type: text/html;

charset=utf-8

Content-Transfer-Encoding: quoted-printable










" />












ont','Segoe UI','Roboto','Oxygen-Sans','Ubuntu','Cantarell','Helvetica Ne=

ue','Arial','sans-serif'; font-size: 14px; line-height: 1.5; color:#44444=

4;">

Willkommen bei Les Petites Fran=C3=A7aises. Schlie=C3=9Fen Sie Ihre R=

egistrierung ab, um Ihr Konto zu aktivieren und darauf zuzugreifen.


/VOqcky2Z2hboeVNee2ntvw6FJOKQYJMo">Konto aktivieren



Wenn Sie sich mit dieser E-Mail-Adresse noch nicht f=C3=BCr Les Petites F=

ran=C3=A7aises registriert haben, k=C3=B6nnen Sie diese E-Mail ignorieren=

.





ont','Segoe UI','Roboto','Oxygen-Sans','Ubuntu','Cantarell','Helvetica Ne=

ue','Arial','sans-serif'; font-size: 12px; line-height: 1.5; color: #4954=

5c; margin: 10px 0 14px 0; padding-top: 10px;">

Diese E-Mail ist ein Service von Les =

Petites Fran=C3=A7aises.
Bereitges=

tellt von
amp;utm_content=3DLes+Petites+Fran%C3%A7aises&utm_medium=3Dpoweredbyz=

endesk&utm_source=3Demail-notification" style=3D"color:black;" target=

=3D"_blank">Zendesk





=









----==_mimepart_69f9110d87a51_ad19c015288c7--

business Proposal Spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 21:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK6Bm-00000000ECO-2ub2

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 21:11:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 4 May 2026 21:11:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.yncoris.com ([213.168.101.72]:37036)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK3FT-00000000OJA-0Dou

for doctor@nl2k.ab.ca;

Mon, 04 May 2026 18:03:00 -0600

Reply-To:

From: Muhammed Al-Sabah

To:

Subject: Re: Exploring Potential Investment Partnership

Date: Mon, 4 May 2026 13:37:36 -0700

Message-ID: <20260504133736.859372A36EC0478D@yncoris.com>

MIME-Version: 1.0

Disposition-Notification-To:

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

x-agari-authentication-results: srv90389;

x-msw-jemd-newsletter: false

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yncoris.com;

s=segonprem; t=1777927062;

bh=omfX1NI8hC3F4bdNqTkESIrCCkl1HeA9IwQ6/9EF2Co=;

h=Reply-To:From:To:Subject:Date:Message-ID:MIME-Version:

Disposition-Notification-To:Content-Type:

Content-Transfer-Encoding;

b=it77D7m55wUYBFimu1ZxfBhTxuHddLlJ0o+P5ERzMrQp2qxfCokYjQIM2l2dvWrBh

0CzU2MzqIU2ReqpA177oYUd1RjoKDyzayJuavILdvz+1z/fd01haGv25zBNZJEcQX+

hgUC4mCbd5r0WOa/GhlxmW+vpeyRrbp1DDmeWIqw=

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear doctor@nl2k.ab.ca, I hope this message finds you well.





Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[213.168.101.72 listed in dnsbl.ahbl.org]

[213.168.101.72 listed in dnsbl.ahbl.org]

[213.168.101.72 listed in dnsbl.ahbl.org]

[213.168.101.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[213.168.101.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[213.168.101.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[213.168.101.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[213.168.101.72 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

[213.168.101.72 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[213.168.101.72 listed in bl.score.senderscore.com]

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 DEAR_EMAIL BODY: Message contains Dear email address

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

0.5 GB_FREEMAIL_DISPTO_NOTFREEM Disposition-Notification-To/From contain

different freemails but mailfrom is not a

freemail

Subject: {SPAM?} Re: Exploring Potential Investment Partnership











Dear doctor@nl2k.ab.ca,


lectedEnd">I hope this message finds you well.


isSelectedEnd">I am reaching out to explore a potential partnership o=

pportunity regarding a fixed income portfolio currently under our managemen=

t. We are in the process of evaluating a strategic reallocation of these as=

sets into investments with stronger long-term intrinsic value, including re=

al estate and select operating businesses.



