RBC Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 14:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyxkE-000000006YK-0gdg

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 14:27:42 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 14:27:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f46.google.com ([209.85.208.46]:52706)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wysma-000000003gW-1EJM

for doctor@nl2k.ab.ca;

Tue, 25 Aug 2026 09:09:57 -0600

Received: by mail-ed1-f46.google.com with SMTP id 4fb4d7f45d1cf-6a0a4aa99bdso8206012a12.1

for ; Tue, 25 Aug 2026 08:09:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787670534; x=1788275334; darn=nl2k.ab.ca;

h=message-id:date:subject:to:from:mime-version:content-type:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=lv3uQQBbmovjw9DIdEEeYSAvV/gb5/ADF9A0Xbp5eyY=;

b=rAauSex+2LvN1UGJbl+iwAziLyi3O+p76AGxOQTgfYdPaYkf0CNVPriV5pcqlDoiAo

laB2tAKJ6h7qcJ9Q2HDx0a07bGWm75YA7ObbP32Q/kPhQZsNLoogsZz8w66sMWkfYe92

Hd273uh57cC/NhRQu1a2LIPTKdJRiRYh1Gs0oQnDjTfmqiyj5R2Pj4R2LNpdvD52R4iO

ohNTJGDFYk2eWgszQ7q/lzp3P9R/5c46XhLjZfRWeSsNtNEiL8FOQ1k8aZuEzwtDLrrg

uXcxjqa9JmMqM+jSOh8dQQMRkX1hzF+ilQ52UcKPhzdKSRf9UzlfzKSDmajuAQMPvPbu

Tm6Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787670534; x=1788275334;

h=message-id:date:subject:to:from:mime-version:content-type:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=lv3uQQBbmovjw9DIdEEeYSAvV/gb5/ADF9A0Xbp5eyY=;

b=NyBOLJxsWJ7LPL0fzYaVVRK+6Qxfe2fBm/a8oD5CiOvls4zAeBKB4sToBP9luUeyS8

oG+JfKhwtCS2efrOHyg4x2rl0oiOYkjeYysVSbX3/hXM8PfVVkuOVkMyzvi+0sHeOz7Z

orZ7j76AWD0D/qpUMw04Vvp1gvNVIJzj9jD7KDqxK/kI6pHNHc9Aji34QgeRIxyWeSsm

wSM4GUi1eCz0im+Iw7h/wZbVzjdUY12JnsdnlpYjU1Nubn6hBPoBVMGnE8rZL86FkWyv

KqHZVl8nkkQKNEPpHzI1mM0dRFfHyztGv74RnxIyoXXiuwnLPTtdKEtIvb9iUY4Fg5Dx

A/PA==

X-Gm-Message-State: AFuF++l7ARW//lGMNOXGLOiIz3L9KpMrK12p7oDK1rA+PiPFfe3nBA6X

CXRdyvqj6AllUGRnbJU6VumepBwypl3MZaTc8GUqqwEj8ff+jarffauvLJmPiRSedDPbHA==

X-Gm-Gg: AR+sD13pPfTUbvuE8e6FaV0RiT4Z9Y4+uOLU8UkFmc53R6Teiln6BG8Xsykt+PVjrp7

tkHkj3Pv38+nHUpIe2Onxc2VNTJypGlkfuCp2dEh0HvIJqMad7UQiIIjoVbUuLix6Md7GK2bqIJ

KH545/c5JDGzLT5BvwWC3qo6vWhcYOIYQ6grdFf31AUnx1oYwnd0eOteGmy3aJmd9X1nAg4nzoE

Va4EayNN7EbAYfPfdmrJDT90xnVg0wJhSlgIlsT6kS2f5oh/oPaIGb5LQi18+0IQ7gzsKPuzhRk

oi0CMQv9PHxMgzkbSFGPYb+ndwbW9az229xxaAQdlIVKxY8GCZh02qgISQoICu5teOM467HOSCE

ng9jsipl4UN6QFkXQ8AKmsFJ7WQnlvUU4Xxtl6dMJoL872BQW9xDgjRUprPq2j8XEnTr6QQUupM

diDf8Kg6Fi90u0GwrEo+nSEGgZ6T/xfNuCB45C9ZhrWqwBY+dbhIGCJ0rm4xHGX2f/FCFR/gjgb

l3ZdoGV

X-Received: by 2002:a05:6402:1ecc:b0:6a3:74c2:3cf3 with SMTP id 4fb4d7f45d1cf-6a582b0c826mr30768149a12.6.1787670534469;

Tue, 25 Aug 2026 08:08:54 -0700 (PDT)

Received: from [10.5.0.2] ([193.124.21.43])

by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-6a5dea83a25sm115033a12.18.2026.08.25.08.08.52

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 08:08:53 -0700 (PDT)

Content-Type: multipart/alternative; boundary="===============8185156476161207957=="

MIME-Version: 1.0

From: RBC-Support

To: doctor@nl2k.ab.ca

Subject: New secure message in your online center

Date: Tue, 25 Aug 2026 17:08:53 +0200

Message-ID: <178767053359.1940.1532261181250774573@gmail.com>





RBC Bank Information Security Dept.

Date: August 22, 2026 Ref: EB-849-224 Subject: Important Account Info



Dear Customer,



For your security and peace of mind, we deliver sensitive documents and notices exclusively through your personal, secured online message center.



A new secure message is currently waiting for you. Please sign in to your online banking account using your credentials to view and manage your documents.

View Secure Message



Sincerely,



RBC Royal Bank

Security Notice:

RBC Royal Bank employees will never ask you for your passwords, PINs, or online banking credentials via email. If you receive a suspicious email, please report it immediately.



© 2026 Royal Bank of Canada • 200 Bay Street • Toronto, ON M5J 2J5

Web/SEO/App spam from Microsoft outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 09:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyscv-00000000O9N-25Dl

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 08:59:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 08:59:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012050.outbound.protection.outlook.com ([52.103.43.50]:40527 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrlR-00000000HxF-1fqj

for sales@nk.ca;

Tue, 25 Aug 2026 08:04:44 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=nJ++kecxxUV0lGQVkkT8nx4OlRCbFjxHbt/25z0wXe4kMOhaG3zQrZ46I5Esy5JHRFx976VDF42GzSfAgd+9J8ttrpBRp8PVtvpk2djFiLJSXn26zUTqcR1NIX+0hp7h7uPD1oISpIFEzoE9mRn30c8+GsLK/tjsOeaikFLQma/Mzzmq2kt5qCUXHi1u+QPyk+y2jZMrrz4Aie7GndBPdKtjlR8Cl7RSM03dmmzyJ0PoTlK6Q7EOTBIyE3pmaGBK9Ph50dADxJa8v+qT7r9mcrrt1cPT9BPhC1iD3IhNoiCjh6dhE5w4QJYQvpZP5bBiOi12Yt7HgsnHdROb5djOzA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6eXN8ACm1jLOJq+oj6oogRRQ4BOYX4UHUFpMj1n9LN4=;

b=wPpkJZ8ZL/2D7gHZP8a685t/VQmfS1cZki1vZvPj0NlfVloC9Yo2V7aJqB/xd0i7hHMDNmHfQq0uoCxgFoihg6wy3Bw7epu6Zh+p/PtsAbcUPQwASmsPncMVFkBkP34wxY9qIJA0UjyGnI5XhJk0Vykl2JK4UAQveZB+gezStf3yrUJAo5+1fQvH3/ZP5cXbGimauL7PuqnkFKTusv0nzwkFZuGzSI7ygCUt0fslgQnf+whYQcnsz8aekdCsgBOPI1Fltw6c9Q+9OW3MyX+uQcS7xb+w3y7LOeceEC2CENHd7+V95puD3ibKYN1UFzZuxHiLWri4YAS9rTntoA571w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=6eXN8ACm1jLOJq+oj6oogRRQ4BOYX4UHUFpMj1n9LN4=;

b=btmMfsl5dsN5vFIzHD9p+o7PThAHxeXvEz+NNF8gLdIiwsRFJGmR91Q2WRfxpbMGDlR1pldeqDBOn2A0DAeiSyNdJil0Vhh0zyUbaxYGpmHHpSRA4vlBQvtR80KcABdIVmHI/nwC5tngB9DW3RAxhtWq9ZRrKD4aF0yifV7NK3RYNNlF6BvgZphHsuKXpScZ58EgWG0JQGsKavTGkJiAxRUqPgsAIC5rbQfU+VcXdD7oRD93+MtZZk/2yhVLDWmedNJ6kTVZFtJOsS+Cx/9MbSdNHqL9eeF5UNsEIbC99YI1zP/LX6+jzM1+7ONhoOVTqzmeymx4lSBI5wqREsWwNQ==

Received: from TYPPR03MB9723.apcprd03.prod.outlook.com (2603:1096:405:397::22)

by KL1PR03MB7173.apcprd03.prod.outlook.com (2603:1096:820:de::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.6; Tue, 25 Aug

2026 14:03:23 +0000

Received: from TYPPR03MB9723.apcprd03.prod.outlook.com

([fe80::a0c4:bd2e:7615:ffbd]) by TYPPR03MB9723.apcprd03.prod.outlook.com

([fe80::a0c4:bd2e:7615:ffbd%4]) with mapi id 15.21.0339.012; Tue, 25 Aug 2026

14:03:23 +0000

From: Tony Hooper

To: Tony Hooper

Subject: Re: pricing?

Thread-Topic: pricing?

Thread-Index: AQHdMw+QSWBTdBOym0eB/AIOmi+XFrauznuW

Date: Tue, 25 Aug 2026 14:03:23 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYPPR03MB9723:EE_|KL1PR03MB7173:EE_

x-ms-office365-filtering-correlation-id: 5f40f453-bbfb-4e34-0c7c-08df02b1a05f

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|8060799015|8062599012|24121999003|51005399006|31061999003|55001999006|16051099003|15080799012|15030799006|9112599006|22091999003|4140399003|25010399006|2604031031799003|40105399003|26121999007|11120399003|2607281247196008|3420499032|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?oIRoYB1tyiP9w/qExaY3gRMUu34tgImL3frN/2d2BDxXmzFGBOvUj3nD?=

=?Windows-1252?Q?Cp6IzyBO/xi21SN3zEcV+d5ZjyjZkTfkrS3jEND6+MGRK9rzMCQFxaor?=

=?Windows-1252?Q?3PXpdKeJeqDc1P3M7yPJgZI26GckjXQ33XlmDrB+qv+237NMw+ay5TGQ?=

=?Windows-1252?Q?aqb/3KZePRi+j0NuQpPDZGu8gZbQzZoJx+S1x4K5qdt9lJz8IM6FgXtl?=

=?Windows-1252?Q?+dGOXX/NTrBIWmtVQa9Z2yBs5wk+E1tdahvXwV3hDXmNlL8nFJsW+Q8l?=

=?Windows-1252?Q?HnAdpB7FUZpnqkUYkO5avDPYRAmZKn2ZgkHvHx4xtAksDEqDndi7NUZP?=

=?Windows-1252?Q?V3QZovkdkDq+CmxlZAoROPK5yVQon51TvC/Js7/VFbupyICrIFAQx2SK?=

=?Windows-1252?Q?OXWX93opIVt134LRbTID4sVMGgQ91l6Oe/Qfx+iP2lr4GZz/dFhlkt7k?=

=?Windows-1252?Q?9f/oztgdW3He+wynY+fmp+Shl5AteH5ukHAAvLQGV6Mv1OzS7SibV2jQ?=

=?Windows-1252?Q?S8S/guf2rYAAWtIO6kp4r/FKot+LX2RQ+xxGMx8KM3DIjlqxA92Fj5j0?=

=?Windows-1252?Q?+K4pV0T1U631H2TnyYxPQQ8zR4GW3zsCy/YRJ6xdRIoiuPYz8wTofM9d?=

=?Windows-1252?Q?BxceXHGtyaldLuDo9ph07O5hB2DARSOTHeVrxMhAyoqVvE/tZ82XJ9+t?=

=?Windows-1252?Q?S3p/jnaKPLtiR+dgxhMCAeQYLr6nuMG3Xe+YKy9FLanM5Gv+90JQuwbE?=

=?Windows-1252?Q?ELMZW9gwXB4KEXa8+jEXmGRyoHCU/XB1BiGk/M8CrNQ8kMo3vmYKfX3m?=

=?Windows-1252?Q?41huTKhP/NgzM+eteNi6MY6/JFs2eEGxaqKr48h7dieBxhGIoaCRkgJF?=

=?Windows-1252?Q?/H6i0bfbGS0ytHospJZzqNzQyn092e/gZn4j4Rm7uctjj/Gm3B0c3QGI?=

=?Windows-1252?Q?Kz6UPllVIU/PM4j8b6JN3e8vufEbmmYyr4R8zYZLBhyY226Rj+w1a7EJ?=

=?Windows-1252?Q?koC7UbGF2XTCM1xnEpOD4ljiUApeLS0gsXs2qwpMX57N4V198mlzO6YI?=

=?Windows-1252?Q?A8ZQRY0BupvbZ73V6ZxSr0Dkq9xEoJMxUPVMVoPSps4IrNjK4YfBP6Kp?=

=?Windows-1252?Q?Rr03SauoZilUGNxU2hj0dO6+DmY1ipdKGakXlsnXfJOk8PkwJCXgV/2E?=

=?Windows-1252?Q?eZRLUsFnjcd640/d1lR5Ok/rJu9m6WnxtGBHc9pf3k5L4vHlOT3yFslK?=

=?Windows-1252?Q?PraBF3/CHm5Fl6NYXdNiWkj58T0kCFl2HiVd8WQ/?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?0NxDsK/JP+MhB5rgOJCvCOl/tlskcfDcE4akCOmMeoLfhgp9hQZpzd7Z?=

