Nk.CA credential phishing from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path: <2029283526@intime.cz>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Sep 2026 19:41:30 -0600
Received: from mail-ed1-f102.google.com ([209.85.208.102]:56778)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from <2029283526@intime.cz>)
id 1x86Xx-00000000GFM-3xXs
for dave@doctor.nl2k.ab.ca;
Sat, 19 Sep 2026 19:41:01 -0600
Received: by mail-ed1-f102.google.com with SMTP id 4fb4d7f45d1cf-6a051b737d8so426531a12.1
for; Sat, 19 Sep 2026 18:40:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=intime.cz; s=google; t=1789868396; x=1790473196; darn=doctor.nl2k.ab.ca;
h=message-id:date:mime-version:content-type:to:subject:from:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=89XtZuhjfivm4T4NuuYC2M0sYZaaaMD9PplD6cBpQXk=;
b=JknbBUnAcKJB4ukkOmUurrtxuURZztaPwutSmTf330wYVgPk/S29coFS7YU1vXJ7uB
eNTHBhcSHC7Co56keZ6Oh0gtu7UPcwdUXfJsJ1XZYcrYlIw8g61FzELg2tFSw1U/XtBK
nk20MipGsvGOTN9wub+4I0V4afgJZQmszgDJWCDTRDugwkhk9eAQQNgc1CS0EW+kRGsw
e5sA2d5IFpuAUQobYy/wXg1j9ONoadvk0m/zbCDbEsOxdrw8y/vVIsdOR5Gn6Bd3PZEY
EIUrvzZpZvVhxzBI6xG/VDbklu1EzbLbecSIgttYcyCDIJc2c7g6JCX4nla1TDQUS5ZZ
zjIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789868396; x=1790473196;
h=message-id:date:mime-version:content-type:to:subject:from:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=89XtZuhjfivm4T4NuuYC2M0sYZaaaMD9PplD6cBpQXk=;
b=lMyrMPSb+Ch3y2dy9jXx8YZIbfZu7tNggqJfAqAb0pFl7/5U9jL5oZ2KrNTswM7bgX
PjwoQisCmIL1dCy4onKGCsOn2wqzQtnqODoziGd4D6Vrjwl5DVBIDus0aiDlEWEjZX0n
FsgBZh1AF6VocU90sACgP1PTYDBnEl7eYnxTBFy2WdR6s1C1mETI4IKPuLHQMEAa0OMg
IqL4Xv+Soag9/BajZqFxXQditJgBD4bsJAe8VJZHPvJiNZwdj8eehuSoRfqjxtdkj1Jn
OPgfvnH1mMX//gl6MPq8b4sHiDRwBRRGy/ZolPYPGo73MaInx5Q1/r+6Qq8nmGvZ6554
JAIA==
X-Gm-Message-State: AFuF++kN/wCth8gj2Kkgk2u/sP1MseXwliT1ig9AY0oMYCjMYedWC0j5
6zQ5C3G/6vGEzQTz9Iw0G/UXrbdS2mOiU3qjbRK6QN24KFCyafh3BnUT9YTFfWJ1FhZJkZ1u5i/
+GpCiINhyMvIHWEqM6Aj6pcChyPU4GqlHXalSl6KSwNW4ynY=
X-Gm-Gg: AYBFou0nu0MwWoxmzXwr8g+cF6aymWnC7fE1/aYQqaUEQoivWeoRlrQ4D7ydI/vkHPv
DIyBJgs2dUEbyGTZdc1/uT1QW5EQjdA4IqIcfvMOVMVf2yiQPEn5uwBTS0MXNcbp+RwDfcH50Gm
spsaqD+lzSzocZMpDFvBUgsVzhjuZSGYc12KAlKDHpmDcKm6HShz68/XfALuGkVWsbcFMhkuQci
13xPkMZ+D/HDvy4th5ejlz6GQaC6osoBuxmui4po2ossaHrW9I1KOxTS7BjZfEsvob/t6nZltg6
Cii74VpfI5jtNXW0Di/MDHqrcNheGAcFk7XjONz/SGE3QH/y1W7LHUd7AzYsmMgkOJ6owRY0I0v
E+EUoVimPbGCL
X-Received: by 2002:a05:6402:42d3:b0:6a3:fdb0:c374 with SMTP id 4fb4d7f45d1cf-6aa531254d4mr4617325a12.13.1789868395573;
Sat, 19 Sep 2026 18:39:55 -0700 (PDT)
Received: from WIN-3V1QAPPLHFQ ([156.146.61.24])
by smtp-relay.gmail.com with ESMTPS id 4fb4d7f45d1cf-6aa67e6402esm1885340a12.10.2026.09.19.18.39.55
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Sat, 19 Sep 2026 18:39:55 -0700 (PDT)
X-Relaying-Domain: intime.cz
From: "doctor.nl2k.ab.ca Security Team" <2029283526@intime.cz>
Subject: Your dave@doctor.nl2k.ab.ca Password Has Expired 9/19/2026
To:
Content-Type: multipart/related; type="multipart/alternative"; boundary="XldARmASP2JwWs14CZm=_Yb1bGATTy2jvA"
MIME-Version: 1.0
Date: Sat, 19 Sep 2026 18:39:55 -0700
Message-Id: <202619091839558B1D5E5BE2-25261FAF13@intime.cz>
X-Spam_score: 7.5
X-Spam_score_int: 75
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear dave,, Your dave@doctor.nl2k.ab.ca https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.nl2k.ab.ca
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
[209.85.208.102 listed in dnsbl.ahbl.org]
[209.85.208.102 listed in dnsbl.ahbl.org]
[209.85.208.102 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: edgeone.dev]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.102 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: edgeone.dev]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.102 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.208.102 listed in bl.score.senderscore.com]
1.5 MR_STRANGE_QUESTION URI: No description available.
0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URI: ns3.dnsv2.com/163.177.5.55]
[URI: ns3.dnsv2.com/117.135.128.155]
[URI: ns3.dnsv2.com/220.196.136.55]
[URI: ns3.dnsv2.com/125.94.59.155]
[URI: ns4.dnsv2.com/101.227.168.55]
Subject: {SPAM?} Your dave@doctor.nl2k.ab.ca Password Has Expired 9/19/2026
This is a multi-part message in MIME format
--XldARmASP2JwWs14CZm=_Yb1bGATTy2jvA
Content-Type: multipart/alternative;
boundary="z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo"
--z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Dear dave,,
Your=20
dave@doctor.nl2k.ab.ca https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@=
doctor.nl2k.ab.ca
password is valid until=20
9/19/2026 https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.nl2k.a=
b.ca
, Please Kindly use this to associate the following to keep the same p=
assword.
Continue ?
Sincerely,
doctor.nl2k.ab.ca Security=20
Team.