Given your experience in this space, I wou=

ld welcome the opportunity to discuss whether there may be alignment betwee=

n your interests and our investment objectives. I would be pleased to share=

further details and explore potential collaboration at your convenience.
span>

Thank you for your time and consi=

deration. I look forward to your response.

Kind regards,=

Muhammed Al-Sabah



<=

td class=3D"header from">
<=

/table>





>

business Proposal spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 16:20:00 -0600

Received: from mail.yncoris.com ([213.168.101.74]:56040)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK1dL-00000000AHb-1hV8

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 16:19:33 -0600

Reply-To:

From: Muhammed Al-Sabah

To:

Subject: Re: Exploring Potential Investment Partnership

Date: Mon, 4 May 2026 13:37:32 -0700

Message-ID: <20260504133732.A66C739552184BF6@yncoris.com>

MIME-Version: 1.0

Disposition-Notification-To:

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

x-agari-authentication-results: srv90390;

x-msw-jemd-newsletter: false

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yncoris.com;

s=segonprem; t=1777927062;

bh=W93XEbqOV69SLDA49LH5Q8pMsbNIwT7ucTkZl6WdVQY=;

h=Reply-To:From:To:Subject:Date:Message-ID:MIME-Version:

Disposition-Notification-To:Content-Type:

Content-Transfer-Encoding;

b=r7xqgq8kC8rlQH06gpZS0MAASDEOG03GwgAFgueqNRunPkX0eC7UG4rYq87DW1+DR

fxgei8iAmBL1jOEw8HtECo/ZWg03PUA0ctb+cZjOUFu+pIxaus1mICYBMKnYM6aDBa

zpV9PJkEQNUPhAcNmRxEnHnfwxgR2bdpYm25xSK8=

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear dave@doctor.nl2k.ab.ca, I hope this message finds you

well.



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[213.168.101.74 listed in dnsbl.ahbl.org]

[213.168.101.74 listed in dnsbl.ahbl.org]

[213.168.101.74 listed in dnsbl.ahbl.org]

[213.168.101.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[213.168.101.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[213.168.101.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[213.168.101.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[213.168.101.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[213.168.101.74 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 DEAR_EMAIL BODY: Message contains Dear email address

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 GB_FREEMAIL_DISPTO_NOTFREEM Disposition-Notification-To/From contain

different freemails but mailfrom is not a

freemail

Subject: {SPAM?} Re: Exploring Potential Investment Partnership











Dear dave@doctor.nl2k.ab.ca,


"isSelectedEnd">I hope this message finds you well.


s=3D"isSelectedEnd">I am reaching out to explore a potential partners=

hip opportunity regarding a fixed income portfolio currently under our mana=

gement. We are in the process of evaluating a strategic reallocation of the=

se assets into investments with stronger long-term intrinsic value, includi=

ng real estate and select operating businesses.



Given your experience in this space, I wou=

ld welcome the opportunity to discuss whether there may be alignment betwee=

n your interests and our investment objectives. I would be pleased to share=

further details and explore potential collaboration at your convenience.
span>

Thank you for your time and consi=

deration. I look forward to your response.

Kind regards,=

Muhammed Al-Sabah



<=

td class=3D"header from">
<=

/table>





>

business Proposal spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 21:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK6Bj-00000000ECH-1yPh

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 21:11:11 -0600

Resent-From: The Doctor

Resent-Date: Mon, 4 May 2026 21:11:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.yncoris.com ([213.168.101.74]:56026)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wK1dL-00000000AHc-1hXb

for doctor@doctor.nl2k.ab.ca;

Mon, 04 May 2026 16:19:33 -0600

Reply-To:

From: Muhammed Al-Sabah

To:

Subject: Re: Business Collaboration and Financing Opportunity

Date: Mon, 4 May 2026 13:37:32 -0700

Message-ID: <20260504133732.C56DB385D71815FC@yncoris.com>

MIME-Version: 1.0

Disposition-Notification-To:

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

x-agari-authentication-results: srv90390;

x-msw-jemd-newsletter: false

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yncoris.com;

s=segonprem; t=1777927062;

bh=ybzonaiQ68D78JO37eCq9tR1w+te/fS/NQtMuVOMsks=;

h=Reply-To:From:To:Subject:Date:Message-ID:MIME-Version:

Disposition-Notification-To:Content-Type:

Content-Transfer-Encoding;

b=PS+dl2XT5oETaGHw5v2vS2rsuoUXyXXwbufyk8f7ekhQKU8jOq3J4Yr77z+Hv2GWg

5Ot6r9uv7LWL5lmvxNGShf8XqT3ALx6gSgfBnNurosvgizBOdVLGBVTskZ2llzY0Q6

s7gEIhORey8wqOwZeMSucAt5JLBr/yt+cu6VisT4=

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear doctor@doctor.nl2k.ab.ca, I hope this message finds

you well.



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[213.168.101.74 listed in dnsbl.ahbl.org]

[213.168.101.74 listed in dnsbl.ahbl.org]

[213.168.101.74 listed in dnsbl.ahbl.org]

[213.168.101.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[213.168.101.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[213.168.101.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[213.168.101.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[213.168.101.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

[213.168.101.74 listed in will-spam-for-food.eu.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[213.168.101.74 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 DEAR_EMAIL BODY: Message contains Dear email address

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 GB_FREEMAIL_DISPTO_NOTFREEM Disposition-Notification-To/From contain

different freemails but mailfrom is not a

freemail

0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

Subject: {SPAM?} Re: Business Collaboration and Financing Opportunity











Dear doctor@doctor.nl2k.ab.ca,


=3D"isSelectedEnd">I hope this message finds you well.


lass=3D"isSelectedEnd">I am reaching out to explore a potential partn=

ership opportunity regarding a fixed income portfolio currently under our m=

anagement. We are in the process of evaluating a strategic reallocation of =

these assets into investments with stronger long-term intrinsic value, incl=

uding real estate and select operating businesses.



Given your experience in this space, I wou=

ld welcome the opportunity to discuss whether there may be alignment betwee=

n your interests and our investment objectives. I would be pleased to share=

further details and explore potential collaboration at your convenience.
span>

Thank you for your time and consi=

deration. I look forward to your response.

Kind regards,=

Muhammed Al-Sabah



<=

td class=3D"header from">
<=

/table>





>

NetKnow now in Netcraft's Top 13750 Part 2



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).



Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKnow now in Netcraft's Top 13750 Part 1

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now at 13720 from 13319 at Netcraft
and pfs compliant



A significant decrease! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server


  3. and
  4. keep design current!




How do we compare with other providers in

Edmonton
, Alberta, Canada?



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 3268 from 3262 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business


is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Rogers





Rogers Business Solutions

which rank 5301 from 5305 and are hosted in Europe.



Netknow again





We at Netknow are at 13720 from 18857 since the start of 2026.



Government of Alberta



The Government of Alberta Website

ranks 14881 from 15011 by Netcraft and seems to hosted on Cloudfare.



City of Edmonton







The City of Edmonton
ranks 35258 from 35580 by Netcraft and hosted by Google.



University of Alberta







The University of Alberta
ranks 49379 from 49540 hosted by Amazon Techonologies.



Juno and NetZero





We have Juno Internet ranked on top

at 357944 from 331538 who are the owners of

US Based Netzero
at Netcraft Rank 79821 from 79174 .



NAIT / Northern Alberta Institute of Technology





NAIT ranks 120708 from 122206 hosted by Microsoft .





Grant MacEwen University





MacEwan ranks 123063 from 123517 .



TekSavvy



TekSavvy ranks 231028 from 240781 and are hosted by Microsoft



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 347027 from 356472 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Internet Centre / CCINet



Internet Centre

rank 397863 from 399960 . Their partner Rack Nine ranks > 2000000.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 401525 from 403617 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Distributel / 3Web / CIA



Cybersurf

is ranked 881993 from 886921 and seems to be hosted in USA by DigitalOcean.



Primus



Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Northern lights Fiber







Northern lights Fiber
are ranked by Netcraft >2000000 and uses AWS.