=?Windows-1252?Q?ekU2BwpZoZG08W0IQIDKIPE7fvfZ/34O1coLj8HA8tMv/g1FkuLXnH2x?=

=?Windows-1252?Q?arZXs+4xcFCwAhIsm6puYUu34Z7vBdvC3NaJogQjgEqPAMfXo6uHc3xh?=

=?Windows-1252?Q?ezL0V4MjnbkfnS16cG2gftaeR+TMAheDiRRS+/Tqviijuew0CGecKZPs?=

=?Windows-1252?Q?SptktMLw4oxvFu8abWe4B2+LAYdGCU21CwgxwO+ap3z9dSK3IkTGRLWk?=

=?Windows-1252?Q?a9hqNdo614FcYMOBWt/tHcwSpA/sjuNn1lP48dhAPf+LSZk0FBqLrxWC?=

=?Windows-1252?Q?BBvoKrX3k81mIsNB4GDM8oqkgTZsMsnDH0mUBVNUr1/lYdF4XOAY2J1M?=

=?Windows-1252?Q?xaXaSxOCWzRSQhhCWtPfcHMBwMhOgdIyngygwK/5D0CpvUcpncDiY/Xt?=

=?Windows-1252?Q?/9jvw4cnNDeZgWBYQ1TiPbMkyXzggIw5XEEuNycr93WrU80IorsiDxxn?=

=?Windows-1252?Q?vk7KVCXYmU1X+ukBJcts3Znc0vAFSzta/zN2xVhXzrdcqencGLAUIRRA?=

=?Windows-1252?Q?5c5CB5p6vUnqibUL11YKnwZnRCOlJrtl8Y8GBOEKDGgDd3JArupYhf4a?=

=?Windows-1252?Q?ffsc9GNfnQ0iRCNmAf8mKu+luvEV+Zl96kqZc6Hx9xGCibBOHBrDnBEF?=

=?Windows-1252?Q?rPkDfOpNTmHXYEBoP9tFcs7/WtvMoBnXMXcKIYcXg/V9Wz0Ab/6b2Inb?=

=?Windows-1252?Q?O+SV+yDnFcBQeCcdPvlxN8p6PJO+VodDFzP+Zcu7VsRKXReOGQkIPNmW?=

=?Windows-1252?Q?ieMKzCXwzHDFsIl5PNXJbSBZKJt7wJIR7tO9ANtiu7pmXP758pN+yvMW?=

=?Windows-1252?Q?if4b8HgxII0YMGkFEQI9McxkDlnNaUbtxvoYbyjTQC5IZ/Blhb8G4pxi?=

=?Windows-1252?Q?d4UlEZxcWpTXxh4UoAErl3JTi1NVKNyI+bhwAvTaRhDPXsRvxjvwJ/Fl?=

=?Windows-1252?Q?+LKE2Vc6nfQEnqJtBQPoA7tbwPF88kHjT6GeD5HocVox6ztvF4RdhIYj?=

=?Windows-1252?Q?pbZ0JxSdgNTdGXJ53jDDL2m46Ugb/O+f3apgOww/BSzNZewrcBwYyGZv?=

=?Windows-1252?Q?0/WLoEErHZVoeJbV+9AgnhVw8dQPATIgDJsVtHYa8DEZPBvGHqEF+fQ3?=

=?Windows-1252?Q?LeiLv1FJe/73idgpdnPpETHAh/lhBZ+jYSC4u2vDvvOT4XCEfqWONATV?=

=?Windows-1252?Q?BtfMNawX9Wnagz9Qf0xWvlzfaQbk4z7d+KKjeH69TNHD4KB1fpVBUD1J?=

=?Windows-1252?Q?W2XNOmEWetVgI9XNSGb7+VDqRretRBTaaKhX44KhSQGACnKb53Rs+rKH?=

=?Windows-1252?Q?5pQgJawLy4UtjLSobaZVpYZImS+3Lj8+BZZHQWt26T6kSLRj+172VRPt?=

=?Windows-1252?Q?dVXpScQn+IjUqd8XutoZhWm7WV+jkLDeI1KWLqnw7/60DHuITcAQTcHB?=

=?Windows-1252?Q?AbCMyPQr3er2wTYPkdvDywMtXML3ADI7wEAfIyxpepLpo8FBFfgdM48/?=

=?Windows-1252?Q?RgzWjJ87kUhKawc4?=

Content-Type: multipart/alternative;

boundary="_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYPPR03MB9723.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 5f40f453-bbfb-4e34-0c7c-08df02b1a05f

X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Aug 2026 14:03:23.2815

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR03MB7173



--_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I am still waiting for your reply.



Please let me know, if you are interested! Send you a pricing?



Thank you.

________________________________

From: Tony Hooper

Sent: 23 August 2026 14:57

To: Tony Hooper

Subject: pricing?







Hi,



Your site looks good, but it=92s not ranking.



I can improve this and place it on Google=92s 1st page.



Can I send proposal and pricing?



Best,

Tony



--_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

I am still waiting for your reply.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Please let me know, if you are interested! Send you a pricing?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thank you.







yle=3D"font-size:11pt" color=3D"#000000">From: Tony Hooper


Sent: 23 August 2026 14:57


To: Tony Hooper <tonyhooper49@outlook.com>


Subject: pricing?

 









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hi,



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Your site looks good, but it=92s not ranking.



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I can improve this and place it on Google=92s 1st page.



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Can I send proposal and pricing?



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Best,



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Tony 












--_000_TYPPR03MB972374D734F756496F6A75ACD2AF2TYPPR03MB9723apcp_--

NDA Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 08:00:01 -0600

Received: from mail-pg1-f232.google.com ([209.85.215.232]:55330)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrfy-00000000GvZ-0o9X

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:59:03 -0600

Received: by mail-pg1-f232.google.com with SMTP id 41be03b00d2f7-c9b373d5af0so3778882a12.2

for ; Tue, 25 Aug 2026 06:58:07 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787666282; x=1788271082;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=muSCQrlmQAlJDrRDwI3z2JUm44/M82T+BIc+NPQEQOQ=;

b=Kt0cKs00KSykBUpC5/eVH+bHjVRN+jiwV3DX7ghkMby6JJ8gxIs5xyVWv3yrQQ+oSz

OuhOYsu/D09sBxCcpNsWOPYnff9XssKroRJK/ob/52RtnAFFeBp7UJTW0zfaSsWL4M4Q

XxSvNprYY0eFYRQd8bfd9ztny3d2aXflBklEYqYOxqNkhwV0+pAN5R9nzo+5Klkt1Nz3

RXHXaYg9/n/NUfArVXotGHtUElvQ9sAOpElX1fxGZaywYbeAfhgytwo4fTFln/6fa0eq

wyfMvLclWxWlApDpNdNtuHGMNVTJCS0zYZ6dnkh2ld/3hWszA2EGBpl+2j7BsRPWj5Dx

zpjQ==

X-Gm-Message-State: AFuF++lCVc+rDL7aeQ7/hA2nuWzvNjHRIYs4rNN6nagKp38leTkza3W8

ULNeC7ianTHPQ4+1dvfOj9X96H1fYhmZMKU4Y35WQpMgjoLw+OOIy5FUVRC0plKQDWELKY/JWoj

a1zbzF2MAiVyDzxjOBJJcmfViHDfImOrQ9AveAJV+ZcdQQ1Y=

X-Gm-Gg: AR+sD11Eqt4Cb/ShxX+t9xlfQ5zl1Q5Cs/dWrRGpAvEZ8wL/WdlFO5x6T/EDO1Gu+He

WHAOfOWTR5Ta55MiNkMGzVJ6qU1nF/OkMvBI9Odfn3xwI0yM23RsNaGNCEk9DSlB/9PCbNL3zzA

5JRykHZRTY1UpXojzxEE6gKk5O2UkQxZ71Gy0sDFXBZMpuyJUm91RKF5dig+Hk5YSY3kKfLH3iN

Q0wsWurEPuH4vjyTxV7HYqeTANhRujDMzJZa6R9nW055laNZZhMWgLwJKxeYcwYz/XxBGHyylZc

w0RGSSOyK9npy/XX8vjEa/WQVuE9lO8f2sxP6/6Pxn6JCc/WvEYD09Xfl/oDgsj1zX2TM4h5pbn

sj7lNGnLu7VRlt3h69NNOCi8LcO3rRmTok0WuT9I=

X-Received: by 2002:a17:90b:1d50:b0:38f:dec8:f7e9 with SMTP id 98e67ed59e1d1-395df29b3c5mr54941422a91.12.1787666281292;

Tue, 25 Aug 2026 06:58:01 -0700 (PDT)

Received: from libero.it (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39645b43d8asm1372291a91.13.2026.08.25.06.58.00

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:58:01 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: dave@doctor.nl2k.ab.ca

To: dave@doctor.nl2k.ab.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:58:00 +0000

Message-ID: <890CF246C27805110097ADC198C349E5@NAMPRD04.PROD.OUTLOOK.COM>

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: VHc7sfJASaKBvNWwB7Z5p9fQWUr7KA==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=12v2udxw3yeda8ypf0p3k27q6fy8hu"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Doctor has shared a confidential

document and requested your review.



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

[209.85.215.232 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

[209.85.215.232 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.232 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.232 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.232 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 URI_PHP_REDIR PHP redirect to different URL (link obfuscation)

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: multipart/alternative;

boundary="----=yuqh6mv8rpykc0inqwttxl3kdug2wi"



------=yuqh6mv8rpykc0inqwttxl3kdug2wi

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=yuqh6mv8rpykc0inqwttxl3kdug2wi

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Doctor"

title=3D"Doctor"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Doctor has shared a confidential document and requested your =

review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Doctor File"

title=3D"Doctor File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Doctor NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Doctor Quarterly Proposal v3.docx" alt=3D"Download Doctor Qu=

arterly Proposal v3.docx" usemap=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







les/babel/redirect.php?newlang=3Den_US&newurl=3Dhttps%3A%2F%2FM094bIMR-801g=

--.sitefirm.help%2Fr%2Fbcaf2f%3F%26lang%3Dcy%23ZGF2ZUBkb2N0b3Iubmwyay5hYi5j=

YQ%3D%3D" target=3D"_blank" shape=3D"rect">







------=yuqh6mv8rpykc0inqwttxl3kdug2wi--



------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=12v2udxw3yeda8ypf0p3k27q6fy8hu

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=12v2udxw3yeda8ypf0p3k27q6fy8hu--

NDA Phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 09:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyscn-00000000O1y-1CxW

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 08:59:41 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 08:59:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f230.google.com ([209.85.215.230]:48597)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <7b2P5345sT@visionsurveysqld.com.au>)

id 1wyrfx-00000000GvS-3Ctr

for root@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:59:03 -0600

Received: by mail-pg1-f230.google.com with SMTP id 41be03b00d2f7-cc1469c1b83so6362599a12.1

for ; Tue, 25 Aug 2026 06:58:06 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787666281; x=1788271081;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=rulKTnkXPB1TOQb9xPcfZ8nZ8QtMl3H+5lQTAe7nw+I=;

b=US0ymhhSDEuhA8prM1dZecM1Qs+YVeJxcaWFdKE3qP22W7pVsZCYJ4ywCHkHTmd7X1

j+9G7mL93Y2PV1hSDDjGvR017EdAmU8w5ujezZIgxGsad0qlbuKrz0sDUmDDAzw2XCGa

p7qVu5TWixHGwD3G5rzmzmudInVGA7SwO6ILZeVuwOf9EmzsqZcV4fBlIrN5TU2p11Xn

3WQGTTHNrRr90PR3SBFcmj2v6+/Pj3t+AzUcOMBOOZftE9WBFGR5JYBA7oZv1yS82HRL

I1BgHl1W1txBCrxhBJHyJBrShxUY4WQ5HQQRc6nA6O+/y/iOLFf7aWmXd4z7913RwL/T

HFxQ==

X-Gm-Message-State: AFuF++mA7dgJSxB4HXTU37/o3b0yRM3YHnXeBfvD51o3YARxbGNCZzbF

3rBpNvbbOcHxQm4f+sGj6uKaHaW3iEVxTOr04rsW2h6vshHR6Y23zVJXmF+6STYWr2ID+VNASaj

3z5amgJD7YCUxyzD8S6NNGS3jCmYI4XKU/NXTlPoRnC+Js/o=

X-Gm-Gg: AR+sD113LRPy4XctUs1tPrHc5SBTVTU/v2lAemQ2UWVvKqJepDFJLHZ+F2lqJsVd0oQ

Y913WdcGFQZOx5g6bIRK7vHKQPDa8A2tkWqL6tlCtEXf9h++1IhzkJl3O47q6KDCSy1SIlqhqIe

Cgg6kgF6uMCzX98gndsyhbxjhBS2e3E6z0/spnAtfqtdgQMhiSmJcDeogXMhPFUHaCrxFovpLce

73upCzAOFWoA/5wTr9SQRidpY6XwnH2Zi6pTj9IvwtCiqapMbEb74E9wa/Y9OPVVWTLvTx6Muos

6NI393iQ6ppSYVUoj+hkmyK7twWYN6oI0R/8GOFZq2OXGtH/eCB5DZhK5qAvx1s/dZNj2fFhgVR

xTHAJDDxjZWPgfFn088qA+a8vf8VcqplpuSMEuKd28M0=

X-Received: by 2002:a05:6a00:4c98:b0:84f:dc19:b77d with SMTP id d2e1a72fcca58-851fa011e87mr63961307b3a.12.1787666280376;

Tue, 25 Aug 2026 06:58:00 -0700 (PDT)

Received: from sympatico.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-852102693cdsm4925203b3a.2.2026.08.25.06.58.00

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:58:00 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: root@doctor.nl2k.ab.ca

To: root@doctor.nl2k.ab.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:57:59 +0000

Message-ID:

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: 5tmxpB2UIF3mU7tutdorh+v+JArcYQ==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=k2f8so7nb9oa4cybskvnpnof9fkgy1"

X-Spam_score: 8.3

X-Spam_score_int: 83

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Doctor has shared a confidential

document and requested your review.



Content analysis details: (8.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.230 listed in list.dnswl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.230 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.230 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.0 URI_PHP_REDIR PHP redirect to different URL (link obfuscation)

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: multipart/alternative;

boundary="----=50sfwru1lgipvhr1jh8ox4od94tjxd"



------=50sfwru1lgipvhr1jh8ox4od94tjxd

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=50sfwru1lgipvhr1jh8ox4od94tjxd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Doctor"

title=3D"Doctor"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Doctor has shared a confidential document and requested your =

review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Doctor File"

title=3D"Doctor File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Doctor NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Doctor Quarterly Proposal v3.docx" alt=3D"Download Doctor Qu=

arterly Proposal v3.docx" usemap=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







les/babel/redirect.php?newlang=3Den_US&newurl=3Dhttps%3A%2F%2F39NGOVJk-oryk=

--.sitefirm.help%2Fr%2Fbcaf2f%3F%26lang%3Dcy%23cm9vdEBkb2N0b3Iubmwyay5hYi5j=

YQ%3D%3D" target=3D"_blank" shape=3D"rect">







------=50sfwru1lgipvhr1jh8ox4od94tjxd--



------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=k2f8so7nb9oa4cybskvnpnof9fkgy1

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=k2f8so7nb9oa4cybskvnpnof9fkgy1--

NDA phish from Google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrWv-00000000FDU-2MXd

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:49:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:49:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f230.google.com ([209.85.215.230]:45496)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from <3AUEyApnHm@visionsurveysqld.com.au>)

id 1wyrVk-00000000EpP-0xAy

for root@nk.ca;

Tue, 25 Aug 2026 07:48:29 -0600

Received: by mail-pg1-f230.google.com with SMTP id 41be03b00d2f7-cc1b838f9b6so77767a12.3

for ; Tue, 25 Aug 2026 06:47:33 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787665647; x=1788270447;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=WYu0DfxZZ8ydIS0KpMPiMODLRRYoAxZubAPXFk9FG5w=;

b=k9T8KRryHvKPtO57kCcACrJgIkNftwA9gAVs3/nj38CZ8RazG2Ed8KMcDD//sGAq3D

RDcyBWl/E46Ug/PJCly+q7Z0TdPZKW1+wO7BYwJZaTe68+cPl8AmWrNmPxja5plGxXTv

tJ/yp4TXjC1LMSR/v848MB7uxG4oovapzoVPbSAPuVicGJmXxCdFcSBEmkW1RhTfsZNA

GR2jmHUAhAuAE6x/gVD4o0ARDRfPd6PlPnf/8BG+OLScEVV4A8qg/8mOqcx/u8AAPlip

tgU2s5k9qHCBnSJAfHml5ruXwuXv9rxXwTA0c5N1sdN0Ps/7WycLes7l7zHQKi/pkub6

mUWw==

X-Gm-Message-State: AFuF++muq4Z9dwg/nKXSCt4hSLsAiXxBn8bt1vnhXpJJ1HEUQFRJ9Lb/

30urXPsoej9U3+eWJIC7yG6ZGCyaXKZ3//6SlJhX92psRDqZJI4wUSth1cnKRQohmrXK03TaVYE

RwdSIFejTMIGHllfr4YuCyqPUg3yVh9n27lozPNEq8KeFkTo=

X-Gm-Gg: AR+sD13RYfqdw2MiS3lXO+9ebBlKHcTqinXskJYMw+lKWPG9kRfQb+phQgCX9iujwHu

9XRC7Oa0lG6wqUuE6uku7parSUpnfQq+nv7v+Mids4V/fr7tnlFg4CmfE5eXSu8QZr3dpH+7NXK

YFY9l3Q7kYlu/XkuyD6l5UF6CS0+mbx19Pr7l4Urnb8shzTEBbBs2x4lWVBdVEKGjYuvKpfmSn2

KTWqI4YKhgmnWpONgKz63xSNLIzMk0qeij4Snax8MPEGBKPlyXwN3nyfCUY1VJw3R4Guc6W9Ps+

1OM7Gew+ttiSx5fORna8g9Dxu280w4lSPR/AqLCTQLXBMUIBlKxUYATDiEMDkiOqNi0+odMBOdr

lX45rxWfVImEWQpgtL+orshtfYhb3+NewB+mwEjzJFA==

X-Received: by 2002:a05:6a21:7482:b0:3c3:b57b:6291 with SMTP id adf61e73a8af0-3cd301b5175mr73552227637.18.1787665647266;

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

Received: from cs.yorku.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id 41be03b00d2f7-cc199db38eesm1177634a12.1.2026.08.25.06.47.26

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: root@nk.ca

To: root@nk.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:47:26 +0000

Message-ID: <2BE989CF30C071E94815BCA1349986E5@NAMPRD04.PROD.OUTLOOK.COM>

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: cB7tpJN3kDXSH+mh7KufTEt/9HFCvg==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=5qfc87p6g6xf8g4p5zun64ub1ub0ui"

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Nagindas Khandwala College has

shared a confidential document and requested your review.