--z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
8859-1">
Your dave@doctor.nl2k.ab.ca Password Has Expired 9/19/2026</t=<br /><br />
itle><br /><br />
</head><br /><br />
<body style=3D"MARGIN: 0.4em"> <P><IMG style=3D"HEIGHT: 94px; BORDER-=<br /><br />
TOP-COLOR: rgb(0,0,0); WIDTH: 318px; BORDER-LEFT-COLOR: rgb(0,0,0); BO=<br /><br />
RDER-BOTTOM-COLOR: rgb(0,0,0); BORDER-RIGHT-COLOR: rgb(0,0,0)" src=3D"=<br /><br />
cid:DBC33FD599CE3F2280F7@WINVQAPPLHFQ" width=3D431 height=3D112></P> <=<br /><br />
DIV><SPAN style=3D"FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; =<br /><br />
COLOR: rgb(32,31,30); BACKGROUND-COLOR: transparent"><BR></SPAN></DIV>=<br /><br />
<DIV><SPAN style=3D"FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif=<br /><br />
; COLOR: rgb(32,31,30); BACKGROUND-COLOR: transparent"> <DIV style=3D"=<br /><br />
FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif; WHITE-SPA=<br /><br />
CE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400;=<br /><br />
COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETT=<br /><br />
ER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0=<br /><br />
px; font-variant-ligatures: normal; font-variant-caps: normal; -webkit=<br /><br />
-text-stroke-width: 0px; text-decoration-thickness: initial; text-deco=<br /><br />
ration-style: initial; text-decoration-color: initial"><SPAN style=3D"=<br /><br />
FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(32,31,30=<br /><br />
); BACKGROUND-COLOR: transparent">Dear </SPAN><SPAN style=3D"FONT=<br /><br />
-SIZE: medium; FONT-FAMILY: Arial; BACKGROUND-COLOR: transparent">dave=<br /><br />
</SPAN><SPAN style=3D"BACKGROUND-COLOR: transparent">,</SPAN><SPAN sty=<br /><br />
le=3D"FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(32=<br /><br />
,31,30); BACKGROUND-COLOR: transparent">,</SPAN></DIV> <DIV style=3D"B=<br /><br />
ORDER-LEFT-WIDTH: 0px; FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica=<br /><br />
, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; WHITE=<br /><br />
-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0px; TEXT-TRAN=<br /><br />
SFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); PADDING-BOTTOM: 0=<br /><br />
px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; ORPHANS: =<br /><br />
2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; PADDING-RIGHT: 0px;=<br /><br />
BORDER-TOP-WIDTH: 0px; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDEN=<br /><br />
T: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -we=<br /><br />
bkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-=<br /><br />
decoration-style: initial; text-decoration-color: initial"> <P style=3D=<br /><br />
"FONT-SIZE: 11pt; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(32,31,3=<br /><br />
0); MARGIN: 0px"><BR></P><SPAN style=3D"WHITE-SPACE: pre-wrap; COLOR: =<br /><br />
rgb(32,33,36); BACKGROUND-COLOR: rgb(248,249,250)"><FONT face=3D"arial=<br /><br />
, sans-serif">Your <A style=3D"COLOR: rgb(17,85,204)" href=3D"https://=<br /><br />
fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.nl2k.ab.ca" rel=3D"noope=<br /><br />
ner noreferrer" target=3D_blank data-saferedirecturl=3D"https://www.go=<br /><br />
ogle.com/url?q=3Dhttps://rosslodges.co.za/Update/generalweb/index.html=<br /><br />
/?/%23%5BEMail%5D&source=3Dgmail&ust=3D1789908488864000&us=<br /><br />
g=3DAOvVaw3Ehl5VZdQHnuWnLk6mrH0z">dave@doctor.nl2k.ab.ca</A> password =<br /><br />
is valid until</FONT><FONT color=3D#000000 size=3D+0 face=3D"Calibri, =<br /><br />
sans-serif"> </FONT></SPAN><SPAN style=3D"FONT-SIZE: medium; FONT-FAMI=<br /><br />
LY: Arial; BACKGROUND-COLOR: transparent"><A style=3D"COLOR: rgb(17,85=<br /><br />
,204)" href=3D"https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.n=<br /><br />
l2k.ab.ca" target=3D_blank data-saferedirecturl=3D"https://www.google.=<br /><br />
com/url?q=3Dhttps://rosslodges.co.za/Update/generalweb/index.html/?/%2=<br /><br />
3%5BEMail%5D&source=3Dgmail&ust=3D1789908488864000&usg=3DA=<br /><br />
OvVaw3Ehl5VZdQHnuWnLk6mrH0z">9/19/2026</A></SPAN><SPAN style=3D"COLOR:=<br /><br />
rgb(0,0,255); BACKGROUND-COLOR: transparent"> </SPAN> <FONT styl=<br /><br />
e=3D"FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(0,0=<br /><br />
,0); BACKGROUND-COLOR: transparent">,</FONT><SPAN style=3D"BORDER-LEFT=<br /><br />
-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER=<br /><br />
-BOTTOM-WIDTH: 0px; COLOR: rgb(32,31,30); PADDING-BOTTOM: 0px; PADDING=<br /><br />
-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-=<br /><br />
TOP-WIDTH: 0px; BACKGROUND-COLOR: transparent"> Please Kindly use this=<br /><br />
to associate the following to keep the same password.</SPAN></DIV> <D=<br /><br />
IV style=3D"BORDER-LEFT-WIDTH: 0px; FONT-SIZE: small; FONT-FAMILY: Ari=<br /><br />
al, Helvetica, sans-serif; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: ba=<br /><br />
seline; WHITE-SPACE: normal; BORDER-BOTTOM-WIDTH: 0px; WORD-SPACING: 0=<br /><br />
px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); PADD=<br /><br />
ING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0=<br /><br />
px; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; PADDIN=<br /><br />
G-RIGHT: 0px; BORDER-TOP-WIDTH: 0px; BACKGROUND-COLOR: rgb(255,255,255=<br /><br />
); TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps=<br /><br />
: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: i=<br /><br />
nitial; text-decoration-style: initial; text-decoration-color: initial=<br /><br />
"> <P style=3D"FONT-SIZE: 11pt; FONT-FAMILY: calibri, sans-serif; COLO=<br /><br />
R: rgb(32,31,30); MARGIN: 0px"> <FONT size=3D3><SPAN style=3D"BOR=<br /><br />
DER-LEFT-WIDTH: 0px; FONT-SIZE: small; FONT-FAMILY: arial, 'helvetica =<br /><br />
neue', helvetica, sans-serif, serif, emojifont; BORDER-RIGHT-WIDTH: 0p=<br /><br />
x; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: rgb(0,0,=<br /><br />
0); PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: =<br /><br />
0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px"><FONT size=3D3> =<br /><br />
</FONT></SPAN> </FONT><FONT size=3D3> <SPAN style=3D"BORDER-LEFT=<br /><br />
-WIDTH: 0px; FONT-SIZE: small; FONT-FAMILY: inherit; BORDER-RIGHT-WIDT=<br /><br />
H: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; PADDING-BO=<br /><br />
TTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-R=<br /><br />
IGHT: 0px; BORDER-TOP-WIDTH: 0px"> &=<br /><br />
nbsp; </=<br /><br />
SPAN></FONT></P><table style=3D"FONT-SIZE: 15px; FONT-FAMILY: 'segoe u=<br /><br />
i', 'segoe wp', 'segoe ui wpc', tahoma, arial, sans-serif; BORDER-COLL=<br /><br />
APSE: collapse; COLOR: rgb(33,33,33)" cellSpacing=3D0 cellPadding=3D0 =<br /><br />
border=3D0> <tr><td style=3D"BORDER-TOP: transparent 1px solid; BORDER=<br /><br />
-RIGHT: transparent 1px solid; BORDER-BOTTOM: transparent 1px solid; B=<br /><br />
ORDER-LEFT: transparent 1px solid; MARGIN: 0px; border-image: none" bg=<br /><br />
Color=3D#1976d2 align=3Dcenter><A title=3Dhttps://www.equivalent.pro/p=<br /><br />
assword%20expiry/?mail=3Dlmespinosa@opimed.com style=3D"TEXT-DECORATIO=<br /><br />
N: none; BORDER-TOP: rgb(25,118,210) 1px solid; FONT-FAMILY: avenirnex=<br /><br />
t-demibold, arial, sans-serif; BORDER-RIGHT: rgb(25,118,210) 1px solid=<br /><br />
; VERTICAL-ALIGN: baseline; BORDER-BOTTOM: rgb(25,118,210) 1px solid; =<br /><br />
COLOR: rgb(255,255,255); PADDING-BOTTOM: 12px; PADDING-TOP: 12px; PADD=<br /><br />
ING-LEFT: 30px; BORDER-LEFT: rgb(25,118,210) 1px solid; MARGIN: 0px; D=<br /><br />
ISPLAY: inline-block; PADDING-RIGHT: 30px; border-image: none" href=3D=<br /><br />
"https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.nl2k.ab.ca" rel=<br /><br />
=3D"noopener noreferrer" target=3D_blank data-saferedirecturl=3D"https=<br /><br />
://www.google.com/url?q=3Dhttps://rosslodges.co.za/Update/generalweb/i=<br /><br />
ndex.html/?/%23%5BEMail%5D&source=3Dgmail&ust=3D17899084888640=<br /><br />
00&usg=3DAOvVaw3Ehl5VZdQHnuWnLk6mrH0z"><FONT size=3D2>Continue =<br /><br />
594;</FONT></A></td><td style=3D"BORDER-TOP: transparent 1px solid; BO=<br /><br />
RDER-RIGHT: transparent 1px solid; BORDER-BOTTOM: transparent 1px soli=<br /><br />
d; BORDER-LEFT: transparent 1px solid; MARGIN: 0px; border-image: none=<br /><br />
" bgColor=3D#1976d2 align=3Dcenter><BR></TD></TR></TABLE> <P style=3D"=<br /><br />
FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(32,31,30=<br /><br />
); MARGIN: 0px"><BR></p><p style=3D"FONT-SIZE: 14px; FONT-FAMILY: cali=<br /><br />
bri, sans-serif; COLOR: rgb(32,31,30); MARGIN: 0px">Sincerely,</p><p s=<br /><br />
tyle=3D"FONT-SIZE: 14px; FONT-FAMILY: calibri, sans-serif; COLOR: rgb(=<br /><br />
32,31,30); MARGIN: 0px"><SPAN style=3D"FONT-SIZE: medium; FONT-FAMILY:=<br /><br />
Arial; COLOR: rgb(34,34,34); BACKGROUND-COLOR: transparent">doctor.nl=<br /><br />
2k.ab.ca </SPAN><SPAN style=3D"BACKGROUND-COLOR: transparent">Sec=<br /><br />
urity <WBR>Team.</SPAN></P></DIV><BR class=3DApple-interchange-ne=<br /><br />
wline></SPAN></DIV> <P><BR></P> <DIV><BR style=3D"FONT-SIZE: small; FO=<br /><br />
NT-FAMILY: Arial, Helvetica, sans-serif; WHITE-SPACE: normal; WORD-SPA=<br /><br />
CING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34=<br /><br />
); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; =<br /><br />
BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-lig=<br /><br />
atures: normal; font-variant-caps: normal; -webkit-text-stroke-width: =<br /><br />
0px; text-decoration-thickness: initial; text-decoration-style: initia=<br /><br />
l; text-decoration-color: initial"></DIV></body><br /><br />
</html><br /><br />
<br /><br />
--z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo--<br /><br />
<br /><br />
--XldARmASP2JwWs14CZm=_Yb1bGATTy2jvA<br /><br />
Content-Type: image/jpeg;<br /><br />
name="Roundcube logoo.jpg"<br /><br />
Content-Transfer-Encoding: base64<br /><br />
Content-Disposition: inline;<br /><br />
filename="Roundcube logoo.jpg"<br /><br />
Content-ID: <DBC33FD599CE3F2280F7@WINVQAPPLHFQ><br /><br />
<br /><br />
/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAoHBwgHBgoICAgLCgoLDhgQDg0NDh0VFhEYIx8lJCIf<br /><br />
IiEmKzcvJik0KSEiMEExNDk7Pj4+JS5ESUM8SDc9Pjv/2wBDAQoLCw4NDhwQEBw7KCIoOzs7Ozs7<br /><br />
Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozv/wAARCABwAbADASIA<br /><br />
AhEBAxEB/8QAHAABAAIDAQEBAAAAAAAAAAAAAAYHAwQFCAIB/8QAThAAAQMDAgMGAgQJBgwHAQAA<br /><br />
AQIDBAAFEQYhBxIxE0FRYXGBIpEUMqGxIzY3QlJidLLRFTPBwuHwCBYXJDRDRnJzdYKzSISFkqLD<br /><br />
8SX/xAAaAQEAAgMBAAAAAAAAAAAAAAAAAgUBAwYE/8QAIxEBAAIBBAICAwEAAAAAAAAAAAECAwQR<br /><br />
IVEFMSJBEmGBkf/aAAwDAQACEQMRAD8AualKUClKUClKUClKUClKUClKUClKUClKUClKUClKUClK<br /><br />
UClKUClKUClKUClKUClKUClKUClKUClKUClKUClKUClK5VxnkEsMnGPrKH3UGeVcmo+Uo+NY6gHY<br /><br />
Vy35r0nZZHL3JAxisFZorXOvmPRP20GaNH5MLV9buHhWelKDK28tr6pGPAitlqUhzAV8KvsrRpQd<br /><br />
alacaR0Qs7dxPdW5QKUpQKUpQKUpQKUpQKUpQKUpQKUpQKUpQKUpQKUpQKUpQKUpQKUpQKUpQKUp<br /><br />
QKUpQKUpQKUpQKUpQKUpQKUpQKUpQak+T9GjEpPxq2T5Vwa3ru6VSgjuQMfPf+FaNArfjo5GR4nc<br /><br />
1ooGSB4nFdKgUpSgUpSgVvxne0b3+sNj51oVnirw8B3KGKDfpSlApXNvN9ten4RmXaa1EZBwFKOS<br /><br />
o+AA3J8hmojD4yaZuF5i2uIxcHHJTyGW3exSEcylcozlWcZI7qCwKUqIaj4m6Y00+uNKmqkSkHC4<br /><br />
8VPOpPkTskHyJBoJfSq5i8ctJSHg263cYqT1cdYSUj/2qJ+ypzbbpCvEJE23ym5Mdf1XG1ZHmPI+<br /><br />
RoN2lYpDzcZhx9w4Q2krUcdANzXA07rvT+qpjkS0SlvOst9otKmVIwnOO8eJFBJKUrg6l1jZNJ/R<br /><br />
v5YkrZ+lc3ZcrSl55cZ6Db6woO9StO13OLeLaxcYSyuPIRztqKSkkehr6nT4lshuS5shuPHbGVuO<br /><br />
K5QP7+FBtUquZnHDSMZ8ttIuEtI/1jLCQk/+9ST9ldrTnEjTWp3xGhTVMylfVjyU8i1encT5Ak0E<br /><br />
spSvkqCUkkgAbknuoPqlQe88XtI2d9TAlPT3EnChDbCwP+okJPsTWG08ZNI3SQGFvSbepRwkzGwl<br /><br />
J/6kkgepxQV7x6/HeH/y1H/ddq+YX+gx/wDhJ+6qF46LQ5rSCttQUhVsbKVA5BHaOVfUL/QY/wDw<br /><br />
k/dQZ6Vyb7qOz6biiRd57cZCvqhW6l+iRufaoUvjtpRDhSIl0cA/OSy3g/NeaCy6VHdN650/qnLd<br /><br />