OkayVPN





OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services
which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000

Domain from Sale Spam from Google Gmail Part 2



>

> On Tue, 14 Apr 2026, 5:18=E2=80=AFpm Nichoas Louis,
il.com>

> wrote:

>

>> Good morning,

>>

>>

>> What do you think about the website domaihn name

>> www.VoipEdmonton.com?

>>

>>

>> Do you have any interest?

>>

>>

>> Will you be considering this offer?

>>

>>

>> You can also let me know your best offer, and we=E2=80=99ll work togethe=

r to find

>> a mutually agreeable price. If no interest please let me know so I don=

=E2=80=99t

>> follow up further.

>>

>>

>> We sincerely appreciate your response.

>>

>>

>> With best wishes,

>>

>> On Fri, 10 Apr 2026, 5:21=E2=80=AFpm , wrot=

e:

>>

>>> Hello,

>>>

>>> I wanted to let you know that the premium domain

>>>

>>> VoipEdmonton.com is available for purchase at Godaddy.

>>>

>>> This domain would be really good for attracting clients looking for you=

r

>>> VOIP IN EDMONTON.

>>>

>>> If the domain is developed or redirected to your current website, it

>>> would be extremely beneficial to your company and services in terms of

>>> catching more leads and clients while retaining your brand identity.

>>>

>>> You can get this domain for $650 at www.VoipEdmonton.com right now.

>>>

>>> Best Regards,

>>>

>>> Nicholas.

>>>

>>



--000000000000acaf170650ff25b8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>
We are yet to get a response from you.

auto">
We understand that you might be busy, and=

we appreciate how valuable your time is.

=

The Premium Domain VoipEdmonton.com is still available an=

d is for sale at a discounted price of $450.


iv>
We made a discount on it, perhaps your service is inte=

rested but not OK with the former price.

<=

div dir=3D"auto">Visit www.VoipEdmo=

nton.com
to purchase now or make an offer.

<=

/div>
Are you interested? If not let us know so we can con=

tact other businesses and stop contacting you.

<=

/div>
Warm Regards.


te gmail_quote_container">
On Wed, 22 =

Apr 2026, 3:49=E2=80=AFpm Nichoas Louis, <
s.co@gmail.com">nicholaslouis.co@gmail.com
> wrote:

ote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc s=

olid;padding-left:1ex">
Hello,

dir=3D"auto">

We se=

nt you an email recently and never heard back. We=E2=80=99ve scheduled a 24=

-hour discount for the domain name, and we would like to know if there is a=

ny interest here.



div>
The domain can be developed or redirected to your cur=

rent website to increase visibility with its keywords in EDMONTON and its e=

nvirons.



dir=3D"auto">We have also reduced the price of the domain to $550 only.
v>



>To get it now, go to=C2=A0

iv dir=3D"auto">




e">

left:1px #ccc solid;padding-left:1ex">
G=

ood morning,


<=

div dir=3D"auto">What do you think about the website domaihn name=C2=A0
v>

"auto">

Do you have =

any interest?


=

Will you be considering this offer?

">

You can also let =

me know your best offer, and we=E2=80=99ll work together to find a mutually=

agreeable price. If no interest please let me know so I don=E2=80=99t foll=

ow up further.



>
We sincerely appreciate your response.

auto">

With best wis=

hes,


quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1=

ex">

Hello,

I wanted to let you know that the prem=

ium domain

VoipEdmonton.com is available for purch=

ase at Godaddy.

This domain would be really good f=

or attracting clients looking for your
VOIP IN EDMONTON.

v>
If the domain is developed or redirected to your current w=

ebsite, it would be extremely beneficial to your company and services in te=

rms of catching more leads and clients while retaining your brand identity.=



Be=

st Regards,

Nicholas.

holaslouis_co_gmail_com-dot-mmanalytics.appspot.com/em_GrGDVVfCnSWAX8pOmpL6=

/asteroid.gif" style=3D"display:none!important">











--000000000000acaf170650ff25b8--

Domain from Sale Spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 04 May 2026 10:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wJwVE-000000007oW-3zzf

for dave@doctor.nl2k.ab.ca;