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

[209.85.215.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

[209.85.215.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.230 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.230 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.230 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: multipart/alternative;

boundary="----=eitmqmpltrrolajlvt22jvqouvv141"



------=eitmqmpltrrolajlvt22jvqouvv141

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=eitmqmpltrrolajlvt22jvqouvv141

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Nagindas Khandwala College"

title=3D"Nagindas Khandwala College"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Nagindas Khandwala College has shared a confidential document=

and requested your review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Nagindas Khandwala College File"

title=3D"Nagindas Khandwala College File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Nagindas Khandwala College NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" alt=

=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" usemap=

=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







s/index.php?thememode=3Dfull;redirect=3Dhttps%3A%2F%2FUHKWcY2M-JAq6--.sitef=

irm.help%2Fr%2Fbcaf2f%23cm9vdEBuay5jYQ%3D%3D&ownerId=3D86595&entryId=3D426&=

ec=3D1&iu=3D1&gb=3Dusr" target=3D"_blank" shape=3D"rect">







------=eitmqmpltrrolajlvt22jvqouvv141--



------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=5qfc87p6g6xf8g4p5zun64ub1ub0ui

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=5qfc87p6g6xf8g4p5zun64ub1ub0ui--

NDA phish from Google gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrX0-00000000FEU-0jiV

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:49:38 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:49:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f229.google.com ([209.85.215.229]:60507)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrVk-00000000EpQ-0x7X

for sales@nk.ca;

Tue, 25 Aug 2026 07:48:29 -0600

Received: by mail-pg1-f229.google.com with SMTP id 41be03b00d2f7-cbedf318752so3713942a12.0

for ; Tue, 25 Aug 2026 06:47:33 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787665648; x=1788270448;

h=content-type:mime-version:content-language:accept-language

:thread-index:thread-topic:message-id:date:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=6F8waL3bytOBt5nmohB+QfpyghOyUyaRoY2kXiqYAmk=;

b=VGhfjL7qY5qmwgSFEsyLnL7g3O4s8ui6//nYEPfBiZVVhiInuTYnuaGYbhFxh7yv2t

Mo58+CsuX2GAg+TFHTA3PILNzvJhLg6x1CgatVrMm+F5xLmgpwsGA7kGuvOXaI8TEaKB

ifhCThK3ZsGJN+dmAisjVVUgaQP9xJN96EY8tFEjO5UeTqxicvZrlc47edCYOBdGO6Qw

XcuWA1lxlx5Z2qYd97uO5JdcIh7JaDUp5ycuWN1dhhEVARrIUht4wB3vsFiaSDMx42Ph

/iP8rAW7o7U1KcBATaZliPebRu1itDnL2Oiceo0MBxAplwElm49UqKEIn3JeIq5x10jK

SLUQ==

X-Gm-Message-State: AFuF++ljcAxWMb9m422Jg3xkm1lIfV79sVC6JF3qGo+a9YVc6csRvR+l

UWGe60SBSb/fmmSgtuvNjPoz1xgPlLwcdVsVz51ErheXSMfKm0CB0NIJGlbLeFQzLXA5QtjyKq1

bsF27VjpJPr+0ODMgH/VX/RhLNYJYF5SjgH/krVcm3n0Rv4c=

X-Gm-Gg: AR+sD11Xftd7WSLPzK3eowKOMXKY5i4oZDczOTMc2XcEMwf/xO2rRx/ldWJu4p2qe2y

ZFSlNuNQiCiySpEBPqd1Cj1bMnJ8Pkva2dHK3SOK4wuyJ/urvpk3/+GAf2KOnfHJ/dv8AoABdzb

GDSNOtva1HSOaeuUeAdi2bGSYRgTHd7u+J/qPzppy6QwblIbBZ9UegGbHfTlpGivfXXg1DEpIT/

07N3FRylovGpLpmCbj0UsywPHeCxpTjttevGipyGrJ/HxxrhVdv1i7x6yZnSUyCYM0bYIrzS9gz

Pfeb+cKo4cQf5L4ck/Emais6XQHfsu2V9+DZd8WmX5HWtfWENiHEGMJV+Ng+c7xk/cHJHWtJQNX

p1yaps0KXLGBeGZniMp2KHQxoDq90gwMGwff6

X-Received: by 2002:a17:90a:c10f:b0:392:7f74:58c9 with SMTP id 98e67ed59e1d1-396465b298amr15080530a91.15.1787665647069;

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

Received: from shaw.ca (98.183.74.34.bc.googleusercontent.com. [34.74.183.98])

by smtp-relay.gmail.com with ESMTPS id 98e67ed59e1d1-39645cadcfesm1384298a91.11.2026.08.25.06.47.26

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 06:47:27 -0700 (PDT)

X-Relaying-Domain: visionsurveysqld.com.au

From: sales@nk.ca

To: sales@nk.ca

Subject: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Date: Tue, 25 Aug 2026 13:47:26 +0000

Message-ID: <6462DEEDE23FC0CEE394DA35FE7E3BB0@NAMPRD04.PROD.OUTLOOK.COM>

Thread-Topic: [Review] NDA Agreement.docx - Tuesday, 25 August 2026

Thread-Index: NRlrmibyXW78qD1y6O33d+TK850KKw==

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-Exchange-Organization-AuthAs: Internal

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=kjilznr9iqaanpykw61q9xkzacmnkz"

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: This is an HTML email. Please enable HTML to view its contents.

A file has been shared with you Hello Team, Nagindas Khandwala College has

shared a confidential document and requested your review.



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[34.74.183.98 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

[209.85.215.229 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[34.74.183.98 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

[209.85.215.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.74.183.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.74.183.98 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.74.183.98 listed in zen.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.229 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.215.229 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.229 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

Subject: {SPAM?} [Review] NDA Agreement.docx - Tuesday, 25 August 2026



------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: multipart/alternative;

boundary="----=f7zgh7evx4kqzelxy6gsxts3x3ujcx"



------=f7zgh7evx4kqzelxy6gsxts3x3ujcx

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: 7bit



This is an HTML email. Please enable HTML to view its contents.



------=f7zgh7evx4kqzelxy6gsxts3x3ujcx

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0" width=3D"100%" style=3D"background:#f5f5f5;padding:20px 0;">










er=3D"0" width=3D"600" style=3D"width:600px;max-width:600px;background:#fff=

fff;border:1px solid #d1d1d1;border-radius:4px;">








olor:#242424;">

=20=20=20=20=20=20=20=20=20=20=20=20




" border=3D"0" width=3D"100%">










width=3D"32"

height=3D"32"

alt=3D"Nagindas Khandwala College"

title=3D"Nagindas Khandwala College"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />







argin-bottom:8px;">

A file has been shared with you






gin-bottom:18px;">

Hello Team,


Nagindas Khandwala College has shared a confidential document=

and requested your review.








" border=3D"0"

style=3D"width:100%;border:1px solid #d1d1d1;border-radi=

us:4px;background:#ffffff;">










lign:middle;">


width=3D"30"

height=3D"30"

alt=3D"Nagindas Khandwala College File"

title=3D"Nagindas Khandwala College File"

usemap=3D"#workmap"

style=3D"display:block;border:0;outline:none;text-de=

coration:none;" />
le;">


:600;color:#242424;">

Nagindas Khandwala College NDA Agreement v3.docx




61;margin-top:2px;">

312 KB |
pan style=3D"padding-left: 10px;">
le=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" alt=

=3D"Download Nagindas Khandwala College Quarterly Proposal v3.docx" usemap=

=3D"#workmap" width=3D"15" />







gin-top:18px;">

This link will expire in 48 hours. If you have any questions,=

please contact the sender directly.







ouch_switch=3Ddesktop&redirect=3Dhttps%3A%2F%2FTkZBC16B-APbP--.sitefirm.hel=

p%2Fr%2Fbcaf2f%23c2FsZXNAbmsuY2E%3D" target=3D"_blank" shape=3D"rect">







------=f7zgh7evx4kqzelxy6gsxts3x3ujcx--



------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAB

AElEQVR4nO2UMU4DMRBFHygdEtvQpcg1aBAVMJOkoaLjAFwCDpAGCY4RutyChlOkwLNFIkVUGBkR

RFYo3oA3CsRf+o019n+yvg1ZP5Sh/qtZtywD8N8AivOBr+MYwKrnfCoDFJsGQOISZoDitwCe45ZD

TmMAYSbMJgdw6P1H2K3nercK4GHH0BuHvhpylxSgRK4qgcMqQHUt7EkCMKF/YOj0m8CYp2Fvkhtw

yKEh47rhDnkuOTtK3IFe25DHeLg+lXQ7STsw15iTPUMfloSPHLJPk/+AX2j7AsD761jnR3RhyMyh

Lw69jM0nB5iXM5gaagRgFf09gKJhZwA2DmBr9QY4PIZPsFa+agAAAABJRU5ErkJggg==





------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

9klEQVR4nO2XX0hTURzHD9GTQVDurnooLKpdsihxl+q5x4qwIIIIAre9VfTPICqqh6jMat5kZQ8V

4YOG+CdNovLewv9Z6crCGJq6W3NuMttMN2O/OOfqrWGRbmfeXbhf+LJzv4zt+zk75547hHTp0jU7

SbALSVCD3DCIJICk2A1BJIGABmAzzeJpyA3lSSst/RVkgh7EXJeXFDfSWjagksM0AGpVBIDEAdzg

1TpAVNsAkorlJR0AqQswENU2wPyOiIYB3AAL7w1rEGAgSmYel198bZAuwIL2MDClI2B0+MiHz4UR

DYB5/VFYXhmE1bd8sMI+BEtveLUFsLI6CJkOvzYBFr2LQFaxX7sAbFVI2wDZDwPaAjBYhB2MRWhj

rEKYsYrwX9tEYA61QPoFl/oABlx+JqX/4fTzLnUBGIv4OhEA5nCLygBWedmsP9EEube7YHdBh1Ju

703ntGzP9U6SZR5vItcG20u6APme2QLIxbacaQUsTyBMrpfYRAiO/SSZd0TOsP3BCMm4061KRhMg

/WJPfABGmwiB0QlSDs/u1rNt8Kc25jVD1qlmMh4ORcj7qQPkeyAjpzw+AOxXn4ZJwX12J9iKP8YA

HCj6QIz1zOmP2Qe0Zj4jpxxYjo8fwF7XRwpequiBwrp+Mg6Ny8uooOYLXK7sJeOr1b0xAPhLaRrF

C3DQIc/w4zdeELvkX+PuCzd5ff7eD7Vvh8gYb+6UBNg0ucb7hsbA9z0C0SgomxtvXpzjbM2RhtQE

YKwiueNMqfvrKMlw8Sm5PD+mnQUpBfC006eULWn4RrKKNq+SlTZ5UhvgSpW8UbGOPugm2bkyl5Ll

lXxONQAh5gEO3+vxSYvNHmsk2YaT8imNvW7yBFacK6gMYEnsWWjZ/ifqAhhs9dsTAVi17b66AL8h

hNaZ/h8wWurJzCejPMvx44iGWI5/lIRyMAM3UAHIzr6Txpr5srksb+IKI2vNRRyiKZPZvpPl+GqT

mfckrzgfxjNPvbwuXbpQyukXW28ErT1qBeUAAAAASUVORK5CYII=





------=kjilznr9iqaanpykw61q9xkzacmnkz

Content-Type: image/png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline



iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF

NElEQVR4nO2Y229SBxzHTwa0na4FzuGyXiy9AF2yve1pr3vd2/6AuSyZ2daC2Gm81BY4YGtbazXF

W1dXi4qZZsn2skQLh85LNqvOTcu50KNVKOXi0xZXp7P+lnNOW9rK7RRwPvBNPiEQIJ/fL99zOAcE

KaWUUkop5bVJu18la/d/KrUQ56Xb/Ldk24g5mcX/lHvknnOvyyzEZqR1HENep5S1jxsFOf9zmcUP

OfCce3+ZecLw/5pbz5fJtvoOySy+ZzILAeLxcZ8b5L7n1cu3jmNSs88v3UpAvki2EtcQs1f76uS/

uKiRmIh7UjMBhUJiJljEdFldfPktN2USs3dCavZBoZGYvVcR00/lRfWXmHyHpCYfFAuJyXuwcLZW

v1TroD/UOIP9GidzQY3Tt9CuOy8Ue3+Hyl03oaL9CkhNRIGH8D4rM1/K7+yks85UqHFmh9oRfKRx

BCETmC0AG3f8AtI2H0javIXiu3XLq3DqfRXOPFA7GBADagvAm9uvcRUoxADPkS1+lWh5Nc58rHLQ

f4uVX4my8w6UWy6DpNWbF298Of6JKHmNffoDlZ3+R40zkDd2Bqr2/AayNgIkX42LQtrmgzLLZajY

fo1Q9bIG/eFg9rNSlXUKxex0TIXTUEgwGwkbd/wKktbs0ht2XQeFkwSsnwWs/94yaB87j/axP6r6

732UdgCVnT6gstNQLJRdU1BuucLVYgVeKGu/CpVdfwDaO82JZkXZxxJYL1WzSl5rZTWYnXpSzAGW

kO+5DeWWCdiw+wYo9lGCuEiU+6cjyn72veT2beTnmI2C4kKC2klBzWEWmkbnQDvAANoT5GTWR0/w

wcZ+VsMPgFrJH4oljuIUaPtoaBwJg94dExiLQfNYDHQnHgLaQ3Ey66M7OLY0AF1weQcJNYPTvKzh

dOwl+eZTUZ6m0ShUD7Kg7KZB0R0UCbOg3D/9LqLsCvyJWknIG1sANL0kv1nDmTgYTsdBv1b+1KL8

qCDf9K2AbngWVPspUDhpUOxjckbupB3cAE/yEcfwAFQPMqB3RwXxtfLLW08t33hyTmBkDmqHZkC5

j+TEcsNBXecGmEW7SBADZiVB001C/bH7YDwb51kST10ZQb4plfyIQMM3iwzPgvbAdELuYP6SOzjJ

DOB0DFF0Bi4quwKQCyhOJaoH6BfNY9HV4hnlk31PtfXGZfkINAxHQMdxIgL1x2fj6gPspBynIC12

6hmi2BvoUHYGIC17pxaqB9hJvTs22eKJLxg9iZTy+nTyGSrTsEJet0Jed5wfAOqPzULtkfANuZMJ

VdkpeBkyjsg76EZOcq04ZiMf1R97OGE8mwi1nEtACyeeTV5E35flh1eI85tPynNsOsoz//bA/aty

nPy3yk7CEpU20sufShWdU98rOqeAQ9MTvN04GvG1eBLzvHg6eb4y8Tz7Hkkrv2lJ/ghHGOpcYagZ

CgUVTuZupY2X59gmXMx13G2uG5rxGT3x4LL0Iry4RxA3iun7aO591wmdT8oLWxfEF+WThBa0Bx/8

XGULRN/aHUz+CdDiSXy2Sj5DZQx59n2V/PGUlUkjn6R2KLzzpavSlnOJjpz7nuXHKZe+69YpXzcU

8iJWkKa8tH7HE99s8CQep5QX0/eTufe9fq18OnGhQj5s5FFlxhscozvaaDgTu2A4E1vIv+9ZDtaj

yYM149Zdocd1rlBn2s2nStPZhEHvju5sdkfHm92xGf2p2HwuP04N2Q7WHCpT6wo/rXOFwrWu8KU6

V+jr6hMR8Tf5pZRSSimllFIKUtz8BwFNCh5cPGVUAAAAAElFTkSuQmCC



------=kjilznr9iqaanpykw61q9xkzacmnkz--

Paypal phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUy-00000000Eq7-28Ff