rnJU+BksODkcA9D1HmM1IqBSoxA4gacueov5Aiy3FT+0W32ZZUBzIBKtyMdEmpPQKVzL9f7fpq2K<br /><br />
uN0eU1GSoIKkoKtz02FfOn9RW3U9vM+1PKejhwtlSkFPxDBOx9RQUp/4hf8A1L+rXoCvP/8A4hf/<br /><br />
AFL+rVoai4n6Y05JXEky1yJLZwtmKjnUk+BOQkHyzmgmFKryBxt0jNfDTv06EDtzyGBy/wDwUqp5<br /><br />
DmR58VuVEfbkMOjmQ42oKSoeRFBnpSuPftUWbTMYP3ee3HCvqJ6rX6JG59elB2KVWp466UD3II1z<br /><br />
Kc47QMox+/n7Kl2n9X2LU7JXaZ6H1J3W0QUuI9UnfHn086DuUpSgUpSgVGtQ63tVhCmuf6VLG3YN<br /><br />
K6H9Y/m/afKoHqHiLcrtzx7fzQYp2+FX4RY81d3oPmaiG53PU1KI7Qm3S4Yc9d0hsznEhC30BZSn<br /><br />
oM/wrNXK0u8HtOQlA/VRyHywcf0V1ailHp9tfzyPWuhXPaOHkeoroUZKUpQKUpQK+X3lRmXH0gFT<br /><br />
aCoA9+BX1WtdHA3bZBPegp+e39NTpG9ojuWvJb8aTPUNi3X+JPwgnsXj+Yo9fQ99dXNVlXXt+o5c<br /><br />
IBDn4dsDYLO49/D51Y5tBMc4/wDFPp/KR6yx/YVBJnXfivriLHcWGO2whtsHKI7YGVqHidifM4Ge<br /><br />
lW9ZOEmlbI7GkiO9KmRXEOokOvKBC0kEHlSQMZHQg+9VjwPSlWvVEgEphOEZ7t0j+k16HqrXiteL<br /><br />
+tpGnbY1ara6W505JK3EnCmmumR4FRyM92D34NRTh9wjRfre1eb+46iM+OZiO0cKcT+kpXcD4Dc9<br /><br />
ciuXxZ/z3ioqM+vDQSw0D05UkAn7VE16EaabYZQy0hKG20hKUgbADYCgr+7cFNKzIhRb0P258J+F<br /><br />
1DqnAT+slROR6EVWdjul44U62XCn830fnCZTSSSh1s9HE+YG4PXqDjcV6RqlP8ICKyiTZJgADziH<br /><br />
m1HxSkoI+RWfnQW1dHG39PzHG1JWhcRakqB2IKT9lUtwD/Gq4/sP9dNWVph5yRwmhrc+sLUU7+AQ<br /><br />
QPsAqteAf41XH9h/rpoL6qmf8IT/AGf/APM//VVzVTP+EJ/s/wD+Z/8AqoJ/w3/J5Zf2Yfeaqbin<br /><br />
fLhqjXSNMw1FTEZ5MdpoHAW8rAKj6E48gD4mrZ4b/k8sv7MPvNU/E/L+r/m7n3mgsKzcFtLQoKEX<br /><br />
OO5cZWPwjqnltpz38oSRgeuagfEzhy3o9LF6sjzyYZcCFIUrK2HOqSFdcbd+4Pec7egagvGT8m07<br /><br />
/is/9wUG7w31I7qjRsaZJVzSmVGPIV+ktON/UpKT6moHxm1vJM06UtzikNpSDMUjq4VAFKPTBBPj<br /><br />
nFdbgIpX+KlwTk8onEgefIjP3CoPCbRcePK25ZCki8u/W7+RSuUf/ECgmGjuClvRAbl6oDj8p0ZM<br /><br />
RDhQhoeCinBJ9CAOm/Wt/UPBLT82Ev8AkQLtstIy3lxTjaj4KCiSAfEHbwPSrMpQeQrqifGmG33F<br /><br />
Tget4McNrOezAUTyjyyon3r1Jc71H09pRy7St240YK5QccxwAE+pJA96o/jbGYY18XGgOZ+I247g<br /><br />
fnZUn91KanfGh11jhxCaTkByWyhwEdwbWfvSKCurLZr7xZ1XIly5PK2nCpDxGUsIOeVCE/PA8iTv<br /><br />
1tVjgxoxqGGXIkh53GC+uSsKPsMJ+ysPBGMyzoPt28do/KcU4fMYAHyAPvViUHnvWnDi5aInxrtY<br /><br />
XpMiMXPwS0Jy9HWNxnl6jb623gR43BoW/SdSaYjzJ0dbExslqQlaCjKxj4gD3EEH3I7qklKDzzoj<br /><br />
8vA/bpv7jtehq886I/LwP26b+47Xoagr/jX+Tx39pa+81h4G/iEv9uc/dRWbjX+Tx39pa+81h4G/<br /><br />
iEv9uc/dRQVNr2W/C4lXiTFdW08iSeRaDgp+HGx7utTvQ/BmI/b2rlqftVuvgLRCQooCEn9MjfJ8<br /><br />
BjHmekWvEZmbx0VGkgFp27NpWk9FDmTt79PevRtBXF84KaZnRFJtKHbZJA+BYdU6gn9YKJOPQj3q<br /><br />
v9D6iufDzWq7DdlluGt4MyWlH4W1E/C6ny3Bz3pPjjHoeqA47RmWtZRHUABx+EkuY78LUAfkAPag<br /><br />
ubVOoGNMadl3d8cwYT8CM451k4Sn3JHtk1RGmtNXninqSTcLjMUhlKgZEgjPLno2gdOnQdAN9+hm<br /><br />
XF+ZJd4bWEu8wVIcaW7k/ndkTv7k/KvnQeuNL6N4dw0y5XPOeW667GYHO4Vc5SM9yfhSn6xG1BI2<br /><br />
+DOi0Q+xMKQtzH+kKkr5/sPL9lVbrLSNw4Z3uJcLVcVllxZMZ7YOII6pUOhGD6HfIHSuteOMepdQ<br /><br />
SPoGm4Jh9psgNJ7Z9fptgewyPGvm0cINU6jk/wAoajmqhhzdSpCi8+v2zt7nI8KC3NFala1bpmNd<br /><br />
UpCHTlt9sHPI4Oo9DsR5EV364OldI23R1tVBtpeUlxfaOLdXzFasAZ8B0HQCu9QKUpQebqUpWxpT<br /><br />
nQM8LjSLeo/EhXaIB7wdj8jj51L6qCDOkW6UiTFXyOJ6HGQf7DU5s+tYk3lZngRXjtz5+BX8Pf51<br /><br />
GYTrP1KTjbB8K6QIKQR0IzXMBBSCCCCMgjfNbsVfO1y96dv4VFNmpSlApSlArkahkhMZEcH4lnmP<br /><br />
oP7fur7nXxiPlDGHXOmQfhH8fao/Jkuy3i66rKjt0wB4VZaTS2m0XtG0Qp9frccY5x0neZ4n9MVK<br /><br />
Uq6c6hHA38fXP2Fz95FehqqrhxwxvekNTqudwlQHWVR1tBMdxalZJSR1SNtjVq1ybulIcddOvN3G<br /><br />
JqJhBLLqBHfI/NWMlJPqDj/pqc8PNewtVWhiNIkoRd2UBL7K1YU7j89PiD1OOh8sZlc+BFucB6FN<br /><br />
ZS/HfTyrbWMhQ/v391U3qDgXOalKf05OacZJyGJKilaPIKAwr3x70Fyz58S2RFy50luOw2MrccVy<br /><br />
gV541rfpHEnW8eJaGlLZCvo0RJB+PfKnCO4Hr5BIzW81wf1xc3kpnvstoScBciUXMDyAz/R7VaGh<br /><br />
+HVs0W2X0rMy4OJ5VyVJxyjwQPzR8yfsoJBGs7UTTjdlZVhpqIIyVY7gnlz699UHw2vbei9eux7z<br /><br />
/m7biVxH1L6NLChufIKTjPnmvR9V7rzhXC1W+q5QX0wbkRhSiMtv46cwG4PdzDO3UGgnyHUONBxC<br /><br />
0qbUOYKB2I8c+FUHxn1NCv8AfYVttziZCbclaVuN7hTiynKR445R07yRWM8HdctoMVD0YsE7hMsh<br /><br />
B88Y/oqaaG4PM2Cc3dL3JbmS2VBTLLQPZNqHRRJwVEegA86CbaRtjln0jare+MPMRUJcT4LxlQ+Z<br /><br />
Iqk4n5f1f83c+816Gqq2eGF7b4nHU5lQPoRnKkdmHF9pyknu5MZ38fegtSoLxk/JtO/4rP8A3BU6<br /><br />
qNa+07M1VpKTaYLjLb7y0KCn1EJHKoE9AT3eFBEeAf4q3L9u/qJqHcUbXN0nxEbv8NJS3JdTKYXj<br /><br />
KQ6nHMk+4zjwVVn8MtHXDRlmlwri9Gdcekdqkx1KUAOUDfKRvsakF+sNu1JanbbdI4dYc3BGykK7<br /><br />
lJPcf/zcUGrpXV1s1fa0S4DyQ7j8NGKh2jKvMeHgehrdvN8t2nrcufdJSGGUAnKjuo+CR3nyFU5c<br /><br />
uCOoLdN7awXNp5APwKUssup+Wx9QR6ViY4M6wu8xK71cmG0DZTrr6n148h3+5FBxoaZfFDieJCmV<br /><br />
CO68HHE9Q1HRgYPmQAPNRq7OIenV6m0ZNgMJ5pKQHo4/XSc49SMj3rLpPRtr0bbjFt6FLccwXpDn<br /><br />
13T3ZPcBvgDpnvO9SKgoXhFrmNpyRIsV4c+jRZDnO26vYNO4wQrwBAG/cRv12vdtxDraXG1haFDK<br /><br />
VJOQarzW/COBqWQu4219NvuCzlzKMtPHxIH1T5jOe8E71Af8juuWUrjNOxywTuESyEK9iB9ooJzx<br /><br />
A4sM6bdbgWNUWbPCsvFeVttJ8DykfFnG2dsb1J9DXa9X3TTN0vcePGekkrZQwhSR2W3KTzKO53Po<br /><br />
RUF0pwQahykTNSym5RQcpiMZ7Mn9ZRAJHkAOnUjarcSkISEpACRsAB0oPOMqSvQvGR6dKQrs2Zy3<br /><br />
Ttkll3O48SErPuMV6Ggzolyhty4UhuRHcGUONq5gajWuOH1u1rHQpxRiz2RhmSlIO36Kh3j5Edx6<br /><br />
5qxfBvWsF1xqHJjKbVsVNSSgKHmCBQSHjdqqEu2s6ciPpdkl4OyAhWQ2Eg4SfMkg47selSjhDa3r<br /><br />
Zw/iF9JSuY4qQEq6hKsBPzSkH3qKaU4HqZmIl6mlMvIQeYRI5JCz+sogbeQ6+NXChKW0BKUhKQMB<br /><br />
IGwFBQvGOyS7HrJrUUXmQ1MKFodT/q3kAA+myUnz38KtXRWtrbrG1tusPIbmoSPpEUqwpCu8gd6T<br /><br />
3H7jXYvNmgX62O225MB6M8MFJ7j3EHuI8apy8cDrzBmF/T1zaeaByhLyy06j3AwfXb0oLlud0gWW<br /><br />
EubcpTcaO31ccV9g8T5Dc156nvyuKnEpAjoWhh5aW0bbssJ6qPnjJ9Tiuwjg7rS7ykm73FhCB1de<br /><br />
kKeV7DvPqR61aujtDWnRkJTcJKnZLoAelOD4l+X6o8h7kneg0uJmmFah0M9EhM5fhFL8dtI68oIK<br /><br />
R/0kgDxxVHaEtumbpfRF1NNciNKA7EpUEIWrvSpR+qD47eo2r1JVa634QQdQynLlaX02+a4SpxCk<br /><br />
5adV47bpJ7yM58M70E1smn7LYYoas8BiK2oDKmhlSx3ZUd1e5NRDiFxRjaVCYVoVGm3Pm/CIWSpD<br /><br />
Ke/mwR8R8M+Z7swAcI9esIMZqQz2PTlRMIQfb+ypFpbgaiNJblalltyAg5ESNnkV/vKOCR5AD1xQ<br /><br />
TrQV6vmodNout7jxo6pCyWER0KTlruUeZR6nPtg99SesaEIbbShtIShIwlIGABWSgUpSg83UpStj<br /><br />
SUpSg69o1JcLQoJbX2jGd2VnI9vD2+VT6w6pgXJaQhfYvEYUys4J9PH++1VVX6CQoEHBG4I7qxMb<br /><br />
sxMwvoEFII3B3FKrCwa7m23lYnhUuP05ifwiPfv9/nUrmX919PLGBabUPrH6x/hWzDgvlnarVn1V<br /><br />