Mon, 04 May 2026 10:50:40 -0600

Resent-From: The Doctor

Resent-Date: Mon, 4 May 2026 10:50:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yx1-f45.google.com ([74.125.224.45]:43466)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1wJukN-00000000PcG-3tXQ

for sales@nk.ca;

Mon, 04 May 2026 08:58:19 -0600

Received: by mail-yx1-f45.google.com with SMTP id 956f58d0204a3-65c09c1d000so1163431d50.1

for ; Mon, 04 May 2026 07:57:25 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1777906639; cv=none;

d=google.com; s=arc-20240605;

b=H20y+TdxRzB9MgLec4oDKMdvLjhY0HnNhnmUuWdKOE6iFBftusLABWpmxAL481m0L1

mUnSRuTdej7hZM8X96GdATurJ0CeJjrnawtLDgHiZR7LGVbzt9GSzPe/CFOp5/fs3A8r

ZaaMdeVS3DqoQuaiDi1oPmiG56hT1j7DJclLkMALtvgphO11kTBItcgUBToHyupTBV6J

a8E5Sb+pKkiNKU75iMBS4zj3nz0aAkFLO3LraWZnjFlrKH3XfOGHCaK5o2teA+d5lX3F

ZWFR4aT5tGplACTQ1/SumoULBRM6EFzP+zvskSjJpjmQyfUAtc1ZGY/Z47h7De305mn5

ojtg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=XGw1GTJh+vBe7sR/MigVToCNSjlt8j/L3rB94pAPTKs=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=EI4IHBN22wHYOI4tDJ7kUGhH6d8aHqB2lXpK1T21PFGiw8/uq8BVYIZFh/7LyGAdPv

Zuqq8wOmPbn2YRcFs9mzEP5bQHzEZZXm+w/8NC+d+0eGIUQZfd02oMlgAJevmu3rSYMu

t7t2a4oVG/vFpAuNnbFNKTzWQ4IzbxVhg41R8fxTahiZqO7fyh8PUm3f3/DeaVvltbdt

INrfJ76BoOO3xVjWXKh6ze55gS74qo30U8Xo3MWvh4KV4dMi6MCLck9WxWXeWcqpJKQb

nOUY1VsFWsFuO8CNNNLik18vZBbfhbD+NCxlZ4XLy3IyOYjcOotmWR/XYqwS0d23twCz

+XQw==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1777906639; x=1778511439; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=XGw1GTJh+vBe7sR/MigVToCNSjlt8j/L3rB94pAPTKs=;

b=YbSKzP7PiDB5Gw272WliQ9OoxHOfqZ4iZi5uW5cE4KrpUY7hvS+EhJAQm2qbLwKfcq

ItTd8dUOdId75wp1wiW+sLPHwZHIb14XQvTEaXymp6C0ZMriXEwN33rk17HjxfSRn1Hh

bqZCCaYMU4td0pRKNdZcM0kfHFfqbLKlAdV8BY+cC7Ct7pdBsG7k2F9B6ry1UbncQ1ot

OAEyuIJIjaLmcOuF1wLF1NBE6ZvGoMusjuv5G/SQ1ovfL8aAu8SnNxRWb8sOZIFujA59

8teNt/W8l+LaWpERE2JoB+uDBn4OP0CHv5VhJdVs+q+v4eKwJ4UUIOIPSEe5/fePXG4a

QC1g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1777906639; x=1778511439;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=XGw1GTJh+vBe7sR/MigVToCNSjlt8j/L3rB94pAPTKs=;