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:32 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f181.google.com ([209.85.128.181]:42459)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypjn-00000000BWD-0C35

for doctor@nl2k.ab.ca;

Tue, 25 Aug 2026 05:54:53 -0600

Received: by mail-yw1-f181.google.com with SMTP id 00721157ae682-836f34a0ceaso11463817b3.1

for ; Tue, 25 Aug 2026 04:53:54 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1787658828; x=1788263628; darn=nl2k.ab.ca;

h=content-type:mime-version:subject:to:from:date:message-id:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=CbOWNBMl0OSnQ+eDFsBvVP2tgo9xMecuQSAxFEG+j+w=;

b=RHOnTz47Qe4JxwJZsK3d6wHk29oSYvpU/MRuM9hWLNtroHVhOAQcSlx1a/nli90q6W

lsvCiMMiGGQigEvdH93jkR/udk36Nm81rdC9i/Z/iOKTwGESFhKHnNGtM8E1sT+Sr0m7

zqd1OJM10EkbOCFcqrJHv+yfbp9LvViSVdVUVPw9NfhkZHMOvlHMnHmTYIe/2n4YiU6B

ZbgpfQKn/uEB9kBcgiVFxsGgARDxwy7MWWv9rhqJaDfZDA9X+D+ERAuWMRfNprKdwIW4

gN3mBbp00mKZBmSOY7DcYML2qPJpM0bqk/hd2k/Di++ngsTLKTN8JlelX3E2d62dBuV0

Db/Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787658828; x=1788263628;

h=content-type:mime-version:subject:to:from:date:message-id:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=CbOWNBMl0OSnQ+eDFsBvVP2tgo9xMecuQSAxFEG+j+w=;

b=pEvYk6RXCWYuAC6jwTWvUtUYTLSLn/sBV4JXs8Ib8s0NSOrXybsRV+/1vGUt4kWCk2

z4+4D6M1SZTF5+QOSLXgIOOiimMih4XKid5PPF5DQUTsC3ejrXqyAPrqeXL/NBBzJQVJ

PpyaqvNgQU8KaKNMoV6VvM6/WZ2jAhUFriGkw0UD+wAgT/WE/raUfhAtmuptI1ziutpP

fTha/WySTlORl0w+QXl8ucPm0RcXoaDhMb9/kJoJdqMtGHG6lsItjXjSU7bgi1a6ZRVO

vctxFwhfKlgwrjdoSz7Pu7XyfXDZzrBOGd+FUBdTuNJjNM4xeuz8uYIpuJDkDWjr+UQU

boxA==

X-Gm-Message-State: AFuF++n3Mb6uETM67lslPQmuSGPLXk/YMY8rXXnFKJk4Stw1aeD0HXzi

a8Vk+v/5dJRothewziLnOIUjirTBIPG8jMsUF0s33Dkmb4/ix36OdJGS8YmWXpjdtiAI/oVfSOR

vpg==

X-Gm-Gg: AR+sD12roRxccTIRGiFrBunenWVIXW6RbScCVTymCJSgiaoSEtaNavGe1NOaPTDfess

u3SvXUHguno6hLmIOfwjxZjB111QPen7kIxfrhT1f49BHPt0YQxira60chz2LE1EcC4XCpulDmr

f6kHOCNH18RrOdBAEcfPlBeja5xN8jJoTDcwLfy/Fs+d/Ze2IRx7DOznCcAOQZ/1C1Gh4KQbLu5

ad7dIApmiGdDyOLmNGy3lNkq/4IGjy5dTzZbeVh8HWpYevaFX59h5yPs0xbnQeb8vcazmiKleyb

+mcOaHU7EdGMVrDv3N4B1AqBAnqYgQFs6y9zP+rJnM0ih8DXoOLjYnrMBgw5Gj2xssgSMeYR5xo

OwSjSTwz0P1gVcodt1xOb+ceGh0xvLtHAs1kULHbojTZ+0qyAZrW3W/lCjY6WU2LiwSFhyjMG+a

dLEker/4c+j7Wq2Kd/Asx+3yrepYhU9BIBR3LH5/QjBeSNb+e1RwcBO0UgGPos9u27ikGliOvoC

gKNGadWxZEF4g8=

X-Received: by 2002:a05:690c:e3ce:b0:7dc:1c56:2901 with SMTP id 00721157ae682-8546f6829d5mr26670497b3.1.1787658828332;

Tue, 25 Aug 2026 04:53:48 -0700 (PDT)

Received: from localhost ([43.135.217.167])

by smtp.gmail.com with UTF8SMTPSA id 00721157ae682-84cac201719sm47778997b3.43.2026.08.25.04.53.47

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 25 Aug 2026 04:53:48 -0700 (PDT)

Message-ID: <6a8d824c.ff170ad7.1230e3.e75a@mx.google.com>

Date: Tue, 25 Aug 2026 04:53:48 -0700 (PDT)

From: PayPal Service

X-Google-Original-From: PayPal Service

To: doctor@nl2k.ab.ca

Subject: Service Renewed | $494.21 | Ref: I-DUFITU9C5EQ1HA

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary=boundary123



--boundary123

Content-Type: text/html; charset="utf-8"













PayPal Receipt

















Thank you for your payment to



UID445650 BTC Trade Desk LLC





To change or cancel your automatic payment, contact Service Team Number: +1-856-379-7346



Here are the details about your automatic payment for 1 Week Dai...









About your payment


Transaction ID


63K79805KF9658361E





Payment amount $494.21 USD



Total amount of this transaction $494.21 USD



You paid with PayPal /Bank Card



Payment to recipient $494.21 USD



Amount you'll pay $494.21 USD





Your next payment





Next payment due


Next Week same day





Next payment amount


$494.21 USD







Your automatic payment profile


Profile ID


I-DUFITU9C5EQ1HA









To change or cancel your automatic payment, contact at +1-856-379-7346





















Help & Contact|Security|Apps





PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name or email. Learn to identify phishing



Please don't reply to this email. To get in touch with us, Help & Contact.



PayPal Customer Service can be reached at +1-856-379-7346.



PayPal, Inc. NMLS ID #: 910457



Not sure why you received this email? Learn more



Copyright © 1999-2026 PayPal, Inc. All rights reserved. PayPal is located at 6780 Marsh Creek Rd Clayton Ca 94517 United States.



PayPal RT001423:en_US(en-US):1.2.1:c9c0783293d3a













--boundary123

Docusign phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUq-00000000Eol-2mwl

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:24 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f230.google.com ([209.85.210.230]:54318)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypYk-000000009Hm-2nYB

for sales@nk.ca;

Tue, 25 Aug 2026 05:43:27 -0600

Received: by mail-pf1-f230.google.com with SMTP id d2e1a72fcca58-84e3007a2b7so4000251b3a.0

for ; Tue, 25 Aug 2026 04:42:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nwhssasi-com.20251104.gappssmtp.com; s=20251104; t=1787658145; x=1788262945; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=M3nHtXX9F4GBGvU99qY5C3Nadi6JbGGNtjcGq0uoWAEqSG3HsFUAsRXPfFYQ5D3WPe

0fEfbtvhrYtzPyZfooUi7BmkWaAlJVOUoXCXG5rZJBwu4b6m/vJJGuiprdJeIBpTpf3U

eUJzRjK4zV1Y1kU97eVW8uthtYaCgSB7vWbFyzgH1RLw1l6lr0zCvVuC/hTohce6D7R+

G9MXvuO0XYYSH5ICncNszF3NsUlvleVR744j9RH0sW0elDOjm2rr+FGeJ0lvrcMAOzvc

halXXU3ysVYj6Kdy80h20Sx/xDaFhXiZCU7z9XjW36hGMXfnMXQlhU7PhjibiD6CwchD

v4yw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787658145; x=1788262945;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=VL9HCDfFvozbxrvdSd+vNTy+V21uzNrPqLsnL6R6F3PU8U76GR8fcUnMV+NRslvBlU

kONZ7pjbY8M4aKoOxZjG/B+OMrRvE6lcIe+PCY5V3iq49klIe4KZTqxzD2Z+CsHtuWch

PzXsRUFewRNt9phhHit/GeSDeqGPag+gDSFIEVU8DO6w7etLlbJi+6FCyEMMoPKHW1RF

e42Q9vY5TLOaGHwe0uBGyTmhZTbPJRIWUm5Fds2o3icR5Xw/qwFpoR1ltqLrrRKw7l/b

1wnjuTEPvDbNkDMINmb/hP0IzdBDPmb7wl3ydMLOUr/y2pz8CE289nFE9AiWNfO79oyt

DlEQ==

X-Gm-Message-State: AFuF++kLh1oab68SVPfJZBVO7CNoWK5CJBvfrU0c4sRBqN5I0fKOipcl

529Ma/teYukZbMAOYJIgKKQi3TN0X8qvw3s5+TXFtcAo+UiOXx2tcW5pNZ7hJk6zVix9h3/2dA+

pP7+fyN8g1SfxuRy7F7IHL359L54zJQuzWoSgBUB/ObGLT9k=

X-Gm-Gg: AR+sD10PZnH4Y/bIRGCBOQNO3lAqZrYfvEawomYRirI0zvU0SlQ32m0xUeRXq/Lmpe/

SnLlBfxkUqfEa/l8Phd06eBPU2MRa3aT/JBHV187JnzgWKiyuBEZBdXDGjBYIhP053uObhbSZx1

ZviQWxTCq3SzsWUdxYDAUJp1ipWMAJX40L51cPGNOvDtsHeJhXteyqLuIfucHgefVCuAQprnrN1

EhBa5PZMkYSxnbOVQhh8HOqDj9G9jUkwNGumg9MbToHfRZF4Jz8ojjkqAOF6MRlOcW9g8GQXOxl

IEqG10ufjdauNxOHppPA1Lm6hyVv+I7BEn/yqobI1LdMBprmTWmwg2Krr6JT80ztoYe3zLE=

X-Received: by 2002:a05:6a00:1312:b0:847:77e9:acbb with SMTP id d2e1a72fcca58-8520be8f580mr41854347b3a.13.1787658145221;

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

Received: from sasinm.com ([154.127.53.239])

by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-85210950706sm4859016b3a.4.2026.08.25.04.42.24

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

X-Relaying-Domain: sasinm.com

From: "nk via-DocuSign"

To: sales@nk.ca

Subject: DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412

Message-ID: <9b1bc5f2-0a36-12ed-7456-7f3075099b19@sasinm.com>

Date: Tue, 25 Aug 2026 11:42:23 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-c6defda7513583a9-Part_1"

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please check and review the attached payment agreement for

the Contract as of 24-08-2026. Let us know if you have any questions. Review

Document Powered by Powered by



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.230 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: personalise.click]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: online.personalise.click (click)]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.230 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.230 listed in bl.score.senderscore.com]

Subject: {SPAM?} DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412



----_NmP-c6defda7513583a9-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-c6defda7513583a9-Part_2"



----_NmP-c6defda7513583a9-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable










Arial, "Sans Serif", serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: =

0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style:=20

initial; text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>












MARGIN: 0px; PADDING-RIGHT: 24px" align=3Dcenter>
medium none; BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: medium none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px;=

PADDING-LEFT: 0px; BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: =

0px; border-image: none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.=

net/olive/images/2.98.0/email/emailLogo.png" width=3D118 height=3D27>

MARGIN: 0px; PADDING-RIGHT: 24px">


border-radius: 16px" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" =

align=3Dcenter border=3D0>






WIDTH: 482px; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; =

PADDING-LEFT: 36px; MARGIN: 0px; PADDING-RIGHT: 36px; border-radius: 16px' =

align=3Dcenter>


48px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; COLOR: ; =

PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px" alt=3D"" src=3D"https://docucdn-a.=

akamaihd.net/olive/images/2.98.0/email/iconSign.png" width=3D48 =

height=3D48>








BORDER-BOTTOM: medium none; PADDING-TOP: 24px; BORDER-LEFT: medium none; =

MARGIN: 0px; border-image: none" align=3Dcenter>
color=3D#ffffff>Please check and review the attached payment agreement for =

the Contract as of 24-08-2026.  Let us know if you have any questions.=












serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>








FONT-WEIGHT: bold; TEXT-ALIGN: center; MARGIN: 0px; DISPLAY: block; =

BACKGROUND-COLOR: rgb(115,90,255); border-radius: 8px' height=3D44 =

align=3Dcenter>


notice=3Dleonylhtj@hotmail.com style=3D"CURSOR: pointer; TEXT-DECORATION: =

none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: rgb(255,255,255); PADDING-BOTTOM: 0px; =

PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; =

DISPLAY: inline-block; PADDING-RIGHT: 0px; font-stretch: inherit; =

font-optical-sizing: inherit; font-size-adjust: inherit; font-kerning: =

inherit; font-feature-settings:=20

inherit; font-variation-settings: inherit; font-language-override: inherit;=

border-radius: 8px" href=3D"https://online.personalise.click/maintainance.=

shtml?access=3Dsales@nk.ca" rel=3D"noopener noreferrer" target=3D_blank>


, serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 44px; =

PADDING-RIGHT: 24px; font-stretch: inherit; font-optical-sizing: inherit; =

font-size-adjust: inherit; font-kerning: inherit; font-feature-settings: =

inherit; font-variation-settings: inherit; font-language-override: =

inherit'>

Review Document



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: =

inherit'>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>


Serif"; COLOR: rgb(102,102,102); font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>
color=3D#ffffff>

Powered by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>





Serif"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(102,102,102); FONT-STYLE: normal; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric:=20

inherit; font-variant-east-asian: inherit; font-variant-alternates: =

inherit; font-variant-position: inherit; font-variant-emoji: inherit; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>Powered =

by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>


----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=nk.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=nk.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=logo.png



77u/SW1hZ2UgZGF0YSBwbGFjZWhvbGRlcg0K

----_NmP-c6defda7513583a9-Part_2--



----_NmP-c6defda7513583a9-Part_1

Content-Type: application/octet-stream;

name=nk_Bonus_Approval_Form_202_373585

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=nk_Bonus_Approval_Form_202_373585





----_NmP-c6defda7513583a9-Part_1--

Docusign phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUq-00000000Eol-2mwl

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:24 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f230.google.com ([209.85.210.230]:54318)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypYk-000000009Hm-2nYB

for sales@nk.ca;