MFd7ffqHZm3ONCSQtXMvuQnc/wBlR6bdpM3KSeRv9BJ6+vjWmSSSSSSTkk99flXOHSY8fPuXPanX<br /><br />
5M3EcR1BSlK9jwFKUoLPpXLnaitFtfEeXObbdP5uCoj1x096zv3aBFhtzHpbSY7pAQ5n4VZGRjHk<br /><br />
D8q5N3TdpXNjX+1TZqoUaa04+nPwJPXHXB6H2zXzO1DabdJEeXObbdP5pBOPXHT3xQdSlaci6QYz<br /><br />
bLj8ptCHyA2onZZPgawwr/arhJVGiTWnXU9UjO/pnr7UHSpWJ55uOyt59aW20DKlqOABXPg6ks9y<br /><br />
k/Rok9tx09E4KSfTI39qDq0rmXC/2u1OJbmzENLVuEYJPyHQetZl3WC3bxPVKb+inGHQrKdzj79q<br /><br />
DdpWm/dIMZthx+ShCJBAaJP189MVglahtEJ5xqTOabcaIC0nORn/APaDp0rlzdRWm3Br6TObb7ZI<br /><br />
UgYJJB6HAGw8zWwbpCTb/wCUDKb+i4z2vNt/fO2KDcpWhbr1brulZgSkPcn1gAQR7HBrLKnxIKmh<br /><br />
KfQ0XlcqObbmPhQbVK1FXKGLgmAZKBKUOYNZ+Ijr9wNYxebaUyVCY1yxFcrx5sch3GD7g0G/Sudb<br /><br />
b5bLuVJgy0PKRupIyCB44Pd51HdO6sZRDkKvdySHPpBQ2FJ35cDuSOm/U0EzpWk9drfGZZeeltIa<br /><br />
fOG1lWy/Q1rN6nsjyXVIuLJSzu4SSMDp3jfcgbeNB1qVoxLtAnQ1y40ptxhGedzOAnAyc56bb71r<br /><br />
xNS2afKEWNPbW8TgJwRn0yN/ag61KjK5c1u63r/+myttmMpbUdH12SEggn4f6T1ra0hOlXHTrEmW<br /><br />
6XXVKWCsgDOFEd1B3KVy7hqC02t4NTZyGnFDPLgqI9cDb3rabnw3YX01uQ2Y3LzdrzYSB691BtUr<br /><br />
lwdQ2i4vmPEntuO9yMFJPpnr7VFp+oX5urFxWb2mDCjgYWE5Dh2yPXJI8NqCe0qJWXWUaW5OXcJT<br /><br />
EdCHcMp/U6Zz35NSB67QI6owdltoMrHY5P1846fMfOg3aVpqukFExcRcptL7aOdaSfqp8T4CtSLq<br /><br />
ayzZQix7g2t0nCU4I5vQkYPtQdelcyVqK0QXVsyZzTbjZCVJOSQT06V8y9SWeA4huTObQtaQoJAJ<br /><br />
OD0zjp74oOrSsbTrb7SXGlpWhYylSTkEeNZKBSlKCMah0Lar7zPJT9DmK37ZpOyj+snv9dj51V19<br /><br />
0rddPOH6WxzMk4S+38SD79x8jir3r4cbbeaU04hK0KGFJUMgisxOyM1iXnKlWnqHhnFl88mzLEV0<br /><br />
7lhe7avT9H7R6VW9xtk60yTGnRlx3BuAobH0PQjzGalE7tcxMNSlKVkKsBv+bR6Cq/qwG/5tHoKs<br /><br />
/H+7fxTeV9UfVKUq1UhSsrEZ+U4G47anFnuA6fwFSW26Wbaw5OV2iuobSdh6+P8AfrXny6jHij5T<br /><br />
y9WDS5c07VjjtwIFql3FeGW/gBwVq2SP7+VSqBpyJESFOpD7uNyobD0H8a6yEIaSEISlKQMAAYxX<br /><br />
6O81TZtXkycRxC/0+gxYuZ5n9q70VbLXc4U965pQ64kgEuKwUIx18vXyrluOOL0AEKUVNt3PDZIx<br /><br />
t2ZP3nPvU1uGhbTPkl9JejFQAUlkgJI9CNq5muIEe1aRiRIiORpuUnAJ3+ovJPnXkWLBqG3W61yb<br /><br />
C/aUIbcU6nlKDkuJynBPj1+2ubGjyp9wvqjbo0tfOoOLkOhJY3VunPTGOvdjwqXQNE2u33RM5BfW<br /><br />
WzzNNrUClB8u/bz+071+XPRFuuU9yZ20iO49/OhlQAX49RQRa4RXU6Xs0SS42sfS1ICmnAscp8xt<br /><br />
3mutLgRbbxBs6IcdDCVtHKUDAOyx88V3JGlrc/ChQx2rTUJfO2GyNz55Bzk71sybJGlXmNdVrdD8<br /><br />
VPKhII5SN+oxnvPfQYNWRUzdOyI6pTUbnwQt5fKkkHIBPniodAdctt0tabvY2AOdKY8mP8GScYVl<br /><br />
J5V9x38asC426PdITkOUjmbc64OCPAjzriQdD2+FMZkrkypP0c5aQ8sFKfDoKDkWSDBu+p76q6to<br /><br />
dcbdIQlxXROVA/IBIz3VyGzyaTvsdlRVFalt9ic5z8X9IAqZXjR1tvMsy3FPMPKGFKZIHP6gjr3V<br /><br />
tN6atrVics6W1fR3PrKJ+Iq/Sz47Dy26Y2oI1qZxH8k6aRzDmUW1ADvHKn+IoxbIl04j3NmayHW0<br /><br />
Nc4QTtnCB9yjXTa4f2tvsiqTLWtpYUhRcG2Og6dK6saxRYt8kXdC3i/IRyKSSCkD4em2c/CO80EZ<br /><br />
tUCDctYXpFwaQ6WvhaQ50CBtsPIAb91c2/ItzVlt0WzyFSYSpSyvnXj48J2OQMbE/PNSu86Nt95m<br /><br />
mY448w8oYWpogc3dvnvxtWVWlLUuxptPZuBlCucLB+ML/Sz4/ZQcG0W+bG1kw8qHDt47IpdjsSEZ<br /><br />
I5TghOc9Qk+2a6+uohk6acdSD2kVaXkkdRg4P2En2rLZtJwbNLMttx598p5UreUDyjwGK7MqOiXE<br /><br />
djOjKHkFCvQjBoKv/lZ9d8GqSk9imQhogf7mD9gPzr5lsvNaNjSFk5nzVOuE7ZwCBn3yfepunRtt<br /><br />
RYl2cOSOxU92pWVDn5th1xjoMdK3JOn4MuyN2hxKiw0lKUKB+JJH52fHr8zQRaBbZ0bWEKR9ChW/<br /><br />
lQUrjtSU5WnBHNy5yf7K1dMW21TbVeHZjba3kFXxK6tpxnI8N87+VSiz6Qg2eYJiHXpDyU8qFPKB<br /><br />
5B02x5bVpu8PbS4khL0tKioqUvnGSDjbp0BGffvoImQqRpK0svZLZnrQnf8ANOM/aTXbk2a3f5Q4<br /><br />
sQRGkRjH5y0lHwqICsZHsPXFSGRpW3vwYUMF1pmEvnbDahkn9bIOcnetpdkjOX5u8Fx36Q232YSC<br /><br />
OXG/lnO576CF25cG3tarRKYUqG0+lAZbUU7c6wACDt3e3jWk806mXYZAtca3suPILHZq5nHBzJOV<br /><br />
Hv6g5ODvU2/xUt5Rc0KU+oXJfO7lQ+EhRUOXA2wVd+elaTOgba12SjLmqcZWFNrLg+DG4AGMYzvQ<br /><br />
c9H416m/Ylfuprr6D/FOP/vr/eNbg07EFwnze0e7Sc0WnBkcoBAG23XbvzWzaLUxZreiDGU4ptBJ<br /><br />
BcIJ3Oe4Cghl7t01Oppky3NQrrzoHax1hLi29gN05BHTqN960J89l7QiG4MRUNsTQiQjnKgTyk9+<br /><br />
+CQDjuIqX3TR8G5z1TkyJEV9Yw4phQAV3eFbMbTNtjWRdpDRWw5usqOVKV+lnx2HyoIvqi22y0i0<br /><br />
SLSlDcgvJ5C2rJcT1z574386zQrZBd4j3KMuIyplEcLS2UApCvwZz67n511bdoa122eiYFvvqaOW<br /><br />
0OkEJPjsNyK6TNlisX5+8IcdMiQ2G1pKhygDl6DGc/CO/wAaCH6ds8a42q/NiOgvBa0Mq5d094A8<br /><br />
sgVwXZcm7Q4y2yQbREGfUOYGPYp+RqxLfpWFbby7c2Hn+dwqPZFQ5Bnr3V+RdJW2G3cG2y8Uz0lL<br /><br />
gKh8AOdk7bde/PQUEbgSYk1vUOoJ7K1xXOVlKUqKSpORtkYx+ZXPeacTJsT4tcaAw4+gsciuZxwZ<br /><br />
ScqPf1HXB3qcx9M2+PYnLMO0VHdJK1KUOcnIOcgddh3d1c1rQNtQG+aZNUtpQLa+0HwY6ADGMZ39<br /><br />
qDnxrXDunEK7ImsB5CGwoJUcb4QPuJrlMx5M6830i3RpikrWlapDgR2KcqAKc+AA37sVPY1kjRbz<br /><br />
JuqFul+UnlWkkcoG3QYz3DvrnXTRdvuc9cztn47row4GVABfzFBk0WzIjadbYkONr5Vq5FNOhaeU<br /><br />
nPUeZNSCtS3W6Pa4LcOKkpbbG2TknzPnW3QKUpQKUpQK07hbIV1jGNPjIkNHuWNx5g9QfMVuUoKr<br /><br />
1DwzlReeTZlqktdSwo4cT6H84fI+tQVxtbLqm3EKQ4g4UhScEV6Nri33S1r1A0RMZ5XgPhfb2cT7<br /><br />
948jmsxPaE16UTVgN/zaPQVwtT6Ln6c/DqWh+IpXKh1JwQe4FPj6ZHnUttFlkXNCVIKUNAAKWTv8<br /><br />
vH5VZ6K9aRa1p2hTeSxXyWpWsby0gFKUEpBKicAAZJru27TD0jDkwllHXkH1j/CpBb7NEtwBbRzO<br /><br />
Y3cVuT/D2rfqObX2txj4S03i61+WWd56+mCLDjw2+zYbCB5Dr6+NbFfnvX7VdMzM7yuK1isbRGz9<br /><br />
r8r9pWEn/9k=<br /><br />
<br /><br />
--XldARmASP2JwWs14CZm=_Yb1bGATTy2jvA--<br /><br />
<br /><br />
</div>
<footer class="post-info">
<ul class="meta">
<li><span class="info-label">Categories: </span><a href="https://www.nk.ca/blog/index.php?/categories/14-Google-Gmail-Spam">Google Gmail Spam</a>, <a href="https://www.nk.ca/blog/index.php?/categories/25-Phish">Phish</a></li>
<li><a href="/blog/index.php?/archives/20086-Nk.CA-credential-phishing-from-Google-Gmail.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li>
</ul>
</footer>
<!--
<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/"
xmlns:dc="http://purl.org/dc/elements/1.1/">
<rdf:Description
rdf:about="https://www.nk.ca/blog/index.php?/feeds/ei_20086.rdf"
trackback:ping="https://www.nk.ca/blog/comment.php?type=trackback&entry_id=20086"
dc:title="Nk.CA credential phishing from Google Gmail"
dc:identifier="https://www.nk.ca/blog/index.php?/archives/20086-Nk.CA-credential-phishing-from-Google-Gmail.html" />
</rdf:RDF>
-->
</article>
<article class="post clearfix">
<header>