b=RPgwf3KZ4lgi2MqwgE1mjo5LlmQVx3XaM+7h3EBTnUZiN/9TE8CJBoYP+PRBj8LwSo

uJT+Y13t9xi1Zx78jpKZ29eNWKbPjn6q/uZQqlB7xtPvzUF9FqtmTn6B2jx7MUbhM5R0

9Dpzb2q+Ryynmp3A3PU2pci7gxWzO5NOCMSsXLajvkkUa7Ge2cv8U4GuYkF0S88gBuT3

lvMxMUgwFzLrNcj9CH64iOYVJYodRstSV7te0g3Ep/KtIEC4SNIPj1EzHHsepXYgbA8s

P9ubP3p1PymkBtd/EytZT1HMHjm8CKfIEX4CRcKQTRiDTC3qnrIsEYIJD+68T6yH1OHh

4vWQ==

X-Gm-Message-State: AOJu0YyvSQ2emSKWMFtjqUATToVe3qjVf6tMu30Lq0wgZYE/U8DjZCE7

Kj2N37DMaXc2eUL2LlGR0QCO6gU7fFK3fWKmQVvYl/MkwO+j3c/EkNFjYP5k8P8RvE09kYaU8qK

HVUeiaBD3shLYj2E+ySATXAWex+GmFrYMsPBf

X-Gm-Gg: AeBDieusXTIVbXU5TiIbnVHcP8vxWSf49aWkXz078ztolbyW3xF8FEmk8eizhhkd6RA

dkcXr5OIS9qU32QY2dFyU6yNhfHHgRBDfj6sbqX/q/gbD12Q4+HFI8gdLU5dPNoNaXKMe56I80X

u5gVuIjfhSyV2USsU746JluD3/B7SSurWNeysbhPCeqeRiTF2jZR32BOs2rNe1Ue9QpqOBz9JM/

lwqWZvEUvMeEaJMpG1YEdHwpd5mR54wr01MpC3ELZnF8+0TkgqX3eGALOZII5A12CmADv1pDkVf

rG+Th7kxDaeXkAJUUG1rCiU=

X-Received: by 2002:a05:690e:1557:20b0:650:26c1:ee84 with SMTP id

956f58d0204a3-65c1afce59fmr10211878d50.11.1777906639218; Mon, 04 May 2026

07:57:19 -0700 (PDT)

MIME-Version: 1.0

References:



In-Reply-To:

From: Nichoas Louis

Date: Mon, 4 May 2026 15:57:06 +0100

X-Gm-Features: AVHnY4KqonrRwG_-KeCyCnABCvpzPbGh7SB9rWYYwEab8V5JW5oUIzccgAQQIiQ

Message-ID:

Subject: Re: VOIP IN EDMONTON

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000acaf170650ff25b8"



--000000000000acaf170650ff25b8

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



We are yet to get a response from you.



We understand that you might be busy, and we appreciate how valuable your

time is.



The Premium Domain VoipEdmonton.com is still available and is for sale at a

discounted price of $450.



We made a discount on it, perhaps your service is interested but not OK

with the former price.



Visit www.VoipEdmonton.com to purchase now or make an offer.



Are you interested? If not let us know so we can contact other businesses

and stop contacting you.



Warm Regards.



On Wed, 22 Apr 2026, 3:49=E2=80=AFpm Nichoas Louis,
.com>

wrote:



> Hello,

>

>

> We sent you an email recently and never heard back. We=E2=80=99ve schedul=

ed a

> 24-hour discount for the domain name, and we would like to know if there =

is

> any interest here.

>

>

> The domain can be developed or redirected to your current website to

> increase visibility with its keywords in EDMONTON and its environs.

>

>

> We have also reduced the price of the domain to $550 only.

>

>

> To get it now, go to

> www.VoipEdmonton.com

> Do let me know if you have any questions!

>

>

> We await your response.

>

>

> Stay Safe.
Mon Tue Wed Thu Fri Sat Sun
Back May '26 Forward
        3
6 7 8 9 10
11 12 13 14 15 16 17
18 19 20 21 22 23 24
25 26 27 28 29 30 31

Archives

Categories

Syndicate This Blog

  • XML

Blog Administration

Open login screen

Powered by

NetKnow Navigation

Home


VPNs


Dialup Service


Web Design


Web Hosting


E-Commerce


Server Colocation


Domain Registration


Web Mail


Support


Testimonials




Client List


FAQs


Interested in NetKnow Services?


Links


Disclaimer


Acceptable Use


Security





Technorati Profile







AddThis Feed Button

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Error

serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

addthis





AddThis Social Bookmark Button










Blog Grade for www.nk.ca/blog

Empire Avenue





Syndicate This Blog

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

Error

serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.