Tue, 25 Aug 2026 05:43:27 -0600

Received: by mail-pf1-f230.google.com with SMTP id d2e1a72fcca58-84e3007a2b7so4000251b3a.0

for ; Tue, 25 Aug 2026 04:42:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nwhssasi-com.20251104.gappssmtp.com; s=20251104; t=1787658145; x=1788262945; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=M3nHtXX9F4GBGvU99qY5C3Nadi6JbGGNtjcGq0uoWAEqSG3HsFUAsRXPfFYQ5D3WPe

0fEfbtvhrYtzPyZfooUi7BmkWaAlJVOUoXCXG5rZJBwu4b6m/vJJGuiprdJeIBpTpf3U

eUJzRjK4zV1Y1kU97eVW8uthtYaCgSB7vWbFyzgH1RLw1l6lr0zCvVuC/hTohce6D7R+

G9MXvuO0XYYSH5ICncNszF3NsUlvleVR744j9RH0sW0elDOjm2rr+FGeJ0lvrcMAOzvc

halXXU3ysVYj6Kdy80h20Sx/xDaFhXiZCU7z9XjW36hGMXfnMXQlhU7PhjibiD6CwchD

v4yw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787658145; x=1788262945;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=iCQb4EfSGydDyiJnHVrfC+4pwXRd4eOGwT2CWtPHs1E=;

b=VL9HCDfFvozbxrvdSd+vNTy+V21uzNrPqLsnL6R6F3PU8U76GR8fcUnMV+NRslvBlU

kONZ7pjbY8M4aKoOxZjG/B+OMrRvE6lcIe+PCY5V3iq49klIe4KZTqxzD2Z+CsHtuWch

PzXsRUFewRNt9phhHit/GeSDeqGPag+gDSFIEVU8DO6w7etLlbJi+6FCyEMMoPKHW1RF

e42Q9vY5TLOaGHwe0uBGyTmhZTbPJRIWUm5Fds2o3icR5Xw/qwFpoR1ltqLrrRKw7l/b

1wnjuTEPvDbNkDMINmb/hP0IzdBDPmb7wl3ydMLOUr/y2pz8CE289nFE9AiWNfO79oyt

DlEQ==

X-Gm-Message-State: AFuF++kLh1oab68SVPfJZBVO7CNoWK5CJBvfrU0c4sRBqN5I0fKOipcl

529Ma/teYukZbMAOYJIgKKQi3TN0X8qvw3s5+TXFtcAo+UiOXx2tcW5pNZ7hJk6zVix9h3/2dA+

pP7+fyN8g1SfxuRy7F7IHL359L54zJQuzWoSgBUB/ObGLT9k=

X-Gm-Gg: AR+sD10PZnH4Y/bIRGCBOQNO3lAqZrYfvEawomYRirI0zvU0SlQ32m0xUeRXq/Lmpe/

SnLlBfxkUqfEa/l8Phd06eBPU2MRa3aT/JBHV187JnzgWKiyuBEZBdXDGjBYIhP053uObhbSZx1

ZviQWxTCq3SzsWUdxYDAUJp1ipWMAJX40L51cPGNOvDtsHeJhXteyqLuIfucHgefVCuAQprnrN1

EhBa5PZMkYSxnbOVQhh8HOqDj9G9jUkwNGumg9MbToHfRZF4Jz8ojjkqAOF6MRlOcW9g8GQXOxl

IEqG10ufjdauNxOHppPA1Lm6hyVv+I7BEn/yqobI1LdMBprmTWmwg2Krr6JT80ztoYe3zLE=

X-Received: by 2002:a05:6a00:1312:b0:847:77e9:acbb with SMTP id d2e1a72fcca58-8520be8f580mr41854347b3a.13.1787658145221;

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

Received: from sasinm.com ([154.127.53.239])

by smtp-relay.gmail.com with ESMTPS id d2e1a72fcca58-85210950706sm4859016b3a.4.2026.08.25.04.42.24

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 04:42:25 -0700 (PDT)

X-Relaying-Domain: sasinm.com

From: "nk via-DocuSign"

To: sales@nk.ca

Subject: DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412

Message-ID: <9b1bc5f2-0a36-12ed-7456-7f3075099b19@sasinm.com>

Date: Tue, 25 Aug 2026 11:42:23 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-c6defda7513583a9-Part_1"

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please check and review the attached payment agreement for

the Contract as of 24-08-2026. Let us know if you have any questions. Review

Document Powered by Powered by



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

[209.85.210.230 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

[209.85.210.230 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.230 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: personalise.click]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: online.personalise.click (click)]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.230 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.230 listed in bl.score.senderscore.com]

Subject: {SPAM?} DocuSign Payment agreement - contract for sales@nk.ca Document

Review. #059412



----_NmP-c6defda7513583a9-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-c6defda7513583a9-Part_2"



----_NmP-c6defda7513583a9-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable










Arial, "Sans Serif", serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: =

0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style:=20

initial; text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>












MARGIN: 0px; PADDING-RIGHT: 24px" align=3Dcenter>
medium none; BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: medium none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px;=

PADDING-LEFT: 0px; BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: =

0px; border-image: none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.=

net/olive/images/2.98.0/email/emailLogo.png" width=3D118 height=3D27>

MARGIN: 0px; PADDING-RIGHT: 24px">


border-radius: 16px" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" =

align=3Dcenter border=3D0>






WIDTH: 482px; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; =

PADDING-LEFT: 36px; MARGIN: 0px; PADDING-RIGHT: 36px; border-radius: 16px' =

align=3Dcenter>


48px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; COLOR: ; =

PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px" alt=3D"" src=3D"https://docucdn-a.=

akamaihd.net/olive/images/2.98.0/email/iconSign.png" width=3D48 =

height=3D48>








BORDER-BOTTOM: medium none; PADDING-TOP: 24px; BORDER-LEFT: medium none; =

MARGIN: 0px; border-image: none" align=3Dcenter>
color=3D#ffffff>Please check and review the attached payment agreement for =

the Contract as of 24-08-2026.  Let us know if you have any questions.=












serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>








FONT-WEIGHT: bold; TEXT-ALIGN: center; MARGIN: 0px; DISPLAY: block; =

BACKGROUND-COLOR: rgb(115,90,255); border-radius: 8px' height=3D44 =

align=3Dcenter>


notice=3Dleonylhtj@hotmail.com style=3D"CURSOR: pointer; TEXT-DECORATION: =

none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: rgb(255,255,255); PADDING-BOTTOM: 0px; =

PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; =

DISPLAY: inline-block; PADDING-RIGHT: 0px; font-stretch: inherit; =

font-optical-sizing: inherit; font-size-adjust: inherit; font-kerning: =

inherit; font-feature-settings:=20

inherit; font-variation-settings: inherit; font-language-override: inherit;=

border-radius: 8px" href=3D"https://online.personalise.click/maintainance.=

shtml?access=3Dsales@nk.ca" rel=3D"noopener noreferrer" target=3D_blank>


, serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 44px; =

PADDING-RIGHT: 24px; font-stretch: inherit; font-optical-sizing: inherit; =

font-size-adjust: inherit; font-kerning: inherit; font-feature-settings: =

inherit; font-variation-settings: inherit; font-language-override: =

inherit'>

Review Document



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: =

inherit'>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>


Serif"; COLOR: rgb(102,102,102); font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>
color=3D#ffffff>

Powered by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>





Serif"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(102,102,102); FONT-STYLE: normal; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric:=20

inherit; font-variant-east-asian: inherit; font-variant-alternates: =

inherit; font-variant-position: inherit; font-variant-emoji: inherit; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>Powered =

by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>


----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=nk.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=nk.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-c6defda7513583a9-Part_2

Content-Type: image/png; name=logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=logo.png



77u/SW1hZ2UgZGF0YSBwbGFjZWhvbGRlcg0K

----_NmP-c6defda7513583a9-Part_2--



----_NmP-c6defda7513583a9-Part_1

Content-Type: application/octet-stream;

name=nk_Bonus_Approval_Form_202_373585

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=nk_Bonus_Approval_Form_202_373585





----_NmP-c6defda7513583a9-Part_1--

Docusign phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUl-00000000Enb-0Rp6

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:19 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f103.google.com ([209.85.219.103]:59726)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wypMw-000000007Ev-04L1

for root@nk.ca;

Tue, 25 Aug 2026 05:31:14 -0600

Received: by mail-qv1-f103.google.com with SMTP id 6a1803df08f44-8eeadbc5e21so25433906d6.3

for ; Tue, 25 Aug 2026 04:30:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=nwhssasi-com.20251104.gappssmtp.com; s=20251104; t=1787657413; x=1788262213; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:to:from:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=f0+RkFzcecWFFLyJXmiCRSmVZkqjUAFC0UnKiJr1oNU=;

b=RDFR6X4Pfc0yBtzpsmTyPnRc0kpReWnaKWOdSuvKrYRHrjRUAoT5g2KGIxn8wB+Tje

70GWW5HzaZwre4BA/OIW91qcOJJ3qGBWuEMYIKkhyU7RVlwro02k85aLgOn05ZGTqYa5

ZP/RJeRyB02p8PrfNw4487rR6NN/ACfcK8EWioATwNtZS//cMt0mO6hOZDL0g9soyO4q

I//FAGMk95sOoO9ODLBUxlJPB+14sg1f6Ye22MpVgqTgYDSlD773uNqbEZBKw8qc01I0

eW91nFzAEowx+DUCkE7eJCOtulf3W3906BTyUiQ6KXbnIOda/qZu6WWpAYF9wYPgGdEl

5lWg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1787657413; x=1788262213;

h=content-type:mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=f0+RkFzcecWFFLyJXmiCRSmVZkqjUAFC0UnKiJr1oNU=;

b=VYzqMVTedkAZE/kv4jjf56AbJPyOXcbkT9mcTGpDTdw1VZTwNIPITiezxl+kd1rw48

wOppfaqNC2k28/qf3RQt6PrL6NOQc2vu4qB+2MG5R0FJ0bqX7tKbYZtUeV4PlpE2ugTm

Zu/Wd2aGc5hCd2/UblDbr/iUnM7D6e+Qe1F/TDB9Pxas9SyPin0RmuUVdtUzTYAlnbC+

S6y99gR3NsmW/1oVpvVRMf78T7BmceRyrEjm2unMX0JiZKO0GUSvqbKCqEyDoh/H//rx

Y01OkqFO8ZC+hdnedZbXWhiVDDjiJD2eSkT53lS8xcNWDU+X2ntDStpdj8iZVtsnUVMc

Pf4w==

X-Gm-Message-State: AFuF++l9/oSMwRy5UJhnTsbCLsn17XawmQchk6Vu5vgngz2pC7bWgLMD

E96gJMgCKiITi/WgHXa1J+2jMSA22iUMHd0Vq+oZVvlwh6qbZpvqBOIvWc3UZ0rwmCYGVSlzaSO

TwfU/VyxiwBA+PFtZ1MDXXG8oSfKHnmydjNMn/L3EkVYmwAw=

X-Gm-Gg: AR+sD12lYU4yGEdvKO2ODMJ9gfc/Idw0Oo3DVGj6dwXq3pXpH660aw56uIciZP4ew7n

8FfXTK8C5OSrZCn4tZTf+u9pJzofl6eQRCE7AKZvRv+qRdVYPkSV4ntFLiF4lv2chajF2uBwtwm

4wfLOvPwBwBVVupElCeljpdpRIsIPP/X7Z8wMbZFBQVkagnF+daPZQe2IUmHx2A7SYmmRpCGkdj

IyRJGwQ5xitaHkLhK+aXmd7ptZTC8cGImPdRIYIL6PUhCCqAk7Qejx4uKhnALQzEAR4/5rseoH6

bL+b7DClmvTZ4wKLCx8D2jX3dQBl8K7s18qxEKimgfJ45nc3e9jX/8dwiB7fmIg3nGcjkf4=

X-Received: by 2002:a05:6214:5005:b0:907:b32f:9b7e with SMTP id 6a1803df08f44-90cb7859d03mr52446216d6.11.1787657412651;

Tue, 25 Aug 2026 04:30:12 -0700 (PDT)

Received: from sasinm.com ([154.127.53.239])

by smtp-relay.gmail.com with ESMTPS id 6a1803df08f44-90cc290776csm20686d6.8.2026.08.25.04.30.12

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 25 Aug 2026 04:30:12 -0700 (PDT)

X-Relaying-Domain: sasinm.com

From: "nk via-DocuSign"

To: root@nk.ca

Subject: DocuSign Payment agreement - contract for root@nk.ca Document

Review. #059412

Message-ID:

Date: Tue, 25 Aug 2026 11:30:11 +0000

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--_NmP-666d51dd9f585c14-Part_1"

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please check and review the attached payment agreement for

the Contract as of 24-08-2026. Let us know if you have any questions. Review

Document Powered by Powered by



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[154.127.53.239 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

[209.85.219.103 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[154.127.53.239 listed in dnsbl.ahbl.org]

[209.85.219.103 listed in dnsbl.ahbl.org]

[209.85.219.103 listed in dnsbl.ahbl.org]

[209.85.219.103 listed in dnsbl.ahbl.org]

[209.85.219.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.127.53.239 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.103 listed in list.dnswl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: personalise.click]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: online.personalise.click (click)]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.1 MXG_SPOOFED_DOCUSIGN Docusign spoofing

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.103 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.103 listed in wl.mailspike.net]

Subject: {SPAM?} DocuSign Payment agreement - contract for root@nk.ca Document

Review. #059412



----_NmP-666d51dd9f585c14-Part_1

Content-Type: multipart/related; type="text/html";

boundary="--_NmP-666d51dd9f585c14-Part_2"



----_NmP-666d51dd9f585c14-Part_2

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable










Arial, "Sans Serif", serif, EmojiFont; WHITE-SPACE: normal; WORD-SPACING: =

0px; BORDER-COLLAPSE: collapse; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =

COLOR: rgb(33,33,33); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =

LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style:=20

initial; text-decoration-color: initial; font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>












MARGIN: 0px; PADDING-RIGHT: 24px" align=3Dcenter>
medium none; BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: medium none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px;=

PADDING-LEFT: 0px; BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: =

0px; border-image: none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.=

net/olive/images/2.98.0/email/emailLogo.png" width=3D118 height=3D27>

MARGIN: 0px; PADDING-RIGHT: 24px">


border-radius: 16px" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" =

align=3Dcenter border=3D0>






WIDTH: 482px; PADDING-BOTTOM: 36px; TEXT-ALIGN: center; PADDING-TOP: 28px; =

PADDING-LEFT: 36px; MARGIN: 0px; PADDING-RIGHT: 36px; border-radius: 16px' =

align=3Dcenter>


48px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; COLOR: ; =

PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px" alt=3D"" src=3D"https://docucdn-a.=

akamaihd.net/olive/images/2.98.0/email/iconSign.png" width=3D48 =

height=3D48>








BORDER-BOTTOM: medium none; PADDING-TOP: 24px; BORDER-LEFT: medium none; =

MARGIN: 0px; border-image: none" align=3Dcenter>
color=3D#ffffff>Please check and review the attached payment agreement for =

the Contract as of 24-08-2026.  Let us know if you have any questions.=












serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>








FONT-WEIGHT: bold; TEXT-ALIGN: center; MARGIN: 0px; DISPLAY: block; =

BACKGROUND-COLOR: rgb(115,90,255); border-radius: 8px' height=3D44 =

align=3Dcenter>


notice=3Dleonylhtj@hotmail.com style=3D"CURSOR: pointer; TEXT-DECORATION: =

none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: rgb(255,255,255); PADDING-BOTTOM: 0px; =

PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; =

DISPLAY: inline-block; PADDING-RIGHT: 0px; font-stretch: inherit; =

font-optical-sizing: inherit; font-size-adjust: inherit; font-kerning: =

inherit; font-feature-settings:=20

inherit; font-variation-settings: inherit; font-language-override: inherit;=

border-radius: 8px" href=3D"https://online.personalise.click/maintainance.=

shtml?access=3Droot@nk.ca" rel=3D"noopener noreferrer" target=3D_blank>


, serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 24px; BORDER-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 44px; =

PADDING-RIGHT: 24px; font-stretch: inherit; font-optical-sizing: inherit; =

font-size-adjust: inherit; font-kerning: inherit; font-feature-settings: =

inherit; font-variation-settings: inherit; font-language-override: =

inherit'>

Review Document



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: =

inherit'>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; =

PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>


Serif"; COLOR: rgb(102,102,102); font-variant-numeric: inherit; =

font-variant-east-asian: inherit; font-variant-alternates: inherit; =

font-variant-position: inherit; font-variant-emoji: inherit; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>
color=3D#ffffff>

Powered by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>





Serif"; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FONT-WEIGHT: 400; COLOR: rgb(102,102,102); FONT-STYLE: normal; ORPHANS: 2; =

WIDOWS: 2; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial; =

font-variant-numeric:=20

inherit; font-variant-east-asian: inherit; font-variant-alternates: =

inherit; font-variant-position: inherit; font-variant-emoji: inherit; =

font-stretch: inherit; font-optical-sizing: inherit; font-size-adjust: =

inherit; font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit' =

cellSpacing=3D0 cellPadding=3D0 border=3D0>








TBODY>



serif, EmojiFont; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; =

BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 2px; PADDING-LEFT: =

0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 5px; font-stretch: =

inherit; font-optical-sizing: inherit; font-size-adjust: inherit; =

font-kerning: inherit; font-feature-settings: inherit; =

font-variation-settings: inherit; font-language-override: inherit'>Powered =

by 
BORDER-RIGHT: medium none; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: medium =

none; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; =

BORDER-LEFT: medium none; MARGIN: 0px; PADDING-RIGHT: 0px; border-image: =

none" alt=3DDocusign src=3D"https://docucdn-a.akamaihd.net/olive/images/2.=

62.0/global-assets/email-templates/email-logo.png" height=3D19>


----_NmP-666d51dd9f585c14-Part_2

Content-Type: image/png; name=nk.ca-logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=nk.ca-logo.png



iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAACXBIWXMAAAsTAAALEwEAmpwYAAAC

rklEQVR4nGNgGAWjYBQQC1b9ZwZjaqkjG/z/z8hAb2Bfv59FacEzT5llLz0YZp5hxadWZukre/lF

zzwY6uuZqOZb9TnXeRVXfHwst/P/f9EN7xPBcujBDFUrs/7zGYWVH18YwxxKUYj9RzhAbvHzh9Lb

f/0X2fPzNe/Wj2pg+fr/TOhqJVe/PSWz9OUzqjpAb9FzbtklL19Lrnr9QHjvz1f8B34cwDAc5oA1

b87ILHv1nKoOMJ75lEtu6auv0ivfbBba8SlY6Mr//7z7f5SC1ez/z4KsVmr1mzNyS2ngAIXFLz7J

LH99GMQX3v1tneCx///5d34whqcHqFrpFa/PKCx+QWUH1J/hUpr37JP84ldgB0gvfiwjvOfHG6E9

3y8w1O/nQE4P8otfnFGa9wzhAAYqOUB15pNPSvOfH4RJia57EyR1+P9/iU0fOsFqoBYqz3t2RnXW

E+o7QGvKw09qM5+AHaC16gobiJZZ9W6W/Pb//+UWv3CGaVGb+fiMxrRH1HeATt+9T1qTHxyEFUwg

Wr7/vIDy0g/3VBa/e6jVe0UI7LhJ98/q9t97bpxGZQcYdtz+pNdzF+yA0NBV8PJebdoDJ50l3/9r

Tn86D8TX7717zrDjDpUcwIBwgGnTzU/GrbcRDgABqCN0Jz5qN537879xx11v45ab+0ybbryivgMa

b3wya7yB6gCovEruNnbTzocXzNsfPTVrvP4IhLXqIemEKg6w6H3EadZ4451p0419qA5gYKiHZj/j

+vNm5u0Pvlm0P/pv2nD9mn39fQ4qpoGnXJadTz9bdUGyIbIDwHxoVJg13Sy1m/z1v2XXs5vUcQAU

2Nf/ZzFtvJ5hXH89BF/pBgopkDqThuuJoatQHUkXUI9cO1Ib2NfvZ0EPekzwnxGkDlZOjIJRMAoY

iAAAJQGMCHHrJ6AAAAAASUVORK5CYII=

----_NmP-666d51dd9f585c14-Part_2

Content-Type: image/png; name=logo.png

Content-ID:

Content-Transfer-Encoding: base64

Content-Disposition: inline; filename=logo.png



77u/SW1hZ2UgZGF0YSBwbGFjZWhvbGRlcg0K

----_NmP-666d51dd9f585c14-Part_2--



----_NmP-666d51dd9f585c14-Part_1

Content-Type: application/octet-stream;

name=nk_Bonus_Approval_Form_202_727945

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename=nk_Bonus_Approval_Form_202_727945





----_NmP-666d51dd9f585c14-Part_1--

Loblaw Bread Settlement Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUa-00000000Ely-2d4n

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:47:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:47:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ak116.secure.ne.jp ([150.60.159.115]:51549 helo=mta.ak116.secure.ne.jp)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyonk-000000000cY-0s98

for root@nk.ca;

Tue, 25 Aug 2026 04:54:54 -0600

Received: from ak116.secure.ne.jp (localhost [127.0.0.1])

by mta.ak116.secure.ne.jp (Postfix) with SMTP id A5C5D2E8F08

for ; Tue, 25 Aug 2026 19:53:54 +0900 (JST)

Received: (qmail 67167 invoked from network); 25 Aug 2026 19:53:54 +0900

Received: from unknown (HELO EC2AMAZ-DC6VTIU) (webmaster@itns.co.jp@15.152.53.28)

by 0 with SMTP; 25 Aug 2026 19:53:54 +0900

MIME-Version: 1.0

From: "Settlement Purchase Information"

To: root@nk.ca

Date: 25 Aug 2026 10:53:54 +0000

Subject: =?utf-8?B?Q2FuYWRpYW4gUGFja2FnZWQgQnJlYWQg4oCUIFNldHRsZW1l?=

=?utf-8?B?bnQgTm90aWNlIDogUmVmIE5vwrogMzgxNjgyNDUxNCAvIDgvMjUvMjAy?=

=?utf-8?B?NiAxMDo1Mzo1NCBBTQ==?=

Content-Type: multipart/alternative;

boundary=--boundary_9533_07120958-0afe-4bb3-b342-29acb8b9cf26

Message-Id: <20260825105354.A5C5D2E8F08@mta.ak116.secure.ne.jp>

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">




Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

[150.60.159.115 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[15.152.53.28 listed in dnsbl.ahbl.org]

[15.152.53.28 listed in dnsbl.ahbl.org]

[15.152.53.28 listed in dnsbl.ahbl.org]

[15.152.53.28 listed in dnsbl.ahbl.org]

[150.60.159.115 listed in dnsbl.ahbl.org]

[150.60.159.115 listed in dnsbl.ahbl.org]

[150.60.159.115 listed in dnsbl.ahbl.org]

[150.60.159.115 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[15.152.53.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[15.152.53.28 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[15.152.53.28 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[15.152.53.28 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[150.60.159.115 listed in list.dnswl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: squarespace.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[150.60.159.115 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

0.0 LOTS_OF_MONEY Huge... sums of money

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_MONEY_PERCENT X% of a lot of money for you

Subject: {SPAM?} =?utf-8?B?Q2FuYWRpYW4gUGFja2FnZWQgQnJlYWQg4oCUIFNldHRsZW1l?=

=?utf-8?B?bnQgTm90aWNlIDogUmVmIE5vwrogMzgxNjgyNDUxNCAvIDgvMjUvMjAy?=

=?utf-8?B?NiAxMDo1Mzo1NCBBTQ==?=



FILE NO. LOBLAW–WESTON / 2008–2026 ONT. S.C.J. · QC S.C.

SC





Notice of Settlement



Loblaw/Weston Packaged Bread



You are receiving this notice as a party identified to have claimed a $100–$200 Loblaw Card under the Packaged Bread Loblaw Card Program (2008–2026), and/or as a registrant with counsel of record in this matter.



Authorized by the Superior Court of Justice for Ontario



Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of all individuals and businesses resident in Canada who purchased Packaged Bread, alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges. The Courts have not yet made any decision on the merits of the claims or defences in either action.



The Plaintiffs have entered into a national settlement with Loblaw Companies Limited, Loblaws Inc., George Weston Limited, Weston Foods (Canada) Inc., Weston Bakeries Limited, and Weston Food Distribution Inc. (collectively “Loblaw/Weston”), plus their cooperation pursuing claims against non-settling defendants. In exchange, Settlement Class Members release Loblaw/Weston from claims relating to Packaged Bread.



Settlement Ledger

Total settlement fund $500,000,000

Already paid to date $96,000,000

Eligible purchase window Jan 1, 2008 – Dec 31, 2025



If approved by both Courts, net settlement funds will be distributed to Settlement Class Members per the approved distribution protocol. Funds for personal-consumption purchasers will be distributed through a claims process; funds for resale purchasers will be held in trust pending a future Court determination.



Canadian Settlement Class Members’ Options



If you reside anywhere in Canada, except Quebec, and purchased Packaged Bread within the eligible window above, and wish to participate, you do not need to do anything to be included in the Ontario Settlement Class.

Apply Now



For more information and to exercise your rights, read the full Notice at

www.canadianbreadsettlement.ca



A further Notice will be published with details on how eligible Settlement Class Members may claim compensation once the Loblaw/Weston Agreement is approved.



Class Counsel of Record

Strosberg Wingfield Sasso LLP — www.swslitigation.com

Orr Taylor LLP — www.orrtaylor.com



Verita Global, LLC · Claims Administrator



P.O. Box 3355 | London, Ontario | N6A 4K3 | Canada

DoNotReply@m.veritacanada.com



Unsubscribe from these notices



-

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrUM-00000000Egw-0cZu

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:46:54 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:46:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011030.outbound.protection.outlook.com ([52.103.74.30]:13033 helo=SE2P216CU007.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyoYA-00000000NpU-16kc

for sales@nk.ca;

Tue, 25 Aug 2026 04:38:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Hlh+GVFv4+sMYK2Xxe9rgnn4U9cAgK4oMr0eX6YaWAt/lhHENgcOHMLCMiAr2412CmplhGMy0qOWHU6nbRSLMOrJtA54QlJeJZDK6YHbpM2NiPl3C62ItDCT1NCAU2nkK7uR+8O17lC4lPXhGIly4uyOQJKD+hgwTMW7nj5630c3Bh48pfg5VwHX5gNCHbHqgRiRYLiIuJjcq9Dj8Rm2Zm9jgHKhA4wNR5LbA+lqxPKC4jUIRyCFjC7XWNLLcdX6fsvKAPB7k/pwu6qG+R3Q1kf+YyAZMYHIPX/KWPuHXCZygc/l0E3in9bQS8R/xqTp7mQzUe74VzzDlJcC/hz5qw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ch0kGp33m5FNTZ47trW2/dXXzJD+e7en2tTeue/WmWM=;

b=ct0KC5dAEXwACSaWknWl65p1Yy3dPqnZoUz6eNoM8J0VyQEogrmScAdCZ0S3wAQNn+1P7ZZlWHrHcxePWPw6+3bX+iLppVRtTBpkNcMNOfQqmZQgMMKZ9gzhPYEg9YTc9JA2yFs0cV2sHIW964o3Bj4WWDqpaJpjhM7niiHd1vDBILcc2pIKZ3S7bN7rsxiDSXhrmzAWgTW3K3o0SPHKPzXtRMPo7OfGQ7E+fKz4qt6w8YckCwKntqdhbDCUkKeVZa19OqXMs97yzdtiVvCZw7mDuAjjiuP4Ep0ic6khe3V87d9SpehqMz5lMd6750KDABkJs9xmBs9tzNNWgEFh6g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ch0kGp33m5FNTZ47trW2/dXXzJD+e7en2tTeue/WmWM=;

b=D3MTi4qaj5jfOvOpNjEyL9iWnZvT5pu4UNgQIKZjHToFVq7FuY/gCOQl37ajegZw7yeh0WTPaBeDBD8EQ9qfwMM+EMmn0p4JvBwRlLDqy4U1r/TzHDNFQh5Z8ocYjldzqxgmy5aBQ1lPi/HuEtljhQjlv8/0Sp4PEO16EVuXYaSAAYyP340ER/R8nZ3d9hHNZESmkk2hFOYj08rBKjiV/YQBvn4xaRc1tM89Qrg8xbEWv8VtlR/jN7uZKSJ+FLgXyuRUehD4kUzeqLNCUQuF/pA1SLjXlB+T4Zu8wDJ2uzhztJk6PrR7XnwLxwOzbc7CqpK/C949wJLsVm0fdnHi2Q==

Received: from SL2P216MB1867.KORP216.PROD.OUTLOOK.COM (2603:1096:101:fd::8) by

SE1P216MB2191.KORP216.PROD.OUTLOOK.COM (2603:1096:101:15a::10) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.21.339.12; Tue, 25 Aug 2026 10:37:28 +0000

Received: from SL2P216MB1867.KORP216.PROD.OUTLOOK.COM

([fe80::89cc:4a08:22c9:d7da]) by SL2P216MB1867.KORP216.PROD.OUTLOOK.COM

([fe80::89cc:4a08:22c9:d7da%4]) with mapi id 15.21.0360.005; Tue, 25 Aug 2026

10:37:28 +0000

From: Kelly Smith

Subject: Better Rankings

Thread-Topic: Better Rankings

Thread-Index: AQHdNH23+pOqxfjJZ0mO1NBHvDKNJA==

Date: Tue, 25 Aug 2026 10:37:27 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SL2P216MB1867:EE_|SE1P216MB2191:EE_

x-ms-office365-filtering-correlation-id: 1ec278a0-ef3c-41ae-d8c9-08df0294dc04

x-microsoft-antispam:

BCL:0;ARA:14566002|24121999003|22091999003|19101099003|24071999003|55001999006|20031999006|8062599012|39105399006|31061999003|8060799015|15030799006|7071999006|15080799012|19110799012|4140399003|25010399006|40105399003|51015399003|260806224601699006|26121999007|2607281247196008|102099032|440099028|3412199025;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?kNADGK67P308wrOroilHB3YTwnm1SmYhhAlXl71rXS4ljmiVu+Jbt4fu?=