<h2 class="post-title"><a href="/blog/index.php?/archives/20085-funding-spam.html">funding spam</a></h2>
<span class="post-info">Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2026-09-22T03:34:00+00:00">Tuesday, September 22. 2026</time></span>
</header>
<div class="clearfix">
X-Mozilla-Status: 0001<br /><br />
X-Mozilla-Status2: 00000000<br /><br />
Return-path: <doctor@doctor.nl2k.ab.ca><br /><br />
Envelope-to: dave@doctor.nl2k.ab.ca<br /><br />
Delivery-date: Sat, 19 Sep 2026 19:14:31 -0600<br /><br />
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))<br /><br />
(envelope-from <doctor@doctor.nl2k.ab.ca>)<br /><br />
id 1x868N-00000000EFq-0n3K<br /><br />
for dave@doctor.nl2k.ab.ca;<br /><br />
Sat, 19 Sep 2026 19:14:23 -0600<br /><br />
Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca><br /><br />
Resent-Date: Sat, 19 Sep 2026 19:14:23 -0600<br /><br />
Resent-Message-ID: <aq8zb3YrLAyRLeSD@doctor.nl2k.ab.ca><br /><br />
Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca><br /><br />
Received: from [103.138.142.2] (port=65528 helo=mail.bcel.com.la)<br /><br />
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384<br /><br />
(Exim 4.100.1 (FreeBSD))<br /><br />
(envelope-from <thanongsone@bcel.com.la>)<br /><br />
id 1x844y-000000002uD-0wL5<br /><br />
for sales@nk.ca;<br /><br />
Sat, 19 Sep 2026 17:02:54 -0600<br /><br />
Received: from ROBEY ([45.154.138.168])<br /><br />
(user=thanongsone@bcel.com.la mech=LOGIN bits=0)<br /><br />
by mail.bcel.com.la with ESMTP id 68JN1P8J004747-68JN1P8S004747<br /><br />
(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)<br /><br />
for <sales@nk.ca>; Sun, 20 Sep 2026 06:01:41 +0700<br /><br />
From: "thanongsone@bcel.com.la" <thanongsone@bcel.com.la><br /><br />
Subject: Project Funding and Investment Opportunities<br /><br />
To: <sales@nk.ca><br /><br />
Content-Type: multipart/alternative; boundary="lgEo=_rT1XGyklXeNd5Gv5SjxY2xXLdK6h"<br /><br />
MIME-Version: 1.0<br /><br />
Reply-To: <Ahmedwalid0@hotmail.com><br /><br />
Date: Sun, 20 Sep 2026 02:01:40 +0300<br /><br />
Message-Id: <203920260901027EAD3C144B-7E73B517EF@bcel.com.la><br /><br />
X-FEAS-Auth-User: thanongsone@bcel.com.la<br /><br />
X-FEAS-Client-IP: 45.154.138.168<br /><br />
X-FE-Last-Public-Client-IP: 45.154.138.168<br /><br />
X-FE-Policy-ID: 0:1:2:SYSTEM<br /><br />
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; d=bcel.com.la; s=bcel; c=relaxed/relaxed;<br /><br />
h=from:subject:to:content-type:mime-version:reply-to:date:message-id;<br /><br />
bh=wzdlEzNTTCRFgA/s2J1AedxOHGkLwZ6h8vPTbXRx0Ys=;<br /><br />
b=uojRPI4YmREh2h1skyjpJT6XqPZ5+2i0cw2YWlh2K+L+gTlSn0C122EsYbovXkXr2wMpBNVlbg2g<br /><br />
NQgwWruyhPJzMJL5d+76vpSvQfGMoym7kYDphkMkGE1SLQha6j1TKdNEOClJkLs8YtZwBp1rInaI<br /><br />
QvS5WKyEXxjREt5jUx9e5E+T0syozFKS35vSs8unA2llXzxteENS6RwGaRHlrtNaRlfM4wQsIhUt<br /><br />
M+AyW+7FWy925+FEQlmyrtrqz6lF1ugHJV9znWaLXE5HqY5ljWvTvr1benBJHHhedFVNuZ0sE7R5<br /><br />
UUyLGLf4+QTgb5W2p/5NmbQ0+xwcjmPaboKuYg==<br /><br />
X-Spam_score: 15.8<br /><br />
X-Spam_score_int: 158<br /><br />
X-Spam_bar: +++++++++++++++<br /><br />
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",<br /><br />
has identified this incoming email as possible spam. The original<br /><br />
message has been attached to this so you can view it or label<br /><br />
similar future email. If you have any questions, see<br /><br />
@@CONTACT_ADDRESS@@ for details.<br /><br />
<br /><br />
Content preview: Dear Sir/Madam, I hope this message finds you well. We are<br /><br />
pleased to introduce a project funding opportunity for qualified individuals,<br /><br />
companies, and organizations seeking financial support for genuine and viable<br /><br />
projects. <br /><br />
<br /><br />
Content analysis details: (15.8 points, 5.0 required)<br /><br />
<br /><br />
pts rule name description<br /><br />
---- ---------------------- --------------------------------------------------<br /><br />
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org<br /><br />
[45.154.138.168 listed in will-spam-for-food.eu.org]<br /><br />
[45.154.138.168 listed in will-spam-for-food.eu.org]<br /><br />
[45.154.138.168 listed in will-spam-for-food.eu.org]<br /><br />
[45.154.138.168 listed in will-spam-for-food.eu.org]<br /><br />
[45.154.138.168 listed in will-spam-for-food.eu.org]<br /><br />
[45.154.138.168 listed in will-spam-for-food.eu.org]<br /><br />
[45.154.138.168 listed in will-spam-for-food.eu.org]<br /><br />
[45.154.138.168 listed in will-spam-for-food.eu.org]<br /><br />
[103.138.142.2 listed in will-spam-for-food.eu.org]<br /><br />
[103.138.142.2 listed in will-spam-for-food.eu.org]<br /><br />
[103.138.142.2 listed in will-spam-for-food.eu.org]<br /><br />
[103.138.142.2 listed in will-spam-for-food.eu.org]<br /><br />
[103.138.142.2 listed in will-spam-for-food.eu.org]<br /><br />
[103.138.142.2 listed in will-spam-for-food.eu.org]<br /><br />
[103.138.142.2 listed in will-spam-for-food.eu.org]<br /><br />
[103.138.142.2 listed in will-spam-for-food.eu.org]<br /><br />
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org<br /><br />
[103.138.142.2 listed in dnsbl.ahbl.org]<br /><br />
[103.138.142.2 listed in dnsbl.ahbl.org]<br /><br />
[103.138.142.2 listed in dnsbl.ahbl.org]<br /><br />
[103.138.142.2 listed in dnsbl.ahbl.org]<br /><br />
[45.154.138.168 listed in dnsbl.ahbl.org]<br /><br />
[45.154.138.168 listed in dnsbl.ahbl.org]<br /><br />
[45.154.138.168 listed in dnsbl.ahbl.org]<br /><br />
[45.154.138.168 listed in dnsbl.ahbl.org]<br /><br />
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org<br /><br />
[103.138.142.2 listed in dnsbl.ahbl.org]<br /><br />
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org<br /><br />
[103.138.142.2 listed in dnsbl.ahbl.org]<br /><br />
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org<br /><br />
[103.138.142.2 listed in dnsbl.ahbl.org]<br /><br />
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org<br /><br />
[103.138.142.2 listed in dnsbl.ahbl.org]<br /><br />
-0.0 SPF_PASS SPF: sender matches SPF record<br /><br />
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in<br /><br />
headers<br /><br />
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact<br /><br />
cert-sa@returnpath.net<br /><br />
[Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]<br /><br />
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact<br /><br />
safe-sa@returnpath.net<br /><br />
[Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]<br /><br />
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist<br /><br />
[URI: bcel.com.la]<br /><br />
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist<br /><br />
[URI: bcel.com.la]<br /><br />
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit<br /><br />
[ahmedwalid0(at)hotmail.com]<br /><br />
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'<br /><br />
2.5 MILLION_USD BODY: Talks about millions of dollars<br /><br />
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)<br /><br />
[103.138.142.2 listed in wl.mailspike.net]<br /><br />
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,<br /><br />
https://senderscore.org/blacklistlookup/<br /><br />
[103.138.142.2 listed in bl.score.senderscore.com]<br /><br />
0.0 HTML_MESSAGE BODY: HTML included in message<br /><br />
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge<br /><br />
0.0 LOTS_OF_MONEY Huge... sums of money<br /><br />
0.0 NO_RDNS2 Sending MTA has no reverse DNS<br /><br />
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid<br /><br />
2.0 MIXED_HREF_CASE Has href in mixed case<br /><br />
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From<br /><br />
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS<br /><br />
0.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?<br /><br />
Subject: {SPAM?} Project Funding and Investment Opportunities<br /><br />
<br /><br />
This is a multi-part message in MIME format<br /><br />
<br /><br />
--lgEo=_rT1XGyklXeNd5Gv5SjxY2xXLdK6h<br /><br />
Content-Type: text/plain; charset="iso-8859-1"<br /><br />
Content-Transfer-Encoding: quoted-printable<br /><br />
<br /><br />
<br /><br />
Dear Sir/Madam,<br /><br />
<br /><br />
I hope this message finds you well.<br /><br />
<br /><br />
We are pleased to introduce a project funding opportunity for qualifie=<br /><br />
d individuals, companies, and organizations seeking financial support =<br /><br />
for genuine and viable projects.<br /><br />
<br /><br />
I am an international financial broker working with Premium34 Global Y=<br /><br />
atirim Companies. Through our network of funding partners and investor=<br /><br />
s, we facilitate access to project financing and capital ranging from =<br /><br />
USD 1 million to USD 100 million, subject to project assessment, due d=<br /><br />
iligence, and applicable terms and conditions.<br /><br />
<br /><br />
The proposed financing may include:<br /><br />
<br /><br />
<strong> Funding from USD 1 million up to USD 100 million<br /><br />
</strong> Competitive fixed annual interest rates, potentially as low as 2%, d=<br /><br />
epending on the project and financing structure<br /><br />
<strong> Flexible financing structures tailored to eligible projects<br /><br />
</strong> Grace periods of approximately 10 years and 12 months, where applica=<br /><br />
ble<br /><br />
<strong> Financing consideration for infrastructure, real estate, energy, man=<br /><br />
ufacturing, agriculture, technology, and other legitimate business pro=<br /><br />
jects<br /><br />
</strong> Professional review and assessment of the project proposal and suppo=<br /><br />
rting documentation<br /><br />
<br /><br />
Interested applicants are invited to provide a brief overview of their=<br /><br />
project, including the required funding amount, project location, bus=<br /><br />
iness plan, proposed use of funds, and relevant financial information.=<br /><br />
All applications are subject to verification, due diligence, investor=<br /><br />
approval, and the applicable financing requirements.<br /><br />
<br /><br />
If you are seeking reliable funding for a genuine and commercially via=<br /><br />
ble project, please contact us for further information regarding the a=<br /><br />
pplication process, eligibility requirements, documentation, and next =<br /><br />
steps.<br /><br />
<br /><br />
We look forward to hearing from you and exploring a potential financin=<br /><br />
g opportunity.<br /><br />
<br /><br />
Thank you for your time and consideration.<br /><br />
<br /><br />
Best regards,<br /><br />
<br /><br />
Walid Ahmed<br /><br />
International Financial Broker<br /><br />
Premium34 Global Yatirim Companies<br /><br />
Email:=20<br /><br />
<br /><br />
Ahmedwalid0@hotmail.com mailto:Ahmedwalid0@hotmail.com<br /><br />
<br /><br />
Tel/WhatsApp: +17862197362<br /><br />
<br /><br />
--lgEo=_rT1XGyklXeNd5Gv5SjxY2xXLdK6h<br /><br />
Content-Type: text/html; charset="iso-8859-1"<br /><br />
Content-Transfer-Encoding: quoted-printable<br /><br />
<br /><br />
<br /><br />
<html><head><br /><br />
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-=<br /><br />
8859-1"><br /><br />
<META name=3D"viewport" content=3D"width=3Ddevice-width, initial-sca=<br /><br />
le=3D1"> <META name=3D"format-detection" content=3D"telephone=3Dno"> <=<br /><br />
title>Project Funding and Investment Opportunities
=3Dleft>Dear Sir/Madam,
=3Dleft>I hope this message finds you well=
=2E
=3Dleft>The proposed financing may include=
:
=3Dleft>Interested applicants are invited =
to provide a brief overview of their project, including the required f=
unding amount, project location, business plan, proposed use of funds,=
and relevant financial information. All applications are subject to v=
erification, due diligence, investor approval, and the applicable fina=
ncing requirements.