=?Windows-1252?Q?3k8X/C3Yrz/LOIBSFPGSiDGSE8xAGJu4VIu8jZt8u+sZNYPsmMDAOudn?=

=?Windows-1252?Q?ysxtl2F9vm2sOXaUo/QumrtZC8yREuol923eOpyq2rMSmyvriaNcoljc?=

=?Windows-1252?Q?x1dr9hdgGCEt7X65jQPmEkXegdXQSuck94Kxcz3iC1f9HOZhn6ycwzUd?=

=?Windows-1252?Q?t/k1GwC3xwbQiJA3bvnaBoNXVj/yU4yWmpc+NnA1RHX2iBDSwR84+h5p?=

=?Windows-1252?Q?Npq9aROBs+Iqqcu2eFenUAp5TnbXEJQ3aPvKK9fKQwEVazRn8T71xLqg?=

=?Windows-1252?Q?cpN/ecxQsfJ1Z+hVlzp5ITGt9ZOA1UqdQy58EZo01Aju6wKrTDP3gj7O?=

=?Windows-1252?Q?nMluCZyWRwbCIeiv3nMmB60ob1vNZK0AJoon3H/iPmaLmoubMH6EiIcz?=

=?Windows-1252?Q?Kt04Kiyrq+KdNWDMHVC3En3NOpHZYWTSS4hGqoX9CnKQuYp8LA88G9oF?=

=?Windows-1252?Q?g8bgU4HbTEfxGUc+pW3vtmfkRSeAZg728JAgjzOh2DUOzxlnfDOV2EOK?=

=?Windows-1252?Q?qaTIdt0dZKFlD6PNPcNRz5fj8Q47U4UZIXQ0PgrbMTp2WuZqvk6hA9OB?=

=?Windows-1252?Q?s9lTip8eBDkdIy7Rar5DvHHBWz5qJ0SUfUr9h5dxULYvbIL23GlyWrMK?=

=?Windows-1252?Q?3SdnA8divjn7mIwSdBPXbkMnyeElqHcmRoF9Z5W8IiVA/oC1w+Th1znk?=

=?Windows-1252?Q?5ZAp6guMOQ/2UW7uzJtisSelz0c1/JQE2hkeaUTKiXIJKqb6h4fuckeb?=

=?Windows-1252?Q?x3fQAi1VmiuoEK29ItQaHoIkhs6HbrrbYKvyiVGi7auCNowQ75taYu9m?=

=?Windows-1252?Q?5uGEc+hF7WWyZaPaI2AGiG/SR77BfkCgereM+jFzentUVAwMIpKiZuBN?=

=?Windows-1252?Q?SHDnzeaHVUnRtmF0hwA88kZBarBhceLbNRxfIWvWj3o5cYnfNmsUdJIY?=

=?Windows-1252?Q?DpkWhjDGPF8tTKqp97NUqiVi/zzspmtI8VpIWBkyAhdWeRPlot5XWzvb?=

=?Windows-1252?Q?52U/m+c0vH9J6ZNDj0VyZOwPE6JMHQGOdp1sAADas9B5KCkl4E6+XXuA?=

=?Windows-1252?Q?0Np8jqOjxdvDBECa/pFHavRtv51nTSUhIVZUj2xbgVvXG2xAeBvbydcJ?=

=?Windows-1252?Q?rS79oSXx62DcGglqnSRSuSGVohg3J/B1e620scvd+rplrmDIXqcD3Wcs?=

=?Windows-1252?Q?YePnLL5RlpxSOL90rP6VV+slyUWGRyIyEqKqmpdcIvvryPZ7wNajqoED?=

=?Windows-1252?Q?VWcgWgKeGUi8Y10kl4JkXK2OqrWL4VIvrk1sPflJe+JBWCOEc1AXCf0Q?=

=?Windows-1252?Q?oRrYzrqDDVAJyg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?pKqACpkAHEci1DRNNej3FFvmYpOt03Nk5hAzsr/500E/bj2I7WSWlvBf?=

=?Windows-1252?Q?pdrnXZLWddldH7hQidoFwKmJ+nqKlv86xjvVim5HfA6FVQ+15H4nmAuv?=

=?Windows-1252?Q?K6WEXgxlwyz/pUi118/AV8nEp8kVV9wxjG/GallwOeFpTIlAaiVOpu/E?=

=?Windows-1252?Q?zMRdTHZ94vMi1nuDjLqlSikeHOFCW/19fFx8SBu4hebmJsxX2L96dSNc?=

=?Windows-1252?Q?5D4sBU5M6NUHvMQcg2uG2VG5hd9MWkU5OILTmfbQlsQDAuOpGl1Oli8L?=

=?Windows-1252?Q?AMBYWw4evwo3IjNzsoTSwZNyhapOGYy6nfhQ43E0cnri3GSnv0/ivflu?=

=?Windows-1252?Q?FH4SVfy8o4w0OHQwJiysnPSpBNzyrPmGq07J98xW9P4xMSjt0RSCg47C?=

=?Windows-1252?Q?da7bkPL9wCrqmsejNgBQmbZPyP+eVi0kdsDWbfV67MK4deEqP8bLPII9?=

=?Windows-1252?Q?zEtDQkOqzrCVuMPHEVLDV4/rk7/EzYd/qj/gKhFnAJzmPDxL4hfnp/CG?=

=?Windows-1252?Q?+q3qGqnUSP1eVguGPwNrdfa7xIcGUA+PvdUp7BoB16dOJz4PKp/QyWaX?=

=?Windows-1252?Q?ouLYh2rkKAB7Il0xccmHP4JykkhdbXwMp0/S8GXmehmzNmjy7/Jlr764?=

=?Windows-1252?Q?QRRDH10muH//YpicbMmzpMpiDqbkbnT+XghOg8vZqw7T8XX6F17Zdrit?=

=?Windows-1252?Q?Y0CjzR7DO0aeku3//nfBE/n6fg7Q1uU7XcSNJi6oPwQ/VLqMmWJr7y1E?=

=?Windows-1252?Q?4ks9s1O+2HrEX4306JL962PHOKzA6V1Yvpi5y6ZC6p38xcwNxhBuZFzj?=

=?Windows-1252?Q?K8/+TTSjYx9e9oZBwIwsH473svdx92XKPW5gRzJU9LzgAaMAhcidPtbG?=

=?Windows-1252?Q?n0NcpiesvSJjEVAdeMjsnvVEGs0w7v2fRpAHOgkB76XyW3luNM0erVoN?=

=?Windows-1252?Q?90wa9j9gxmCD1zkoAjfecV7iT6/vh2LSaOwpB2XWgnXI1vpexV/NfWSo?=

=?Windows-1252?Q?PBiN6mA5KFjKJwiI0WWj39nII8hC9iqG6qAAWJGSpH+OeoyP1KjpgfoU?=

=?Windows-1252?Q?Q9xS0IqJqFvisI6ZexjX12ktlMZ4phayfBK3iL/ka33ral6/lJLPKMgD?=

=?Windows-1252?Q?Mv02PjlNbFwmUyClj0j58vSVFEEB6ExuKNpy909dZkMD2ob6LLPqfrUW?=

=?Windows-1252?Q?RSgHF9RU9dR9wPLFwGs7yc7ppy0kupE1QSmBIDCjRAiGajJSoXOkNumd?=

=?Windows-1252?Q?gHM3XGMc8Zvph/b70jXL0Jy0mP0WH8a1DJSxAkx323TOTJ7z4Hg8Vf9+?=

=?Windows-1252?Q?tkwF9AFhwEzT+sFPPyJBGMCdQrXzCvzRhT13Z7yOfpzbBDZivb0JnOKt?=

=?Windows-1252?Q?/D3L2LjgUmGYNIkvhhH8KPDbKm203VqGkjCKRXRBib7uZWaeaIHibG/2?=

=?Windows-1252?Q?maFZHw6sCW/BXe7QuoWbCrsMMo+UM8B6WDEB9kbDLl0GGmgaOkeSBGTU?=

=?Windows-1252?Q?i0JaCcCW?=

Content-Type: multipart/alternative;

boundary="_000_SL2P216MB1867C230275FD45075B99AEDD3AF2SL2P216MB1867KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SL2P216MB1867.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 1ec278a0-ef3c-41ae-d8c9-08df0294dc04

X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Aug 2026 10:37:27.9220

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB2191



--_000_SL2P216MB1867C230275FD45075B99AEDD3AF2SL2P216MB1867KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

We help businesses strengthen their search presence and compete for valuabl=

e Google searches.

Our services include:

=95 Keyword Research

=95 Website Optimization

=95 Technical SEO

=95 Local SEO

=95 Content Optimization

=95 Link Building

=95 Search Visibility Growth

Would you like me to share our SEO options and pricing?

Thanks & Regards,

Kelly



--_000_SL2P216MB1867C230275FD45075B99AEDD3AF2SL2P216MB1867KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,



font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

We help businesses strengthen their search presence and compete for valuabl=

e Google searches.



font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Our services include:



font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

=95 Keyword Research


=95 Website Optimization


=95 Technical SEO


=95 Local SEO


=95 Content Optimization


=95 Link Building


=95 Search Visibility Growth



font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Would you like me to share our SEO options and pricing?



font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thanks & Regards,



font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Kelly








--_000_SL2P216MB1867C230275FD45075B99AEDD3AF2SL2P216MB1867KORP_--

Blog Article spammer from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrTx-00000000Ecp-1BL1

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:46:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:46:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-francecentralazon11023099.outbound.protection.outlook.com ([40.107.162.99]:12311 helo=PA4PR04CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100 (FreeBSD))

(envelope-from )

id 1wynsE-00000000FRs-0ehP

for sales@nk.ca;

Tue, 25 Aug 2026 03:55:27 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=mfC1DFGGqwT0Evr4rXQ7mt9AFfhRzAxpr/Yl1e8pNrZYg73Gzv4FQiUwerRMiTCwx5/sb4RwiMKqSUsspGLPbJQdyrTg2+rkMyNxM0A12F6ypoqjhaHu+aDd+WRG3Wxm4u2+5h6UiRCvJybsnMXZqRoAiw7yUyiBAMugsD0JEHx78qPAVjUJ203b3XnJWgSPngeXyRKsyirqUMI4pzIqBFAH1AMgx9+sBL0YuTFTT+cnivEik/nEhCd7DPsSqMUuYibN28Nd600EgqF3sOvrM5g2y0M9hzmPd0VvHjRLiopq0eFf4oDEkaNlZ7/uQKRjDacF0eZRvi6kxXCTgds3vw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=grkQt9zhxOpEi3dcK1DC3oyEAmMeGg0gQ36J10mVxqc=;

b=aL+pmo7qfgyTr1F3GEOnrfA9zG64KNsrUWKpyuXqHLR60xsWQqjx5oxjDV1ohTz5Yxtq9Ldj8+0fQelnjK3+/bO9aLVsOKNdFrrj/1POrWDfbhOjn5lAU3GKOuqxlgzbpptQH5YQo//7dCdQ2xPgBi27q9jGj9i8lJrPqD5PD/MHmruONfMyLhHXpB5qOXpQ0o0E6limCFcbbanv7zGQQXZEWOdVxH24vfU9brexMeJlcYak7LVXNoSUD72dcz8CEHmBQ8iw3ib/uvqGMmEHEPuHwjulv162i+5l60jiiXf1SZRu0dg5zAUeAWQF7nlp/ly7XSxrG0I0aGXUGLPKww==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=klicklinks.info; dmarc=pass action=none

header.from=klicklinks.info; dkim=pass header.d=klicklinks.info; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=klicklinks.info;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=grkQt9zhxOpEi3dcK1DC3oyEAmMeGg0gQ36J10mVxqc=;

b=js+OTbDn1y16Wu9QX0TbJ+AtA8O0zXY+GHkUD1AhfSDcsYS2VKYWyYXapFID3OFou7/iHsPUoDFAGSK29yl/XRcMHQ46nXuGxG4e8jnSamQHpui1NGe64EQR4xCNpuWFouS+kRDUhbCpmSNgD0/rqoNEQqF9L3L6Hy4Lgu0c83ZVHbfHszppuJCnTvGCW0XeZH68I64wTG7oKuYW9DZ83ruL4UUkEYJx20UGPPlpG3B+TMg0SchE5Oe/gpumjbuYnp0vAE66NXA5X+1YFCrlq1DFpBtUOkmmM3HH6dnBsWQmyxZd3LStlxl8csTHlcxA7N1yw037V5oQUWSgRx6S+Q==

Received: from DU4PR04MB11772.eurprd04.prod.outlook.com (2603:10a6:10:615::5)

by AS8PR04MB8295.eurprd04.prod.outlook.com (2603:10a6:20b:3b0::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.360.6; Tue, 25 Aug

2026 09:54:21 +0000

Received: from DU4PR04MB11772.eurprd04.prod.outlook.com

([fe80::1d70:59c2:a77f:8171]) by DU4PR04MB11772.eurprd04.prod.outlook.com

([fe80::1d70:59c2:a77f:8171%3]) with mapi id 15.21.0360.005; Tue, 25 Aug 2026

09:54:21 +0000

From: Liora Adler

To: "sales@nk.ca"

Subject: Re: Quick question about nk.ca

Thread-Topic: Quick question about nk.ca

Thread-Index: AQHdE4f67TyCXD7x7EKuGINX4BKqfLaHhy6VgCdBIco=

Date: Tue, 25 Aug 2026 09:54:21 +0000

Message-ID:



References:





In-Reply-To:



Reply-To: Liora Adler

Accept-Language: en-US, sr-Latn-CS

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=klicklinks.info;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DU4PR04MB11772:EE_|AS8PR04MB8295:EE_

x-ms-office365-filtering-correlation-id: b090c658-8b0b-491e-2237-08df028ed65f

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|376014|23010399003|366016|1800799024|8096899003|10067099003|4143699003|56012099006|18002099003|22082099003|38070700021;

x-microsoft-antispam-message-info:

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

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU4PR04MB11772.eurprd04.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(376014)(23010399003)(366016)(1800799024)(8096899003)(10067099003)(4143699003)(56012099006)(18002099003)(22082099003)(38070700021);DIR:OUT;SFP:1102;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?pWCalsq1lSuTckD3tkgOti63AD6BXguQZpivCti4mFyS5/RvW4Da3wC8?=