--lgEo=_rT1XGyklXeNd5Gv5SjxY2xXLdK6h--
X-Mozilla-Status2: 00000000
Return-path: <2029283526@intime.cz>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Sep 2026 19:41:30 -0600
Received: from mail-ed1-f102.google.com ([209.85.208.102]:56778)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from <2029283526@intime.cz>)
id 1x86Xx-00000000GFM-3xXs
for dave@doctor.nl2k.ab.ca;
Sat, 19 Sep 2026 19:41:01 -0600
Received: by mail-ed1-f102.google.com with SMTP id 4fb4d7f45d1cf-6a051b737d8so426531a12.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=intime.cz; s=google; t=1789868396; x=1790473196; darn=doctor.nl2k.ab.ca;
h=message-id:date:mime-version:content-type:to:subject:from:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=89XtZuhjfivm4T4NuuYC2M0sYZaaaMD9PplD6cBpQXk=;
b=JknbBUnAcKJB4ukkOmUurrtxuURZztaPwutSmTf330wYVgPk/S29coFS7YU1vXJ7uB
eNTHBhcSHC7Co56keZ6Oh0gtu7UPcwdUXfJsJ1XZYcrYlIw8g61FzELg2tFSw1U/XtBK
nk20MipGsvGOTN9wub+4I0V4afgJZQmszgDJWCDTRDugwkhk9eAQQNgc1CS0EW+kRGsw
e5sA2d5IFpuAUQobYy/wXg1j9ONoadvk0m/zbCDbEsOxdrw8y/vVIsdOR5Gn6Bd3PZEY
EIUrvzZpZvVhxzBI6xG/VDbklu1EzbLbecSIgttYcyCDIJc2c7g6JCX4nla1TDQUS5ZZ
zjIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1789868396; x=1790473196;
h=message-id:date:mime-version:content-type:to:subject:from:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=89XtZuhjfivm4T4NuuYC2M0sYZaaaMD9PplD6cBpQXk=;
b=lMyrMPSb+Ch3y2dy9jXx8YZIbfZu7tNggqJfAqAb0pFl7/5U9jL5oZ2KrNTswM7bgX
PjwoQisCmIL1dCy4onKGCsOn2wqzQtnqODoziGd4D6Vrjwl5DVBIDus0aiDlEWEjZX0n
FsgBZh1AF6VocU90sACgP1PTYDBnEl7eYnxTBFy2WdR6s1C1mETI4IKPuLHQMEAa0OMg
IqL4Xv+Soag9/BajZqFxXQditJgBD4bsJAe8VJZHPvJiNZwdj8eehuSoRfqjxtdkj1Jn
OPgfvnH1mMX//gl6MPq8b4sHiDRwBRRGy/ZolPYPGo73MaInx5Q1/r+6Qq8nmGvZ6554
JAIA==
X-Gm-Message-State: AFuF++kN/wCth8gj2Kkgk2u/sP1MseXwliT1ig9AY0oMYCjMYedWC0j5
6zQ5C3G/6vGEzQTz9Iw0G/UXrbdS2mOiU3qjbRK6QN24KFCyafh3BnUT9YTFfWJ1FhZJkZ1u5i/
+GpCiINhyMvIHWEqM6Aj6pcChyPU4GqlHXalSl6KSwNW4ynY=
X-Gm-Gg: AYBFou0nu0MwWoxmzXwr8g+cF6aymWnC7fE1/aYQqaUEQoivWeoRlrQ4D7ydI/vkHPv
DIyBJgs2dUEbyGTZdc1/uT1QW5EQjdA4IqIcfvMOVMVf2yiQPEn5uwBTS0MXNcbp+RwDfcH50Gm
spsaqD+lzSzocZMpDFvBUgsVzhjuZSGYc12KAlKDHpmDcKm6HShz68/XfALuGkVWsbcFMhkuQci
13xPkMZ+D/HDvy4th5ejlz6GQaC6osoBuxmui4po2ossaHrW9I1KOxTS7BjZfEsvob/t6nZltg6
Cii74VpfI5jtNXW0Di/MDHqrcNheGAcFk7XjONz/SGE3QH/y1W7LHUd7AzYsmMgkOJ6owRY0I0v
E+EUoVimPbGCL
X-Received: by 2002:a05:6402:42d3:b0:6a3:fdb0:c374 with SMTP id 4fb4d7f45d1cf-6aa531254d4mr4617325a12.13.1789868395573;
Sat, 19 Sep 2026 18:39:55 -0700 (PDT)
Received: from WIN-3V1QAPPLHFQ ([156.146.61.24])
by smtp-relay.gmail.com with ESMTPS id 4fb4d7f45d1cf-6aa67e6402esm1885340a12.10.2026.09.19.18.39.55
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Sat, 19 Sep 2026 18:39:55 -0700 (PDT)
X-Relaying-Domain: intime.cz
From: "doctor.nl2k.ab.ca Security Team" <2029283526@intime.cz>
Subject: Your dave@doctor.nl2k.ab.ca Password Has Expired 9/19/2026
To:
Content-Type: multipart/related; type="multipart/alternative"; boundary="XldARmASP2JwWs14CZm=_Yb1bGATTy2jvA"
MIME-Version: 1.0
Date: Sat, 19 Sep 2026 18:39:55 -0700
Message-Id: <202619091839558B1D5E5BE2-25261FAF13@intime.cz>
X-Spam_score: 7.5
X-Spam_score_int: 75
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear dave,, Your dave@doctor.nl2k.ab.ca https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.nl2k.ab.ca
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[156.146.61.24 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
[209.85.208.102 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
[209.85.208.102 listed in dnsbl.ahbl.org]
[209.85.208.102 listed in dnsbl.ahbl.org]
[209.85.208.102 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
[156.146.61.24 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.102 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: edgeone.dev]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.102 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: edgeone.dev]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.102 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.208.102 listed in bl.score.senderscore.com]
1.5 MR_STRANGE_QUESTION URI: No description available.
0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
[URI: ns3.dnsv2.com/163.177.5.55]
[URI: ns3.dnsv2.com/117.135.128.155]
[URI: ns3.dnsv2.com/220.196.136.55]
[URI: ns3.dnsv2.com/125.94.59.155]
[URI: ns4.dnsv2.com/101.227.168.55]
Subject: {SPAM?} Your dave@doctor.nl2k.ab.ca Password Has Expired 9/19/2026
This is a multi-part message in MIME format
--XldARmASP2JwWs14CZm=_Yb1bGATTy2jvA
Content-Type: multipart/alternative;
boundary="z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo"
--z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Dear dave,,
Your=20
dave@doctor.nl2k.ab.ca https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@=
doctor.nl2k.ab.ca
password is valid until=20
9/19/2026 https://fuzzy-tan-h6iahs7m.edgeone.dev/?/#dave@doctor.nl2k.a=
b.ca
, Please Kindly use this to associate the following to keep the same p=
assword.
Continue ?
Sincerely,
doctor.nl2k.ab.ca Security=20
Team.
--z0MuNPkloI2eDCiR=_bqNwj9Rbtdot0nQo
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
8859-1">
=3Dleft>Dear Sir/Madam,
=3Dleft>I hope this message finds you well=
=2E
We are pleas=
ed to introduce a project funding opportunity for qualified individual=
s, companies, and organizations seeking financial support for genuine =
and viable projects.
rial>I am an international financial broker working with Premium34 Glo=
bal Yatirim Companies. Through our network of funding partners and inv=
estors, we facilitate access to project financing and capital ranging =
from USD 1 million to USD 100 million, subject to project assessment, =
due diligence, and applicable terms and conditions.
=3Dleft>The proposed financing may include=
:
Funding from=
USD 1 million up to USD 100 million
Competitive fixed annual int=
erest rates, potentially as low as 2%, depending on the project and fi=
nancing structure
Flexible financing structures tailored to eligi=
ble projects
Grace periods of approximately 10 years and 12 month=
s, where applicable
Financing consideration for infrastructure, r=
eal estate, energy, manufacturing, agriculture, technology, and other =
legitimate business projects
Professional review and assessment o=
f the project proposal and supporting documentation
=3Dleft>Interested applicants are invited =
to provide a brief overview of their project, including the required f=
unding amount, project location, business plan, proposed use of funds,=
and relevant financial information. All applications are subject to v=
erification, due diligence, investor approval, and the applicable fina=
ncing requirements.
ial>If you are seeking reliable funding for a genuine and commercially=
viable project, please contact us for further information regarding t=
he application process, eligibility requirements, documentation, and n=
ext steps.
We lo=
ok forward to hearing from you and exploring a potential financing opp=
ortunity.
Thank =
you for your time and consideration.
ize=3D3 face=3DArial>Best regards,
e=3D3 face=3DArial>Walid Ahmed
International Financial Broker
Pr=
emium34 Global Yatirim Companies
Email:
d0@hotmail.com">Ahmedwalid0@hotmail.com
Tel/WhatsApp: +17862197=
362
--lgEo=_rT1XGyklXeNd5Gv5SjxY2xXLdK6h--