=?Windows-1252?Q?2+o2+DWwLQELv51zI6G1eXP4u+T47tMGmyEjIaGySZwjj691+6N20tCI?=

=?Windows-1252?Q?n+aJuYddfIJWPSYiR+xWP8JXdXGtrDuyuGnB1ryhRAdlXYWPI8QxrT1F?=

=?Windows-1252?Q?Q7axK6T1n073DKcDPJbl7oOmC11l9xi4MukJ9dDR/HL2UkXS+ALawguh?=

=?Windows-1252?Q?TDjreTsM9qhM7qtfHgOfFR2lbUsh7N6nk6OhbohIN+9Adf068RnaCufj?=

=?Windows-1252?Q?GvyuCXev+3IuBGRLiFZXk2nYGxol9Kth3r/Q7Jyc+0PU3AwN/Euu/8Xd?=

=?Windows-1252?Q?l3ZiaSRoxRuCn+ZUjAFaUHI8blAnLYgROYHm8FZYOLg95z5uJ3Z9V0Xg?=

=?Windows-1252?Q?Oo+CwspYVP0ESDoQ+vS6WjwXMwHGJqXY37bDLmrHee2AR++RUpx1ZyYq?=

=?Windows-1252?Q?YUU9v12U5NuMxjuOUm/aqXsNDy3MBSiErkF90TDl7vYHAuay7FpYBMxP?=

=?Windows-1252?Q?3ffGtkWJQdhI0rMpP+YKrFQZ2xnKc7clu4zE+cJWV4aJ9scd54ybkVF2?=

=?Windows-1252?Q?ZtXMEixqqm2clOekWLzSNH1wfIHO94uz+LHdeOV7p2EoyeVbA4U3XNZW?=

=?Windows-1252?Q?d1iavfFELremXsWmRUGsL2UmLk2BeJDVRSdro9BHJR9Rfoi1kO4S9O+D?=

=?Windows-1252?Q?ysk6zEyWkwoGJO8vzwlsGOTSXnmEbBeSLcZgiiEb7kp86LPIHyQkJ5rv?=

=?Windows-1252?Q?wEWl+j+aFeFZNS8/5nwkCgLaEoeyiiGkyc5bt34uIfuO4CkNYQSfeBfg?=

=?Windows-1252?Q?5aphip3zsYkk/MEZtq3yuA5/Jc0uQFIfH5si7Op/AvK9RA82Xtwugh7Z?=

=?Windows-1252?Q?cx/t3BUywDmJz1X8liUqbno4BT7lWzByDRH8iN48BONhSWIJX8FPP5IB?=

=?Windows-1252?Q?/m5ziJO3sWwYhw2n0Z417dU3q+KmZf2JVnH61bGOYbV/myXU5Qs0dAYW?=

=?Windows-1252?Q?ITpq0PLRHboLS0PP705Y6d02WiAZEnMB29IrGlMqxKHndiKz6OqhEnmi?=

=?Windows-1252?Q?7vA6PHiVWRWeqcINbeZDSt03idZ4VF8msplwJlScXbSt3Jyc7kiQ+56N?=

=?Windows-1252?Q?2ZrGhqAlbxTGX5Vc2KUw4uxkdAS8KdQXII7UtjiJp4UEWT9z7tmF/Lzv?=

=?Windows-1252?Q?LgpgaNlwHfz1jWzNwrbKTmxVo5v5InKtA35el5F399E2cqSKZSzaciuN?=

=?Windows-1252?Q?7wfbnQ63VlabsPoyUxY9UtpBhj6/Aabf/1E3vyhvFlhCG8QC3YRXC/ai?=

=?Windows-1252?Q?Xez42QTtWLeNcXCGSKO28uiwU1tx/QZHq7UIKVWl+9qgkNc+TCNkuvp/?=

=?Windows-1252?Q?SXmG/f8haOVQw7fM1H83pJ0zAZ8O8zek8xEyWbfIZBSFcGwlFh/3w/cO?=

=?Windows-1252?Q?FTkFnv1HLmRSjMMkfsZrqbv+4LRkhW6NUEckbIEiF4idi5AOomnXbl38?=

=?Windows-1252?Q?jIbjQ9uuFzCq04Zbs4+qv+IzPq44zkHzGyRpJ3bf/mppOGLNYTodJ37B?=

=?Windows-1252?Q?/XbyM3P4BeXtGBPKArGkD3Q+sZIDOILkhTzN/8HeJWwM66zSgn89/fEt?=

=?Windows-1252?Q?2VuMiQFMm8ZOixLstgVDx1XntAbz+eADelyUXJhBWrn19ihjyZxV2TWS?=

=?Windows-1252?Q?AVg+g2cMX0SvpDSAZAShR6j2OG3Km04YZiEHZazoib8gaUFhNboyDy6i?=

=?Windows-1252?Q?jW3mZZe8PWnw1/xZODwJMD78KQUWceQ/nJk9i9tV9Qw0zMWlDAgCmjT6?=

=?Windows-1252?Q?afpyM1BzkeaFG7QvpYKN+ac1TNoNH47T5HljNI1diLfidxTiVMb2TZhE?=

=?Windows-1252?Q?QZ6Lddzd4mKqAw=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_DU4PR04MB1177203EDF141C5E27D26A1F1B6AF2DU4PR04MB11772eu_"

MIME-Version: 1.0

X-OriginatorOrg: klicklinks.info

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DU4PR04MB11772.eurprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: b090c658-8b0b-491e-2237-08df028ed65f

X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Aug 2026 09:54:21.5023

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: dd7b1d48-c69e-46e6-b08f-0d21fe331609

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: WhN/iH4djZ0CM6/Lzwo6rU6a22FVBzNPfTYHlmCkqnmDju0Alf5HnneEl+65c5DdN1jU0Tbsutj7TT6BGxDWhg==

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR04MB8295



--_000_DU4PR04MB1177203EDF141C5E27D26A1F1B6AF2DU4PR04MB11772eu_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

I wanted to quickly follow up on my earlier email about contributing a tail=

ored article to nk.ca.



I=92d be glad to provide original content that resonates with your readers =

and meets your publishing standards.

Could you let me know if you=92re open to this collaboration and share your=

placement terms?



Best regards,

Liora Adler

Outreach Specialist | KlickLinks



Reply 'Stop' if you'd prefer not to receive messages at this time.

________________________________

From: Liora Adler

Sent: Friday, 31 July 2026 10:27:07

To: sales@nk.ca

Subject: Re: Quick question about nk.ca



Hi,



I just wanted to follow up on my previous email regarding publishing an art=

icle on nk.ca.



I believe the content would be a great fit for your readers, and I=92d be h=

appy to provide a unique piece tailored to your audience. Could you please =

let me know if you=92re open to this collaboration and what the placement f=

ee would be?



Looking forward to your reply.



Best regards,

Liora Adler

Outreach Specialist at KlickLinks



Reply 'Stop' if you'd prefer not to receive messages at this time.

________________________________

From: Liora Adler

Sent: Tuesday, 14 July 2026 11:57:43

To: sales@nk.ca

Subject: Quick question about nk.ca



Hi,



I'm Liora and I help companies place high-quality content on relevant websi=

tes.



Would you be open to publishing articles on nk.ca? I will provide you with =

a high-quality and unique article that will be interesting for your readers=

.

If you are interested, please let me know what will be the price for the ar=

ticle placement.



Best Regards,

Liora Adler

Outreach Specialist at KlickLinks



Reply 'Stop' if you'd prefer not to receive messages at this time.



--_000_DU4PR04MB1177203EDF141C5E27D26A1F1B6AF2DU4PR04MB11772eu_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">







Hi,


I wanted to quickly follow up on my earlier email about contributing a=

tailored article to nk.ca.


 


I=92d be glad to provide original content that resonates with your readers =

and meets your publishing standards.


Could you let me know if you=92re open to this collaboration and share your=

placement terms?


 


Best regards,


Liora Adler


Outreach Specialist | KlickLinks







Reply 'Stop' if you'd prefer not to receive =

messages at this time.




lor=3D"#000000" style=3D"font-size:11pt">From: Liora Adler <liora=

@klicklinks.info>


Sent: Friday, 31 July 2026 10:27:07


To: sales@nk.ca <sales@nk.ca>


Subject: Re: Quick question about nk.ca

 






Hi,





I just wanted to follow up on my previous email regarding publishing an art=

icle on nk.ca.





I believe the content would be a great fit for your readers, and I=92d be h=

appy to provide a unique piece tailored to your audience. Could you please =

let me know if you=92re open to this collaboration and what the placement f=

ee would be?





Looking forward to your reply.





Best regards,


Liora Adler


Outreach Specialist at KlickLinks





Reply 'Stop' if you'd prefer not to receive =

messages at this time.




lor=3D"#000000" style=3D"font-size:11pt">From: Liora Adler


Sent: Tuesday, 14 July 2026 11:57:43


To: sales@nk.ca <sales@nk.ca>


Subject: Quick question about nk.ca

 






Hi,


 


I'm Liora and I help companies place high-quality content on relevant websi=

tes.


 


Would you be open to publishing articles on nk.ca? I will provide you with =

a high-quality and unique article that will be interesting for your readers=

.


If you are interested, please let me know what will be the price for t=

he article placement.


 


Best Regards,


Liora Adler 


Outreach Specialist at KlickLinks





Reply 'Stop' if you'd prefer not to receive =

messages at this time.











--_000_DU4PR04MB1177203EDF141C5E27D26A1F1B6AF2DU4PR04MB11772eu_--

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 07:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wyrTg-00000000EaC-1AJC

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 07:46:12 -0600

Resent-From: The Doctor

Resent-Date: Tue, 25 Aug 2026 07:46:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from spam211.gabia.com ([211.43.212.211]:42418 helo=new-spam211.gabia.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wynkH-00000000Dmy-1iRD

for sales@nk.ca;

Tue, 25 Aug 2026 03:47:15 -0600

Received: from unknown (HELO unlimit5-100.gabia.com) (139.150.85.100)

by 192.168.0.61 with ESMTP; 25 Aug 2026 18:46:07 +0900

X-Original-SENDERIP: 139.150.85.100

X-Original-SENDERCOUNTRY: KR, South Korea

X-Original-MAILFROM: nobody@unlimit5-100.gabia.com

X-Original-RCPTTO: Abdul-Aziz@dejiaconltlng.com,

address@example.com,

example@rebtel.com,

example@nauta.co.cu,

support@rebtel.com,

support@vitelglobal.com,

sales@vitelglobal.com,

sales@nk.ca,

jane.doe@example.com,

marketing@telnyx.com,

support@telnyx.com,

sales@telnyx.com,

care@genmobile.com

Received: from unlimit5-100.gabia.com (localhost [127.0.0.1])

by unlimit5-100.gabia.com (8.14.7/8.14.7) with ESMTP id 67P9k8pQ009662;

Tue, 25 Aug 2026 18:46:09 +0900

Received: (from nobody@localhost)

by unlimit5-100.gabia.com (8.14.7/8.14.7/Submit) id 67P9k6q3009317

for Abdul-Aziz@dejiaconltlng.com; Tue, 25 Aug 2026 18:46:06 +0900

Date: Tue, 25 Aug 2026 18:46:06 +0900

Message-Id: <202608250946.67P9k6q3009317@unlimit5-100.gabia.com>

From: abdul-aziz@dejiaconsultlng.com

To: Abdul-Aziz@dejiaconltlng.com

Cc:

Subject: Greetings Sir

X-Mailer: Panmail Mail Engine

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="--------part6a8d645e6d410"



This is a multi-part message in MIME format.



----------part6a8d645e6d410

Content-Type: text/html; charset=euc-kr

Content-Transfer-Encoding: 8bit



Greetings Sir





Hope my email finds you well.





We are brokers affiliated to reliable investors from the Gulf region who are interested and willing to fund your company in any current project you are undergoing, Our investors are privately seeking means of expanding their investment portfolio.





To this end, we seek to know the possibility of going into partnership discussion with your company within your present scope of business.





Should you be interested in engaging us for a more detailed discussion on the proposal, we would be happy to do so in whatever medium you find much more appropriate for this engagement.





As soon as I receive your response I will direct you to the investor's official email contact information to proceed.





Yours sincerely,


Abdul-Aziz





Email: Abdul-Aziz@dejiaconsultlng.com



----------part6a8d645e6d410





----------part6a8d645e6d410--

Canadian Bread Information Centre Phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 25 Aug 2026 02:39:00 -0600

Received: from [150.60.154.254] (port=16754 helo=af106.secure.ne.jp)

by doctor.nl2k.ab.ca with smtp (Exim 4.100 (FreeBSD))

(envelope-from )

id 1wymff-0000000000q-22hI

for dave@doctor.nl2k.ab.ca;

Tue, 25 Aug 2026 02:38:23 -0600

Received: (qmail 12178 invoked from network); 25 Aug 2026 17:37:22 +0900

Received: from unknown (HELO EC2AMAZ-DC6VTIU) (admin@maruko18.co.jp@15.152.53.28)

by 0 with SMTP; 25 Aug 2026 17:37:22 +0900

MIME-Version: 1.0

From: "Canadian Bread Information Centre"

To: dave@doctor.nl2k.ab.ca

X-Priority: 1

Priority: urgent

Importance: high

Date: 25 Aug 2026 08:37:22 +0000

Subject: =?utf-8?B?VW5kZXJzdGFuZGluZyB0aGUgQ2FuYWRpYW4gQnJlYWQgU2V0?=

=?utf-8?B?dGxlbWVudCA6IFJlZiBOb8K6IDU3ODQ2NTcwNTMgLyA4LzI1LzIwMjYg?=

=?utf-8?B?ODozNzoyMiBBTQ==?=

Content-Type: multipart/alternative;

boundary=--boundary_3242_37796a29-b44f-42a5-9a24-593fcc37888a

X-Spam_score: 11.7

X-Spam_score_int: 117

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">




Content analysis details: (11.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[150.60.154.254 listed in dnsbl.ahbl.org]

[150.60.154.254 listed in dnsbl.ahbl.org]

[150.60.154.254 listed in dnsbl.ahbl.org]

[150.60.154.254 listed in dnsbl.ahbl.org]

[15.152.53.28 listed in dnsbl.ahbl.org]

[15.152.53.28 listed in dnsbl.ahbl.org]

[15.152.53.28 listed in dnsbl.ahbl.org]

[15.152.53.28 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[150.60.154.254 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[150.60.154.254 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[150.60.154.254 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[150.60.154.254 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: squarespace.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[150.60.154.254 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[150.60.154.254 listed in will-spam-for-food.eu.org]

[150.60.154.254 listed in will-spam-for-food.eu.org]

[150.60.154.254 listed in will-spam-for-food.eu.org]

[150.60.154.254 listed in will-spam-for-food.eu.org]

[150.60.154.254 listed in will-spam-for-food.eu.org]

[150.60.154.254 listed in will-spam-for-food.eu.org]

[150.60.154.254 listed in will-spam-for-food.eu.org]

[150.60.154.254 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

[15.152.53.28 listed in will-spam-for-food.eu.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[150.60.154.254 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

0.0 LOTS_OF_MONEY Huge... sums of money

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

4.0 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_MONEY_PERCENT X% of a lot of money for you

Subject: {SPAM?} =?utf-8?B?VW5kZXJzdGFuZGluZyB0aGUgQ2FuYWRpYW4gQnJlYWQgU2V0?=

=?utf-8?B?dGxlbWVudCA6IFJlZiBOb8K6IDU3ODQ2NTcwNTMgLyA4LzI1LzIwMjYg?=

=?utf-8?B?ODozNzoyMiBBTQ==?=



FILE NO. LOBLAW–WESTON / 2008–2026 ONT. S.C.J. · QC S.C.

SC





Notice of Settlement



Loblaw/Weston Packaged Bread



You are receiving this notice as a party identified to have claimed a $100–$200 Loblaw Card under the Packaged Bread Loblaw Card Program (2008–2026), and/or as a registrant with counsel of record in this matter.



Authorized by the Superior Court of Justice for Ontario



Class actions have been certified/authorized by the Ontario Superior Court of Justice and the Superior Court of Quebec on behalf of all individuals and businesses resident in Canada who purchased Packaged Bread, alleging certain manufacturers and retailers engaged in anticompetitive conduct resulting in overcharges. The Courts have not yet made any decision on the merits of the claims or defences in either action.



The Plaintiffs have entered into a national settlement with Loblaw Companies Limited, Loblaws Inc., George Weston Limited, Weston Foods (Canada) Inc., Weston Bakeries Limited, and Weston Food Distribution Inc. (collectively “Loblaw/Weston”), plus their cooperation pursuing claims against non-settling defendants. In exchange, Settlement Class Members release Loblaw/Weston from claims relating to Packaged Bread.



Settlement Ledger

Total settlement fund $500,000,000

Already paid to date $96,000,000

Eligible purchase window Jan 1, 2008 – Dec 31, 2025



If approved by both Courts, net settlement funds will be distributed to Settlement Class Members per the approved distribution protocol. Funds for personal-consumption purchasers will be distributed through a claims process; funds for resale purchasers will be held in trust pending a future Court determination.



Canadian Settlement Class Members’ Options



If you reside anywhere in Canada, except Quebec, and purchased Packaged Bread within the eligible window above, and wish to participate, you do not need to do anything to be included in the Ontario Settlement Class.

Apply Now



For more information and to exercise your rights, read the full Notice at

www.canadianbreadsettlement.ca



A further Notice will be published with details on how eligible Settlement Class Members may claim compensation once the Loblaw/Weston Agreement is approved.



Class Counsel of Record

Strosberg Wingfield Sasso LLP — www.swslitigation.com

Orr Taylor LLP — www.orrtaylor.com



Verita Global, LLC · Claims Administrator



P.O. Box 3355 | London, Ontario | N6A 4K3 | Canada

DoNotReply@m.veritacanada.com



Unsubscribe from these notices